#config-version=FGT50E-6.2.16-FW-build1392-240129:opmode=0:vdom=0:user=admin
#conf_file_ver=177334904725832
#buildno=1392
#global_vdom=1
config system global
    set admin-port 65080
    set admin-sport 65443
    set admin-ssh-port 65022
    set admin-telnet-port 65023
    set alias "FGT50E5618039913"
    set hostname "FGT-Senaki"
    set switch-controller enable
    set timezone 42
end
config system accprofile
    edit "prof_admin"
        set secfabgrp read-write
        set ftviewgrp read-write
        set authgrp read-write
        set sysgrp read-write
        set netgrp read-write
        set loggrp read-write
        set fwgrp read-write
        set vpngrp read-write
        set utmgrp read-write
        set wifi read-write
    next
end
config system interface
    edit "wan1"
        set vdom "root"
        set ip 146.255.241.238 255.255.255.252
        set allowaccess ping https ssh http
        set type physical
        set role wan
        set snmp-index 1
    next
    edit "wan2"
        set vdom "root"
        set mode dhcp
        set allowaccess ping fgfm
        set type physical
        set role wan
        set snmp-index 2
    next
    edit "modem"
        set vdom "root"
        set mode pppoe
        set type physical
        set snmp-index 3
    next
    edit "ssl.root"
        set vdom "root"
        set type tunnel
        set alias "SSL VPN interface"
        set snmp-index 4
    next
    edit "lan1"
        set vdom "root"
        set type physical
        set snmp-index 7
    next
    edit "lan2"
        set vdom "root"
        set type physical
        set snmp-index 6
    next
    edit "lan"
        set vdom "root"
        set ip 192.168.1.99 255.255.255.0
        set allowaccess ping https ssh http fabric
        set type hard-switch
        set stp enable
        set role lan
        set snmp-index 5
    next
    edit "Users-10.10.7"
        set vdom "root"
        set ip 10.10.7.254 255.255.255.0
        set allowaccess ping https http
        set device-identification enable
        set role lan
        set snmp-index 8
        set interface "lan1"
        set vlanid 10
    next
    edit "VPN_HO"
        set vdom "root"
        set type tunnel
        set snmp-index 9
        set interface "wan1"
    next
    edit "Banks-10.20.7"
        set vdom "root"
        set ip 10.20.7.254 255.255.255.0
        set allowaccess ping
        set device-identification enable
        set role lan
        set snmp-index 10
        set interface "lan1"
        set vlanid 20
    next
    edit "Guests"
        set vdom "root"
        set ip 10.30.7.254 255.255.255.0
        set allowaccess ping
        set alias "10.30.7.0/24"
        set device-identification enable
        set role lan
        set snmp-index 11
        set interface "lan1"
        set vlanid 30
    next
end
config system physical-switch
    edit "sw0"
        set age-val 0
    next
end
config system virtual-switch
    edit "lan"
        set physical-switch "sw0"
        config port
            edit "lan3"
            next
            edit "lan4"
            next
            edit "lan5"
            next
        end
    next
end
config system custom-language
    edit "en"
        set filename "en"
    next
    edit "fr"
        set filename "fr"
    next
    edit "sp"
        set filename "sp"
    next
    edit "pg"
        set filename "pg"
    next
    edit "x-sjis"
        set filename "x-sjis"
    next
    edit "big5"
        set filename "big5"
    next
    edit "GB2312"
        set filename "GB2312"
    next
    edit "euc-kr"
        set filename "euc-kr"
    next
end
config system admin
    edit "admin"
        set accprofile "super_admin"
        set vdom "root"
        config gui-dashboard
            edit 2
                set name "Status"
                set vdom "root"
                set permanent enable
                config widget
                    edit 1
                        set width 1
                        set height 1
                    next
                    edit 6
                        set type cpu-usage
                        set x-pos 1
                        set width 2
                        set height 1
                    next
                    edit 7
                        set type memory-usage
                        set x-pos 4
                        set width 2
                        set height 1
                    next
                    edit 8
                        set type sessions
                        set x-pos 5
                        set width 2
                        set height 1
                    next
                end
            next
            edit 3
                set name "Top Usage LAN/DMZ"
                set vdom "root"
                set layout-type fixed
                set columns 12
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "source"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 2
                        set type fortiview
                        set x-pos 6
                        set width 6
                        set height 3
                        set fortiview-type "destination"
                        set fortiview-sort-by "sessions"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 3
                        set type fortiview
                        set y-pos 3
                        set width 6
                        set height 3
                        set fortiview-type "application"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 4
                        set type fortiview
                        set x-pos 6
                        set y-pos 3
                        set width 6
                        set height 3
                        set fortiview-type "website"
                        set fortiview-sort-by "sessions"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 4
                set name "Security"
                set vdom "root"
                set layout-type fixed
                set columns 12
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "compromisedHosts"
                        set fortiview-sort-by "verdict"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 2
                        set type fortiview
                        set x-pos 6
                        set width 6
                        set height 3
                        set fortiview-type "threats"
                        set fortiview-sort-by "threatLevel"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 3
                        set type fortiview
                        set y-pos 3
                        set width 6
                        set height 3
                        set fortiview-type "endpointDevices"
                        set fortiview-sort-by "vulnerabilities"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 5
                set name "System Events"
                set vdom "root"
                set layout-type fixed
                set columns 12
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "systemEvents"
                        set fortiview-sort-by "count"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 2
                        set type fortiview
                        set x-pos 6
                        set width 6
                        set height 3
                        set fortiview-type "systemEvents"
                        set fortiview-sort-by "eventLevel"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
        end
        set gui-vdom-menu-favorites "firewallpolicy" "interface" "vpn_tunnels" "addresses" "route_static" "vip" "device_definition" "dashboard_2"
        set password ENC SH2aiImBVnZqw9DLbp2f30IUIUij6mQtIMhf1+kvf4/usu1zAoXKk79BUL9K7A=
    next
end
config system sso-admin
end
config system ha
    set override disable
end
config system dns
    set primary 208.91.112.53
    set secondary 208.91.112.52
end
config system replacemsg-image
    edit "logo_fnet"
        set image-type gif
    next
    edit "logo_fguard_wf"
        set image-type gif
    next
    edit "logo_fw_auth"
    next
    edit "logo_v2_fnet"
    next
    edit "logo_v2_fguard_wf"
    next
    edit "logo_v2_fguard_app"
    next
end
config system replacemsg mail "email-av-fail"
end
config system replacemsg mail "email-block"
end
config system replacemsg mail "email-dlp-subject"
end
config system replacemsg mail "email-dlp-ban"
end
config system replacemsg mail "email-filesize"
end
config system replacemsg mail "email-file-filter"
end
config system replacemsg mail "partial"
end
config system replacemsg mail "smtp-block"
end
config system replacemsg mail "smtp-filesize"
end
config system replacemsg mail "email-decompress-limit"
end
config system replacemsg mail "smtp-decompress-limit"
end
config system replacemsg http "bannedword"
end
config system replacemsg http "url-block"
end
config system replacemsg http "urlfilter-err"
end
config system replacemsg http "infcache-block"
end
config system replacemsg http "http-block"
end
config system replacemsg http "http-filesize"
end
config system replacemsg http "http-dlp-ban"
end
config system replacemsg http "http-archive-block"
end
config system replacemsg http "http-contenttypeblock"
end
config system replacemsg http "https-invalid-cert-block"
end
config system replacemsg http "https-untrusted-cert-block"
end
config system replacemsg http "https-blacklisted-cert-block"
end
config system replacemsg http "http-client-block"
end
config system replacemsg http "http-client-filesize"
end
config system replacemsg http "http-client-bannedword"
end
config system replacemsg http "http-post-block"
end
config system replacemsg http "http-client-archive-block"
end
config system replacemsg http "switching-protocols-block"
end
config system replacemsg webproxy "deny"
end
config system replacemsg webproxy "user-limit"
end
config system replacemsg webproxy "auth-challenge"
end
config system replacemsg webproxy "auth-login-fail"
end
config system replacemsg webproxy "auth-group-info-fail"
end
config system replacemsg webproxy "http-err"
end
config system replacemsg webproxy "auth-ip-blackout"
end
config system replacemsg ftp "ftp-av-fail"
end
config system replacemsg ftp "ftp-dl-blocked"
end
config system replacemsg ftp "ftp-dl-filesize"
end
config system replacemsg ftp "ftp-dl-dlp-ban"
end
config system replacemsg ftp "ftp-explicit-banner"
end
config system replacemsg ftp "ftp-dl-archive-block"
end
config system replacemsg ftp "ftp-file-filter-block"
end
config system replacemsg nntp "nntp-av-fail"
end
config system replacemsg nntp "nntp-dl-blocked"
end
config system replacemsg nntp "nntp-dl-filesize"
end
config system replacemsg nntp "nntp-dlp-subject"
end
config system replacemsg nntp "nntp-dlp-ban"
end
config system replacemsg nntp "email-decompress-limit"
end
config system replacemsg fortiguard-wf "ftgd-block"
end
config system replacemsg fortiguard-wf "http-err"
end
config system replacemsg fortiguard-wf "ftgd-ovrd"
end
config system replacemsg fortiguard-wf "ftgd-quota"
end
config system replacemsg fortiguard-wf "ftgd-warning"
end
config system replacemsg spam "ipblocklist"
end
config system replacemsg spam "smtp-spam-dnsbl"
end
config system replacemsg spam "smtp-spam-feip"
end
config system replacemsg spam "smtp-spam-helo"
end
config system replacemsg spam "smtp-spam-emailblack"
end
config system replacemsg spam "smtp-spam-mimeheader"
end
config system replacemsg spam "reversedns"
end
config system replacemsg spam "smtp-spam-bannedword"
end
config system replacemsg spam "smtp-spam-ase"
end
config system replacemsg spam "submit"
end
config system replacemsg alertmail "alertmail-virus"
end
config system replacemsg alertmail "alertmail-block"
end
config system replacemsg alertmail "alertmail-nids-event"
end
config system replacemsg alertmail "alertmail-crit-event"
end
config system replacemsg alertmail "alertmail-disk-full"
end
config system replacemsg admin "pre_admin-disclaimer-text"
end
config system replacemsg admin "post_admin-disclaimer-text"
end
config system replacemsg auth "auth-disclaimer-page-1"
end
config system replacemsg auth "auth-disclaimer-page-2"
end
config system replacemsg auth "auth-disclaimer-page-3"
end
config system replacemsg auth "auth-reject-page"
end
config system replacemsg auth "auth-login-page"
end
config system replacemsg auth "auth-login-failed-page"
end
config system replacemsg auth "auth-token-login-page"
end
config system replacemsg auth "auth-token-login-failed-page"
end
config system replacemsg auth "auth-success-msg"
end
config system replacemsg auth "auth-challenge-page"
end
config system replacemsg auth "auth-keepalive-page"
end
config system replacemsg auth "auth-portal-page"
end
config system replacemsg auth "auth-password-page"
end
config system replacemsg auth "auth-fortitoken-page"
end
config system replacemsg auth "auth-next-fortitoken-page"
end
config system replacemsg auth "auth-email-token-page"
end
config system replacemsg auth "auth-sms-token-page"
end
config system replacemsg auth "auth-email-harvesting-page"
end
config system replacemsg auth "auth-email-failed-page"
end
config system replacemsg auth "auth-cert-passwd-page"
end
config system replacemsg auth "auth-guest-print-page"
end
config system replacemsg auth "auth-guest-email-page"
end
config system replacemsg auth "auth-success-page"
end
config system replacemsg auth "auth-block-notification-page"
end
config system replacemsg auth "auth-quarantine-page"
end
config system replacemsg auth "auth-qtn-reject-page"
end
config system replacemsg auth "auth-saml-page"
end
config system replacemsg sslvpn "sslvpn-login"
end
config system replacemsg sslvpn "sslvpn-header"
end
config system replacemsg sslvpn "sslvpn-limit"
end
config system replacemsg sslvpn "hostcheck-error"
end
config system replacemsg device-detection-portal "device-detection-failure"
end
config system replacemsg nac-quar "nac-quar-virus"
end
config system replacemsg nac-quar "nac-quar-dos"
end
config system replacemsg nac-quar "nac-quar-ips"
end
config system replacemsg nac-quar "nac-quar-dlp"
end
config system replacemsg nac-quar "nac-quar-admin"
end
config system replacemsg nac-quar "nac-quar-app"
end
config system replacemsg traffic-quota "per-ip-shaper-block"
end
config system replacemsg utm "virus-html"
end
config system replacemsg utm "client-virus-html"
end
config system replacemsg utm "virus-text"
end
config system replacemsg utm "dlp-html"
end
config system replacemsg utm "dlp-text"
end
config system replacemsg utm "appblk-html"
end
config system replacemsg utm "ipsblk-html"
end
config system replacemsg utm "ipsfail-html"
end
config system replacemsg utm "exe-text"
end
config system replacemsg utm "waf-html"
end
config system replacemsg utm "outbreak-prevention-html"
end
config system replacemsg utm "outbreak-prevention-text"
end
config system replacemsg utm "file-filter-text"
end
config system replacemsg utm "file-size-text"
end
config system replacemsg utm "internal-error-text"
end
config system replacemsg icap "icap-req-resp"
end
config system snmp sysinfo
end
config system autoupdate schedule
    set status disable
end
config system central-management
    set type fortiguard
end
config firewall internet-service-definition
end
config system cluster-sync
end
config system fortiguard
    set protocol udp
    set antispam-cache disable
    set webfilter-cache disable
    set sdns-server-ip "208.91.112.220" 
end
config ips global
end
config system email-server
    set server "notification.fortinet.net"
    set port 465
    set security smtps
end
config system session-helper
    edit 1
        set name pptp
        set protocol 6
        set port 1723
    next
    edit 2
        set name h323
        set protocol 6
        set port 1720
    next
    edit 3
        set name ras
        set protocol 17
        set port 1719
    next
    edit 4
        set name tns
        set protocol 6
        set port 1521
    next
    edit 5
        set name tftp
        set protocol 17
        set port 69
    next
    edit 6
        set name rtsp
        set protocol 6
        set port 554
    next
    edit 7
        set name rtsp
        set protocol 6
        set port 7070
    next
    edit 8
        set name rtsp
        set protocol 6
        set port 8554
    next
    edit 9
        set name ftp
        set protocol 6
        set port 21
    next
    edit 10
        set name mms
        set protocol 6
        set port 1863
    next
    edit 11
        set name pmap
        set protocol 6
        set port 111
    next
    edit 12
        set name pmap
        set protocol 17
        set port 111
    next
    edit 13
        set name sip
        set protocol 17
        set port 5060
    next
    edit 14
        set name dns-udp
        set protocol 17
        set port 53
    next
    edit 15
        set name rsh
        set protocol 6
        set port 514
    next
    edit 16
        set name rsh
        set protocol 6
        set port 512
    next
    edit 17
        set name dcerpc
        set protocol 6
        set port 135
    next
    edit 18
        set name dcerpc
        set protocol 17
        set port 135
    next
    edit 19
        set name mgcp
        set protocol 17
        set port 2427
    next
    edit 20
        set name mgcp
        set protocol 17
        set port 2727
    next
end
config system auto-install
    set auto-install-config enable
    set auto-install-image enable
end
config system ntp
    set ntpsync enable
end
config system object-tagging
    edit "default"
    next
end
config switch-controller traffic-policy
    edit "quarantine"
        set description "Rate control for quarantined traffic"
        set guaranteed-bandwidth 163840
        set guaranteed-burst 8192
        set maximum-burst 163840
        set cos-queue 0
        set id 1
    next
    edit "sniffer"
        set description "Rate control for sniffer mirrored traffic"
        set guaranteed-bandwidth 50000
        set guaranteed-burst 8192
        set maximum-burst 163840
        set cos-queue 0
        set id 2
    next
end
config system settings
    set gui-dynamic-routing enable
    set gui-threat-weight disable
    set gui-application-control disable
    set gui-endpoint-control disable
    set gui-wireless-controller disable
    set gui-switch-controller disable
    set gui-traffic-shaping disable
    set gui-wan-load-balancing disable
    set gui-antivirus disable
    set gui-webfilter disable
    set gui-dnsfilter disable
    set gui-fortiextender-controller disable
end
config system dhcp server
    edit 1
        set default-gateway 10.10.7.254
        set netmask 255.255.255.0
        set interface "Users-10.10.7"
        config ip-range
            edit 1
                set start-ip 10.10.7.1
                set end-ip 10.10.7.239
            next
        end
        set dns-server1 10.0.200.100
        set dns-server2 10.0.200.190
    next
    edit 2
        set dns-service default
        set default-gateway 10.20.7.254
        set netmask 255.255.255.0
        set interface "Banks-10.20.7"
        config ip-range
            edit 1
                set start-ip 10.20.7.1
                set end-ip 10.20.7.253
            next
        end
    next
    edit 3
        set lease-time 6048
        set dns-service default
        set default-gateway 10.30.7.254
        set netmask 255.255.255.0
        set interface "Guests"
        config ip-range
            edit 1
                set start-ip 10.30.7.1
                set end-ip 10.30.7.253
            next
        end
    next
end
config firewall address
    edit "FABRIC_DEVICE"
        set uuid e73c2a56-0f23-51f0-82db-5c87deeee402
        set comment "IPv4 addresses of Fabric Devices."
    next
    edit "none"
        set uuid 51a591e2-2ede-51ef-b96d-9b628c987a17
        set subnet 0.0.0.0 255.255.255.255
    next
    edit "__upg_autoupdate.opera.com"
        set uuid 51a5a4f2-2ede-51ef-e791-72d96bddd90f
        set type fqdn
        set fqdn "autoupdate.opera.com"
    next
    edit "__upg_google-play"
        set uuid 51a5b6ae-2ede-51ef-9b16-074755cd085e
        set type fqdn
        set fqdn "play.google.com"
    next
    edit "__upg_swscan.apple.com"
        set uuid 51a5c554-2ede-51ef-2ea3-d60b516afce8
        set type fqdn
        set fqdn "swscan.apple.com"
    next
    edit "__upg_update.microsoft.com"
        set uuid 51a5d36e-2ede-51ef-fccd-a694b471ba45
        set type fqdn
        set fqdn "update.microsoft.com"
    next
    edit "all"
        set uuid 5278b2e8-2ede-51ef-393d-70de0a42b734
    next
    edit "FIREWALL_AUTH_PORTAL_ADDRESS"
        set uuid 5278b9be-2ede-51ef-2c54-8d7854925224
        set visibility disable
    next
    edit "SSLVPN_TUNNEL_ADDR1"
        set uuid 527afb34-2ede-51ef-541b-026db3af8418
        set type iprange
        set associated-interface "ssl.root"
        set start-ip 10.212.134.200
        set end-ip 10.212.134.210
    next
    edit "login.microsoftonline.com"
        set uuid fec929d0-0f23-51f0-5a5e-ad00cce8ac20
        set type fqdn
        set fqdn "login.microsoftonline.com"
    next
    edit "login.microsoft.com"
        set uuid fec933b2-0f23-51f0-271f-408646e9f972
        set type fqdn
        set fqdn "login.microsoft.com"
    next
    edit "login.windows.net"
        set uuid fec93c68-0f23-51f0-cca5-e532c866220c
        set type fqdn
        set fqdn "login.windows.net"
    next
    edit "gmail.com"
        set uuid fec94500-0f23-51f0-5cb3-708f2c113150
        set type fqdn
        set fqdn "gmail.com"
    next
    edit "wildcard.google.com"
        set uuid fec94f1e-0f23-51f0-830a-8dd2c4ad6541
        set type fqdn
        set fqdn "*.google.com"
    next
    edit "wildcard.dropbox.com"
        set uuid fec95c34-0f23-51f0-0b27-76d085c85c12
        set type fqdn
        set fqdn "*.dropbox.com"
    next
    edit "10.10.7.0/24"
        set uuid f92a4dd6-0f25-51f0-36c5-3474186b212e
        set allow-routing enable
        set subnet 10.10.7.0 255.255.255.0
    next
    edit "VPN_HO_remote_subnet_1"
        set uuid f932710a-0f25-51f0-4635-b22494849984
        set allow-routing enable
    next
    edit "VPN_HO_remote_gateway"
        set uuid f954e9f6-0f25-51f0-7325-c8622a6056b1
        set comment "VPN: VPN_HO (Created by VPN wizard)"
        set allow-routing enable
        set subnet 213.131.47.178 255.255.255.255
    next
    edit "Georgia"
        set uuid cf7511ae-0f27-51f0-e5dd-ce65ce1c20f1
        set type geography
        set country "GE"
    next
    edit "Banks-10.20.7 address"
        set uuid 41de6a2e-0f2d-51f0-8658-46e0128f1d51
        set type interface-subnet
        set subnet 10.20.7.254 255.255.255.0
        set interface "Banks-10.20.7"
    next
    edit "10.20.7.0/24"
        set uuid 40579f7c-0f32-51f0-e4ee-a19bcafd73c0
        set allow-routing enable
        set subnet 10.20.7.0 255.255.255.0
    next
    edit "10.30.7.0/24"
        set uuid 5a3c21f6-0f32-51f0-91b3-34d97386fdec
        set allow-routing enable
        set subnet 10.30.7.0 255.255.255.0
    next
end
config firewall multicast-address
    edit "all"
        set start-ip 224.0.0.0
        set end-ip 239.255.255.255
    next
    edit "all_hosts"
        set start-ip 224.0.0.1
        set end-ip 224.0.0.1
    next
    edit "all_routers"
        set start-ip 224.0.0.2
        set end-ip 224.0.0.2
    next
    edit "Bonjour"
        set start-ip 224.0.0.251
        set end-ip 224.0.0.251
    next
    edit "EIGRP"
        set start-ip 224.0.0.10
        set end-ip 224.0.0.10
    next
    edit "OSPF"
        set start-ip 224.0.0.5
        set end-ip 224.0.0.6
    next
end
config firewall address6
    edit "SSLVPN_TUNNEL_IPv6_ADDR1"
        set uuid 527b0bb0-2ede-51ef-736a-814fc446ea0e
        set ip6 fdff:ffff::/120
    next
    edit "all"
        set uuid 59fde2d6-2ede-51ef-a9bc-3b06ef872840
    next
    edit "none"
        set uuid 59fe087e-2ede-51ef-48fc-d48ec0c4bc25
        set ip6 ::/128
    next
end
config firewall multicast-address6
    edit "all"
        set ip6 ff00::/8
    next
end
config firewall addrgrp
    edit "Microsoft Office 365"
        set uuid fec96756-0f23-51f0-111f-dd306f96710d
        set member "login.microsoftonline.com" "login.microsoft.com" "login.windows.net"
    next
    edit "G Suite"
        set uuid fec97714-0f23-51f0-dab9-b06f4e08d03a
        set member "gmail.com" "wildcard.google.com"
    next
    edit "VPN_HO_local"
        set uuid f92edff4-0f25-51f0-2d96-ecc2a095d5aa
        set member "10.10.7.0/24" "10.20.7.0/24" "10.30.7.0/24"
        set allow-routing enable
    next
    edit "VPN_HO_remote"
        set uuid f93701fc-0f25-51f0-da3d-f8a3a3dc65fb
        set member "VPN_HO_remote_subnet_1"
        set comment "VPN: VPN_HO (Created by VPN wizard)"
        set allow-routing enable
    next
end
config firewall wildcard-fqdn custom
    edit "google-play"
        set uuid e7c483e2-0f23-51f0-2ad7-8e3e0a7a7aee
        set wildcard-fqdn "*play.google.com"
    next
    edit "update.microsoft.com"
        set uuid e7c488d8-0f23-51f0-c15a-1ae263b89ee8
        set wildcard-fqdn "*update.microsoft.com"
    next
    edit "swscan.apple.com"
        set uuid e7c48da6-0f23-51f0-f25e-d7e72522cdc7
        set wildcard-fqdn "*swscan.apple.com"
    next
    edit "autoupdate.opera.com"
        set uuid e7c4926a-0f23-51f0-b91f-d064414cb308
        set wildcard-fqdn "*autoupdate.opera.com"
    next
    edit "adobe"
        set uuid 52a40fc4-2ede-51ef-df6c-2c69dbf80613
        set wildcard-fqdn "*.adobe.com"
    next
    edit "Adobe Login"
        set uuid 52a41654-2ede-51ef-03c2-15a0815d6059
        set wildcard-fqdn "*.adobelogin.com"
    next
    edit "android"
        set uuid 52a41b36-2ede-51ef-d447-a224b72a839b
        set wildcard-fqdn "*.android.com"
    next
    edit "apple"
        set uuid 52a41ff0-2ede-51ef-4194-90ad19fcabce
        set wildcard-fqdn "*.apple.com"
    next
    edit "appstore"
        set uuid 52a42496-2ede-51ef-5fa4-229fd2e78629
        set wildcard-fqdn "*.appstore.com"
    next
    edit "auth.gfx.ms"
        set uuid 52a42946-2ede-51ef-36ff-251085363280
        set wildcard-fqdn "*.auth.gfx.ms"
    next
    edit "citrix"
        set uuid 52a42f9a-2ede-51ef-5ab2-6452202def11
        set wildcard-fqdn "*.citrixonline.com"
    next
    edit "dropbox.com"
        set uuid 52a4347c-2ede-51ef-b546-2953f6a0b7e8
        set wildcard-fqdn "*.dropbox.com"
    next
    edit "eease"
        set uuid 52a4392c-2ede-51ef-1b3e-e157747a1eb5
        set wildcard-fqdn "*.eease.com"
    next
    edit "firefox update server"
        set uuid 52a43ddc-2ede-51ef-c304-542d1d4f53a6
        set wildcard-fqdn "aus*.mozilla.org"
    next
    edit "fortinet"
        set uuid 52a44296-2ede-51ef-c32a-23aa1ec695c6
        set wildcard-fqdn "*.fortinet.com"
    next
    edit "googleapis.com"
        set uuid 52a448f4-2ede-51ef-fba2-070ef08518a3
        set wildcard-fqdn "*.googleapis.com"
    next
    edit "google-drive"
        set uuid 52a44dd6-2ede-51ef-04d8-21cfda7bc41d
        set wildcard-fqdn "*drive.google.com"
    next
    edit "google-play2"
        set uuid 52a4527c-2ede-51ef-41a5-5510e72fb311
        set wildcard-fqdn "*.ggpht.com"
    next
    edit "google-play3"
        set uuid 52a4572c-2ede-51ef-9af0-4c518ef6c5d3
        set wildcard-fqdn "*.books.google.com"
    next
    edit "Gotomeeting"
        set uuid 52a45be6-2ede-51ef-a61b-b9d5cc327c6a
        set wildcard-fqdn "*.gotomeeting.com"
    next
    edit "icloud"
        set uuid 52a46762-2ede-51ef-eb66-0fb43e96d55f
        set wildcard-fqdn "*.icloud.com"
    next
    edit "itunes"
        set uuid 52a46e10-2ede-51ef-5d0a-522ab0826c1b
        set wildcard-fqdn "*itunes.apple.com"
    next
    edit "microsoft"
        set uuid 52a47306-2ede-51ef-6cfe-4186c1f2bf76
        set wildcard-fqdn "*.microsoft.com"
    next
    edit "skype"
        set uuid 52a477d4-2ede-51ef-bf6a-a23b7caff5dd
        set wildcard-fqdn "*.messenger.live.com"
    next
    edit "softwareupdate.vmware.com"
        set uuid 52a47c98-2ede-51ef-8785-473c13db8205
        set wildcard-fqdn "*.softwareupdate.vmware.com"
    next
    edit "verisign"
        set uuid 52a4815c-2ede-51ef-8187-9919399f96d4
        set wildcard-fqdn "*.verisign.com"
    next
    edit "Windows update 2"
        set uuid 52a48634-2ede-51ef-9114-0b07af69af52
        set wildcard-fqdn "*.windowsupdate.com"
    next
    edit "live.com"
        set uuid 52a48af8-2ede-51ef-52d5-99048e3a510f
        set wildcard-fqdn "*.live.com"
    next
end
config firewall service category
    edit "General"
        set comment "General services."
    next
    edit "Web Access"
        set comment "Web access."
    next
    edit "File Access"
        set comment "File access."
    next
    edit "Email"
        set comment "Email services."
    next
    edit "Network Services"
        set comment "Network services."
    next
    edit "Authentication"
        set comment "Authentication service."
    next
    edit "Remote Access"
        set comment "Remote access."
    next
    edit "Tunneling"
        set comment "Tunneling service."
    next
    edit "VoIP, Messaging & Other Applications"
        set comment "VoIP, messaging, and other applications."
    next
    edit "Web Proxy"
        set comment "Explicit web proxy."
    next
end
config firewall service custom
    edit "DNS"
        set category "Network Services"
        set tcp-portrange 53
        set udp-portrange 53
    next
    edit "HTTP"
        set category "Web Access"
        set tcp-portrange 80
    next
    edit "HTTPS"
        set category "Web Access"
        set tcp-portrange 443
    next
    edit "IMAP"
        set category "Email"
        set tcp-portrange 143
    next
    edit "IMAPS"
        set category "Email"
        set tcp-portrange 993
    next
    edit "LDAP"
        set category "Authentication"
        set tcp-portrange 389
    next
    edit "DCE-RPC"
        set category "Remote Access"
        set tcp-portrange 135
        set udp-portrange 135
    next
    edit "POP3"
        set category "Email"
        set tcp-portrange 110
    next
    edit "POP3S"
        set category "Email"
        set tcp-portrange 995
    next
    edit "SAMBA"
        set category "File Access"
        set tcp-portrange 139
    next
    edit "SMTP"
        set category "Email"
        set tcp-portrange 25
    next
    edit "SMTPS"
        set category "Email"
        set tcp-portrange 465
    next
    edit "KERBEROS"
        set category "Authentication"
        set tcp-portrange 88 464
        set udp-portrange 88 464
    next
    edit "LDAP_UDP"
        set category "Authentication"
        set udp-portrange 389
    next
    edit "SMB"
        set category "File Access"
        set tcp-portrange 445
    next
    edit "ALL"
        set category "General"
        set protocol IP
    next
    edit "ALL_TCP"
        set category "General"
        set tcp-portrange 1-65535
    next
    edit "ALL_UDP"
        set category "General"
        set udp-portrange 1-65535
    next
    edit "ALL_ICMP"
        set category "General"
        set protocol ICMP
        unset icmptype
    next
    edit "ALL_ICMP6"
        set category "General"
        set protocol ICMP6
        unset icmptype
    next
    edit "GRE"
        set category "Tunneling"
        set protocol IP
        set protocol-number 47
    next
    edit "AH"
        set category "Tunneling"
        set protocol IP
        set protocol-number 51
    next
    edit "ESP"
        set category "Tunneling"
        set protocol IP
        set protocol-number 50
    next
    edit "AOL"
        set visibility disable
        set tcp-portrange 5190-5194
    next
    edit "BGP"
        set category "Network Services"
        set tcp-portrange 179
    next
    edit "DHCP"
        set category "Network Services"
        set udp-portrange 67-68
    next
    edit "FINGER"
        set visibility disable
        set tcp-portrange 79
    next
    edit "FTP"
        set category "File Access"
        set tcp-portrange 21
    next
    edit "FTP_GET"
        set category "File Access"
        set tcp-portrange 21
    next
    edit "FTP_PUT"
        set category "File Access"
        set tcp-portrange 21
    next
    edit "GOPHER"
        set visibility disable
        set tcp-portrange 70
    next
    edit "H323"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 1720 1503
        set udp-portrange 1719
    next
    edit "IKE"
        set category "Tunneling"
        set udp-portrange 500 4500
    next
    edit "Internet-Locator-Service"
        set visibility disable
        set tcp-portrange 389
    next
    edit "IRC"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 6660-6669
    next
    edit "L2TP"
        set category "Tunneling"
        set tcp-portrange 1701
        set udp-portrange 1701
    next
    edit "NetMeeting"
        set visibility disable
        set tcp-portrange 1720
    next
    edit "NFS"
        set category "File Access"
        set tcp-portrange 111 2049
        set udp-portrange 111 2049
    next
    edit "NNTP"
        set visibility disable
        set tcp-portrange 119
    next
    edit "NTP"
        set category "Network Services"
        set tcp-portrange 123
        set udp-portrange 123
    next
    edit "OSPF"
        set category "Network Services"
        set protocol IP
        set protocol-number 89
    next
    edit "PC-Anywhere"
        set category "Remote Access"
        set tcp-portrange 5631
        set udp-portrange 5632
    next
    edit "PING"
        set category "Network Services"
        set protocol ICMP
        set icmptype 8
        unset icmpcode
    next
    edit "TIMESTAMP"
        set protocol ICMP
        set visibility disable
        set icmptype 13
        unset icmpcode
    next
    edit "INFO_REQUEST"
        set protocol ICMP
        set visibility disable
        set icmptype 15
        unset icmpcode
    next
    edit "INFO_ADDRESS"
        set protocol ICMP
        set visibility disable
        set icmptype 17
        unset icmpcode
    next
    edit "ONC-RPC"
        set category "Remote Access"
        set tcp-portrange 111
        set udp-portrange 111
    next
    edit "PPTP"
        set category "Tunneling"
        set tcp-portrange 1723
    next
    edit "QUAKE"
        set visibility disable
        set udp-portrange 26000 27000 27910 27960
    next
    edit "RAUDIO"
        set visibility disable
        set udp-portrange 7070
    next
    edit "REXEC"
        set visibility disable
        set tcp-portrange 512
    next
    edit "RIP"
        set category "Network Services"
        set udp-portrange 520
    next
    edit "RLOGIN"
        set visibility disable
        set tcp-portrange 513:512-1023
    next
    edit "RSH"
        set visibility disable
        set tcp-portrange 514:512-1023
    next
    edit "SCCP"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 2000
    next
    edit "SIP"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 5060
        set udp-portrange 5060
    next
    edit "SIP-MSNmessenger"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 1863
    next
    edit "SNMP"
        set category "Network Services"
        set tcp-portrange 161-162
        set udp-portrange 161-162
    next
    edit "SSH"
        set category "Remote Access"
        set tcp-portrange 22
    next
    edit "SYSLOG"
        set category "Network Services"
        set udp-portrange 514
    next
    edit "TALK"
        set visibility disable
        set udp-portrange 517-518
    next
    edit "TELNET"
        set category "Remote Access"
        set tcp-portrange 23
    next
    edit "TFTP"
        set category "File Access"
        set udp-portrange 69
    next
    edit "MGCP"
        set visibility disable
        set udp-portrange 2427 2727
    next
    edit "UUCP"
        set visibility disable
        set tcp-portrange 540
    next
    edit "VDOLIVE"
        set visibility disable
        set tcp-portrange 7000-7010
    next
    edit "WAIS"
        set visibility disable
        set tcp-portrange 210
    next
    edit "WINFRAME"
        set visibility disable
        set tcp-portrange 1494 2598
    next
    edit "X-WINDOWS"
        set category "Remote Access"
        set tcp-portrange 6000-6063
    next
    edit "PING6"
        set protocol ICMP6
        set visibility disable
        set icmptype 128
        unset icmpcode
    next
    edit "MS-SQL"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 1433 1434
    next
    edit "MYSQL"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 3306
    next
    edit "RDP"
        set category "Remote Access"
        set tcp-portrange 3389
    next
    edit "VNC"
        set category "Remote Access"
        set tcp-portrange 5900
    next
    edit "DHCP6"
        set category "Network Services"
        set udp-portrange 546 547
    next
    edit "SQUID"
        set category "Tunneling"
        set tcp-portrange 3128
    next
    edit "SOCKS"
        set category "Tunneling"
        set tcp-portrange 1080
        set udp-portrange 1080
    next
    edit "WINS"
        set category "Remote Access"
        set tcp-portrange 1512
        set udp-portrange 1512
    next
    edit "RADIUS"
        set category "Authentication"
        set udp-portrange 1812 1813
    next
    edit "RADIUS-OLD"
        set visibility disable
        set udp-portrange 1645 1646
    next
    edit "CVSPSERVER"
        set visibility disable
        set tcp-portrange 2401
        set udp-portrange 2401
    next
    edit "AFS3"
        set category "File Access"
        set tcp-portrange 7000-7009
        set udp-portrange 7000-7009
    next
    edit "TRACEROUTE"
        set category "Network Services"
        set udp-portrange 33434-33535
    next
    edit "RTSP"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 554 7070 8554
        set udp-portrange 554
    next
    edit "MMS"
        set visibility disable
        set tcp-portrange 1755
        set udp-portrange 1024-5000
    next
    edit "NONE"
        set visibility disable
        set tcp-portrange 0
    next
    edit "webproxy"
        set proxy enable
        set category "Web Proxy"
        set protocol ALL
        set tcp-portrange 0-65535:0-65535
    next
end
config firewall service group
    edit "Email Access"
        set member "DNS" "IMAP" "IMAPS" "POP3" "POP3S" "SMTP" "SMTPS"
    next
    edit "Web Access"
        set member "DNS" "HTTP" "HTTPS"
    next
    edit "Windows AD"
        set member "DCE-RPC" "DNS" "KERBEROS" "LDAP" "LDAP_UDP" "SAMBA" "SMB"
    next
    edit "Exchange Server"
        set member "DCE-RPC" "DNS" "HTTPS"
    next
end
config vpn certificate ca
end
config vpn certificate local
    edit "Fortinet_CA_SSL"
        set password ENC /YB5YUSbvUTVuWiYP1HDkjteuBnh638NwhPJmaGxXuElHzVRG2WUW3vFaWiKV7/AhUaWdqDz5ZT+oAz4O+qf05Fnfe1gCHvptofEA/dEcARmraL5tJzfBarXlm4kMJFEhc8Oc3xLEQMslV4yS9JJM9C9SDy/chkvJVaEiYdEaPV7XFQj0VxQyTC3rHenYZiypq647w==
        set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1718871785
    next
    edit "Fortinet_CA_Untrusted"
        set password ENC DT7YakmlmaUyMEGHwonmb21N+lBa2PQ0XiFYmw71s4BZL1h/KbgcovmKfoeQ1+w9Gvk3QVFibzS4TrE6RvQmwHDK7zXqrIi39jaRfz2E5qiqbYhyhC3uIUtq/TDp2eUU5OM1P5jxxP94SQDc3kEf1CYMKEM3tZu6Ax2KAyPA4iJz7AXxwHW+BrlPvy2DtGjAHUNDww==
        set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----
MIID7DCCAtSgAwIBAgIEAw6U8jANBgkqhkiG9w0BAQsFADCBrjELMAkGA1UEBhMC
VVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCVN1bm55dmFsZTERMA8G
A1UECgwIRm9ydGluZXQxHjAcBgNVBAsMFUNlcnRpZmljYXRlIEF1dGhvcml0eTEe
MBwGA1UEAwwVRm9ydGluZXQgVW50cnVzdGVkIENBMSMwIQYJKoZIhvcNAQkBFhRz
dXBwb3J0QGZvcnRpbmV0LmNvbTAeFw0yNDA2MjAwODIyNDJaFw0zNDA2MjEwODIy
NDJaMIGuMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UE
BwwJU3Vubnl2YWxlMREwDwYDVQQKDAhGb3J0aW5ldDEeMBwGA1UECwwVQ2VydGlm
aWNhdGUgQXV0aG9yaXR5MR4wHAYDVQQDDBVGb3J0aW5ldCBVbnRydXN0ZWQgQ0Ex
IzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQuY29tMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtsda+YdwcjjqlPZrYKS6b/h6YMdJ8+aCnIa
Qa2P7EjA1kBmpRne432DGGSYYr+Dw06+PBGopupncX6lYcWE6NruFi8aDZwH7nkt
TzQNrQe7hhmY7cR0ebADqwR5HsVNsuziOl8I7++nM0yQ8VjSHX1C86Pc7G/EfJ79
qAzdLoOLX6xuNT7L2ZzUVlJJr/6Eff0Mlx/+Ss25BG5zUj745gOF7/oanV9HoTN9
yDfKm3Ngng0OM5JE+RnSwAcG3KIQ7iDxLk9ClzLFLeJBqqsJJJBH/ttFH3rAL7Zy
USf4uMIoa313O5QMDpLLbCkLhwQcZBiGh5w89QZVrlqBuvVmdQIDAQABoxAwDjAM
BgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBWOLr0OxyAb5A0h/59dzsp
6RX+nNrfb/6Q3D5vV5JieHqIlVG3Wufed1E/+WBuakpLylIJWGLfUcFG1RM1UBUK
ZcTHatjYfdsiXmgBOfm2qdXH3bXL3piSwvaIWUOR8A+HwdZPmc/iyDOrbHV3XcOZ
6c05DPinwVANU/X1GcawZ4JcrKNPxk70Rnnt56GCqz/6T9aX8FYzINgmGEC8JlGF
cMb1mMScCMEBkkvYcEKih1OXK+wM4RREhBJsak9Wtn4Mn2D4dGj62S00lipF43A6
7cVPvyQqmB31BzHHnHNV3gm/73YrGElmlu9XRHl1eBb8QPm9sy4SvCbgLjqnMZ3/
-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1718871785
    next
    edit "Fortinet_SSL"
        set password ENC 1N41bjekPEK74aC8LBCcYAwuZtRwukX/DHCeUo2mu2cHoi/fluGPVeBegDdCKovEQtqYwdUvRNY0EUiDi0Xpdp32ZsWvfES98rR/42VzWSIVLQouxiktGg64BCqOLpOjSG2tqHGnOYtoouMNJQ65JAWkLKc8x1xceQx3InruFV9KCD28LWBXWYbsoCZhoYjc16fA+Q==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----
MIIDxzCCAq+gAwIBAgIEELymjDANBgkqhkiG9w0BAQsFADCBnTELMAkGA1UEBhMC
VVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCVN1bm55dmFsZTERMA8G
A1UECgwIRm9ydGluZXQxEjAQBgNVBAsMCUZvcnRpR2F0ZTEZMBcGA1UEAwwQRkdU
NTBFNTYxODAzOTkxMzEjMCEGCSqGSIb3DQEJARYUc3VwcG9ydEBmb3J0aW5ldC5j
b20wHhcNMjQwNjIwMDgyMjQ2WhcNMzQwNjIxMDgyMjQ2WjCBnTELMAkGA1UEBhMC
VVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCVN1bm55dmFsZTERMA8G
A1UECgwIRm9ydGluZXQxEjAQBgNVBAsMCUZvcnRpR2F0ZTEZMBcGA1UEAwwQRkdU
NTBFNTYxODAzOTkxMzEjMCEGCSqGSIb3DQEJARYUc3VwcG9ydEBmb3J0aW5ldC5j
b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9BvHH5gsL6ojPzSOt
vRcXC0bZKuwVoTxM41X76aLcvk36jsF3o494iWeIwBENJXgDSiLXQQ+UMQLZ+nAF
wkea58wMSKhOnjjOOwD0CTNZT4xRW25EvwTRs3Iq17igsjUdjpIbxWvOFNCA+9y0
uqCExaCbP8dKKiOzAihQdwQ3i/mQA4N2dRaUeBW5s/dLhzatr+QQLX8RSS9jk5B1
YZWZqjxDKA2umZcTFdfuuAzHVFTcWY2oGN/uwkL0B6S9eVh4WDDs45rL4wj+t5E6
w1AgNjAuTrFvhF4tQlKIMQanuniVuWS/up044NFlvA9dw+JBLKH+7Sut0tvMhc/V
ZDN3AgMBAAGjDTALMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBAKeCGxcX
dxfGO1chjRXuXmbvRfDHppp1YiYhIpYetKDzhqNzBRsxuu21/6Nz1bi2DWfP7g+t
F3jeQ9gw9cTvOuHu8HgvHEuNwRsJfT6yaOYTIvxQnBUCB8/Tlc4bA4xfnqmhjoAb
nkf4DH+duFQvbsWSKM9zn+bRRZ+//o8foR1lVocl403v/xp/LjErCj9Cib42/9A+
ArVupwbfKwR2qX82pmhxvQoFJWO80riRLFOjehd1bDUnOI69apc6hTTJlxn1mPhy
Tb5NK1RCVK26kcAJVQ1klIstikdggBZNxZDfpOuTCAcOxusHrJShCActkFwvVsLg
8cnQD4cj+D6ZcaE=
-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1718871785
    next
    edit "Fortinet_SSL_RSA1024"
        set password ENC Lxr2dn4yQc+RLet8OzUZyKZTYCDibVUyc4Z6Pl6eNjkI9yFPxBQDtyTU6cUPxpCefVC5XFp9ku97MNjpR2wSLL3DejaTWAygyxdgEvd6C8UadcIIQVu+gf0pUkesnk8FZ9IcadPJ0h3U5HY237HphZ8aWA1Vrnr9Q8Ix0PA055xu0XI6BRbI/gPH2kqaQXfT1/eYQA==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1718871785
    next
    edit "Fortinet_SSL_RSA2048"
        set password ENC dQOVFTJBHo+5m9XFUtGR6y8sIRmxvrqoax6u1BD8taKGQ7MeoBJB6sORzQTDr3dYP0rMSwoF4fERuyYEyyWWt+BQ2W1hgOV45S8+QT6+BkJgS1VYY15DXkolCEF98yY7r4Dtnj3GbF/rFYaqnvtocHsSSkU4raeeIyB/MvLNc1Nu2Gd2c/u7qzCmvTeP5TcBOvnnzg==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----
MIIDxzCCAq+gAwIBAgIEb9zNFTANBgkqhkiG9w0BAQsFADCBnTELMAkGA1UEBhMC
VVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCVN1bm55dmFsZTERMA8G
A1UECgwIRm9ydGluZXQxEjAQBgNVBAsMCUZvcnRpR2F0ZTEZMBcGA1UEAwwQRkdU
NTBFNTYxODAzOTkxMzEjMCEGCSqGSIb3DQEJARYUc3VwcG9ydEBmb3J0aW5ldC5j
b20wHhcNMjQwNjIwMDgyMjQ5WhcNMzQwNjIxMDgyMjQ5WjCBnTELMAkGA1UEBhMC
VVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCVN1bm55dmFsZTERMA8G
A1UECgwIRm9ydGluZXQxEjAQBgNVBAsMCUZvcnRpR2F0ZTEZMBcGA1UEAwwQRkdU
NTBFNTYxODAzOTkxMzEjMCEGCSqGSIb3DQEJARYUc3VwcG9ydEBmb3J0aW5ldC5j
b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC29j76AOO0p4Db9mhS
EDgGJQLwyS/RqrudGiIQiDVRK0KkA/q6RYCHdFwv3RNrfbuFyT0+UBUUY/ekdC7c
nYqnRfLNQt35lcyTzY7rGM10sUAfrRhaw82HWaCjCOWw1r8u+L6zF4ljJAmgxvZp
E7UDybTtW3Vnl43npKLlydFn3VY/TBYzL0cKpPo7p5hwKq1+17Z02vfRWs7tRGjO
eC69XRbW4uaqx1oLQeCS5KPkT1/mJ5XaeTuULEDI/jyH0kJEY7XLil1fYQ5hzHo3
7w4ErasP5l+jfMAjtwXEJMNJUamEqPJuOHSY5wGUO5Xb8+3Ba0s3TU59PgiKlxXM
IB37AgMBAAGjDTALMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBABziczEq
iutvqHNwgmSUDurHHKTOSGoIiorIAxarlvGwgYepYOqkRwqbeHJB6pGQl9O6zTWq
LwroFd82kmkiWeSERSc+Yo20LAAsN6kzFMvIFWZAl3alOnjaoWDRPq852LgXxdpM
td9sQzBP9RAe546ER5BfNAvB6TDDVURrxoGB6c/Se+4ZDGCAKaVO8eVVME4fIhBw
h/gCIayF9fzNNcY2NN4PC82CkCigXZmLSPBCyZhDCX4oEKZDiStqRV6AGdj/sldM
AQjavsYFmpa7ZyVFK+qyWa7ObyLkpCSdwPxKd68l1ildzSlSNk8VZ+AFqUkslWaH
rin3d93dQKBvc38=
-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1718871785
    next
    edit "Fortinet_SSL_RSA4096"
        set password ENC xUn0e9jBjXs6CpQ1B8r0/xfSINfUqSHHUpNZ6imFtIzF3tLSM3AHV2hz/ZnrcOhExapPcHTEFM3uRAVetr8mEsKDF8DOdprXkwS8VN6LtSgnn9UQGEK/HDYF0JEJuT+B/5if3rpRkPT9D4wyT2DZM8uUxRuHoahJNMwEj5NqKqACzNr6v85FJpF0YpRg6z6iPM3Bew==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1743530732
    next
    edit "Fortinet_SSL_DSA1024"
        set password ENC UrPV87hD7Px7b+a6ku32irUVHSlfKXy0ASrXrBpHa40/kpifD9ZhoX8lRCyyefzOpey4Zv+hjkGeBS/MMS5K+vchrvaRNTRMw7bC8/Bm7GlVAUCiG7CcyjJEm70MQ/MAoMrM0+jdRG87fi4ittAYGD+Abk3hZLmSAdNvZLUjMWE09n6qIamw3qEussLhDG8ob5/J+Q==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1718871785
    next
    edit "Fortinet_SSL_DSA2048"
        set password ENC fyGSOICMvDLjvj2KcIMD4LnkOtHy2tCcL4FYxzoAo+b+DsQVOLmsFjVIctVTBkJYKLPHtt/hXIxhs1inqOG5wxfX99DiLG0Sj4g9MFXTF40zyZC9QxRMgP0vLXfbDKiqRlsZ++S+ARONnwGTMP/E36AXWhqSyhyrqn/X9d3BKQDSnPXyGdHA5RwHR9LeVASph2/sEw==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIICxDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQISqrpnV910skCAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECG3NhJlPJlZmBIICcKiQ2aTmHWqZ
4DNIj5I+ozLxM5u1LEFl5jGoNU0g7zbBwiNXhvM12lesi9BDOMlQ4egsSybnfvsK
gvUs9lVDMnGP5NCNyCJNyYukIw3ywjXyH28+ORKX/JCj+ah1Iph8MEcqI0d1gEqX
+BWYt6Gnk8Dsdg20yS8KJ7nRaffMU9t5nroc+XwGUkz5v8JXZxpvRRIlZtD6yXTD
fbJeaOKHLPoSR9cP3vVthO/BKclZEASHUfb4qpm+VjGuKXPPKZFnJF7OV7nnyX8p
75ROZHUdgPyasBH1GSaf5noqe3VNnrijKoayt2TkibktskkE44EkBiNj2kJwPYsn
Vrmodf6cY0t6RPtTqfGzoooGJCJCyWzb0dqQ/RNpzuDOjsf/VGfFHuN5X5QC/uR3
DTh3fiEzoGoviNNEU57Jl0ox/ZYXDHME67IstpwyBITwqtt4NMtDFbyro9evJgfY
+P+QSiMvN1ixTbQu20BVGwhvFTD9JzUp/JCpJvdjsRUD5zpyyKpwACJxpOQFGP3/
xXT4qZEMRGjvEPd8GPP1yTuz3U4kP0aUcIQwshyaHjUuhd9zWpMvKoy3vpYx77Yk
Vg5Xzb/tclr1TKa8H7SFM9Pv6jiupg1ANH3WB/Op5JeX1nVc6QZWosLi2ypnBqPW
JrnVTiY5HIQIqgUxcwc24TCUX0vXDzGphiRD9xt2UXTlZPS+S8uwMKYenzArcf8O
gCJ4ICrBgK5IAw0bhLqF9MKdkQeb+7bUXAJ9CwN40QGDhPkyeTvx9HKXc+xMLtUg
apbPrGnbXPf1NM5tu0ZaxiqLk1+qHVlQPZBkXGPtKTCvxA37AeNGhA==
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----
MIIFLDCCBNKgAwIBAgIEEpwMxzALBglghkgBZQMEAwIwgZ0xCzAJBgNVBAYTAlVT
MRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUxETAPBgNV
BAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMMEEZHVDUw
RTU2MTgwMzk5MTMxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQuY29t
MB4XDTI0MDYyMDA4MjI1OFoXDTM0MDYyMTA4MjI1OFowgZ0xCzAJBgNVBAYTAlVT
MRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUxETAPBgNV
BAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMMEEZHVDUw
RTU2MTgwMzk5MTMxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQuY29t
MIIDRzCCAjkGByqGSM44BAEwggIsAoIBAQCPo/gvmwqZfCWjvay1YluyuCAXvw4Q
wHhcyo/NiYTvLdq+4lSJJz04PtmYlpFzU4VyWrJTNHTu8Rl72y6mj9vd9EqCMJod
Yz6xSIDd2Xhwv7+ifTdOLXO78ZC7G+E72p9JQJHRDbyvrolETF1mcvxJvEvM3rqg
txJUhc0CeSB+9P2DEwIED0EvrAVDXvRW6Qi3/p14xeQXyvIyC5tfTpF1CyMVVjgD
b20o5jBmTqSJjXdA1+ojqU6UaVQZwLDzaBcG+9KPYgdzDkLgdgyr+xSntGyq1vRT
C4G2O+ef9+FD72gHkw5Axp/flkLHKZRpD+H63PZk4IPdhip22br4WjMdAiEAuxBz
ZKnA9IgPvRvX26I8OAoH/ggOUUUyykEdVOcxWeECggEAOBiz5iH0Yn+tUJOIn8ot
OeYbMcZGO5t1R0V0BCwUlFxkCgassJSxIjotIxCP4ojnaPQ9I6VEOQrCtNYF3RLA
gkl/p/q9me0B5YbWj75ED66W3o0pR3siHyvSraGUAofG1anT3PY2rms2We6ayDIi
jX1lKZe0CatYwTDc6TychjYLOfycLnMi6uig9CY6XTd3JuUgmmBXPfuhnTrw7gLU
67N5gOMFhcxNWpJltavdls8j5DBLXcjaaaK/Ztcfu1FcoFx1/vwxY6V5trmGH5s2
4sYhYs4OIKY8inWL1fMF282/hCqtA3xMfT7WYZT1xCPC9PBqnqx79/9BZK3Jl0x9
0AOCAQYAAoIBAQCNlSXslGVg2/JA3v0aLgKBbDgz2Vpmr888QP+MY42QRL/XAm/S
2fMc0lMT9jRDyDTUqj9ZOyi2eTt/VpMar1t4BzM/YSau4tN92iSNiU/ISN2qxMNa
hq93p62A6Sm4m/VrVI29Yn3cfj3ir7RR9ANzUCb8ZyMyhJ2vY9heM5wLu7uYTzSK
F7XUzUVxQwz3lMQDGV1MBdqflEFV4jQEFJXBCofkgabik2BU9fS5+L81P8rRJtJW
MKPFwXHvd6280iWiBOLbLlnKdfDs9EyrBnIbDYWrFlTvWcIjKdbZAQF6EGsRiK5T
QMpbrjXiZ7Jihfj2AT8dysF71mL5MA9sC0rnow0wCzAJBgNVHRMEAjAAMAsGCWCG
SAFlAwQDAgNHADBEAiBRk92AraysDC4r+Ahfjh7JgEV2mxXRXwVg5Upqs+MxzQIg
HpSiylASMJlacxtfbWoJ7NmXaOCQH7kBnHNdUBsZRiM=
-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1718871785
    next
    edit "Fortinet_SSL_ECDSA256"
        set password ENC ilmm1wqfTsw3HUcT/H+VtinlXoQjWgL/jYW8DD49r5CXkR+ZZMU9WVIoFB1ZNE6DhVFTm5SXpyiw2sETkrLajoZcYm+uG2azI2zvjJNEa4Cah5/a8nSgzQ7RF8L2gi/roxsptIZYXNqeTVN1Weo2iZW/V6KnRddOg4+bJ3uE9lsksK6AR7XXKOFCUApxU3FtD7NHQA==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIHjME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAg+GyRJ4zESCAICCAAw
DAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIACszhmZolSIEgZDv9SBb0aPv0vYJ
Ngf2OH3E9oxcaJlO0ldq6abYz8n4VVqG4dF4idN7YrPRzIfbBbJmrGS1QINcGGMs
tyR+hc8mfZc/WJrbKkE8Q+mdENFuhqWksrdhAjKS1mDmJe8tBJnLYWtuKEEYr4BV
9PhdOalKpcS21Rd3R5EmbUVl56lBEtVwczdl+8ArHEF49soKULA=
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1718871785
    next
    edit "Fortinet_SSL_ECDSA384"
        set password ENC rH2M/PFFJeaC3yNHzNCVfTmVcPhVftXVAOh1iM46XHQhlBNFLWNzl8VprreeqlI2f9WCHlh6t2sK0oHJ5Th/q2iD/J9xTvoDzBV8OrAWNqa+Msrpe7/g1ss85rxK5M62GiEcsVW/ABUEkV7+N902BgpQ1QE/nlSpfegd10al9NPSJXty+dgfWqlyXdc8yXEr7ztjyA==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIBEzBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIgL2ZW1muSGICAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECGH3pV/29J0mBIHAfVUfpT142QBU
N0NMKflsN5TzdjJdvZpuhcaQJo1VoyiJbGKkY7cLSZ1muYwyhuTt4zDJK5h4sX1J
nWvh7SMGtxktFnzapKrwkulkRTdWy+8u4wFo6AiiQlRUVkV15sAmGG4+oYuJxWwc
SReoP9Kv2TxcKcilaF08z2IspGQ4WUYgXQDkDncS7z4Ex/xZGIruxp2qozrnf3tK
7KzIkoskKQVWAFvpUZV/ZTOTo2iJxJVdcai4lo/MTwGSlXuJKWBI
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1718871785
    next
    edit "Fortinet_SSL_ECDSA521"
        set password ENC etEjlCD0DrOP8nEf0NjoaX3OMfna2oEUgo+MrJQvK3BxJydgWI5i/2Zm4IOHN4ifIZxVuXSh5NZy+M3OPz8hla1ImYskutnxQsp3W4pUNLKwssE2epdXwpGq5mlaB/zHWwK7qEh+MpvYEgfNAviyRf2XGLzdDwVvScFqVZIyqPEsPWHoESERPPEbkPGh0ikGLm6Ddg==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIBSzBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIPXD0BJ8M6X4CAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECM3PMD77A2puBIH4FGs0T6bZ/G5V
0o3NCNTzwmKjflD13++6DVkLar9jeFur/rV7w9vby5z371wJgVKqgXFF41bXBBR6
F6OveFutW+F2B4Xd2Xx90J684XvixEsCCv2kH+qXrwuGVO7WddYlGNQBmW+W2hGw
vFlObghz+deziG6ITFsUr0VmhFBQeauEKdgUJFr4n1Og/8Z16xO44vm7bbz/GNaV
5cMcqVdeKmKEtHNUMAtiR7hPa+D51NE356XdmGg4KpJNcmpAoNhVIb4wK0Yv5LZj
RZB6aJR44uYQsDxraI30BPueW8rGP9kNPUJ0ogMtgqchz1pmwSHE4XEGhL521Sg=
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----
MIIC2DCCAjmgAwIBAgIELMsYujAKBggqhkjOPQQDAjCBnTELMAkGA1UEBhMCVVMx
EzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCVN1bm55dmFsZTERMA8GA1UE
CgwIRm9ydGluZXQxEjAQBgNVBAsMCUZvcnRpR2F0ZTEZMBcGA1UEAwwQRkdUNTBF
NTYxODAzOTkxMzEjMCEGCSqGSIb3DQEJARYUc3VwcG9ydEBmb3J0aW5ldC5jb20w
HhcNMjUwNDAxMTgwNTI5WhcNMjcwNzA1MTgwNTI5WjCBnTELMAkGA1UEBhMCVVMx
EzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCVN1bm55dmFsZTERMA8GA1UE
CgwIRm9ydGluZXQxEjAQBgNVBAsMCUZvcnRpR2F0ZTEZMBcGA1UEAwwQRkdUNTBF
NTYxODAzOTkxMzEjMCEGCSqGSIb3DQEJARYUc3VwcG9ydEBmb3J0aW5ldC5jb20w
gZswEAYHKoZIzj0CAQYFK4EEACMDgYYABAChUALe/HpRGbqGVRhk7QRw4FYq3ePp
pmw9JXGrWFb/frWQ9L3Hvh1bnUM6gUshURHSBY1KTZW9e71R2v0A+fmdugDdajt2
6FaWdooopYtxCaFvafEprYMHK539m/nElzBRL5F7ui7bfZRhbylw9AsxaEtyf9j9
nloP0iGHCLcHsgunGqMiMCAwCQYDVR0TBAIwADATBgNVHSUEDDAKBggrBgEFBQcD
ATAKBggqhkjOPQQDAgOBjAAwgYgCQgD7m0B0BTqUPOxOEebaobqFpN/Ho/HnwtdB
OCBSU0aOYekSny6QDW6vJtmzcNb4Vd0MSgLq1I9yW19iR85NCqMY6wJCAOE2hvjz
8o+n0vyAeCr/Nq6v5DHKTKVlYYGDTtJg1720dD8ZJe5FyYHPKvMPTPrEQ3rz2c6q
7s4wbsHYpR9vCLpI
-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1743530732
    next
    edit "Fortinet_SSL_ED25519"
        set password ENC 7QzX59vSbk7/POjHfX+IIi9IQ1N9TW04ywBXTM3Wc5O9nXcJK9O7sG8NRa/qbSjYQiiLtMwjwHno8D7tnBySaki33/Sfi9A3RLIBGySSqv+JvcVUVJ0JLs/x/kJm3YjN5QR4MMRXEiKkNqLndxIkhBxvINL6pKFGBUNKb5FVxZbw3vzc48o1Dv7mEvUQO14jCct/jQ==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIGKME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAgmKBoNQ8spgAICCAAw
DAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIAJC5Pq0lBZcEOAXTF+bpq6KkCcbV
gBPv5+mF+AEIw6DTfadR6eLy65qtbjS/W0Chxfm5TMt261ztHhxQpUBo0m1S
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----
MIICEDCCAcKgAwIBAgIETOo9gDAFBgMrZXAwgZ0xCzAJBgNVBAYTAlVTMRMwEQYD
VQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUxETAPBgNVBAoMCEZv
cnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMMEEZHVDUwRTU2MTgw
Mzk5MTMxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQuY29tMB4XDTI1
MDQwMTE4MDUyOVoXDTI3MDcwNTE4MDUyOVowgZ0xCzAJBgNVBAYTAlVTMRMwEQYD
VQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUxETAPBgNVBAoMCEZv
cnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMMEEZHVDUwRTU2MTgw
Mzk5MTMxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQuY29tMCowBQYD
K2VwAyEAcX9TazbiO05d+R+xYVvh8zs7OqFTIb0QvvJKFc5G3iKjIjAgMAkGA1Ud
EwQCMAAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwBQYDK2VwA0EAQakLBMM1NDk6mRkP
dst9nRqT+JgCdPeD8C0P9Y52gl6+ApmefmZ9Qew95EGjhtWhvHU+XBceaBE7mu2s
Bm2KCg==
-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1743530732
    next
    edit "Fortinet_SSL_ED448"
        set password ENC Nq92Kk6LBjFsK6h0poRRs01rNo566zZq71tR2sOTIIKz+5juqajIpvwiUKb0OIjbAuVjhkpSr/vA861qylTWKfF8pfIYGkYf93f2I4Ierh4AiYRpGDtCihi1/Y1LVfvBrImiXJAmI91ssLhd1/+CqdCp7krTLwievW1yZwcDXzGWR5MYOfacprGK4t/EZyB33KKPEg==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIGiME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAg4X0T1F/e9uAICCAAw
DAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIAthKGo1ZaSYEUHvQbxv1fHVlmLaG
IhmnfM828bRPMA7gw1yxTOW9xcKFgjsBEvEEx7yqlM7W4AcInHEycGltloT86Q3e
Bb8Av125HX+HTt0JbdHpSAyqYHhY
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1743530732
    next
end
config webfilter ftgd-local-cat
    edit "custom1"
        set id 140
    next
    edit "custom2"
        set id 141
    next
end
config ips sensor
    edit "default"
        set comment "Prevent critical attacks."
        config entries
            edit 1
                set severity medium high critical 
            next
        end
    next
    edit "sniffer-profile"
        set comment "Monitor IPS attacks."
        config entries
            edit 1
                set severity medium high critical 
            next
        end
    next
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        config entries
            edit 1
                set severity medium high critical 
            next
        end
    next
    edit "all_default"
        set comment "All predefined signatures with default setting."
        config entries
            edit 1
            next
        end
    next
    edit "all_default_pass"
        set comment "All predefined signatures with PASS action."
        config entries
            edit 1
                set action pass
            next
        end
    next
    edit "protect_http_server"
        set comment "Protect against HTTP server-side vulnerabilities."
        config entries
            edit 1
                set location server 
                set protocol HTTP 
            next
        end
    next
    edit "protect_email_server"
        set comment "Protect against email server-side vulnerabilities."
        config entries
            edit 1
                set location server 
                set protocol SMTP POP3 IMAP 
            next
        end
    next
    edit "protect_client"
        set comment "Protect against client-side vulnerabilities."
        config entries
            edit 1
                set location client 
            next
        end
    next
    edit "high_security"
        set comment "Blocks all Critical/High/Medium and some Low severity vulnerabilities"
        config entries
            edit 1
                set severity medium high critical 
                set status enable
                set action block
            next
            edit 2
                set severity low 
            next
        end
    next
end
config firewall shaper traffic-shaper
    edit "high-priority"
        set maximum-bandwidth 1048576
        set per-policy enable
    next
    edit "medium-priority"
        set maximum-bandwidth 1048576
        set priority medium
        set per-policy enable
    next
    edit "low-priority"
        set maximum-bandwidth 1048576
        set priority low
        set per-policy enable
    next
    edit "guarantee-100kbps"
        set guaranteed-bandwidth 100
        set maximum-bandwidth 1048576
        set per-policy enable
    next
    edit "shared-1M-pipe"
        set maximum-bandwidth 1024
    next
end
config web-proxy global
    set proxy-fqdn "default.fqdn"
end
config application list
    edit "default"
        set comment "Monitor all applications."
        config entries
            edit 1
                set action pass
            next
        end
    next
    edit "sniffer-profile"
        set comment "Monitor all applications."
        unset options
        config entries
            edit 1
                set action pass
            next
        end
    next
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        set deep-app-inspection disable
        config entries
            edit 1
                set category 2 3 5 6 7 8 12 15 17 21 22 23 25 26 28 30 31
                set action pass
                set log disable
            next
        end
    next
    edit "block-high-risk"
        config entries
            edit 1
                set category 2 6
            next
            edit 2
                set action pass
            next
        end
    next
end
config dlp filepattern
    edit 1
        set name "builtin-patterns"
        config entries
            edit "*.bat"
            next
            edit "*.com"
            next
            edit "*.dll"
            next
            edit "*.doc"
            next
            edit "*.exe"
            next
            edit "*.gz"
            next
            edit "*.hta"
            next
            edit "*.ppt"
            next
            edit "*.rar"
            next
            edit "*.scr"
            next
            edit "*.tar"
            next
            edit "*.tgz"
            next
            edit "*.vb?"
            next
            edit "*.wps"
            next
            edit "*.xl?"
            next
            edit "*.zip"
            next
            edit "*.pif"
            next
            edit "*.cpl"
            next
        end
    next
    edit 2
        set name "all_executables"
        config entries
            edit "bat"
                set filter-type type
                set file-type bat
            next
            edit "exe"
                set filter-type type
                set file-type exe
            next
            edit "elf"
                set filter-type type
                set file-type elf
            next
            edit "hta"
                set filter-type type
                set file-type hta
            next
        end
    next
end
config dlp sensitivity
    edit "Private"
    next
    edit "Critical"
    next
    edit "Warning"
    next
end
config dlp sensor
    edit "default"
        set comment "Default sensor."
    next
    edit "sniffer-profile"
        set comment "Log a summary of email and web traffic."
        set summary-proto smtp pop3 imap http-get http-post
    next
    edit "Content_Summary"
        set summary-proto smtp pop3 imap http-get http-post ftp nntp mapi
    next
    edit "Content_Archive"
        set summary-proto smtp pop3 imap http-get http-post ftp nntp mapi
    next
    edit "Large-File"
        config filter
            edit 1
                set name "Large-File-Filter"
                set proto smtp pop3 imap http-get http-post mapi
                set filter-by file-size
                set file-size 5120
                set action log-only
            next
        end
    next
    edit "Credit-Card"
        config filter
            edit 1
                set name "Credit-Card-Filter"
                set severity high
                set proto smtp pop3 imap http-get http-post mapi
                set action log-only
            next
            edit 2
                set name "Credit-Card-Filter"
                set severity high
                set type message
                set proto smtp pop3 imap http-post mapi
                set action log-only
            next
        end
    next
    edit "SSN-Sensor"
        set comment "Match SSN numbers but NOT WebEx invite emails."
        config filter
            edit 1
                set name "SSN-Sensor-Filter"
                set severity high
                set type message
                set proto smtp pop3 imap mapi
                set filter-by regexp
                set regexp "WebEx"
            next
            edit 2
                set name "SSN-Sensor-Filter"
                set severity high
                set type message
                set proto smtp pop3 imap mapi
                set filter-by ssn
                set action log-only
            next
            edit 3
                set name "SSN-Sensor-Filter"
                set severity high
                set proto smtp pop3 imap http-get http-post ftp mapi
                set filter-by ssn
                set action log-only
            next
        end
    next
end
config webfilter ips-urlfilter-setting
end
config webfilter ips-urlfilter-setting6
end
config log threat-weight
    config web
        edit 1
            set category 26
            set level high
        next
        edit 2
            set category 61
            set level high
        next
        edit 3
            set category 86
            set level high
        next
        edit 4
            set category 1
            set level medium
        next
        edit 5
            set category 3
            set level medium
        next
        edit 6
            set category 4
            set level medium
        next
        edit 7
            set category 5
            set level medium
        next
        edit 8
            set category 6
            set level medium
        next
        edit 9
            set category 12
            set level medium
        next
        edit 10
            set category 59
            set level medium
        next
        edit 11
            set category 62
            set level medium
        next
        edit 12
            set category 83
            set level medium
        next
        edit 13
            set category 72
        next
        edit 14
            set category 14
        next
    end
    config application
        edit 1
            set category 2
        next
        edit 2
            set category 6
            set level medium
        next
    end
end
config icap profile
    edit "default"
    next
end
config user local
    edit "guest"
        set type password
        set passwd ENC t5fK7U6ASnXxdNwIEzVj+mFolVmX1mNoXqjBpytZPz2x1ifg/uLoLnezQzQhN0OjKe4y5PikR+x042xU4shFTFBKdlhnu32wxdRaQSyyoQ6T2nMX7ZFbaLYIdJj3g+ufQIM0bgI//5v4fuQSF8RL2Xwj0g2zQMdY7thFjVJuscYdgmfdMory7GyeDqJVQxFpn1SUpg==
    next
end
config user setting
    set auth-cert "Fortinet_Factory"
end
config user group
    edit "SSO_Guest_Users"
    next
    edit "Guest-group"
        set member "guest"
    next
end
config vpn ssl web host-check-software
    edit "FortiClient-AV"
        set guid "1A0271D5-3D4F-46DB-0C2C-AB37BA90D9F7"
    next
    edit "FortiClient-FW"
        set type fw
        set guid "528CB157-D384-4593-AAAA-E42DFF111CED"
    next
    edit "FortiClient-AV-Vista"
        set guid "385618A6-2256-708E-3FB9-7E98B93F91F9"
    next
    edit "FortiClient-FW-Vista"
        set type fw
        set guid "006D9983-6839-71D6-14E6-D7AD47ECD682"
    next
    edit "FortiClient-AV-Win7"
        set guid "71629DC5-BE6F-CCD3-C5A5-014980643264"
    next
    edit "AVG-Internet-Security-AV"
        set guid "17DDD097-36FF-435F-9E1B-52D74245D6BF"
    next
    edit "AVG-Internet-Security-FW"
        set type fw
        set guid "8DECF618-9569-4340-B34A-D78D28969B66"
    next
    edit "AVG-Internet-Security-AV-Vista-Win7"
        set guid "0C939084-9E57-CBDB-EA61-0B0C7F62AF82"
    next
    edit "AVG-Internet-Security-FW-Vista-Win7"
        set type fw
        set guid "34A811A1-D438-CA83-C13E-A23981B1E8F9"
    next
    edit "CA-Anti-Virus"
        set guid "17CFD1EA-56CF-40B5-A06B-BD3A27397C93"
    next
    edit "CA-Internet-Security-AV"
        set guid "6B98D35F-BB76-41C0-876B-A50645ED099A"
    next
    edit "CA-Internet-Security-FW"
        set type fw
        set guid "38102F93-1B6E-4922-90E1-A35D8DC6DAA3"
    next
    edit "CA-Internet-Security-AV-Vista-Win7"
        set guid "3EED0195-0A4B-4EF3-CC4F-4F401BDC245F"
    next
    edit "CA-Internet-Security-FW-Vista-Win7"
        set type fw
        set guid "06D680B0-4024-4FAB-E710-E675E50F6324"
    next
    edit "CA-Personal-Firewall"
        set type fw
        set guid "14CB4B80-8E52-45EA-905E-67C1267B4160"
    next
    edit "F-Secure-Internet-Security-AV"
        set guid "E7512ED5-4245-4B4D-AF3A-382D3F313F15"
    next
    edit "F-Secure-Internet-Security-FW"
        set type fw
        set guid "D4747503-0346-49EB-9262-997542F79BF4"
    next
    edit "F-Secure-Internet-Security-AV-Vista-Win7"
        set guid "15414183-282E-D62C-CA37-EF24860A2F17"
    next
    edit "F-Secure-Internet-Security-FW-Vista-Win7"
        set type fw
        set guid "2D7AC0A6-6241-D774-E168-461178D9686C"
    next
    edit "Kaspersky-AV"
        set guid "2C4D4BC6-0793-4956-A9F9-E252435469C0"
    next
    edit "Kaspersky-FW"
        set type fw
        set guid "2C4D4BC6-0793-4956-A9F9-E252435469C0"
    next
    edit "Kaspersky-AV-Vista-Win7"
        set guid "AE1D740B-8F0F-D137-211D-873D44B3F4AE"
    next
    edit "Kaspersky-FW-Vista-Win7"
        set type fw
        set guid "9626F52E-C560-D06F-0A42-2E08BA60B3D5"
    next
    edit "McAfee-Internet-Security-Suite-AV"
        set guid "84B5EE75-6421-4CDE-A33A-DD43BA9FAD83"
    next
    edit "McAfee-Internet-Security-Suite-FW"
        set type fw
        set guid "94894B63-8C7F-4050-BDA4-813CA00DA3E8"
    next
    edit "McAfee-Internet-Security-Suite-AV-Vista-Win7"
        set guid "86355677-4064-3EA7-ABB3-1B136EB04637"
    next
    edit "McAfee-Internet-Security-Suite-FW-Vista-Win7"
        set type fw
        set guid "BE0ED752-0A0B-3FFF-80EC-B2269063014C"
    next
    edit "McAfee-Virus-Scan-Enterprise"
        set guid "918A2B0B-2C60-4016-A4AB-E868DEABF7F0"
    next
    edit "Norton-360-2.0-AV"
        set guid "A5F1BC7C-EA33-4247-961C-0217208396C4"
    next
    edit "Norton-360-2.0-FW"
        set type fw
        set guid "371C0A40-5A0C-4AD2-A6E5-69C02037FBF3"
    next
    edit "Norton-360-3.0-AV"
        set guid "E10A9785-9598-4754-B552-92431C1C35F8"
    next
    edit "Norton-360-3.0-FW"
        set type fw
        set guid "7C21A4C9-F61F-4AC4-B722-A6E19C16F220"
    next
    edit "Norton-Internet-Security-AV"
        set guid "E10A9785-9598-4754-B552-92431C1C35F8"
    next
    edit "Norton-Internet-Security-FW"
        set type fw
        set guid "7C21A4C9-F61F-4AC4-B722-A6E19C16F220"
    next
    edit "Norton-Internet-Security-AV-Vista-Win7"
        set guid "88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855"
    next
    edit "Norton-Internet-Security-FW-Vista-Win7"
        set type fw
        set guid "B0F2DB13-C654-2E74-30D4-99C9310F0F2E"
    next
    edit "Symantec-Endpoint-Protection-AV"
        set guid "FB06448E-52B8-493A-90F3-E43226D3305C"
    next
    edit "Symantec-Endpoint-Protection-FW"
        set type fw
        set guid "BE898FE3-CD0B-4014-85A9-03DB9923DDB6"
    next
    edit "Symantec-Endpoint-Protection-AV-Vista-Win7"
        set guid "88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855"
    next
    edit "Symantec-Endpoint-Protection-FW-Vista-Win7"
        set type fw
        set guid "B0F2DB13-C654-2E74-30D4-99C9310F0F2E"
    next
    edit "Panda-Antivirus+Firewall-2008-AV"
        set guid "EEE2D94A-D4C1-421A-AB2C-2CE8FE51747A"
    next
    edit "Panda-Antivirus+Firewall-2008-FW"
        set type fw
        set guid "7B090DC0-8905-4BAF-8040-FD98A41C8FB8"
    next
    edit "Panda-Internet-Security-AV"
        set guid "4570FB70-5C9E-47E9-B16C-A3A6A06C4BF0"
    next
    edit "Panda-Internet-Security-2006~2007-FW"
        set type fw
        set guid "4570FB70-5C9E-47E9-B16C-A3A6A06C4BF0"
    next
    edit "Panda-Internet-Security-2008~2009-FW"
        set type fw
        set guid "7B090DC0-8905-4BAF-8040-FD98A41C8FB8"
    next
    edit "Sophos-Anti-Virus"
        set guid "3F13C776-3CBE-4DE9-8BF6-09E5183CA2BD"
    next
    edit "Sophos-Enpoint-Secuirty-and-Control-FW"
        set type fw
        set guid "0786E95E-326A-4524-9691-41EF88FB52EA"
    next
    edit "Sophos-Enpoint-Secuirty-and-Control-AV-Vista-Win7"
        set guid "479CCF92-4960-B3E0-7373-BF453B467D2C"
    next
    edit "Sophos-Enpoint-Secuirty-and-Control-FW-Vista-Win7"
        set type fw
        set guid "7FA74EB7-030F-B2B8-582C-1670C5953A57"
    next
    edit "Trend-Micro-AV"
        set guid "7D2296BC-32CC-4519-917E-52E652474AF5"
    next
    edit "Trend-Micro-FW"
        set type fw
        set guid "3E790E9E-6A5D-4303-A7F9-185EC20F3EB6"
    next
    edit "Trend-Micro-AV-Vista-Win7"
        set guid "48929DFC-7A52-A34F-8351-C4DBEDBD9C50"
    next
    edit "Trend-Micro-FW-Vista-Win7"
        set type fw
        set guid "70A91CD9-303D-A217-A80E-6DEE136EDB2B"
    next
    edit "ZoneAlarm-AV"
        set guid "5D467B10-818C-4CAB-9FF7-6893B5B8F3CF"
    next
    edit "ZoneAlarm-FW"
        set type fw
        set guid "829BDA32-94B3-44F4-8446-F8FCFF809F8B"
    next
    edit "ZoneAlarm-AV-Vista-Win7"
        set guid "D61596DF-D219-341C-49B3-AD30538CBC5B"
    next
    edit "ZoneAlarm-FW-Vista-Win7"
        set type fw
        set guid "EE2E17FA-9876-3544-62EC-0405AD5FFB20"
    next
    edit "ESET-Smart-Security-AV"
        set guid "19259FAE-8396-A113-46DB-15B0E7DFA289"
    next
    edit "ESET-Smart-Security-FW"
        set type fw
        set guid "211E1E8B-C9F9-A04B-6D84-BC85190CE5F2"
    next
    edit "FortiClient5-AV"
        set guid "5EEDDB8C-C27A-6714-3657-DBD811D1F1B7"
    next
end
config vpn ssl web portal
    edit "full-access"
        set tunnel-mode enable
        set ipv6-tunnel-mode enable
        set web-mode enable
        set ip-pools "SSLVPN_TUNNEL_ADDR1"
        set ipv6-pools "SSLVPN_TUNNEL_IPv6_ADDR1"
    next
    edit "web-access"
        set web-mode enable
    next
    edit "tunnel-access"
        set tunnel-mode enable
        set ipv6-tunnel-mode enable
        set ip-pools "SSLVPN_TUNNEL_ADDR1"
        set ipv6-pools "SSLVPN_TUNNEL_IPv6_ADDR1"
    next
end
config vpn ssl settings
    set ssl-min-proto-ver tls1-1
    set servercert "Fortinet_Factory"
    set port 443
end
config voip profile
    edit "default"
        set comment "Default VoIP profile."
    next
    edit "strict"
        config sip
            set malformed-request-line discard
            set malformed-header-via discard
            set malformed-header-from discard
            set malformed-header-to discard
            set malformed-header-call-id discard
            set malformed-header-cseq discard
            set malformed-header-rack discard
            set malformed-header-rseq discard
            set malformed-header-contact discard
            set malformed-header-record-route discard
            set malformed-header-route discard
            set malformed-header-expires discard
            set malformed-header-content-type discard
            set malformed-header-content-length discard
            set malformed-header-max-forwards discard
            set malformed-header-allow discard
            set malformed-header-p-asserted-identity discard
            set malformed-header-sdp-v discard
            set malformed-header-sdp-o discard
            set malformed-header-sdp-s discard
            set malformed-header-sdp-i discard
            set malformed-header-sdp-c discard
            set malformed-header-sdp-b discard
            set malformed-header-sdp-z discard
            set malformed-header-sdp-k discard
            set malformed-header-sdp-a discard
            set malformed-header-sdp-t discard
            set malformed-header-sdp-r discard
            set malformed-header-sdp-m discard
        end
    next
end
config vpn ipsec phase1-interface
    edit "VPN_HO"
        set interface "wan1"
        set peertype any
        set net-device disable
        set proposal aes256-sha256
        set dhgrp 14
        set remote-gw 213.131.47.178
        set psksecret ENC 4DijirCdu26UVWzwCk150Q+zRZxCz47FVuRYFdmg9zFjg8lWoi0zRGBw16sFO2SeSlnjd6j2EgDi1dnquPVhObzkPcoMXwvulvflUiUAech3q2UJDBq7upTljfP0M5NP2xWsbKhpqVeJKCz+WlJpg7E+Ntp2v44PNDGAAxsA5oJgmlNxys9RzIsv0oIMZfczq4JjGA==
    next
end
config vpn ipsec phase2-interface
    edit "VPN_HO"
        set phase1name "VPN_HO"
        set proposal aes128gcm
        set dhgrp 14
        set auto-negotiate enable
        set src-addr-type name
        set dst-addr-type name
        set src-name "VPN_HO_local"
        set dst-name "VPN_HO_remote"
    next
end
config dnsfilter profile
    edit "default"
        set comment "Default dns filtering."
        config ftgd-dns
            config filters
                edit 1
                    set category 2
                next
                edit 2
                    set category 7
                next
                edit 3
                    set category 8
                next
                edit 4
                    set category 9
                next
                edit 5
                    set category 11
                next
                edit 6
                    set category 12
                next
                edit 7
                    set category 13
                next
                edit 8
                    set category 14
                next
                edit 9
                    set category 15
                next
                edit 10
                    set category 16
                next
                edit 11
                next
                edit 12
                    set category 57
                next
                edit 13
                    set category 63
                next
                edit 14
                    set category 64
                next
                edit 15
                    set category 65
                next
                edit 16
                    set category 66
                next
                edit 17
                    set category 67
                next
                edit 18
                    set category 26
                    set action block
                next
                edit 19
                    set category 61
                    set action block
                next
                edit 20
                    set category 86
                    set action block
                next
                edit 21
                    set category 88
                    set action block
                next
                edit 22
                    set category 90
                    set action block
                next
                edit 23
                    set category 91
                    set action block
                next
            end
        end
        set block-botnet enable
    next
end
config antivirus settings
    set grayware enable
end
config antivirus profile
    edit "default"
        set comment "Scan files and block viruses."
        config http
            set options scan
        end
        config ftp
            set options scan
        end
        config imap
            set options scan
            set executables virus
        end
        config pop3
            set options scan
            set executables virus
        end
        config smtp
            set options scan
            set executables virus
        end
        set scan-mode legacy
    next
    edit "sniffer-profile"
        set comment "Scan files and monitor viruses."
        config http
            set options scan
        end
        config ftp
            set options scan
        end
        config imap
            set options scan
            set executables virus
        end
        config pop3
            set options scan
            set executables virus
        end
        config smtp
            set options scan
            set executables virus
        end
        set scan-mode legacy
    next
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        config http
            set options scan
        end
        config ftp
            set options scan
        end
        config imap
            set options scan
            set executables virus
        end
        config pop3
            set options scan
            set executables virus
        end
        config smtp
            set options scan
            set executables virus
        end
        set scan-mode legacy
    next
end
config webfilter profile
    edit "default"
        set comment "Default web filtering."
        config ftgd-wf
            unset options
            config filters
                edit 1
                    set category 2
                    set action block
                next
                edit 2
                    set category 7
                    set action block
                next
                edit 3
                    set category 8
                    set action block
                next
                edit 4
                    set category 9
                    set action block
                next
                edit 5
                    set category 11
                    set action block
                next
                edit 6
                    set category 12
                    set action block
                next
                edit 7
                    set category 13
                    set action block
                next
                edit 8
                    set category 14
                    set action block
                next
                edit 9
                    set category 15
                    set action block
                next
                edit 10
                    set category 16
                    set action block
                next
                edit 11
                    set action block
                next
                edit 12
                    set category 57
                    set action block
                next
                edit 13
                    set category 63
                    set action block
                next
                edit 14
                    set category 64
                    set action block
                next
                edit 15
                    set category 65
                    set action block
                next
                edit 16
                    set category 66
                    set action block
                next
                edit 17
                    set category 67
                    set action block
                next
                edit 18
                    set category 26
                    set action block
                next
                edit 19
                    set category 61
                    set action block
                next
                edit 20
                    set category 86
                    set action block
                next
                edit 21
                    set category 88
                    set action block
                next
                edit 22
                    set category 90
                    set action block
                next
                edit 23
                    set category 91
                    set action block
                next
            end
        end
    next
    edit "sniffer-profile"
        set comment "Monitor web traffic."
        config ftgd-wf
            config filters
                edit 1
                next
                edit 2
                    set category 1
                next
                edit 3
                    set category 2
                next
                edit 4
                    set category 3
                next
                edit 5
                    set category 4
                next
                edit 6
                    set category 5
                next
                edit 7
                    set category 6
                next
                edit 8
                    set category 7
                next
                edit 9
                    set category 8
                next
                edit 10
                    set category 9
                next
                edit 11
                    set category 11
                next
                edit 12
                    set category 12
                next
                edit 13
                    set category 13
                next
                edit 14
                    set category 14
                next
                edit 15
                    set category 15
                next
                edit 16
                    set category 16
                next
                edit 17
                    set category 17
                next
                edit 18
                    set category 18
                next
                edit 19
                    set category 19
                next
                edit 20
                    set category 20
                next
                edit 21
                    set category 23
                next
                edit 22
                    set category 24
                next
                edit 23
                    set category 25
                next
                edit 24
                    set category 26
                next
                edit 25
                    set category 28
                next
                edit 26
                    set category 29
                next
                edit 27
                    set category 30
                next
                edit 28
                    set category 31
                next
                edit 29
                    set category 33
                next
                edit 30
                    set category 34
                next
                edit 31
                    set category 35
                next
                edit 32
                    set category 36
                next
                edit 33
                    set category 37
                next
                edit 34
                    set category 38
                next
                edit 35
                    set category 39
                next
                edit 36
                    set category 40
                next
                edit 37
                    set category 41
                next
                edit 38
                    set category 42
                next
                edit 39
                    set category 43
                next
                edit 40
                    set category 44
                next
                edit 41
                    set category 46
                next
                edit 42
                    set category 47
                next
                edit 43
                    set category 48
                next
                edit 44
                    set category 49
                next
                edit 45
                    set category 50
                next
                edit 46
                    set category 51
                next
                edit 47
                    set category 52
                next
                edit 48
                    set category 53
                next
                edit 49
                    set category 54
                next
                edit 50
                    set category 55
                next
                edit 51
                    set category 56
                next
                edit 52
                    set category 57
                next
                edit 53
                    set category 58
                next
                edit 54
                    set category 59
                next
                edit 55
                    set category 61
                next
                edit 56
                    set category 62
                next
                edit 57
                    set category 63
                next
                edit 58
                    set category 64
                next
                edit 59
                    set category 65
                next
                edit 60
                    set category 66
                next
                edit 61
                    set category 67
                next
                edit 62
                    set category 68
                next
                edit 63
                    set category 69
                next
                edit 64
                    set category 70
                next
                edit 65
                    set category 71
                next
                edit 66
                    set category 72
                next
                edit 67
                    set category 75
                next
                edit 68
                    set category 76
                next
                edit 69
                    set category 77
                next
                edit 70
                    set category 78
                next
                edit 71
                    set category 79
                next
                edit 72
                    set category 80
                next
                edit 73
                    set category 81
                next
                edit 74
                    set category 82
                next
                edit 75
                    set category 83
                next
                edit 76
                    set category 84
                next
                edit 77
                    set category 85
                next
                edit 78
                    set category 86
                next
                edit 79
                    set category 87
                next
                edit 80
                    set category 88
                next
                edit 81
                    set category 89
                next
                edit 82
                    set category 90
                next
                edit 83
                    set category 91
                next
                edit 84
                    set category 92
                next
                edit 85
                    set category 93
                next
                edit 86
                    set category 94
                next
                edit 87
                    set category 95
                next
            end
        end
    next
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        set options block-invalid-url
        set post-action block
        config ftgd-wf
            unset options
            config filters
                edit 1
                next
                edit 2
                    set category 2
                    set action block
                next
                edit 3
                    set category 7
                    set action block
                next
                edit 4
                    set category 8
                    set action block
                next
                edit 5
                    set category 9
                    set action block
                next
                edit 6
                    set category 11
                    set action block
                next
                edit 7
                    set category 13
                    set action block
                next
                edit 8
                    set category 14
                    set action block
                next
                edit 9
                    set category 15
                    set action block
                next
                edit 10
                    set category 16
                    set action block
                next
                edit 11
                    set category 26
                    set action block
                next
                edit 12
                    set category 57
                    set action block
                next
                edit 13
                    set category 61
                    set action block
                next
                edit 14
                    set category 63
                    set action block
                next
                edit 15
                    set category 64
                    set action block
                next
                edit 16
                    set category 65
                    set action block
                next
                edit 17
                    set category 66
                    set action block
                next
                edit 18
                    set category 67
                    set action block
                next
                edit 19
                    set category 86
                    set action block
                next
                edit 20
                    set category 88
                    set action block
                next
                edit 21
                    set category 90
                    set action block
                next
                edit 22
                    set category 91
                    set action block
                next
            end
        end
    next
    edit "monitor-all"
        set comment "Monitor and log all visited URLs, flow-based."
        config ftgd-wf
            unset options
            config filters
                edit 1
                    set category 1
                next
                edit 2
                    set category 3
                next
                edit 3
                    set category 4
                next
                edit 4
                    set category 5
                next
                edit 5
                    set category 6
                next
                edit 6
                    set category 12
                next
                edit 7
                    set category 59
                next
                edit 8
                    set category 62
                next
                edit 9
                    set category 83
                next
                edit 10
                    set category 2
                next
                edit 11
                    set category 7
                next
                edit 12
                    set category 8
                next
                edit 13
                    set category 9
                next
                edit 14
                    set category 11
                next
                edit 15
                    set category 13
                next
                edit 16
                    set category 14
                next
                edit 17
                    set category 15
                next
                edit 18
                    set category 16
                next
                edit 19
                    set category 57
                next
                edit 20
                    set category 63
                next
                edit 21
                    set category 64
                next
                edit 22
                    set category 65
                next
                edit 23
                    set category 66
                next
                edit 24
                    set category 67
                next
                edit 25
                    set category 19
                next
                edit 26
                    set category 24
                next
                edit 27
                    set category 25
                next
                edit 28
                    set category 72
                next
                edit 29
                    set category 75
                next
                edit 30
                    set category 76
                next
                edit 31
                    set category 26
                next
                edit 32
                    set category 61
                next
                edit 33
                    set category 86
                next
                edit 34
                    set category 17
                next
                edit 35
                    set category 18
                next
                edit 36
                    set category 20
                next
                edit 37
                    set category 23
                next
                edit 38
                    set category 28
                next
                edit 39
                    set category 29
                next
                edit 40
                    set category 30
                next
                edit 41
                    set category 33
                next
                edit 42
                    set category 34
                next
                edit 43
                    set category 35
                next
                edit 44
                    set category 36
                next
                edit 45
                    set category 37
                next
                edit 46
                    set category 38
                next
                edit 47
                    set category 39
                next
                edit 48
                    set category 40
                next
                edit 49
                    set category 42
                next
                edit 50
                    set category 44
                next
                edit 51
                    set category 46
                next
                edit 52
                    set category 47
                next
                edit 53
                    set category 48
                next
                edit 54
                    set category 54
                next
                edit 55
                    set category 55
                next
                edit 56
                    set category 58
                next
                edit 57
                    set category 68
                next
                edit 58
                    set category 69
                next
                edit 59
                    set category 70
                next
                edit 60
                    set category 71
                next
                edit 61
                    set category 77
                next
                edit 62
                    set category 78
                next
                edit 63
                    set category 79
                next
                edit 64
                    set category 80
                next
                edit 65
                    set category 82
                next
                edit 66
                    set category 85
                next
                edit 67
                    set category 87
                next
                edit 68
                    set category 31
                next
                edit 69
                    set category 41
                next
                edit 70
                    set category 43
                next
                edit 71
                    set category 49
                next
                edit 72
                    set category 50
                next
                edit 73
                    set category 51
                next
                edit 74
                    set category 52
                next
                edit 75
                    set category 53
                next
                edit 76
                    set category 56
                next
                edit 77
                    set category 81
                next
                edit 78
                    set category 84
                next
                edit 79
                next
                edit 80
                    set category 88
                next
                edit 81
                    set category 89
                next
                edit 82
                    set category 90
                next
                edit 83
                    set category 91
                next
                edit 84
                    set category 92
                next
                edit 85
                    set category 93
                next
                edit 86
                    set category 94
                next
                edit 87
                    set category 95
                next
            end
        end
        set log-all-url enable
        set web-content-log disable
        set web-filter-activex-log disable
        set web-filter-command-block-log disable
        set web-filter-cookie-log disable
        set web-filter-applet-log disable
        set web-filter-jscript-log disable
        set web-filter-js-log disable
        set web-filter-vbs-log disable
        set web-filter-unknown-log disable
        set web-filter-referer-log disable
        set web-filter-cookie-removal-log disable
        set web-url-log disable
        set web-invalid-domain-log disable
        set web-ftgd-err-log disable
        set web-ftgd-quota-usage disable
    next
end
config webfilter search-engine
    edit "google"
        set hostname ".*\\.google\\..*"
        set url "^\\/((custom|search|images|videosearch|webhp)\\?)"
        set query "q="
        set safesearch url
        set safesearch-str "&safe=active"
    next
    edit "yahoo"
        set hostname ".*\\.yahoo\\..*"
        set url "^\\/search(\\/video|\\/images){0,1}(\\?|;)"
        set query "p="
        set safesearch url
        set safesearch-str "&vm=r"
    next
    edit "bing"
        set hostname ".*\\.bing\\..*"
        set url "^(\\/images|\\/videos)?(\\/search|\\/async|\\/asyncv2)\\?"
        set query "q="
        set safesearch header
    next
    edit "yandex"
        set hostname "yandex\\..*"
        set url "^\\/((yand|images\\/|video\\/)(search)|search\\/)\\?"
        set query "text="
        set safesearch url
        set safesearch-str "&family=yes"
    next
    edit "youtube"
        set hostname ".*youtube.*"
        set safesearch header
    next
    edit "baidu"
        set hostname ".*\\.baidu\\.com"
        set url "^\\/s?\\?"
        set query "wd="
    next
    edit "baidu2"
        set hostname ".*\\.baidu\\.com"
        set url "^\\/(ns|q|m|i|v)\\?"
        set query "word="
    next
    edit "baidu3"
        set hostname "tieba\\.baidu\\.com"
        set url "^\\/f\\?"
        set query "kw="
    next
end
config emailfilter profile
    edit "sniffer-profile"
        set comment "Malware and phishing URL monitoring."
    next
    edit "default"
        set comment "Malware and phishing URL filtering."
    next
end
config firewall schedule recurring
    edit "always"
        set day sunday monday tuesday wednesday thursday friday saturday
    next
    edit "none"
    next
    edit "default-darrp-optimize"
        set start 01:00
        set end 01:30
        set day sunday monday tuesday wednesday thursday friday saturday
    next
end
config firewall vip
    edit "VIP_SW_1"
        set uuid bbc00402-0f27-51f0-d410-b0dd55b29c91
        set extip 213.131.47.202
        set extintf "any"
        set portforward enable
        set mappedip "10.10.7.240"
        set extport 65001
        set mappedport 22
    next
end
config firewall profile-protocol-options
    edit "default"
        set comment "All default services."
        config http
            set ports 80
            unset options
            unset post-lang
        end
        config ftp
            set ports 21
            set options splice
        end
        config imap
            set ports 143
            set options fragmail
        end
        config mapi
            set ports 135
            set options fragmail
        end
        config pop3
            set ports 110
            set options fragmail
        end
        config smtp
            set ports 25
            set options fragmail splice
        end
        config nntp
            set ports 119
            set options splice
        end
        config ssh
            unset options
        end
        config dns
            set ports 53
        end
        config cifs
            set ports 445
        end
    next
end
config firewall ssl-ssh-profile
    edit "no-inspection"
        set comment "Read-only profile that does no inspection."
        config https
            set status disable
        end
        config ftps
            set status disable
        end
        config imaps
            set status disable
        end
        config pop3s
            set status disable
        end
        config smtps
            set status disable
        end
        config ssh
            set ports 22
            set status disable
        end
    next
    edit "custom-deep-inspection"
        set comment "Customizable deep inspection profile."
        config https
            set ports 443
            set status deep-inspection
        end
        config ftps
            set ports 990
            set status deep-inspection
        end
        config imaps
            set ports 993
            set status deep-inspection
        end
        config pop3s
            set ports 995
            set status deep-inspection
        end
        config smtps
            set ports 465
            set status deep-inspection
        end
        config ssh
            set ports 22
            set status deep-inspection
        end
        config ssl-exempt
            edit 1
                set fortiguard-category 31
            next
            edit 2
                set fortiguard-category 33
            next
            edit 3
                set type wildcard-fqdn
                set wildcard-fqdn "google-play"
            next
            edit 4
                set type wildcard-fqdn
                set wildcard-fqdn "update.microsoft.com"
            next
            edit 5
                set type wildcard-fqdn
                set wildcard-fqdn "swscan.apple.com"
            next
            edit 6
                set type wildcard-fqdn
                set wildcard-fqdn "autoupdate.opera.com"
            next
            edit 7
                set type wildcard-fqdn
                set wildcard-fqdn "android"
            next
            edit 8
                set type wildcard-fqdn
                set wildcard-fqdn "apple"
            next
            edit 9
                set type wildcard-fqdn
                set wildcard-fqdn "appstore"
            next
            edit 10
                set type wildcard-fqdn
                set wildcard-fqdn "citrix"
            next
            edit 11
                set type wildcard-fqdn
                set wildcard-fqdn "eease"
            next
            edit 12
                set type wildcard-fqdn
                set wildcard-fqdn "google-drive"
            next
            edit 13
                set type wildcard-fqdn
                set wildcard-fqdn "google-play2"
            next
            edit 14
                set type wildcard-fqdn
                set wildcard-fqdn "google-play3"
            next
            edit 15
                set type wildcard-fqdn
                set wildcard-fqdn "Gotomeeting"
            next
            edit 16
                set type wildcard-fqdn
                set wildcard-fqdn "microsoft"
            next
            edit 17
                set type wildcard-fqdn
                set wildcard-fqdn "adobe"
            next
            edit 18
                set type wildcard-fqdn
                set wildcard-fqdn "Adobe Login"
            next
            edit 19
                set type wildcard-fqdn
                set wildcard-fqdn "dropbox.com"
            next
            edit 20
                set type wildcard-fqdn
                set wildcard-fqdn "fortinet"
            next
            edit 21
                set type wildcard-fqdn
                set wildcard-fqdn "googleapis.com"
            next
            edit 22
                set type wildcard-fqdn
                set wildcard-fqdn "icloud"
            next
            edit 23
                set type wildcard-fqdn
                set wildcard-fqdn "itunes"
            next
            edit 24
                set type wildcard-fqdn
                set wildcard-fqdn "skype"
            next
            edit 25
                set type wildcard-fqdn
                set wildcard-fqdn "verisign"
            next
            edit 26
                set type wildcard-fqdn
                set wildcard-fqdn "Windows update 2"
            next
            edit 27
                set type wildcard-fqdn
                set wildcard-fqdn "auth.gfx.ms"
            next
            edit 28
                set type wildcard-fqdn
                set wildcard-fqdn "softwareupdate.vmware.com"
            next
            edit 29
                set type wildcard-fqdn
                set wildcard-fqdn "firefox update server"
            next
            edit 30
                set type wildcard-fqdn
                set wildcard-fqdn "live.com"
            next
        end
    next
    edit "certificate-inspection"
        set comment "Read-only SSL handshake inspection profile."
        config https
            set ports 443
            set status certificate-inspection
        end
        config ftps
            set status disable
        end
        config imaps
            set status disable
        end
        config pop3s
            set status disable
        end
        config smtps
            set status disable
        end
        config ssh
            set ports 22
            set status disable
        end
    next
    edit "deep-inspection"
        set comment "Read-only deep inspection profile."
        config https
            set ports 443
            set status deep-inspection
        end
        config ftps
            set ports 990
            set status deep-inspection
        end
        config imaps
            set ports 993
            set status deep-inspection
        end
        config pop3s
            set ports 995
            set status deep-inspection
        end
        config smtps
            set ports 465
            set status deep-inspection
        end
        config ssh
            set ports 22
            set status disable
        end
        config ssl-exempt
            edit 1
                set fortiguard-category 31
            next
            edit 2
                set fortiguard-category 33
            next
            edit 3
                set type wildcard-fqdn
                set wildcard-fqdn "adobe"
            next
            edit 4
                set type wildcard-fqdn
                set wildcard-fqdn "Adobe Login"
            next
            edit 5
                set type wildcard-fqdn
                set wildcard-fqdn "android"
            next
            edit 6
                set type wildcard-fqdn
                set wildcard-fqdn "apple"
            next
            edit 7
                set type wildcard-fqdn
                set wildcard-fqdn "appstore"
            next
            edit 8
                set type wildcard-fqdn
                set wildcard-fqdn "auth.gfx.ms"
            next
            edit 9
                set type wildcard-fqdn
                set wildcard-fqdn "citrix"
            next
            edit 10
                set type wildcard-fqdn
                set wildcard-fqdn "dropbox.com"
            next
            edit 11
                set type wildcard-fqdn
                set wildcard-fqdn "eease"
            next
            edit 12
                set type wildcard-fqdn
                set wildcard-fqdn "firefox update server"
            next
            edit 13
                set type wildcard-fqdn
                set wildcard-fqdn "fortinet"
            next
            edit 14
                set type wildcard-fqdn
                set wildcard-fqdn "googleapis.com"
            next
            edit 15
                set type wildcard-fqdn
                set wildcard-fqdn "google-drive"
            next
            edit 16
                set type wildcard-fqdn
                set wildcard-fqdn "google-play2"
            next
            edit 17
                set type wildcard-fqdn
                set wildcard-fqdn "google-play3"
            next
            edit 18
                set type wildcard-fqdn
                set wildcard-fqdn "Gotomeeting"
            next
            edit 19
                set type wildcard-fqdn
                set wildcard-fqdn "icloud"
            next
            edit 20
                set type wildcard-fqdn
                set wildcard-fqdn "itunes"
            next
            edit 21
                set type wildcard-fqdn
                set wildcard-fqdn "microsoft"
            next
            edit 22
                set type wildcard-fqdn
                set wildcard-fqdn "skype"
            next
            edit 23
                set type wildcard-fqdn
                set wildcard-fqdn "softwareupdate.vmware.com"
            next
            edit 24
                set type wildcard-fqdn
                set wildcard-fqdn "verisign"
            next
            edit 25
                set type wildcard-fqdn
                set wildcard-fqdn "Windows update 2"
            next
            edit 26
                set type wildcard-fqdn
                set wildcard-fqdn "live.com"
            next
            edit 27
                set type wildcard-fqdn
                set wildcard-fqdn "google-play"
            next
            edit 28
                set type wildcard-fqdn
                set wildcard-fqdn "update.microsoft.com"
            next
            edit 29
                set type wildcard-fqdn
                set wildcard-fqdn "swscan.apple.com"
            next
            edit 30
                set type wildcard-fqdn
                set wildcard-fqdn "autoupdate.opera.com"
            next
        end
    next
end
config waf profile
    edit "default"
        config signature
            config main-class 100000000
                set action block
                set log disable
                set severity high
            end
            config main-class 20000000
                set log disable
            end
            config main-class 30000000
                set status enable
                set action block
                set log disable
                set severity high
            end
            config main-class 40000000
                set log disable
            end
            config main-class 50000000
                set status enable
                set action block
                set log disable
                set severity high
            end
            config main-class 60000000
                set log disable
            end
            config main-class 70000000
                set status enable
                set action block
                set log disable
                set severity high
            end
            config main-class 80000000
                set status enable
                set log disable
                set severity low
            end
            config main-class 110000000
                set status enable
                set log disable
                set severity high
            end
            config main-class 90000000
                set status enable
                set action block
                set log disable
                set severity high
            end
            set disabled-signature 80080005 80200001 60030001 60120001 80080003 90410001 90410002
        end
        config constraint
            config header-length
                set status enable
                set log enable
                set severity low
            end
            config content-length
                set status enable
                set log enable
                set severity low
            end
            config param-length
                set status enable
                set log enable
                set severity low
            end
            config line-length
                set status enable
                set log enable
                set severity low
            end
            config url-param-length
                set status enable
                set log enable
                set severity low
            end
            config version
                set log enable
            end
            config method
                set action block
                set log enable
            end
            config hostname
                set action block
                set log enable
            end
            config malformed
                set log enable
            end
            config max-cookie
                set status enable
                set log enable
                set severity low
            end
            config max-header-line
                set status enable
                set log enable
                set severity low
            end
            config max-url-param
                set status enable
                set log enable
                set severity low
            end
            config max-range-segment
                set status enable
                set log enable
                set severity high
            end
        end
    next
end
config firewall policy
    edit 1
        set name "21"
        set uuid 5ad442cc-2ede-51ef-f688-94256e5dd738
        set srcintf "Users-10.10.7"
        set dstintf "wan1"
        set srcaddr "all"
        set dstaddr "all"
        set action accept
        set schedule "always"
        set service "ALL"
        set nat enable
    next
    edit 2
        set name "vpn_VPN_HO_local"
        set uuid f947041c-0f25-51f0-552e-9047fd659859
        set srcintf "Users-10.10.7"
        set dstintf "VPN_HO"
        set srcaddr "all"
        set dstaddr "all"
        set action accept
        set schedule "always"
        set service "ALL"
    next
    edit 5
        set name "Banks to WAN"
        set uuid 89aace44-0f30-51f0-74e3-f9cae00e6f6f
        set srcintf "Banks-10.20.7"
        set dstintf "VPN_HO"
        set srcaddr "all"
        set dstaddr "all"
        set action accept
        set schedule "always"
        set service "ALL"
    next
    edit 6
        set name "Guests to WAN"
        set uuid ca9b7cc8-0f30-51f0-1ec0-6dc64caf3a48
        set srcintf "Guests"
        set dstintf "VPN_HO"
        set srcaddr "all"
        set dstaddr "all"
        set action accept
        set schedule "always"
        set service "ALL"
    next
    edit 3
        set name "vpn_VPN_HO_remote"
        set uuid f94e4d4e-0f25-51f0-0543-7f8bd1570832
        set srcintf "VPN_HO"
        set dstintf "Users-10.10.7"
        set srcaddr "VPN_HO_remote"
        set dstaddr "VPN_HO_local"
        set action accept
        set schedule "always"
        set service "ALL"
        set comments "VPN: VPN_HO (Created by VPN wizard)"
    next
    edit 4
        set name "Wan to SW1"
        set uuid d71c4300-0f27-51f0-cd3f-4500dbeeeec1
        set srcintf "wan1"
        set dstintf "Users-10.10.7"
        set srcaddr "all"
        set dstaddr "VIP_SW_1"
        set action accept
        set schedule "always"
        set service "ALL"
    next
end
config firewall ssh local-key
    edit "Fortinet_SSH_RSA2048"
        set password ENC a2QE4NYdPffYVUpUKSDl4t0fa87w12hqHrDtrI1B5s2kIcO/5oxcdcPK9pxCxuyVNygdxtxczUNMpEEdb2wjAmC8cBdU4yYUQ4Y46dEOqKZC+FNGGbxOVBZ3fcETlz/xhmlXq2xcS9ZPNZlpQ6ufFQfyUXaRvAbkb5yqtgbYr18+/us93AA70vGR2bTkpX96/KgxDg==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5QxRDPoYe11GAzwoaW4N5YorTqEreUOB3XBnKf+t8R6iffWkDDUePI4OgyiTX9hcxhDLNHshdzrMnwQ6IdwdS8EHH2mm9omZ4o5yvm/Zk8YwFX407W/WpKl3XWVyxP2hIwvxyIeYaNaCypA/X+nK6DDh8Mhh9cc/K9gYeIKKx2k4v8Lzj+yuTGCERMtL3yWKgidi1MHas2DqXbiA1mqbbBRNoog1AzZiefureqCT2ul3N9pDdjzACqw6kJJr5D9KdEBRmgD7G9fEjwO0DSvIulVZJsUf68WvajJHg8Z2Rqc2/zMcur0eofrz6S+0laHoGGKB4p2q1+itnKIZ5H2R1"
        set source built-in
    next
    edit "Fortinet_SSH_DSA1024"
        set password ENC a2QE4M3u2mRBLavQYJye/CabbV/yWnWM33NOKA/ejmqhi+ERYoUUekcQtyYwYdpSBwRJITm3h2ohVHxw/7RTr5nW4vQR6mWBh1kmoul5T7PxP4ubj7IXYb4zTOawR3dLh0Use5LOAxgKzsnBWHL6vzra4GGdGXneuy9uWXNV1ppU1So15dDlhlIAlto/Ea7UWpi0ug==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-dss 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"
        set source built-in
    next
    edit "Fortinet_SSH_ECDSA256"
        set password ENC a2QE4IbA0zi6yEzKOLyS5MdJOHKyjAmUxV7N/MAz+UFDRXvboV7CgoLypUzhhIFJDyt8Z1gmPG3tMkQpj3Ps2PSsPgRTODP4biaLey9EgO+uWqJT3sqBChXfC6rVnhoKULuf+VnKddtwLvVS/bEkXk3aBeLRi2fSNNIj0H2qn1YwygR93Bv+koS51uF5eTfEiWzYfQ==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABDOnyohyj
4EBIM4py5cKLX8AAAAEAAAAAEAAABoAAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlz
dHAyNTYAAABBBL8G1JRIlz3bMmIqUqTtusDvpYSNB+SefdQMgeirYVkdI8mrQFEHoKfURN
Y98RQhDrc/GY/QXUaWGjGUb95JfQsAAACgHSPVclS/LB0a+ipxQgcwD/5oIXA/Fb2Fuu8b
TzN81DUHfgUwCDlEeSbg2phK7Rs/nuZof+3HzpkKvniPfkgqlu4aP4Q9z0kvnlqVg9oLwQ
KKYjBVTQMWMvyWcYH4wdG1NEUsG53sP54bd18G7ErPI9wPU5iRA9rrq2R8CMhnvo3kxvcs
n8/15yyWbTXLJb66OIq+KMFTO9mggw9PBIH9WQ==
-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBL8G1JRIlz3bMmIqUqTtusDvpYSNB+SefdQMgeirYVkdI8mrQFEHoKfURNY98RQhDrc/GY/QXUaWGjGUb95JfQs="
        set source built-in
    next
    edit "Fortinet_SSH_ECDSA384"
        set password ENC a2QE4NuR30meyUyEueZhWMteaOH85j0kpJjqfaBFEP5JFRpfgsrCERgc2rLRovScBm6D7JlYufOylwNbSU4GL5ldnPKpqmnzyRAqgC04vwSsu7yZKvKHVc02ro6kAwxiPo8JNCQdD2VR+LWvvUe27sbgnrEapbppKVjFmdcpIo3s5DWT++IFbqS6LUEnbvtedk8Zaw==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ecdsa-sha2-nistp384 AAAAE2VjZHNhLXNoYTItbmlzdHAzODQAAAAIbmlzdHAzODQAAABhBIwLqdoSI+jBkH8dJgNyECxrHs/kpQc2HddEgWrDi0EnMdrHe/Pt5vmlHo4g7I9bQ5hv3vDhmWMafw4nsppDiPltAmfTn6rRhpPaFcRKWSaUfh1F+Ziia+nww37iEym7hg=="
        set source built-in
    next
    edit "Fortinet_SSH_ECDSA521"
        set password ENC a2QE4F5oWTURtODj8P8PeivL1K2zuh4k/QQ6fYAGDOvsWsvXhCJvzhwDs8d9uJcMBvLuuCrLVs9g9I9r+B9W4S4ECzSk2wO/wcJljFA83gxJCzeYp9BJTelsEQd4yw0MMGo6G1mnPR2C/wrre9S7EqM4RowA+9GTvDozI1ogz7PXs+qe2pBYFHQgeiEtQy6g+1LMvw==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAGRIubyBdIIVF15Aspf3fSTIe/wbPVhitzkv44LVemD9/PtHR4OY6puHGJhZifG79ng7hDNjzd6YG2TUHKDdRFKqwBFmNg9mrOFSGxlXnqrbqNnKEPgxqbIeVpXSl2wggamlq8/ETEyyYsRGhlJSJWrGsD/VUVJ9wfyCM2qtEJL9CAowQ=="
        set source built-in
    next
    edit "Fortinet_SSH_ED25519"
        set password ENC I18gAS2YWlGYKoiWkxQdGQfrMxnLyCIZjwzPIxJhVa/afwVdQz8Onam9ulqkPtY5cp7QWDkRjCStn7DH7MEgiEnOhvFBAKMJbkgJIJ6lQyedQdIav3Y7WdlWDfC2qMlwXOvPi19E4VRgZ/Zs0+DsKdtjouhcIJHPMVXSq71xFOVqvfjeoWij6zofw/YZO1HpzrOKfw==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABAm6XOgtv
txsYyv0D8dEncOAAAAEAAAAAEAAAAzAAAAC3NzaC1lZDI1NTE5AAAAIIkr5s4pN9tB8vCd
7aiyzQTT7l5R5pii3k58hEzqJ+hRAAAAkIx/KF9bz9ON+kXlLFy9yXeobToTc013297R3C
ackEUeNOfo2l80OQz5p9lwXSKn6UcAEIysL3NuitRPR1l78ajJlIz/R2c7uqZzL+ZEGcy9
NHx8pwaNwf+BhT6VDi1s42E27y+MvZRa4fox6Zy3aYae3VBMO/52BKWMwfwIYsH09mzd7b
qe16k4Lfb1LJm2Sg==
-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIkr5s4pN9tB8vCd7aiyzQTT7l5R5pii3k58hEzqJ+hR"
        set source built-in
    next
end
config firewall ssh local-ca
    edit "Fortinet_SSH_CA"
        set password ENC pccAARcmrcfibFB4YPjyoj/4Z/XfE2T38Xnh6+57DfgNBrH4tRmXQu6p5Y5qGOwq9Yts2IIeuVButEUuWiePYgST5xw7zU+HHYdzy0GLH4a3rnm1QT5+9wuBwaAQebSaIzW4wUbPb6fEsnjIquxI7+On12eo0zf3nMVbbGcQoaCWgqGB9DAchy8/DUJ5uMD2DWvckw==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAxbKigm+nXdDZk/RYmDt3dMFPRltvanvB4Hykg7fxmNBXd2Naqhf4rgeNLjwRiUpw/f589BgeTY3tSMDSzURCNe1sC03JWg5GToSmrwMHI9FN0pcJ8i3u+lOF7vah1Y74YVE3iKjBezptVWJEjzMLcWXSlbQCn0pCmXgdQO9zGv/yIw68Gw7f3eFs/0Pu5Rtki5CqvsXrGD/KiYQZvhmcdHXDMmJhWQ7musoP010FaT1nBWU3eZ4LdFdJ+ZwlDETnWoykVa4krXkuRfM9Q89p9yOncI+hFggM+irgH+/0DtkQZfkUytT2hzpZ6wgl3EIm0oqBWURUoSlHVPL4Uqmb"
        set source built-in
    next
    edit "Fortinet_SSH_CA_Untrusted"
        set password ENC pccAAeHAKCLNZcOh92UVoXtNQdr1A3oe1UPuvfeCvau5wyJf2AWJde/EeXBMl7UuKUP2FylOM5+v6Mlh1oAu4eNwVwaNXxXB6I02+8eBr/C81ruRfdHosAGZUa1DC4n1vGyyO82OsPFALW9owQgz9HY/VdN536qKqsgv0LlZtbt7DhbLtvJWlteJFArj+Lya8EfPtw==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgzZ2/bdyXEHb4DthYYNE7DlFu4leCS/qGgKbkEeq2i5hMdC4pEeMoWyrmy6UVilLkbC5+VqRhblZWk8W5oy5/GXruxrGOJgu2rJ7gLpylR6jOeLePq0i72/mFA5v45UJm8V4OK4LlKJ3tT1eEem9QeIIxIv83G1/uJSt643zJ93RxQm1yZmSvU3tf+0FchB8fQxhnmyXGAHXDO/suyxd3HZML8U5Hzbbvl5bfOjFuBq6Zk67MaRaJjdN9WJPtiujVOyWkj50ncbN9LvzSV/pMtAZ1Po9tUloRW+PZdV0IEw1wK7PwfNObbwDK/gVuCuY23A4y4stJmkMfM6mXwFpj"
        set source built-in
    next
end
config firewall ssh setting
    set caname "Fortinet_SSH_CA"
    set untrusted-caname "Fortinet_SSH_CA_Untrusted"
    set hostkey-rsa2048 "Fortinet_SSH_RSA2048"
    set hostkey-dsa1024 "Fortinet_SSH_DSA1024"
    set hostkey-ecdsa256 "Fortinet_SSH_ECDSA256"
    set hostkey-ecdsa384 "Fortinet_SSH_ECDSA384"
    set hostkey-ecdsa521 "Fortinet_SSH_ECDSA521"
    set hostkey-ed25519 "Fortinet_SSH_ED25519"
end
config switch-controller security-policy 802-1X
    edit "802-1X-policy-default"
        set user-group "SSO_Guest_Users"
        set mac-auth-bypass disable
        set open-auth disable
        set eap-passthru enable
        set guest-vlan disable
        set auth-fail-vlan disable
        set framevid-apply enable
        set radius-timeout-overwrite disable
    next
end
config switch-controller security-policy local-access
    edit "default"
        set mgmt-allowaccess https ping ssh
        set internal-allowaccess https ping ssh
    next
end
config switch-controller lldp-profile
    edit "default"
        set med-tlvs inventory-management network-policy
        set auto-isl disable
        config med-network-policy
            edit "voice"
            next
            edit "voice-signaling"
            next
            edit "guest-voice"
            next
            edit "guest-voice-signaling"
            next
            edit "softphone-voice"
            next
            edit "video-conferencing"
            next
            edit "streaming-video"
            next
            edit "video-signaling"
            next
        end
    next
    edit "default-auto-isl"
    next
end
config switch-controller qos dot1p-map
    edit "voice-dot1p"
        set priority-0 queue-4
        set priority-1 queue-4
        set priority-2 queue-3
        set priority-3 queue-2
        set priority-4 queue-3
        set priority-5 queue-1
        set priority-6 queue-2
        set priority-7 queue-2
    next
end
config switch-controller qos ip-dscp-map
    edit "voice-dscp"
        config map
            edit "1"
                set cos-queue 1
                set value 46
            next
            edit "2"
                set cos-queue 2
                set value 24,26,48,56
            next
            edit "5"
                set cos-queue 3
                set value 34
            next
        end
    next
end
config switch-controller qos queue-policy
    edit "default"
        set schedule round-robin
        set rate-by kbps
        config cos-queue
            edit "queue-0"
            next
            edit "queue-1"
            next
            edit "queue-2"
            next
            edit "queue-3"
            next
            edit "queue-4"
            next
            edit "queue-5"
            next
            edit "queue-6"
            next
            edit "queue-7"
            next
        end
    next
    edit "voice-egress"
        set schedule weighted
        set rate-by kbps
        config cos-queue
            edit "queue-0"
            next
            edit "queue-1"
                set weight 0
            next
            edit "queue-2"
                set weight 6
            next
            edit "queue-3"
                set weight 37
            next
            edit "queue-4"
                set weight 12
            next
            edit "queue-5"
            next
            edit "queue-6"
            next
            edit "queue-7"
            next
        end
    next
end
config switch-controller qos qos-policy
    edit "default"
    next
    edit "voice-qos"
        set trust-dot1p-map "voice-dot1p"
        set trust-ip-dscp-map "voice-dscp"
        set queue-policy "voice-egress"
    next
end
config switch-controller storm-control-policy
    edit "default"
        set description "default storm control on all port"
    next
    edit "auto-config"
        set description "storm control policy for fortilink-isl-icl port"
        set storm-control-mode disabled
    next
end
config switch-controller auto-config policy
    edit "default"
    next
    edit "default-icl"
        set poe-status disable
        set igmp-flood-report enable
        set igmp-flood-traffic enable
    next
end
config switch-controller switch-profile
    edit "default"
    next
end
config switch-controller remote-log
    edit "syslogd"
    next
    edit "syslogd2"
    next
end
config wireless-controller setting
    set darrp-optimize-schedules "default-darrp-optimize"
end
config wireless-controller wids-profile
    edit "default"
        set comment "Default WIDS profile."
        set ap-scan enable
        set wireless-bridge enable
        set deauth-broadcast enable
        set null-ssid-probe-resp enable
        set long-duration-attack enable
        set invalid-mac-oui enable
        set weak-wep-iv enable
        set auth-frame-flood enable
        set assoc-frame-flood enable
        set spoofed-deauth enable
        set asleap-attack enable
        set eapol-start-flood enable
        set eapol-logoff-flood enable
        set eapol-succ-flood enable
        set eapol-fail-flood enable
        set eapol-pre-succ-flood enable
        set eapol-pre-fail-flood enable
    next
    edit "default-wids-apscan-enabled"
        set ap-scan enable
    next
end
config wireless-controller wtp-profile
    edit "FAPU433F-default"
        config platform
            set type U433F
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11ax-5G
        end
        config radio-2
            set band 802.11ax,n,g-only
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAPU431F-default"
        config platform
            set type U431F
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11ax-5G
        end
        config radio-2
            set band 802.11ax,n,g-only
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAP23JF-default"
        config platform
            set type 23JF
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11ax
        end
        config radio-2
            set band 802.11ax-5G
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAP234F-default"
        config platform
            set type 234F
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11ax
        end
        config radio-2
            set band 802.11ax-5G
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAP231F-default"
        config platform
            set type 231F
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11ax
        end
        config radio-2
            set band 802.11ax-5G
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAP433F-default"
        config platform
            set type 433F
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11ax
        end
        config radio-2
            set band 802.11ax-5G
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAP432F-default"
        config platform
            set type 432F
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11ax
        end
        config radio-2
            set band 802.11ax-5G
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAP431F-default"
        config platform
            set type 431F
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11ax
        end
        config radio-2
            set band 802.11ax-5G
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAP321E-default"
        config platform
            set type 321E
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAP231E-default"
        config platform
            set type 231E
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAPU323EV-default"
        config platform
            set type U323EV
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPU321EV-default"
        config platform
            set type U321EV
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPU24JEV-default"
        config platform
            set type U24JEV
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPU223EV-default"
        config platform
            set type U223EV
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPU221EV-default"
        config platform
            set type U221EV
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPU423E-default"
        config platform
            set type U423E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPU422EV-default"
        config platform
            set type U422EV
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPU421E-default"
        config platform
            set type U421E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS223E-default"
        config platform
            set type S223E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS221E-default"
        config platform
            set type S221E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP224E-default"
        config platform
            set type 224E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP223E-default"
        config platform
            set type 223E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP222E-default"
        config platform
            set type 222E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP221E-default"
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP423E-default"
        config platform
            set type 423E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP421E-default"
        config platform
            set type 421E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS423E-default"
        config platform
            set type S423E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS422E-default"
        config platform
            set type S422E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS421E-default"
        config platform
            set type S421E
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS323CR-default"
        config platform
            set type S323CR
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS322CR-default"
        config platform
            set type S322CR
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS321CR-default"
        config platform
            set type S321CR
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS313C-default"
        config platform
            set type S313C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS311C-default"
        config platform
            set type S311C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS323C-default"
        config platform
            set type S323C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS322C-default"
        config platform
            set type S322C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAPS321C-default"
        config platform
            set type S321C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP321C-default"
        config platform
            set type 321C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP223C-default"
        config platform
            set type 223C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP112D-default"
        config platform
            set type 112D
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP24D-default"
        config platform
            set type 24D
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP21D-default"
        config platform
            set type 21D
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FK214B-default"
        config platform
            set type 214B
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP224D-default"
        config platform
            set type 224D
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n-5G
            set channel-utilization disable
        end
        config radio-2
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP222C-default"
        config platform
            set type 222C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP25D-default"
        config platform
            set type 25D
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP221C-default"
        config platform
            set type 221C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP320C-default"
        config platform
            set type 320C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11ac
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP28C-default"
        config platform
            set type 28C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP223B-default"
        config platform
            set type 223B
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n-5G
            set channel-utilization disable
        end
        config radio-2
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP14C-default"
        config platform
            set type 14C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP11C-default"
        config platform
            set type 11C
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP320B-default"
        config platform
            set type 320B
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n-5G
            set channel-utilization disable
        end
        config radio-2
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP112B-default"
        config platform
            set type 112B
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP222B-default"
        config platform
            set type 222B
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        config radio-2
            set band 802.11n-5G
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP210B-default"
        config platform
            set type 210B
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "FAP220B-default"
        config platform
            set type 220B
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n-5G
            set channel-utilization disable
        end
        config radio-2
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
    edit "AP-11N-default"
        config platform
            set type AP-11N
        end
        set handoff-sta-thresh 30
        set lldp disable
        config radio-1
            set band 802.11n,g-only
            set channel-utilization disable
        end
        set ext-info-enable disable
    next
end
config wireless-controller utm-profile
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        set ips-sensor "wifi-default"
        set application-list "wifi-default"
        set antivirus-profile "wifi-default"
        set webfilter-profile "wifi-default"
    next
end
config log memory setting
    set status enable
end
config log null-device setting
    set status disable
end
config router rip
    config redistribute "connected"
    end
    config redistribute "static"
    end
    config redistribute "ospf"
    end
    config redistribute "bgp"
    end
    config redistribute "isis"
    end
end
config router ripng
    config redistribute "connected"
    end
    config redistribute "static"
    end
    config redistribute "ospf"
    end
    config redistribute "bgp"
    end
    config redistribute "isis"
    end
end
config router static
    edit 1
        set distance 20
        set device "VPN_HO"
    next
    edit 3
        set dst 213.131.47.178 255.255.255.255
        set gateway 146.255.241.237
        set distance 5
        set device "wan1"
    next
    edit 4
        set dst 10.0.200.0 255.255.255.0
        set device "VPN_HO"
        set comment "Servers"
    next
    edit 5
        set dst 212.58.96.0 255.255.224.0
        set gateway 213.131.47.201
        set device "wan1"
    next
    edit 6
        set dst 188.93.95.0 255.255.255.0
        set gateway 213.131.47.201
        set device "wan1"
    next
    edit 7
        set dst 185.181.250.0 255.255.255.0
        set gateway 213.131.47.201
        set device "wan1"
    next
end
config router ospf
    config redistribute "connected"
    end
    config redistribute "static"
    end
    config redistribute "rip"
    end
    config redistribute "bgp"
    end
    config redistribute "isis"
    end
end
config router ospf6
    config redistribute "connected"
    end
    config redistribute "static"
    end
    config redistribute "rip"
    end
    config redistribute "bgp"
    end
    config redistribute "isis"
    end
end
config router bgp
    config redistribute "connected"
    end
    config redistribute "rip"
    end
    config redistribute "ospf"
    end
    config redistribute "static"
    end
    config redistribute "isis"
    end
    config redistribute6 "connected"
    end
    config redistribute6 "rip"
    end
    config redistribute6 "ospf"
    end
    config redistribute6 "static"
    end
    config redistribute6 "isis"
    end
end
config router isis
    config redistribute "connected"
    end
    config redistribute "rip"
    end
    config redistribute "ospf"
    end
    config redistribute "bgp"
    end
    config redistribute "static"
    end
    config redistribute6 "connected"
    end
    config redistribute6 "rip"
    end
    config redistribute6 "ospf"
    end
    config redistribute6 "bgp"
    end
    config redistribute6 "static"
    end
end
config router multicast
end
