#config-version=FGT50E-6.2.16-FW-build1392-240129:opmode=0:vdom=0:user=admin
#conf_file_ver=183635621750531
#buildno=1392
#global_vdom=1
config system global
    set admin-port 65080
    set admin-sport 65443
    set admin-ssh-port 65022
    set admin-telnet-port 65023
    set alias "FGT50E5618039913"
    set hostname "FGT-Zestafoni"
    set switch-controller enable
    set timezone 42
end
config system accprofile
    edit "prof_admin"
        set secfabgrp read-write
        set ftviewgrp read-write
        set authgrp read-write
        set sysgrp read-write
        set netgrp read-write
        set loggrp read-write
        set fwgrp read-write
        set vpngrp read-write
        set utmgrp read-write
        set wifi read-write
    next
end
config system interface
    edit "wan1"
        set vdom "root"
        set ip 213.131.45.50 255.255.255.252
        set allowaccess ping https ssh http
        set type physical
        set role wan
        set snmp-index 1
    next
    edit "wan2"
        set vdom "root"
        set mode dhcp
        set allowaccess ping fgfm
        set type physical
        set role wan
        set snmp-index 2
    next
    edit "modem"
        set vdom "root"
        set mode pppoe
        set type physical
        set snmp-index 3
    next
    edit "ssl.root"
        set vdom "root"
        set type tunnel
        set alias "SSL VPN interface"
        set snmp-index 4
    next
    edit "lan1"
        set vdom "root"
        set type physical
        set snmp-index 7
    next
    edit "lan2"
        set vdom "root"
        set type physical
        set snmp-index 6
    next
    edit "lan"
        set vdom "root"
        set ip 192.168.1.99 255.255.255.0
        set allowaccess ping https ssh http fabric
        set type hard-switch
        set stp enable
        set role lan
        set snmp-index 5
    next
    edit "Users-10.10.3"
        set vdom "root"
        set ip 10.10.3.254 255.255.255.0
        set allowaccess ping https http
        set device-identification enable
        set role lan
        set snmp-index 8
        set interface "lan1"
        set vlanid 10
    next
    edit "VPN_HO"
        set vdom "root"
        set type tunnel
        set snmp-index 9
        set interface "wan1"
    next
    edit "Banks-10.20.3"
        set vdom "root"
        set ip 10.20.3.254 255.255.255.0
        set allowaccess ping
        set device-identification enable
        set role lan
        set snmp-index 10
        set interface "lan1"
        set vlanid 20
    next
    edit "Guests"
        set vdom "root"
        set ip 10.30.3.254 255.255.255.0
        set allowaccess ping
        set alias "10.30.3.0/24"
        set device-identification enable
        set role lan
        set snmp-index 11
        set interface "lan1"
        set vlanid 30
    next
end
config system physical-switch
    edit "sw0"
        set age-val 0
    next
end
config system virtual-switch
    edit "lan"
        set physical-switch "sw0"
        config port
            edit "lan3"
            next
            edit "lan4"
            next
            edit "lan5"
            next
        end
    next
end
config system custom-language
    edit "en"
        set filename "en"
    next
    edit "fr"
        set filename "fr"
    next
    edit "sp"
        set filename "sp"
    next
    edit "pg"
        set filename "pg"
    next
    edit "x-sjis"
        set filename "x-sjis"
    next
    edit "big5"
        set filename "big5"
    next
    edit "GB2312"
        set filename "GB2312"
    next
    edit "euc-kr"
        set filename "euc-kr"
    next
end
config system admin
    edit "admin"
        set accprofile "super_admin"
        set vdom "root"
        config gui-dashboard
            edit 2
                set name "Status"
                set vdom "root"
                set permanent enable
                config widget
                    edit 1
                        set width 1
                        set height 1
                    next
                    edit 6
                        set type cpu-usage
                        set x-pos 1
                        set width 2
                        set height 1
                    next
                    edit 7
                        set type memory-usage
                        set x-pos 4
                        set width 2
                        set height 1
                    next
                    edit 8
                        set type sessions
                        set x-pos 5
                        set width 2
                        set height 1
                    next
                end
            next
            edit 3
                set name "Top Usage LAN/DMZ"
                set vdom "root"
                set layout-type fixed
                set columns 12
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "source"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 2
                        set type fortiview
                        set x-pos 6
                        set width 6
                        set height 3
                        set fortiview-type "destination"
                        set fortiview-sort-by "sessions"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 3
                        set type fortiview
                        set y-pos 3
                        set width 6
                        set height 3
                        set fortiview-type "application"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 4
                        set type fortiview
                        set x-pos 6
                        set y-pos 3
                        set width 6
                        set height 3
                        set fortiview-type "website"
                        set fortiview-sort-by "sessions"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 4
                set name "Security"
                set vdom "root"
                set layout-type fixed
                set columns 12
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "compromisedHosts"
                        set fortiview-sort-by "verdict"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 2
                        set type fortiview
                        set x-pos 6
                        set width 6
                        set height 3
                        set fortiview-type "threats"
                        set fortiview-sort-by "threatLevel"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 3
                        set type fortiview
                        set y-pos 3
                        set width 6
                        set height 3
                        set fortiview-type "endpointDevices"
                        set fortiview-sort-by "vulnerabilities"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 5
                set name "System Events"
                set vdom "root"
                set layout-type fixed
                set columns 12
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "systemEvents"
                        set fortiview-sort-by "count"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 2
                        set type fortiview
                        set x-pos 6
                        set width 6
                        set height 3
                        set fortiview-type "systemEvents"
                        set fortiview-sort-by "eventLevel"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
        end
        set gui-vdom-menu-favorites "firewallpolicy" "interface" "vpn_tunnels" "addresses" "route_static" "vip" "device_definition" "dashboard_2"
        set password ENC SH2aiImBVnZqw9DLbp2f30IUIUij6mQtIMhf1+kvf4/usu1zAoXKk79BUL9K7A=
    next
end
config system sso-admin
end
config system ha
    set override disable
end
config system dns
    set primary 208.91.112.53
    set secondary 208.91.112.52
end
config system replacemsg-image
    edit "logo_fnet"
        set image-type gif
    next
    edit "logo_fguard_wf"
        set image-type gif
    next
    edit "logo_fw_auth"
    next
    edit "logo_v2_fnet"
    next
    edit "logo_v2_fguard_wf"
    next
    edit "logo_v2_fguard_app"
    next
end
config system replacemsg mail "email-av-fail"
end
config system replacemsg mail "email-block"
end
config system replacemsg mail "email-dlp-subject"
end
config system replacemsg mail "email-dlp-ban"
end
config system replacemsg mail "email-filesize"
end
config system replacemsg mail "email-file-filter"
end
config system replacemsg mail "partial"
end
config system replacemsg mail "smtp-block"
end
config system replacemsg mail "smtp-filesize"
end
config system replacemsg mail "email-decompress-limit"
end
config system replacemsg mail "smtp-decompress-limit"
end
config system replacemsg http "bannedword"
end
config system replacemsg http "url-block"
end
config system replacemsg http "urlfilter-err"
end
config system replacemsg http "infcache-block"
end
config system replacemsg http "http-block"
end
config system replacemsg http "http-filesize"
end
config system replacemsg http "http-dlp-ban"
end
config system replacemsg http "http-archive-block"
end
config system replacemsg http "http-contenttypeblock"
end
config system replacemsg http "https-invalid-cert-block"
end
config system replacemsg http "https-untrusted-cert-block"
end
config system replacemsg http "https-blacklisted-cert-block"
end
config system replacemsg http "http-client-block"
end
config system replacemsg http "http-client-filesize"
end
config system replacemsg http "http-client-bannedword"
end
config system replacemsg http "http-post-block"
end
config system replacemsg http "http-client-archive-block"
end
config system replacemsg http "switching-protocols-block"
end
config system replacemsg webproxy "deny"
end
config system replacemsg webproxy "user-limit"
end
config system replacemsg webproxy "auth-challenge"
end
config system replacemsg webproxy "auth-login-fail"
end
config system replacemsg webproxy "auth-group-info-fail"
end
config system replacemsg webproxy "http-err"
end
config system replacemsg webproxy "auth-ip-blackout"
end
config system replacemsg ftp "ftp-av-fail"
end
config system replacemsg ftp "ftp-dl-blocked"
end
config system replacemsg ftp "ftp-dl-filesize"
end
config system replacemsg ftp "ftp-dl-dlp-ban"
end
config system replacemsg ftp "ftp-explicit-banner"
end
config system replacemsg ftp "ftp-dl-archive-block"
end
config system replacemsg ftp "ftp-file-filter-block"
end
config system replacemsg nntp "nntp-av-fail"
end
config system replacemsg nntp "nntp-dl-blocked"
end
config system replacemsg nntp "nntp-dl-filesize"
end
config system replacemsg nntp "nntp-dlp-subject"
end
config system replacemsg nntp "nntp-dlp-ban"
end
config system replacemsg nntp "email-decompress-limit"
end
config system replacemsg fortiguard-wf "ftgd-block"
end
config system replacemsg fortiguard-wf "http-err"
end
config system replacemsg fortiguard-wf "ftgd-ovrd"
end
config system replacemsg fortiguard-wf "ftgd-quota"
end
config system replacemsg fortiguard-wf "ftgd-warning"
end
config system replacemsg spam "ipblocklist"
end
config system replacemsg spam "smtp-spam-dnsbl"
end
config system replacemsg spam "smtp-spam-feip"
end
config system replacemsg spam "smtp-spam-helo"
end
config system replacemsg spam "smtp-spam-emailblack"
end
config system replacemsg spam "smtp-spam-mimeheader"
end
config system replacemsg spam "reversedns"
end
config system replacemsg spam "smtp-spam-bannedword"
end
config system replacemsg spam "smtp-spam-ase"
end
config system replacemsg spam "submit"
end
config system replacemsg alertmail "alertmail-virus"
end
config system replacemsg alertmail "alertmail-block"
end
config system replacemsg alertmail "alertmail-nids-event"
end
config system replacemsg alertmail "alertmail-crit-event"
end
config system replacemsg alertmail "alertmail-disk-full"
end
config system replacemsg admin "pre_admin-disclaimer-text"
end
config system replacemsg admin "post_admin-disclaimer-text"
end
config system replacemsg auth "auth-disclaimer-page-1"
end
config system replacemsg auth "auth-disclaimer-page-2"
end
config system replacemsg auth "auth-disclaimer-page-3"
end
config system replacemsg auth "auth-reject-page"
end
config system replacemsg auth "auth-login-page"
end
config system replacemsg auth "auth-login-failed-page"
end
config system replacemsg auth "auth-token-login-page"
end
config system replacemsg auth "auth-token-login-failed-page"
end
config system replacemsg auth "auth-success-msg"
end
config system replacemsg auth "auth-challenge-page"
end
config system replacemsg auth "auth-keepalive-page"
end
config system replacemsg auth "auth-portal-page"
end
config system replacemsg auth "auth-password-page"
end
config system replacemsg auth "auth-fortitoken-page"
end
config system replacemsg auth "auth-next-fortitoken-page"
end
config system replacemsg auth "auth-email-token-page"
end
config system replacemsg auth "auth-sms-token-page"
end
config system replacemsg auth "auth-email-harvesting-page"
end
config system replacemsg auth "auth-email-failed-page"
end
config system replacemsg auth "auth-cert-passwd-page"
end
config system replacemsg auth "auth-guest-print-page"
end
config system replacemsg auth "auth-guest-email-page"
end
config system replacemsg auth "auth-success-page"
end
config system replacemsg auth "auth-block-notification-page"
end
config system replacemsg auth "auth-quarantine-page"
end
config system replacemsg auth "auth-qtn-reject-page"
end
config system replacemsg auth "auth-saml-page"
end
config system replacemsg sslvpn "sslvpn-login"
end
config system replacemsg sslvpn "sslvpn-header"
end
config system replacemsg sslvpn "sslvpn-limit"
end
config system replacemsg sslvpn "hostcheck-error"
end
config system replacemsg device-detection-portal "device-detection-failure"
end
config system replacemsg nac-quar "nac-quar-virus"
end
config system replacemsg nac-quar "nac-quar-dos"
end
config system replacemsg nac-quar "nac-quar-ips"
end
config system replacemsg nac-quar "nac-quar-dlp"
end
config system replacemsg nac-quar "nac-quar-admin"
end
config system replacemsg nac-quar "nac-quar-app"
end
config system replacemsg traffic-quota "per-ip-shaper-block"
end
config system replacemsg utm "virus-html"
end
config system replacemsg utm "client-virus-html"
end
config system replacemsg utm "virus-text"
end
config system replacemsg utm "dlp-html"
end
config system replacemsg utm "dlp-text"
end
config system replacemsg utm "appblk-html"
end
config system replacemsg utm "ipsblk-html"
end
config system replacemsg utm "ipsfail-html"
end
config system replacemsg utm "exe-text"
end
config system replacemsg utm "waf-html"
end
config system replacemsg utm "outbreak-prevention-html"
end
config system replacemsg utm "outbreak-prevention-text"
end
config system replacemsg utm "file-filter-text"
end
config system replacemsg utm "file-size-text"
end
config system replacemsg utm "internal-error-text"
end
config system replacemsg icap "icap-req-resp"
end
config system snmp sysinfo
end
config system autoupdate schedule
    set status disable
end
config system central-management
    set type fortiguard
end
config firewall internet-service-definition
end
config system cluster-sync
end
config system fortiguard
    set protocol udp
    set antispam-cache disable
    set webfilter-cache disable
    set sdns-server-ip "208.91.112.220" 
end
config ips global
end
config system email-server
    set server "notification.fortinet.net"
    set port 465
    set security smtps
end
config system session-helper
    edit 1
        set name pptp
        set protocol 6
        set port 1723
    next
    edit 2
        set name h323
        set protocol 6
        set port 1720
    next
    edit 3
        set name ras
        set protocol 17
        set port 1719
    next
    edit 4
        set name tns
        set protocol 6
        set port 1521
    next
    edit 5
        set name tftp
        set protocol 17
        set port 69
    next
    edit 6
        set name rtsp
        set protocol 6
        set port 554
    next
    edit 7
        set name rtsp
        set protocol 6
        set port 7070
    next
    edit 8
        set name rtsp
        set protocol 6
        set port 8554
    next
    edit 9
        set name ftp
        set protocol 6
        set port 21
    next
    edit 10
        set name mms
        set protocol 6
        set port 1863
    next
    edit 11
        set name pmap
        set protocol 6
        set port 111
    next
    edit 12
        set name pmap
        set protocol 17
        set port 111
    next
    edit 13
        set name sip
        set protocol 17
        set port 5060
    next
    edit 14
        set name dns-udp
        set protocol 17
        set port 53
    next
    edit 15
        set name rsh
        set protocol 6
        set port 514
    next
    edit 16
        set name rsh
        set protocol 6
        set port 512
    next
    edit 17
        set name dcerpc
        set protocol 6
        set port 135
    next
    edit 18
        set name dcerpc
        set protocol 17
        set port 135
    next
    edit 19
        set name mgcp
        set protocol 17
        set port 2427
    next
    edit 20
        set name mgcp
        set protocol 17
        set port 2727
    next
end
config system auto-install
    set auto-install-config enable
    set auto-install-image enable
end
config system ntp
    set ntpsync enable
end
config system object-tagging
    edit "default"
    next
end
config switch-controller traffic-policy
    edit "quarantine"
        set description "Rate control for quarantined traffic"
        set guaranteed-bandwidth 163840
        set guaranteed-burst 8192
        set maximum-burst 163840
        set cos-queue 0
        set id 1
    next
    edit "sniffer"
        set description "Rate control for sniffer mirrored traffic"
        set guaranteed-bandwidth 50000
        set guaranteed-burst 8192
        set maximum-burst 163840
        set cos-queue 0
        set id 2
    next
end
config system settings
    set gui-dynamic-routing enable
    set gui-threat-weight disable
    set gui-application-control disable
    set gui-endpoint-control disable
    set gui-wireless-controller disable
    set gui-switch-controller disable
    set gui-traffic-shaping disable
    set gui-wan-load-balancing disable
    set gui-antivirus disable
    set gui-webfilter disable
    set gui-dnsfilter disable
    set gui-fortiextender-controller disable
end
config system dhcp server
    edit 1
        set default-gateway 10.10.3.254
        set netmask 255.255.255.0
        set interface "Users-10.10.3"
        config ip-range
            edit 1
                set start-ip 10.10.3.1
                set end-ip 10.10.3.239
            next
        end
        set dns-server1 10.0.200.100
        set dns-server2 10.0.200.190
    next
    edit 2
        set dns-service default
        set default-gateway 10.20.3.254
        set netmask 255.255.255.0
        set interface "Banks-10.20.3"
        config ip-range
            edit 1
                set start-ip 10.20.3.1
                set end-ip 10.20.3.253
            next
        end
    next
    edit 3
        set lease-time 6048
        set dns-service default
        set default-gateway 10.30.3.254
        set netmask 255.255.255.0
        set interface "Guests"
        config ip-range
            edit 1
                set start-ip 10.30.3.1
                set end-ip 10.30.3.253
            next
        end
    next
end
config firewall address
    edit "FABRIC_DEVICE"
        set uuid e73c2a56-0f23-51f0-82db-5c87deeee402
        set comment "IPv4 addresses of Fabric Devices."
    next
    edit "none"
        set uuid 51a591e2-2ede-51ef-b96d-9b628c987a17
        set subnet 0.0.0.0 255.255.255.255
    next
    edit "__upg_autoupdate.opera.com"
        set uuid 51a5a4f2-2ede-51ef-e791-72d96bddd90f
        set type fqdn
        set fqdn "autoupdate.opera.com"
    next
    edit "__upg_google-play"
        set uuid 51a5b6ae-2ede-51ef-9b16-074755cd085e
        set type fqdn
        set fqdn "play.google.com"
    next
    edit "__upg_swscan.apple.com"
        set uuid 51a5c554-2ede-51ef-2ea3-d60b516afce8
        set type fqdn
        set fqdn "swscan.apple.com"
    next
    edit "__upg_update.microsoft.com"
        set uuid 51a5d36e-2ede-51ef-fccd-a694b471ba45
        set type fqdn
        set fqdn "update.microsoft.com"
    next
    edit "all"
        set uuid 5278b2e8-2ede-51ef-393d-70de0a42b734
    next
    edit "FIREWALL_AUTH_PORTAL_ADDRESS"
        set uuid 5278b9be-2ede-51ef-2c54-8d7854925224
        set visibility disable
    next
    edit "SSLVPN_TUNNEL_ADDR1"
        set uuid 527afb34-2ede-51ef-541b-026db3af8418
        set type iprange
        set associated-interface "ssl.root"
        set start-ip 10.212.134.200
        set end-ip 10.212.134.210
    next
    edit "login.microsoftonline.com"
        set uuid fec929d0-0f23-51f0-5a5e-ad00cce8ac20
        set type fqdn
        set fqdn "login.microsoftonline.com"
    next
    edit "login.microsoft.com"
        set uuid fec933b2-0f23-51f0-271f-408646e9f972
        set type fqdn
        set fqdn "login.microsoft.com"
    next
    edit "login.windows.net"
        set uuid fec93c68-0f23-51f0-cca5-e532c866220c
        set type fqdn
        set fqdn "login.windows.net"
    next
    edit "gmail.com"
        set uuid fec94500-0f23-51f0-5cb3-708f2c113150
        set type fqdn
        set fqdn "gmail.com"
    next
    edit "wildcard.google.com"
        set uuid fec94f1e-0f23-51f0-830a-8dd2c4ad6541
        set type fqdn
        set fqdn "*.google.com"
    next
    edit "wildcard.dropbox.com"
        set uuid fec95c34-0f23-51f0-0b27-76d085c85c12
        set type fqdn
        set fqdn "*.dropbox.com"
    next
    edit "10.10.3.0/24"
        set uuid f92a4dd6-0f25-51f0-36c5-3474186b212e
        set allow-routing enable
        set subnet 10.10.3.0 255.255.255.0
    next
    edit "VPN_HO_remote_subnet_1"
        set uuid f932710a-0f25-51f0-4635-b22494849984
        set allow-routing enable
    next
    edit "VPN_HO_remote_gateway"
        set uuid f954e9f6-0f25-51f0-7325-c8622a6056b1
        set comment "VPN: VPN_HO (Created by VPN wizard)"
        set allow-routing enable
        set subnet 213.131.47.178 255.255.255.255
    next
    edit "Georgia"
        set uuid cf7511ae-0f27-51f0-e5dd-ce65ce1c20f1
        set type geography
        set country "GE"
    next
    edit "Banks-10.20.3 address"
        set uuid 41de6a2e-0f2d-51f0-8658-46e0128f1d51
        set type interface-subnet
        set subnet 10.20.3.254 255.255.255.0
        set interface "Banks-10.20.3"
    next
    edit "10.20.3.0/24"
        set uuid 40579f7c-0f32-51f0-e4ee-a19bcafd73c0
        set allow-routing enable
        set subnet 10.20.3.0 255.255.255.0
    next
    edit "10.30.3.0/24"
        set uuid 5a3c21f6-0f32-51f0-91b3-34d97386fdec
        set allow-routing enable
        set subnet 10.30.3.0 255.255.255.0
    next
end
config firewall multicast-address
    edit "all"
        set start-ip 224.0.0.0
        set end-ip 239.255.255.255
    next
    edit "all_hosts"
        set start-ip 224.0.0.1
        set end-ip 224.0.0.1
    next
    edit "all_routers"
        set start-ip 224.0.0.2
        set end-ip 224.0.0.2
    next
    edit "Bonjour"
        set start-ip 224.0.0.251
        set end-ip 224.0.0.251
    next
    edit "EIGRP"
        set start-ip 224.0.0.10
        set end-ip 224.0.0.10
    next
    edit "OSPF"
        set start-ip 224.0.0.5
        set end-ip 224.0.0.6
    next
end
config firewall address6
    edit "SSLVPN_TUNNEL_IPv6_ADDR1"
        set uuid 527b0bb0-2ede-51ef-736a-814fc446ea0e
        set ip6 fdff:ffff::/120
    next
    edit "all"
        set uuid 59fde2d6-2ede-51ef-a9bc-3b06ef872840
    next
    edit "none"
        set uuid 59fe087e-2ede-51ef-48fc-d48ec0c4bc25
        set ip6 ::/128
    next
end
config firewall multicast-address6
    edit "all"
        set ip6 ff00::/8
    next
end
config firewall addrgrp
    edit "Microsoft Office 365"
        set uuid fec96756-0f23-51f0-111f-dd306f96710d
        set member "login.microsoftonline.com" "login.microsoft.com" "login.windows.net"
    next
    edit "G Suite"
        set uuid fec97714-0f23-51f0-dab9-b06f4e08d03a
        set member "gmail.com" "wildcard.google.com"
    next
    edit "VPN_HO_local"
        set uuid f92edff4-0f25-51f0-2d96-ecc2a095d5aa
        set member "10.10.3.0/24" "10.20.3.0/24" "10.30.3.0/24"
        set allow-routing enable
    next
    edit "VPN_HO_remote"
        set uuid f93701fc-0f25-51f0-da3d-f8a3a3dc65fb
        set member "VPN_HO_remote_subnet_1"
        set comment "VPN: VPN_HO (Created by VPN wizard)"
        set allow-routing enable
    next
end
config firewall wildcard-fqdn custom
    edit "google-play"
        set uuid e7c483e2-0f23-51f0-2ad7-8e3e0a7a7aee
        set wildcard-fqdn "*play.google.com"
    next
    edit "update.microsoft.com"
        set uuid e7c488d8-0f23-51f0-c15a-1ae263b89ee8
        set wildcard-fqdn "*update.microsoft.com"
    next
    edit "swscan.apple.com"
        set uuid e7c48da6-0f23-51f0-f25e-d7e72522cdc7
        set wildcard-fqdn "*swscan.apple.com"
    next
    edit "autoupdate.opera.com"
        set uuid e7c4926a-0f23-51f0-b91f-d064414cb308
        set wildcard-fqdn "*autoupdate.opera.com"
    next
    edit "adobe"
        set uuid 52a40fc4-2ede-51ef-df6c-2c69dbf80613
        set wildcard-fqdn "*.adobe.com"
    next
    edit "Adobe Login"
        set uuid 52a41654-2ede-51ef-03c2-15a0815d6059
        set wildcard-fqdn "*.adobelogin.com"
    next
    edit "android"
        set uuid 52a41b36-2ede-51ef-d447-a224b72a839b
        set wildcard-fqdn "*.android.com"
    next
    edit "apple"
        set uuid 52a41ff0-2ede-51ef-4194-90ad19fcabce
        set wildcard-fqdn "*.apple.com"
    next
    edit "appstore"
        set uuid 52a42496-2ede-51ef-5fa4-229fd2e78629
        set wildcard-fqdn "*.appstore.com"
    next
    edit "auth.gfx.ms"
        set uuid 52a42946-2ede-51ef-36ff-251085363280
        set wildcard-fqdn "*.auth.gfx.ms"
    next
    edit "citrix"
        set uuid 52a42f9a-2ede-51ef-5ab2-6452202def11
        set wildcard-fqdn "*.citrixonline.com"
    next
    edit "dropbox.com"
        set uuid 52a4347c-2ede-51ef-b546-2953f6a0b7e8
        set wildcard-fqdn "*.dropbox.com"
    next
    edit "eease"
        set uuid 52a4392c-2ede-51ef-1b3e-e157747a1eb5
        set wildcard-fqdn "*.eease.com"
    next
    edit "firefox update server"
        set uuid 52a43ddc-2ede-51ef-c304-542d1d4f53a6
        set wildcard-fqdn "aus*.mozilla.org"
    next
    edit "fortinet"
        set uuid 52a44296-2ede-51ef-c32a-23aa1ec695c6
        set wildcard-fqdn "*.fortinet.com"
    next
    edit "googleapis.com"
        set uuid 52a448f4-2ede-51ef-fba2-070ef08518a3
        set wildcard-fqdn "*.googleapis.com"
    next
    edit "google-drive"
        set uuid 52a44dd6-2ede-51ef-04d8-21cfda7bc41d
        set wildcard-fqdn "*drive.google.com"
    next
    edit "google-play2"
        set uuid 52a4527c-2ede-51ef-41a5-5510e72fb311
        set wildcard-fqdn "*.ggpht.com"
    next
    edit "google-play3"
        set uuid 52a4572c-2ede-51ef-9af0-4c518ef6c5d3
        set wildcard-fqdn "*.books.google.com"
    next
    edit "Gotomeeting"
        set uuid 52a45be6-2ede-51ef-a61b-b9d5cc327c6a
        set wildcard-fqdn "*.gotomeeting.com"
    next
    edit "icloud"
        set uuid 52a46762-2ede-51ef-eb66-0fb43e96d55f
        set wildcard-fqdn "*.icloud.com"
    next
    edit "itunes"
        set uuid 52a46e10-2ede-51ef-5d0a-522ab0826c1b
        set wildcard-fqdn "*itunes.apple.com"
    next
    edit "microsoft"
        set uuid 52a47306-2ede-51ef-6cfe-4186c1f2bf76
        set wildcard-fqdn "*.microsoft.com"
    next
    edit "skype"
        set uuid 52a477d4-2ede-51ef-bf6a-a23b7caff5dd
        set wildcard-fqdn "*.messenger.live.com"
    next
    edit "softwareupdate.vmware.com"
        set uuid 52a47c98-2ede-51ef-8785-473c13db8205
        set wildcard-fqdn "*.softwareupdate.vmware.com"
    next
    edit "verisign"
        set uuid 52a4815c-2ede-51ef-8187-9919399f96d4
        set wildcard-fqdn "*.verisign.com"
    next
    edit "Windows update 2"
        set uuid 52a48634-2ede-51ef-9114-0b07af69af52
        set wildcard-fqdn "*.windowsupdate.com"
    next
    edit "live.com"
        set uuid 52a48af8-2ede-51ef-52d5-99048e3a510f
        set wildcard-fqdn "*.live.com"
    next
end
config firewall service category
    edit "General"
        set comment "General services."
    next
    edit "Web Access"
        set comment "Web access."
    next
    edit "File Access"
        set comment "File access."
    next
    edit "Email"
        set comment "Email services."
    next
    edit "Network Services"
        set comment "Network services."
    next
    edit "Authentication"
        set comment "Authentication service."
    next
    edit "Remote Access"
        set comment "Remote access."
    next
    edit "Tunneling"
        set comment "Tunneling service."
    next
    edit "VoIP, Messaging & Other Applications"
        set comment "VoIP, messaging, and other applications."
    next
    edit "Web Proxy"
        set comment "Explicit web proxy."
    next
end
config firewall service custom
    edit "DNS"
        set category "Network Services"
        set tcp-portrange 53
        set udp-portrange 53
    next
    edit "HTTP"
        set category "Web Access"
        set tcp-portrange 80
    next
    edit "HTTPS"
        set category "Web Access"
        set tcp-portrange 443
    next
    edit "IMAP"
        set category "Email"
        set tcp-portrange 143
    next
    edit "IMAPS"
        set category "Email"
        set tcp-portrange 993
    next
    edit "LDAP"
        set category "Authentication"
        set tcp-portrange 389
    next
    edit "DCE-RPC"
        set category "Remote Access"
        set tcp-portrange 135
        set udp-portrange 135
    next
    edit "POP3"
        set category "Email"
        set tcp-portrange 110
    next
    edit "POP3S"
        set category "Email"
        set tcp-portrange 995
    next
    edit "SAMBA"
        set category "File Access"
        set tcp-portrange 139
    next
    edit "SMTP"
        set category "Email"
        set tcp-portrange 25
    next
    edit "SMTPS"
        set category "Email"
        set tcp-portrange 465
    next
    edit "KERBEROS"
        set category "Authentication"
        set tcp-portrange 88 464
        set udp-portrange 88 464
    next
    edit "LDAP_UDP"
        set category "Authentication"
        set udp-portrange 389
    next
    edit "SMB"
        set category "File Access"
        set tcp-portrange 445
    next
    edit "ALL"
        set category "General"
        set protocol IP
    next
    edit "ALL_TCP"
        set category "General"
        set tcp-portrange 1-65535
    next
    edit "ALL_UDP"
        set category "General"
        set udp-portrange 1-65535
    next
    edit "ALL_ICMP"
        set category "General"
        set protocol ICMP
        unset icmptype
    next
    edit "ALL_ICMP6"
        set category "General"
        set protocol ICMP6
        unset icmptype
    next
    edit "GRE"
        set category "Tunneling"
        set protocol IP
        set protocol-number 47
    next
    edit "AH"
        set category "Tunneling"
        set protocol IP
        set protocol-number 51
    next
    edit "ESP"
        set category "Tunneling"
        set protocol IP
        set protocol-number 50
    next
    edit "AOL"
        set visibility disable
        set tcp-portrange 5190-5194
    next
    edit "BGP"
        set category "Network Services"
        set tcp-portrange 179
    next
    edit "DHCP"
        set category "Network Services"
        set udp-portrange 67-68
    next
    edit "FINGER"
        set visibility disable
        set tcp-portrange 79
    next
    edit "FTP"
        set category "File Access"
        set tcp-portrange 21
    next
    edit "FTP_GET"
        set category "File Access"
        set tcp-portrange 21
    next
    edit "FTP_PUT"
        set category "File Access"
        set tcp-portrange 21
    next
    edit "GOPHER"
        set visibility disable
        set tcp-portrange 70
    next
    edit "H323"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 1720 1503
        set udp-portrange 1719
    next
    edit "IKE"
        set category "Tunneling"
        set udp-portrange 500 4500
    next
    edit "Internet-Locator-Service"
        set visibility disable
        set tcp-portrange 389
    next
    edit "IRC"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 6660-6669
    next
    edit "L2TP"
        set category "Tunneling"
        set tcp-portrange 1701
        set udp-portrange 1701
    next
    edit "NetMeeting"
        set visibility disable
        set tcp-portrange 1720
    next
    edit "NFS"
        set category "File Access"
        set tcp-portrange 111 2049
        set udp-portrange 111 2049
    next
    edit "NNTP"
        set visibility disable
        set tcp-portrange 119
    next
    edit "NTP"
        set category "Network Services"
        set tcp-portrange 123
        set udp-portrange 123
    next
    edit "OSPF"
        set category "Network Services"
        set protocol IP
        set protocol-number 89
    next
    edit "PC-Anywhere"
        set category "Remote Access"
        set tcp-portrange 5631
        set udp-portrange 5632
    next
    edit "PING"
        set category "Network Services"
        set protocol ICMP
        set icmptype 8
        unset icmpcode
    next
    edit "TIMESTAMP"
        set protocol ICMP
        set visibility disable
        set icmptype 13
        unset icmpcode
    next
    edit "INFO_REQUEST"
        set protocol ICMP
        set visibility disable
        set icmptype 15
        unset icmpcode
    next
    edit "INFO_ADDRESS"
        set protocol ICMP
        set visibility disable
        set icmptype 17
        unset icmpcode
    next
    edit "ONC-RPC"
        set category "Remote Access"
        set tcp-portrange 111
        set udp-portrange 111
    next
    edit "PPTP"
        set category "Tunneling"
        set tcp-portrange 1723
    next
    edit "QUAKE"
        set visibility disable
        set udp-portrange 26000 27000 27910 27960
    next
    edit "RAUDIO"
        set visibility disable
        set udp-portrange 7070
    next
    edit "REXEC"
        set visibility disable
        set tcp-portrange 512
    next
    edit "RIP"
        set category "Network Services"
        set udp-portrange 520
    next
    edit "RLOGIN"
        set visibility disable
        set tcp-portrange 513:512-1023
    next
    edit "RSH"
        set visibility disable
        set tcp-portrange 514:512-1023
    next
    edit "SCCP"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 2000
    next
    edit "SIP"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 5060
        set udp-portrange 5060
    next
    edit "SIP-MSNmessenger"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 1863
    next
    edit "SNMP"
        set category "Network Services"
        set tcp-portrange 161-162
        set udp-portrange 161-162
    next
    edit "SSH"
        set category "Remote Access"
        set tcp-portrange 22
    next
    edit "SYSLOG"
        set category "Network Services"
        set udp-portrange 514
    next
    edit "TALK"
        set visibility disable
        set udp-portrange 517-518
    next
    edit "TELNET"
        set category "Remote Access"
        set tcp-portrange 23
    next
    edit "TFTP"
        set category "File Access"
        set udp-portrange 69
    next
    edit "MGCP"
        set visibility disable
        set udp-portrange 2427 2727
    next
    edit "UUCP"
        set visibility disable
        set tcp-portrange 540
    next
    edit "VDOLIVE"
        set visibility disable
        set tcp-portrange 7000-7010
    next
    edit "WAIS"
        set visibility disable
        set tcp-portrange 210
    next
    edit "WINFRAME"
        set visibility disable
        set tcp-portrange 1494 2598
    next
    edit "X-WINDOWS"
        set category "Remote Access"
        set tcp-portrange 6000-6063
    next
    edit "PING6"
        set protocol ICMP6
        set visibility disable
        set icmptype 128
        unset icmpcode
    next
    edit "MS-SQL"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 1433 1434
    next
    edit "MYSQL"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 3306
    next
    edit "RDP"
        set category "Remote Access"
        set tcp-portrange 3389
    next
    edit "VNC"
        set category "Remote Access"
        set tcp-portrange 5900
    next
    edit "DHCP6"
        set category "Network Services"
        set udp-portrange 546 547
    next
    edit "SQUID"
        set category "Tunneling"
        set tcp-portrange 3128
    next
    edit "SOCKS"
        set category "Tunneling"
        set tcp-portrange 1080
        set udp-portrange 1080
    next
    edit "WINS"
        set category "Remote Access"
        set tcp-portrange 1512
        set udp-portrange 1512
    next
    edit "RADIUS"
        set category "Authentication"
        set udp-portrange 1812 1813
    next
    edit "RADIUS-OLD"
        set visibility disable
        set udp-portrange 1645 1646
    next
    edit "CVSPSERVER"
        set visibility disable
        set tcp-portrange 2401
        set udp-portrange 2401
    next
    edit "AFS3"
        set category "File Access"
        set tcp-portrange 7000-7009
        set udp-portrange 7000-7009
    next
    edit "TRACEROUTE"
        set category "Network Services"
        set udp-portrange 33434-33535
    next
    edit "RTSP"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 554 7070 8554
        set udp-portrange 554
    next
    edit "MMS"
        set visibility disable
        set tcp-portrange 1755
        set udp-portrange 1024-5000
    next
    edit "NONE"
        set visibility disable
        set tcp-portrange 0
    next
    edit "webproxy"
        set proxy enable
        set category "Web Proxy"
        set protocol ALL
        set tcp-portrange 0-65535:0-65535
    next
end
config firewall service group
    edit "Email Access"
        set member "DNS" "IMAP" "IMAPS" "POP3" "POP3S" "SMTP" "SMTPS"
    next
    edit "Web Access"
        set member "DNS" "HTTP" "HTTPS"
    next
    edit "Windows AD"
        set member "DCE-RPC" "DNS" "KERBEROS" "LDAP" "LDAP_UDP" "SAMBA" "SMB"
    next
    edit "Exchange Server"
        set member "DCE-RPC" "DNS" "HTTPS"
    next
end
config vpn certificate ca
end
config vpn certificate local
    edit "Fortinet_CA_SSL"
        set password ENC zLTIyRx9nLN0+bCCCMhWCSaMfmt3/PAvDXvFetexhw+jGXOUsahfCLhxz7OzYNLBsCy92IQxp93U6WOZgQgiOa4MOZR0UaQuiuTq/cP4kqHJMS7kUctIcidbcqjyoBPBfybURoepH5Vt8U/o3H9qMTxvoHDpa2tzdD2mdjIlTnSeAGQBxZM0qJGyp1l2uRi3RxTQ8w==
        set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIFHDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIeHv8htMqeqMCAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECGr08A1T2QEJBIIEyIejw/LzTCif
IFyHLr8BilpgVX2MzZdXLSMKtn+nCwwsjovWcz0oOJ+OHWs80tPq1rhex6XqoMIm
+1zZAC25LCL/PxnGvR0pLasfzovvHUglXoy3emO/6sD7Rir6lC3njjJOr/HsbKXP
22HqnQrwW5wCkKjbUzQHg1gOozT0a5T8Gv/gXZ5tzB77Q9JN3sneWvitOxs27lzX
chuFUOCexPW6vkgqmOQ+sdfTI34d5SsvnM9nQCzDIQcmQwnFbcsbXJLx/l2nWbl6
QIs/Q3T98RfOUSHVOm1vSBBX8ZoO0aV/DjtFzHcAx5mX/iy7Y3ynA6Vm7UnCNDjy
xYeH2hl3Uyd3hOyrwEhQmfv/9rsCNjypAjjpXgPFtH8RQKc64YpvGVpSZWJnWaJ9
MPsCXIxzaFXVa81Icv4F0xHXlW7K3pZnu2Nj/3+UPU3ELROZdQy2KYdq4NdAxVDZ
6UOno9ONcNDWFCbjNM1eM9fsxbsmWgTfls6/NDbRNhqLFo5Qk4d7JEcz5Lq09V56
a6+S9fscWPBZzwkRpu2w+/szkvoC/dXPemK7hvh1h0rCGtS9D8md/AUNAqAgezX1
B0mmiDuJInvkjN0QsGTUEDmYe2DnVJakzJz5qB+7XqRpdoOzOo8hzx1qBaQguKZH
YWCbSgYdDScLCbn6RDW+QnuxYEkpX+WeJQlu0Gm398QjQREtFukEoHDPD8ue17Zc
qNPe14w39JhoLIXjZJrkE79Dmgry6tPvQsyOjc80YivCcf1QVasYZe40lPkOWx8W
Qr3yZP1H7TNt8AsQDAoXvAAsKb6Kjt15JrP+cv3uFyQLQwdD0Wcvb5Aa6oqkCRkW
lMbiaCImI1OWqRhuoTU4XoBalK17dILkJW/j4gjGh9n8XHm2eHlrasmT13yFIBwZ
U/mVBpXyK+31XD0Y3TDU0q8QhfTs6IYUa3gBbUNeijBBykrLBk0+qUqBhIoICFdE
oyjUHI+KEfhpIBf6QnUNFMQ3QoPrN1bvvk2+1PlFGisRJUDYN8iVSiEkbIkX6a1b
L6NiI3nLyWwvg0qTJC9waMbp4dagwIftS0KZkAhX17OWwJdjvEYz7+thsOfpG84+
OcqqQQoghumnjssiqK/I4MxN5k+Bw/4/qWOEy2T9u3ieH4XzX7B6q1gWyyTpQhAR
ZmZVuHLG0Pfa2esv9OIF/JkMf0lcy2R8xw5HolP3o7sm+oUL0t2zxdIceduhjbg4
+Ai2f7jndhEZQQNJRFIUsO72DRsEbT/wRn61RVe9/Jv4co+Pd9Jc8GDB97Z05EZp
P0+W+duW6NfNTVMlTLBXNSh251wadAXF3Wvg2ElCiZ9eU0f0V0rQ8V+N/Ah7kDiV
fGn2g2WoB0+FosSC0R2Ly+RO7XIiI1F+2YeLMxJMK0++Zo6JEf8260IiC7eY8c6z
QpjhigwS0bNJuoDryBUXHb2QXwjl74HAdSB6zwuN1y7imYFCLyPy+0zu4M72kSOK
ZitTNgzeH0e/3AzyACye2j6WDGQtS6zEkPq5o9+AZQ6ZH+FuDTMfLUKjMZgmwgoK
om6laS71EnvsrkiMJjDevCv9RWBMGr15JRY864rHorFQdaasDkLoIDbWg44VzZ5y
euZj7m8b7WZy9PV+asVCVw==
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----
MIID4jCCAsqgAwIBAgIELCE62zANBgkqhkiG9w0BAQsFADCBqTELMAkGA1UEBhMC
VVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCVN1bm55dmFsZTERMA8G
A1UECgwIRm9ydGluZXQxHjAcBgNVBAsMFUNlcnRpZmljYXRlIEF1dGhvcml0eTEZ
MBcGA1UEAwwQRkdUNTBFM1UxNzA0NjQ2MTEjMCEGCSqGSIb3DQEJARYUc3VwcG9y
dEBmb3J0aW5ldC5jb20wHhcNMjUwNDIzMTQxOTUzWhcNMzUwNDI0MTQxOTUzWjCB
qTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCVN1
bm55dmFsZTERMA8GA1UECgwIRm9ydGluZXQxHjAcBgNVBAsMFUNlcnRpZmljYXRl
IEF1dGhvcml0eTEZMBcGA1UEAwwQRkdUNTBFM1UxNzA0NjQ2MTEjMCEGCSqGSIb3
DQEJARYUc3VwcG9ydEBmb3J0aW5ldC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCn+LXlwoYp3OSZekAq3kKkuqdUAie+W7WLyTwyL2QYb6HUZeCc
TbVY7hb6TumIBMORpPrDIB+anzbHvgyAdCeRRPYfmRW8jRHmPR3qzo4EEmB8+p5W
mHnfJ37U8djEt+psXebXTD1jk2bGyN5OHq5OueTxt4quNZZsHFtSB+9lO3HxmP0k
Cqr/QOc0yxYLL9Piw1y7/V89ZkQW8JwHQPGCfy00QgHBU8julb/CHTLN/v1w3I0M
RZUn4LPHvuv47YM/KxberEFBFrhymjRJI3vfITTmwF5VWLBxFcs71fI0SStz3e/6
FkFmDCfLhnxob55KDAvQm5Nh5qe8zojsbsn7AgMBAAGjEDAOMAwGA1UdEwQFMAMB
Af8wDQYJKoZIhvcNAQELBQADggEBAG08KEYW75bYD174uqTfOFpbLfnn0biTgJoK
rwpRAzsSkwPJiLTeUekPg068CNLgyEvKU0iEFqYQ4JwlYzras7e0ABtjktCOSuuJ
edvCZHRhkf2eJLhUXFjpzL8U6Uj7PKC4WEwR56HWNFCE8+FqrAaVaGgljwYTGOHk
iNEjQf0hGx0jGdx62KBDdoDbfQDKxwfRwCBvCmET8AXCOf/DwjHYXwRGrw8TQ42+
XJEciwx9W8C1xLDo362QYb+47nziYo94vvUSIpcyPvMM3XDXqpkyXnSSYq+tUNwA
NLKA1e5kASzv3e3FJ3CTekUkAbhjvZV8WRKe2NGydzGWTC9KsIc=
-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1718871785
    next
    edit "Fortinet_CA_Untrusted"
        set password ENC 8Wc9KMkHLduo4g6Onbujzt1/MUjm3/dN+LzffFkvkswVc3lGX15kGHDYpELopRI6mHfahHsplki4XtkmDc+Yfn4/CT+htxPe6Hh0zNeM/l6YQGL+MlR0jcdXl7YZfQBshto6C2hTpVUONP3zdwVF7pS9JeW5IKb1D/EtR5XiW5pHZaA5ioxA3QIhF6+czDfOEVAK+g==
        set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----
MIID7DCCAtSgAwIBAgIEAw6U8jANBgkqhkiG9w0BAQsFADCBrjELMAkGA1UEBhMC
VVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCVN1bm55dmFsZTERMA8G
A1UECgwIRm9ydGluZXQxHjAcBgNVBAsMFUNlcnRpZmljYXRlIEF1dGhvcml0eTEe
MBwGA1UEAwwVRm9ydGluZXQgVW50cnVzdGVkIENBMSMwIQYJKoZIhvcNAQkBFhRz
dXBwb3J0QGZvcnRpbmV0LmNvbTAeFw0yNDA2MjAwODIyNDJaFw0zNDA2MjEwODIy
NDJaMIGuMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UE
BwwJU3Vubnl2YWxlMREwDwYDVQQKDAhGb3J0aW5ldDEeMBwGA1UECwwVQ2VydGlm
aWNhdGUgQXV0aG9yaXR5MR4wHAYDVQQDDBVGb3J0aW5ldCBVbnRydXN0ZWQgQ0Ex
IzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQuY29tMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtsda+YdwcjjqlPZrYKS6b/h6YMdJ8+aCnIa
Qa2P7EjA1kBmpRne432DGGSYYr+Dw06+PBGopupncX6lYcWE6NruFi8aDZwH7nkt
TzQNrQe7hhmY7cR0ebADqwR5HsVNsuziOl8I7++nM0yQ8VjSHX1C86Pc7G/EfJ79
qAzdLoOLX6xuNT7L2ZzUVlJJr/6Eff0Mlx/+Ss25BG5zUj745gOF7/oanV9HoTN9
yDfKm3Ngng0OM5JE+RnSwAcG3KIQ7iDxLk9ClzLFLeJBqqsJJJBH/ttFH3rAL7Zy
USf4uMIoa313O5QMDpLLbCkLhwQcZBiGh5w89QZVrlqBuvVmdQIDAQABoxAwDjAM
BgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBWOLr0OxyAb5A0h/59dzsp
6RX+nNrfb/6Q3D5vV5JieHqIlVG3Wufed1E/+WBuakpLylIJWGLfUcFG1RM1UBUK
ZcTHatjYfdsiXmgBOfm2qdXH3bXL3piSwvaIWUOR8A+HwdZPmc/iyDOrbHV3XcOZ
6c05DPinwVANU/X1GcawZ4JcrKNPxk70Rnnt56GCqz/6T9aX8FYzINgmGEC8JlGF
cMb1mMScCMEBkkvYcEKih1OXK+wM4RREhBJsak9Wtn4Mn2D4dGj62S00lipF43A6
7cVPvyQqmB31BzHHnHNV3gm/73YrGElmlu9XRHl1eBb8QPm9sy4SvCbgLjqnMZ3/
-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1718871785
    next
    edit "Fortinet_SSL"
        set password ENC r5ZPL5NLVa0w5Bxff0BUHsfHArgpiYcrPLdLCvYyWbFAbxyBn4X/F5oHaV+1sERxJgmUj0kxnC45ADMeeirz6IaWDmQfHAXHp4+1daiSamJO3xMoJew4cjLhJ0VOZ1cI9gNqbJR65pMv9JPzlYprNXKMb2/QNhQwUz92381fet8fH3YkE/5gHcwo6mY/uBm7W0Lg3w==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1718871785
    next
    edit "Fortinet_SSL_RSA1024"
        set password ENC ivL1e1jWobSFMGpiSopkRDyl5PFqN1Q6LQHjUAiYyyvTRSILWFBaCCL1EqM4+B+HE2mt9Zy0bNFWNQTKrKP6C0cYEQO61Su9Zu0krl290LtV63YDHTfA9kSQ0IIt4wlzjgc0E0+D6q5snDIzUJt1DZQwlelkNomnVAHfrA14r+4z57u6jtLb4qu1/hQxuZwnwJBZBw==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIC1DBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQI+WgqwXD6QZwCAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECPtEAF4sDWSwBIICgNAPb4UiEZf2
3rATOBDJf/TiaTqjRmAcKnR80yiE4bILmia8cOH53X9ye9uRl1kwl3BGK9nRHoKP
i1+5VsWB9Y8VnVAXqbRomCKjcAc90lTHpZyqKnHGXk2DZvIiF1q4LyMX8IaN9TCa
ftTQhiN51OpQThcxJaGtAd7Sf1Iu5T/2pJN0/aj2kHI6Mglsp1a1AY/2tE7AUYSs
9uZST3bxHYBw0RLzAb4qPVlUnsZ8a1Vn/2e/HVlCMwnTxoEBviOSaf3QSPt4HKJK
/XZZDVASGlbApNbShHNfSXsPKIkYnQt9D1LLEttYAlwcjR8GbGzTuH67XUbXs345
yX9n0FRzJP7uTcZC0XvKPOLbdw56CUVe3S+HSXGXI2ItPArVsCx6o8k0Sm5inkAf
wiGrdRs+CEdbwwvsU6oNqZp780CUJhwM4hjFkReyxGf828s0wfk4n8/KzaBK6akb
K4OG5C7GI2o8fDPUCk0f+0wJVW7dSfzA53+AzhANwqGlf1rc6nHctLslkHfHzzXy
T5oeHWCW2HAbEVorv9JQTd6zR1jX1k/qpWujEw+ECUHCLvt4+UR3iLo9/OPU72Nk
EUsTBrHlKUpQcSLoFPkNDXG7G2t4N4adZe4O1GHAJ8BbjsoN+BfNOPVJO+VmmxUx
h6JfG7fmG29hLPoZAZkMX/OXgPgleIJYyqAzVMAELL8bwEUFpwzh2aXb09HEDQqh
4pJxHe/ECZ3BRR59kXwDqpF5txBoyWJJp7F9fuW1Z5oow4pKAhGduIWwpV9M6KGL
XwIP2qkPc7HvpPxGbJgugC0ucGx/rauy71VJ69XVN80kpQvZJx+MHDlVjv+tcpy7
fCpTQRlWchs=
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1718871785
    next
    edit "Fortinet_SSL_RSA2048"
        set password ENC 5DlEMN9u9BvyaIJhABjqPckAOw5lPr4qw7jcY5ep+n8Jr91WnU+3wjzf3ITaeQNaNZ7ONexhsD69VVqUI+ESZYye2MQAG76HfNWoyTKgFeYDgPP5DAP46yExbdupU8veQfpPHzHsQHGOcsQ0kNqZ8e6abeShAlf6NS+PZIU8cl5Fz5cn/8aknBWpkF3PKKfsiUwLxg==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1718871785
    next
    edit "Fortinet_SSL_RSA4096"
        set password ENC 7EcM+rRYWBkRaUM5yFR1Dc3h6DDg5AvKXiov5zhP9RdYSl/1UKOqBdEQ8CMCpG5A6eyHCP/MdN3AnwuA5s/U7zc8XOUwI06gLnfX4orSlhfPg7QOOAqnddqLJOXwY4H03wi7sd+a5jY+MorZAt/BouKZlQcGKCN81KKkiyCeiJzfEhYnqbEN+XjDD1Ayp0kl2AjwBA==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIJnDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIhQDmG413eC0CAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECIYLYsJhppFzBIIJSPpN8OJqfr8j
Y1S7FubHGHyYzJas2N2/fDzjWRZfAvLw6ANa70DJauViszzSRPHdo2Zth4Cqao+R
v72eudChud5OULUcmH96QEHxTiDmHBC3mtCLmU7ZWyKpUPr2Igp/60JzGL58zZGu
zK9AbB96B6nIf1vAhLRZ71TrlekxU9ZwwHY5H0SLwTXkKZn2lXLhi59OZk3urNeY
69vPEfkh8kkveu58eDF+JD14oTLKOqzvOeT4I9r0PgLBFz1nRTBDJad4GBOBneVN
bViFEoEXNhW0Fp8hyORSgBL32dHBO6VRD+LLn1RpmdoUyyNsZ17gb8+UZKoGjfTE
sLssZPQHogbFo1CXLWAZLZJPPQyo4hp6SrDz9m1T4ikTp6aj0DmS3utJr8tPJ3hC
FsScARNzaCRscgmjuCBIbkfMw0/yvP201t5osFvjjkWOfH18lGRASRuZAE57/z19
+VdLmuRia2DQP2dZZMT6h64lAFAYs4sXFgKTSZC2HpRHJNATWCrb1UgJnjUxN7X/
JDyGYpmCwSiejzjmaCJfiXwU+ouZxG8OrDMn9qFhra94MrTBcwGLRMaPRz/2W9cY
AyCaaQdVCLetY79h0v9fbe2XojxAb+Kap6GyEe2tvWqQSAmGaz6ErPqVlkLCDgr0
U6oyx7pZ70fJf5n4/NAEOw+t+2YYN7PVFgR0c6X9hkgS4Tw2hpDRik2Yc2nKc8JA
PxlGiAghAhnwdGrLV6Ns8HB6o/3xbTDx+Zo0RurjD4+6IhGKIDuu4ydvrPZEpAbq
CFHpiHwYKqnH70YweaMfnWlb23L3iBLk5JM5dQCnyt4tSB35CCjN3DIPYh9kklGY
A2RC0/fZNCjWlju/AidywjoRd4kn9M6b/ooYpWO0O10I1K6l3dNsdX2rD5Pxl6my
pflypFJTtxYuHveIxKzLRyJwt/ydARrV5YDITz4ftZHTpfElBqVYyhIsY1EW9UYh
xvZ3fLziAasaz5bRZMjAi7dtYqwFczpypF1vXbkHRQt5zo6OVLaPkVoT2YqruTSc
fuUFxbJ3Jw49dIswdwdVgXyjCAt9G2Rb+7Drn4ldrGva59WQoX1r8qZMR3GzUzVG
4BqjcpLqYB7xM3kqoCcvz+FctV0FL8b8CpRoh05W6aTkHjGufSYOQVUsDCHluli3
6Dl67AJ06iAPFXILNXd9KosWpBmNjPfS+udNPJPx9odEZ5/qrkalLGiuPQvFjDD8
w2sVPuDGSgoYvQZ7qXYb09On5mWtz8aRKM5c+7BdWlR2I8/gM5mr3v6PufQJQ2OR
HIeOnSpI2uHZZ3tyFA2DkzyrB4mcw5iHmcQo5Ng3UZgknLjzDRGDfYEolG5m55jr
DBQ+dGJvAJIuMljtrAt4eZnV5AO7ExBOE/SdxuCaBzhOfbzi7nJpMSQmysy18ssu
qrCe1yGVRQnEqO5EuRlIWrlEKu5sVCgedrw3FO2WeywXz6GhZ2U5vy3F4eMyM5Fn
zi7ikViJk7EExuZGzLlUFFeS60Pa4AobKgKLb8Sq491OesUcwEKVmDf38MSROoJ/
kRAphTnuJd/eREPS/2Y9JGxjr3ZtsW+mNScqKMDs1q5njoZ1cE1JOS8ko9Jd4bSl
XN1kLuIqeqb1X8Qky8o3TQxvkfbS8NjDxYvadh9Tb0HqtuHIMiX7nvZurXXXGXwU
9ESiXYIo/GOV6v9w+ds3wMshHMxJEj+a8lONeDEynGBhxorDO9rfJObrKxjmvGhD
ibfHWEi8d/VBaT9l3EJBU+WEjaKvpUYm+DPx4p51cgbi+KheMv7J5KHU5k3ty3m5
f5PKYFzi5tIyGuUiUcQXyhX6Rox47QTLSvcw7IiR1Kgx27dhlvNzlVi7e7Q0fs0R
rJuMbwjMUDlDqF0srqZx16r5ynYnC1GAV57Xv+8tA6lGFOk7752Xjx/Rmo966CCy
LcLm6FhgNWz11yZEgMMZa14Uwfh3GDAWFYl0Xm8fK+ItCazokHWXxFG0A8h83jBW
SHWaOFfl8+cpPIKuKj9KRjfkX/OdQAd5tSUiRamKREkEW/BydfJSUf+jdLnm4GUn
toyA511+mkA3GB1EkCP3hnf5I0GERrjWJbhHWv4utJIRozC436rVuLr/o8Q0VuuU
vfVc/gq1S8xxb2kGVxKZ71+YB+JGoczaokzA9tDZx+n6bZiS2VPgfVensaACLD2e
Gw2ZlvlR73vCVWIKdAhVZaNkLjCzIrHLqAPKKlTOUXDm5a2BrItItZltkBppZaEv
8vqdQrABJE8pQ8+RcEW/Lq3I1ecV5SeMjRvx7ynOJXKwcahcJ5Do04HN4eWcJar0
MTGlPQ95/Vej9+xuA2kZYDxisf9yy1ES+AtbHTPPHLMj+JN833qbmJBSfpZTmXhQ
r9Mvq/wpcusON473Fmv8E294vRIdzQ7Kc/N0DkTlPhEjlLUgEGA7EucbeAr56PjG
ZhAps23R7kRfCHgbv0Jddmo+nUy9nnsTLGheIXF9TM6Y+L31T4fT+a1aDl0iKQsB
TcSG9kC8bl93v4pg8RYR1PyqXGXTlXKWofel4nycP/zOb2c4VDPEx0lCiK2sSzzt
GOt823Af0Z2z9i5iXcKUJzCvedkjCHOZR/q9/XEG/3IL6E+VNnNzYvl4KyCexz8c
r8YJsyBie/zaDkI6adU6b57f0PaPXgRz9rDEdIZ/VXnr/vNKcVrUnUH4aw9dtUfT
bmOSxhAJS6SmfLSqgB4Lxe9aUrAAXvoSQMyVkkhwfGEMquqDmXgsvOWuJ+2ELGtO
zkZyO69Uvj+XQt8x9F5Zfbr4/dhYxK/elMlgET1H3i1+/dbftV14WGX9G+NkcCS3
EGkz7xBsNZnA/gZJwTTfEJmIqKuOZOvPpwxl3TMOWVPriYO9yWcSE694yV9Ge4+k
pAU8g/aBnPpXuc65wzGIf8hnvCTtG6qXIuVjkkLAJBWgp9YowSTQiNEn6nKJYQDD
AEvDF0TpOPn3/DQjXMMV384QN0v2spHKQj0EAI7XJFvDCEqQ3EONiUoseZo31Unl
tG9xCCBnaP4zYWCH1IxWazWbjC1hY6hni7IVypvldb86xRqNywBk09T3VMFTJbWw
9H0XFaHtOxX3TdB61/jQklzuU0f3Q4ktzM/CwR99S5FxiBcJtg4Xyc15Me6ysPM5
1Aw0Mo2IZQx9iF7FZIUP/Q==
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1743530732
    next
    edit "Fortinet_SSL_DSA1024"
        set password ENC gQFIaVHzxROs7Xgyu5pfYB5FL07uIjMPUR0OpQsUQN8dwROMVby4KB7I8GNpDNeIBiTbH0Ic58kh9h33qsvG65bZTDM+l5NXpuUGIH3vazi0dEekbqLPFyJcPr3liVI5ZEY1DshY8oetF+pp3Gu3ko6xRDO8LQQWrl6EGQkiLTq52C/MPnVlph7vwlce1eF4Vjcnbg==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1718871785
    next
    edit "Fortinet_SSL_DSA2048"
        set password ENC SjwvKYOLLFjp3bS8ywRWDjPXVmkwqqKahFFTh5xn0T1CITRCn0pjE9A32N6N5eIAKKCIpiG+4O/WqrUlIu7m+rrAHsO0BiLSmrKkMuBrhvzm5663NXPSXuTO90LYv91f7SGHbRhklyMQttGb+ehgm1xn82vGVSM8QxFCL8W6SqD6SwxiZZ5247Z3Sr9bdZerxm+KSg==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIICxDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIjmqpUaMLDDkCAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECAjrBruOBaEIBIICcF7pDSdB+Ar0
Oyq8wda0iA01uLBbTjQolfhRQpdXPtiXvJ0i4n+T0DJQCjT4o0fNYMZugxFnwtif
w51tb7JncDdph4KadhR2/8s9BamkLwcLV5BGn1eZLPIPmPUMlAu6+J6Trs7nmz4/
0XORSDE/jhD4T781HOWzVE2rrvdQQfvtYMgx7BJtVukhadseUrAyGWbyFczmu0hs
tav0sLH34k2+OXFQskdhA5FEWxT5LNRYm9zaR9lo7vliDlqi5ReQAQeOIFv4SztQ
wKDnNLXlpYhDbsaluv3M9+aoQAcAZiJ8Xyx/GnifJ4GOr30eJ1XCCYtJ6D3i74w7
stSAI+o+hOHYHydVkyH9Lbk8cW4p4CKST53txgNRHtDwX/ioLXJF5beRQFn9qARO
FA+8V3F5Pq9CXEBvLYanBrZhObeKA4oIlTp8sIZS8dB5U3+Qo6RQ5wpoSGghtp43
BcEek42W4GfjDJEX7gRDa3aAsKDc/4f92/2Vm4CQBxIkkH51jnHguvO+lphAf4bk
LCzBRb9EpfZyy3RSWG+XbAO0Rmx/bFCNsW/Y4g5J7mTTXw3oVsp1n+aM5B3/Rhfz
9A5+rKwD9D8syQxEReaYXyFruDnaNxoD9wBcOKkBDPV95qIcxU9d/5HArBLxA2DR
k2+mEoExl4APdi/eSGRz3NVN99gudXDFoUPO8nz81u0C41BCLvPkxDSWz2I7wBTZ
ba06flQiYNTqsa4Zf0Me9Sh/D08WevZ8qzwEi1Bm6OFWU4d32MPslY+gSCSf3f+3
2aEMF41ICePN/hoU217SumARj6rbvE943EULmdV8mkei5octRmGbqA==
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1718871785
    next
    edit "Fortinet_SSL_ECDSA256"
        set password ENC 1VjJInUhorqNnUpFRAT0TNBpgo8X+S26okrD8Gp6zlmbvkNQksycJkXU6FasM7dJnqs3xLClzLRLS9c/hNjwcmbRqYrjjG/ttieG2n104f6RtW5bkH4zpHyZXNCdpq2Gw43y5Am8VsVDBq1lyKOEzZohamoGDNwU8qz6wXL2naykf3gq/vPLGakxc/Hq7owVOeT48w==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIHjME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAiU4oS7vJ4sOQICCAAw
DAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIFCjQDs+UspcEgZBTLQ9mLAXpocHc
AkLxoiHZkNhs/NeMsymjjv0rmEoCdzR8FOuU0Irg3zxLYh4HpRCQTSLEJVHq9/S8
kk8ODv+73nM0oBNCu48mXQfRzDaPlgaSlFJu7YXxYj8DGdoyFPKWpAIbjUykvu8B
WvuQnZjuAbpJlqcyM0Rs4U3m2rin+HnzNRIBzM/9Nu2fcK6MSh4=
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1718871785
    next
    edit "Fortinet_SSL_ECDSA384"
        set password ENC 27y/yqSpnUBtwBc2nFhuMImkiD7c7J5u/aRtudwbPfMkNeNxnL/iMcVBRy6Rd4ZlnwnOFaiilsfH7ToGeLx2G2/VNvnwGCW+5hQa7YmXeweCPXCCGm+eLI0rNBje2A06yK2Kll0l+W6CU7YN7rK0mCbQhdM0BzbxwBet9JxElck17u+RmUGv5SV4gS7v32R6N8sQWw==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIBEzBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIhoLvjN7SKGUCAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECCbpL7Mc8ZqDBIHAHCzNVlpD4yNC
JMW6K/6yr65FMG7+F4vEhNNk2fA6SiAp1mP8157/3NaImuJ1kvIbVyfdnK6kRcCW
p+22Yj7jLWL40Syo48Q1nCJhO2LO3B5gX16dpaYwDexrCcRjx8mXybShKdyirUMO
Q7gerQxvhoHmF5Ee2vIhxcd3k8dOqzjJIIcQ7nPfICpn0Y9OeI7/CI8f8VpyhKvk
njOpjE9Qje1mIO7L5dIxmK8GbhLRMR1vTT/NxMLIgW23Zmqihaju
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----
MIICjTCCAhOgAwIBAgIEV1O84jAKBggqhkjOPQQDAjCBnTELMAkGA1UEBhMCVVMx
EzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCVN1bm55dmFsZTERMA8GA1UE
CgwIRm9ydGluZXQxEjAQBgNVBAsMCUZvcnRpR2F0ZTEZMBcGA1UEAwwQRkdUNTBF
M1UxNzA0NjQ2MTEjMCEGCSqGSIb3DQEJARYUc3VwcG9ydEBmb3J0aW5ldC5jb20w
HhcNMjUwNDIzMTQxMjI2WhcNMjcwNzI3MTQxMjI2WjCBnTELMAkGA1UEBhMCVVMx
EzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCVN1bm55dmFsZTERMA8GA1UE
CgwIRm9ydGluZXQxEjAQBgNVBAsMCUZvcnRpR2F0ZTEZMBcGA1UEAwwQRkdUNTBF
M1UxNzA0NjQ2MTEjMCEGCSqGSIb3DQEJARYUc3VwcG9ydEBmb3J0aW5ldC5jb20w
djAQBgcqhkjOPQIBBgUrgQQAIgNiAAQds89LbXNiqMozU/dd38/q1Q311623xOMz
kyG5CrSq3tZcsjdZur+jx4VzkghU93BPKxklk2NKCC1Ph+Sja3y+ZImbh2ZxO6ej
OImRqp5DDEJ/Z6TxLGRHCEpLW1ORYxejIjAgMAkGA1UdEwQCMAAwEwYDVR0lBAww
CgYIKwYBBQUHAwEwCgYIKoZIzj0EAwIDaAAwZQIwYYDprwqlcENkga2W+92ky3HD
sBlT8qONVMOYqs5lR5gM7d2ug4c0LvSXRz6vP1CqAjEAta8dNhznxDWD6wPGhKdM
e0lnxZxZJyNNuPWYme1lO7uyjC++owsUvtByd+RyDFD9
-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1718871785
    next
    edit "Fortinet_SSL_ECDSA521"
        set password ENC c7o3m4sw8clQ7C0rpr0kpqeWXCuQu2r9H1nArwzWwIfYepNW5T9Cnmu6CGSRmzeG+eqznXCZvINTr8cL8rb0MLVPXZwPJcXDspFyepDh5eZyCvTGiVzyzHWo3s62olDSIOvBdL4IXk7l9/WJq0bw0ZlwxsKZl6cXVipQoEyILucMaqdyNkOZiFnve+w8oilKqI6QFw==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIBSzBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQISI3/77J4qFwCAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECOgvHboMx3EDBIH4mHZ3SAtEfIAM
Cq32pfNDjHWf5ZxKmB9kWb9aU69aX+aflL0d2rf6aF/YziUcPvF6NP2OQP7xvldd
Em2KmFVqrBPg+NDYb69F0RywwvIs8mdEb2xuQpGBCaifHtLWmmSJU7GDIKhu3rFG
4fFVar+032jTxdAsKUzRc0Oze6T32D0s7F5fP7koNA4uQJk8ScTnWVMfAZ9f1o8o
mFtwAvtNOKx0jiHVUe38vFqchT2fFmGQo8t7f4f8V+fgOcAmX7lnOBn7LJqId8xi
8G+5GcfID9+/JTQWXyl7UeazY17LT40edq5UpSxB6dbMqIQb46A3wX751cBO6Ko=
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1743530732
    next
    edit "Fortinet_SSL_ED25519"
        set password ENC nVfIAn8IEYJTVu7U4Jk5QTYzpbZN/P1QVbIZAgrN6DwAr3R8A4jVvoYfJSnyBws69720uwOjEpLSd5KaoBZsN9stSIPAVQFJ8GKoFEpXNHKbCoNcm/ccoT6tGhoCja8Bdlw9hSAieonOY5Wd7KBsyUFW2AbC9SmgYZB6BLnDDYiD85SZRpnqXoVm5a8iPqxpEtw2eg==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIGKME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAifFoR5VRnh3QICCAAw
DAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIhhUJg7Eit3sEOIR4G3ROoNqxQbaA
hPXZgq//YyrJlLRpXXdFn3hZ49zbiogkuUSnhftCkU+xVO5Ml4JxQJY1Y7Hn
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1743530732
    next
    edit "Fortinet_SSL_ED448"
        set password ENC MAVk8wLQE6YjX1CMRxV35JsamV+4BNAxPlgcpZZAO5g4ZNWVyTGy9hrb0VTegMldS59XDRSiYwHNDH3SmGwOoPodUwIinl6OC4cEdzuW+Se/RDef4CNjLGvpDlRCEHDthrkLxIyo/46MPFBdFYnyKhMgoLLS6ZSQwCnLVQBY0KAf358Xm+PkGd72n7OJlBPFYRQoiw==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIGiME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAgL0a0jU172AgICCAAw
DAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIgY4V58wJjYoEUPp6NN4S2iAVjGNh
wgDHGlSy5JCoavVNATatfS3/TQrZbZQZ6uSGyC75KCU2n2Ut83Oo7vWNbCdo8sCw
D8lGF/9BlNQmigQf3KShIMutvLDT
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1743530732
    next
end
config webfilter ftgd-local-cat
    edit "custom1"
        set id 140
    next
    edit "custom2"
        set id 141
    next
end
config ips sensor
    edit "default"
        set comment "Prevent critical attacks."
        config entries
            edit 1
                set severity medium high critical 
            next
        end
    next
    edit "sniffer-profile"
        set comment "Monitor IPS attacks."
        config entries
            edit 1
                set severity medium high critical 
            next
        end
    next
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        config entries
            edit 1
                set severity medium high critical 
            next
        end
    next
    edit "all_default"
        set comment "All predefined signatures with default setting."
        config entries
            edit 1
            next
        end
    next
    edit "all_default_pass"
        set comment "All predefined signatures with PASS action."
        config entries
            edit 1
                set action pass
            next
        end
    next
    edit "protect_http_server"
        set comment "Protect against HTTP server-side vulnerabilities."
        config entries
            edit 1
                set location server 
                set protocol HTTP 
            next
        end
    next
    edit "protect_email_server"
        set comment "Protect against email server-side vulnerabilities."
        config entries
            edit 1
                set location server 
                set protocol SMTP POP3 IMAP 
            next
        end
    next
    edit "protect_client"
        set comment "Protect against client-side vulnerabilities."
        config entries
            edit 1
                set location client 
            next
        end
    next
    edit "high_security"
        set comment "Blocks all Critical/High/Medium and some Low severity vulnerabilities"
        config entries
            edit 1
                set severity medium high critical 
                set status enable
                set action block
            next
            edit 2
                set severity low 
            next
        end
    next
end
config firewall shaper traffic-shaper
    edit "high-priority"
        set maximum-bandwidth 1048576
        set per-policy enable
    next
    edit "medium-priority"
        set maximum-bandwidth 1048576
        set priority medium
        set per-policy enable
    next
    edit "low-priority"
        set maximum-bandwidth 1048576
        set priority low
        set per-policy enable
    next
    edit "guarantee-100kbps"
        set guaranteed-bandwidth 100
        set maximum-bandwidth 1048576
        set per-policy enable
    next
    edit "shared-1M-pipe"
        set maximum-bandwidth 1024
    next
end
config web-proxy global
    set proxy-fqdn "default.fqdn"
end
config application list
    edit "default"
        set comment "Monitor all applications."
        config entries
            edit 1
                set action pass
            next
        end
    next
    edit "sniffer-profile"
        set comment "Monitor all applications."
        unset options
        config entries
            edit 1
                set action pass
            next
        end
    next
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        set deep-app-inspection disable
        config entries
            edit 1
                set category 2 3 5 6 7 8 12 15 17 21 22 23 25 26 28 30 31
                set action pass
                set log disable
            next
        end
    next
    edit "block-high-risk"
        config entries
            edit 1
                set category 2 6
            next
            edit 2
                set action pass
            next
        end
    next
end
config dlp filepattern
    edit 1
        set name "builtin-patterns"
        config entries
            edit "*.bat"
            next
            edit "*.com"
            next
            edit "*.dll"
            next
            edit "*.doc"
            next
            edit "*.exe"
            next
            edit "*.gz"
            next
            edit "*.hta"
            next
            edit "*.ppt"
            next
            edit "*.rar"
            next
            edit "*.scr"
            next
            edit "*.tar"
            next
            edit "*.tgz"
            next
            edit "*.vb?"
            next
            edit "*.wps"
            next
            edit "*.xl?"
            next
            edit "*.zip"
            next
            edit "*.pif"
            next
            edit "*.cpl"
            next
        end
    next
    edit 2
        set name "all_executables"
        config entries
            edit "bat"
                set filter-type type
                set file-type bat
            next
            edit "exe"
                set filter-type type
                set file-type exe
            next
            edit "elf"
                set filter-type type
                set file-type elf
            next
            edit "hta"
                set filter-type type
                set file-type hta
            next
        end
    next
end
config dlp sensitivity
    edit "Private"
    next
    edit "Critical"
    next
    edit "Warning"
    next
end
config dlp sensor
    edit "default"
        set comment "Default sensor."
    next
    edit "sniffer-profile"
        set comment "Log a summary of email and web traffic."
        set summary-proto smtp pop3 imap http-get http-post
    next
    edit "Content_Summary"
        set summary-proto smtp pop3 imap http-get http-post ftp nntp mapi
    next
    edit "Content_Archive"
        set summary-proto smtp pop3 imap http-get http-post ftp nntp mapi
    next
    edit "Large-File"
        config filter
            edit 1
                set name "Large-File-Filter"
                set proto smtp pop3 imap http-get http-post mapi
                set filter-by file-size
                set file-size 5120
                set action log-only
            next
        end
    next
    edit "Credit-Card"
        config filter
            edit 1
                set name "Credit-Card-Filter"
                set severity high
                set proto smtp pop3 imap http-get http-post mapi
                set action log-only
            next
            edit 2
                set name "Credit-Card-Filter"
                set severity high
                set type message
                set proto smtp pop3 imap http-post mapi
                set action log-only
            next
        end
    next
    edit "SSN-Sensor"
        set comment "Match SSN numbers but NOT WebEx invite emails."
        config filter
            edit 1
                set name "SSN-Sensor-Filter"
                set severity high
                set type message
                set proto smtp pop3 imap mapi
                set filter-by regexp
                set regexp "WebEx"
            next
            edit 2
                set name "SSN-Sensor-Filter"
                set severity high
                set type message
                set proto smtp pop3 imap mapi
                set filter-by ssn
                set action log-only
            next
            edit 3
                set name "SSN-Sensor-Filter"
                set severity high
                set proto smtp pop3 imap http-get http-post ftp mapi
                set filter-by ssn
                set action log-only
            next
        end
    next
end
config webfilter ips-urlfilter-setting
end
config webfilter ips-urlfilter-setting6
end
config log threat-weight
    config web
        edit 1
            set category 26
            set level high
        next
        edit 2
            set category 61
            set level high
        next
        edit 3
            set category 86
            set level high
        next
        edit 4
            set category 1
            set level medium
        next
        edit 5
            set category 3
            set level medium
        next
        edit 6
            set category 4
            set level medium
        next
        edit 7
            set category 5
            set level medium
        next
        edit 8
            set category 6
            set level medium
        next
        edit 9
            set category 12
            set level medium
        next
        edit 10
            set category 59
            set level medium
        next
        edit 11
            set category 62
            set level medium
        next
        edit 12
            set category 83
            set level medium
        next
        edit 13
            set category 72
        next
        edit 14
            set category 14
        next
    end
    config application
        edit 1
            set category 2
        next
        edit 2
            set category 6
            set level medium
        next
    end
end
config icap profile
    edit "default"
    next
end
config user local
    edit "guest"
        set type password
        set passwd ENC Wj9S+UTIQsaHN1fZCL8MFj+v5Zg05PaI0SlN5lIqEAXD8guxaKDjMigK6s+juRE+TDAkdnB42efC+3og9XNEWV8JR4hoe64g8qzLCh0VZ+/62g8P0Ttw3dCmShsAIIZ2d5SLmBebV4IWgy1pUHRJlot/cIbczgS02/FIpPcgJhk4VvFG2A4IeXOt/LgxApF3Hwtm2A==
    next
end
config user setting
    set auth-cert "Fortinet_Factory"
end
config user group
    edit "SSO_Guest_Users"
    next
    edit "Guest-group"
        set member "guest"
    next
end
config vpn ssl web host-check-software
    edit "FortiClient-AV"
        set guid "1A0271D5-3D4F-46DB-0C2C-AB37BA90D9F7"
    next
    edit "FortiClient-FW"
        set type fw
        set guid "528CB157-D384-4593-AAAA-E42DFF111CED"
    next
    edit "FortiClient-AV-Vista"
        set guid "385618A6-2256-708E-3FB9-7E98B93F91F9"
    next
    edit "FortiClient-FW-Vista"
        set type fw
        set guid "006D9983-6839-71D6-14E6-D7AD47ECD682"
    next
    edit "FortiClient-AV-Win7"
        set guid "71629DC5-BE6F-CCD3-C5A5-014980643264"
    next
    edit "AVG-Internet-Security-AV"
        set guid "17DDD097-36FF-435F-9E1B-52D74245D6BF"
    next
    edit "AVG-Internet-Security-FW"
        set type fw
        set guid "8DECF618-9569-4340-B34A-D78D28969B66"
    next
    edit "AVG-Internet-Security-AV-Vista-Win7"
        set guid "0C939084-9E57-CBDB-EA61-0B0C7F62AF82"
    next
    edit "AVG-Internet-Security-FW-Vista-Win7"
        set type fw
        set guid "34A811A1-D438-CA83-C13E-A23981B1E8F9"
    next
    edit "CA-Anti-Virus"
        set guid "17CFD1EA-56CF-40B5-A06B-BD3A27397C93"
    next
    edit "CA-Internet-Security-AV"
        set guid "6B98D35F-BB76-41C0-876B-A50645ED099A"
    next
    edit "CA-Internet-Security-FW"
        set type fw
        set guid "38102F93-1B6E-4922-90E1-A35D8DC6DAA3"
    next
    edit "CA-Internet-Security-AV-Vista-Win7"
        set guid "3EED0195-0A4B-4EF3-CC4F-4F401BDC245F"
    next
    edit "CA-Internet-Security-FW-Vista-Win7"
        set type fw
        set guid "06D680B0-4024-4FAB-E710-E675E50F6324"
    next
    edit "CA-Personal-Firewall"
        set type fw
        set guid "14CB4B80-8E52-45EA-905E-67C1267B4160"
    next
    edit "F-Secure-Internet-Security-AV"
        set guid "E7512ED5-4245-4B4D-AF3A-382D3F313F15"
    next
    edit "F-Secure-Internet-Security-FW"
        set type fw
        set guid "D4747503-0346-49EB-9262-997542F79BF4"
    next
    edit "F-Secure-Internet-Security-AV-Vista-Win7"
        set guid "15414183-282E-D62C-CA37-EF24860A2F17"
    next
    edit "F-Secure-Internet-Security-FW-Vista-Win7"
        set type fw
        set guid "2D7AC0A6-6241-D774-E168-461178D9686C"
    next
    edit "Kaspersky-AV"
        set guid "2C4D4BC6-0793-4956-A9F9-E252435469C0"
    next
    edit "Kaspersky-FW"
        set type fw
        set guid "2C4D4BC6-0793-4956-A9F9-E252435469C0"
    next
    edit "Kaspersky-AV-Vista-Win7"
        set guid "AE1D740B-8F0F-D137-211D-873D44B3F4AE"
    next
    edit "Kaspersky-FW-Vista-Win7"
        set type fw
        set guid "9626F52E-C560-D06F-0A42-2E08BA60B3D5"
    next
    edit "McAfee-Internet-Security-Suite-AV"
        set guid "84B5EE75-6421-4CDE-A33A-DD43BA9FAD83"
    next
    edit "McAfee-Internet-Security-Suite-FW"
        set type fw
        set guid "94894B63-8C7F-4050-BDA4-813CA00DA3E8"
    next
    edit "McAfee-Internet-Security-Suite-AV-Vista-Win7"
        set guid "86355677-4064-3EA7-ABB3-1B136EB04637"
    next
    edit "McAfee-Internet-Security-Suite-FW-Vista-Win7"
        set type fw
        set guid "BE0ED752-0A0B-3FFF-80EC-B2269063014C"
    next
    edit "McAfee-Virus-Scan-Enterprise"
        set guid "918A2B0B-2C60-4016-A4AB-E868DEABF7F0"
    next
    edit "Norton-360-2.0-AV"
        set guid "A5F1BC7C-EA33-4247-961C-0217208396C4"
    next
    edit "Norton-360-2.0-FW"
        set type fw
        set guid "371C0A40-5A0C-4AD2-A6E5-69C02037FBF3"
    next
    edit "Norton-360-3.0-AV"
        set guid "E10A9785-9598-4754-B552-92431C1C35F8"
    next
    edit "Norton-360-3.0-FW"
        set type fw
        set guid "7C21A4C9-F61F-4AC4-B722-A6E19C16F220"
    next
    edit "Norton-Internet-Security-AV"
        set guid "E10A9785-9598-4754-B552-92431C1C35F8"
    next
    edit "Norton-Internet-Security-FW"
        set type fw
        set guid "7C21A4C9-F61F-4AC4-B722-A6E19C16F220"
    next
    edit "Norton-Internet-Security-AV-Vista-Win7"
        set guid "88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855"
    next
    edit "Norton-Internet-Security-FW-Vista-Win7"
        set type fw
        set guid "B0F2DB13-C654-2E74-30D4-99C9310F0F2E"
    next
    edit "Symantec-Endpoint-Protection-AV"
        set guid "FB06448E-52B8-493A-90F3-E43226D3305C"
    next
    edit "Symantec-Endpoint-Protection-FW"
        set type fw
        set guid "BE898FE3-CD0B-4014-85A9-03DB9923DDB6"
    next
    edit "Symantec-Endpoint-Protection-AV-Vista-Win7"
        set guid "88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855"
    next
    edit "Symantec-Endpoint-Protection-FW-Vista-Win7"
        set type fw
        set guid "B0F2DB13-C654-2E74-30D4-99C9310F0F2E"
    next
    edit "Panda-Antivirus+Firewall-2008-AV"
        set guid "EEE2D94A-D4C1-421A-AB2C-2CE8FE51747A"
    next
    edit "Panda-Antivirus+Firewall-2008-FW"
        set type fw
        set guid "7B090DC0-8905-4BAF-8040-FD98A41C8FB8"
    next
    edit "Panda-Internet-Security-AV"
        set guid "4570FB70-5C9E-47E9-B16C-A3A6A06C4BF0"
    next
    edit "Panda-Internet-Security-2006~2007-FW"
        set type fw
        set guid "4570FB70-5C9E-47E9-B16C-A3A6A06C4BF0"
    next
    edit "Panda-Internet-Security-2008~2009-FW"
        set type fw
        set guid "7B090DC0-8905-4BAF-8040-FD98A41C8FB8"
    next
    edit "Sophos-Anti-Virus"
        set guid "3F13C776-3CBE-4DE9-8BF6-09E5183CA2BD"
    next
    edit "Sophos-Enpoint-Secuirty-and-Control-FW"
        set type fw
        set guid "0786E95E-326A-4524-9691-41EF88FB52EA"
    next
    edit "Sophos-Enpoint-Secuirty-and-Control-AV-Vista-Win7"
        set guid "479CCF92-4960-B3E0-7373-BF453B467D2C"
    next
    edit "Sophos-Enpoint-Secuirty-and-Control-FW-Vista-Win7"
        set type fw
        set guid "7FA74EB7-030F-B2B8-582C-1670C5953A57"
    next
    edit "Trend-Micro-AV"
        set guid "7D2296BC-32CC-4519-917E-52E652474AF5"
    next
    edit "Trend-Micro-FW"
        set type fw
        set guid "3E790E9E-6A5D-4303-A7F9-185EC20F3EB6"
    next
    edit "Trend-Micro-AV-Vista-Win7"
        set guid "48929DFC-7A52-A34F-8351-C4DBEDBD9C50"
    next
    edit "Trend-Micro-FW-Vista-Win7"
        set type fw
        set guid "70A91CD9-303D-A217-A80E-6DEE136EDB2B"
    next
    edit "ZoneAlarm-AV"
        set guid "5D467B10-818C-4CAB-9FF7-6893B5B8F3CF"
    next
    edit "ZoneAlarm-FW"
        set type fw
        set guid "829BDA32-94B3-44F4-8446-F8FCFF809F8B"
    next
    edit "ZoneAlarm-AV-Vista-Win7"
        set guid "D61596DF-D219-341C-49B3-AD30538CBC5B"
    next
    edit "ZoneAlarm-FW-Vista-Win7"
        set type fw
        set guid "EE2E17FA-9876-3544-62EC-0405AD5FFB20"
    next
    edit "ESET-Smart-Security-AV"
        set guid "19259FAE-8396-A113-46DB-15B0E7DFA289"
    next
    edit "ESET-Smart-Security-FW"
        set type fw
        set guid "211E1E8B-C9F9-A04B-6D84-BC85190CE5F2"
    next
    edit "FortiClient5-AV"
        set guid "5EEDDB8C-C27A-6714-3657-DBD811D1F1B7"
    next
end
config vpn ssl web portal
    edit "full-access"
        set tunnel-mode enable
        set ipv6-tunnel-mode enable
        set web-mode enable
        set ip-pools "SSLVPN_TUNNEL_ADDR1"
        set ipv6-pools "SSLVPN_TUNNEL_IPv6_ADDR1"
    next
    edit "web-access"
        set web-mode enable
    next
    edit "tunnel-access"
        set tunnel-mode enable
        set ipv6-tunnel-mode enable
        set ip-pools "SSLVPN_TUNNEL_ADDR1"
        set ipv6-pools "SSLVPN_TUNNEL_IPv6_ADDR1"
    next
end
config vpn ssl settings
    set ssl-min-proto-ver tls1-1
    set servercert "Fortinet_Factory"
    set port 443
end
config voip profile
    edit "default"
        set comment "Default VoIP profile."
    next
    edit "strict"
        config sip
            set malformed-request-line discard
            set malformed-header-via discard
            set malformed-header-from discard
            set malformed-header-to discard
            set malformed-header-call-id discard
            set malformed-header-cseq discard
            set malformed-header-rack discard
            set malformed-header-rseq discard
            set malformed-header-contact discard
            set malformed-header-record-route discard
            set malformed-header-route discard
            set malformed-header-expires discard
            set malformed-header-content-type discard
            set malformed-header-content-length discard
            set malformed-header-max-forwards discard
            set malformed-header-allow discard
            set malformed-header-p-asserted-identity discard
            set malformed-header-sdp-v discard
            set malformed-header-sdp-o discard
            set malformed-header-sdp-s discard
            set malformed-header-sdp-i discard
            set malformed-header-sdp-c discard
            set malformed-header-sdp-b discard
            set malformed-header-sdp-z discard
            set malformed-header-sdp-k discard
            set malformed-header-sdp-a discard
            set malformed-header-sdp-t discard
            set malformed-header-sdp-r discard
            set malformed-header-sdp-m discard
        end
    next
end
config vpn ipsec phase1-interface
    edit "VPN_HO"
        set interface "wan1"
        set peertype any
        set net-device disable
        set proposal aes256-sha256
        set dhgrp 14
        set remote-gw 213.131.47.178
        set psksecret ENC 1IUia3NVFr7DCFKMMREJbWeOLSM1bLD5sqwSgdFW3h6pyxisQkbRsXUMrdCqn/B+X6WGOt+qnhmo9X9GJRSoYVQwacgGuAW5XQeiWxjJcfcK1BT2dhaLOeSL2qMmGEXhlclcE3HXoVtn88bJg7xnHr6vtTATa37PYwI6TVUd5LGwNUOv0NZJ7f9vOg+I09zuZPNrtA==
    next
end
config vpn ipsec phase2-interface
    edit "VPN_HO"
        set phase1name "VPN_HO"
        set proposal aes128gcm
        set dhgrp 14
        set auto-negotiate enable
        set src-addr-type name
        set dst-addr-type name
        set src-name "all"
        set dst-name "all"
    next
end
config dnsfilter profile
    edit "default"
        set comment "Default dns filtering."
        config ftgd-dns
            config filters
                edit 1
                    set category 2
                next
                edit 2
                    set category 7
                next
                edit 3
                    set category 8
                next
                edit 4
                    set category 9
                next
                edit 5
                    set category 11
                next
                edit 6
                    set category 12
                next
                edit 7
                    set category 13
                next
                edit 8
                    set category 14
                next
                edit 9
                    set category 15
                next
                edit 10
                    set category 16
                next
                edit 11
                next
                edit 12
                    set category 57
                next
                edit 13
                    set category 63
                next
                edit 14
                    set category 64
                next
                edit 15
                    set category 65
                next
                edit 16
                    set category 66
                next
                edit 17
                    set category 67
                next
                edit 18
                    set category 26
                    set action block
                next
                edit 19
                    set category 61
                    set action block
                next
                edit 20
                    set category 86
                    set action block
                next
                edit 21
                    set category 88
                    set action block
                next
                edit 22
                    set category 90
                    set action block
                next
                edit 23
                    set category 91
                    set action block
                next
            end
        end
        set block-botnet enable
    next
end
config antivirus settings
    set grayware enable
end
config antivirus profile
    edit "default"
        set comment "Scan files and block viruses."
        config http
            set options scan
        end
        config ftp
            set options scan
        end
        config imap
            set options scan
            set executables virus
        end
        config pop3
            set options scan
            set executables virus
        end
        config smtp
            set options scan
            set executables virus
        end
        set scan-mode legacy
    next
    edit "sniffer-profile"
        set comment "Scan files and monitor viruses."
        config http
            set options scan
        end
        config ftp
            set options scan
        end
        config imap
            set options scan
            set executables virus
        end
        config pop3
            set options scan
            set executables virus
        end
        config smtp
            set options scan
            set executables virus
        end
        set scan-mode legacy
    next
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        config http
            set options scan
        end
        config ftp
            set options scan
        end
        config imap
            set options scan
            set executables virus
        end
        config pop3
            set options scan
            set executables virus
        end
        config smtp
            set options scan
            set executables virus
        end
        set scan-mode legacy
    next
end
config webfilter profile
    edit "default"
        set comment "Default web filtering."
        config ftgd-wf
            unset options
            config filters
                edit 1
                    set category 2
                    set action block
                next
                edit 2
                    set category 7
                    set action block
                next
                edit 3
                    set category 8
                    set action block
                next
                edit 4
                    set category 9
                    set action block
                next
                edit 5
                    set category 11
                    set action block
                next
                edit 6
                    set category 12
                    set action block
                next
                edit 7
                    set category 13
                    set action block
                next
                edit 8
                    set category 14
                    set action block
                next
                edit 9
                    set category 15
                    set action block
                next
                edit 10
                    set category 16
                    set action block
                next
                edit 11
                    set action block
                next
                edit 12
                    set category 57
                    set action block
                next
                edit 13
                    set category 63
                    set action block
                next
                edit 14
                    set category 64
                    set action block
                next
                edit 15
                    set category 65
                    set action block
                next
                edit 16
                    set category 66
                    set action block
                next
                edit 17
                    set category 67
                    set action block
                next
                edit 18
                    set category 26
                    set action block
                next
                edit 19
                    set category 61
                    set action block
                next
                edit 20
                    set category 86
                    set action block
                next
                edit 21
                    set category 88
                    set action block
                next
                edit 22
                    set category 90
                    set action block
                next
                edit 23
                    set category 91
                    set action block
                next
            end
        end
    next
    edit "sniffer-profile"
        set comment "Monitor web traffic."
        config ftgd-wf
            config filters
                edit 1
                next
                edit 2
                    set category 1
                next
                edit 3
                    set category 2
                next
                edit 4
                    set category 3
                next
                edit 5
                    set category 4
                next
                edit 6
                    set category 5
                next
                edit 7
                    set category 6
                next
                edit 8
                    set category 7
                next
                edit 9
                    set category 8
                next
                edit 10
                    set category 9
                next
                edit 11
                    set category 11
                next
                edit 12
                    set category 12
                next
                edit 13
                    set category 13
                next
                edit 14
                    set category 14
                next
                edit 15
                    set category 15
                next
                edit 16
                    set category 16
                next
                edit 17
                    set category 17
                next
                edit 18
                    set category 18
                next
                edit 19
                    set category 19
                next
                edit 20
                    set category 20
                next
                edit 21
                    set category 23
                next
                edit 22
                    set category 24
                next
                edit 23
                    set category 25
                next
                edit 24
                    set category 26
                next
                edit 25
                    set category 28
                next
                edit 26
                    set category 29
                next
                edit 27
                    set category 30
                next
                edit 28
                    set category 31
                next
                edit 29
                    set category 33
                next
                edit 30
                    set category 34
                next
                edit 31
                    set category 35
                next
                edit 32
                    set category 36
                next
                edit 33
                    set category 37
                next
                edit 34
                    set category 38
                next
                edit 35
                    set category 39
                next
                edit 36
                    set category 40
                next
                edit 37
                    set category 41
                next
                edit 38
                    set category 42
                next
                edit 39
                    set category 43
                next
                edit 40
                    set category 44
                next
                edit 41
                    set category 46
                next
                edit 42
                    set category 47
                next
                edit 43
                    set category 48
                next
                edit 44
                    set category 49
                next
                edit 45
                    set category 50
                next
                edit 46
                    set category 51
                next
                edit 47
                    set category 52
                next
                edit 48
                    set category 53
                next
                edit 49
                    set category 54
                next
                edit 50
                    set category 55
                next
                edit 51
                    set category 56
                next
                edit 52
                    set category 57
                next
                edit 53
                    set category 58
                next
                edit 54
                    set category 59
                next
                edit 55
                    set category 61
                next
                edit 56
                    set category 62
                next
                edit 57
                    set category 63
                next
                edit 58
                    set category 64
                next
                edit 59
                    set category 65
                next
                edit 60
                    set category 66
                next
                edit 61
                    set category 67
                next
                edit 62
                    set category 68
                next
                edit 63
                    set category 69
                next
                edit 64
                    set category 70
                next
                edit 65
                    set category 71
                next
                edit 66
                    set category 72
                next
                edit 67
                    set category 75
                next
                edit 68
                    set category 76
                next
                edit 69
                    set category 77
                next
                edit 70
                    set category 78
                next
                edit 71
                    set category 79
                next
                edit 72
                    set category 80
                next
                edit 73
                    set category 81
                next
                edit 74
                    set category 82
                next
                edit 75
                    set category 83
                next
                edit 76
                    set category 84
                next
                edit 77
                    set category 85
                next
                edit 78
                    set category 86
                next
                edit 79
                    set category 87
                next
                edit 80
                    set category 88
                next
                edit 81
                    set category 89
                next
                edit 82
                    set category 90
                next
                edit 83
                    set category 91
                next
                edit 84
                    set category 92
                next
                edit 85
                    set category 93
                next
                edit 86
                    set category 94
                next
                edit 87
                    set category 95
                next
            end
        end
    next
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        set options block-invalid-url
        set post-action block
        config ftgd-wf
            unset options
            config filters
                edit 1
                next
                edit 2
                    set category 2
                    set action block
                next
                edit 3
                    set category 7
                    set action block
                next
                edit 4
                    set category 8
                    set action block
                next
                edit 5
                    set category 9
                    set action block
                next
                edit 6
                    set category 11
                    set action block
                next
                edit 7
                    set category 13
                    set action block
                next
                edit 8
                    set category 14
                    set action block
                next
                edit 9
                    set category 15
                    set action block
                next
                edit 10
                    set category 16
                    set action block
                next
                edit 11
                    set category 26
                    set action block
                next
                edit 12
                    set category 57
                    set action block
                next
                edit 13
                    set category 61
                    set action block
                next
                edit 14
                    set category 63
                    set action block
                next
                edit 15
                    set category 64
                    set action block
                next
                edit 16
                    set category 65
                    set action block
                next
                edit 17
                    set category 66
                    set action block
                next
                edit 18
                    set category 67
                    set action block
                next
                edit 19
                    set category 86
                    set action block
                next
                edit 20
                    set category 88
                    set action block
                next
                edit 21
                    set category 90
                    set action block
                next
                edit 22
                    set category 91
                    set action block
                next
            end
        end
    next
    edit "monitor-all"
        set comment "Monitor and log all visited URLs, flow-based."
        config ftgd-wf
            unset options
            config filters
                edit 1
                    set category 1
                next
                edit 2
                    set category 3
                next
                edit 3
                    set category 4
                next
                edit 4
                    set category 5
                next
                edit 5
                    set category 6
                next
                edit 6
                    set category 12
                next
                edit 7
                    set category 59
                next
                edit 8
                    set category 62
                next
                edit 9
                    set category 83
                next
                edit 10
                    set category 2
                next
                edit 11
                    set category 7
                next
                edit 12
                    set category 8
                next
                edit 13
                    set category 9
                next
                edit 14
                    set category 11
                next
                edit 15
                    set category 13
                next
                edit 16
                    set category 14
                next
                edit 17
                    set category 15
                next
                edit 18
                    set category 16
                next
                edit 19
                    set category 57
                next
                edit 20
                    set category 63
                next
                edit 21
                    set category 64
                next
                edit 22
                    set category 65
                next
                edit 23
                    set category 66
                next
                edit 24
                    set category 67
                next
                edit 25
                    set category 19
                next
                edit 26
                    set category 24
                next
                edit 27
                    set category 25
                next
                edit 28
                    set category 72
                next
                edit 29
                    set category 75
                next
                edit 30
                    set category 76
                next
                edit 31
                    set category 26
                next
                edit 32
                    set category 61
                next
                edit 33
                    set category 86
                next
                edit 34
                    set category 17
                next
                edit 35
                    set category 18
                next
                edit 36
                    set category 20
                next
                edit 37
                    set category 23
                next
                edit 38
                    set category 28
                next
                edit 39
                    set category 29
                next
                edit 40
                    set category 30
                next
                edit 41
                    set category 33
                next
                edit 42
                    set category 34
                next
                edit 43
                    set category 35
                next
                edit 44
                    set category 36
                next
                edit 45
                    set category 37
                next
                edit 46
                    set category 38
                next
                edit 47
                    set category 39
                next
                edit 48
                    set category 40
                next
                edit 49
                    set category 42
                next
                edit 50
                    set category 44
                next
                edit 51
                    set category 46
                next
                edit 52
                    set category 47
                next
                edit 53
                    set category 48
                next
                edit 54
                    set category 54
                next
                edit 55
                    set category 55
                next
                edit 56
                    set category 58
                next
                edit 57
                    set category 68
                next
                edit 58
                    set category 69
                next
                edit 59
                    set category 70
                next
                edit 60
                    set category 71
                next
                edit 61
                    set category 77
                next
                edit 62
                    set category 78
                next
                edit 63
                    set category 79
                next
                edit 64
                    set category 80
                next
                edit 65
                    set category 82
                next
                edit 66
                    set category 85
                next
                edit 67
                    set category 87
                next
                edit 68
                    set category 31
                next
                edit 69
                    set category 41
                next
                edit 70
                    set category 43
                next
                edit 71
                    set category 49
                next
                edit 72
                    set category 50
                next
                edit 73
                    set category 51
                next
                edit 74
                    set category 52
                next
                edit 75
                    set category 53
                next
                edit 76
                    set category 56
                next
                edit 77
                    set category 81
                next
                edit 78
                    set category 84
                next
                edit 79
                next
                edit 80
                    set category 88
                next
                edit 81
                    set category 89
                next
                edit 82
                    set category 90
                next
                edit 83
                    set category 91
                next
                edit 84
                    set category 92
                next
                edit 85
                    set category 93
                next
                edit 86
                    set category 94
                next
                edit 87
                    set category 95
                next
            end
        end
        set log-all-url enable
        set web-content-log disable
        set web-filter-activex-log disable
        set web-filter-command-block-log disable
        set web-filter-cookie-log disable
        set web-filter-applet-log disable
        set web-filter-jscript-log disable
        set web-filter-js-log disable
        set web-filter-vbs-log disable
        set web-filter-unknown-log disable
        set web-filter-referer-log disable
        set web-filter-cookie-removal-log disable
        set web-url-log disable
        set web-invalid-domain-log disable
        set web-ftgd-err-log disable
        set web-ftgd-quota-usage disable
    next
end
config webfilter search-engine
    edit "google"
        set hostname ".*\\.google\\..*"
        set url "^\\/((custom|search|images|videosearch|webhp)\\?)"
        set query "q="
        set safesearch url
        set safesearch-str "&safe=active"
    next
    edit "yahoo"
        set hostname ".*\\.yahoo\\..*"
        set url "^\\/search(\\/video|\\/images){0,1}(\\?|;)"
        set query "p="
        set safesearch url
        set safesearch-str "&vm=r"
    next
    edit "bing"
        set hostname ".*\\.bing\\..*"
        set url "^(\\/images|\\/videos)?(\\/search|\\/async|\\/asyncv2)\\?"
        set query "q="
        set safesearch header
    next
    edit "yandex"
        set hostname "yandex\\..*"
        set url "^\\/((yand|images\\/|video\\/)(search)|search\\/)\\?"
        set query "text="
        set safesearch url
        set safesearch-str "&family=yes"
    next
    edit "youtube"
        set hostname ".*youtube.*"
        set safesearch header
    next
    edit "baidu"
        set hostname ".*\\.baidu\\.com"
        set url "^\\/s?\\?"
        set query "wd="
    next
    edit "baidu2"
        set hostname ".*\\.baidu\\.com"
        set url "^\\/(ns|q|m|i|v)\\?"
        set query "word="
    next
    edit "baidu3"
        set hostname "tieba\\.baidu\\.com"
        set url "^\\/f\\?"
        set query "kw="
    next
end
config emailfilter profile
    edit "sniffer-profile"
        set comment "Malware and phishing URL monitoring."
    next
    edit "default"
        set comment "Malware and phishing URL filtering."
    next
end
config firewall schedule recurring
    edit "always"
        set day sunday monday tuesday wednesday thursday friday saturday
    next
    edit "none"
    next
    edit "default-darrp-optimize"
        set start 01:00
        set end 01:30
        set day sunday monday tuesday wednesday thursday friday saturday
    next
end
config firewall vip
    edit "VIP_SW_1"
        set uuid bbc00402-0f27-51f0-d410-b0dd55b29c91
        set extip 213.131.47.202
        set extintf "any"
        set portforward enable
        set mappedip "10.10.3.240"
        set extport 65001
        set mappedport 22
    next
end
config firewall profile-protocol-options
    edit "default"
        set comment "All default services."
        config http
            set ports 80
            unset options
            unset post-lang
        end
        config ftp
            set ports 21
            set options splice
        end
        config imap
            set ports 143
            set options fragmail
        end
        config mapi
            set ports 135
            set options fragmail
        end
        config pop3
            set ports 110
            set options fragmail
        end
        config smtp
            set ports 25
            set options fragmail splice
        end
        config nntp
            set ports 119
            set options splice
        end
        config ssh
            unset options
        end
        config dns
            set ports 53
        end
        config cifs
            set ports 445
        end
    next
end
config firewall ssl-ssh-profile
    edit "no-inspection"
        set comment "Read-only profile that does no inspection."
        config https
            set status disable
        end
        config ftps
            set status disable
        end
        config imaps
            set status disable
        end
        config pop3s
            set status disable
        end
        config smtps
            set status disable
        end
        config ssh
            set ports 22
            set status disable
        end
    next
    edit "custom-deep-inspection"
        set comment "Customizable deep inspection profile."
        config https
            set ports 443
            set status deep-inspection
        end
        config ftps
            set ports 990
            set status deep-inspection
        end
        config imaps
            set ports 993
            set status deep-inspection
        end
        config pop3s
            set ports 995
            set status deep-inspection
        end
        config smtps
            set ports 465
            set status deep-inspection
        end
        config ssh
            set ports 22
            set status deep-inspection
        end
        config ssl-exempt
            edit 1
                set fortiguard-category 31
            next
            edit 2
                set fortiguard-category 33
            next
            edit 3
                set type wildcard-fqdn
                set wildcard-fqdn "google-play"
            next
            edit 4
                set type wildcard-fqdn
                set wildcard-fqdn "update.microsoft.com"
            next
            edit 5
                set type wildcard-fqdn
                set wildcard-fqdn "swscan.apple.com"
            next
            edit 6
                set type wildcard-fqdn
                set wildcard-fqdn "autoupdate.opera.com"
            next
            edit 7
                set type wildcard-fqdn
                set wildcard-fqdn "android"
            next
            edit 8
                set type wildcard-fqdn
                set wildcard-fqdn "apple"
            next
            edit 9
                set type wildcard-fqdn
                set wildcard-fqdn "appstore"
            next
            edit 10
                set type wildcard-fqdn
                set wildcard-fqdn "citrix"
            next
            edit 11
                set type wildcard-fqdn
                set wildcard-fqdn "eease"
            next
            edit 12
                set type wildcard-fqdn
                set wildcard-fqdn "google-drive"
            next
            edit 13
                set type wildcard-fqdn
                set wildcard-fqdn "google-play2"
            next
            edit 14
                set type wildcard-fqdn
                set wildcard-fqdn "google-play3"
            next
            edit 15
                set type wildcard-fqdn
                set wildcard-fqdn "Gotomeeting"
            next
            edit 16
                set type wildcard-fqdn
                set wildcard-fqdn "microsoft"
            next
            edit 17
                set type wildcard-fqdn
                set wildcard-fqdn "adobe"
            next
            edit 18
                set type wildcard-fqdn
                set wildcard-fqdn "Adobe Login"
            next
            edit 19
                set type wildcard-fqdn
                set wildcard-fqdn "dropbox.com"
            next
            edit 20
                set type wildcard-fqdn
                set wildcard-fqdn "fortinet"
            next
            edit 21
                set type wildcard-fqdn
                set wildcard-fqdn "googleapis.com"
            next
            edit 22
                set type wildcard-fqdn
                set wildcard-fqdn "icloud"
            next
            edit 23
                set type wildcard-fqdn
                set wildcard-fqdn "itunes"
            next
            edit 24
                set type wildcard-fqdn
                set wildcard-fqdn "skype"
            next
            edit 25
                set type wildcard-fqdn
                set wildcard-fqdn "verisign"
            next
            edit 26
                set type wildcard-fqdn
                set wildcard-fqdn "Windows update 2"
            next
            edit 27
                set type wildcard-fqdn
                set wildcard-fqdn "auth.gfx.ms"
            next
            edit 28
                set type wildcard-fqdn
                set wildcard-fqdn "softwareupdate.vmware.com"
            next
            edit 29
                set type wildcard-fqdn
                set wildcard-fqdn "firefox update server"
            next
            edit 30
                set type wildcard-fqdn
                set wildcard-fqdn "live.com"
            next
        end
    next
    edit "certificate-inspection"
        set comment "Read-only SSL handshake inspection profile."
        config https
            set ports 443
            set status certificate-inspection
        end
        config ftps
            set status disable
        end
        config imaps
            set status disable
        end
        config pop3s
            set status disable
        end
        config smtps
            set status disable
        end
        config ssh
            set ports 22
            set status disable
        end
    next
    edit "deep-inspection"
        set comment "Read-only deep inspection profile."
        config https
            set ports 443
            set status deep-inspection
        end
        config ftps
            set ports 990
            set status deep-inspection
        end
        config imaps
            set ports 993
            set status deep-inspection
        end
        config pop3s
            set ports 995
            set status deep-inspection
        end
        config smtps
            set ports 465
            set status deep-inspection
        end
        config ssh
            set ports 22
            set status disable
        end
        config ssl-exempt
            edit 1
                set fortiguard-category 31
            next
            edit 2
                set fortiguard-category 33
            next
            edit 3
                set type wildcard-fqdn
                set wildcard-fqdn "adobe"
            next
            edit 4
                set type wildcard-fqdn
                set wildcard-fqdn "Adobe Login"
            next
            edit 5
                set type wildcard-fqdn
                set wildcard-fqdn "android"
            next
            edit 6
                set type wildcard-fqdn
                set wildcard-fqdn "apple"
            next
            edit 7
                set type wildcard-fqdn
                set wildcard-fqdn "appstore"
            next
            edit 8
                set type wildcard-fqdn
                set wildcard-fqdn "auth.gfx.ms"
            next
            edit 9
                set type wildcard-fqdn
                set wildcard-fqdn "citrix"
            next
            edit 10
                set type wildcard-fqdn
                set wildcard-fqdn "dropbox.com"
            next
            edit 11
                set type wildcard-fqdn
                set wildcard-fqdn "eease"
            next
            edit 12
                set type wildcard-fqdn
                set wildcard-fqdn "firefox update server"
            next
            edit 13
                set type wildcard-fqdn
                set wildcard-fqdn "fortinet"
            next
            edit 14
                set type wildcard-fqdn
                set wildcard-fqdn "googleapis.com"
            next
            edit 15
                set type wildcard-fqdn
                set wildcard-fqdn "google-drive"
            next
            edit 16
                set type wildcard-fqdn
                set wildcard-fqdn "google-play2"
            next
            edit 17
                set type wildcard-fqdn
                set wildcard-fqdn "google-play3"
            next
            edit 18
                set type wildcard-fqdn
                set wildcard-fqdn "Gotomeeting"
            next
            edit 19
                set type wildcard-fqdn
                set wildcard-fqdn "icloud"
            next
            edit 20
                set type wildcard-fqdn
                set wildcard-fqdn "itunes"
            next
            edit 21
                set type wildcard-fqdn
                set wildcard-fqdn "microsoft"
            next
            edit 22
                set type wildcard-fqdn
                set wildcard-fqdn "skype"
            next
            edit 23
                set type wildcard-fqdn
                set wildcard-fqdn "softwareupdate.vmware.com"
            next
            edit 24
                set type wildcard-fqdn
                set wildcard-fqdn "verisign"
            next
            edit 25
                set type wildcard-fqdn
                set wildcard-fqdn "Windows update 2"
            next
            edit 26
                set type wildcard-fqdn
                set wildcard-fqdn "live.com"
            next
            edit 27
                set type wildcard-fqdn
                set wildcard-fqdn "google-play"
            next
            edit 28
                set type wildcard-fqdn
                set wildcard-fqdn "update.microsoft.com"
            next
            edit 29
                set type wildcard-fqdn
                set wildcard-fqdn "swscan.apple.com"
            next
            edit 30
                set type wildcard-fqdn
                set wildcard-fqdn "autoupdate.opera.com"
            next
        end
    next
end
config waf profile
    edit "default"
        config signature
            config main-class 100000000
                set action block
                set log disable
                set severity high
            end
            config main-class 20000000
                set log disable
            end
            config main-class 30000000
                set status enable
                set action block
                set log disable
                set severity high
            end
            config main-class 40000000
                set log disable
            end
            config main-class 50000000
                set status enable
                set action block
                set log disable
                set severity high
            end
            config main-class 60000000
                set log disable
            end
            config main-class 70000000
                set status enable
                set action block
                set log disable
                set severity high
            end
            config main-class 80000000
                set status enable
                set log disable
                set severity low
            end
            config main-class 110000000
                set status enable
                set log disable
                set severity high
            end
            config main-class 90000000
                set status enable
                set action block
                set log disable
                set severity high
            end
            set disabled-signature 80080005 80200001 60030001 60120001 80080003 90410001 90410002
        end
        config constraint
            config header-length
                set status enable
                set log enable
                set severity low
            end
            config content-length
                set status enable
                set log enable
                set severity low
            end
            config param-length
                set status enable
                set log enable
                set severity low
            end
            config line-length
                set status enable
                set log enable
                set severity low
            end
            config url-param-length
                set status enable
                set log enable
                set severity low
            end
            config version
                set log enable
            end
            config method
                set action block
                set log enable
            end
            config hostname
                set action block
                set log enable
            end
            config malformed
                set log enable
            end
            config max-cookie
                set status enable
                set log enable
                set severity low
            end
            config max-header-line
                set status enable
                set log enable
                set severity low
            end
            config max-url-param
                set status enable
                set log enable
                set severity low
            end
            config max-range-segment
                set status enable
                set log enable
                set severity high
            end
        end
    next
end
config firewall policy
    edit 1
        set name "21"
        set uuid 5ad442cc-2ede-51ef-f688-94256e5dd738
        set srcintf "Users-10.10.3"
        set dstintf "wan1"
        set srcaddr "all"
        set dstaddr "all"
        set action accept
        set schedule "always"
        set service "ALL"
        set nat enable
    next
    edit 2
        set name "vpn_VPN_HO_local"
        set uuid f947041c-0f25-51f0-552e-9047fd659859
        set srcintf "Users-10.10.3"
        set dstintf "VPN_HO"
        set srcaddr "all"
        set dstaddr "all"
        set action accept
        set schedule "always"
        set service "ALL"
    next
    edit 5
        set name "Banks to WAN"
        set uuid 89aace44-0f30-51f0-74e3-f9cae00e6f6f
        set srcintf "Banks-10.20.3"
        set dstintf "VPN_HO"
        set srcaddr "all"
        set dstaddr "all"
        set action accept
        set schedule "always"
        set service "ALL"
    next
    edit 6
        set name "Guests to WAN"
        set uuid ca9b7cc8-0f30-51f0-1ec0-6dc64caf3a48
        set srcintf "Guests"
        set dstintf "VPN_HO"
        set srcaddr "all"
        set dstaddr "all"
        set action accept
        set schedule "always"
        set service "ALL"
    next
    edit 3
        set name "vpn_VPN_HO_remote"
        set uuid f94e4d4e-0f25-51f0-0543-7f8bd1570832
        set srcintf "VPN_HO"
        set dstintf "Users-10.10.3"
        set srcaddr "VPN_HO_remote"
        set dstaddr "VPN_HO_local"
        set action accept
        set schedule "always"
        set service "ALL"
        set comments "VPN: VPN_HO (Created by VPN wizard)"
    next
    edit 4
        set name "Wan to SW1"
        set uuid d71c4300-0f27-51f0-cd3f-4500dbeeeec1
        set srcintf "wan1"
        set dstintf "Users-10.10.3"
        set srcaddr "all"
        set dstaddr "VIP_SW_1"
        set action accept
        set schedule "always"
        set service "ALL"
    next
end
config firewall ssh local-key
    edit "Fortinet_SSH_RSA2048"
        set password ENC qGME4H/G7B8+PGAXmM7wWLc4RC/kgPDBv7SIgP7FhX3rekg163ylqFnhEG9azzfhaIUXgBWy7vVEJl+SyjvnGBNF+QVSJhQM4Wdza1o7BBNtle1i6jVvkDZ3PVDgTrPQbz+lltocz1rUAWkmNgHR2OBskY6ftovfRHmg5A6Lge1g7MaIP/og28bAWpacBQqZ0uWFFA==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5QxRDPoYe11GAzwoaW4N5YorTqEreUOB3XBnKf+t8R6iffWkDDUePI4OgyiTX9hcxhDLNHshdzrMnwQ6IdwdS8EHH2mm9omZ4o5yvm/Zk8YwFX407W/WpKl3XWVyxP2hIwvxyIeYaNaCypA/X+nK6DDh8Mhh9cc/K9gYeIKKx2k4v8Lzj+yuTGCERMtL3yWKgidi1MHas2DqXbiA1mqbbBRNoog1AzZiefureqCT2ul3N9pDdjzACqw6kJJr5D9KdEBRmgD7G9fEjwO0DSvIulVZJsUf68WvajJHg8Z2Rqc2/zMcur0eofrz6S+0laHoGGKB4p2q1+itnKIZ5H2R1"
        set source built-in
    next
    edit "Fortinet_SSH_DSA1024"
        set password ENC qGME4B513xCmlTrLi9W4NdeFuGYqZ0nMBAklAHacbiQ+OoKG4728+Z8e0NENRFpdsZ0as2ItvM/ti4AqrhqBVMjV3b7sici0F5IRBzSpvxYDc9QfntPVAUGb4NSdIMlhLssL6xLo3vSxlAb3QWfyR2qSXYXn+xGy13jKDPss5EAPtQRYaA90zZA7NEVZcc1b8mnerw==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-dss 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"
        set source built-in
    next
    edit "Fortinet_SSH_ECDSA256"
        set password ENC qGME4NSQtWC/p8JOGv+Ew5405K92NirzXo4rsuIbs/DY+2fFt3s/cT4i/FIe2pXbX6zq2utpu1v8EnSeJ1AEw6labyYKD0RnvZXnL887FgjesYH6kd099Wow5vFAODArJSRi9mTiodl4uzzVVIghkT9lJTh38TTbDUr29R8CDfSzFE3HveYFx/E8Za/JFAHiyPV/uQ==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABDrRwmnHe
UXGDxBAm/p2e/rAAAAEAAAAAEAAABoAAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlz
dHAyNTYAAABBBL8G1JRIlz3bMmIqUqTtusDvpYSNB+SefdQMgeirYVkdI8mrQFEHoKfURN
Y98RQhDrc/GY/QXUaWGjGUb95JfQsAAACgJArI12AmIt2k2LCEm2ctCf7l/OBcU/dQSwLm
AV8f1DlrnzUd4b+gfpU1ujVholAM9BxMAp47xnAAuAH9cKBvezkpGzGNYD1daJhKrh5a0n
KljaEfS+5Ph/dZb6Idr6mSui78f+1NJ2qSAmjTIS+KVkDGOZkcDve3UXG8vv3dp4Bufb/J
XBnwwZY+jI/bekpeK+lLtxVYiiwwABpBxs3uqA==
-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBL8G1JRIlz3bMmIqUqTtusDvpYSNB+SefdQMgeirYVkdI8mrQFEHoKfURNY98RQhDrc/GY/QXUaWGjGUb95JfQs="
        set source built-in
    next
    edit "Fortinet_SSH_ECDSA384"
        set password ENC qGME4JbsQjiqLIGSJOpm/X46HFrHS+XwjPw+k/uZ5Cxt6bLeFUxRaWExrghYaBbcUB1OuSd5SHtLTqii8tph1AXWdwL6fgfoVNHX0ektN7BbRMjPXo64/DoZQUe902EaApuz8ZvPPWygF9tjrgXHtCPxlUcjKfrZNNohJIs1rfPsfms9EkXsAAtOyt6kvlqp4MEwoA==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABBu6Mquc5
ZHRlHB4S6GXh3LAAAAEAAAAAEAAACIAAAAE2VjZHNhLXNoYTItbmlzdHAzODQAAAAIbmlz
dHAzODQAAABhBIwLqdoSI+jBkH8dJgNyECxrHs/kpQc2HddEgWrDi0EnMdrHe/Pt5vmlHo
4g7I9bQ5hv3vDhmWMafw4nsppDiPltAmfTn6rRhpPaFcRKWSaUfh1F+Ziia+nww37iEym7
hgAAANCl5PovXwjg6JYPOuoMlnUZ2czx83AGxEAcqd6tw8+NT0vc+WUu/7fOZ5d+boIILY
E7vU81IAynIyqTVOpnEhFN7c6iENSX0NtBdQos1hoZPkKrfII+9WmmwrzK/CVbeHfclO/q
AiJ7EDdotk9NGQZJmJZaE3m56qavYTyuWNhXEv3JypSpsFCJYJAu6LQjX7vUBPhPlwaMdS
cM+nEpEHhTx1Yz3wj8UH0lr2iUh5lvWUEh4YHAahWe2P6FX5DvqYHEMVEoYY1+cX4BGVKm
nBm3
-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ecdsa-sha2-nistp384 AAAAE2VjZHNhLXNoYTItbmlzdHAzODQAAAAIbmlzdHAzODQAAABhBIwLqdoSI+jBkH8dJgNyECxrHs/kpQc2HddEgWrDi0EnMdrHe/Pt5vmlHo4g7I9bQ5hv3vDhmWMafw4nsppDiPltAmfTn6rRhpPaFcRKWSaUfh1F+Ziia+nww37iEym7hg=="
        set source built-in
    next
    edit "Fortinet_SSH_ECDSA521"
        set password ENC qGME4F2sG1JXMkEsNyB2qtIkwRxvUk1MBORORwyfOdTby8NOoWkveoYjTgdjP7iw46J8lKofHCi4fvfATS45iQWBv9Bgz8nmbSwW71wWTPtOjDjcd2dvzwgyM3pISX0INE2bZkTwkdCbrhmKjfr2YWAacq2DEDwGIR33QP8xwUjH2fhy9a9FUtYgQ1E6aO5Yc4T4lQ==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAGRIubyBdIIVF15Aspf3fSTIe/wbPVhitzkv44LVemD9/PtHR4OY6puHGJhZifG79ng7hDNjzd6YG2TUHKDdRFKqwBFmNg9mrOFSGxlXnqrbqNnKEPgxqbIeVpXSl2wggamlq8/ETEyyYsRGhlJSJWrGsD/VUVJ9wfyCM2qtEJL9CAowQ=="
        set source built-in
    next
    edit "Fortinet_SSH_ED25519"
        set password ENC w28SAa+63zbw5U/v5R7a/xHzliUl3UhE8PuuLaHWMl8fp2keNCG6lQyHOh7Xnu6BPcuXGmU6ksn1ULGWw/wqBHnC1IlpqbNInnwVQBRNI34BhN33NIaAY/3LoiIQvBmKmWNNkWnEXox4JzAulgbwY4SqmVUwtusZjHHOaAPutj1dIIyI6VX0qmhIarrxN9fzxcYQdg==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABAvi6qckk
Nw8o3sylIvQDReAAAAEAAAAAEAAAAzAAAAC3NzaC1lZDI1NTE5AAAAIIkr5s4pN9tB8vCd
7aiyzQTT7l5R5pii3k58hEzqJ+hRAAAAkJ6j38qiH7pJ3uGzRmdkri0IazkrmCbwgtjTDb
Imfx4meXJCISb1cNUgtZZTqBdTTprxtBGul9wHsFiMWp86fW7kTat7dlEpONmcRB1n6Oyf
71wAjVB8082bnUUtD84suGU4bw9A1u4L18m7S2rZBJG80Uwx+x08eE5Th+EO+67Q9oGxZ6
kYmyx0KK3pFzvBmA==
-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIkr5s4pN9tB8vCd7aiyzQTT7l5R5pii3k58hEzqJ+hR"
        set source built-in
    next
end
config firewall ssh local-ca
    edit "Fortinet_SSH_CA"
        set password ENC pccAARcmrcfibFB4YPjyoj/4Z/XfE2T38Xnh6+57DfgNBrH4tRmXQu6p5Y5qGOwq9Yts2IIeuVButEUuWiePYgST5xzRBX5BOigylwpPnWaCrBY3iZ5RUKcWxKDkSbqauerhYgmfTKLMdpI7AlZIJtGz64lrKAWMbroSZ7IL6+iGV1kYFIAFz7UBsDDCeSB2WGcMzA==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAxbKigm+nXdDZk/RYmDt3dMFPRltvanvB4Hykg7fxmNBXd2Naqhf4rgeNLjwRiUpw/f589BgeTY3tSMDSzURCNe1sC03JWg5GToSmrwMHI9FN0pcJ8i3u+lOF7vah1Y74YVE3iKjBezptVWJEjzMLcWXSlbQCn0pCmXgdQO9zGv/yIw68Gw7f3eFs/0Pu5Rtki5CqvsXrGD/KiYQZvhmcdHXDMmJhWQ7musoP010FaT1nBWU3eZ4LdFdJ+ZwlDETnWoykVa4krXkuRfM9Q89p9yOncI+hFggM+irgH+/0DtkQZfkUytT2hzpZ6wgl3EIm0oqBWURUoSlHVPL4Uqmb"
        set source built-in
    next
    edit "Fortinet_SSH_CA_Untrusted"
        set password ENC pccAAeHAKCLNZcOh92UVoXtNQdr1A3oe1UPuvfeCvau5wyJf2AWJde/EeXBMl7UuKUP2FylOM5+v6Mlh1oAu4eNwVwbWYeClMHjJnzmgKDjEFX60jAjXQdwo6G/SXuLUK81h4ePGj+KrLP6tnV79SvMwP0V80hwsgCzcGsgDHQubywggE5SEfqH5DCGuR2xPZ5e80A==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgzZ2/bdyXEHb4DthYYNE7DlFu4leCS/qGgKbkEeq2i5hMdC4pEeMoWyrmy6UVilLkbC5+VqRhblZWk8W5oy5/GXruxrGOJgu2rJ7gLpylR6jOeLePq0i72/mFA5v45UJm8V4OK4LlKJ3tT1eEem9QeIIxIv83G1/uJSt643zJ93RxQm1yZmSvU3tf+0FchB8fQxhnmyXGAHXDO/suyxd3HZML8U5Hzbbvl5bfOjFuBq6Zk67MaRaJjdN9WJPtiujVOyWkj50ncbN9LvzSV/pMtAZ1Po9tUloRW+PZdV0IEw1wK7PwfNObbwDK/gVuCuY23A4y4stJmkMfM6mXwFpj"
        set source built-in
    next
end
config firewall ssh setting
    set caname "Fortinet_SSH_CA"
    set untrusted-caname "Fortinet_SSH_CA_Untrusted"
    set hostkey-rsa2048 "Fortinet_SSH_RSA2048"
    set hostkey-dsa1024 "Fortinet_SSH_DSA1024"
    set hostkey-ecdsa256 "Fortinet_SSH_ECDSA256"
    set hostkey-ecdsa384 "Fortinet_SSH_ECDSA384"
    set hostkey-ecdsa521 "Fortinet_SSH_ECDSA521"
    set hostkey-ed25519 "Fortinet_SSH_ED25519"
end
config switch-controller security-policy 802-1X
    edit "802-1X-policy-default"
        set user-group "SSO_Guest_Users"
        set mac-auth-bypass disable
        set open-auth disable
        set eap-passthru enable
        set guest-vlan disable
        set auth-fail-vlan disable
        set framevid-apply enable
        set radius-timeout-overwrite disable
    next
end
config switch-controller security-policy local-access
    edit "default"
        set mgmt-allowaccess https ping ssh
        set internal-allowaccess https ping ssh
    next
end
config switch-controller lldp-profile
    edit "default"
        set med-tlvs inventory-management network-policy
        set auto-isl disable
        config med-network-policy
            edit "voice"
            next
            edit "voice-signaling"
            next
            edit "guest-voice"
            next
            edit "guest-voice-signaling"
            next
            edit "softphone-voice"
            next
            edit "video-conferencing"
            next
            edit "streaming-video"
            next
            edit "video-signaling"
            next
        end
    next
    edit "default-auto-isl"
    next
end
config switch-controller qos dot1p-map
    edit "voice-dot1p"
        set priority-0 queue-4
        set priority-1 queue-4
        set priority-2 queue-3
        set priority-3 queue-2
        set priority-4 queue-3
        set priority-5 queue-1
        set priority-6 queue-2
        set priority-7 queue-2
    next
end
config switch-controller qos ip-dscp-map
    edit "voice-dscp"
        config map
            edit "1"
                set cos-queue 1
                set value 46
            next
            edit "2"
                set cos-queue 2
                set value 24,26,48,56
            next
            edit "5"
                set cos-queue 3
                set value 34
            next
        end
    next
end
config switch-controller qos queue-policy
    edit "default"
        set schedule round-robin
        set rate-by kbps
        config cos-queue
            edit "queue-0"
            next
            edit "queue-1"
            next
            edit "queue-2"
            next
            edit "queue-3"
            next
            edit "queue-4"
            next
            edit "queue-5"
            next
            edit "queue-6"
            next
            edit "queue-7"
            next
        end
    next
    edit "voice-egress"
        set schedule weighted
        set rate-by kbps
        config cos-queue
            edit "queue-0"
            next
            edit "queue-1"
                set weight 0
            next
            edit "queue-2"
                set weight 6
            next
            edit "queue-3"
                set weight 37
            next
            edit "queue-4"
                set weight 12
            next
            edit "queue-5"
            next
            edit "queue-6"
            next
            edit "queue-7"
            next
        end
    next
end
config switch-controller qos qos-policy
    edit "default"
    next
    edit "voice-qos"
        set trust-dot1p-map "voice-dot1p"
        set trust-ip-dscp-map "voice-dscp"
        set queue-policy "voice-egress"
    next
end
config switch-controller storm-control-policy
    edit "default"
        set description "default storm control on all port"
    next
    edit "auto-config"
        set description "storm control policy for fortilink-isl-icl port"
        set storm-control-mode disabled
    next
end
config switch-controller auto-config policy
    edit "default"
    next
    edit "default-icl"
        set poe-status disable
        set igmp-flood-report enable
        set igmp-flood-traffic enable
    next
end
config switch-controller switch-profile
    edit "default"
    next
end
config switch-controller remote-log
    edit "syslogd"
    next
    edit "syslogd2"
    next
end
config wireless-controller setting
    set darrp-optimize-schedules "default-darrp-optimize"
end
config wireless-controller wids-profile
    edit "default"
        set comment "Default WIDS profile."
        set ap-scan enable
        set wireless-bridge enable
        set deauth-broadcast enable
        set null-ssid-probe-resp enable
        set long-duration-attack enable
        set invalid-mac-oui enable
        set weak-wep-iv enable
        set auth-frame-flood enable
        set assoc-frame-flood enable
        set spoofed-deauth enable
        set asleap-attack enable
        set eapol-start-flood enable
        set eapol-logoff-flood enable
        set eapol-succ-flood enable
        set eapol-fail-flood enable
        set eapol-pre-succ-flood enable
        set eapol-pre-fail-flood enable
    next
    edit "default-wids-apscan-enabled"
        set ap-scan enable
    next
end
config wireless-controller wtp-profile
    edit "FAPU433F-default"
        config platform
            set type U433F
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11ax-5G
        end
        config radio-2
            set band 802.11ax,n,g-only
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAPU431F-default"
        config platform
            set type U431F
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11ax-5G
        end
        config radio-2
            set band 802.11ax,n,g-only
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAP23JF-default"
        config platform
            set type 23JF
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11ax
        end
        config radio-2
            set band 802.11ax-5G
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAP234F-default"
        config platform
            set type 234F
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11ax
        end
        config radio-2
            set band 802.11ax-5G
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAP231F-default"
        config platform
            set type 231F
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11ax
        end
        config radio-2
            set band 802.11ax-5G
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAP433F-default"
        config platform
            set type 433F
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11ax
        end
        config radio-2
            set band 802.11ax-5G
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAP432F-default"
        config platform
            set type 432F
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11ax
        end
        config radio-2
            set band 802.11ax-5G
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAP431F-default"
        config platform
            set type 431F
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11ax
        end
        config radio-2
            set band 802.11ax-5G
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAP321E-default"
        config platform
            set type 321E
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAP231E-default"
        config platform
            set type 231E
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAPU323EV-default"
        config platform
            set type U323EV
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPU321EV-default"
        config platform
            set type U321EV
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPU24JEV-default"
        config platform
            set type U24JEV
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPU223EV-default"
        config platform
            set type U223EV
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPU221EV-default"
        config platform
            set type U221EV
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPU423E-default"
        config platform
            set type U423E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPU422EV-default"
        config platform
            set type U422EV
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPU421E-default"
        config platform
            set type U421E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS223E-default"
        config platform
            set type S223E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS221E-default"
        config platform
            set type S221E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP224E-default"
        config platform
            set type 224E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP223E-default"
        config platform
            set type 223E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP222E-default"
        config platform
            set type 222E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP221E-default"
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP423E-default"
        config platform
            set type 423E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP421E-default"
        config platform
            set type 421E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS423E-default"
        config platform
            set type S423E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS422E-default"
        config platform
            set type S422E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS421E-default"
        config platform
            set type S421E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS323CR-default"
        config platform
            set type S323CR
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS322CR-default"
        config platform
            set type S322CR
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS321CR-default"
        config platform
            set type S321CR
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS313C-default"
        config platform
            set type S313C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS311C-default"
        config platform
            set type S311C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS323C-default"
        config platform
            set type S323C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS322C-default"
        config platform
            set type S322C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS321C-default"
        config platform
            set type S321C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP321C-default"
        config platform
            set type 321C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP223C-default"
        config platform
            set type 223C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP112D-default"
        config platform
            set type 112D
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP24D-default"
        config platform
            set type 24D
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP21D-default"
        config platform
            set type 21D
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FK214B-default"
        config platform
            set type 214B
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP224D-default"
        config platform
            set type 224D
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n-5G
            set channel-utilization disable
        end
        config radio-2
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP222C-default"
        config platform
            set type 222C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP25D-default"
        config platform
            set type 25D
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP221C-default"
        config platform
            set type 221C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP320C-default"
        config platform
            set type 320C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP28C-default"
        config platform
            set type 28C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP223B-default"
        config platform
            set type 223B
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n-5G
            set channel-utilization disable
        end
        config radio-2
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP14C-default"
        config platform
            set type 14C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP11C-default"
        config platform
            set type 11C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP320B-default"
        config platform
            set type 320B
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n-5G
            set channel-utilization disable
        end
        config radio-2
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP112B-default"
        config platform
            set type 112B
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP222B-default"
        config platform
            set type 222B
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11n-5G
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP210B-default"
        config platform
            set type 210B
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP220B-default"
        config platform
            set type 220B
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n-5G
            set channel-utilization disable
        end
        config radio-2
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "AP-11N-default"
        config platform
            set type AP-11N
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
end
config wireless-controller utm-profile
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        set ips-sensor "wifi-default"
        set application-list "wifi-default"
        set antivirus-profile "wifi-default"
        set webfilter-profile "wifi-default"
    next
end
config log memory setting
    set status enable
end
config log null-device setting
    set status disable
end
config router rip
    config redistribute "connected"
    end
    config redistribute "static"
    end
    config redistribute "ospf"
    end
    config redistribute "bgp"
    end
    config redistribute "isis"
    end
end
config router ripng
    config redistribute "connected"
    end
    config redistribute "static"
    end
    config redistribute "ospf"
    end
    config redistribute "bgp"
    end
    config redistribute "isis"
    end
end
config router static
    edit 1
        set distance 20
        set device "VPN_HO"
    next
    edit 3
        set dst 213.131.47.178 255.255.255.255
        set gateway 213.131.45.49
        set distance 5
        set device "wan1"
    next
    edit 4
        set dst 10.0.200.0 255.255.255.0
        set device "VPN_HO"
        set comment "Servers"
    next
    edit 5
        set dst 212.58.96.0 255.255.224.0
        set gateway 213.131.45.49
        set device "wan1"
    next
    edit 6
        set dst 188.93.95.0 255.255.255.0
        set gateway 213.131.45.49
        set device "wan1"
    next
    edit 7
        set dst 185.181.250.0 255.255.255.0
        set gateway 213.131.45.49
        set device "wan1"
    next
end
config router ospf
    config redistribute "connected"
    end
    config redistribute "static"
    end
    config redistribute "rip"
    end
    config redistribute "bgp"
    end
    config redistribute "isis"
    end
end
config router ospf6
    config redistribute "connected"
    end
    config redistribute "static"
    end
    config redistribute "rip"
    end
    config redistribute "bgp"
    end
    config redistribute "isis"
    end
end
config router bgp
    config redistribute "connected"
    end
    config redistribute "rip"
    end
    config redistribute "ospf"
    end
    config redistribute "static"
    end
    config redistribute "isis"
    end
    config redistribute6 "connected"
    end
    config redistribute6 "rip"
    end
    config redistribute6 "ospf"
    end
    config redistribute6 "static"
    end
    config redistribute6 "isis"
    end
end
config router isis
    config redistribute "connected"
    end
    config redistribute "rip"
    end
    config redistribute "ospf"
    end
    config redistribute "bgp"
    end
    config redistribute "static"
    end
    config redistribute6 "connected"
    end
    config redistribute6 "rip"
    end
    config redistribute6 "ospf"
    end
    config redistribute6 "bgp"
    end
    config redistribute6 "static"
    end
end
config router multicast
end
