93983 lines
2.9 MiB
93983 lines
2.9 MiB
InterCloud-FWaaS # #config-version=FG1K5D-7.2.11-FW-build1740-250210:opmode=0:vdom=1:user=mosiur
|
|
#conf_file_ver=19058024027239469
|
|
#buildno=1740
|
|
#global_vdom=1
|
|
|
|
config vdom
|
|
edit root
|
|
next
|
|
edit IC-CLOUD
|
|
next
|
|
edit RnD
|
|
next
|
|
end
|
|
|
|
config global
|
|
config system global
|
|
set admin-concurrent enable
|
|
set admin-console-timeout 0
|
|
set admin-forticloud-sso-login disable
|
|
set admin-host ''
|
|
set admin-hsts-max-age 15552000
|
|
set admin-https-pki-required disable
|
|
set admin-https-redirect enable
|
|
unset admin-https-ssl-banned-ciphers
|
|
set admin-https-ssl-ciphersuites TLS-AES-128-GCM-SHA256 TLS-AES-256-GCM-SHA384 TLS-CHACHA20-POLY1305-SHA256
|
|
set admin-https-ssl-versions tlsv1-2 tlsv1-3
|
|
set admin-lockout-duration 60
|
|
set admin-lockout-threshold 3
|
|
set admin-login-max 100
|
|
set admin-port 80
|
|
set admin-restrict-local disable
|
|
set admin-scp disable
|
|
set admin-server-cert "brilliant com bd certificate"
|
|
set admin-sport 443
|
|
set admin-ssh-grace-time 120
|
|
set admin-ssh-password enable
|
|
set admin-ssh-port 7900
|
|
set admin-ssh-v1 disable
|
|
set admin-telnet enable
|
|
set admin-telnet-port 23
|
|
set admintimeout 480
|
|
set alias "FG1K5D3I17804039"
|
|
set allow-traffic-redirect enable
|
|
set anti-replay strict
|
|
set arp-max-entry 131072
|
|
set auth-cert "Fortinet_Factory"
|
|
set auth-http-port 1000
|
|
set auth-https-port 1003
|
|
set auth-ike-saml-port 1001
|
|
set auth-keepalive disable
|
|
set auth-session-limit block-new
|
|
set auto-auth-extension-device enable
|
|
set autorun-log-fsck disable
|
|
set av-affinity "0"
|
|
set av-failopen pass
|
|
set av-failopen-session disable
|
|
set batch-cmdb enable
|
|
set block-session-timer 30
|
|
set br-fdb-max-entry 8192
|
|
set cert-chain-max 8
|
|
set cfg-save automatic
|
|
set check-protocol-header loose
|
|
set check-reset-range disable
|
|
set cli-audit-log disable
|
|
set cloud-communication enable
|
|
set clt-cert-req disable
|
|
set cmdbsvr-affinity "1"
|
|
set cpu-use-threshold 90
|
|
set csr-ca-attribute enable
|
|
set daily-restart disable
|
|
set default-service-source-port 1-65535
|
|
set device-idle-timeout 300
|
|
set dh-params 2048
|
|
set dnsproxy-worker-count 1
|
|
set early-tcp-npu-session disable
|
|
set extender-controller-reserved-network 10.252.0.1 255.255.0.0
|
|
set faz-disk-buffer-size 0
|
|
set fds-statistics enable
|
|
unset fgd-alert-subscription
|
|
set fortiextender disable
|
|
set fortiextender-data-port 25246
|
|
set fortiextender-discovery-lockdown disable
|
|
set fortiextender-provision-on-authorization disable
|
|
set fortiextender-vlan-mode disable
|
|
set fortiservice-port 8013
|
|
set fortitoken-cloud enable
|
|
set gui-app-detection-sdwan disable
|
|
set gui-auto-upgrade-setup-warning disable
|
|
set gui-cdn-usage disable
|
|
set gui-certificates enable
|
|
set gui-custom-language disable
|
|
set gui-date-format yyyy/MM/dd
|
|
set gui-date-time-source system
|
|
set gui-device-latitude "22.67634605819352"
|
|
set gui-device-longitude "89.59272826530635"
|
|
set gui-display-hostname disable
|
|
set gui-firmware-upgrade-warning enable
|
|
set gui-forticare-registration-setup-warning enable
|
|
set gui-fortigate-cloud-sandbox disable
|
|
set gui-ipv6 disable
|
|
set gui-local-out disable
|
|
set gui-replacement-message-groups disable
|
|
set gui-rest-api-cache enable
|
|
set gui-theme eclipse
|
|
set gui-wireless-opensecurity disable
|
|
set gui-workflow-management disable
|
|
set ha-affinity "1"
|
|
set honor-df enable
|
|
set hostname "InterCloud-FWaaS"
|
|
set igmp-state-limit 3200
|
|
set interface-subnet-usage enable
|
|
set internet-service-database full
|
|
set ip-fragment-mem-thresholds 32
|
|
set ip-src-port-range 1024-25000
|
|
set ips-affinity "0"
|
|
set ipsec-asic-offload enable
|
|
set ipsec-ha-seqjump-rate 10
|
|
set ipsec-hmac-offload enable
|
|
set ipsec-soft-dec-async disable
|
|
set ipv6-accept-dad 1
|
|
set ipv6-allow-anycast-probe disable
|
|
set ipv6-allow-local-in-silent-drop enable
|
|
set ipv6-allow-multicast-probe disable
|
|
set ipv6-allow-traffic-redirect enable
|
|
set irq-time-accounting auto
|
|
set language english
|
|
set ldapconntimeout 500
|
|
set lldp-reception disable
|
|
set lldp-transmission disable
|
|
set log-single-cpu-high disable
|
|
set log-ssl-connection disable
|
|
set log-uuid-address disable
|
|
set login-timestamp disable
|
|
set management-ip ''
|
|
set management-port 443
|
|
set management-port-use-admin-sport disable
|
|
set management-vdom "root"
|
|
set max-route-cache-size 0
|
|
set memory-use-threshold-extreme 95
|
|
set memory-use-threshold-green 82
|
|
set memory-use-threshold-red 88
|
|
set miglog-affinity "0"
|
|
set miglogd-children 0
|
|
set multi-factor-authentication optional
|
|
set ndp-max-entry 0
|
|
set npu-neighbor-update disable
|
|
set per-user-bal disable
|
|
set pmtu-discovery disable
|
|
set policy-auth-concurrent 0
|
|
set post-login-banner disable
|
|
set pre-login-banner disable
|
|
set private-data-encryption disable
|
|
set proxy-auth-lifetime disable
|
|
set proxy-auth-timeout 5
|
|
set proxy-cert-use-mgmt-vdom disable
|
|
set proxy-hardware-acceleration enable
|
|
set proxy-keep-alive-mode session
|
|
set proxy-resource-mode disable
|
|
set proxy-worker-count 0
|
|
set radius-port 1812
|
|
set reboot-upon-config-restore enable
|
|
set refresh 0
|
|
set remoteauthtimeout 5
|
|
set reset-sessionless-tcp disable
|
|
set revision-backup-on-logout disable
|
|
set revision-image-auto-backup disable
|
|
set scanunit-count 0
|
|
set security-rating-result-submission enable
|
|
set security-rating-run-on-schedule enable
|
|
set send-pmtu-icmp enable
|
|
set sflowd-max-children-num 6
|
|
set snat-route-change disable
|
|
set special-file-23-support disable
|
|
set speedtest-server disable
|
|
set ssd-trim-freq weekly
|
|
set ssd-trim-hour 1
|
|
set ssd-trim-min 60
|
|
set ssd-trim-weekday sunday
|
|
set ssh-enc-algo aes256-ctr aes256-gcm@openssh.com
|
|
set ssh-kex-algo diffie-hellman-group14-sha256 diffie-hellman-group16-sha512 diffie-hellman-group18-sha512 diffie-hellman-group-exchange-sha256 curve25519-sha256@libssh.org ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521
|
|
set ssh-mac-algo hmac-sha2-256 hmac-sha2-256-etm@openssh.com hmac-sha2-512 hmac-sha2-512-etm@openssh.com
|
|
set ssl-min-proto-version TLSv1-2
|
|
set ssl-static-key-ciphers enable
|
|
set sslvpn-ems-sn-check disable
|
|
set sslvpn-max-worker-count 0
|
|
set strict-dirty-session-check enable
|
|
set strong-crypto enable
|
|
set switch-controller enable
|
|
set switch-controller-reserved-network 10.255.0.1 255.255.0.0
|
|
set sys-perf-log-interval 5
|
|
set syslog-affinity "0"
|
|
set tcp-halfclose-timer 120
|
|
set tcp-halfopen-timer 10
|
|
set tcp-option enable
|
|
set tcp-rst-timer 5
|
|
set tcp-timewait-timer 1
|
|
set timezone 50
|
|
set traffic-priority tos
|
|
set traffic-priority-level medium
|
|
set two-factor-email-expiry 60
|
|
set two-factor-fac-expiry 60
|
|
set two-factor-ftk-expiry 60
|
|
set two-factor-ftm-expiry 72
|
|
set two-factor-sms-expiry 60
|
|
set udp-idle-timer 180
|
|
set url-filter-affinity "0"
|
|
set url-filter-count 1
|
|
set user-device-store-max-devices 168432
|
|
set user-device-store-max-unified-mem 842161971
|
|
set user-device-store-max-users 168432
|
|
set vdom-mode multi-vdom
|
|
set vip-arp-range restricted
|
|
set wad-affinity "0"
|
|
set wad-csvc-cs-count 1
|
|
set wad-csvc-db-count 0
|
|
set wad-memory-change-granularity 10
|
|
set wad-restart-mode none
|
|
set wad-source-affinity enable
|
|
set wad-worker-count 0
|
|
set wifi-ca-certificate "Fortinet_Wifi_CA"
|
|
set wifi-certificate "Fortinet_Wifi"
|
|
set wimax-4g-usb disable
|
|
set wireless-controller enable
|
|
set wireless-controller-port 5246
|
|
set edit-vdom-prompt disable
|
|
set fds-statistics-period 60
|
|
set long-vdom-name disable
|
|
end
|
|
config system accprofile
|
|
edit "prof_admin"
|
|
set scope vdom
|
|
set comments ''
|
|
set secfabgrp read-write
|
|
set ftviewgrp read-write
|
|
set authgrp read-write
|
|
set sysgrp read-write
|
|
set netgrp read-write
|
|
set loggrp read-write
|
|
set fwgrp read-write
|
|
set vpngrp read-write
|
|
set utmgrp read-write
|
|
set wanoptgrp read-write
|
|
set wifi read-write
|
|
set admintimeout-override disable
|
|
set system-diagnostics enable
|
|
set system-execute-ssh enable
|
|
set system-execute-telnet enable
|
|
next
|
|
edit "READ-ONLY"
|
|
set scope vdom
|
|
set comments "READ-ONLY"
|
|
set secfabgrp read
|
|
set ftviewgrp read
|
|
set authgrp read
|
|
set sysgrp read
|
|
set netgrp read
|
|
set loggrp read
|
|
set fwgrp read
|
|
set vpngrp read
|
|
set utmgrp read
|
|
set wanoptgrp read
|
|
set wifi read
|
|
set admintimeout-override disable
|
|
set system-diagnostics enable
|
|
set system-execute-ssh enable
|
|
set system-execute-telnet enable
|
|
next
|
|
end
|
|
config system isf-queue-profile
|
|
end
|
|
config system npu
|
|
set dedicated-management-cpu disable
|
|
set fastpath enable
|
|
set capwap-offload enable
|
|
set ipsec-enc-subengine-mask 0xff
|
|
set ipsec-dec-subengine-mask 0xff
|
|
set np6-cps-optimization-mode disable
|
|
set sw-np-bandwidth 0G
|
|
set strip-esp-padding disable
|
|
set strip-clear-text-padding disable
|
|
set ipsec-inbound-cache enable
|
|
set sse-backpressure disable
|
|
set rdp-offload enable
|
|
set ipsec-over-vlink disable
|
|
set uesp-offload disable
|
|
set qos-mode disable
|
|
set recover-np6-link disable
|
|
set mcast-session-accounting tpe-based
|
|
set ipsec-mtu-override disable
|
|
set lag-out-port-select disable
|
|
config sw-eh-hash
|
|
set computation xor16
|
|
set ip-protocol include
|
|
set source-ip-upper-16 include
|
|
set source-ip-lower-16 include
|
|
set destination-ip-upper-16 include
|
|
set destination-ip-lower-16 include
|
|
set source-port include
|
|
set destination-port include
|
|
set netmask-length 32
|
|
end
|
|
config sw-tr-hash
|
|
set draco15 enable
|
|
end
|
|
set session-denied-offload disable
|
|
set tunnel-over-vlink enable
|
|
config priority-protocol
|
|
set bgp enable
|
|
set slbc enable
|
|
set bfd enable
|
|
end
|
|
end
|
|
config system np6
|
|
edit "np6_0"
|
|
set per-session-accounting traffic-log-only
|
|
set garbage-session-collector disable
|
|
set session-collector-interval 64
|
|
set session-timeout-interval 40
|
|
set session-timeout-random-range 8
|
|
set session-timeout-fixed disable
|
|
config hpe
|
|
set tcpsyn-max 600000
|
|
set tcpsyn-ack-max 600000
|
|
set tcpfin-rst-max 600000
|
|
set tcp-max 600000
|
|
set udp-max 600000
|
|
set icmp-max 200000
|
|
set sctp-max 200000
|
|
set esp-max 200000
|
|
set ip-frag-max 200000
|
|
set ip-others-max 200000
|
|
set arp-max 200000
|
|
set l2-others-max 200000
|
|
set pri-type-max 200000
|
|
set enable-shaper disable
|
|
end
|
|
config fp-anomaly
|
|
set tcp-syn-fin allow
|
|
set tcp-fin-noack trap-to-host
|
|
set tcp-fin-only trap-to-host
|
|
set tcp-no-flag allow
|
|
set tcp-syn-data allow
|
|
set tcp-winnuke trap-to-host
|
|
set tcp-land trap-to-host
|
|
set udp-land trap-to-host
|
|
set icmp-land trap-to-host
|
|
set icmp-frag allow
|
|
set ipv4-land trap-to-host
|
|
set ipv4-proto-err trap-to-host
|
|
set ipv4-unknopt trap-to-host
|
|
set ipv4-optrr trap-to-host
|
|
set ipv4-optssrr trap-to-host
|
|
set ipv4-optlsrr trap-to-host
|
|
set ipv4-optstream trap-to-host
|
|
set ipv4-optsecurity trap-to-host
|
|
set ipv4-opttimestamp trap-to-host
|
|
set ipv4-csum-err drop
|
|
set tcp-csum-err drop
|
|
set udp-csum-err drop
|
|
set icmp-csum-err drop
|
|
set ipv6-land trap-to-host
|
|
set ipv6-proto-err trap-to-host
|
|
set ipv6-unknopt trap-to-host
|
|
set ipv6-saddr-err trap-to-host
|
|
set ipv6-daddr-err trap-to-host
|
|
set ipv6-optralert trap-to-host
|
|
set ipv6-optjumbo trap-to-host
|
|
set ipv6-opttunnel trap-to-host
|
|
set ipv6-opthomeaddr trap-to-host
|
|
set ipv6-optnsap trap-to-host
|
|
set ipv6-optendpid trap-to-host
|
|
set ipv6-optinvld trap-to-host
|
|
end
|
|
next
|
|
edit "np6_1"
|
|
set per-session-accounting traffic-log-only
|
|
set garbage-session-collector disable
|
|
set session-collector-interval 64
|
|
set session-timeout-interval 40
|
|
set session-timeout-random-range 8
|
|
set session-timeout-fixed disable
|
|
config hpe
|
|
set tcpsyn-max 600000
|
|
set tcpsyn-ack-max 600000
|
|
set tcpfin-rst-max 600000
|
|
set tcp-max 600000
|
|
set udp-max 600000
|
|
set icmp-max 200000
|
|
set sctp-max 200000
|
|
set esp-max 200000
|
|
set ip-frag-max 200000
|
|
set ip-others-max 200000
|
|
set arp-max 200000
|
|
set l2-others-max 200000
|
|
set pri-type-max 200000
|
|
set enable-shaper disable
|
|
end
|
|
config fp-anomaly
|
|
set tcp-syn-fin allow
|
|
set tcp-fin-noack trap-to-host
|
|
set tcp-fin-only trap-to-host
|
|
set tcp-no-flag allow
|
|
set tcp-syn-data allow
|
|
set tcp-winnuke trap-to-host
|
|
set tcp-land trap-to-host
|
|
set udp-land trap-to-host
|
|
set icmp-land trap-to-host
|
|
set icmp-frag allow
|
|
set ipv4-land trap-to-host
|
|
set ipv4-proto-err trap-to-host
|
|
set ipv4-unknopt trap-to-host
|
|
set ipv4-optrr trap-to-host
|
|
set ipv4-optssrr trap-to-host
|
|
set ipv4-optlsrr trap-to-host
|
|
set ipv4-optstream trap-to-host
|
|
set ipv4-optsecurity trap-to-host
|
|
set ipv4-opttimestamp trap-to-host
|
|
set ipv4-csum-err drop
|
|
set tcp-csum-err drop
|
|
set udp-csum-err drop
|
|
set icmp-csum-err drop
|
|
set ipv6-land trap-to-host
|
|
set ipv6-proto-err trap-to-host
|
|
set ipv6-unknopt trap-to-host
|
|
set ipv6-saddr-err trap-to-host
|
|
set ipv6-daddr-err trap-to-host
|
|
set ipv6-optralert trap-to-host
|
|
set ipv6-optjumbo trap-to-host
|
|
set ipv6-opttunnel trap-to-host
|
|
set ipv6-opthomeaddr trap-to-host
|
|
set ipv6-optnsap trap-to-host
|
|
set ipv6-optendpid trap-to-host
|
|
set ipv6-optinvld trap-to-host
|
|
end
|
|
next
|
|
end
|
|
config system vdom-link
|
|
end
|
|
config wireless-controller inter-controller
|
|
set inter-controller-mode disable
|
|
set l3-roaming disable
|
|
set inter-controller-key ENC ZmlsZfA3RSg0oXrm0bKiSZ/wC5VBM2y2L+OJN8B3d4jze2BgNflSXcBG1gNS5F4iZu9Zmc5PP99tOzrCwdJ4+vyy3LxgJxXX+xG0r0ehX0+fEGAnkVdFwGgWapT8L7suUdUUGyiteX8HQXjabKJ8262LubysSyoPznUbhkSBug2PAWNzdi+2BGIFV7/N1PHeWJ1lgQ==
|
|
set inter-controller-pri primary
|
|
set fast-failover-max 10
|
|
set fast-failover-wait 10
|
|
end
|
|
config wireless-controller global
|
|
set name ''
|
|
set location ''
|
|
set acd-process-count 0
|
|
set image-download enable
|
|
set max-retransmit 3
|
|
set control-message-offload ebp-frame aeroscout-tag ap-list sta-list sta-cap-list stats aeroscout-mu sta-health spectral-analysis
|
|
set data-ethernet-II enable
|
|
set link-aggregation disable
|
|
set mesh-eth-type 8755
|
|
set fiapp-eth-type 5252
|
|
set discovery-mc-addr 224.0.1.140
|
|
set max-clients 0
|
|
set rogue-scan-mac-adjacency 7
|
|
set ipsec-base-ip 169.254.0.1
|
|
set wtp-share disable
|
|
set tunnel-mode compatible
|
|
set nac-interval 120
|
|
set ap-log-server disable
|
|
end
|
|
config system switch-interface
|
|
end
|
|
config system lte-modem
|
|
set status disable
|
|
set extra-init ''
|
|
set authtype none
|
|
set apn ''
|
|
set modem-port 255
|
|
end
|
|
config system interface
|
|
edit "port1"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 192.168.200.99 255.255.255.0
|
|
set allowaccess ping
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 1
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port2"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 2
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port3"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 192.168.6.53 255.255.255.252
|
|
set allowaccess ping
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias "P2P-NV1SR3-FOR-CDR"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 3
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port4"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 4
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port5"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 5
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port6"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 6
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port7"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 7
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port8"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 8
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port9"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 9
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port10"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 10
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port11"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 11
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port12"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 12
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port13"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 13
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port14"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 14
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port15"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 15
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port16"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 16
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port17"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias "To-SHJ-3"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 17
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port18"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
set allowaccess ping
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status down
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias "VPS-1"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 18
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port19"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 118.67.218.185 255.255.255.248
|
|
set allowaccess ping
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias "VPS-2"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 19
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port20"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias "VPS-Traffic-via-BDCOM"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 20
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port21"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 163.53.149.1 255.255.255.248
|
|
set allowaccess ping
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias "C-Panel Connected Port"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role wan
|
|
set snmp-index 21
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port22"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 118.67.218.141 255.255.255.252
|
|
set allowaccess ping
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias "cnMaestro-Server"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role wan
|
|
set snmp-index 22
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port23"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 163.53.151.169 255.255.255.248
|
|
set allowaccess ping
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description "Server Name: Prolient DL389p gen8
|
|
Rack: -"
|
|
set alias "cPanel-New-eno1-HP"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification enable
|
|
set device-user-identification enable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role wan
|
|
set snmp-index 23
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port24"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 24
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port25"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 25
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port26"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 172.28.1.66 255.255.255.252
|
|
set allowaccess ping
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias "BrilliantCisco-for-Zangi"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role lan
|
|
set snmp-index 26
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port27"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 118.67.217.65 255.255.255.252
|
|
set allowaccess ping
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias "Cloud-IPSec-Mikrotik"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role lan
|
|
set snmp-index 27
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port28"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
set allowaccess ping
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status down
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias "C-Panel DNS Primary "
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 28
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port29"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 10.10.21.1 255.255.255.248
|
|
set allowaccess ping
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias "To-FAZ-7-New"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 29
|
|
set secondary-IP enable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
config secondaryip
|
|
edit 1
|
|
set ip 10.10.20.1 255.255.255.0
|
|
set allowaccess ping
|
|
next
|
|
end
|
|
next
|
|
edit "port30"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 192.168.99.251 255.255.248.0
|
|
set allowaccess ping https ssh snmp http
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias "Novotel-MGT-Temp"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 30
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port31"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 192.168.10.222 255.255.255.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status down
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias "SSL-VPN-TO-PVT-NETWORK"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role lan
|
|
set snmp-index 31
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port32"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
set allowaccess ping
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description "10.10.20.1/255.255.255.0"
|
|
set alias "For-FW-Log-Server"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 32
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port33"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 118.67.218.113 255.255.255.248
|
|
set allowaccess ping
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias "VPS-FRIENDSHIP-NGO-Clinet"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification enable
|
|
set device-user-identification enable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 33
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port34"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 34
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port35"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status down
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 35
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port36"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status down
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 36
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port37"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 118.67.209.49 255.255.255.252
|
|
set allowaccess ping
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias "To-NEXUS-1"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role wan
|
|
set snmp-index 37
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port38"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 118.67.209.61 255.255.255.252
|
|
set allowaccess ping https http
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias "To-NEXUS-2"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification enable
|
|
set device-user-identification enable
|
|
set lldp-reception enable
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role wan
|
|
set snmp-index 38
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "port39"
|
|
set vdom "root"
|
|
set distance 5
|
|
set priority 1
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-classless-route-addition disable
|
|
set status up
|
|
set type physical
|
|
set src-check enable
|
|
set disconnect-threshold 0
|
|
set description ''
|
|
set alias ''
|
|
set ike-saml-server ''
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set role undefined
|
|
set snmp-index 39
|
|
set preserve-session-route disable
|
|
set ap-discover enable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
next
|
|
edit "port40"
|
|
set vdom "root"
|
|
set distance 5
|
|
set priority 1
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-classless-route-addition disable
|
|
set status up
|
|
set type physical
|
|
set src-check enable
|
|
set disconnect-threshold 0
|
|
set description ''
|
|
set alias ''
|
|
set ike-saml-server ''
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set role undefined
|
|
set snmp-index 40
|
|
set preserve-session-route disable
|
|
set ap-discover enable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
next
|
|
edit "mgmt1"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 192.168.1.99 255.255.255.0
|
|
set allowaccess ping https http
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role lan
|
|
set snmp-index 41
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "mgmt2"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set priority 1
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set dhcp-classless-route-addition disable
|
|
set ip 192.168.2.99 255.255.255.0
|
|
set allowaccess ping https
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set dedicated-to management
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role lan
|
|
set snmp-index 42
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
end
|
|
set dhcp-relay-request-all-server disable
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set trust-ip-1 0.0.0.0 0.0.0.0
|
|
set trust-ip-2 0.0.0.0 0.0.0.0
|
|
set trust-ip-3 0.0.0.0 0.0.0.0
|
|
set trust-ip6-1 ::/0
|
|
set trust-ip6-2 ::/0
|
|
set trust-ip6-3 ::/0
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "modem"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode pppoe
|
|
set distance 5
|
|
set priority 1
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
unset allowaccess
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status down
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 43
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set ipunnumbered 0.0.0.0
|
|
set username ''
|
|
set password ENC hWyOA+g+M0dYJFm8+4ypQ8mAstVahdDBkqxv+qxaiP/gjLx72W76u6cLZN/FLHMcXhvV7og7ipyKvqybEWZ9r9X1Q757NDFNY7/QeosJLbfc8Dfy3ZQMm5/wM373VOBb+dPN3h4EHv4BRzsWH2SEdSuVOu/aLVV6zLT610BD8uQvkrYGMBuNcTzbFGTiVvJScdrQ9Q==
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set service-name ''
|
|
set ac-name ''
|
|
set lcp-echo-interval 5
|
|
set lcp-max-echo-fails 3
|
|
set defaultgw enable
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set auth-type auto
|
|
set pptp-client disable
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
next
|
|
edit "naf.root"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set distance 5
|
|
set priority 1
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type tunnel
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check disable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set role undefined
|
|
set snmp-index 59
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set ip6-prefix-mode dhcp6
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
end
|
|
set dhcp-relay-request-all-server disable
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set wccp disable
|
|
next
|
|
edit "l2t.root"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set distance 5
|
|
set priority 1
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type tunnel
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set role undefined
|
|
set snmp-index 60
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set dhcp-relay-request-all-server disable
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set wccp disable
|
|
next
|
|
edit "ssl.root"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set distance 5
|
|
set priority 1
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set reachable-time 30000
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type tunnel
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias "SSL VPN interface"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set role undefined
|
|
set snmp-index 44
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set dhcp-relay-request-all-server disable
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set wccp disable
|
|
next
|
|
edit "naf.IC-CLOUD"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set distance 5
|
|
set priority 1
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set status down
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type tunnel
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check disable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set role undefined
|
|
set snmp-index 62
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set ip6-prefix-mode dhcp6
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
end
|
|
set dhcp-relay-request-all-server disable
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set wccp disable
|
|
next
|
|
edit "l2t.IC-CLOUD"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set distance 5
|
|
set priority 1
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type tunnel
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set role undefined
|
|
set snmp-index 63
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set dhcp-relay-request-all-server disable
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set wccp disable
|
|
next
|
|
edit "ssl.IC-CLOUD"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set distance 5
|
|
set priority 1
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set reachable-time 30000
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type tunnel
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias "SSL VPN interface"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set role undefined
|
|
set snmp-index 50
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set dhcp-relay-request-all-server disable
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set wccp disable
|
|
next
|
|
edit "naf.RnD"
|
|
set vdom "RnD"
|
|
set vrf 0
|
|
set distance 5
|
|
set priority 1
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type tunnel
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check disable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set role undefined
|
|
set snmp-index 65
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set ip6-prefix-mode dhcp6
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
end
|
|
set dhcp-relay-request-all-server disable
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set wccp disable
|
|
next
|
|
edit "l2t.RnD"
|
|
set vdom "RnD"
|
|
set vrf 0
|
|
set distance 5
|
|
set priority 1
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type tunnel
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set role undefined
|
|
set snmp-index 66
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set dhcp-relay-request-all-server disable
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set wccp disable
|
|
next
|
|
edit "ssl.RnD"
|
|
set vdom "RnD"
|
|
set vrf 0
|
|
set distance 5
|
|
set priority 1
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set reachable-time 30000
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type tunnel
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias "SSL VPN interface"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set role undefined
|
|
set snmp-index 56
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set dhcp-relay-request-all-server disable
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set wccp disable
|
|
next
|
|
edit "npu0_vlink0"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 46
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
next
|
|
edit "npu0_vlink1"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 47
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
next
|
|
edit "npu1_vlink0"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 48
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
next
|
|
edit "npu1_vlink1"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set fortilink disable
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
unset allowaccess
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type physical
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set disconnect-threshold 0
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role undefined
|
|
set snmp-index 49
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set speed auto
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
next
|
|
edit "3rd-Link"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 118.67.217.122 255.255.255.252
|
|
set allowaccess ping https ssh snmp http
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type vlan
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set vlan-protocol 8021q
|
|
set description ''
|
|
set alias "Used for MGT"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role wan
|
|
set snmp-index 45
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set switch-controller-feature none
|
|
set color 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set interface "port17"
|
|
set mtu-override disable
|
|
set vlanid 1804
|
|
next
|
|
edit "WAN-1"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
set allowaccess snmp
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type redundant
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set member "port39"
|
|
set description ''
|
|
set alias "To-SHJ-BDCOM-3-Port-Tg1/7"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role wan
|
|
set snmp-index 52
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
set link-up-delay 50
|
|
set priority-override enable
|
|
next
|
|
edit "WAN-1.1826"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 118.67.210.46 255.255.255.252
|
|
set allowaccess ping https ssh snmp http
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type vlan
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set vlan-protocol 8021q
|
|
set description ''
|
|
set alias "Cloud-Pri-Via-BDCOM-3-SHJ"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth enable
|
|
set vrrp-virtual-mac disable
|
|
set role wan
|
|
set snmp-index 53
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set switch-controller-feature none
|
|
set color 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set interface "WAN-1"
|
|
set mtu-override disable
|
|
set vlanid 1826
|
|
next
|
|
edit "WAN-2"
|
|
set vdom "root"
|
|
set vrf 0
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 0.0.0.0 0.0.0.0
|
|
set allowaccess snmp
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type redundant
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set member "port40"
|
|
set description ''
|
|
set alias "To-SHJ-BDCOM-1-Tg1/10"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set lldp-reception vdom
|
|
set lldp-transmission vdom
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role wan
|
|
set snmp-index 54
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-mgmt-vlan 4094
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set swc-first-create 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set mtu-override disable
|
|
set link-up-delay 50
|
|
set priority-override enable
|
|
next
|
|
edit "WAN-2.834"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 118.67.210.50 255.255.255.252
|
|
set allowaccess ping https ssh snmp http
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type vlan
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set vlan-protocol 8021q
|
|
set description ''
|
|
set alias "Cloud-Sec-Via-BDCOM-1-SHJ"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth enable
|
|
set vrrp-virtual-mac disable
|
|
set role wan
|
|
set snmp-index 55
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set switch-controller-feature none
|
|
set color 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set interface "WAN-2"
|
|
set mtu-override disable
|
|
set vlanid 834
|
|
next
|
|
edit "RnD-WAN"
|
|
set vdom "RnD"
|
|
set vrf 0
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 118.67.215.14 255.255.255.252
|
|
set allowaccess ping https http
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status down
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type vlan
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set vlan-protocol 8021q
|
|
set description ''
|
|
set alias "RnD-WAN"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification enable
|
|
set device-user-identification enable
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role lan
|
|
set snmp-index 61
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set switch-controller-feature none
|
|
set color 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set interface "port17"
|
|
set mtu-override disable
|
|
set vlanid 1807
|
|
next
|
|
edit "2nd-lan"
|
|
set vdom "RnD"
|
|
set vrf 0
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 10.10.0.1 255.255.255.0
|
|
set allowaccess ping https http
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type vlan
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set vlan-protocol 8021q
|
|
set description ''
|
|
set alias "2nd-lan"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification enable
|
|
set device-user-identification enable
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role lan
|
|
set snmp-index 64
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set switch-controller-feature none
|
|
set color 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set interface "port24"
|
|
set mtu-override disable
|
|
set vlanid 4004
|
|
next
|
|
edit "BDCOM-MGT"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 172.28.10.57 255.255.255.252
|
|
set allowaccess ping
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type vlan
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set vlan-protocol 8021q
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification enable
|
|
set device-user-identification enable
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role lan
|
|
set snmp-index 51
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set switch-controller-feature none
|
|
set color 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set interface "port20"
|
|
set mtu-override disable
|
|
set vlanid 20
|
|
next
|
|
edit "VPS-Via-BDCOM"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 118.67.223.17 255.255.255.248
|
|
set allowaccess ping
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status up
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type vlan
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set vlan-protocol 8021q
|
|
set description ''
|
|
set alias ''
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification enable
|
|
set device-user-identification enable
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role lan
|
|
set snmp-index 57
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set switch-controller-feature none
|
|
set color 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set interface "port20"
|
|
set mtu-override disable
|
|
set vlanid 10
|
|
next
|
|
edit "WAN3.847"
|
|
set vdom "IC-CLOUD"
|
|
set vrf 0
|
|
set mode static
|
|
set dhcp-relay-interface-select-method auto
|
|
set dhcp-relay-service disable
|
|
set ip 118.67.210.166 255.255.255.252
|
|
set allowaccess ping
|
|
set fail-detect disable
|
|
set pptp-client disable
|
|
set arpforward enable
|
|
set broadcast-forward disable
|
|
set bfd global
|
|
set l2forward disable
|
|
set icmp-send-redirect enable
|
|
set icmp-accept-redirect enable
|
|
set reachable-time 30000
|
|
set vlanforward disable
|
|
set stpforward disable
|
|
set ips-sniffer-mode disable
|
|
set ident-accept disable
|
|
set ipmac disable
|
|
set subst disable
|
|
set substitute-dst-mac 00:00:00:00:00:00
|
|
set status down
|
|
set netbios-forward disable
|
|
set wins-ip 0.0.0.0
|
|
set type vlan
|
|
set netflow-sampler disable
|
|
set sflow-sampler disable
|
|
set src-check enable
|
|
set sample-rate 2000
|
|
set polling-interval 20
|
|
set sample-direction both
|
|
set explicit-web-proxy disable
|
|
set explicit-ftp-proxy disable
|
|
set proxy-captive-portal disable
|
|
set tcp-mss 0
|
|
set inbandwidth 0
|
|
set outbandwidth 0
|
|
set egress-shaping-profile ''
|
|
set ingress-shaping-profile ''
|
|
set spillover-threshold 0
|
|
set ingress-spillover-threshold 0
|
|
set weight 0
|
|
set external disable
|
|
set vlan-protocol 8021q
|
|
set description ''
|
|
set alias "Cloud-3rd-Via-BDCOM-1"
|
|
set security-mode none
|
|
set ike-saml-server ''
|
|
set device-identification disable
|
|
set estimated-upstream-bandwidth 0
|
|
set estimated-downstream-bandwidth 0
|
|
set measured-upstream-bandwidth 0
|
|
set measured-downstream-bandwidth 0
|
|
set bandwidth-measure-time 0
|
|
set monitor-bandwidth disable
|
|
set vrrp-virtual-mac disable
|
|
set role wan
|
|
set snmp-index 58
|
|
set secondary-IP disable
|
|
set preserve-session-route disable
|
|
set auto-auth-extension-device disable
|
|
set ap-discover enable
|
|
set ip-managed-by-fortiipam disable
|
|
set switch-controller-igmp-snooping-proxy disable
|
|
set switch-controller-igmp-snooping-fast-leave disable
|
|
set switch-controller-feature none
|
|
set color 0
|
|
set eap-supplicant disable
|
|
config ipv6
|
|
set ip6-mode static
|
|
set nd-mode basic
|
|
set ip6-address ::/0
|
|
unset ip6-allowaccess
|
|
set icmp6-send-redirect enable
|
|
set ra-send-mtu enable
|
|
set ip6-reachable-time 0
|
|
set ip6-retrans-time 0
|
|
set ip6-hop-limit 0
|
|
set dhcp6-prefix-delegation disable
|
|
set dhcp6-information-request disable
|
|
set vrrp-virtual-mac6 disable
|
|
set vrip6_link_local ::
|
|
set ip6-send-adv disable
|
|
set autoconf disable
|
|
set dhcp6-relay-service disable
|
|
end
|
|
set priority 1
|
|
set dhcp-relay-request-all-server disable
|
|
set dhcp-client-identifier ''
|
|
set dhcp-renew-time 0
|
|
set idle-timeout 0
|
|
set disc-retry-timeout 1
|
|
set padt-retry-timeout 1
|
|
set dns-server-override enable
|
|
set dns-server-protocol cleartext
|
|
set wccp disable
|
|
set drop-overlapped-fragment disable
|
|
set drop-fragment disable
|
|
set interface "WAN-2"
|
|
set mtu-override disable
|
|
set vlanid 847
|
|
next
|
|
end
|
|
config system password-policy
|
|
set status disable
|
|
set login-lockout-upon-downgrade disable
|
|
end
|
|
config system password-policy-guest-admin
|
|
set status disable
|
|
end
|
|
config system sms-server
|
|
end
|
|
config system custom-language
|
|
edit "en"
|
|
set filename "en"
|
|
set comments ''
|
|
next
|
|
edit "fr"
|
|
set filename "fr"
|
|
set comments ''
|
|
next
|
|
edit "sp"
|
|
set filename "sp"
|
|
set comments ''
|
|
next
|
|
edit "pg"
|
|
set filename "pg"
|
|
set comments ''
|
|
next
|
|
edit "x-sjis"
|
|
set filename "x-sjis"
|
|
set comments ''
|
|
next
|
|
edit "big5"
|
|
set filename "big5"
|
|
set comments ''
|
|
next
|
|
edit "GB2312"
|
|
set filename "GB2312"
|
|
set comments ''
|
|
next
|
|
edit "euc-kr"
|
|
set filename "euc-kr"
|
|
set comments ''
|
|
next
|
|
end
|
|
config system admin
|
|
edit "admin"
|
|
set remote-auth disable
|
|
set peer-auth disable
|
|
set trusthost1 0.0.0.0 0.0.0.0
|
|
set trusthost2 0.0.0.0 0.0.0.0
|
|
set trusthost3 0.0.0.0 0.0.0.0
|
|
set trusthost4 0.0.0.0 0.0.0.0
|
|
set trusthost5 0.0.0.0 0.0.0.0
|
|
set trusthost6 0.0.0.0 0.0.0.0
|
|
set trusthost7 0.0.0.0 0.0.0.0
|
|
set trusthost8 0.0.0.0 0.0.0.0
|
|
set trusthost9 0.0.0.0 0.0.0.0
|
|
set trusthost10 0.0.0.0 0.0.0.0
|
|
set ip6-trusthost1 ::/0
|
|
set ip6-trusthost2 ::/0
|
|
set ip6-trusthost3 ::/0
|
|
set ip6-trusthost4 ::/0
|
|
set ip6-trusthost5 ::/0
|
|
set ip6-trusthost6 ::/0
|
|
set ip6-trusthost7 ::/0
|
|
set ip6-trusthost8 ::/0
|
|
set ip6-trusthost9 ::/0
|
|
set ip6-trusthost10 ::/0
|
|
set accprofile "super_admin"
|
|
set comments ''
|
|
set vdom "root"
|
|
unset ssh-public-key1
|
|
unset ssh-public-key2
|
|
unset ssh-public-key3
|
|
set ssh-certificate ''
|
|
set schedule ''
|
|
set two-factor disable
|
|
set email-to ''
|
|
set sms-server fortiguard
|
|
set sms-phone ''
|
|
set guest-auth disable
|
|
set password ENC PB2kYXK0czoawep/NFMVXujX6IYkk8RjFvepXjISck4JBBjbxStdUuZ2bzjz5M338wrkzz1+wugmdR3zBdwZRAbDw9t8rF+0wWW4XjERE9fCGw=
|
|
set allow-remove-admin-session enable
|
|
next
|
|
edit "cloud-operation"
|
|
set remote-auth disable
|
|
set peer-auth disable
|
|
set trusthost1 0.0.0.0 0.0.0.0
|
|
set trusthost2 0.0.0.0 0.0.0.0
|
|
set trusthost3 0.0.0.0 0.0.0.0
|
|
set trusthost4 0.0.0.0 0.0.0.0
|
|
set trusthost5 0.0.0.0 0.0.0.0
|
|
set trusthost6 0.0.0.0 0.0.0.0
|
|
set trusthost7 0.0.0.0 0.0.0.0
|
|
set trusthost8 0.0.0.0 0.0.0.0
|
|
set trusthost9 0.0.0.0 0.0.0.0
|
|
set trusthost10 0.0.0.0 0.0.0.0
|
|
set ip6-trusthost1 ::/0
|
|
set ip6-trusthost2 ::/0
|
|
set ip6-trusthost3 ::/0
|
|
set ip6-trusthost4 ::/0
|
|
set ip6-trusthost5 ::/0
|
|
set ip6-trusthost6 ::/0
|
|
set ip6-trusthost7 ::/0
|
|
set ip6-trusthost8 ::/0
|
|
set ip6-trusthost9 ::/0
|
|
set ip6-trusthost10 ::/0
|
|
set accprofile "READ-ONLY"
|
|
set comments ''
|
|
set vdom "IC-CLOUD"
|
|
unset ssh-public-key1
|
|
unset ssh-public-key2
|
|
unset ssh-public-key3
|
|
set ssh-certificate ''
|
|
set schedule ''
|
|
set two-factor disable
|
|
set email-to ''
|
|
set sms-server fortiguard
|
|
set sms-phone ''
|
|
set guest-auth disable
|
|
set password ENC PB2Fm/c5XqrI4+p/HW08fkKJcNWOu6RmUp5dN0MpBBWaHlRtV8S0WHT2S3DJkKrlYlDwJZkkRCpDSabgcSUkI4jx5t/A2gfTKIyF64SSF9mR4o=
|
|
next
|
|
edit "core-admin"
|
|
set remote-auth disable
|
|
set peer-auth disable
|
|
set trusthost1 0.0.0.0 0.0.0.0
|
|
set trusthost2 0.0.0.0 0.0.0.0
|
|
set trusthost3 0.0.0.0 0.0.0.0
|
|
set trusthost4 0.0.0.0 0.0.0.0
|
|
set trusthost5 0.0.0.0 0.0.0.0
|
|
set trusthost6 0.0.0.0 0.0.0.0
|
|
set trusthost7 0.0.0.0 0.0.0.0
|
|
set trusthost8 0.0.0.0 0.0.0.0
|
|
set trusthost9 0.0.0.0 0.0.0.0
|
|
set trusthost10 0.0.0.0 0.0.0.0
|
|
set ip6-trusthost1 ::/0
|
|
set ip6-trusthost2 ::/0
|
|
set ip6-trusthost3 ::/0
|
|
set ip6-trusthost4 ::/0
|
|
set ip6-trusthost5 ::/0
|
|
set ip6-trusthost6 ::/0
|
|
set ip6-trusthost7 ::/0
|
|
set ip6-trusthost8 ::/0
|
|
set ip6-trusthost9 ::/0
|
|
set ip6-trusthost10 ::/0
|
|
set accprofile "READ-ONLY"
|
|
set comments ''
|
|
set vdom "RnD"
|
|
unset ssh-public-key1
|
|
unset ssh-public-key2
|
|
unset ssh-public-key3
|
|
set ssh-certificate ''
|
|
set schedule ''
|
|
set two-factor disable
|
|
set email-to ''
|
|
set sms-server fortiguard
|
|
set sms-phone ''
|
|
set guest-auth disable
|
|
set password ENC SH236Zgsv2h10NGCqCk3gyFvb8yh/Mv07HANGYpIzKF5ZTHHiolkKm4WnhkzwQ=
|
|
next
|
|
edit "mosiur"
|
|
set remote-auth disable
|
|
set peer-auth disable
|
|
set trusthost1 0.0.0.0 0.0.0.0
|
|
set trusthost2 0.0.0.0 0.0.0.0
|
|
set trusthost3 0.0.0.0 0.0.0.0
|
|
set trusthost4 0.0.0.0 0.0.0.0
|
|
set trusthost5 0.0.0.0 0.0.0.0
|
|
set trusthost6 0.0.0.0 0.0.0.0
|
|
set trusthost7 0.0.0.0 0.0.0.0
|
|
set trusthost8 0.0.0.0 0.0.0.0
|
|
set trusthost9 0.0.0.0 0.0.0.0
|
|
set trusthost10 0.0.0.0 0.0.0.0
|
|
set ip6-trusthost1 ::/0
|
|
set ip6-trusthost2 ::/0
|
|
set ip6-trusthost3 ::/0
|
|
set ip6-trusthost4 ::/0
|
|
set ip6-trusthost5 ::/0
|
|
set ip6-trusthost6 ::/0
|
|
set ip6-trusthost7 ::/0
|
|
set ip6-trusthost8 ::/0
|
|
set ip6-trusthost9 ::/0
|
|
set ip6-trusthost10 ::/0
|
|
set accprofile "super_admin"
|
|
set comments ''
|
|
set vdom "root"
|
|
unset ssh-public-key1
|
|
unset ssh-public-key2
|
|
unset ssh-public-key3
|
|
set ssh-certificate ''
|
|
set schedule ''
|
|
set two-factor disable
|
|
set email-to ''
|
|
set sms-server fortiguard
|
|
set sms-phone ''
|
|
set guest-auth disable
|
|
set password ENC PB2BfjYZ0+9ezVezUGK8sr2WpZwqicAwwcbcTkcXhK8MKDpbXm2QwdXpBhEdRw/GYZOrs+CDH5Aidn/GGWJzXNJoQ2SEWslScceOumBCxijIi4=
|
|
set allow-remove-admin-session enable
|
|
next
|
|
edit "likhon"
|
|
set remote-auth disable
|
|
set peer-auth disable
|
|
set trusthost1 0.0.0.0 0.0.0.0
|
|
set trusthost2 0.0.0.0 0.0.0.0
|
|
set trusthost3 0.0.0.0 0.0.0.0
|
|
set trusthost4 0.0.0.0 0.0.0.0
|
|
set trusthost5 0.0.0.0 0.0.0.0
|
|
set trusthost6 0.0.0.0 0.0.0.0
|
|
set trusthost7 0.0.0.0 0.0.0.0
|
|
set trusthost8 0.0.0.0 0.0.0.0
|
|
set trusthost9 0.0.0.0 0.0.0.0
|
|
set trusthost10 0.0.0.0 0.0.0.0
|
|
set ip6-trusthost1 ::/0
|
|
set ip6-trusthost2 ::/0
|
|
set ip6-trusthost3 ::/0
|
|
set ip6-trusthost4 ::/0
|
|
set ip6-trusthost5 ::/0
|
|
set ip6-trusthost6 ::/0
|
|
set ip6-trusthost7 ::/0
|
|
set ip6-trusthost8 ::/0
|
|
set ip6-trusthost9 ::/0
|
|
set ip6-trusthost10 ::/0
|
|
set accprofile "super_admin"
|
|
set comments ''
|
|
set vdom "root"
|
|
unset ssh-public-key1
|
|
unset ssh-public-key2
|
|
unset ssh-public-key3
|
|
set ssh-certificate ''
|
|
set schedule ''
|
|
set two-factor disable
|
|
set email-to ''
|
|
set sms-server fortiguard
|
|
set sms-phone ''
|
|
set guest-auth disable
|
|
set password ENC PB21u5cT2KlDKP2KMWzXWho0nSgoiTzr3/qJUmIp+kq9hmXLHhktOzjPVCmL/ZAztOAu/wRsJgDQj1XYnnmGZkUEI1wr/VnxQK4Fwuw92hAlCs=
|
|
set allow-remove-admin-session enable
|
|
next
|
|
end
|
|
config system api-user
|
|
edit "api-admin"
|
|
set comments ''
|
|
set api-key ENC SH219nWmI0SirJwPjPmxtnUDlgjijdICZNynGaFczE/HiK0NcPnYw7FZCkpTus=
|
|
set accprofile "READ-ONLY"
|
|
set vdom "IC-CLOUD"
|
|
set schedule ''
|
|
set cors-allow-origin ''
|
|
set peer-auth disable
|
|
config trusthost
|
|
edit 1
|
|
set type ipv4-trusthost
|
|
set ipv4-trusthost 118.67.220.34 255.255.255.255
|
|
next
|
|
edit 2
|
|
set type ipv4-trusthost
|
|
set ipv4-trusthost 103.209.42.141 255.255.255.255
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config system sso-admin
|
|
end
|
|
config system sso-forticloud-admin
|
|
end
|
|
config system sso-fortigate-cloud-admin
|
|
edit "FortiGateCloud"
|
|
set vdom "root"
|
|
next
|
|
end
|
|
config system fsso-polling
|
|
set status enable
|
|
set listening-port 8000
|
|
set authentication disable
|
|
end
|
|
config system ha
|
|
set group-id 0
|
|
set group-name ''
|
|
set mode standalone
|
|
set sync-packet-balance disable
|
|
set password ENC j7X3NgWFv419wvKdQ/eXajxIOG7J36yMbPbtlpcI7jEKG6LiJQVwTux/8gQ9NI9odDZ1IXC/Bpf/YIzulRZVvoO2XO1ZGcIvS7eTD9zq4BPjHjHyQZaVVP7uKSnont9HmTc3lI/br/lyyc/0SQimqJCx3O5Ugpt/cAXwBF6rzXK2BbuZKLHpwqvlDSbsPl+JhAVnZw==
|
|
set hbdev "port1" 50 "port2" 50
|
|
set route-ttl 10
|
|
set route-wait 0
|
|
set route-hold 10
|
|
set multicast-ttl 600
|
|
set sync-config enable
|
|
set encryption disable
|
|
set authentication disable
|
|
set hb-interval 2
|
|
set hb-interval-in-milliseconds 100ms
|
|
set hb-lost-threshold 6
|
|
set hello-holddown 20
|
|
set gratuitous-arps enable
|
|
set arps 5
|
|
set arps-interval 8
|
|
set session-pickup disable
|
|
set link-failed-signal disable
|
|
set uninterruptible-upgrade enable
|
|
set uninterruptible-primary-wait 30
|
|
set ha-eth-type "8890"
|
|
set hc-eth-type "8891"
|
|
set l2ep-eth-type "8893"
|
|
set ha-uptime-diff-margin 300
|
|
set standalone-config-sync disable
|
|
set override disable
|
|
set priority 128
|
|
unset monitor
|
|
unset pingserver-monitor-interface
|
|
set ssd-failover disable
|
|
set failover-hold-time 0
|
|
end
|
|
config system ha-monitor
|
|
set monitor-vlan disable
|
|
end
|
|
config system storage
|
|
edit "HDD1"
|
|
set status enable
|
|
set media-status enable
|
|
set order 1
|
|
set partition "LOGUSEDXAD2391E3"
|
|
set device "/dev/sdb1"
|
|
set size 225340
|
|
set usage log
|
|
next
|
|
edit "HDD2"
|
|
set status enable
|
|
set media-status enable
|
|
set order 2
|
|
set partition "WANOPTXXE2931019"
|
|
set device "/dev/sdc1"
|
|
set size 64220
|
|
set usage wanopt
|
|
set wanopt-mode mix
|
|
next
|
|
end
|
|
config system dedicated-mgmt
|
|
set status disable
|
|
end
|
|
config system dns
|
|
set primary 96.45.45.45
|
|
set secondary 96.45.46.46
|
|
set protocol cleartext
|
|
set ssl-certificate "Fortinet_Factory"
|
|
set domain "intercloud.com.bd"
|
|
set ip6-primary ::
|
|
set ip6-secondary ::
|
|
set timeout 5
|
|
set retry 2
|
|
set dns-cache-limit 5000
|
|
set dns-cache-ttl 1800
|
|
set cache-notfound-responses disable
|
|
set source-ip 0.0.0.0
|
|
set interface-select-method auto
|
|
set server-select-method least-rtt
|
|
set alt-primary 0.0.0.0
|
|
set alt-secondary 0.0.0.0
|
|
set log disable
|
|
set fqdn-cache-ttl 0
|
|
set fqdn-min-refresh 60
|
|
end
|
|
config system ddns
|
|
end
|
|
config system sflow
|
|
set collector-ip 0.0.0.0
|
|
set collector-port 6343
|
|
set source-ip 0.0.0.0
|
|
set interface-select-method auto
|
|
end
|
|
config system netflow
|
|
set active-flow-timeout 1800
|
|
set inactive-flow-timeout 15
|
|
set template-tx-timeout 1800
|
|
set template-tx-counter 20
|
|
end
|
|
config system replacemsg-image
|
|
edit "logo_fnet"
|
|
set image-type gif
|
|
set image-base64 ''
|
|
next
|
|
edit "logo_fguard_wf"
|
|
set image-type gif
|
|
set image-base64 ''
|
|
next
|
|
edit "logo_v3_fguard_app"
|
|
set image-type png
|
|
set image-base64 ''
|
|
next
|
|
edit "logo_fw_auth"
|
|
set image-type png
|
|
set image-base64 "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"
|
|
next
|
|
edit "logo_v2_fnet"
|
|
set image-type png
|
|
set image-base64 "iVBORw0KGgoAAAANSUhEUgAAAPMAAAHCCAMAAAANeQ+xAAADAFBMVEV/AAB6AACLAAOVAAIkIB8AKD6FCACiAAOsAgC5AADDAABJIT/OAATRAADbAAIAOVs0MC/nAAC+DA3pAA3wAACjFhpnLRB4KQyXHxxjLEIbQ10ASnWQLxflFhXaGR6ULi+ONgl5OxdnQBxMR0bOJSB8OzmLPAfGKSmgOA4JXJHkKCy3NjGMSgZVVlSCUg8WZox8UiezRQhwVyEAcH2/PkJuWi8AcZAQcHKuRkMObKp9WhaQUF3iPDp5WVqyURbcQESfWQelUk+XXglHan7wQDZuYHgQd7ypVzdlZ2SwXAIAfcfjTSV/ajUGgbrZTk2rZAN3bUQAh6STaiUahJbWWwcFjI/yTkauYkoHhtQqgKwRhcmRbUu1bQS4Y190dnPLX1+8bgGRcHCfcUDDbQHWXl5cf5MPkeMAl++tcmrfaEITluHTa13QdgLKeQTWa2+Bg4AAn/3qalmNhWERob/aegDldwAdoqYCpP/UdXTHhBosn92+fnxXmbXuei33exO4hW3jhADbhwGOkI9Loa5PncvtgwCxjFrQgH6Zko+blW8drf7viwDUiXF/na3RiYoAvuW8j42cm4Gam5gos/77jgHyjx7Rj47ylALJmk+6nWi5mpT7lQX1kjzsk1VLuMOgo6CjqJBGuf/PnJuoqqf9ogKlrZzupCXmpTjhnZxLwP+Gtb/PpJWtrpi2qqrLpaCItda/sIywsq7Tq41bxP2us7XKrKtpxvq1t7T+sRv7si61vKCWwNipvMilvsLLtbG5u7jRtqf8vAXBvLv+uiW8wcO/wb180P/uv3KbzObOw7zdwpvExsPUxKzFx8T+ygD+xELDyMvhwbrHyca9zdrLzcrdyb/+y1DazLbuzJT+zl3M0dTQ0s/U08rS1NHV19TH2+fk1tbY2tfW2t3a3Nnv2rXd39ze4N3h5ODX5+3w5NTl5+T74+Dk6ezn6ebw5+Dq7en/6OXx7d3q7/Ly7+bv8e788eTy9PH+8fH39ezw9vj2+PT2+/75+/j8/PP7/fr9//uXHhBNAAAAAXRSTlMAQObYZgAAAAlwSFlzAAALEwAACxMBAJqcGAAAAAd0SU1FB+AJGxYjIiP66ooAACAASURBVHja7Z0LYBNVvv9puxfabtsVlMdFC4ooCgZYEQSWtYguhmcFhAUtpUpFYVvKIgILrEJQeQl2C1IW1FgCCnXL3cgj9fKIxmZ3NTdrSYf9r8nt2CSbpNRmc7fmBpvObf6/85jJTJK2YANtaX7QNpk588v5zPd3zpyZnEcPQ/ezHpbuZz1iOsd0jukc0zmmc0znmM4xnWM6x3SO6RzTOaZzTOeYzjGdYzrHdI7pHNM5pnNM55jOMZ1jOsd07kidjd3PYjrHdI7pHNM5pnMX07m6+1lM55jOMZ1jOsd0jukc0zmmc0znmM4xnWM6x3Rup87a7mc9vN3Peni6n3VL5rruZz3c3c96uLqfxXTuJjp3xzrM2v2sh7P7WQ+WWLfS2dH9jNe5O1lM55jOMZ1vLp276/U5Vp5v8vKMn352M527Y2xrup91z36Apm5n3bI8G40xnbuDzrFxN7HxVTGdYzrHdI7pHNM5pnNM55jOMZ1jOsd0jukc0zmmc0znmM7dS2ej0cRIzGQim0wmE32P3xnRI9KQZNJj6XPFyOlMTEhKaZIbq3M166yrC/aGrKtz2VmrE7a4HOi32+V0uGCzk2VZu0tICcmcVhYlFG1x2J0uFyR0SNI5WLZavAm2Oe2SJODphupsNLGyu6VWZHFsWwDGHkO/Fxyrwb+rmert4lSyAqbaYpEcu90qv/tueUg6eRnLmFjJprvlbJnkvfZGCt0DZK77UYgVWI49DrbAiP88vr8G/znGOrdL092isbOSDXL2btiqZwuk6bJZ1pUtPdIkdaU03VidGdctIczZugWYWb0Hw278Av+ZrWcVIQnvNlmkzAbErGZCmH+0nbGHMKulzNu1hhursxuYb5GLbLsOx3SGmsT2RvJ2QRlmlvGp0JlSswXZ+AU90ISZsc58Mhk+N85s0Sa5PFtTli2X/0j4XKW+A3S+W6Xhhx9p1BojoysD0+jQn4NlevK2jEHM29UkmQFRFBlMej3iVKk1GrVaw+DXWOciNf6yV6snpyEb7dDwn6DWGIx6A/5cfKC6I3S+W8PwX+dAxVRzDBtjYVDVYmLJW5MDMxtwqhqHHL+xVDtkCMeArjkWV1DnIj2+DFkcsOlHKsJsoh+AtltYFn+ukVyuOqI83yJYNmO5iAvwAp3BiP4xl/Dbxy+Q8syno+WQcWJmPboIM86gztu1RmHTj5RMdvBIOWOEU2lkrIhZjQ+8we0worPIZAaWVNQLynBtWm2twVXa46erQ+swmcpgYeswsxGlZOtEOhsswqYfqapFddjdegbvcWKdTTe+HWYMq7fvVpuozmVa0tKiOh80hTIXgEpEZ5JUqrMhVGf+A2hQiHS+wfNK0Xq7QDCFhqnZth5sWxkpf9aaPeStBTHLSartBXdjxaqvSucyrHM2OXA71B2ogxbVGeqP6g7ROVhvQ1ULqKjI6fUMW1NTgzrx47dazKxQa4R6+5Zr0vkWFa2dIZxNYp1Ji/yG63y32mjhW/wWFjc2F/xa0vZcsOALXG8rcH0M1XUBromvSeftgqH4oTqjSMJXixuus7hcMaTSWmCgbc8vaDVOrs9EP5MVMSu1VGdVmM5F4fW2yLQGE6+zybR9e5npRutMKi7hTENJ24YhNcdo2xOfgm3qatRg3K6naRBzmbGaxddklbG6NZ2VltC2JwSIg+pcVpC9nbmBZRrpbL37FijP2uCJMFnYXHF7Gze/f7VdzWyHq/J2DdGZLYBLLehsYuXkBd4ou+WWu1UmSHdLEY0HtOmWImM2HBq8PuAAscDnylR6pgxinSS+YfMZsFZGoyqD+jNoULxOHzx4UPMF+n2wTHcR/qo0RpbVq5VqaHqRbrF6VZkaTg9r0apUcJnFGxn0mmF1qmA62KRUMxa9WiUypDMLn6vSMixTVrbdyNzYeStMJj2qh8WnwmQyQA0O1SyuovVGlEBvgK169JdPosdH4bRafiN2JU0X3CQyA92DvBr1er3hhs9bgYue1MgmWsItfAJJQuGNeCt5GZoukm/ph8TmJ4nNTxLTOaZzTOeYzjGdYzrHdI7pHNM5Nk9cbJ642DxxsXniYvPExeaJi80fFpsnrtPorJXhPzJte894trLD54nTy2Sy7Oq2KwG9DP+R6etCj5YVSFOhH1W2TCZXRnRUoOzweeI0MpM1u6DtCbg0MvxHprGGHh0hlUZWZLUWZUd0lF3U4fPEaWWMUyl3gi7ZrKIAbVFmO5WgksEpU8kVWrlMpnKi3zKcXAYJVYxMC8ex9Ggn2i1XwXFKpLpcK3MWKIhzudLJyBgVbFXg3UwBvFR2yDw0IUpZ5IoiucUiL1LJrYpsa0GRXq63KgqsMpBfrrTCVnmRoHORtQhSKdB/fDSYBnYr5ZYiuQangh+cXoaPM+FIUMrw7iK5qaN0Fk/QokXSsAqFw1GkYGXqbIVKrldhvRwyrYNBr2SgFaTDyWEbaKuVo034aPiDX8uYomwHTgU/BeDOoZI75EVopwpFCd6NPia7qMPnldLIUD+oIjnDyIvYArlSK5ezWrkW7ZJpWFauRK9gV5GMpdsUcpbNlheIjka75QCF3jPww6pkCuSTzVbAcQa5AjYY0G76MR0935CWCIbLswOy6ZAjyVEJRJo6UEmWO0B4OdUZFViHQ432CUfj8uxAQrJyVJ6RxpCuCAWRHBQmv+lueVEXnT8MidbN5pVi5OrYPHGdX+duPI9rbJ642LyPsXniYvPExeaJ6yLj6EyxeeK6RXmO6dw9dA60YZzfB+b3c7z5yQYu0F774Z57tNPazhaHMtGM84Ty14y2c+3Fbpfn68fc7Pd5fVxzM+fzevCYXmRoAK+HbobMNf8g4PZ6vl7MkB8435zP4474XNztAZVQ1q+duv2erw9zMxICslXXytcBdZC5a6eOhufrwuz3eP1+b53L2ep3IE6XGyXz+K8BOSqerwMzBx/m97ic4nw5HTZiDslWp8vj93m8V1ubRfDsdNbwJt3ciufoMyMpUL6IuVwOm9ms050+WIjs4GmdjjHbHK5gAu9VSx3q2VnDMpUV58+XIjt/vqKSYWucV+E56sxej89bJ3ysw2YsXDygb4LY+o5/8bTZ5hTyVucDQa4COcQzW1n63tZ5c8aNGnU/tlHjxs3bWnoeuNvyHGVmzuPxuYUnRzZT4Xjg7ZWYmJhEDV72SohPGLD4tNkupPP4PJ624lvq2cqUrp03btQEZFOJwSsEPm/reaamdc/RZebgEuniF4+w6Tb2RbxAmiw2BJ4QHz+4sNJKUzpccKFtHVriGSSeP2eUQDt9qmDAPWrcS6WmmtY8R5UZMuZx0ozVEGIMnJo2KGP2yvXwLzdjUHoa4kZqDyjktXY4Pa1Diz3bgRgkJrgvrFq3c28J2N51q15YiOgR9bxSXutInqPJ7Hd73OQxmdPBFGJiwEubtH7/BTScVQf/0J/D2zIwdq/4+PGnzZAWm7s1aInn0pfGYYmnL1xXcvJPYjtZsvOF6dMx9dbzrK0lz1Fk5uo8dfTRYI1uPCFOHbTtNLDqLohMB7YfYSdBhG802mvahBZ5tp5/bx7WePqqkjN/imAn1y0k1KWV1HGY5+gxc9D0pR/CgsiYOGM/4J4ONwA/kds7ORnK9XidjR4FDWauhcAWPFefXzsOE+9ECp8JN7R17zJEPW5rBRvZc/SYIWN2ZA4H8yIWOWX4ft2FEy3Zad2J2WkowAccrHbgA+1wmxCRmfdc4zCXzlsEyNPXnYwIzGOf2Qla3z9q3nk2oueoMXtcJGN2h24xFjlt/YXTJw6faMUu7B+UkpQYH19ottGsuTwRkAXPNSaIa1RvlbQMTLGPrwKpIb4t9gieo8XsoxmrsUNRRsjDD58+3JadODE7NRmgNwahfWHIvGe7rfK9eUTkMyfbsjNnduL4FkH7os3MuVx2K3ZuRMhJqbNPHN7fth0+vbI3QPfcaMbHWu0uV2iRDno2E+SdZ9pGRtQly6YjaDbcc5SY3dAWRP1L7AwK7KS03BP7r85ObEtD0HClRoezDmdokQ56fm/erKlTF+69KmIEffwFCh3qOTrMPqeTTMthexEjLzm852rt8LZ0gB5w2mxFUzGwTqc0ugXPllIe+ThYyzEtRMHxkwgaVWRW1ibxHBVmjs8YW4gDO3f/tqu3/dsgvHsO0NHFOZ1O8a0+77mGPT9/EQT2XkwcyU6e/NM3DY1gtX8h2McRNFRk8ypCPUeF2eOwE7+6vr2SklNnC8iHW4YP7tqzMi25V89HzcSF3SGuuwXPlWvn4KtyS8jHz3wjHNT0l9fOIObjJ0sWToXrNBPiORrMHJ8xBuqv5ORJeNoZNPPMiYB/4/qItq1QtGvP7NSkBCjSxInDEazGgp5R/TV93XHUsi6JpPKZRnGJ+Oa1DYi55PheuE5DkZZ6jgaz20p82lBkJ6dvW0lsfSHsu7JxycpwC9m1bRKObgptDQrNe2ZLUWS/0CJySRC5qamZQuO061CRrmQlnqPAzFEtcGRDlU04clcW4g+48uKSJSHY4bvWQ3THLeaZBaEFzyYU2Qvx/VMkbBHy7scee+ws/K16bcMGnPSF6RDdrMRzFJg91KN5I47slbnYlhTSXFxZnLtkSa7YRLuWkF0rIbrj4y5QaJZ/tsF7ri6dPwsiuyQILeYuOV4ilOXdAweOGjVqN7wCZgyNohvqbrHnKDA7xDLfSpFzC4UAvbL4ITHxbMkuunHloOTEOL4aY510t0Ms8wsle5FFwC4500QPqMTIo0bBOfhmFmKG9KumTxi31SL23H5mn0TmjNzZyERcGHp20EJ25ZIDZqeJhSZP7njPLJZ5515qJVI7fnzDX3h3zw8ctQgZCN28CUGjgyRC+6PC7ObFQDL3pmDbJA0LEXTG7ELJrv8ZT8/EcBCaL9EsaTLxnpm180DmvSKTUm+oFZhHjVoEQb1oE7w+C8x7ETMWmhV5bj8zrWeqTyCZh8/OwLbyihT60RGYNyNj9n5p0/LZ8eh0ZEyalJ6c1HOAib9I4318DXZ+7SIozXt3UguD3iDUYBUYecOsKlSLzZq1YgVKD7dYo+ZXVgc9t5vZT0eLmh9NgEo7g7cl/xMCPQxtnZQRgvzzwSMeyhiU3js1OSkpOSGu0EwnLEIhyHtm3wOZF+4UmVTtDRsaeHeNzy8CdTe8hk5C1ahZK5a9sAw/ILx/TCkb9NxuZjed9cbcF1qd6SAYsoxhwx6VQv8Pgp6UsTEUue+wZMSLjNRiZE4ddCHlPTOoBltFaNetE0MTcBFzoH7TolmzXmtoBjt3//0ThMehENwWwXO7mZ2kM435BGqPDJ9EbVg49Phhg8KQB4gffSeh4KZ9c1D9Sj1bSGgjXmIhcmPmJsFn7Te1Tc2Y+SciaGiXBD23l7mZzgJtXpyQlJxGiYcPHzpsWN9waCly8z3xPenzbyp0QtxpM3HHwm7i2Wx5D2rthetCTMS9YQN/eSawzc1NTU1c824x8/1jzrOC5/Yy++npY0agWns4b4MGDR3ad7AU+ttCTorcs2e8GDkJ2mIvUmYLFxA841qbkK5atSoce8WsTSLgJtrTouGx2yXMpazgub3MXjprrAmKc/KtwyXQvUKgpXZPXAhyUhIUaBrcjC/Ae67kmVdhW7fqBSn2ihWzoLEp5kUyc7t/cvv9E8QFulLw3F5mN83Zp+hKlS62QYP6JLYCHQE5KSluwKcWrDTjCfCeK6AKm75KZC+A8dArwJ7+S0AA5lXmGgZKmOFqVUGZPe1mdpF57c0fQRWWImFOT0HQ314LclL8gI/IlJmmugD1bDmLqrAQZMEEZAG4iWA//xNxaKNK7CzDe24vs4MyvwpX59T0W8WWnpKS3BJ0ZOSkhLhXKbMzQD1bcMMzIvALK5YtA2QicZOgMlA37f6JVOapo8aUMrzn9jKzYuZbpZaWlpKcFBG6BWSouF81k5xZA9SzZTdmfiHcli1b9vTTU//STGCbgho31T8/MERmqMR2W3jPUWXuHWppkZW+Jy4uErKYmZUyR0ReOP3pqWebCSb8M9c3cY3wr/7UwJ9g5MjMbLuZq1tl7p2Wmpw4IASa+zkgJ0RAljJTz+zutVPDmUHjhQunT596tqmJV1n5bwOfP1VZ8fxjAyMgT73/4d1stJgtrTOD0omJ0jupQGFcXM+IyGLm6oCFZ56PmJcR44F5ZCox528E5J/wBsQhyIjZwnu+zsxpacnJj14JhDY543tFQm6JGWIbEJeJbOFChDz9L0TiRn+jX/lvgErt/nBkkc5RYCZrXmPm5LRwS05dHF6FPdu3FWay/gswE8+W0rXAvDDMcGCjogzEGJmwEpsQiowaYgzvud3lWcKcGmrJqUsiXaqeTWyD2QDlmXhm0CNP0BSwp0uQp5+lEjeiwA4ii/vVSK9VvOd219sGwozbYVeLDGW6Dw+djP/Tn/ienwrM1DNzbv4czBxqZzlCDIYaXbdT2kjAYOPGnIsas53krBIzh1nKkpaangQ6JHlS3B2fkpzpHQHq2XRuPrS3IyHjoG70Nfp8oQ3NSMzzzpl4z+1ue+qJq0vxiZGQW+7AWjg0IvMlmjNoe1LPVfPnTw9jhhq7EREj5MaGhoEhLZBQmz51zLwqwXN7mT0kZ5WXBvRqU+XCEKXDoBPjfnmJlGK9J0A9G83z14bpDMg0rBu9DQ2YecKs1pgnjNlqFjy3l9lH55RnxyeEqpYcovI9cT8Pg5YegKow4k7vD1DPleattBKTquz3NWKJkXkRc0sKo1/ToQpjBc/tZeYMBpKzjfFJbSHHtQXdM+5TwmwwNgeoZyNbOn/O01OlyKgYE4nrkbkGtlyaySGoChM8t/t5GEPkMF0ILdBLpL0k0FOR+L7PtgYNxZmtJGJYYC/vGQq0hBmQeeIGL2ppDhzYYg3GHzJmntkkeG43s4NOpM8OSGgDOSGhV0KvEOhBSdLibCPMWvQMkHrWsfPXzno6SIxUhsuTl4T1Y6hxffv9LepMDlr08CYa2tooPAMMeOhCHeYXxcGdGoYcj7v39gqDFjHHQ2gTZ1r0XRr1rIM76JdEzGehHFPghvqGx0hjpHWZcWgHPbebmdPrsbPKC/GimntSIAwZN72AOgQ6NUkS2tiX3oDHDVHPxiqR0FOnNjbywGDkSd+ENpBnQWgbg57b/91NNRXaNj4hOYUYXKa+DUMmbEmJvSSXrEeTk+hRqajWpmKweB/vmd0KQlPoqRNExGCP3d5W9YVlLmVFnqPwHR3NWeVH8YlCmzO5z7cSZNzhNSU1BXXn7SuCfjRRaLImQ4OkkuaM9AfgPZvOz18bZK4XiG0VFRWjgo0RHAXii5RI5iqTyHP7mfkQrGAHJwgt7uTExG9DkFPwjhQJ9D0JvfgdSGZWRzJmIFc53rNYaMxMNX7+38gToGD1NjX4I6rox0ENZhB5jsJ37qzGoEeGhKZ3kKkpSYl9KfQ98fG4j28q2ZMqgr4nAd+ZkJtOJDP2o9fY6SnhPTMg9IYVBHoCIT71/G7hoZf4Oka1Dm5ZuBDLLPYcBWafljjUm8fH87fQQEahCXJKqnBHHYS+B5dyuic+7lUb9aPlB8sInpHQK1asQHeQE86eA9uNHorcLlFZrLYYeeGYMbtZiedo9BtiNMQj3GgkpPVOQ09HBGgkJeWiD04E6OAu2J4Y9wTLy1wtFHfeM1TdCHrZQtwL//bb8TMRconCYNNbsoULl815eJzZKPEcDWafhhf6zZ6JwYd/AP3szyhXyHNBtOueXqJdyXFwbdbRnAV7P/KeK6ABCtG9jELzDweQosFnCBGIly1bNmvMmHO8zNRzVPoB8nLo2Sfik4QnYVBdoW9ak1PS0kIfkoXuQpFtpz7UFtGljPesQ9EtQNMnAyR0xQ/IpBKjXRvGjNlUE+I5Ksw+DS14cEsZnyLSE91QpqZFfAQs2ZUQjGytRjz0TfBsrJonQIsCFz0Kxf8JtsTQU9IV8x6eYzPqpJ6j06+XVdMYNJ+OT0gVCZqWFoE4bFcvqLPNvBh2STuN9wx197z5byHoZQLSMukDbx58WfC5MCCPq2JCPUeHmdPSGNSaP+qZkNr72iwx7o5PzVRPjV7aUA96ZksBGn0PiWV9IbKhHcGdCPkcG+Y5Sn3WPWrsuUKvt73aMyHt1qsHvhUhf2SrIDnTqkNHZFDPep0eQ29Y8cJV216MrA/zHK3xGKyKzryOoONDv61rxdISEDK/IJeKDXtwFvSMoN8ruWroDQi5RhfuOVrMzXo1P9+87aOe8Um3pl8VcXpKPAS2jT9UbYgwsj3oGUGvPbmubdxV8O+l+TiwI3iO2lgjv0bImvnTO3r2Sr8qS4qLe+KSWciYJtJwZcFzhY49B9Bv7V3Vtu196eExc6pYbUUEz9EbU+YJLgFtvvREz/jktolTEuJ6PlcTRFZ7Ij4WFnlmbPPGAPXONoh3IpE32RhdRM9RHC/pCmatsubVnnEJKenDWwEenpIYF3fHxzWVwmLZKncLz8JFnnW20nkPz3/v5M5Widc+PGbcWYehBc/RHBfrDGZNb770S6BOTh8eEXv4cEL8KiuIrFWrXC1+ASDyrGOrNo15eO3at0rWReJdt67kLUS8ycbqWvIc1fHPDpVQprWVtk+f6BkXn5QyaHi4DerTC4ifu+ioFCE7W+lYJfZsdJybN+bh+WvfA+zQnnIlb2GNN1XVGDQteo7uOHeXKGuI+pd3xMUlJPYZJOYeNKhPQhzSWEzcqsqhnnWMvWrTOIS99q23TpbsRb0id+4tOfnWW2vnP4yJbabWPEeXOeBWqYJZ01TaLn38xB09cb+CPtgSE+PjEPATH7NALEihVbVQfUX2rNGa7LbSOePGYG7eEC8A/4etxqRr1XOUmeE2Xxn8PI2mwlxz6eNXn7gDgWPreccdT7z66aUac4VGlE6p9bU5bYXUM7RQHLazm+aMA/AxCBZwx83ZdNbmYHW6NjxHmznAmZRqRCtYhdnmqLl08cuPkX158VJNjQ0Ba/g0UKsqmauZlSXUs1bP1DhsVefO/geys1VV8DlwdRIlaMFz1Jmh6Kkhb9KpEisqKs3EKisqpLu0kNp1lfPQhHuGEmQiw+QYk06rvTrP14E54DcpVVc9c6RKabr6icSi4/l6MKOvXZQq9VVkS61Saj2Ba7FoeL4+zIFAnVapbCtvaqVSW3fN84e13/P1YoaLi17ZmiQghNLg/kHzxLXX8/VjRmPCNJC5CLlTqyBbGtYX+KHWPs9RZG5uppMver0ej4esh8MaIMxQ9iCDyFQoT2Bqg7UOJ4CUXi+dvrG5pR43UfYcFeZmPAMfZMbldDjsVmtwLkyr3c5ajFo1zRAWR2u0sHa7OJHV7nA4XXgOQz+Zv1GgvR6eo8HcTPNVBxkTf2Iwd3grWbmefxeaBrJWR/MmRr4enqMU28009nDo4dkn6bRO1ND0NNIXDjrZmwtlCAciicPQ+L4OnqNdh5GREXiaUTytKraQxQqF7X4/Pw1rc9uzP0bP8/Wstzur9YhZzGIWs5h1S7M6r9dyjm0tcenzRVrINuTyHdxBN1xzNpz2UGS7L3Czm79Oisx6Aze/+Vgps78bMAfsMeY2mJvxXaHH5YD7PtaOZkHnmm9i5mZE67Yb1cqioiKlCj3QUKIXGqPd7Ytw79jlmdHCDW6LRlmk1LJu0Zz+nNddrYWtapOTrHJx8zA3+1x6ZZHKRGibGmtrv6mq+qaqtrahCU+i4q9WK4qYLsvcHMk4Vqmvx3RNtVW6soNvvHHgwHPPPffqs89u336q6hu0q6m+yNfcReyqmJv15kBjU1Oj++LHBz788PPPP/vss/LyI0f27Xvlt79d/ssXn92+u6K+QeG5qZg5w6lG2yXg/fzzvxID6CNHEDVwv/Lb5U/oGpw3G7NJ1XT2uSOf/fWvEuR9b1N75Z3/bazf7r25mC3KprMH/vrXrygwDu19GPkdZG+/+7+NZsXNVZ45q7Kp6o3Pvvrqs88IcDkv8jvE3nVX7b7JmJudysaqNz7/+itMi6MaSjExAH73t7+uOhfCXCQTrEDdzjyqZTL3tR2hlcm0V8ts5yKbSwHMX30NwG9/eenLL3/78cWLly59vBx+ffnuO+/OSM2oOneqyCc+QsQsk8kNXHsMmOuu7QjE3PLeq2Ou2974jeLDrwH5YmNDk3v5pSawi080wIX54oyUlNSMc1WnlP4QZvqpdqWs1Rx0Vma3osGm+Prrfa+829jgabwMzFd8wOwNNDc2ZKSmpD3UCjPHWeQymaXLMXsU9bXbv/76lVc+RgJ7sc6Bi7/0B+DvtrQ0wsy1xIyyIO9yzF5gVr777iuvvPnRsWOH35zx5kcfffTpx8v37N+z//BszGw7pWqZmcuWyWiRNqCCLld78WfLZOREGWSybE7YUieTqTmDAtV+hhBm8dE4glC5kWWr+VPiVUNIydR1UWFWOupVbwLzjBkzhg6dgWz5jPR01CNwKBpnNB6Y1a0wQ64V+EUBX6vhWJdTVJRzL01nwcx8OrWEWXo0xymEWpKcHLuc7ldGhdlWf+rNd2fMeNN7+bK7ZsGM5ctn3Np7GFpVzL0emB8F5lOtMFtpcEOmiwBOKye5VFJUCAMZQyAgWR2+wFlBVblM7hUxhxyNtqNk6C9O54Udijp6zWg3s09pbjj15vIZqR+h8uxevmBBeu/eaSMamhobm/ak9gbm+lOaVpg5Gc62mg/mOkJjIJn3CorKUTggZgVfLNVB5tCj4VTJvXwYMeQUFvHvo8LciJiTP2q6cqXpyq+HoyFVwOzzeoEZ6dyg0rfGDApY0W95sJJRY1glKc4FmNKKt9bJeBa6nzKHHs3xp4Zj8Lnzyvnj0Me1n1kFzOt/nZ5yGGrqgHcSIu6dOr4RqQ7MaT+ralQZ2mBmEBtfuXtJfgtwgVZDLYR51PjM1AkscFiRwBx+dEg1bQhuVUaHuQmYH09/aMmS9Uty8fjnMc1jNgAAGy9JREFU1JTER5ENI8xKU5vMaqH25kVT4wKtkCmtmBYXZ8RcJKRSCMzhR9P2klpNZFXSAhKla5VfbQ5UrP/18PSM2bm5s4elZKCZtof1GfEQ2NDU1PSfn2tSWtpgrkPbrKKrFwlmA9ppwD/wS0mY1cJhBQJz+NFwacrmK24truL4k8JEg1lbEajalvs4xDbXxH074iLn9zefGPwtmqJxT3LqDMTMtsKMaim8zcVvKSC5RpQs2pxNXqBMu2QylYRZhY8LP9qAaYtUqiKemYkms1EdqN2YOyl5Y6CpsenbwZdQsT4x2I2mtFuZnDLjF1VNCmcrzCxudIhzTaOzCKBU6KUSEqjIpesqmPHR4JQm1IbqbIgGM6sMNBbmZqSPqAk0Bb4d/AVh9sKbmmHJg0b8orZR4WmFWYVzpwwK4aUtLwNkXoEKLeTSqyDbWmAOO1ohMBJmRfA4VRSYOXcR11SWOzs9+dEat7tm8GnUYevwYBZej09KnjH4+UazytcKsxznWhvMFEMrYcg9m422wguGFOeWmMOODlZkBFEVrLcV18DM+lqsuK0B27bH09KS+g4ePCBhwGCwvgnoV1LS0Bk/PhdQMf6WmSE3BQRQHtzN0NoIdrL4RRHVrQXmsKODzAX4w1zB67o8Gsx+kyrQdGJ4eloKGsxPDU+L12fo8sEDbQ0Kd8vMIIvcRTcSGhc5CZiHZh21ueVcK8xhRyv4Aq6lzS4FfwVXyqLBzHmKGmvPLUlPSU7qkyiiBls+48e7G09pfS0xu5TCPYAHzr/Sg1vMcpdQu5GINAgtzpaYQ4+GI+QgN9yByckRLvhb5IGsyqKiM+c3KKvOl01KBeagDQVbvvzfR9kcCpcUOeTZEF/5uOShWziaX1Et3BJz2NH8ZxSwcnwt5FiaINsQHWaPoqKq6uAgPGkD4A5CvEOHDVv+zuCfnGtQ6kMPFDErxHfWKtSKyBZtUZDijOHZ1pnDjjagt0UGEiQ4kFRkPxMVZs5nV9hsVScGpeHJowaBDZ00aRJBrlB6/FzXsVBmf4vmMylqbd+cntQ7jY6IBeQFywG5vkrhauW4zmdXz+z3GhS1tbaK3FtvuxVDPz5pwYJ/v/1cg03Bdinka2H2+yoVtvrab05k3AbUwPz44B8/X9toVli7FvI1Mfu9rKKioaG26nBG+m23De/741+ca2rUFDm6GPK1Mft9dSqFrbHWZruYO/jHj51raLIpVHVdDfkamf0+r0WptNVDDb67qqGpXqVgvF0O+VqZgdpjUigrbLaGBrNSoXd3PeIfwAzUbkapOKVSKE1uX1dE/iHMKMIder3T2yWBfyhzF7cQZm+M+aY0Xwizuxswe9iQoQnum71E+zxhgxNYq/3mNisbG3QTs5jFLGYxi1lXMTwm0+dvLQlq0oRv7aiGRnvbGV6y9Az8uD3eiCncHg+Z/N/j8XSKYXj+9jG76+ptpzcuBtt4wuIC7LAUdZCi4tS5c6dO6cz1dXXuLs9cX19TOD4xsc+wEcMSE/tu/MLlcoekcLqqds/Ba0zNWrRJaah3uYL7qsOYOa/LbrWJh6FdF+bqdiC76i+MTxy65PAF3Re60/tnJ/YttDmlw4Wdtt2Lnl5RcvLMn84c3/D0rE1Kh9Mp7LRImN2MWqXSVJpt5kqtWqU2uq4fs6U9yCf69sk9oTt9AtmFC/uH9drIiph69HCcnzdrBQJG9qczJU8v2s3aHRGYPVqV3tEYaLCxl77QmWy1jY3OCiXb+ZgdrtN9+6w/sX/Pnv3I9uw5fHh24kabLQhtPT/n6ZKT1I4fP37y5IZZAG0XmMWj0LjLX6IRWZ8fefvtd9597tWDtgb1dRpU4vvhzM4vRiSt3LPt8J7128DWw4ttezISTtiEGoI1v/R0yXFqf6ptrD1z8viGRUo7aw1jNlZWfkgGoH1GRty98ttLtZpOx2yzLU7KWL/yIndxZe7Klbm5h6/UbFu5vs9gkwDNls7aUEKgS/4UCNRXNZ4pKVkxr8zBhjFbKrSff4WGYuGBWK+gAUmXK/ixMKQ7QIG9TRi5sqU9Bpk9GsyOC337zM49BuXjRO7s2bP3eAOBS0tyMxILeWa2ct6KvXtLkB0vaQzUPz9qd8OGkp2zdltYNpSZ1VR++FV5+Ycfvv3uu2g40jvvzLiwu4JHUcAvd4HM0NHMZtvGpOEZGcfQSriHM4ZuA2Tu9ENDByWNZ3gZS2et2LmTUJ8BmTfNei3w2ooV0+cdtJGLhSXYTcFxynygfN/Fxpo3G5suftTk/1VKStl5vpuenHSWkbc5SEOubGkPMIv6QPxQZpYZnzxp0qBhSN/AsW3fQnVYOAD1hkq4UE2QqrdOx1MnA/ZeYA58c7Y2sGjC1KmjymyWUOY6le3AvncagLmp6dJHTU170lLKTpmkzGrU6cNeAFFexxXJ6Umok6m9MrUCNnoJM03AcdpsmUyupf3yi6LCbPtiRCrqNdEHKYzGcvsL43qh5TJ7FZoZlIAxz1u2bt0qPD/2itcCeBKz+tuBeUKpMYzZo7R9/Mpvf/WrXy/41Zu/zliyJKN3yqlTFimzRVbE1cnVHFcg91pkFngvq+O0MosXdeytQ4mAmU/A2VEPZwWkUMsNaNhCNJjNp/um3db71t69k7fhxZu8hXEJeOXbxBcpc9WcZfzq8xtqm9GMDv7H0LpTE7aeNptCmL3K2o9nLK+pubhgRnra+pqabWmDKipYKbNdpuAUBTSGAU0rBxlBcC/p8ibH24UEatJx3YBSIq2jojNmRj3w+5xAzF8MTiCr/Ca+aCHMFXMWkkVKFm6o5Zpsu83KgWRBtXkHw5h9yvo3ZyxvCvgXpPVOPdzUdCJtUFWFVcpsBWYMgMAKCriigoIiTl4AzKgYK+X8uSAJaBcsA4N7TTLBztzt0nlEClmbLLcGNx03kmWOkc6YyFQxh664BMh+20C09BRGnhCRueHNxyft2b8eORy/cWNu2rCqCqeUmUFFF9drimyIWMBTy6E4S5iDCbxFUIwVMoMB01qjw3xhRHIK6vGWi6ovKNP+bWSNQSjPlZi5ag5Zh2jDN82NgYHBRbgnbC0zG0KYOWXjnsczjh1bP/vYsW1Ljh1bkjqi6pQ7tA5jqIwgcp1MK2PgLEAER9AZEhTIrTi2ic6G6DDrxiPEPhi58MUaDI1XvD1dqUMJjJXzyPJ/33CNXu72CcHFekt1ptA6jFM1HZ40ojFQsxGu8oWBwJ7U8VVCd2fRtapAgfvhquBdtpxzyeCXlFlIgA9SofKswt1Y2SgwGyo3IuaVcH3mCgfEL3YD9J4+ySlJ43VGI05RuXUWQW6of/75+4OrP46jMkuYtQ0XM1IWXzq8+NKl/YsvnUhM+VmtcLHF2XcVIMEY3MNeTrvsk4E2EmYhQbbchbq3GjgVqbejwQwFelhKavIeuFDBdTk5EUGfGJacllhYaaBnpRSCe+o3Vxqu2EaJVoOcOq+sUh/G7NI3ze6d3KtXr4RevRJ7JSaP+IVNL+rXirum8n02FS7cI1mFwLUhzEICF7pOY1aVTJatjQ5zpXFxcu/UYcfcBwckQmWbuNh1YXCf3qkDdJVakkB//qWnp09ouFJ/6rH70cqPdGXARbsZfTgzp6o9mCL0Ah4649+rlL7r1YHzhzNrK8tGpN2WOnRx3yRyyRo/AF70Kqys4FNUlM5ZNn3RYwNvvz+4DOLCpwWZpcwuZe1GiJtBg4YOHTZp+T27K41c52PuUVF5cGjv23onp/ZG1+nbeqek3HZb0osGg8Csr9i6Ydn0CVPxQoB4sTy0BqLSpNdGYOYMp2r3p/dOHzR80qQF9+y2qbjOyAzQhcN633Ybv/QYvEparOcjG0Of2rpBusLUijm7dTwyMEu+3jacaqqZfett6cOH/fycTXkdv0f3toNZB0o/lNz7VrKAz629U/q+qA9GNk5xfutLK3ADdBX8XrUKIWuFkxLC7GeVtQ0Xc4f9bHdthdrfSZl7aCoqy14c0SclJT09JSWp7y8PVlSckpZ5XUXpSxt2kqWI1m2Ys1UpQg5j9vs0yqraqtpKJevvtMwQvZWGssLF4x96aPziFw9qKyv0YTWd5nzpS8TmbTqlr9Bogvss4d2OPBqlSmm5zn1E2sncQ1VRWanXlZXptIbKEJFpLOg0lRXnSneXntIaK06JkSMx3xBrL3OPHkWqUxXI1KqWSgBeBQbCXqPWSHZU+7oqMzZ567vJdP9hBYP1dYhZjR34haYeLQNww43Vx75KjlnMurv9X1tfKXCkw4XoiRfZwLX5BUwXZebQ6h1oXY5mupoHWaWjGZH7/NzNx0yB8ZI1eDWiujphMRY/1za2tO8GOh5+OjUzR1Zg8QFtXbgBOd7bWoyLvtN3uT31Nhtrq3e7xX0yOhczlGIfAoYsEkjRzPT8BjfCboVahOz6w+q5E+fOnThztd7Z8dCRmf1eL9AIwBJk8UYU5ZC0VWaXy/GHmZn5Wz4A25I/ZeYfHB1NHYmZQ/W0p47CUdAa3sTg8MeD6nGuZWaXy/JM5pav/vY1tr99tWXKansHQ/9fRJF9HrGuNdUmg1ZzlJhGazCxNeK1ILy+yFKTfhtO5rmcD/4msk+yZlok/XM6nhmVZBTV/LIS1YajO1bPnDl25oMzJ06cOBNejZ25+qhGzO32RSzVpBMDIH/ylcTKc56stncmZs7rEYlsNR1dPfPBkVOQZWZlIoNXIydOfPDJ1RomSA3HhMc37nDEPpNT/jm2T/7xjw/Iq/Kc1Q5r52H2w8VXqLBYw9GxE0ci2qwcsPwcalmZiPvB1UeNAnUdXML94cxW6x+mFFPQPwcCByj0kSl/sHcaZkAWRLYbj44dPRKAgXbLruLiI0fK0bS9xcW7NgN91uSRIx988mhQa08YNGZ+Lg8dh2TmAoHLH8Ar5GTzc9XWTsIsQnYyR58kxHmbi8v5apfWveVHduUvxdSrNaytJWjErJ9cjCc3Li//B5qh/gC8LC7evCZvyh/YzsEMyHzlZT26YyYm3hICTLH/9knxmrysyVMmjg0GeCh0jx7V1meWFh/adwhIP/z++y+/5C7nb0ExkpWVuaO6ujMwB5GdlqNjCfGRCMC82ke25GVNmTh6tZbl628pNDDbRuftO4Ss+O+By5k53wd+n0OYs56xdAZmDiGjdR9rUFzPnZKVk1/8SUvE2L46sjkvc8rEJ4+yTrwmJFrvkxMzW5gH1iDgXbu2QGGetub7wPeZOYT5OcbS8cycFy1wipkNO0aPzMzJ24Wj+m8tGdK6vBikfnDsUYudhxZdsoDZ9MCWXWCb11wG5sz85kDzHzOzsI3uDMw+t5ss72kz7EBxnVcc0pSIZCjAs1ChttDVP91un4iZMT2Qt2bzmjVrDkAF9s8pmfD7u7mU2cR0OLPf7XLgxUvtzI6Rk0lJ/upqrHzL0skAzZL1Tx0ut1/EzNyVk5+Xl5d/GXc8Q70rA3+c3FmYObilIKOBmR2jAXnNka+u1sp3YehqBx5xC9U3JzCbzKNzloIhmQPfjZyLO5rPxdH9jMnU0cw+uDwhs1uO8siowRQG+AlpSJG9OPg/R9BTHnxSw9qtNvDgcvmCzJbt0wA551+I9Z8jp2Dm/we149LM7R3O7KfINezRsXNRYH8ebp988uGHH36AoGkD+vPyTz5B8ACdA9Balpw1l4sT2iRG7b3A/HsyLOXyZTKg4LmspXkPqDsOmTJ7XA6cYVb/5ANQY0dE/vDv//v9PwC6vFxyIpDq5ZuzpoxebcIurA6XJ8hsemZp/tJ/SEdRvJGVv/QZxtjBzH6KbMX1V96h8jDickBG/XkB+oPysN3QgM4a+eDRauLE5fLzzHp92TRor70hscn5a+7VduRXTf+HKzA7yS17dDQUtuLyiIH9PQ7Q3//mA3SrIYpwDF2clznxST2JbqvdI9xL6g3PLN2ct3Ta0ry8pbzlbZ72O2NHM/tJYbZaDSiy1xyJLDNZxevygS0fRDgn5bvyp4xc/d98kfYLzwz0pmde3rxm8+uvb8a2Bn52LX1G36HfKCJmD0WuPnrX5ByI7AjQVGaAxkKHIZcf2ZIzcuZRHtobZNYansk7tEtkh6Y9YxD1RekYZk6QeSzIvIusbCOJ3PLyD/l6qPlfByJAQwqIbiQ0gcZVN/kArVa/+pFdh3g78vKdv9N3LDJi9gmlGct8hFq5OLT/LCw61/wlKdHln+P/1CD95pwpQaH9wWe9Wq1BM+SRNa8f2rdv3+svPzL6Dx2sMmLm+NA2PQl3FpuPiKycV/ED0eXmexD6iIiVWvEuJDRDqzGP+Jm+VmtUrX7muecmP/fMdpWxo4kxs0tUaeftOyKBJvbBn0XjW0HoLeI0xcjg3mlzHlyvtJZgcIs+RaPRgNwGLeqF0xm+r/KxxKp3jEaVdpgh5sviMb3+A/nFQeBdqDbGjwezsqYMef+/q7EzFNySz9FQ6xTf0XEeymzCNRhBOXRITC2RGQyELia2ZTP/MBTfLE2GWsxCvHk683exnIt0wrFoaGijugYsSF38wb8QM/pm1ocH/V45kL8FybslP5+nJZY5cazeQtxBcHdiZjvOo9my465pOWv2iQxfWhAylvm7ifjR/n/hW6OsnHxkiFjMnDVyyFHaj8nemZl9tGsXDu3XBdogdvEH/4s4L6OHJ1mZX+IW6IFMRJ0jVRnsgbve5/tu+Tsxs5cGo2HsvdDUppzAjLAxcvGfcSH+1xS44crL/xIX7cvwhgotwZ5812oDLSq+Tszsocza0ffCHZXIiovR7127SKuz+Z9TMpfmrcn/ktwL/35KVr4AHaTOHDlWS5k9nZjZxViwaVEVJkYmxJu3/J02RaZk5q3ZnE8bJ0h10RdYwQI9Vkv8Me4uwPz+XZOz8oMao2YGekq7mb+58IPOa9bwzCB0ZigvLtD93qfMrk7MbKfMv+s/LSf/EL3uItzXMTIPGeBQbOfxb5u/m4u/vQtBBubfEXeMvaswb6b3e68jQ5fgvA/5mwtu7uSlefm/EU7BH/F3tFktMls7MTNLmNnf3ZuZlb+ZGr3FX7NGYETMOcB8mX/vmztlcmYk5uouxHyXiBlzw0/+gWYRM8RyltDybv6vkVMyW9GZ7QrMENt5oKwYOz//sogZI/5L2OCPJHRQ507NbGKQWd6/d1oOVMxiy8sX3Vxwb8yFpudcX/BW4/9FEBrV29hMXYCZef+uKVlLoZUBqALyb/4luqEivXrFG94Ig84MMnfm8mynzJoh92YtXZofNED+e+tTYV0OZ753iKYLMDsIswkx55AH0BQ65zffS6cE+97nuyLZEiZ05r1jNcSfoTO3SVwGwmwacue0nBzhwftSqKO/FMvMrR49ceTIiRLoyxOnZIqhczL7jzVR5s7c9vRQZmbsnZlZEubfSGZC42aORPZPyXn4vUTonKUP9FvNUObOfI/hM5iQVTKr+0/OWipizpJ+tQbMD0DFLa7VcAuUXK9I2xuY36/G7kyGznwv6TcZcSbZo3dBcIuQD3BS5rkjp0wOYYYWKBUaEy9diqow7M3IdOpnQxY9UcY4RMoc8g0q6DwlVOdA4AoRmlQEOZn9xpqozGynZnYRZp1l7J3TgqEdKnOA2zFx7twpc69ItzYTocm5ypncbwcNbX2nfgbY7NEbkemgVfKISObLYdNXhrZJgi1QGh7TUGhjZ0a9t1OPu/EbCLTJODoodE6ozC3af42cnEkPmtbvScZEkE3+Ts3MsYTZWL26/0+F0P7H1c436ZsoMN8LtTaV2cp1bmY3ZTapoRaDRhiovDTry2tlzs+f1n+skchs0Hs6+ZgyPriNFix0HjQ7w6uwlgyuVogZNVXv7bfDYgyGdqdm5qxaox4Zox5y39I1ebitnXng8nffeb8D++d3keyf2L67/MeRD0xGj33z8qb1A5mxH73WwXX2sYM+klO9AQn9Mr6LROMPRrZqE+lfVG2jO9Cl/fv9rpo60vs6/XhJzqIlWTUZRvd/as3Lm9csRdCTH0A2ZTIy8pu8fEBsk/G3OHCa7oP2iJHKzHKdf4yolzJXVL9/133o8dCavLycnGmZmfCfb1Yuxb/R/SK2aeQPaoLlo+dJ0/oP0fAya31dYFysILTOsvquR9bgJ555+RgUCioO9rw8VGaR5YgNbUTpIbJ31FBkDZG5s48F9mr56DY+edcjr+OOXBgw+ExwDenctRk25YmMJFhzb7+ZFpOOqExl7uzMnFVDRWLUY/s/hR9v42diL7/8Onra/fpmqaFdoqfCL9/bb6yB4WV2cF1jzLdfz0NXHx1751Mvv/6y8HRfYpKn38R2YeSj1TRSNAZ/Vxnn7tGQPOv0lvdH3/nUZvJtVShyEJ38oO95incBMtRf5HitxtNlxvZzVrWWGECP7f9I8S76zWSrhr7OW4OQa3T0aLWV6zrzGfgNGgH66Ni7Hnl7X3Gbdqj40Oan7kSBrafHakxcV5rDwaelSlfoLJon77rvqdf3HWrL9r3+0/79Zhqq9RUUWevrUvNWcB61oDTDPNnvjvueapP4qfv6PbjDwgiBrZGOKev0zM2cS4DW6qBQ97vjkbcP7WuVuD/EtdXIH6RRu7muNj+JBLrauGNIvzt/+tSufZGw9+3bhYhB5GpeZK1a7eK63pwsAM3X3lq9yap5cki//vc9grD3HQp2lYP/u576KSY21ggihyF3lXloxNBaHcMadjzYr/+d9/30qafeLj506PVXXj90qPjtp5766R39+yFim0nfMnKXmXuHc6tVQnyD1qzl/ZkPgtr973zkp9juu69///79hjy44z8tNSadkFSjklRfXWu+Ic6rF0FDg7Ta+t9Hd8wc++CQIf369bur35AhY8fO3HG02lqt04nSqfSR53DoEszQOGFUEN98f2vUJGVqWEul5j+JGU0WtobR6UUpNCqVxd+155XiXBqg1ohMq9fqTAzul82YdFq9dCeUBhfX1efS4nyMSqUJMxLFYaZSMX7uJpg/jPPoVSq1pm1Tq1R6D3eTzJnGufUqpfoqiN3czTNPHMe5DarWxAZglcnNcTfT3HhoqQZWq1JG4gZepUrLerlWkLtIe5vMc4gmBPMQc7tZo0alVAI4oCODv2jGXpXGaEUT5GFD040F50fsKszCTIdofiWHw05HE6JRgHY7azGhSzCZnhjoNVq4RNslaRwONM+SMDtiV2DGxF402yEitoaaHZ0ENOqsGg0YQ4j2sDSIGgmP1l7lusrzMBTWPp+XhrQr1LCSkheimeJoiKMIF8V316nD+Ola8bT4vHmlJmz302LMRarMOi/z9bPOivz/AXQ0URo+U0pGAAAAAElFTkSuQmCC"
|
|
next
|
|
edit "logo_v2_fguard_wf"
|
|
set image-type png
|
|
set image-base64 "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"
|
|
next
|
|
edit "logo_v2_fguard_app"
|
|
set image-type png
|
|
set image-base64 "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"
|
|
next
|
|
end
|
|
config system replacemsg mail "partial"
|
|
set buffer "Fragmented emails are blocked."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg http "url-block"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>The URL you requested has been blocked</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>FortiGuard Intrusion Prevention - Access Blocked</h1>
|
|
<h3>Web Page Blocked</h3>
|
|
<p>The page you have requested has been blocked because the URL is banned.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Description</td>
|
|
<td>%%IPS_DESC%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>URL Source</td>
|
|
<td>%%URL_SOURCE%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
<p>%%OVERRIDE%%</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg http "urlfilter-err"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Web Page Blocked</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Web Page Blocked</h1>
|
|
<p>%%URLFILTER_ERROR%%</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>Web Filter Service Error</td>
|
|
<td>%%URLFILTER_ERROR_DETAIL%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg http "infcache-block"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>High Security Alert</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>High Security Alert</h1>
|
|
<p>The URL you requested was previously found to be infected.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg http "http-contenttypeblock"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Attention</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Attention</h1>
|
|
<p>Content type not permitted.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
<p>%%OVERRIDE%%</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg http "https-invalid-cert-block"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Invalid Connection</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>%%FORTIGUARD_WF%%</h1>
|
|
<h3>This Connection is Invalid. %%CERT_INVL_REASON%%</h3>
|
|
<p>A secure connection to %%HOSTNAME%% cannot be established.</p>
|
|
<p>When you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site\'s identity can\'t be verified.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>Site</td>
|
|
<td>%%HOSTNAME%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Certificate CN</td>
|
|
<td>%%CN%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Certificate Authority</td>
|
|
<td>%%AUTHORITY%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Certificate Validity</td>
|
|
<td>
|
|
<div>Not Before: %%START_VALID%%</div>
|
|
<div>Not After: %%END_VALID%%</div>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Certificate Chain</td>
|
|
<td><pre>%%CERT_CHAIN%%</pre></td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg http "https-untrusted-cert-block"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Untrusted Connection</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>%%FORTIGUARD_WF%%</h1>
|
|
<h3>This Connection is Untrusted</h3>
|
|
<p>A secure connection to %%HOSTNAME%% cannot be established.</p>
|
|
<p>When you try to connect securely, sites will present trusted identification to prove that you are going to the right place. The identity for this site can\'t be verified.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>Site</td>
|
|
<td>%%HOSTNAME%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Certificate CN</td>
|
|
<td>%%CN%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Certificate Authority</td>
|
|
<td>%%AUTHORITY%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Certificate Validity</td>
|
|
<td>
|
|
<div>Not Before: %%START_VALID%%</div>
|
|
<div>Not After: %%END_VALID%%</div>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Certificate Chain</td>
|
|
<td><pre>%%CERT_CHAIN%%</pre></td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg http "https-blocklisted-cert-block"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Blocked Connection</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>%%FORTIGUARD_WF%%</h1>
|
|
<h3>This Connection is Blocked</h3>
|
|
<p>A secure connection to %%HOSTNAME%% cannot be established.</p>
|
|
<p>When you try to connect securely, sites will present identification to prove that you are going to the right place. The identity for this site is blocked.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>Site</td>
|
|
<td>%%HOSTNAME%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Certificate CN</td>
|
|
<td>%%CN%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Certificate Authority</td>
|
|
<td>%%AUTHORITY%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Certificate Validity</td>
|
|
<td>
|
|
<div>Not Before: %%START_VALID%%</div>
|
|
<div>Not After: %%END_VALID%%</div>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Certificate Chain</td>
|
|
<td><pre>%%CERT_CHAIN%%</pre></td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg http "switching-protocols-block"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>The request has been blocked</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>The request has been blocked</h1>
|
|
<p>The protocol switching request has been blocked for %%PROTOCOL%%://%%URL%%</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg http "http-antiphish-block"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Webfilter Violation</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Webfilter Violation</h1>
|
|
<p>Your attempt to submit internal credentials to an external site has been blocked by your system administrator.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg http "videofilter-block"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>The URL you requested has been blocked</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Attention</h1>
|
|
<h3>Video Access Blocked</h3>
|
|
<p>The page you have requested has been blocked because the requested video resource is not allowed.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Description</td>
|
|
<td>%%VIDEOFILTER_DESC%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg webproxy "deny"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Access Denied</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Access Denied</h1>
|
|
<p>The page you requested has been blocked by a firewall policy restriction.</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg webproxy "user-limit"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Access Denied</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Access Denied</h1>
|
|
<p>The maximum web proxy user limit has been reached.</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg webproxy "auth-challenge"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Authentication</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Firewall Authentication</h1>
|
|
<p>You must authenticate to use this service.</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg webproxy "auth-login-fail"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Authentication</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Firewall Authentication</h1>
|
|
<p>Authentication failed.</p>
|
|
<p>%%WEBPROXY_AUTH_FAIL_REASON%%</p>
|
|
<p>%%WEBPROXY_AUTH_FAIL_COMMENT%%</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg webproxy "auth-group-info-fail"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Authorization</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Firewall Authorization</h1>
|
|
<p>Group information query failed.</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg webproxy "http-err"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>%%HTTP_ERR_CODE%% %%HTTP_ERR_DESC%%</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>%%HTTP_ERR_CODE%% %%HTTP_ERR_DESC%%</h1>
|
|
<p>The webserver reported that an error occurred while trying to access the website. Please return to the previous page.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg webproxy "auth-ip-blackout"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Access Denied</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Access Denied</h1>
|
|
<p>Your IP address has been blocked by a firewall policy due to too many failed login attempts. You can re-login in %%DURATION%% seconds.</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg webproxy "ztna-block"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>ZTNA Access Denied</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>ZTNA Access Denied</h1>
|
|
<table>
|
|
<tr>
|
|
<td>The page you requested has been blocked by a ZTNA restriction.</td>
|
|
</tr>
|
|
</table>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>Details:</td>
|
|
<td>%%ZTNA_DETAIL_TAG%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg ftp "ftp-explicit-banner"
|
|
set buffer "Welcome to the FortiGate FTP proxy."
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg fortiguard-wf "ftgd-block"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Web Filter Violation</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>FortiGuard Intrusion Prevention - Access Blocked</h1>
|
|
<h3>Web Page Blocked</h3>
|
|
<p>You have tried to access a web page that is in violation of your Internet usage policy.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>Category</td>
|
|
<td>%%CATEGORY%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
<p>To have the rating of this web page re-evaluated <a href=\"%%FTGD_RE_EVAL%%\">please click here</a>.</p>
|
|
<p>%%OVERRIDE%%</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg fortiguard-wf "ftgd-ovrd"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Web Filter Block Override</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>FortiGuard Intrusion Prevention - Access Blocked</h1>
|
|
<h3>Web Filter Block Override</h3>
|
|
<p>Please contact your administrator to gain access to the web page.</p>
|
|
<div>%%OVRD_FORM%%</div>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg fortiguard-wf "ftgd-quota"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Web Filter Quota Exceeded</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>FortiGuard Intrusion Prevention - Access Blocked</h1>
|
|
<h3>Web Page Blocked</h3>
|
|
<p>Your daily quota for this category of web page has expired.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>Category</td>
|
|
<td>%%CATEGORY%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
<p>To have the rating of this web page re-evaluated <a href=\"%%FTGD_RE_EVAL%%\">please click here</a>.</p>
|
|
<p>%%OVERRIDE%%</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg fortiguard-wf "ftgd-warning"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Web Filter Block Override</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>FortiGuard Intrusion Prevention - Access Blocked</h1>
|
|
<h3>Web Page Blocked</h3>
|
|
<p>You have tried to access a web page which is in violation of your Internet usage policy.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>Category</td>
|
|
<td>%%CATEGORY%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
<p>To have the rating of this web page re-evaluated <a href=\"%%FTGD_RE_EVAL%%\">please click here</a>.</p>
|
|
<div class=\"form-footer\">
|
|
<button type=\"button\" onclick=\"document.location.href=\'%%WARNINGLINK%%\'; return false;\">Proceed</button>
|
|
<button class=\"primary\" type=\"button\" onclick=\"history.go(-1); return false;\">Go Back</button>
|
|
</div>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg spam "ipblocklist"
|
|
set buffer "This message has been blocked because mail from this IP address is not allowed."
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg spam "smtp-spam-dnsbl"
|
|
set buffer "This message has been blocked because it is from a DNSBL/ORDBL IP address."
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg spam "smtp-spam-feip"
|
|
set buffer "This message has been blocked because it is from a FortiGuard AntiSpam Service blocked IP address."
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg spam "smtp-spam-helo"
|
|
set buffer "This message has been blocked because the HELO/EHLO domain is invalid."
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg spam "smtp-spam-emailblock-to"
|
|
set buffer "This message has been blocked because mail to this email address is not allowed."
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg spam "smtp-spam-emailblock-from"
|
|
set buffer "This message has been blocked because mail from this email address is not allowed."
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg spam "smtp-spam-emailblock-subject"
|
|
set buffer "This message has been blocked because the subject contains a banned phrase."
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg spam "smtp-spam-mimeheader"
|
|
set buffer "This message has been blocked because it contains an invalid header."
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg spam "reversedns"
|
|
set buffer "This message has been blocked because the return email domain is invalid."
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg spam "smtp-spam-ase"
|
|
set buffer "This message has been blocked because ASE reports it as spam."
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg spam "submit"
|
|
set buffer "If this email is not spam, contact your administrator to add the signature to the FortiGuard AntiSpam Service."
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg alertmail "alertmail-virus"
|
|
set buffer "Virus/Worm detected: %%VIRUS%%; Protocol: %%PROTOCOL%%; Email Address From: %%EMAIL_FROM%%; Email Address To: %%EMAIL_TO%%;
|
|
VIRUS REFERENCE URL: %%VIRUS_REF_URL%%"
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg alertmail "alertmail-block"
|
|
set buffer "File Block Detected: %%FILE%%; Protocol: %%PROTOCOL%%; Email Address From: %%EMAIL_FROM%%; Email Address To: %%EMAIL_TO%%"
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg alertmail "alertmail-nids-event"
|
|
set buffer "The following intrusion was observed: %%NIDS_EVENT%%."
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg alertmail "alertmail-crit-event"
|
|
set buffer "The following critical firewall event was detected: %%CRITICAL_EVENT%%."
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg alertmail "alertmail-disk-full"
|
|
set buffer "The log disk is full."
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg admin "pre_admin-disclaimer-text"
|
|
set buffer "PRE WARNING:
|
|
This is a private computer system. Unauthorized access or use
|
|
is prohibited and subject to prosecution and/or disciplinary
|
|
action. Any use of this system constitutes consent to
|
|
monitoring at all times and users are not entitled to any
|
|
expectation of privacy. If monitoring reveals possible evidence
|
|
of violation of criminal statutes, this evidence and any other
|
|
related information, including identification information about
|
|
the user, may be provided to law enforcement officials.
|
|
If monitoring reveals violations of security regulations or
|
|
unauthorized use, employees who violate security regulations or
|
|
make unauthorized use of this system are subject to appropriate
|
|
disciplinary action."
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg admin "post_admin-disclaimer-text"
|
|
set buffer "POST WARNING:
|
|
This is a private computer system. Unauthorized access or use
|
|
is prohibited and subject to prosecution and/or disciplinary
|
|
action. Any use of this system constitutes consent to
|
|
monitoring at all times and users are not entitled to any
|
|
expectation of privacy. If monitoring reveals possible evidence
|
|
of violation of criminal statutes, this evidence and any other
|
|
related information, including identification information about
|
|
the user, may be provided to law enforcement officials.
|
|
If monitoring reveals violations of security regulations or
|
|
unauthorized use, employees who violate security regulations or
|
|
make unauthorized use of this system are subject to appropriate
|
|
disciplinary action.
|
|
|
|
%%LAST_SUCCESSFUL_LOGIN%%
|
|
%%LAST_FAILED_LOGIN%%"
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg auth "auth-disclaimer-page-1"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Disclaimer</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1 class=\"text-centered\">Terms and Disclaimer Agreement</h1>
|
|
<form action=\"%%DISCLAIMER_ACT%%\" method=\"%%DISCLAIMER_METHOD%%\">
|
|
<input type=\"hidden\" name=\"%%REDIRID%%\" value=\"%%PROTURI%%\">
|
|
<input type=\"hidden\" name=\"%%MAGICID%%\" value=\"%%MAGICVAL%%\">
|
|
<input type=\"hidden\" name=\"%%ANSWERID%%\" value=\"%%DECLINEVAL%%\">
|
|
<p class=\"text-scrollable text-container\">You are about to access Internet content that is not under the control of the network access provider. The network access provider is therefore not responsible for any of these sites, their content or their privacy policies. The network access provider and its staff do not endorse nor make any representations about these sites, or any information, software or other products or materials found there, or any results that may be obtained from using them. If you decide to access any Internet content, you do this entirely at your own risk and you are responsible for ensuring that any accessed material does not infringe the laws governing, but not exhaustively covering, copyright, trademarks, pornography, or any other material which is slanderous, defamatory or might cause offence in any other way.</p>
|
|
<p><b>Do you agree to the above terms?</b></p>
|
|
<div class=\"form-footer\">
|
|
<button class=\"primary\" type=\"button\" onclick=\"sb(\'%%AGREEVAL%%\')\">Yes, I agree</button>
|
|
<button type=\"button\" onclick=\"sb(\'%%DECLINEVAL%%\')\">No, I decline</button>
|
|
</div>
|
|
</form>
|
|
<script>function sb(val) { document.forms[0].%%ANSWERID%%.value = val; document.forms[0].submit(); }</script>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-disclaimer-page-2"
|
|
set buffer ''
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-disclaimer-page-3"
|
|
set buffer ''
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-proxy-reject-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Disclaimer Declined</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Disclaimer Declined</h1>
|
|
<p>Sorry, network access cannot be granted unless you agree to the disclaimer.</p>
|
|
<div>
|
|
<a href=\"%%DISCLAIMER_ACT%%\">
|
|
<button class=\"primary\" >Return to Disclaimer</button>
|
|
</a>
|
|
</div>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-reject-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Disclaimer Declined</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Disclaimer Declined</h1>
|
|
<form action=\"/\" method=\"post\">
|
|
<input type=\"hidden\" name=\"%%REDIRID%%\" value=\"%%PROTURI%%\">
|
|
<input type=\"hidden\" name=\"%%MAGICID%%\" value=\"%%MAGICVAL%%\">
|
|
<p>Sorry, network access cannot be granted unless you agree to the disclaimer.</p>
|
|
<div>
|
|
<button class=\"primary\" type=\"submit\">Return to Disclaimer</button>
|
|
</div>
|
|
</form>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-login-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Authentication</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Authentication Required</h1>
|
|
<form action=\"%%AUTH_POST_URL%%\" method=\"post\">
|
|
<input type=\"hidden\" name=\"%%REDIRID%%\" value=\"%%PROTURI%%\">
|
|
<input type=\"hidden\" name=\"%%MAGICID%%\" value=\"%%MAGICVAL%%\">
|
|
<input type=\"hidden\" name=\"%%METHODID%%\" value=\"%%METHODVAL%%\">
|
|
<p>%%QUESTION%%</p>
|
|
<div class=\"field\">
|
|
<label for=\"ft_un\">Username</label>
|
|
<div>
|
|
<input name=\"%%USERNAMEID%%\" id=\"ft_un\" type=\"text\" autocorrect=\"off\" autocapitalize=\"off\">
|
|
</div>
|
|
</div>
|
|
<div class=\"field\">
|
|
<label for=\"ft_pd\">Password</label>
|
|
<div>
|
|
<input name=\"%%PASSWORDID%%\" id=\"ft_pd\" type=\"password\" autocomplete=\"off\">
|
|
</div>
|
|
</div>
|
|
<div class=\"form-footer\">
|
|
<button class=\"primary\" type=\"submit\">Continue</button>
|
|
</div>
|
|
</form>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-login-failed-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Authentication</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Authentication Failed</h1>
|
|
<form action=\"%%AUTH_POST_URL%%\" method=\"post\">
|
|
<input type=\"hidden\" name=\"%%REDIRID%%\" value=\"%%PROTURI%%\">
|
|
<input type=\"hidden\" name=\"%%MAGICID%%\" value=\"%%MAGICVAL%%\">
|
|
<input type=\"hidden\" name=\"%%METHODID%%\" value=\"%%METHODVAL%%\">
|
|
<p>%%FAILED_MESSAGE%%</p>
|
|
<div class=\"field\">
|
|
<label for=\"ft_un\">Username</label>
|
|
<div>
|
|
<input name=\"%%USERNAMEID%%\" id=\"ft_un\" type=\"text\" autocorrect=\"off\" autocapitalize=\"off\">
|
|
</div>
|
|
</div>
|
|
<div class=\"field\">
|
|
<label for=\"ft_pd\">Password</label>
|
|
<div>
|
|
<input name=\"%%PASSWORDID%%\" id=\"ft_pd\" type=\"password\" autocomplete=\"off\">
|
|
</div>
|
|
</div>
|
|
<div class=\"form-footer\">
|
|
<button class=\"primary\" type=\"submit\">Continue</button>
|
|
</div>
|
|
</form>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-token-login-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Authentication</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Authentication Required</h1>
|
|
<form action=\"%%AUTH_POST_URL%%\" method=\"post\">
|
|
<input type=\"hidden\" name=\"%%REDIRID%%\" value= \"%%PROTURI%%\"><input type=\"hidden\" name=\"%%MAGICID%%\" value=\"%%MAGICVAL%%\"><input type=\"hidden\" name=\"%%METHODID%%\" value=\"%%METHODVAL%%\">
|
|
<p>%%QUESTION%%</p>
|
|
<div class=\"field\">
|
|
<label for=\"un\">Username</label>
|
|
<div>
|
|
<input name=\"%%USERNAMEID%%\" id=\"un\" type=\"text\">
|
|
</div>
|
|
</div>
|
|
<div class=\"field\">
|
|
<label for=\"pd\">Password</label>
|
|
<div>
|
|
<input name=\"%%PASSWORDID%%\" id=\"pd\" type=\"password\" autocomplete=\"off\">
|
|
</div>
|
|
</div>
|
|
<div class=\"field\">
|
|
<label for=\"tk\">Token</label>
|
|
<div>
|
|
<input name=\"%%TOKENCODE%%\" id=\"tk\" type=\"text\">
|
|
</div>
|
|
</div>
|
|
<p>%%EXTRAINFO%%</p>
|
|
<div class=\"form-footer\">
|
|
<button class=\"primary\" type=\"submit\">Continue</button>
|
|
</div>
|
|
</form>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-token-login-failed-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Authentication</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Authentication Failed</h1>
|
|
<form action=\"%%AUTH_POST_URL%%\" method=\"post\">
|
|
<input type=\"hidden\" name=\"%%REDIRID%%\" value=\"%%PROTURI%%\">
|
|
<input type=\"hidden\" name=\"%%MAGICID%%\" value=\"%%MAGICVAL%%\">
|
|
<input type=\"hidden\" name=\"%%METHODID%%\" value=\"%%METHODVAL%%\">
|
|
<p>%%FAILED_MESSAGE%%</p>
|
|
<div class=\"field\">
|
|
<label for=\"un\">Username</label>
|
|
<div>
|
|
<input name=\"%%USERNAMEID%%\" id=\"un\" type=\"text\">
|
|
</div>
|
|
</div>
|
|
<div class=\"field\">
|
|
<label for=\"pd\">Password</label>
|
|
<div>
|
|
<input name=\"%%PASSWORDID%%\" id=\"pd\" type=\"password\" autocomplete=\"off\">
|
|
</div>
|
|
</div>
|
|
<div class=\"field\">
|
|
<label for=\"tk\">Token</label>
|
|
<div>
|
|
<input name=\"%%TOKENCODE%%\" id=\"tk\" type=\"text\">
|
|
</div>
|
|
</div>
|
|
<p>%%EXTRAINFO%%</p>
|
|
<div class=\"form-footer\">
|
|
<button class=\"primary\" type=\"submit\">Continue</button>
|
|
</div>
|
|
</form>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-success-msg"
|
|
set buffer "Welcome to Fortinet Firewall
|
|
Authentication is successful, please connect again."
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg auth "auth-challenge-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Authentication</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Authentication Required</h1>
|
|
<form action=\"/\" method=\"post\">
|
|
<input type=\"hidden\" name=\"%%USERNAMEID%%\" value=\"%%USERNAMEVAL%%\">
|
|
<input type=\"hidden\" name=\"%%REQUESTID%%\" value=\"%%REQUESTVAL%%\">
|
|
<input type=\"hidden\" name=\"%%USERGROUPID%%\" value=\"%%USERGROUPVAL%%\">
|
|
<input type=\"hidden\" name=\"%%REDIRID%%\" value=\"%%PROTURI%%\">
|
|
<input type=\"hidden\" name=\"%%MAGICID%%\" value=\"%%MAGICVAL%%\">
|
|
<p>%%QUESTION%%</p>
|
|
<div class=\"field single\">
|
|
<label for=\"ft_un\">Password</label>
|
|
<div>
|
|
<input name=\"%%PASSWORDID%%\" id=\"ft_pd\" type=\"password\" autocomplete=\"off\">
|
|
</div>
|
|
</div>
|
|
<div class=\"form-footer\">
|
|
<button class=\"primary\" type=\"submit\" id=\"ft_ci\">Continue</button>
|
|
</div>
|
|
</form>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-keepalive-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Authentication Keepalive Window</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Authentication Keepalive</h1>
|
|
<form action=\"/\" method=\"post\">
|
|
<p>This browser window is used to keep your authentication session active. Please leave it open in the background and open a <a href=\"%%AUTH_REDIR_URL%%\" target=\"_blank\">new window</a> to continue.</p>
|
|
<p>Authentication refresh in <b id=\"countdown\">%%TIMEOUT%%</b> seconds ...</p>
|
|
<p><a href=\"%%AUTH_LOGOUT%%\">logout</a></p>
|
|
<p>%%QUOTA_TABLE%%</p>
|
|
</form>
|
|
<script>
|
|
var countDownTime=%%TIMEOUT%% + 1;
|
|
function countDown(){
|
|
countDownTime--;
|
|
if (countDownTime <= 0){
|
|
location.href=\"%%KEEPALIVEURL%%\";
|
|
return;
|
|
}
|
|
document.getElementById(\'countdown\').innerHTML = countDownTime;
|
|
counter=setTimeout(\"countDown()\", 1000);
|
|
}
|
|
function startit(){
|
|
countDown();
|
|
}
|
|
window.onload=startit
|
|
</script>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-portal-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Authentication</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Firewall Authentication</h1>
|
|
<p><b>Firewall authentication was successful.</b></p>
|
|
<p>You can access the network as per your protection profile.</p>
|
|
<p><a href=\"%%AUTH_REDIR_URL%%\" target=\"_blank\">open a new window</a></p>
|
|
<p><a href=\"%%AUTH_LOGIN%%\">login with another user</a></p>
|
|
<p><a href=\"%%AUTH_LOGOUT%%\">logout</a></p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-password-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Authentication</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Password Expired</h1>
|
|
<form action=\"/\" method=\"post\" onsubmit=\'return form_check();\'>
|
|
<input name=\"%%USERNAMEID%%\" type=\"hidden\" value=\"%%USERNAMEVAL%%\" />
|
|
<input name=\"%%REQUESTID%%\" type=\"hidden\" value=\"%%REQUESTVAL%%\" />
|
|
<input name=\"%%USERGROUPID%%\" type=\"hidden\" value=\"%%USERGROUPVAL%%\" />
|
|
<input name=\"%%REDIRID%%\" type=\"hidden\" value=\"%%PROTURI%%\" />
|
|
<input name=\"%%MAGICID%%\" type=\"hidden\" value=\"%%MAGICVAL%%\" />
|
|
<p>Please set a new one.</p>
|
|
<div class=\"field\">
|
|
<label for=\"ft_pd\">New password</label>
|
|
<div>
|
|
<input name=\"%%PASSWORDID%%\" id=\"ft_pd\" type=\"password\" autocomplete=\"off\" onkeydown=\"keydownhandler(event)\">
|
|
</div>
|
|
</div>
|
|
<div class=\"field\">
|
|
<label for=\"ft_pd_re\">Re-enter</label>
|
|
<div>
|
|
<input name=\"password2\" id=\"ft_pd_re\" type=\"password\" autocomplete=\"off\" onkeydown=\"keydownhandler(event)\">
|
|
</div>
|
|
</div>
|
|
<div class=\"form-footer\">
|
|
<button class=\"primary\" id=\"continue\" type=\"submit\">Continue</button>
|
|
<button type=\"button\" id=\"skip\" onclick=\"form.%%PASSWORDID%%.value=\'\'; form.password2.value=\'\'; form.submit();\">Skip</button>
|
|
</div>
|
|
</form>
|
|
<script>var expire_days = %%EXPIREDAYS%%;if (expire_days < 0) { document.write(\"Your password has expired.\"); }else if (expire_days == 0) { document.write(\"Your password is expiring.\"); }else if (expire_days == 1) { document.write(\"Your password will expire in 1 day.\"); }else { document.write(\"Your password will expire in %%EXPIREDAYS%% days.\"); }</script>
|
|
<script>document.forms[0].skip.focus(); function keydownhandler(event){if (event.keyCode == 13) document.forms[0].continue.focus();} function form_check(){ var form=document.forms[0]; if (form.%%PASSWORDID%%.value != form.password2.value) { alert(\'The entered passwords do not match\'); return false; } return true;}</script>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-fortitoken-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Authentication</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>FortiToken Code Required</h1>
|
|
<form action=\"%%AUTH_POST_URL%%\" method=\"post\">
|
|
<input type=\"hidden\" name=\"%%REQUESTID%%\" value=\"%%REQUESTVAL%%\">
|
|
<input type=\"hidden\" name=\"%%REDIRID%%\" value=\"%%PROTURI%%\">
|
|
<input type=\"hidden\" name=\"%%MAGICID%%\" value=\"%%MAGICVAL%%\">
|
|
<input type=\"hidden\" name=\"%%METHODID%%\" value=\"%%METHODVAL%%\">
|
|
<input type=\"hidden\" disabled=\"disabled\" name=\"%%FTM_PUSH%%\" value=\"%%FTM_PUSH_VAL%%\">
|
|
<p>%%QUESTION%%</p>
|
|
<div class=\"field single\">
|
|
<label for=\"ft_un\">Token Code</label>
|
|
<div>
|
|
<input name=\"%%TOKENCODE%%\" id=\"ft_tc\" required>
|
|
</div>
|
|
</div>
|
|
<p>%%EXTRAINFO%%</p>
|
|
<div class=\"form-footer\">
|
|
<button class=\"primary\" type=\"submit\" id=\"ft_ci\">Continue</button>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
<script>
|
|
var ftmPushStatusTimeout = null;
|
|
var ftmPushInput = document.querySelector(\'input[name=\"%%FTM_PUSH%%\"]\');
|
|
if (ftmPushInput && ftmPushInput.value) {
|
|
setTimeout(function() {
|
|
startFtmPushPoll();
|
|
}, 2000)
|
|
}
|
|
function getFtmPushStatus() {
|
|
var xhr = new XMLHttpRequest();
|
|
xhr.open(\"POST\", \'/\', true);
|
|
xhr.setRequestHeader(\'Content-Type\', \'application/x-www-form-urlencoded\');
|
|
var encodedData = [];
|
|
var fields = [\'%%REQUESTID%%\', \'%%REDIRID%%\', \'%%MAGICID%%\'];
|
|
fields.forEach(function(field) {
|
|
var requestIdInput = document.querySelector(\'input[name=\"\' + field + \'\"]\');
|
|
if (requestIdInput && requestIdInput.value) {
|
|
encodedData.push(encodeURIComponent(field) + \'=\' + encodeURIComponent(requestIdInput.value));
|
|
}
|
|
});
|
|
encodedData.push(\'%%IS_AJAX%%=1\');
|
|
encodedData.push(\'%%TOKENCODE%%=\');
|
|
xhr.onreadystatechange = function() {
|
|
if (xhr.readyState === 4) {
|
|
try {
|
|
if (xhr.response && xhr.response.charAt(0) === \'%%AJAX_STATUS_REDIRECT%%\') {
|
|
document.location = xhr.response.substring(1);
|
|
}
|
|
} catch (e) {}
|
|
}
|
|
};
|
|
xhr.send(encodedData.join(\'&\').replace(/%20/g, \'+\'));
|
|
}
|
|
function startFtmPushPoll() {
|
|
cancelFtmPushPoll();
|
|
getFtmPushStatus();
|
|
ftmPushStatusTimeout = setTimeout(function() {
|
|
startFtmPushPoll();
|
|
}, 2000);
|
|
}
|
|
function cancelFtmPushPoll() {
|
|
clearTimeout(ftmPushStatusTimeout);
|
|
}
|
|
</script></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-next-fortitoken-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Authentication</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>FortiToken Code Required</h1>
|
|
<form action=\"%%AUTH_POST_URL%%\" method=\"post\">
|
|
<input type=\"hidden\" name=\"%%REQUESTID%%\" value=\"%%REQUESTVAL%%\">
|
|
<input type=\"hidden\" name=\"%%REDIRID%%\" value=\"%%PROTURI%%\">
|
|
<input type=\"hidden\" name=\"%%MAGICID%%\" value=\"%%MAGICVAL%%\">
|
|
<input type=\"hidden\" name=\"%%METHODID%%\" value=\"%%METHODVAL%%\">
|
|
<p>%%QUESTION%%</p>
|
|
<div class=\"field single\">
|
|
<label for=\"ft_un\">Next Code</label>
|
|
<div>
|
|
<input name=\"%%TOKENCODE%%\" id=\"ft_tc\">
|
|
</div>
|
|
</div>
|
|
<p>%%EXTRAINFO%%</p>
|
|
<div class=\"form-footer\">
|
|
<button class=\"primary\" type=\"submit\">Continue</button>
|
|
</div>
|
|
</form>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-email-token-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Authentication</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Email Token Code Required</h1>
|
|
<form action=\"%%AUTH_POST_URL%%\" method=\"post\">
|
|
<input type=\"hidden\" name=\"%%REQUESTID%%\" value=\"%%REQUESTVAL%%\">
|
|
<input type=\"hidden\" name=\"%%REDIRID%%\" value=\"%%PROTURI%%\">
|
|
<input type=\"hidden\" name=\"%%MAGICID%%\" value=\"%%MAGICVAL%%\">
|
|
<input type=\"hidden\" name=\"%%METHODID%%\" value=\"%%METHODVAL%%\">
|
|
<p>%%QUESTION%%</p>
|
|
<div class=\"field single\">
|
|
<label for=\"ft_un\">Token Code</label>
|
|
<div>
|
|
<input name=\"%%TOKENCODE%%\" id=\"ft_tc\">
|
|
</div>
|
|
</div>
|
|
<div class=\"form-footer\">
|
|
<button class=\"primary\" type=\"submit\" id=\"ft_ci\">Continue</button>
|
|
</div>
|
|
</form>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-sms-token-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Authentication</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>SMS Token Code Required</h1>
|
|
<form action=\"%%AUTH_POST_URL%%\" method=\"post\">
|
|
<input type=\"hidden\" name=\"%%REQUESTID%%\" value=\"%%REQUESTVAL%%\">
|
|
<input type=\"hidden\" name=\"%%REDIRID%%\" value=\"%%PROTURI%%\">
|
|
<input type=\"hidden\" name=\"%%MAGICID%%\" value=\"%%MAGICVAL%%\">
|
|
<input type=\"hidden\" name=\"%%METHODID%%\" value=\"%%METHODVAL%%\">
|
|
<p>%%QUESTION%%</p>
|
|
<div class=\"field single\">
|
|
<label for=\"ft_un\">Token Code</label>
|
|
<div>
|
|
<input name=\"%%TOKENCODE%%\" id=\"ft_tc\">
|
|
</div>
|
|
</div>
|
|
<p>%%EXTRAINFO%%</p>
|
|
<div class=\"form-footer\">
|
|
<button class=\"primary\" type=\"submit\" id=\"ft_ci\">Continue</button>
|
|
</div>
|
|
</form>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-email-harvesting-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Authentication</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1 class=\"text-centered\">Terms and Disclaimer Agreement</h1>
|
|
<form action=\"%%HEMAIL_ACTION%%\" method=\"%%HEMAIL_METHOD%%\">
|
|
<input type=\"hidden\" name=\"%%REDIRID%%\" value=\"%%PROTURI%%\">
|
|
<input type=\"hidden\" name=\"%%MAGICID%%\" value=\"%%MAGICVAL%%\">
|
|
<p class=\"text-scrollable text-container\">You are about to access Internet content that is not under the control of the network access provider. The network access provider is therefore not responsible for any of these sites, their content or their privacy policies. The network access provider and its staff do not endorse nor make any representations about these sites, or any information, software or other products or materials found there, or any results that may be obtained from using them. If you decide to access any Internet content, you do this entirely at your own risk and you are responsible for ensuring that any accessed material does not infringe the laws governing, but not exhaustively covering, copyright, trademarks, pornography, or any other material which is slanderous, defamatory or might cause offence in any other way.</p>
|
|
<div class=\"text-container\">
|
|
<input type=\"checkbox\" name=\"agree\" id=\"ft_ad\" required=\"required\" onclick=\"document.getElementById(\'ft_un\').disabled = !this.checked;\">
|
|
<label for=\"ft_ad\">
|
|
I accept the Terms and Disclaimer Agreement
|
|
</label>
|
|
</div>
|
|
<div class=\"flex-container text-container column\">
|
|
<p><b>Please enter your Email address to continue.</b></p>
|
|
<div class=\"field single\">
|
|
<label for=\"ft_un\">Email</label>
|
|
<div>
|
|
<input name=\"%%USERNAMEID%%\" id=\"ft_un\" type=\"email\" autocorrect=\"off\" autocapitalize=\"off\" disabled>
|
|
</div>
|
|
</div>
|
|
<div class=\"form-footer\">
|
|
<button class=\"primary\" type=\"submit\" id=\"ft_ci\">Continue</button>
|
|
</div>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
<script>var def_msg = \"Please enter your Email address to continue.\"; var cb = get(\"ft_ad\"); var un = get(\"ft_un\"); var ci = get(\"ft_ci\"); var note = get(\"note\"); var adl = get(\"ft_adl\");if (cb && un && note && adl) { cb.onclick = cb_click; cb_click.apply(cb, [def_msg]); }function get(x) { return document.getElementById(x); }function tc(elm, cn, tg) { if (!elm) return; if (tg) elm.className += \" \" + cn; else elm.className = elm.className.replace(cn,\'\'); }function cb_click(msg) { var en = !this.checked; un.disabled = en; ci.disabled = en; tc(adl, \"hl\", en); tc(note, \"hl\", !en); if(typeof msg === \"string\") { note.innerHTML = msg; } else { note.innerHTML = def_msg; } }</script></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-email-failed-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Authentication</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1 class=\"text-centered\">Terms and Disclaimer Agreement</h1>
|
|
<form action=\"%%HEMAIL_ACTION%%\" method=\"%%HEMAIL_METHOD%%\">
|
|
<input type=\"hidden\" name=\"%%REDIRID%%\" value=\"%%PROTURI%%\">
|
|
<input type=\"hidden\" name=\"%%MAGICID%%\" value=\"%%MAGICVAL%%\">
|
|
<p class=\"text-scrollable text-container\">You are about to access Internet content that is not under the control of the network access provider. The network access provider is therefore not responsible for any of these sites, their content or their privacy policies. The network access provider and its staff do not endorse nor make any representations about these sites, or any information, software or other products or materials found there, or any results that may be obtained from using them. If you decide to access any Internet content, you do this entirely at your own risk and you are responsible for ensuring that any accessed material does not infringe the laws governing, but not exhaustively covering, copyright, trademarks, pornography, or any other material which is slanderous, defamatory or might cause offence in any other way.</p>
|
|
<div class=\"text-container\">
|
|
<input type=\"checkbox\" name=\"agree\" id=\"ft_ad\" required=\"required\" onclick=\"document.getElementById(\'ft_un\').disabled = !this.checked;\">
|
|
<label for=\"ft_ad\">
|
|
I accept the Terms and Disclaimer Agreement
|
|
</label>
|
|
</div>
|
|
<div class=\"flex-container text-container column\">
|
|
<p><b>Please enter your Email address to continue.</b></p>
|
|
<div class=\"field single\">
|
|
<label for=\"ft_un\">Email</label>
|
|
<div>
|
|
<input name=\"%%USERNAMEID%%\" id=\"ft_un\" type=\"email\" autocorrect=\"off\" autocapitalize=\"off\" disabled>
|
|
</div>
|
|
</div>
|
|
<div class=\"form-footer\">
|
|
<button class=\"primary\" type=\"submit\" id=\"ft_ci\">Continue</button>
|
|
</div>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
<script>var def_msg = \"Invalid Email address, please enter again to continue\";var cb = get(\"ft_ad\"); var un = get(\"ft_un\"); var ci = get(\"ft_ci\"); var note = get(\"note\"); var adl = get(\"ft_adl\");if (cb && un && note && adl) { cb.onclick = cb_click; cb_click.apply(cb, [def_msg]); }function get(x) { return document.getElementById(x); }function tc(elm, cn, tg) { if (!elm) return; if (tg) elm.className += \" \" + cn; else elm.className = elm.className.replace(cn,\'\'); }function cb_click(msg) { var en = !this.checked; un.disabled = en; ci.disabled = en; tc(adl, \"hl\", en); tc(note, \"hl\", !en); if(typeof msg === \"string\") { note.innerHTML = msg; } else { note.innerHTML = def_msg; } }</script></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-cert-passwd-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Authentication</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Certificate Password Required</h1>
|
|
<form action=\"%%AUTH_POST_URL%%\" method=\"post\">
|
|
<input type=\"hidden\" name=\"%%REDIRID%%\" value=\"%%PROTURI%%\">
|
|
<input type=\"hidden\" name=\"%%MAGICID%%\" value=\"%%MAGICVAL%%\">
|
|
<p>%%QUESTION%%</p>
|
|
<div class=\"field\">
|
|
<label for=\"ft_un\">Username</label>
|
|
<div>
|
|
<input name=\"%%USERNAMEID%%\" value=\"%%USERNAMEVAL%%\" id=\"ft_un\" type=\"text\" readonly=\"readonly\" autocorrect=\"off\" autocapitalize=\"off\">
|
|
</div>
|
|
</div>
|
|
<div class=\"field\">
|
|
<label for=\"ft_pd\">Password</label>
|
|
<div>
|
|
<input name=\"%%PASSWORDID%%\" id=\"ft_pd\" type=\"password\" autocomplete=\"off\">
|
|
</div>
|
|
</div>
|
|
<div class=\"form-footer\">
|
|
<button class=\"primary\" type=\"submit\">Continue</button>
|
|
</div>
|
|
</form>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-guest-print-page"
|
|
set buffer "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\" \"http://www.w3.org/TR/html4/loose.dtd\"><html><head><meta http-equiv=Content-Type content=\"text/html; charset=UTF-8\"><meta http-equiv=Pragma content=no-cache><title>Guest Access Credentials</title><style type=\"text/css\">body.printable{background-color: white;margin: 0 20px 0 20px;} div.first_section:not(:first-child){page-break-before: always;} div.user_section{padding: 15px;border-bottom: 1px dotted #666;font-family: Verdana, Arial, Sans-Serif;font-size: 10pt;} div.user_header{font-size: 14pt;font-weight: bold;height: 2em;} div.user_disc{font-size: 8pt;margin-bottom: 0.5in;} ul.user_details{list-style-type: none;} li.user_info_field{font-family: monospace;page-break-before: avoid;} label.user_info_label{font-weight: bold;float: left;width: 10em;font-family: Verdana, Arial, Sans-Serif;}</style></head><body class=\"printable\">%%FOR(USERS:USER_SECTIONS)%%<div class=\"user_section first_section\">%%FOR(PRINT_CREDENTIALS:USERS)%%<div class=\"user_header\">Network Guest Access Credentials</div>%%PRINT_CREDENTIALS%%<div class=\"user_disc\">The above account may be used to access Internet content that is not under the control of the network access provider. The network access provider is therefore not responsible for any of these sites, their content or their privacy policies. The network access provider and its staff do not endorse nor make any representations about these sites, or any information, software or other products or materials found there, or any results that may be obtained from using them. If you decide to access any Internet content, you do this entirely at your own risk and you are responsible for ensuring that any accessed material does not infringe the laws governing, but not exhaustively covering, copyright, trademarks, pornography, or any other material which is slanderous, defamatory or might cause offence in any other way.</div>%%ENDFOR%%</div>%%ENDFOR%%</body><script type=\"text/javascript\">window.print();</script></html>"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-guest-email-page"
|
|
set buffer "User ID=%%USERID%%
|
|
Password=%%PASSWORD%%
|
|
Expires=%%EXPIRE%%
|
|
User Name=%%USERNAME%%
|
|
Mobile Phone=%%MOBILEPHONE%%
|
|
Sponsor=%%SPONSOR%%
|
|
Company=%%COMPANY%%
|
|
Email=%%EMAIL%%"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-success-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Authentication</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Firewall Authentication</h1>
|
|
<p>If JavaScript is not enabled, please <a href=\"%%AUTH_REDIR_URL%%\">click here</a> to continue.</p>
|
|
<script>window.location=\"%%AUTH_REDIR_URL%%\";</script>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-block-notification-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Notification</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Firewall Notification</h1>
|
|
<p>Your access has been blocked by firewall policy %%POLICY_ID%%.<br>If you have any questions or concerns, please contact your network administrator for more information.</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-quarantine-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Quarantine Notification</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Quarantine Notification</h1>
|
|
<form action=\"%%DISCLAIMER_ACT%%\" method=\"%%DISCLAIMER_METHOD%%\">
|
|
<input type=\"hidden\" name=\"%%REDIRID%%\" value=\"%%PROTURI%%\">
|
|
<input type=\"hidden\" name=\"%%MAGICID%%\" value=\"%%MAGICVAL%%\">
|
|
<input type=\"hidden\" name=\"%%ANSWERID%%\" value=\"%%DECLINEVAL%%\">
|
|
<p>Your network access has been restricted due to the detection of potentially malicious traffic. Please contact your network administrator for further information.</p>
|
|
<p><b>Acknowledge your quarantine for limited network access.</b></p>
|
|
<div class=\"form-footer\">
|
|
<button class=\"primary\" type=\"submit\" onclick=\"sb(\'%%AGREEVAL%%\')\">Accept</button>
|
|
<button type=\"button\" onclick=\"sb(\'%%DECLINEVAL%%\')\">Decline</button>
|
|
</div>
|
|
</form>
|
|
<script>function sb(val) { document.forms[0].%%ANSWERID%%.value = val; document.forms[0].submit(); }</script>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-qtn-reject-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Quarantine Declined</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Quarantine Terms Not Acknowledged</h1>
|
|
<form action=\"/\" method=\"post\">
|
|
<input type=\"hidden\" name=\"%%REDIRID%%\" value=\"%%PROTURI%%\">
|
|
<input type=\"hidden\" name=\"%%MAGICID%%\" value=\"%%MAGICVAL%%\">
|
|
<p>By failing to acknowledge the Terms of Quarantine, your access may be more severely restricted.</p>
|
|
<div>
|
|
<button class=\"primary\" type=\"submit\">Return to Quarantine Terms</button>
|
|
</div>
|
|
</form>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg auth "auth-saml-page"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Firewall Authentication</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Authentication Required</h1>
|
|
<form action=\"%%AUTH_POST_URL%%\" method=\"post\">
|
|
<input type=\"hidden\" name=\"%%REDIRID%%\" value=\"%%PROTURI%%\">
|
|
<input type=\"hidden\" name=\"%%MAGICID%%\" value=\"%%MAGICVAL%%\">
|
|
<input type=\"hidden\" name=\"%%METHODID%%\" value=\"%%METHODVAL%%\">
|
|
<p>%%QUESTION%%</p>
|
|
<div class=\"field\">
|
|
<label for=\"ft_un\">Username</label>
|
|
<div>
|
|
<input name=\"%%USERNAMEID%%\" id=\"ft_un\" type=\"text\" autocorrect=\"off\" autocapitalize=\"off\">
|
|
</div>
|
|
</div>
|
|
<div class=\"field\">
|
|
<label for=\"ft_pd\">Password</label>
|
|
<div>
|
|
<input name=\"%%PASSWORDID%%\" id=\"ft_pd\" type=\"password\" autocomplete=\"off\">
|
|
</div>
|
|
</div>
|
|
<div class=\"form-footer\">
|
|
<button class=\"primary\" type=\"submit\">Continue</button>
|
|
<div>Or log in using <a href=\"%%AUTH_SAML%%\">SAML Identity Provider</a></div>
|
|
</div>
|
|
</form>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg sslvpn "sslvpn-login"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\" class=\"main-app\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<meta name=\"apple-itunes-app\" content=\"app-id=1475674905\">
|
|
<link href=\"/styles.css\" rel=\"stylesheet\" type=\"text/css\">
|
|
<link href=\"/css/legacy-main.css\" rel=\"stylesheet\" type=\"text/css\">
|
|
<title>Please Login</title>
|
|
</head>
|
|
<body>
|
|
<div class=\"view-container\">
|
|
<form class=\"prompt legacy-prompt\" action=\"%%SSL_ACT%%\" method=\"%%SSL_METHOD%%\" name=\"f\" autocomplete=\"off\">
|
|
<div class=\"content with-header\">
|
|
<div class=\"header\">
|
|
<f-icon class=\"ftnt-fortinet-grid icon-xl\"></f-icon>
|
|
<div id=\"login-login\">Please Login</div>
|
|
</div>
|
|
<div class=\"sub-content\">
|
|
<div class=\"wide-inputs\">
|
|
%%SSL_LOGIN%%
|
|
</div>
|
|
<div class=\"button-actions wide\">
|
|
<button class=\"primary\" type=\"button\" name=\"login_button\" id=\"login_button\" onClick=\"try_login()\">
|
|
Login
|
|
</button>
|
|
<button type=\"button\" name=\"skip_button\" id=\"skip_button\" onClick=\"try_skip()\" style=\"display:none\">
|
|
Skip
|
|
</button>
|
|
<button id=\"launch-forticlient-button\" type=\"button\" onClick=\"launchFortiClient()\">
|
|
<f-icon class=\"ftnt-forticlient\"></f-icon>
|
|
<span>Launch FortiClient</span>
|
|
</button>
|
|
<iframe id=\"launch-forticlient-iframe\" style=\"display:none\"></iframe>
|
|
<button id=\"saml-login-bn\" class=\"primary\" type=\"button\" name=\"saml_login_bn\" onClick=\"launchSamlLogin()\" style=\"display:none\">
|
|
SSO Login
|
|
</button>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
</body>
|
|
%%SSL_HIDDEN%%
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg sslvpn "sslvpn-header"
|
|
set buffer "<div class=\"fortinet-grid-icon\">
|
|
<f-icon class=\"ftnt-fortinet-grid icon-xl\"></f-icon>
|
|
</div>
|
|
<div class=\"platform\">
|
|
%%SSL_STATUS_INFO%%
|
|
</div>
|
|
|
|
<div class=\"expand\">
|
|
%%SSL_RESPONSIVE_EXPAND%%
|
|
</div>
|
|
|
|
%%SSL_OPTIONS%%
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg sslvpn "sslvpn-limit"
|
|
set buffer "<html><head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\"><title>Already Logged In</title><meta http-equiv=\"Pragma\" content=\"no-cache\"><meta http-equiv=\"cache-control\" content=\"no-cache\"><meta http-equiv=\"cache-control\" content=\"must-revalidate\"><link href=\"/sslvpn/css/login.css\" rel=\"stylesheet\" type=\"text/css\"><script type=\"text/javascript\">if (top && top.location != window.location) top.location = top.location;if (window.opener && window.opener.top) { window.opener.top.location = window.opener.top.location; self.close(); }</script></head><body class=\"main\"><center><table class=\"container\" height=\"100%\" cellspacing=\"0\" cellpadding=\"0\" align=\"center\" width=\"100%\" valign=\"middle\"><tbody><tr valign=\"middle\"><td><table class=\"list\" height=\"180\" cellspacing=\"0\" cellpadding=\"10\" align=\"center\" width=\"400\"><tbody><tr class=\"dark\"><td colspan=\"2\"> <b>Already Logged In</b></td></tr><tr><td colspan=\"2\"><p>You already have an open SSL VPN connection. Opening multiple connections is not permitted.</p><p>If you proceed, your other connection will be disconnected.</p><p>If you have any questions or concerns, please contact your administrator for more information.</p></td></tr><tr><td style=\"text-align:center\">%%SSL_LOGIN_ANYWAY%%</td><td style=\"text-align:center\">%%SSL_LOGIN_CANCEL%%</td></tr></tbody></table></td></tr></tbody></table></center></body></html>"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg sslvpn "hostcheck-error"
|
|
set buffer "Your PC does not meet the host checking requirements set by the firewall. Please try again in a few minutes. If the issue persists check that your OS version meets the minimum requirements, that your antivirus and firewall applications are installed and running properly, and that you have the correct network interface."
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg sslvpn "sslvpn-provision-user"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>FortiClient SSL-VPN Setup Instructions</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<section>
|
|
<p>
|
|
<div>How to set up the SSL-VPN connection on <b>%%FTCL_VPN_NAME%%</b></div>
|
|
</p>
|
|
<ol>
|
|
<li>
|
|
<b>Download and install FortiClient VPN</b>
|
|
<div>FortiClient securely connects your computer or mobile device to your network</div>
|
|
<a href=\"https://www.fortinet.com/support/product-downloads#vpn7\">
|
|
<button>
|
|
Download
|
|
</button>
|
|
</a>
|
|
</li>
|
|
<li>
|
|
<b>Configure the connection</b>
|
|
<div>FortiClient VPN can configure your connection automatically.</div>
|
|
<div>Click on <a href=\"%%FTCL_VPN_CONFIG_URL%%\">this link</a> (%%FTCL_VPN_CONFIG_URL%%), or scan the QR code below from the FortiClient VPN app.</div>
|
|
<div>
|
|
<img src=\"%%QR_CODE_DATA_URI%%\">
|
|
</div>
|
|
</li>
|
|
</ol>
|
|
<p>
|
|
Contact your network administrator if you require assistance.
|
|
</p>
|
|
</section>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg sslvpn "sslvpn-provision-user-sms"
|
|
set buffer "To set up the FortiClient VPN connection \"%%FTCL_VPN_NAME%%\", install the FortiClient application and click the following link: %%FTCL_VPN_CONFIG_URL%%."
|
|
set header none
|
|
set format text
|
|
end
|
|
config system replacemsg nac-quar "nac-quar-virus"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Virus Quarantine</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Blocked because of virus</h1>
|
|
<p>Your computer has been blocked because of a virus detected in your system. For more information, contact the system administrator.</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg nac-quar "nac-quar-dos"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Attack Detected</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Blocked because of DoS Attack</h1>
|
|
<p>Your computer has been blocked because a DoS attack originating from your system was detected. For more information, contact the system administrator.</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg nac-quar "nac-quar-ips"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Attack Detected</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Blocked because of an intrusion attack</h1>
|
|
<p>Your computer has been blocked because an intrusion attack originating from your system was detected. For more information, contact the system administrator.</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg nac-quar "nac-quar-dlp"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Data Leak Detected</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Blocked because of data leak</h1>
|
|
<p>Your computer has been blocked because of a data leak originating from your system. For more information, contact the system administrator.</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg nac-quar "nac-quar-admin"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Administrative Quarantine</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Blocked because of admin action</h1>
|
|
<p>Your system administrator has blocked your computer or device. For more information, contact the system administrator.</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg nac-quar "nac-quar-app"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Application Control</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Blocked because of application</h1>
|
|
<p>Your computer has been blocked because of an application detected in your system. For more information, contact the system administrator.</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg traffic-quota "per-ip-shaper-block"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Traffic Quota Control</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Traffic blocked because of exceeded session quota</h1>
|
|
<p>Traffic has been blocked because the per IP shaper session quota has been exceeded. Please contact the system administrator.</p>
|
|
<p>Quota: %%QUOTA_INFO%%</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg utm "virus-html"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>High Security Alert</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>High Security Alert</h1>
|
|
<p>You are not permitted to download the file \"%%FILE%%\" because it is infected with the virus \"%%VIRUS%%\".</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Quarantined File Name</td>
|
|
<td>%%QUARFILENAME%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Reference URL</td>
|
|
<td>%%VIRUS_REF_URL%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg utm "client-virus-html"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>High Security Alert</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>High Security Alert</h1>
|
|
<p>You are not permitted to transfer the file \"%%FILE%%\" because it is infected with the virus \"%%VIRUS%%\".</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Quarantined File Name</td>
|
|
<td>%%QUARFILENAME%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Reference URL</td>
|
|
<td>%%VIRUS_REF_URL%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg utm "virus-text"
|
|
set buffer "Dangerous attachment removed. The file \"%%FILE%%\" was infected with the \"%%VIRUS%%\" virus. It has been removed and quarantined as: \"%%QUARFILENAME%%\".\"%%VIRUS_REF_URL%%\"."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "dlp-html"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Attention</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Attention</h1>
|
|
<p>The transfer attempt has been blocked because it appears to contain a data leak.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg utm "dlp-text"
|
|
set buffer "The transfer attempt has been blocked because it appears to contain a data leak."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "appblk-html"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Application Control Violation</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>FortiGate Application Control</h1>
|
|
<h3>Application Blocked</h3>
|
|
<p>You have attempted to use an application that violates your Internet usage policy.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>Application</td>
|
|
<td>%%APPNAME%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Category</td>
|
|
<td>%%APPCAT%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Policy</td>
|
|
<td>%%POLICY_UUID%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg utm "ipsblk-html"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Intrusion Prevention Violation</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>FortiGate Intrusion Prevention</h1>
|
|
<h3>Intrusion Prevention Triggered</h3>
|
|
<p>Your attempt to access the Internet resource is blocked by Intrusion Prevention.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Policy</td>
|
|
<td>%%POLICY_UUID%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg utm "ipsfail-html"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Intrusion Prevention Scanning Failure</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>FortiGate Intrusion Prevention</h1>
|
|
<h3>Intrusion Prevention Scanning Failure</h3>
|
|
<p>Your attempt to access the Internet resource is blocked because of an Intrusion Prevention scanning failure.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Policy</td>
|
|
<td>%%POLICY_UUID%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg utm "exe-text"
|
|
set buffer "Dangerous attachment removed. The file \"%%FILE%%\" has been removed because it is a Windows executable.
|
|
Quarantined File Name: \"%%QUARFILENAME%%\"."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "waf-html"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Web Application Firewall</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Web Application Firewall</h1>
|
|
<p>This transfer is blocked by a Web Application Firewall.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td colspan=\"2\">This transfer is blocked.</td>
|
|
</tr>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Event ID</td>
|
|
<td>%%WAF_SIG_ID%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Event Type</td>
|
|
<td>%%WAF_DESC%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg utm "outbreak-prevention-html"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>High Security Alert</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>High Security Alert</h1>
|
|
<p>You are not permitted to transfer the file \"%%FILE%%\" because its signature \"%%VIRUS%%\" has been identified by the Virus Outbreak Prevention service.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Quarantined File Name</td>
|
|
<td>%%QUARFILENAME%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg utm "outbreak-prevention-text"
|
|
set buffer "Dangerous attachment removed. The file \"%%FILE%%\" has been removed because its signature \"%%VIRUS%%\" has been identified by the Virus Outbreak Prevention service. Quarantined File Name: \"%%QUARFILENAME%%\"."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "external-blocklist-html"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>High Security Alert</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>High Security Alert</h1>
|
|
<p>You are not permitted to transfer the file \"%%FILE%%\" because its signature \"%%VIRUS%%\" has been identified by an external blocklist.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Quarantined File Name</td>
|
|
<td>%%QUARFILENAME%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg utm "external-blocklist-text"
|
|
set buffer "Dangerous attachment removed. The file \"%%FILE%%\" has been removed because its signature \"%%VIRUS%%\" has been identified by an external blocklist. Quarantined File Name: \"%%QUARFILENAME%%\"."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "ems-threat-feed-html"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>High Security Alert</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>High Security Alert</h1>
|
|
<p>You are not permitted to transfer the file \"%%FILE%%\" because its signature \"%%VIRUS%%\" has been identified by the EMS Threat Feed.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Quarantined File Name</td>
|
|
<td>%%QUARFILENAME%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg utm "ems-threat-feed-text"
|
|
set buffer "Dangerous attachment removed. The file \"%%FILE%%\" has been removed because its signature \"%%VIRUS%%\" has been identified by the EMS Threat Feed. Quarantined File Name: \"%%QUARFILENAME%%\"."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "file-filter-html"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Attention</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Attention</h1>
|
|
<p>The file \"%%FILE%%\" has been blocked due to its file type and/or properties.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg utm "file-filter-text"
|
|
set buffer "The file \"%%FILE%%\" has been blocked due to its file type and/or properties."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "file-size-text"
|
|
set buffer "The file \"%%FILE%%\" has been blocked because it exceeded the configured file size limit."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "transfer-size-text"
|
|
set buffer "The transfer has been blocked because it exceeded the configured size limit."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "internal-error-text"
|
|
set buffer "The file \"%%FILE%%\" has been blocked because of an internal error."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "archive-block-html"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Attention</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Attention</h1>
|
|
<p>The transfer contained an archive that has been blocked.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg utm "archive-block-text"
|
|
set buffer "Transfer failed. Archive \"%%FILE%%\" has been blocked."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "file-av-fail-text"
|
|
set buffer "Transfer of file \"%%FILE%%\" failed due to an internal error."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "transfer-av-fail-text"
|
|
set buffer "Transfer failed due to an internal error."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "banned-word-html"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Attention</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Attention</h1>
|
|
<p>The page has been blocked because it contains a banned word.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
<p>%%OVERRIDE%%</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg utm "banned-word-text"
|
|
set buffer "This message has been blocked because it contains a banned word."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "block-html"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Attention</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Attention</h1>
|
|
<p>File blocked</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Quarantined File Name</td>
|
|
<td>%%QUARFILENAME%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg utm "block-text"
|
|
set buffer "Potentially dangerous file removed. The file \"%%FILE%%\" has been blocked. File quarantined as: \"%%QUARFILENAME%%\"."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "decompress-limit-text"
|
|
set buffer "The file \"%%FILE%%\" has been blocked because its decompressed size is over the configured limit."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "dlp-subject-text"
|
|
set buffer "Data leak detected! Subject: %%SUBJECT%%"
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "file-size-html"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Attention</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Attention</h1>
|
|
<p>The file \"%%FILE%%\" has been blocked. The file is larger than the configured file size limit.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg utm "client-file-size-html"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Attention</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Attention</h1>
|
|
<p>The transfer has been blocked because it is larger than the configured size limit.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg utm "inline-scan-timeout-html"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Scan Incomplete</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Scan Incomplete</h1>
|
|
<p>The file \"%%FILE%%\" is still being scanned and will be released once complete. Please try the transfer again in a few minutes.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg utm "inline-scan-timeout-text"
|
|
set buffer "The file \"%%FILE%%\" is still being scanned and will be released once complete. Please try the transfer again in a few minutes."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "inline-scan-error-html"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Scan Unavailable</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Scan Unavailable</h1>
|
|
<p>The file \"%%FILE%%\" has been blocked due to an inline-scan error.</p>
|
|
<table><tbody>
|
|
<tr>
|
|
<td>URL</td>
|
|
<td>%%PROTOCOL%%://%%URL%%</td>
|
|
</tr>
|
|
</tbody></table>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg utm "inline-scan-error-text"
|
|
set buffer "The file \"%%FILE%%\" has been blocked due to an inline-scan error."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "icap-block-text"
|
|
set buffer "The file \"%%FILE%%\" has been blocked by ICAP service."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "icap-error-text"
|
|
set buffer "The file \"%%FILE%%\" has been blocked due to ICAP error."
|
|
set header 8bit
|
|
set format text
|
|
end
|
|
config system replacemsg utm "icap-http-error"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>ICAP Error</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>ICAP Error</h1>
|
|
<p>An ICAP error was encountered while handling the request.</p>
|
|
<p>%%ICAP_ERR_DESC%%</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg icap "icap-req-resp"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<style type=\"text/css\">
|
|
body {
|
|
height: 100%;
|
|
font-family: Helvetica, Arial, sans-serif;
|
|
color: #6a6a6a;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
|
|
color: #262626;
|
|
vertical-align: baseline;
|
|
margin: .2em;
|
|
border-style: solid;
|
|
border-width: 1px;
|
|
border-color: #a9a9a9;
|
|
background-color: #fff;
|
|
box-sizing: border-box;
|
|
padding: 2px .5em;
|
|
appearance: none;
|
|
border-radius: 0;
|
|
}
|
|
input:focus {
|
|
border-color: #646464;
|
|
box-shadow: 0 0 1px 0 #a2a2a2;
|
|
outline: 0;
|
|
}
|
|
button {
|
|
padding: .5em 1em;
|
|
border: 1px solid;
|
|
border-radius: 3px;
|
|
min-width: 6em;
|
|
font-weight: 400;
|
|
font-size: .8em;
|
|
cursor: pointer;
|
|
}
|
|
button.primary {
|
|
color: #fff;
|
|
background-color: rgb(47, 113, 178);
|
|
border-color: rgb(34, 103, 173);
|
|
}
|
|
.message-container {
|
|
height: 500px;
|
|
width: 600px;
|
|
padding: 0;
|
|
margin: 10px;
|
|
}
|
|
.logo {
|
|
background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
|
|
height: 267px;
|
|
object-fit: contain;
|
|
}
|
|
table {
|
|
background-color: #fff;
|
|
border-spacing: 0;
|
|
margin: 1em;
|
|
}
|
|
table > tbody > tr > td:first-of-type:not([colspan]) {
|
|
white-space: nowrap;
|
|
color: rgba(0,0,0,.5);
|
|
}
|
|
table > tbody > tr > td:first-of-type {
|
|
vertical-align: top;
|
|
}
|
|
table > tbody > tr > td {
|
|
padding: .3em .3em;
|
|
}
|
|
.field {
|
|
display: table-row;
|
|
}
|
|
.field > :first-child {
|
|
display: table-cell;
|
|
width: 20%;
|
|
}
|
|
.field.single > :first-child {
|
|
display: inline;
|
|
}
|
|
.field > :not(:first-child) {
|
|
width: auto;
|
|
max-width: 100%;
|
|
display: inline-flex;
|
|
align-items: baseline;
|
|
virtical-align: top;
|
|
box-sizing: border-box;
|
|
margin: .3em;
|
|
}
|
|
.field > :not(:first-child) > input {
|
|
width: 230px;
|
|
}
|
|
.form-footer {
|
|
display: inline-flex;
|
|
justify-content: flex-start;
|
|
}
|
|
.form-footer > * {
|
|
margin: 1em;
|
|
}
|
|
.text-scrollable {
|
|
overflow: auto;
|
|
height: 150px;
|
|
border: 1px solid rgb(200, 200, 200);
|
|
padding: 5px;
|
|
font-size: 1em;
|
|
}
|
|
.text-centered {
|
|
text-align: center;
|
|
}
|
|
.text-container {
|
|
margin: 1em 1.5em;
|
|
}
|
|
.flex-container {
|
|
display: flex;
|
|
}
|
|
.flex-container.column {
|
|
flex-direction: column;
|
|
}
|
|
</style>
|
|
<title>Attention</title>
|
|
</head>
|
|
<body><div class=\"message-container\">
|
|
<div class=\"logo\"></div>
|
|
<h1>Attention</h1>
|
|
<p>HTTP POST action is not allowed for policy reasons.</p>
|
|
</div></body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg automation "automation-email"
|
|
set buffer "<!DOCTYPE html>
|
|
<html lang=\"en\">
|
|
<head>
|
|
<meta charset=\"UTF-8\">
|
|
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
|
|
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
|
|
<link href=\"https://fonts.googleapis.com/css?family=Roboto&display=swap\" rel=\"stylesheet\">
|
|
<style>
|
|
body {
|
|
height: 100%;
|
|
font-family: Roboto, Helvetica, Arial, sans-serif;
|
|
margin: 0;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
.message-container{
|
|
margin: 0 auto;
|
|
max-width: 580px;
|
|
}
|
|
.email-body {
|
|
line-height: 1.5em;
|
|
}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<div class=\"message-container\">
|
|
<img src=\"https://filestore.fortinet.com/fortiguard/logo_v3_fguard_app.png\" alt=\"Fortinet Logo\"/>
|
|
<h1>Security Fabric Automation</h1>
|
|
<h3>%%AUTOMATION_FGT_SERIAL%%: %%AUTOMATION_STITCH_NAME%%</h3>
|
|
<div class=\"email-body\">
|
|
%%AUTOMATION_EMAIL_BODY%%
|
|
</div>
|
|
</div>
|
|
</body>
|
|
</html>
|
|
"
|
|
set header http
|
|
set format html
|
|
end
|
|
config system replacemsg-group
|
|
end
|
|
config system snmp sysinfo
|
|
set status enable
|
|
set engine-id-type text
|
|
set engine-id ''
|
|
set description "FaaS-1500D"
|
|
set contact-info "cloud.operation@brilliant.com.bd"
|
|
set location "Dhaka"
|
|
set trap-high-cpu-threshold 80
|
|
set trap-low-memory-threshold 80
|
|
set trap-log-full-threshold 90
|
|
set append-index disable
|
|
end
|
|
config system snmp mib-view
|
|
end
|
|
config system snmp community
|
|
edit 1
|
|
set name "intercLoud"
|
|
set status enable
|
|
config hosts
|
|
edit 1
|
|
set source-ip 0.0.0.0
|
|
set ip 103.248.12.33 255.255.255.255
|
|
set ha-direct disable
|
|
set host-type any
|
|
next
|
|
edit 2
|
|
set source-ip 0.0.0.0
|
|
set ip 103.248.12.39 255.255.255.255
|
|
set ha-direct disable
|
|
set host-type any
|
|
next
|
|
edit 3
|
|
set source-ip 0.0.0.0
|
|
set ip 192.168.101.46 255.255.255.255
|
|
set ha-direct disable
|
|
set host-type any
|
|
next
|
|
edit 4
|
|
set source-ip 0.0.0.0
|
|
set ip 118.67.215.46 255.255.255.255
|
|
set ha-direct disable
|
|
set host-type any
|
|
next
|
|
end
|
|
config hosts6
|
|
edit 1
|
|
set source-ipv6 ::
|
|
set ipv6 ::/0
|
|
set ha-direct disable
|
|
set host-type any
|
|
next
|
|
end
|
|
set query-v1-status disable
|
|
set query-v1-port 161
|
|
set query-v2c-status enable
|
|
set query-v2c-port 161
|
|
set trap-v1-status disable
|
|
set trap-v1-lport 162
|
|
set trap-v1-rport 162
|
|
set trap-v2c-status enable
|
|
set trap-v2c-lport 162
|
|
set trap-v2c-rport 162
|
|
set events cpu-high mem-low log-full intf-ip vpn-tun-up vpn-tun-down ha-switch ha-hb-failure ips-signature ips-anomaly av-virus av-oversize av-pattern av-fragmented fm-if-change bgp-established bgp-backward-transition ha-member-up ha-member-down ent-conf-change av-conserve av-bypass av-oversize-passed av-oversize-blocked ips-pkg-update ips-fail-open temperature-high voltage-alert power-supply-failure faz-disconnect fan-failure wc-ap-up wc-ap-down fswctl-session-up fswctl-session-down load-balance-real-server-down per-cpu-high dhcp pool-usage ospf-nbr-state-change ospf-virtnbr-state-change
|
|
set mib-view ''
|
|
next
|
|
edit 2
|
|
set name "cL0uD"
|
|
set status enable
|
|
config hosts
|
|
edit 1
|
|
set source-ip 0.0.0.0
|
|
set ip 103.209.42.39 255.255.255.255
|
|
set ha-direct disable
|
|
set host-type any
|
|
next
|
|
end
|
|
config hosts6
|
|
edit 1
|
|
set source-ipv6 ::
|
|
set ipv6 ::/0
|
|
set ha-direct disable
|
|
set host-type any
|
|
next
|
|
end
|
|
set query-v1-status enable
|
|
set query-v1-port 161
|
|
set query-v2c-status enable
|
|
set query-v2c-port 161
|
|
set trap-v1-status enable
|
|
set trap-v1-lport 162
|
|
set trap-v1-rport 162
|
|
set trap-v2c-status enable
|
|
set trap-v2c-lport 162
|
|
set trap-v2c-rport 162
|
|
set events cpu-high mem-low log-full intf-ip vpn-tun-up vpn-tun-down ha-switch ha-hb-failure ips-signature ips-anomaly av-virus av-oversize av-pattern av-fragmented fm-if-change bgp-established bgp-backward-transition ha-member-up ha-member-down ent-conf-change av-conserve av-bypass av-oversize-passed av-oversize-blocked ips-pkg-update ips-fail-open temperature-high voltage-alert power-supply-failure faz-disconnect fan-failure wc-ap-up wc-ap-down fswctl-session-up fswctl-session-down load-balance-real-server-down per-cpu-high dhcp pool-usage ospf-nbr-state-change ospf-virtnbr-state-change
|
|
set mib-view ''
|
|
next
|
|
end
|
|
config system snmp user
|
|
end
|
|
config system autoupdate schedule
|
|
set status enable
|
|
set frequency every
|
|
set time 01:60
|
|
end
|
|
config system autoupdate tunneling
|
|
set status disable
|
|
set address ''
|
|
set port 0
|
|
set username ''
|
|
set password ENC 9C8yjWiUvDJ566OGjwQdHtA+47SUL1L4YbpBKuLdwkDHLIPU/O1Qb4wFZ2Zicl9pIKFqi5Nt4Rz9JMF67a31fDucDkcyfyOI+2PVNLfg2hBywbSmNa8R/XKGNks8q4mp0vAtXxWJq3NBljkH9hF+hV/vxMhAWD/o1wum+IR2e8nVQ8aCmAHdzRyeL2ExLq12tqAshg==
|
|
end
|
|
config system alias
|
|
end
|
|
config system auto-script
|
|
end
|
|
config system central-management
|
|
set mode normal
|
|
set type fortiguard
|
|
set schedule-config-restore enable
|
|
set schedule-script-restore enable
|
|
set allow-push-configuration enable
|
|
set allow-push-firmware enable
|
|
set allow-remote-firmware-upgrade enable
|
|
set allow-monitor enable
|
|
set local-cert ''
|
|
set vdom "root"
|
|
set fmg-update-port 8890
|
|
set enc-algorithm high
|
|
end
|
|
config system sdn-connector
|
|
end
|
|
config firewall wildcard-fqdn custom
|
|
edit "g-cdn-apple"
|
|
set uuid b56aac36-d1e4-51ef-eff4-b8a920746d4f
|
|
set wildcard-fqdn "*.cdn-apple.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-mzstatic-apple"
|
|
set uuid b56aad4e-d1e4-51ef-7eca-79d68c7b28d8
|
|
set wildcard-fqdn "*.mzstatic.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-adobe"
|
|
set uuid 45a1361a-5626-51eb-6736-aa8a00428ef9
|
|
set wildcard-fqdn "*.adobe.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-Adobe Login"
|
|
set uuid 45a1370a-5626-51eb-48d2-02f82ddf8bb4
|
|
set wildcard-fqdn "*.adobelogin.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-android"
|
|
set uuid 45a137dc-5626-51eb-cf37-a4b5e8b1cee0
|
|
set wildcard-fqdn "*.android.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-apple"
|
|
set uuid 45a138a4-5626-51eb-9605-a30d9276dc87
|
|
set wildcard-fqdn "*.apple.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-appstore"
|
|
set uuid 45a1396c-5626-51eb-a324-5453959153d7
|
|
set wildcard-fqdn "*.appstore.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-auth.gfx.ms"
|
|
set uuid 45a13a52-5626-51eb-fd10-4326504354ff
|
|
set wildcard-fqdn "*.auth.gfx.ms"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-citrix"
|
|
set uuid 45a13b1a-5626-51eb-6ab8-28a0f6b48412
|
|
set wildcard-fqdn "*.citrixonline.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-dropbox.com"
|
|
set uuid 45a13bec-5626-51eb-7584-7bd101c811cf
|
|
set wildcard-fqdn "*.dropbox.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-eease"
|
|
set uuid 45a13cb4-5626-51eb-953a-f9abede8bf24
|
|
set wildcard-fqdn "*.eease.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-firefox update server"
|
|
set uuid 45a13d86-5626-51eb-448c-d907ac122bf1
|
|
set wildcard-fqdn "aus*.mozilla.org"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-fortinet"
|
|
set uuid 45a13e4e-5626-51eb-0fd5-bf5be8c7ba63
|
|
set wildcard-fqdn "*.fortinet.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-googleapis.com"
|
|
set uuid 45a13f34-5626-51eb-3659-1ea74e2ed87a
|
|
set wildcard-fqdn "*.googleapis.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-google-drive"
|
|
set uuid 45a14006-5626-51eb-3060-78f71fe5e882
|
|
set wildcard-fqdn "*drive.google.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-google-play2"
|
|
set uuid 45a140d8-5626-51eb-91dc-4c06db505e61
|
|
set wildcard-fqdn "*.ggpht.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-google-play3"
|
|
set uuid 45a141aa-5626-51eb-1c05-445beb99a892
|
|
set wildcard-fqdn "*.books.google.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-Gotomeeting"
|
|
set uuid 45a14286-5626-51eb-a3ba-d0d8dacc1a38
|
|
set wildcard-fqdn "*.gotomeeting.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-icloud"
|
|
set uuid 45a144de-5626-51eb-db4c-4f034a7bd727
|
|
set wildcard-fqdn "*.icloud.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-itunes"
|
|
set uuid 45a145d8-5626-51eb-6c3e-f5b30ff1682b
|
|
set wildcard-fqdn "*itunes.apple.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-microsoft"
|
|
set uuid 45a146be-5626-51eb-d120-df8cf68e1e8e
|
|
set wildcard-fqdn "*.microsoft.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-skype"
|
|
set uuid 45a14790-5626-51eb-d759-0b0d0cba8267
|
|
set wildcard-fqdn "*.messenger.live.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-softwareupdate.vmware.com"
|
|
set uuid 45a14862-5626-51eb-d564-48386edea9f7
|
|
set wildcard-fqdn "*.softwareupdate.vmware.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-verisign"
|
|
set uuid 45a1493e-5626-51eb-b831-9457577c78c2
|
|
set wildcard-fqdn "*.verisign.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-Windows update 2"
|
|
set uuid 45a14a10-5626-51eb-b443-017c85c812aa
|
|
set wildcard-fqdn "*.windowsupdate.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-live.com"
|
|
set uuid 45a14ae2-5626-51eb-f528-341943507dd9
|
|
set wildcard-fqdn "*.live.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-google-play"
|
|
set uuid 45a14bb4-5626-51eb-dfae-8e0e0083e420
|
|
set wildcard-fqdn "*play.google.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-update.microsoft.com"
|
|
set uuid 45a14c90-5626-51eb-cf31-6d26a1ee4593
|
|
set wildcard-fqdn "*update.microsoft.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-swscan.apple.com"
|
|
set uuid 45a14d8a-5626-51eb-723e-8c6e26b98fb0
|
|
set wildcard-fqdn "*swscan.apple.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-autoupdate.opera.com"
|
|
set uuid 45a14e5c-5626-51eb-f8ac-5ee802453388
|
|
set wildcard-fqdn "*autoupdate.opera.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
end
|
|
config firewall internet-service-name
|
|
edit "Google-Other"
|
|
set type default
|
|
set internet-service-id 65536
|
|
next
|
|
edit "Google-Web"
|
|
set type default
|
|
set internet-service-id 65537
|
|
next
|
|
edit "Google-ICMP"
|
|
set type default
|
|
set internet-service-id 65538
|
|
next
|
|
edit "Google-DNS"
|
|
set type default
|
|
set internet-service-id 65539
|
|
next
|
|
edit "Google-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 65540
|
|
next
|
|
edit "Google-SSH"
|
|
set type default
|
|
set internet-service-id 65542
|
|
next
|
|
edit "Google-FTP"
|
|
set type default
|
|
set internet-service-id 65543
|
|
next
|
|
edit "Google-NTP"
|
|
set type default
|
|
set internet-service-id 65544
|
|
next
|
|
edit "Google-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 65545
|
|
next
|
|
edit "Google-LDAP"
|
|
set type default
|
|
set internet-service-id 65550
|
|
next
|
|
edit "Google-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 65551
|
|
next
|
|
edit "Google-RTMP"
|
|
set type default
|
|
set internet-service-id 65552
|
|
next
|
|
edit "Google-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 65560
|
|
next
|
|
edit "Google-Google.Cloud"
|
|
set type default
|
|
set internet-service-id 65641
|
|
next
|
|
edit "Google-Google.Bot"
|
|
set type default
|
|
set internet-service-id 65643
|
|
next
|
|
edit "Google-Gmail"
|
|
set type default
|
|
set internet-service-id 65646
|
|
next
|
|
edit "Meta-Other"
|
|
set type default
|
|
set internet-service-id 131072
|
|
next
|
|
edit "Meta-Web"
|
|
set type default
|
|
set internet-service-id 131073
|
|
next
|
|
edit "Meta-ICMP"
|
|
set type default
|
|
set internet-service-id 131074
|
|
next
|
|
edit "Meta-DNS"
|
|
set type default
|
|
set internet-service-id 131075
|
|
next
|
|
edit "Meta-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 131076
|
|
next
|
|
edit "Meta-SSH"
|
|
set type default
|
|
set internet-service-id 131078
|
|
next
|
|
edit "Meta-FTP"
|
|
set type default
|
|
set internet-service-id 131079
|
|
next
|
|
edit "Meta-NTP"
|
|
set type default
|
|
set internet-service-id 131080
|
|
next
|
|
edit "Meta-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 131081
|
|
next
|
|
edit "Meta-LDAP"
|
|
set type default
|
|
set internet-service-id 131086
|
|
next
|
|
edit "Meta-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 131087
|
|
next
|
|
edit "Meta-RTMP"
|
|
set type default
|
|
set internet-service-id 131088
|
|
next
|
|
edit "Meta-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 131096
|
|
next
|
|
edit "Meta-Whatsapp"
|
|
set type default
|
|
set internet-service-id 131184
|
|
next
|
|
edit "Meta-Instagram"
|
|
set type default
|
|
set internet-service-id 131189
|
|
next
|
|
edit "Apple-Other"
|
|
set type default
|
|
set internet-service-id 196608
|
|
next
|
|
edit "Apple-Web"
|
|
set type default
|
|
set internet-service-id 196609
|
|
next
|
|
edit "Apple-ICMP"
|
|
set type default
|
|
set internet-service-id 196610
|
|
next
|
|
edit "Apple-DNS"
|
|
set type default
|
|
set internet-service-id 196611
|
|
next
|
|
edit "Apple-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 196612
|
|
next
|
|
edit "Apple-SSH"
|
|
set type default
|
|
set internet-service-id 196614
|
|
next
|
|
edit "Apple-FTP"
|
|
set type default
|
|
set internet-service-id 196615
|
|
next
|
|
edit "Apple-NTP"
|
|
set type default
|
|
set internet-service-id 196616
|
|
next
|
|
edit "Apple-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 196617
|
|
next
|
|
edit "Apple-LDAP"
|
|
set type default
|
|
set internet-service-id 196622
|
|
next
|
|
edit "Apple-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 196623
|
|
next
|
|
edit "Apple-RTMP"
|
|
set type default
|
|
set internet-service-id 196624
|
|
next
|
|
edit "Apple-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 196632
|
|
next
|
|
edit "Apple-App.Store"
|
|
set type default
|
|
set internet-service-id 196723
|
|
next
|
|
edit "Yahoo-Other"
|
|
set type default
|
|
set internet-service-id 262144
|
|
next
|
|
edit "Yahoo-Web"
|
|
set type default
|
|
set internet-service-id 262145
|
|
next
|
|
edit "Yahoo-ICMP"
|
|
set type default
|
|
set internet-service-id 262146
|
|
next
|
|
edit "Yahoo-DNS"
|
|
set type default
|
|
set internet-service-id 262147
|
|
next
|
|
edit "Yahoo-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 262148
|
|
next
|
|
edit "Yahoo-SSH"
|
|
set type default
|
|
set internet-service-id 262150
|
|
next
|
|
edit "Yahoo-FTP"
|
|
set type default
|
|
set internet-service-id 262151
|
|
next
|
|
edit "Yahoo-NTP"
|
|
set type default
|
|
set internet-service-id 262152
|
|
next
|
|
edit "Yahoo-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 262153
|
|
next
|
|
edit "Yahoo-LDAP"
|
|
set type default
|
|
set internet-service-id 262158
|
|
next
|
|
edit "Yahoo-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 262159
|
|
next
|
|
edit "Yahoo-RTMP"
|
|
set type default
|
|
set internet-service-id 262160
|
|
next
|
|
edit "Yahoo-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 262168
|
|
next
|
|
edit "Microsoft-Other"
|
|
set type default
|
|
set internet-service-id 327680
|
|
next
|
|
edit "Microsoft-Web"
|
|
set type default
|
|
set internet-service-id 327681
|
|
next
|
|
edit "Microsoft-ICMP"
|
|
set type default
|
|
set internet-service-id 327682
|
|
next
|
|
edit "Microsoft-DNS"
|
|
set type default
|
|
set internet-service-id 327683
|
|
next
|
|
edit "Microsoft-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 327684
|
|
next
|
|
edit "Microsoft-SSH"
|
|
set type default
|
|
set internet-service-id 327686
|
|
next
|
|
edit "Microsoft-FTP"
|
|
set type default
|
|
set internet-service-id 327687
|
|
next
|
|
edit "Microsoft-NTP"
|
|
set type default
|
|
set internet-service-id 327688
|
|
next
|
|
edit "Microsoft-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 327689
|
|
next
|
|
edit "Microsoft-LDAP"
|
|
set type default
|
|
set internet-service-id 327694
|
|
next
|
|
edit "Microsoft-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 327695
|
|
next
|
|
edit "Microsoft-RTMP"
|
|
set type default
|
|
set internet-service-id 327696
|
|
next
|
|
edit "Microsoft-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 327704
|
|
next
|
|
edit "Microsoft-Skype_Teams"
|
|
set type default
|
|
set internet-service-id 327781
|
|
next
|
|
edit "Microsoft-Office365"
|
|
set type default
|
|
set internet-service-id 327782
|
|
next
|
|
edit "Microsoft-Azure"
|
|
set type default
|
|
set internet-service-id 327786
|
|
next
|
|
edit "Microsoft-Bing.Bot"
|
|
set type default
|
|
set internet-service-id 327788
|
|
next
|
|
edit "Microsoft-Outlook"
|
|
set type default
|
|
set internet-service-id 327791
|
|
next
|
|
edit "Microsoft-Microsoft.Update"
|
|
set type default
|
|
set internet-service-id 327793
|
|
next
|
|
edit "Microsoft-Office365.Published"
|
|
set type default
|
|
set internet-service-id 327880
|
|
next
|
|
edit "Amazon-Other"
|
|
set type default
|
|
set internet-service-id 393216
|
|
next
|
|
edit "Amazon-Web"
|
|
set type default
|
|
set internet-service-id 393217
|
|
next
|
|
edit "Amazon-ICMP"
|
|
set type default
|
|
set internet-service-id 393218
|
|
next
|
|
edit "Amazon-DNS"
|
|
set type default
|
|
set internet-service-id 393219
|
|
next
|
|
edit "Amazon-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 393220
|
|
next
|
|
edit "Amazon-SSH"
|
|
set type default
|
|
set internet-service-id 393222
|
|
next
|
|
edit "Amazon-FTP"
|
|
set type default
|
|
set internet-service-id 393223
|
|
next
|
|
edit "Amazon-NTP"
|
|
set type default
|
|
set internet-service-id 393224
|
|
next
|
|
edit "Amazon-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 393225
|
|
next
|
|
edit "Amazon-LDAP"
|
|
set type default
|
|
set internet-service-id 393230
|
|
next
|
|
edit "Amazon-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 393231
|
|
next
|
|
edit "Amazon-RTMP"
|
|
set type default
|
|
set internet-service-id 393232
|
|
next
|
|
edit "Amazon-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 393240
|
|
next
|
|
edit "Amazon-AWS"
|
|
set type default
|
|
set internet-service-id 393320
|
|
next
|
|
edit "eBay-Other"
|
|
set type default
|
|
set internet-service-id 458752
|
|
next
|
|
edit "eBay-Web"
|
|
set type default
|
|
set internet-service-id 458753
|
|
next
|
|
edit "eBay-ICMP"
|
|
set type default
|
|
set internet-service-id 458754
|
|
next
|
|
edit "eBay-DNS"
|
|
set type default
|
|
set internet-service-id 458755
|
|
next
|
|
edit "eBay-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 458756
|
|
next
|
|
edit "eBay-SSH"
|
|
set type default
|
|
set internet-service-id 458758
|
|
next
|
|
edit "eBay-FTP"
|
|
set type default
|
|
set internet-service-id 458759
|
|
next
|
|
edit "eBay-NTP"
|
|
set type default
|
|
set internet-service-id 458760
|
|
next
|
|
edit "eBay-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 458761
|
|
next
|
|
edit "eBay-LDAP"
|
|
set type default
|
|
set internet-service-id 458766
|
|
next
|
|
edit "eBay-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 458767
|
|
next
|
|
edit "eBay-RTMP"
|
|
set type default
|
|
set internet-service-id 458768
|
|
next
|
|
edit "eBay-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 458776
|
|
next
|
|
edit "PayPal-Other"
|
|
set type default
|
|
set internet-service-id 524288
|
|
next
|
|
edit "PayPal-Web"
|
|
set type default
|
|
set internet-service-id 524289
|
|
next
|
|
edit "PayPal-ICMP"
|
|
set type default
|
|
set internet-service-id 524290
|
|
next
|
|
edit "PayPal-DNS"
|
|
set type default
|
|
set internet-service-id 524291
|
|
next
|
|
edit "PayPal-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 524292
|
|
next
|
|
edit "PayPal-SSH"
|
|
set type default
|
|
set internet-service-id 524294
|
|
next
|
|
edit "PayPal-FTP"
|
|
set type default
|
|
set internet-service-id 524295
|
|
next
|
|
edit "PayPal-NTP"
|
|
set type default
|
|
set internet-service-id 524296
|
|
next
|
|
edit "PayPal-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 524297
|
|
next
|
|
edit "PayPal-LDAP"
|
|
set type default
|
|
set internet-service-id 524302
|
|
next
|
|
edit "PayPal-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 524303
|
|
next
|
|
edit "PayPal-RTMP"
|
|
set type default
|
|
set internet-service-id 524304
|
|
next
|
|
edit "PayPal-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 524312
|
|
next
|
|
edit "Box-Other"
|
|
set type default
|
|
set internet-service-id 589824
|
|
next
|
|
edit "Box-Web"
|
|
set type default
|
|
set internet-service-id 589825
|
|
next
|
|
edit "Box-ICMP"
|
|
set type default
|
|
set internet-service-id 589826
|
|
next
|
|
edit "Box-DNS"
|
|
set type default
|
|
set internet-service-id 589827
|
|
next
|
|
edit "Box-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 589828
|
|
next
|
|
edit "Box-SSH"
|
|
set type default
|
|
set internet-service-id 589830
|
|
next
|
|
edit "Box-FTP"
|
|
set type default
|
|
set internet-service-id 589831
|
|
next
|
|
edit "Box-NTP"
|
|
set type default
|
|
set internet-service-id 589832
|
|
next
|
|
edit "Box-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 589833
|
|
next
|
|
edit "Box-LDAP"
|
|
set type default
|
|
set internet-service-id 589838
|
|
next
|
|
edit "Box-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 589839
|
|
next
|
|
edit "Box-RTMP"
|
|
set type default
|
|
set internet-service-id 589840
|
|
next
|
|
edit "Box-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 589848
|
|
next
|
|
edit "Salesforce-Other"
|
|
set type default
|
|
set internet-service-id 655360
|
|
next
|
|
edit "Salesforce-Web"
|
|
set type default
|
|
set internet-service-id 655361
|
|
next
|
|
edit "Salesforce-ICMP"
|
|
set type default
|
|
set internet-service-id 655362
|
|
next
|
|
edit "Salesforce-DNS"
|
|
set type default
|
|
set internet-service-id 655363
|
|
next
|
|
edit "Salesforce-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 655364
|
|
next
|
|
edit "Salesforce-SSH"
|
|
set type default
|
|
set internet-service-id 655366
|
|
next
|
|
edit "Salesforce-FTP"
|
|
set type default
|
|
set internet-service-id 655367
|
|
next
|
|
edit "Salesforce-NTP"
|
|
set type default
|
|
set internet-service-id 655368
|
|
next
|
|
edit "Salesforce-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 655369
|
|
next
|
|
edit "Salesforce-LDAP"
|
|
set type default
|
|
set internet-service-id 655374
|
|
next
|
|
edit "Salesforce-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 655375
|
|
next
|
|
edit "Salesforce-RTMP"
|
|
set type default
|
|
set internet-service-id 655376
|
|
next
|
|
edit "Salesforce-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 655384
|
|
next
|
|
edit "Dropbox-Other"
|
|
set type default
|
|
set internet-service-id 720896
|
|
next
|
|
edit "Dropbox-Web"
|
|
set type default
|
|
set internet-service-id 720897
|
|
next
|
|
edit "Dropbox-ICMP"
|
|
set type default
|
|
set internet-service-id 720898
|
|
next
|
|
edit "Dropbox-DNS"
|
|
set type default
|
|
set internet-service-id 720899
|
|
next
|
|
edit "Dropbox-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 720900
|
|
next
|
|
edit "Dropbox-SSH"
|
|
set type default
|
|
set internet-service-id 720902
|
|
next
|
|
edit "Dropbox-FTP"
|
|
set type default
|
|
set internet-service-id 720903
|
|
next
|
|
edit "Dropbox-NTP"
|
|
set type default
|
|
set internet-service-id 720904
|
|
next
|
|
edit "Dropbox-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 720905
|
|
next
|
|
edit "Dropbox-LDAP"
|
|
set type default
|
|
set internet-service-id 720910
|
|
next
|
|
edit "Dropbox-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 720911
|
|
next
|
|
edit "Dropbox-RTMP"
|
|
set type default
|
|
set internet-service-id 720912
|
|
next
|
|
edit "Dropbox-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 720920
|
|
next
|
|
edit "Netflix-Other"
|
|
set type default
|
|
set internet-service-id 786432
|
|
next
|
|
edit "Netflix-Web"
|
|
set type default
|
|
set internet-service-id 786433
|
|
next
|
|
edit "Netflix-ICMP"
|
|
set type default
|
|
set internet-service-id 786434
|
|
next
|
|
edit "Netflix-DNS"
|
|
set type default
|
|
set internet-service-id 786435
|
|
next
|
|
edit "Netflix-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 786436
|
|
next
|
|
edit "Netflix-SSH"
|
|
set type default
|
|
set internet-service-id 786438
|
|
next
|
|
edit "Netflix-FTP"
|
|
set type default
|
|
set internet-service-id 786439
|
|
next
|
|
edit "Netflix-NTP"
|
|
set type default
|
|
set internet-service-id 786440
|
|
next
|
|
edit "Netflix-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 786441
|
|
next
|
|
edit "Netflix-LDAP"
|
|
set type default
|
|
set internet-service-id 786446
|
|
next
|
|
edit "Netflix-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 786447
|
|
next
|
|
edit "Netflix-RTMP"
|
|
set type default
|
|
set internet-service-id 786448
|
|
next
|
|
edit "Netflix-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 786456
|
|
next
|
|
edit "LinkedIn-Other"
|
|
set type default
|
|
set internet-service-id 851968
|
|
next
|
|
edit "LinkedIn-Web"
|
|
set type default
|
|
set internet-service-id 851969
|
|
next
|
|
edit "LinkedIn-ICMP"
|
|
set type default
|
|
set internet-service-id 851970
|
|
next
|
|
edit "LinkedIn-DNS"
|
|
set type default
|
|
set internet-service-id 851971
|
|
next
|
|
edit "LinkedIn-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 851972
|
|
next
|
|
edit "LinkedIn-SSH"
|
|
set type default
|
|
set internet-service-id 851974
|
|
next
|
|
edit "LinkedIn-FTP"
|
|
set type default
|
|
set internet-service-id 851975
|
|
next
|
|
edit "LinkedIn-NTP"
|
|
set type default
|
|
set internet-service-id 851976
|
|
next
|
|
edit "LinkedIn-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 851977
|
|
next
|
|
edit "LinkedIn-LDAP"
|
|
set type default
|
|
set internet-service-id 851982
|
|
next
|
|
edit "LinkedIn-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 851983
|
|
next
|
|
edit "LinkedIn-RTMP"
|
|
set type default
|
|
set internet-service-id 851984
|
|
next
|
|
edit "LinkedIn-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 851992
|
|
next
|
|
edit "Adobe-Other"
|
|
set type default
|
|
set internet-service-id 917504
|
|
next
|
|
edit "Adobe-Web"
|
|
set type default
|
|
set internet-service-id 917505
|
|
next
|
|
edit "Adobe-ICMP"
|
|
set type default
|
|
set internet-service-id 917506
|
|
next
|
|
edit "Adobe-DNS"
|
|
set type default
|
|
set internet-service-id 917507
|
|
next
|
|
edit "Adobe-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 917508
|
|
next
|
|
edit "Adobe-SSH"
|
|
set type default
|
|
set internet-service-id 917510
|
|
next
|
|
edit "Adobe-FTP"
|
|
set type default
|
|
set internet-service-id 917511
|
|
next
|
|
edit "Adobe-NTP"
|
|
set type default
|
|
set internet-service-id 917512
|
|
next
|
|
edit "Adobe-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 917513
|
|
next
|
|
edit "Adobe-LDAP"
|
|
set type default
|
|
set internet-service-id 917518
|
|
next
|
|
edit "Adobe-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 917519
|
|
next
|
|
edit "Adobe-RTMP"
|
|
set type default
|
|
set internet-service-id 917520
|
|
next
|
|
edit "Adobe-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 917528
|
|
next
|
|
edit "Oracle-Other"
|
|
set type default
|
|
set internet-service-id 983040
|
|
next
|
|
edit "Oracle-Web"
|
|
set type default
|
|
set internet-service-id 983041
|
|
next
|
|
edit "Oracle-ICMP"
|
|
set type default
|
|
set internet-service-id 983042
|
|
next
|
|
edit "Oracle-DNS"
|
|
set type default
|
|
set internet-service-id 983043
|
|
next
|
|
edit "Oracle-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 983044
|
|
next
|
|
edit "Oracle-SSH"
|
|
set type default
|
|
set internet-service-id 983046
|
|
next
|
|
edit "Oracle-FTP"
|
|
set type default
|
|
set internet-service-id 983047
|
|
next
|
|
edit "Oracle-NTP"
|
|
set type default
|
|
set internet-service-id 983048
|
|
next
|
|
edit "Oracle-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 983049
|
|
next
|
|
edit "Oracle-LDAP"
|
|
set type default
|
|
set internet-service-id 983054
|
|
next
|
|
edit "Oracle-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 983055
|
|
next
|
|
edit "Oracle-RTMP"
|
|
set type default
|
|
set internet-service-id 983056
|
|
next
|
|
edit "Oracle-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 983064
|
|
next
|
|
edit "Hulu-Other"
|
|
set type default
|
|
set internet-service-id 1048576
|
|
next
|
|
edit "Hulu-Web"
|
|
set type default
|
|
set internet-service-id 1048577
|
|
next
|
|
edit "Hulu-ICMP"
|
|
set type default
|
|
set internet-service-id 1048578
|
|
next
|
|
edit "Hulu-DNS"
|
|
set type default
|
|
set internet-service-id 1048579
|
|
next
|
|
edit "Hulu-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 1048580
|
|
next
|
|
edit "Hulu-SSH"
|
|
set type default
|
|
set internet-service-id 1048582
|
|
next
|
|
edit "Hulu-FTP"
|
|
set type default
|
|
set internet-service-id 1048583
|
|
next
|
|
edit "Hulu-NTP"
|
|
set type default
|
|
set internet-service-id 1048584
|
|
next
|
|
edit "Hulu-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 1048585
|
|
next
|
|
edit "Hulu-LDAP"
|
|
set type default
|
|
set internet-service-id 1048590
|
|
next
|
|
edit "Hulu-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 1048591
|
|
next
|
|
edit "Hulu-RTMP"
|
|
set type default
|
|
set internet-service-id 1048592
|
|
next
|
|
edit "Hulu-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 1048600
|
|
next
|
|
edit "Pinterest-Other"
|
|
set type default
|
|
set internet-service-id 1114112
|
|
next
|
|
edit "Pinterest-Web"
|
|
set type default
|
|
set internet-service-id 1114113
|
|
next
|
|
edit "Pinterest-ICMP"
|
|
set type default
|
|
set internet-service-id 1114114
|
|
next
|
|
edit "Pinterest-DNS"
|
|
set type default
|
|
set internet-service-id 1114115
|
|
next
|
|
edit "Pinterest-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 1114116
|
|
next
|
|
edit "Pinterest-SSH"
|
|
set type default
|
|
set internet-service-id 1114118
|
|
next
|
|
edit "Pinterest-FTP"
|
|
set type default
|
|
set internet-service-id 1114119
|
|
next
|
|
edit "Pinterest-NTP"
|
|
set type default
|
|
set internet-service-id 1114120
|
|
next
|
|
edit "Pinterest-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 1114121
|
|
next
|
|
edit "Pinterest-LDAP"
|
|
set type default
|
|
set internet-service-id 1114126
|
|
next
|
|
edit "Pinterest-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 1114127
|
|
next
|
|
edit "Pinterest-RTMP"
|
|
set type default
|
|
set internet-service-id 1114128
|
|
next
|
|
edit "Pinterest-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 1114136
|
|
next
|
|
edit "LogMeIn-Other"
|
|
set type default
|
|
set internet-service-id 1179648
|
|
next
|
|
edit "LogMeIn-Web"
|
|
set type default
|
|
set internet-service-id 1179649
|
|
next
|
|
edit "LogMeIn-ICMP"
|
|
set type default
|
|
set internet-service-id 1179650
|
|
next
|
|
edit "LogMeIn-DNS"
|
|
set type default
|
|
set internet-service-id 1179651
|
|
next
|
|
edit "LogMeIn-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 1179652
|
|
next
|
|
edit "LogMeIn-SSH"
|
|
set type default
|
|
set internet-service-id 1179654
|
|
next
|
|
edit "LogMeIn-FTP"
|
|
set type default
|
|
set internet-service-id 1179655
|
|
next
|
|
edit "LogMeIn-NTP"
|
|
set type default
|
|
set internet-service-id 1179656
|
|
next
|
|
edit "LogMeIn-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 1179657
|
|
next
|
|
edit "LogMeIn-LDAP"
|
|
set type default
|
|
set internet-service-id 1179662
|
|
next
|
|
edit "LogMeIn-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 1179663
|
|
next
|
|
edit "LogMeIn-RTMP"
|
|
set type default
|
|
set internet-service-id 1179664
|
|
next
|
|
edit "LogMeIn-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 1179672
|
|
next
|
|
edit "LogMeIn-GoTo.Suite"
|
|
set type default
|
|
set internet-service-id 1179767
|
|
next
|
|
edit "Fortinet-Other"
|
|
set type default
|
|
set internet-service-id 1245184
|
|
next
|
|
edit "Fortinet-Web"
|
|
set type default
|
|
set internet-service-id 1245185
|
|
next
|
|
edit "Fortinet-ICMP"
|
|
set type default
|
|
set internet-service-id 1245186
|
|
next
|
|
edit "Fortinet-DNS"
|
|
set type default
|
|
set internet-service-id 1245187
|
|
next
|
|
edit "Fortinet-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 1245188
|
|
next
|
|
edit "Fortinet-SSH"
|
|
set type default
|
|
set internet-service-id 1245190
|
|
next
|
|
edit "Fortinet-FTP"
|
|
set type default
|
|
set internet-service-id 1245191
|
|
next
|
|
edit "Fortinet-NTP"
|
|
set type default
|
|
set internet-service-id 1245192
|
|
next
|
|
edit "Fortinet-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 1245193
|
|
next
|
|
edit "Fortinet-LDAP"
|
|
set type default
|
|
set internet-service-id 1245198
|
|
next
|
|
edit "Fortinet-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 1245199
|
|
next
|
|
edit "Fortinet-RTMP"
|
|
set type default
|
|
set internet-service-id 1245200
|
|
next
|
|
edit "Fortinet-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 1245208
|
|
next
|
|
edit "Fortinet-FortiGuard"
|
|
set type default
|
|
set internet-service-id 1245324
|
|
next
|
|
edit "Fortinet-FortiMail.Cloud"
|
|
set type default
|
|
set internet-service-id 1245325
|
|
next
|
|
edit "Fortinet-FortiCloud"
|
|
set type default
|
|
set internet-service-id 1245326
|
|
next
|
|
edit "Kaspersky-Other"
|
|
set type default
|
|
set internet-service-id 1310720
|
|
next
|
|
edit "Kaspersky-Web"
|
|
set type default
|
|
set internet-service-id 1310721
|
|
next
|
|
edit "Kaspersky-ICMP"
|
|
set type default
|
|
set internet-service-id 1310722
|
|
next
|
|
edit "Kaspersky-DNS"
|
|
set type default
|
|
set internet-service-id 1310723
|
|
next
|
|
edit "Kaspersky-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 1310724
|
|
next
|
|
edit "Kaspersky-SSH"
|
|
set type default
|
|
set internet-service-id 1310726
|
|
next
|
|
edit "Kaspersky-FTP"
|
|
set type default
|
|
set internet-service-id 1310727
|
|
next
|
|
edit "Kaspersky-NTP"
|
|
set type default
|
|
set internet-service-id 1310728
|
|
next
|
|
edit "Kaspersky-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 1310729
|
|
next
|
|
edit "Kaspersky-LDAP"
|
|
set type default
|
|
set internet-service-id 1310734
|
|
next
|
|
edit "Kaspersky-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 1310735
|
|
next
|
|
edit "Kaspersky-RTMP"
|
|
set type default
|
|
set internet-service-id 1310736
|
|
next
|
|
edit "Kaspersky-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 1310744
|
|
next
|
|
edit "McAfee-Other"
|
|
set type default
|
|
set internet-service-id 1376256
|
|
next
|
|
edit "McAfee-Web"
|
|
set type default
|
|
set internet-service-id 1376257
|
|
next
|
|
edit "McAfee-ICMP"
|
|
set type default
|
|
set internet-service-id 1376258
|
|
next
|
|
edit "McAfee-DNS"
|
|
set type default
|
|
set internet-service-id 1376259
|
|
next
|
|
edit "McAfee-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 1376260
|
|
next
|
|
edit "McAfee-SSH"
|
|
set type default
|
|
set internet-service-id 1376262
|
|
next
|
|
edit "McAfee-FTP"
|
|
set type default
|
|
set internet-service-id 1376263
|
|
next
|
|
edit "McAfee-NTP"
|
|
set type default
|
|
set internet-service-id 1376264
|
|
next
|
|
edit "McAfee-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 1376265
|
|
next
|
|
edit "McAfee-LDAP"
|
|
set type default
|
|
set internet-service-id 1376270
|
|
next
|
|
edit "McAfee-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 1376271
|
|
next
|
|
edit "McAfee-RTMP"
|
|
set type default
|
|
set internet-service-id 1376272
|
|
next
|
|
edit "McAfee-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 1376280
|
|
next
|
|
edit "Symantec-Other"
|
|
set type default
|
|
set internet-service-id 1441792
|
|
next
|
|
edit "Symantec-Web"
|
|
set type default
|
|
set internet-service-id 1441793
|
|
next
|
|
edit "Symantec-ICMP"
|
|
set type default
|
|
set internet-service-id 1441794
|
|
next
|
|
edit "Symantec-DNS"
|
|
set type default
|
|
set internet-service-id 1441795
|
|
next
|
|
edit "Symantec-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 1441796
|
|
next
|
|
edit "Symantec-SSH"
|
|
set type default
|
|
set internet-service-id 1441798
|
|
next
|
|
edit "Symantec-FTP"
|
|
set type default
|
|
set internet-service-id 1441799
|
|
next
|
|
edit "Symantec-NTP"
|
|
set type default
|
|
set internet-service-id 1441800
|
|
next
|
|
edit "Symantec-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 1441801
|
|
next
|
|
edit "Symantec-LDAP"
|
|
set type default
|
|
set internet-service-id 1441806
|
|
next
|
|
edit "Symantec-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 1441807
|
|
next
|
|
edit "Symantec-RTMP"
|
|
set type default
|
|
set internet-service-id 1441808
|
|
next
|
|
edit "Symantec-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 1441816
|
|
next
|
|
edit "VMware-Other"
|
|
set type default
|
|
set internet-service-id 1507328
|
|
next
|
|
edit "VMware-Web"
|
|
set type default
|
|
set internet-service-id 1507329
|
|
next
|
|
edit "VMware-ICMP"
|
|
set type default
|
|
set internet-service-id 1507330
|
|
next
|
|
edit "VMware-DNS"
|
|
set type default
|
|
set internet-service-id 1507331
|
|
next
|
|
edit "VMware-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 1507332
|
|
next
|
|
edit "VMware-SSH"
|
|
set type default
|
|
set internet-service-id 1507334
|
|
next
|
|
edit "VMware-FTP"
|
|
set type default
|
|
set internet-service-id 1507335
|
|
next
|
|
edit "VMware-NTP"
|
|
set type default
|
|
set internet-service-id 1507336
|
|
next
|
|
edit "VMware-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 1507337
|
|
next
|
|
edit "VMware-LDAP"
|
|
set type default
|
|
set internet-service-id 1507342
|
|
next
|
|
edit "VMware-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 1507343
|
|
next
|
|
edit "VMware-RTMP"
|
|
set type default
|
|
set internet-service-id 1507344
|
|
next
|
|
edit "VMware-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 1507352
|
|
next
|
|
edit "AOL-Other"
|
|
set type default
|
|
set internet-service-id 1572864
|
|
next
|
|
edit "AOL-Web"
|
|
set type default
|
|
set internet-service-id 1572865
|
|
next
|
|
edit "AOL-ICMP"
|
|
set type default
|
|
set internet-service-id 1572866
|
|
next
|
|
edit "AOL-DNS"
|
|
set type default
|
|
set internet-service-id 1572867
|
|
next
|
|
edit "AOL-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 1572868
|
|
next
|
|
edit "AOL-SSH"
|
|
set type default
|
|
set internet-service-id 1572870
|
|
next
|
|
edit "AOL-FTP"
|
|
set type default
|
|
set internet-service-id 1572871
|
|
next
|
|
edit "AOL-NTP"
|
|
set type default
|
|
set internet-service-id 1572872
|
|
next
|
|
edit "AOL-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 1572873
|
|
next
|
|
edit "AOL-LDAP"
|
|
set type default
|
|
set internet-service-id 1572878
|
|
next
|
|
edit "AOL-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 1572879
|
|
next
|
|
edit "AOL-RTMP"
|
|
set type default
|
|
set internet-service-id 1572880
|
|
next
|
|
edit "AOL-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 1572888
|
|
next
|
|
edit "RealNetworks-Other"
|
|
set type default
|
|
set internet-service-id 1638400
|
|
next
|
|
edit "RealNetworks-Web"
|
|
set type default
|
|
set internet-service-id 1638401
|
|
next
|
|
edit "RealNetworks-ICMP"
|
|
set type default
|
|
set internet-service-id 1638402
|
|
next
|
|
edit "RealNetworks-DNS"
|
|
set type default
|
|
set internet-service-id 1638403
|
|
next
|
|
edit "RealNetworks-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 1638404
|
|
next
|
|
edit "RealNetworks-SSH"
|
|
set type default
|
|
set internet-service-id 1638406
|
|
next
|
|
edit "RealNetworks-FTP"
|
|
set type default
|
|
set internet-service-id 1638407
|
|
next
|
|
edit "RealNetworks-NTP"
|
|
set type default
|
|
set internet-service-id 1638408
|
|
next
|
|
edit "RealNetworks-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 1638409
|
|
next
|
|
edit "RealNetworks-LDAP"
|
|
set type default
|
|
set internet-service-id 1638414
|
|
next
|
|
edit "RealNetworks-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 1638415
|
|
next
|
|
edit "RealNetworks-RTMP"
|
|
set type default
|
|
set internet-service-id 1638416
|
|
next
|
|
edit "RealNetworks-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 1638424
|
|
next
|
|
edit "Zoho-Other"
|
|
set type default
|
|
set internet-service-id 1703936
|
|
next
|
|
edit "Zoho-Web"
|
|
set type default
|
|
set internet-service-id 1703937
|
|
next
|
|
edit "Zoho-ICMP"
|
|
set type default
|
|
set internet-service-id 1703938
|
|
next
|
|
edit "Zoho-DNS"
|
|
set type default
|
|
set internet-service-id 1703939
|
|
next
|
|
edit "Zoho-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 1703940
|
|
next
|
|
edit "Zoho-SSH"
|
|
set type default
|
|
set internet-service-id 1703942
|
|
next
|
|
edit "Zoho-FTP"
|
|
set type default
|
|
set internet-service-id 1703943
|
|
next
|
|
edit "Zoho-NTP"
|
|
set type default
|
|
set internet-service-id 1703944
|
|
next
|
|
edit "Zoho-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 1703945
|
|
next
|
|
edit "Zoho-LDAP"
|
|
set type default
|
|
set internet-service-id 1703950
|
|
next
|
|
edit "Zoho-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 1703951
|
|
next
|
|
edit "Zoho-RTMP"
|
|
set type default
|
|
set internet-service-id 1703952
|
|
next
|
|
edit "Zoho-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 1703960
|
|
next
|
|
edit "Mozilla-Other"
|
|
set type default
|
|
set internet-service-id 1769472
|
|
next
|
|
edit "Mozilla-Web"
|
|
set type default
|
|
set internet-service-id 1769473
|
|
next
|
|
edit "Mozilla-ICMP"
|
|
set type default
|
|
set internet-service-id 1769474
|
|
next
|
|
edit "Mozilla-DNS"
|
|
set type default
|
|
set internet-service-id 1769475
|
|
next
|
|
edit "Mozilla-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 1769476
|
|
next
|
|
edit "Mozilla-SSH"
|
|
set type default
|
|
set internet-service-id 1769478
|
|
next
|
|
edit "Mozilla-FTP"
|
|
set type default
|
|
set internet-service-id 1769479
|
|
next
|
|
edit "Mozilla-NTP"
|
|
set type default
|
|
set internet-service-id 1769480
|
|
next
|
|
edit "Mozilla-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 1769481
|
|
next
|
|
edit "Mozilla-LDAP"
|
|
set type default
|
|
set internet-service-id 1769486
|
|
next
|
|
edit "Mozilla-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 1769487
|
|
next
|
|
edit "Mozilla-RTMP"
|
|
set type default
|
|
set internet-service-id 1769488
|
|
next
|
|
edit "Mozilla-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 1769496
|
|
next
|
|
edit "TeamViewer-Other"
|
|
set type default
|
|
set internet-service-id 1835008
|
|
next
|
|
edit "TeamViewer-Web"
|
|
set type default
|
|
set internet-service-id 1835009
|
|
next
|
|
edit "TeamViewer-ICMP"
|
|
set type default
|
|
set internet-service-id 1835010
|
|
next
|
|
edit "TeamViewer-DNS"
|
|
set type default
|
|
set internet-service-id 1835011
|
|
next
|
|
edit "TeamViewer-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 1835012
|
|
next
|
|
edit "TeamViewer-SSH"
|
|
set type default
|
|
set internet-service-id 1835014
|
|
next
|
|
edit "TeamViewer-FTP"
|
|
set type default
|
|
set internet-service-id 1835015
|
|
next
|
|
edit "TeamViewer-NTP"
|
|
set type default
|
|
set internet-service-id 1835016
|
|
next
|
|
edit "TeamViewer-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 1835017
|
|
next
|
|
edit "TeamViewer-LDAP"
|
|
set type default
|
|
set internet-service-id 1835022
|
|
next
|
|
edit "TeamViewer-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 1835023
|
|
next
|
|
edit "TeamViewer-RTMP"
|
|
set type default
|
|
set internet-service-id 1835024
|
|
next
|
|
edit "TeamViewer-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 1835032
|
|
next
|
|
edit "TeamViewer-TeamViewer"
|
|
set type default
|
|
set internet-service-id 1835117
|
|
next
|
|
edit "HP-Other"
|
|
set type default
|
|
set internet-service-id 1900544
|
|
next
|
|
edit "HP-Web"
|
|
set type default
|
|
set internet-service-id 1900545
|
|
next
|
|
edit "HP-ICMP"
|
|
set type default
|
|
set internet-service-id 1900546
|
|
next
|
|
edit "HP-DNS"
|
|
set type default
|
|
set internet-service-id 1900547
|
|
next
|
|
edit "HP-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 1900548
|
|
next
|
|
edit "HP-SSH"
|
|
set type default
|
|
set internet-service-id 1900550
|
|
next
|
|
edit "HP-FTP"
|
|
set type default
|
|
set internet-service-id 1900551
|
|
next
|
|
edit "HP-NTP"
|
|
set type default
|
|
set internet-service-id 1900552
|
|
next
|
|
edit "HP-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 1900553
|
|
next
|
|
edit "HP-LDAP"
|
|
set type default
|
|
set internet-service-id 1900558
|
|
next
|
|
edit "HP-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 1900559
|
|
next
|
|
edit "HP-RTMP"
|
|
set type default
|
|
set internet-service-id 1900560
|
|
next
|
|
edit "HP-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 1900568
|
|
next
|
|
edit "Cisco-Other"
|
|
set type default
|
|
set internet-service-id 1966080
|
|
next
|
|
edit "Cisco-Web"
|
|
set type default
|
|
set internet-service-id 1966081
|
|
next
|
|
edit "Cisco-ICMP"
|
|
set type default
|
|
set internet-service-id 1966082
|
|
next
|
|
edit "Cisco-DNS"
|
|
set type default
|
|
set internet-service-id 1966083
|
|
next
|
|
edit "Cisco-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 1966084
|
|
next
|
|
edit "Cisco-SSH"
|
|
set type default
|
|
set internet-service-id 1966086
|
|
next
|
|
edit "Cisco-FTP"
|
|
set type default
|
|
set internet-service-id 1966087
|
|
next
|
|
edit "Cisco-NTP"
|
|
set type default
|
|
set internet-service-id 1966088
|
|
next
|
|
edit "Cisco-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 1966089
|
|
next
|
|
edit "Cisco-LDAP"
|
|
set type default
|
|
set internet-service-id 1966094
|
|
next
|
|
edit "Cisco-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 1966095
|
|
next
|
|
edit "Cisco-RTMP"
|
|
set type default
|
|
set internet-service-id 1966096
|
|
next
|
|
edit "Cisco-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 1966104
|
|
next
|
|
edit "Cisco-Webex"
|
|
set type default
|
|
set internet-service-id 1966183
|
|
next
|
|
edit "IBM-Other"
|
|
set type default
|
|
set internet-service-id 2031616
|
|
next
|
|
edit "IBM-Web"
|
|
set type default
|
|
set internet-service-id 2031617
|
|
next
|
|
edit "IBM-ICMP"
|
|
set type default
|
|
set internet-service-id 2031618
|
|
next
|
|
edit "IBM-DNS"
|
|
set type default
|
|
set internet-service-id 2031619
|
|
next
|
|
edit "IBM-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 2031620
|
|
next
|
|
edit "IBM-SSH"
|
|
set type default
|
|
set internet-service-id 2031622
|
|
next
|
|
edit "IBM-FTP"
|
|
set type default
|
|
set internet-service-id 2031623
|
|
next
|
|
edit "IBM-NTP"
|
|
set type default
|
|
set internet-service-id 2031624
|
|
next
|
|
edit "IBM-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 2031625
|
|
next
|
|
edit "IBM-LDAP"
|
|
set type default
|
|
set internet-service-id 2031630
|
|
next
|
|
edit "IBM-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 2031631
|
|
next
|
|
edit "IBM-RTMP"
|
|
set type default
|
|
set internet-service-id 2031632
|
|
next
|
|
edit "IBM-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 2031640
|
|
next
|
|
edit "Citrix-Other"
|
|
set type default
|
|
set internet-service-id 2097152
|
|
next
|
|
edit "Citrix-Web"
|
|
set type default
|
|
set internet-service-id 2097153
|
|
next
|
|
edit "Citrix-ICMP"
|
|
set type default
|
|
set internet-service-id 2097154
|
|
next
|
|
edit "Citrix-DNS"
|
|
set type default
|
|
set internet-service-id 2097155
|
|
next
|
|
edit "Citrix-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 2097156
|
|
next
|
|
edit "Citrix-SSH"
|
|
set type default
|
|
set internet-service-id 2097158
|
|
next
|
|
edit "Citrix-FTP"
|
|
set type default
|
|
set internet-service-id 2097159
|
|
next
|
|
edit "Citrix-NTP"
|
|
set type default
|
|
set internet-service-id 2097160
|
|
next
|
|
edit "Citrix-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 2097161
|
|
next
|
|
edit "Citrix-LDAP"
|
|
set type default
|
|
set internet-service-id 2097166
|
|
next
|
|
edit "Citrix-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 2097167
|
|
next
|
|
edit "Citrix-RTMP"
|
|
set type default
|
|
set internet-service-id 2097168
|
|
next
|
|
edit "Citrix-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 2097176
|
|
next
|
|
edit "Twitter-Other"
|
|
set type default
|
|
set internet-service-id 2162688
|
|
next
|
|
edit "Twitter-Web"
|
|
set type default
|
|
set internet-service-id 2162689
|
|
next
|
|
edit "Twitter-ICMP"
|
|
set type default
|
|
set internet-service-id 2162690
|
|
next
|
|
edit "Twitter-DNS"
|
|
set type default
|
|
set internet-service-id 2162691
|
|
next
|
|
edit "Twitter-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 2162692
|
|
next
|
|
edit "Twitter-SSH"
|
|
set type default
|
|
set internet-service-id 2162694
|
|
next
|
|
edit "Twitter-FTP"
|
|
set type default
|
|
set internet-service-id 2162695
|
|
next
|
|
edit "Twitter-NTP"
|
|
set type default
|
|
set internet-service-id 2162696
|
|
next
|
|
edit "Twitter-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 2162697
|
|
next
|
|
edit "Twitter-LDAP"
|
|
set type default
|
|
set internet-service-id 2162702
|
|
next
|
|
edit "Twitter-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 2162703
|
|
next
|
|
edit "Twitter-RTMP"
|
|
set type default
|
|
set internet-service-id 2162704
|
|
next
|
|
edit "Twitter-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 2162712
|
|
next
|
|
edit "Dell-Other"
|
|
set type default
|
|
set internet-service-id 2228224
|
|
next
|
|
edit "Dell-Web"
|
|
set type default
|
|
set internet-service-id 2228225
|
|
next
|
|
edit "Dell-ICMP"
|
|
set type default
|
|
set internet-service-id 2228226
|
|
next
|
|
edit "Dell-DNS"
|
|
set type default
|
|
set internet-service-id 2228227
|
|
next
|
|
edit "Dell-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 2228228
|
|
next
|
|
edit "Dell-SSH"
|
|
set type default
|
|
set internet-service-id 2228230
|
|
next
|
|
edit "Dell-FTP"
|
|
set type default
|
|
set internet-service-id 2228231
|
|
next
|
|
edit "Dell-NTP"
|
|
set type default
|
|
set internet-service-id 2228232
|
|
next
|
|
edit "Dell-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 2228233
|
|
next
|
|
edit "Dell-LDAP"
|
|
set type default
|
|
set internet-service-id 2228238
|
|
next
|
|
edit "Dell-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 2228239
|
|
next
|
|
edit "Dell-RTMP"
|
|
set type default
|
|
set internet-service-id 2228240
|
|
next
|
|
edit "Dell-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 2228248
|
|
next
|
|
edit "Vimeo-Other"
|
|
set type default
|
|
set internet-service-id 2293760
|
|
next
|
|
edit "Vimeo-Web"
|
|
set type default
|
|
set internet-service-id 2293761
|
|
next
|
|
edit "Vimeo-ICMP"
|
|
set type default
|
|
set internet-service-id 2293762
|
|
next
|
|
edit "Vimeo-DNS"
|
|
set type default
|
|
set internet-service-id 2293763
|
|
next
|
|
edit "Vimeo-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 2293764
|
|
next
|
|
edit "Vimeo-SSH"
|
|
set type default
|
|
set internet-service-id 2293766
|
|
next
|
|
edit "Vimeo-FTP"
|
|
set type default
|
|
set internet-service-id 2293767
|
|
next
|
|
edit "Vimeo-NTP"
|
|
set type default
|
|
set internet-service-id 2293768
|
|
next
|
|
edit "Vimeo-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 2293769
|
|
next
|
|
edit "Vimeo-LDAP"
|
|
set type default
|
|
set internet-service-id 2293774
|
|
next
|
|
edit "Vimeo-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 2293775
|
|
next
|
|
edit "Vimeo-RTMP"
|
|
set type default
|
|
set internet-service-id 2293776
|
|
next
|
|
edit "Vimeo-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 2293784
|
|
next
|
|
edit "Redhat-Other"
|
|
set type default
|
|
set internet-service-id 2359296
|
|
next
|
|
edit "Redhat-Web"
|
|
set type default
|
|
set internet-service-id 2359297
|
|
next
|
|
edit "Redhat-ICMP"
|
|
set type default
|
|
set internet-service-id 2359298
|
|
next
|
|
edit "Redhat-DNS"
|
|
set type default
|
|
set internet-service-id 2359299
|
|
next
|
|
edit "Redhat-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 2359300
|
|
next
|
|
edit "Redhat-SSH"
|
|
set type default
|
|
set internet-service-id 2359302
|
|
next
|
|
edit "Redhat-FTP"
|
|
set type default
|
|
set internet-service-id 2359303
|
|
next
|
|
edit "Redhat-NTP"
|
|
set type default
|
|
set internet-service-id 2359304
|
|
next
|
|
edit "Redhat-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 2359305
|
|
next
|
|
edit "Redhat-LDAP"
|
|
set type default
|
|
set internet-service-id 2359310
|
|
next
|
|
edit "Redhat-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 2359311
|
|
next
|
|
edit "Redhat-RTMP"
|
|
set type default
|
|
set internet-service-id 2359312
|
|
next
|
|
edit "Redhat-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 2359320
|
|
next
|
|
edit "VK-Other"
|
|
set type default
|
|
set internet-service-id 2424832
|
|
next
|
|
edit "VK-Web"
|
|
set type default
|
|
set internet-service-id 2424833
|
|
next
|
|
edit "VK-ICMP"
|
|
set type default
|
|
set internet-service-id 2424834
|
|
next
|
|
edit "VK-DNS"
|
|
set type default
|
|
set internet-service-id 2424835
|
|
next
|
|
edit "VK-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 2424836
|
|
next
|
|
edit "VK-SSH"
|
|
set type default
|
|
set internet-service-id 2424838
|
|
next
|
|
edit "VK-FTP"
|
|
set type default
|
|
set internet-service-id 2424839
|
|
next
|
|
edit "VK-NTP"
|
|
set type default
|
|
set internet-service-id 2424840
|
|
next
|
|
edit "VK-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 2424841
|
|
next
|
|
edit "VK-LDAP"
|
|
set type default
|
|
set internet-service-id 2424846
|
|
next
|
|
edit "VK-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 2424847
|
|
next
|
|
edit "VK-RTMP"
|
|
set type default
|
|
set internet-service-id 2424848
|
|
next
|
|
edit "VK-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 2424856
|
|
next
|
|
edit "TrendMicro-Other"
|
|
set type default
|
|
set internet-service-id 2490368
|
|
next
|
|
edit "TrendMicro-Web"
|
|
set type default
|
|
set internet-service-id 2490369
|
|
next
|
|
edit "TrendMicro-ICMP"
|
|
set type default
|
|
set internet-service-id 2490370
|
|
next
|
|
edit "TrendMicro-DNS"
|
|
set type default
|
|
set internet-service-id 2490371
|
|
next
|
|
edit "TrendMicro-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 2490372
|
|
next
|
|
edit "TrendMicro-SSH"
|
|
set type default
|
|
set internet-service-id 2490374
|
|
next
|
|
edit "TrendMicro-FTP"
|
|
set type default
|
|
set internet-service-id 2490375
|
|
next
|
|
edit "TrendMicro-NTP"
|
|
set type default
|
|
set internet-service-id 2490376
|
|
next
|
|
edit "TrendMicro-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 2490377
|
|
next
|
|
edit "TrendMicro-LDAP"
|
|
set type default
|
|
set internet-service-id 2490382
|
|
next
|
|
edit "TrendMicro-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 2490383
|
|
next
|
|
edit "TrendMicro-RTMP"
|
|
set type default
|
|
set internet-service-id 2490384
|
|
next
|
|
edit "TrendMicro-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 2490392
|
|
next
|
|
edit "Tencent-Other"
|
|
set type default
|
|
set internet-service-id 2555904
|
|
next
|
|
edit "Tencent-Web"
|
|
set type default
|
|
set internet-service-id 2555905
|
|
next
|
|
edit "Tencent-ICMP"
|
|
set type default
|
|
set internet-service-id 2555906
|
|
next
|
|
edit "Tencent-DNS"
|
|
set type default
|
|
set internet-service-id 2555907
|
|
next
|
|
edit "Tencent-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 2555908
|
|
next
|
|
edit "Tencent-SSH"
|
|
set type default
|
|
set internet-service-id 2555910
|
|
next
|
|
edit "Tencent-FTP"
|
|
set type default
|
|
set internet-service-id 2555911
|
|
next
|
|
edit "Tencent-NTP"
|
|
set type default
|
|
set internet-service-id 2555912
|
|
next
|
|
edit "Tencent-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 2555913
|
|
next
|
|
edit "Tencent-LDAP"
|
|
set type default
|
|
set internet-service-id 2555918
|
|
next
|
|
edit "Tencent-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 2555919
|
|
next
|
|
edit "Tencent-RTMP"
|
|
set type default
|
|
set internet-service-id 2555920
|
|
next
|
|
edit "Tencent-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 2555928
|
|
next
|
|
edit "Ask-Other"
|
|
set type default
|
|
set internet-service-id 2621440
|
|
next
|
|
edit "Ask-Web"
|
|
set type default
|
|
set internet-service-id 2621441
|
|
next
|
|
edit "Ask-ICMP"
|
|
set type default
|
|
set internet-service-id 2621442
|
|
next
|
|
edit "Ask-DNS"
|
|
set type default
|
|
set internet-service-id 2621443
|
|
next
|
|
edit "Ask-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 2621444
|
|
next
|
|
edit "Ask-SSH"
|
|
set type default
|
|
set internet-service-id 2621446
|
|
next
|
|
edit "Ask-FTP"
|
|
set type default
|
|
set internet-service-id 2621447
|
|
next
|
|
edit "Ask-NTP"
|
|
set type default
|
|
set internet-service-id 2621448
|
|
next
|
|
edit "Ask-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 2621449
|
|
next
|
|
edit "Ask-LDAP"
|
|
set type default
|
|
set internet-service-id 2621454
|
|
next
|
|
edit "Ask-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 2621455
|
|
next
|
|
edit "Ask-RTMP"
|
|
set type default
|
|
set internet-service-id 2621456
|
|
next
|
|
edit "Ask-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 2621464
|
|
next
|
|
edit "CNN-Other"
|
|
set type default
|
|
set internet-service-id 2686976
|
|
next
|
|
edit "CNN-Web"
|
|
set type default
|
|
set internet-service-id 2686977
|
|
next
|
|
edit "CNN-ICMP"
|
|
set type default
|
|
set internet-service-id 2686978
|
|
next
|
|
edit "CNN-DNS"
|
|
set type default
|
|
set internet-service-id 2686979
|
|
next
|
|
edit "CNN-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 2686980
|
|
next
|
|
edit "CNN-SSH"
|
|
set type default
|
|
set internet-service-id 2686982
|
|
next
|
|
edit "CNN-FTP"
|
|
set type default
|
|
set internet-service-id 2686983
|
|
next
|
|
edit "CNN-NTP"
|
|
set type default
|
|
set internet-service-id 2686984
|
|
next
|
|
edit "CNN-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 2686985
|
|
next
|
|
edit "CNN-LDAP"
|
|
set type default
|
|
set internet-service-id 2686990
|
|
next
|
|
edit "CNN-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 2686991
|
|
next
|
|
edit "CNN-RTMP"
|
|
set type default
|
|
set internet-service-id 2686992
|
|
next
|
|
edit "CNN-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 2687000
|
|
next
|
|
edit "Myspace-Other"
|
|
set type default
|
|
set internet-service-id 2752512
|
|
next
|
|
edit "Myspace-Web"
|
|
set type default
|
|
set internet-service-id 2752513
|
|
next
|
|
edit "Myspace-ICMP"
|
|
set type default
|
|
set internet-service-id 2752514
|
|
next
|
|
edit "Myspace-DNS"
|
|
set type default
|
|
set internet-service-id 2752515
|
|
next
|
|
edit "Myspace-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 2752516
|
|
next
|
|
edit "Myspace-SSH"
|
|
set type default
|
|
set internet-service-id 2752518
|
|
next
|
|
edit "Myspace-FTP"
|
|
set type default
|
|
set internet-service-id 2752519
|
|
next
|
|
edit "Myspace-NTP"
|
|
set type default
|
|
set internet-service-id 2752520
|
|
next
|
|
edit "Myspace-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 2752521
|
|
next
|
|
edit "Myspace-LDAP"
|
|
set type default
|
|
set internet-service-id 2752526
|
|
next
|
|
edit "Myspace-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 2752527
|
|
next
|
|
edit "Myspace-RTMP"
|
|
set type default
|
|
set internet-service-id 2752528
|
|
next
|
|
edit "Myspace-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 2752536
|
|
next
|
|
edit "Tor-Relay.Node"
|
|
set type default
|
|
set internet-service-id 2818238
|
|
next
|
|
edit "Tor-Exit.Node"
|
|
set type default
|
|
set internet-service-id 2818243
|
|
next
|
|
edit "Baidu-Other"
|
|
set type default
|
|
set internet-service-id 2883584
|
|
next
|
|
edit "Baidu-Web"
|
|
set type default
|
|
set internet-service-id 2883585
|
|
next
|
|
edit "Baidu-ICMP"
|
|
set type default
|
|
set internet-service-id 2883586
|
|
next
|
|
edit "Baidu-DNS"
|
|
set type default
|
|
set internet-service-id 2883587
|
|
next
|
|
edit "Baidu-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 2883588
|
|
next
|
|
edit "Baidu-SSH"
|
|
set type default
|
|
set internet-service-id 2883590
|
|
next
|
|
edit "Baidu-FTP"
|
|
set type default
|
|
set internet-service-id 2883591
|
|
next
|
|
edit "Baidu-NTP"
|
|
set type default
|
|
set internet-service-id 2883592
|
|
next
|
|
edit "Baidu-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 2883593
|
|
next
|
|
edit "Baidu-LDAP"
|
|
set type default
|
|
set internet-service-id 2883598
|
|
next
|
|
edit "Baidu-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 2883599
|
|
next
|
|
edit "Baidu-RTMP"
|
|
set type default
|
|
set internet-service-id 2883600
|
|
next
|
|
edit "Baidu-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 2883608
|
|
next
|
|
edit "ntp.org-Other"
|
|
set type default
|
|
set internet-service-id 2949120
|
|
next
|
|
edit "ntp.org-Web"
|
|
set type default
|
|
set internet-service-id 2949121
|
|
next
|
|
edit "ntp.org-ICMP"
|
|
set type default
|
|
set internet-service-id 2949122
|
|
next
|
|
edit "ntp.org-DNS"
|
|
set type default
|
|
set internet-service-id 2949123
|
|
next
|
|
edit "ntp.org-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 2949124
|
|
next
|
|
edit "ntp.org-SSH"
|
|
set type default
|
|
set internet-service-id 2949126
|
|
next
|
|
edit "ntp.org-FTP"
|
|
set type default
|
|
set internet-service-id 2949127
|
|
next
|
|
edit "ntp.org-NTP"
|
|
set type default
|
|
set internet-service-id 2949128
|
|
next
|
|
edit "ntp.org-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 2949129
|
|
next
|
|
edit "ntp.org-LDAP"
|
|
set type default
|
|
set internet-service-id 2949134
|
|
next
|
|
edit "ntp.org-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 2949135
|
|
next
|
|
edit "ntp.org-RTMP"
|
|
set type default
|
|
set internet-service-id 2949136
|
|
next
|
|
edit "ntp.org-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 2949144
|
|
next
|
|
edit "Proxy-Proxy.Server"
|
|
set type default
|
|
set internet-service-id 3014850
|
|
next
|
|
edit "Botnet-C&C.Server"
|
|
set type default
|
|
set internet-service-id 3080383
|
|
next
|
|
edit "Spam-Spamming.Server"
|
|
set type default
|
|
set internet-service-id 3145920
|
|
next
|
|
edit "Phishing-Phishing.Server"
|
|
set type default
|
|
set internet-service-id 3211457
|
|
next
|
|
edit "Zendesk-Other"
|
|
set type default
|
|
set internet-service-id 3407872
|
|
next
|
|
edit "Zendesk-Web"
|
|
set type default
|
|
set internet-service-id 3407873
|
|
next
|
|
edit "Zendesk-ICMP"
|
|
set type default
|
|
set internet-service-id 3407874
|
|
next
|
|
edit "Zendesk-DNS"
|
|
set type default
|
|
set internet-service-id 3407875
|
|
next
|
|
edit "Zendesk-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 3407876
|
|
next
|
|
edit "Zendesk-SSH"
|
|
set type default
|
|
set internet-service-id 3407878
|
|
next
|
|
edit "Zendesk-FTP"
|
|
set type default
|
|
set internet-service-id 3407879
|
|
next
|
|
edit "Zendesk-NTP"
|
|
set type default
|
|
set internet-service-id 3407880
|
|
next
|
|
edit "Zendesk-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 3407881
|
|
next
|
|
edit "Zendesk-LDAP"
|
|
set type default
|
|
set internet-service-id 3407886
|
|
next
|
|
edit "Zendesk-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 3407887
|
|
next
|
|
edit "Zendesk-RTMP"
|
|
set type default
|
|
set internet-service-id 3407888
|
|
next
|
|
edit "Zendesk-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 3407896
|
|
next
|
|
edit "DocuSign-Other"
|
|
set type default
|
|
set internet-service-id 3473408
|
|
next
|
|
edit "DocuSign-Web"
|
|
set type default
|
|
set internet-service-id 3473409
|
|
next
|
|
edit "DocuSign-ICMP"
|
|
set type default
|
|
set internet-service-id 3473410
|
|
next
|
|
edit "DocuSign-DNS"
|
|
set type default
|
|
set internet-service-id 3473411
|
|
next
|
|
edit "DocuSign-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 3473412
|
|
next
|
|
edit "DocuSign-SSH"
|
|
set type default
|
|
set internet-service-id 3473414
|
|
next
|
|
edit "DocuSign-FTP"
|
|
set type default
|
|
set internet-service-id 3473415
|
|
next
|
|
edit "DocuSign-NTP"
|
|
set type default
|
|
set internet-service-id 3473416
|
|
next
|
|
edit "DocuSign-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 3473417
|
|
next
|
|
edit "DocuSign-LDAP"
|
|
set type default
|
|
set internet-service-id 3473422
|
|
next
|
|
edit "DocuSign-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 3473423
|
|
next
|
|
edit "DocuSign-RTMP"
|
|
set type default
|
|
set internet-service-id 3473424
|
|
next
|
|
edit "DocuSign-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 3473432
|
|
next
|
|
edit "ServiceNow-Other"
|
|
set type default
|
|
set internet-service-id 3538944
|
|
next
|
|
edit "ServiceNow-Web"
|
|
set type default
|
|
set internet-service-id 3538945
|
|
next
|
|
edit "ServiceNow-ICMP"
|
|
set type default
|
|
set internet-service-id 3538946
|
|
next
|
|
edit "ServiceNow-DNS"
|
|
set type default
|
|
set internet-service-id 3538947
|
|
next
|
|
edit "ServiceNow-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 3538948
|
|
next
|
|
edit "ServiceNow-SSH"
|
|
set type default
|
|
set internet-service-id 3538950
|
|
next
|
|
edit "ServiceNow-FTP"
|
|
set type default
|
|
set internet-service-id 3538951
|
|
next
|
|
edit "ServiceNow-NTP"
|
|
set type default
|
|
set internet-service-id 3538952
|
|
next
|
|
edit "ServiceNow-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 3538953
|
|
next
|
|
edit "ServiceNow-LDAP"
|
|
set type default
|
|
set internet-service-id 3538958
|
|
next
|
|
edit "ServiceNow-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 3538959
|
|
next
|
|
edit "ServiceNow-RTMP"
|
|
set type default
|
|
set internet-service-id 3538960
|
|
next
|
|
edit "ServiceNow-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 3538968
|
|
next
|
|
edit "Workday-Other"
|
|
set type default
|
|
set internet-service-id 3670016
|
|
next
|
|
edit "Workday-Web"
|
|
set type default
|
|
set internet-service-id 3670017
|
|
next
|
|
edit "Workday-ICMP"
|
|
set type default
|
|
set internet-service-id 3670018
|
|
next
|
|
edit "Workday-DNS"
|
|
set type default
|
|
set internet-service-id 3670019
|
|
next
|
|
edit "Workday-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 3670020
|
|
next
|
|
edit "Workday-SSH"
|
|
set type default
|
|
set internet-service-id 3670022
|
|
next
|
|
edit "Workday-FTP"
|
|
set type default
|
|
set internet-service-id 3670023
|
|
next
|
|
edit "Workday-NTP"
|
|
set type default
|
|
set internet-service-id 3670024
|
|
next
|
|
edit "Workday-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 3670025
|
|
next
|
|
edit "Workday-LDAP"
|
|
set type default
|
|
set internet-service-id 3670030
|
|
next
|
|
edit "Workday-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 3670031
|
|
next
|
|
edit "Workday-RTMP"
|
|
set type default
|
|
set internet-service-id 3670032
|
|
next
|
|
edit "Workday-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 3670040
|
|
next
|
|
edit "HubSpot-Other"
|
|
set type default
|
|
set internet-service-id 3735552
|
|
next
|
|
edit "HubSpot-Web"
|
|
set type default
|
|
set internet-service-id 3735553
|
|
next
|
|
edit "HubSpot-ICMP"
|
|
set type default
|
|
set internet-service-id 3735554
|
|
next
|
|
edit "HubSpot-DNS"
|
|
set type default
|
|
set internet-service-id 3735555
|
|
next
|
|
edit "HubSpot-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 3735556
|
|
next
|
|
edit "HubSpot-SSH"
|
|
set type default
|
|
set internet-service-id 3735558
|
|
next
|
|
edit "HubSpot-FTP"
|
|
set type default
|
|
set internet-service-id 3735559
|
|
next
|
|
edit "HubSpot-NTP"
|
|
set type default
|
|
set internet-service-id 3735560
|
|
next
|
|
edit "HubSpot-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 3735561
|
|
next
|
|
edit "HubSpot-LDAP"
|
|
set type default
|
|
set internet-service-id 3735566
|
|
next
|
|
edit "HubSpot-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 3735567
|
|
next
|
|
edit "HubSpot-RTMP"
|
|
set type default
|
|
set internet-service-id 3735568
|
|
next
|
|
edit "HubSpot-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 3735576
|
|
next
|
|
edit "Twilio-Other"
|
|
set type default
|
|
set internet-service-id 3801088
|
|
next
|
|
edit "Twilio-Web"
|
|
set type default
|
|
set internet-service-id 3801089
|
|
next
|
|
edit "Twilio-ICMP"
|
|
set type default
|
|
set internet-service-id 3801090
|
|
next
|
|
edit "Twilio-DNS"
|
|
set type default
|
|
set internet-service-id 3801091
|
|
next
|
|
edit "Twilio-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 3801092
|
|
next
|
|
edit "Twilio-SSH"
|
|
set type default
|
|
set internet-service-id 3801094
|
|
next
|
|
edit "Twilio-FTP"
|
|
set type default
|
|
set internet-service-id 3801095
|
|
next
|
|
edit "Twilio-NTP"
|
|
set type default
|
|
set internet-service-id 3801096
|
|
next
|
|
edit "Twilio-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 3801097
|
|
next
|
|
edit "Twilio-LDAP"
|
|
set type default
|
|
set internet-service-id 3801102
|
|
next
|
|
edit "Twilio-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 3801103
|
|
next
|
|
edit "Twilio-RTMP"
|
|
set type default
|
|
set internet-service-id 3801104
|
|
next
|
|
edit "Twilio-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 3801112
|
|
next
|
|
edit "Coupa-Other"
|
|
set type default
|
|
set internet-service-id 3866624
|
|
next
|
|
edit "Coupa-Web"
|
|
set type default
|
|
set internet-service-id 3866625
|
|
next
|
|
edit "Coupa-ICMP"
|
|
set type default
|
|
set internet-service-id 3866626
|
|
next
|
|
edit "Coupa-DNS"
|
|
set type default
|
|
set internet-service-id 3866627
|
|
next
|
|
edit "Coupa-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 3866628
|
|
next
|
|
edit "Coupa-SSH"
|
|
set type default
|
|
set internet-service-id 3866630
|
|
next
|
|
edit "Coupa-FTP"
|
|
set type default
|
|
set internet-service-id 3866631
|
|
next
|
|
edit "Coupa-NTP"
|
|
set type default
|
|
set internet-service-id 3866632
|
|
next
|
|
edit "Coupa-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 3866633
|
|
next
|
|
edit "Coupa-LDAP"
|
|
set type default
|
|
set internet-service-id 3866638
|
|
next
|
|
edit "Coupa-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 3866639
|
|
next
|
|
edit "Coupa-RTMP"
|
|
set type default
|
|
set internet-service-id 3866640
|
|
next
|
|
edit "Coupa-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 3866648
|
|
next
|
|
edit "Atlassian-Other"
|
|
set type default
|
|
set internet-service-id 3932160
|
|
next
|
|
edit "Atlassian-Web"
|
|
set type default
|
|
set internet-service-id 3932161
|
|
next
|
|
edit "Atlassian-ICMP"
|
|
set type default
|
|
set internet-service-id 3932162
|
|
next
|
|
edit "Atlassian-DNS"
|
|
set type default
|
|
set internet-service-id 3932163
|
|
next
|
|
edit "Atlassian-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 3932164
|
|
next
|
|
edit "Atlassian-SSH"
|
|
set type default
|
|
set internet-service-id 3932166
|
|
next
|
|
edit "Atlassian-FTP"
|
|
set type default
|
|
set internet-service-id 3932167
|
|
next
|
|
edit "Atlassian-NTP"
|
|
set type default
|
|
set internet-service-id 3932168
|
|
next
|
|
edit "Atlassian-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 3932169
|
|
next
|
|
edit "Atlassian-LDAP"
|
|
set type default
|
|
set internet-service-id 3932174
|
|
next
|
|
edit "Atlassian-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 3932175
|
|
next
|
|
edit "Atlassian-RTMP"
|
|
set type default
|
|
set internet-service-id 3932176
|
|
next
|
|
edit "Atlassian-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 3932184
|
|
next
|
|
edit "Xero-Other"
|
|
set type default
|
|
set internet-service-id 3997696
|
|
next
|
|
edit "Xero-Web"
|
|
set type default
|
|
set internet-service-id 3997697
|
|
next
|
|
edit "Xero-ICMP"
|
|
set type default
|
|
set internet-service-id 3997698
|
|
next
|
|
edit "Xero-DNS"
|
|
set type default
|
|
set internet-service-id 3997699
|
|
next
|
|
edit "Xero-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 3997700
|
|
next
|
|
edit "Xero-SSH"
|
|
set type default
|
|
set internet-service-id 3997702
|
|
next
|
|
edit "Xero-FTP"
|
|
set type default
|
|
set internet-service-id 3997703
|
|
next
|
|
edit "Xero-NTP"
|
|
set type default
|
|
set internet-service-id 3997704
|
|
next
|
|
edit "Xero-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 3997705
|
|
next
|
|
edit "Xero-LDAP"
|
|
set type default
|
|
set internet-service-id 3997710
|
|
next
|
|
edit "Xero-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 3997711
|
|
next
|
|
edit "Xero-RTMP"
|
|
set type default
|
|
set internet-service-id 3997712
|
|
next
|
|
edit "Xero-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 3997720
|
|
next
|
|
edit "Zuora-Other"
|
|
set type default
|
|
set internet-service-id 4063232
|
|
next
|
|
edit "Zuora-Web"
|
|
set type default
|
|
set internet-service-id 4063233
|
|
next
|
|
edit "Zuora-ICMP"
|
|
set type default
|
|
set internet-service-id 4063234
|
|
next
|
|
edit "Zuora-DNS"
|
|
set type default
|
|
set internet-service-id 4063235
|
|
next
|
|
edit "Zuora-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 4063236
|
|
next
|
|
edit "Zuora-SSH"
|
|
set type default
|
|
set internet-service-id 4063238
|
|
next
|
|
edit "Zuora-FTP"
|
|
set type default
|
|
set internet-service-id 4063239
|
|
next
|
|
edit "Zuora-NTP"
|
|
set type default
|
|
set internet-service-id 4063240
|
|
next
|
|
edit "Zuora-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 4063241
|
|
next
|
|
edit "Zuora-LDAP"
|
|
set type default
|
|
set internet-service-id 4063246
|
|
next
|
|
edit "Zuora-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 4063247
|
|
next
|
|
edit "Zuora-RTMP"
|
|
set type default
|
|
set internet-service-id 4063248
|
|
next
|
|
edit "Zuora-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 4063256
|
|
next
|
|
edit "AdRoll-Other"
|
|
set type default
|
|
set internet-service-id 4128768
|
|
next
|
|
edit "AdRoll-Web"
|
|
set type default
|
|
set internet-service-id 4128769
|
|
next
|
|
edit "AdRoll-ICMP"
|
|
set type default
|
|
set internet-service-id 4128770
|
|
next
|
|
edit "AdRoll-DNS"
|
|
set type default
|
|
set internet-service-id 4128771
|
|
next
|
|
edit "AdRoll-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 4128772
|
|
next
|
|
edit "AdRoll-SSH"
|
|
set type default
|
|
set internet-service-id 4128774
|
|
next
|
|
edit "AdRoll-FTP"
|
|
set type default
|
|
set internet-service-id 4128775
|
|
next
|
|
edit "AdRoll-NTP"
|
|
set type default
|
|
set internet-service-id 4128776
|
|
next
|
|
edit "AdRoll-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 4128777
|
|
next
|
|
edit "AdRoll-LDAP"
|
|
set type default
|
|
set internet-service-id 4128782
|
|
next
|
|
edit "AdRoll-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 4128783
|
|
next
|
|
edit "AdRoll-RTMP"
|
|
set type default
|
|
set internet-service-id 4128784
|
|
next
|
|
edit "AdRoll-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 4128792
|
|
next
|
|
edit "Xactly-Other"
|
|
set type default
|
|
set internet-service-id 4194304
|
|
next
|
|
edit "Xactly-Web"
|
|
set type default
|
|
set internet-service-id 4194305
|
|
next
|
|
edit "Xactly-ICMP"
|
|
set type default
|
|
set internet-service-id 4194306
|
|
next
|
|
edit "Xactly-DNS"
|
|
set type default
|
|
set internet-service-id 4194307
|
|
next
|
|
edit "Xactly-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 4194308
|
|
next
|
|
edit "Xactly-SSH"
|
|
set type default
|
|
set internet-service-id 4194310
|
|
next
|
|
edit "Xactly-FTP"
|
|
set type default
|
|
set internet-service-id 4194311
|
|
next
|
|
edit "Xactly-NTP"
|
|
set type default
|
|
set internet-service-id 4194312
|
|
next
|
|
edit "Xactly-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 4194313
|
|
next
|
|
edit "Xactly-LDAP"
|
|
set type default
|
|
set internet-service-id 4194318
|
|
next
|
|
edit "Xactly-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 4194319
|
|
next
|
|
edit "Xactly-RTMP"
|
|
set type default
|
|
set internet-service-id 4194320
|
|
next
|
|
edit "Xactly-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 4194328
|
|
next
|
|
edit "Intuit-Other"
|
|
set type default
|
|
set internet-service-id 4259840
|
|
next
|
|
edit "Intuit-Web"
|
|
set type default
|
|
set internet-service-id 4259841
|
|
next
|
|
edit "Intuit-ICMP"
|
|
set type default
|
|
set internet-service-id 4259842
|
|
next
|
|
edit "Intuit-DNS"
|
|
set type default
|
|
set internet-service-id 4259843
|
|
next
|
|
edit "Intuit-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 4259844
|
|
next
|
|
edit "Intuit-SSH"
|
|
set type default
|
|
set internet-service-id 4259846
|
|
next
|
|
edit "Intuit-FTP"
|
|
set type default
|
|
set internet-service-id 4259847
|
|
next
|
|
edit "Intuit-NTP"
|
|
set type default
|
|
set internet-service-id 4259848
|
|
next
|
|
edit "Intuit-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 4259849
|
|
next
|
|
edit "Intuit-LDAP"
|
|
set type default
|
|
set internet-service-id 4259854
|
|
next
|
|
edit "Intuit-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 4259855
|
|
next
|
|
edit "Intuit-RTMP"
|
|
set type default
|
|
set internet-service-id 4259856
|
|
next
|
|
edit "Intuit-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 4259864
|
|
next
|
|
edit "Marketo-Other"
|
|
set type default
|
|
set internet-service-id 4325376
|
|
next
|
|
edit "Marketo-Web"
|
|
set type default
|
|
set internet-service-id 4325377
|
|
next
|
|
edit "Marketo-ICMP"
|
|
set type default
|
|
set internet-service-id 4325378
|
|
next
|
|
edit "Marketo-DNS"
|
|
set type default
|
|
set internet-service-id 4325379
|
|
next
|
|
edit "Marketo-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 4325380
|
|
next
|
|
edit "Marketo-SSH"
|
|
set type default
|
|
set internet-service-id 4325382
|
|
next
|
|
edit "Marketo-FTP"
|
|
set type default
|
|
set internet-service-id 4325383
|
|
next
|
|
edit "Marketo-NTP"
|
|
set type default
|
|
set internet-service-id 4325384
|
|
next
|
|
edit "Marketo-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 4325385
|
|
next
|
|
edit "Marketo-LDAP"
|
|
set type default
|
|
set internet-service-id 4325390
|
|
next
|
|
edit "Marketo-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 4325391
|
|
next
|
|
edit "Marketo-RTMP"
|
|
set type default
|
|
set internet-service-id 4325392
|
|
next
|
|
edit "Marketo-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 4325400
|
|
next
|
|
edit "Bill-Other"
|
|
set type default
|
|
set internet-service-id 4456448
|
|
next
|
|
edit "Bill-Web"
|
|
set type default
|
|
set internet-service-id 4456449
|
|
next
|
|
edit "Bill-ICMP"
|
|
set type default
|
|
set internet-service-id 4456450
|
|
next
|
|
edit "Bill-DNS"
|
|
set type default
|
|
set internet-service-id 4456451
|
|
next
|
|
edit "Bill-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 4456452
|
|
next
|
|
edit "Bill-SSH"
|
|
set type default
|
|
set internet-service-id 4456454
|
|
next
|
|
edit "Bill-FTP"
|
|
set type default
|
|
set internet-service-id 4456455
|
|
next
|
|
edit "Bill-NTP"
|
|
set type default
|
|
set internet-service-id 4456456
|
|
next
|
|
edit "Bill-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 4456457
|
|
next
|
|
edit "Bill-LDAP"
|
|
set type default
|
|
set internet-service-id 4456462
|
|
next
|
|
edit "Bill-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 4456463
|
|
next
|
|
edit "Bill-RTMP"
|
|
set type default
|
|
set internet-service-id 4456464
|
|
next
|
|
edit "Bill-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 4456472
|
|
next
|
|
edit "Shopify-Other"
|
|
set type default
|
|
set internet-service-id 4521984
|
|
next
|
|
edit "Shopify-Web"
|
|
set type default
|
|
set internet-service-id 4521985
|
|
next
|
|
edit "Shopify-ICMP"
|
|
set type default
|
|
set internet-service-id 4521986
|
|
next
|
|
edit "Shopify-DNS"
|
|
set type default
|
|
set internet-service-id 4521987
|
|
next
|
|
edit "Shopify-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 4521988
|
|
next
|
|
edit "Shopify-SSH"
|
|
set type default
|
|
set internet-service-id 4521990
|
|
next
|
|
edit "Shopify-FTP"
|
|
set type default
|
|
set internet-service-id 4521991
|
|
next
|
|
edit "Shopify-NTP"
|
|
set type default
|
|
set internet-service-id 4521992
|
|
next
|
|
edit "Shopify-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 4521993
|
|
next
|
|
edit "Shopify-LDAP"
|
|
set type default
|
|
set internet-service-id 4521998
|
|
next
|
|
edit "Shopify-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 4521999
|
|
next
|
|
edit "Shopify-RTMP"
|
|
set type default
|
|
set internet-service-id 4522000
|
|
next
|
|
edit "Shopify-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 4522008
|
|
next
|
|
edit "MuleSoft-Other"
|
|
set type default
|
|
set internet-service-id 4587520
|
|
next
|
|
edit "MuleSoft-Web"
|
|
set type default
|
|
set internet-service-id 4587521
|
|
next
|
|
edit "MuleSoft-ICMP"
|
|
set type default
|
|
set internet-service-id 4587522
|
|
next
|
|
edit "MuleSoft-DNS"
|
|
set type default
|
|
set internet-service-id 4587523
|
|
next
|
|
edit "MuleSoft-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 4587524
|
|
next
|
|
edit "MuleSoft-SSH"
|
|
set type default
|
|
set internet-service-id 4587526
|
|
next
|
|
edit "MuleSoft-FTP"
|
|
set type default
|
|
set internet-service-id 4587527
|
|
next
|
|
edit "MuleSoft-NTP"
|
|
set type default
|
|
set internet-service-id 4587528
|
|
next
|
|
edit "MuleSoft-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 4587529
|
|
next
|
|
edit "MuleSoft-LDAP"
|
|
set type default
|
|
set internet-service-id 4587534
|
|
next
|
|
edit "MuleSoft-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 4587535
|
|
next
|
|
edit "MuleSoft-RTMP"
|
|
set type default
|
|
set internet-service-id 4587536
|
|
next
|
|
edit "MuleSoft-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 4587544
|
|
next
|
|
edit "Cornerstone-Other"
|
|
set type default
|
|
set internet-service-id 4653056
|
|
next
|
|
edit "Cornerstone-Web"
|
|
set type default
|
|
set internet-service-id 4653057
|
|
next
|
|
edit "Cornerstone-ICMP"
|
|
set type default
|
|
set internet-service-id 4653058
|
|
next
|
|
edit "Cornerstone-DNS"
|
|
set type default
|
|
set internet-service-id 4653059
|
|
next
|
|
edit "Cornerstone-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 4653060
|
|
next
|
|
edit "Cornerstone-SSH"
|
|
set type default
|
|
set internet-service-id 4653062
|
|
next
|
|
edit "Cornerstone-FTP"
|
|
set type default
|
|
set internet-service-id 4653063
|
|
next
|
|
edit "Cornerstone-NTP"
|
|
set type default
|
|
set internet-service-id 4653064
|
|
next
|
|
edit "Cornerstone-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 4653065
|
|
next
|
|
edit "Cornerstone-LDAP"
|
|
set type default
|
|
set internet-service-id 4653070
|
|
next
|
|
edit "Cornerstone-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 4653071
|
|
next
|
|
edit "Cornerstone-RTMP"
|
|
set type default
|
|
set internet-service-id 4653072
|
|
next
|
|
edit "Cornerstone-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 4653080
|
|
next
|
|
edit "Eventbrite-Other"
|
|
set type default
|
|
set internet-service-id 4718592
|
|
next
|
|
edit "Eventbrite-Web"
|
|
set type default
|
|
set internet-service-id 4718593
|
|
next
|
|
edit "Eventbrite-ICMP"
|
|
set type default
|
|
set internet-service-id 4718594
|
|
next
|
|
edit "Eventbrite-DNS"
|
|
set type default
|
|
set internet-service-id 4718595
|
|
next
|
|
edit "Eventbrite-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 4718596
|
|
next
|
|
edit "Eventbrite-SSH"
|
|
set type default
|
|
set internet-service-id 4718598
|
|
next
|
|
edit "Eventbrite-FTP"
|
|
set type default
|
|
set internet-service-id 4718599
|
|
next
|
|
edit "Eventbrite-NTP"
|
|
set type default
|
|
set internet-service-id 4718600
|
|
next
|
|
edit "Eventbrite-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 4718601
|
|
next
|
|
edit "Eventbrite-LDAP"
|
|
set type default
|
|
set internet-service-id 4718606
|
|
next
|
|
edit "Eventbrite-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 4718607
|
|
next
|
|
edit "Eventbrite-RTMP"
|
|
set type default
|
|
set internet-service-id 4718608
|
|
next
|
|
edit "Eventbrite-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 4718616
|
|
next
|
|
edit "Paychex-Other"
|
|
set type default
|
|
set internet-service-id 4784128
|
|
next
|
|
edit "Paychex-Web"
|
|
set type default
|
|
set internet-service-id 4784129
|
|
next
|
|
edit "Paychex-ICMP"
|
|
set type default
|
|
set internet-service-id 4784130
|
|
next
|
|
edit "Paychex-DNS"
|
|
set type default
|
|
set internet-service-id 4784131
|
|
next
|
|
edit "Paychex-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 4784132
|
|
next
|
|
edit "Paychex-SSH"
|
|
set type default
|
|
set internet-service-id 4784134
|
|
next
|
|
edit "Paychex-FTP"
|
|
set type default
|
|
set internet-service-id 4784135
|
|
next
|
|
edit "Paychex-NTP"
|
|
set type default
|
|
set internet-service-id 4784136
|
|
next
|
|
edit "Paychex-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 4784137
|
|
next
|
|
edit "Paychex-LDAP"
|
|
set type default
|
|
set internet-service-id 4784142
|
|
next
|
|
edit "Paychex-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 4784143
|
|
next
|
|
edit "Paychex-RTMP"
|
|
set type default
|
|
set internet-service-id 4784144
|
|
next
|
|
edit "Paychex-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 4784152
|
|
next
|
|
edit "NewRelic-Other"
|
|
set type default
|
|
set internet-service-id 4849664
|
|
next
|
|
edit "NewRelic-Web"
|
|
set type default
|
|
set internet-service-id 4849665
|
|
next
|
|
edit "NewRelic-ICMP"
|
|
set type default
|
|
set internet-service-id 4849666
|
|
next
|
|
edit "NewRelic-DNS"
|
|
set type default
|
|
set internet-service-id 4849667
|
|
next
|
|
edit "NewRelic-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 4849668
|
|
next
|
|
edit "NewRelic-SSH"
|
|
set type default
|
|
set internet-service-id 4849670
|
|
next
|
|
edit "NewRelic-FTP"
|
|
set type default
|
|
set internet-service-id 4849671
|
|
next
|
|
edit "NewRelic-NTP"
|
|
set type default
|
|
set internet-service-id 4849672
|
|
next
|
|
edit "NewRelic-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 4849673
|
|
next
|
|
edit "NewRelic-LDAP"
|
|
set type default
|
|
set internet-service-id 4849678
|
|
next
|
|
edit "NewRelic-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 4849679
|
|
next
|
|
edit "NewRelic-RTMP"
|
|
set type default
|
|
set internet-service-id 4849680
|
|
next
|
|
edit "NewRelic-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 4849688
|
|
next
|
|
edit "Splunk-Other"
|
|
set type default
|
|
set internet-service-id 4915200
|
|
next
|
|
edit "Splunk-Web"
|
|
set type default
|
|
set internet-service-id 4915201
|
|
next
|
|
edit "Splunk-ICMP"
|
|
set type default
|
|
set internet-service-id 4915202
|
|
next
|
|
edit "Splunk-DNS"
|
|
set type default
|
|
set internet-service-id 4915203
|
|
next
|
|
edit "Splunk-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 4915204
|
|
next
|
|
edit "Splunk-SSH"
|
|
set type default
|
|
set internet-service-id 4915206
|
|
next
|
|
edit "Splunk-FTP"
|
|
set type default
|
|
set internet-service-id 4915207
|
|
next
|
|
edit "Splunk-NTP"
|
|
set type default
|
|
set internet-service-id 4915208
|
|
next
|
|
edit "Splunk-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 4915209
|
|
next
|
|
edit "Splunk-LDAP"
|
|
set type default
|
|
set internet-service-id 4915214
|
|
next
|
|
edit "Splunk-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 4915215
|
|
next
|
|
edit "Splunk-RTMP"
|
|
set type default
|
|
set internet-service-id 4915216
|
|
next
|
|
edit "Splunk-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 4915224
|
|
next
|
|
edit "Domo-Other"
|
|
set type default
|
|
set internet-service-id 4980736
|
|
next
|
|
edit "Domo-Web"
|
|
set type default
|
|
set internet-service-id 4980737
|
|
next
|
|
edit "Domo-ICMP"
|
|
set type default
|
|
set internet-service-id 4980738
|
|
next
|
|
edit "Domo-DNS"
|
|
set type default
|
|
set internet-service-id 4980739
|
|
next
|
|
edit "Domo-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 4980740
|
|
next
|
|
edit "Domo-SSH"
|
|
set type default
|
|
set internet-service-id 4980742
|
|
next
|
|
edit "Domo-FTP"
|
|
set type default
|
|
set internet-service-id 4980743
|
|
next
|
|
edit "Domo-NTP"
|
|
set type default
|
|
set internet-service-id 4980744
|
|
next
|
|
edit "Domo-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 4980745
|
|
next
|
|
edit "Domo-LDAP"
|
|
set type default
|
|
set internet-service-id 4980750
|
|
next
|
|
edit "Domo-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 4980751
|
|
next
|
|
edit "Domo-RTMP"
|
|
set type default
|
|
set internet-service-id 4980752
|
|
next
|
|
edit "Domo-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 4980760
|
|
next
|
|
edit "FreshBooks-Other"
|
|
set type default
|
|
set internet-service-id 5046272
|
|
next
|
|
edit "FreshBooks-Web"
|
|
set type default
|
|
set internet-service-id 5046273
|
|
next
|
|
edit "FreshBooks-ICMP"
|
|
set type default
|
|
set internet-service-id 5046274
|
|
next
|
|
edit "FreshBooks-DNS"
|
|
set type default
|
|
set internet-service-id 5046275
|
|
next
|
|
edit "FreshBooks-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 5046276
|
|
next
|
|
edit "FreshBooks-SSH"
|
|
set type default
|
|
set internet-service-id 5046278
|
|
next
|
|
edit "FreshBooks-FTP"
|
|
set type default
|
|
set internet-service-id 5046279
|
|
next
|
|
edit "FreshBooks-NTP"
|
|
set type default
|
|
set internet-service-id 5046280
|
|
next
|
|
edit "FreshBooks-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 5046281
|
|
next
|
|
edit "FreshBooks-LDAP"
|
|
set type default
|
|
set internet-service-id 5046286
|
|
next
|
|
edit "FreshBooks-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 5046287
|
|
next
|
|
edit "FreshBooks-RTMP"
|
|
set type default
|
|
set internet-service-id 5046288
|
|
next
|
|
edit "FreshBooks-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 5046296
|
|
next
|
|
edit "Tableau-Other"
|
|
set type default
|
|
set internet-service-id 5111808
|
|
next
|
|
edit "Tableau-Web"
|
|
set type default
|
|
set internet-service-id 5111809
|
|
next
|
|
edit "Tableau-ICMP"
|
|
set type default
|
|
set internet-service-id 5111810
|
|
next
|
|
edit "Tableau-DNS"
|
|
set type default
|
|
set internet-service-id 5111811
|
|
next
|
|
edit "Tableau-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 5111812
|
|
next
|
|
edit "Tableau-SSH"
|
|
set type default
|
|
set internet-service-id 5111814
|
|
next
|
|
edit "Tableau-FTP"
|
|
set type default
|
|
set internet-service-id 5111815
|
|
next
|
|
edit "Tableau-NTP"
|
|
set type default
|
|
set internet-service-id 5111816
|
|
next
|
|
edit "Tableau-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 5111817
|
|
next
|
|
edit "Tableau-LDAP"
|
|
set type default
|
|
set internet-service-id 5111822
|
|
next
|
|
edit "Tableau-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 5111823
|
|
next
|
|
edit "Tableau-RTMP"
|
|
set type default
|
|
set internet-service-id 5111824
|
|
next
|
|
edit "Tableau-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 5111832
|
|
next
|
|
edit "Druva-Other"
|
|
set type default
|
|
set internet-service-id 5177344
|
|
next
|
|
edit "Druva-Web"
|
|
set type default
|
|
set internet-service-id 5177345
|
|
next
|
|
edit "Druva-ICMP"
|
|
set type default
|
|
set internet-service-id 5177346
|
|
next
|
|
edit "Druva-DNS"
|
|
set type default
|
|
set internet-service-id 5177347
|
|
next
|
|
edit "Druva-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 5177348
|
|
next
|
|
edit "Druva-SSH"
|
|
set type default
|
|
set internet-service-id 5177350
|
|
next
|
|
edit "Druva-FTP"
|
|
set type default
|
|
set internet-service-id 5177351
|
|
next
|
|
edit "Druva-NTP"
|
|
set type default
|
|
set internet-service-id 5177352
|
|
next
|
|
edit "Druva-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 5177353
|
|
next
|
|
edit "Druva-LDAP"
|
|
set type default
|
|
set internet-service-id 5177358
|
|
next
|
|
edit "Druva-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 5177359
|
|
next
|
|
edit "Druva-RTMP"
|
|
set type default
|
|
set internet-service-id 5177360
|
|
next
|
|
edit "Druva-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 5177368
|
|
next
|
|
edit "Act-on-Other"
|
|
set type default
|
|
set internet-service-id 5242880
|
|
next
|
|
edit "Act-on-Web"
|
|
set type default
|
|
set internet-service-id 5242881
|
|
next
|
|
edit "Act-on-ICMP"
|
|
set type default
|
|
set internet-service-id 5242882
|
|
next
|
|
edit "Act-on-DNS"
|
|
set type default
|
|
set internet-service-id 5242883
|
|
next
|
|
edit "Act-on-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 5242884
|
|
next
|
|
edit "Act-on-SSH"
|
|
set type default
|
|
set internet-service-id 5242886
|
|
next
|
|
edit "Act-on-FTP"
|
|
set type default
|
|
set internet-service-id 5242887
|
|
next
|
|
edit "Act-on-NTP"
|
|
set type default
|
|
set internet-service-id 5242888
|
|
next
|
|
edit "Act-on-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 5242889
|
|
next
|
|
edit "Act-on-LDAP"
|
|
set type default
|
|
set internet-service-id 5242894
|
|
next
|
|
edit "Act-on-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 5242895
|
|
next
|
|
edit "Act-on-RTMP"
|
|
set type default
|
|
set internet-service-id 5242896
|
|
next
|
|
edit "Act-on-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 5242904
|
|
next
|
|
edit "GoodData-Other"
|
|
set type default
|
|
set internet-service-id 5308416
|
|
next
|
|
edit "GoodData-Web"
|
|
set type default
|
|
set internet-service-id 5308417
|
|
next
|
|
edit "GoodData-ICMP"
|
|
set type default
|
|
set internet-service-id 5308418
|
|
next
|
|
edit "GoodData-DNS"
|
|
set type default
|
|
set internet-service-id 5308419
|
|
next
|
|
edit "GoodData-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 5308420
|
|
next
|
|
edit "GoodData-SSH"
|
|
set type default
|
|
set internet-service-id 5308422
|
|
next
|
|
edit "GoodData-FTP"
|
|
set type default
|
|
set internet-service-id 5308423
|
|
next
|
|
edit "GoodData-NTP"
|
|
set type default
|
|
set internet-service-id 5308424
|
|
next
|
|
edit "GoodData-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 5308425
|
|
next
|
|
edit "GoodData-LDAP"
|
|
set type default
|
|
set internet-service-id 5308430
|
|
next
|
|
edit "GoodData-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 5308431
|
|
next
|
|
edit "GoodData-RTMP"
|
|
set type default
|
|
set internet-service-id 5308432
|
|
next
|
|
edit "GoodData-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 5308440
|
|
next
|
|
edit "SurveyMonkey-Other"
|
|
set type default
|
|
set internet-service-id 5373952
|
|
next
|
|
edit "SurveyMonkey-Web"
|
|
set type default
|
|
set internet-service-id 5373953
|
|
next
|
|
edit "SurveyMonkey-ICMP"
|
|
set type default
|
|
set internet-service-id 5373954
|
|
next
|
|
edit "SurveyMonkey-DNS"
|
|
set type default
|
|
set internet-service-id 5373955
|
|
next
|
|
edit "SurveyMonkey-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 5373956
|
|
next
|
|
edit "SurveyMonkey-SSH"
|
|
set type default
|
|
set internet-service-id 5373958
|
|
next
|
|
edit "SurveyMonkey-FTP"
|
|
set type default
|
|
set internet-service-id 5373959
|
|
next
|
|
edit "SurveyMonkey-NTP"
|
|
set type default
|
|
set internet-service-id 5373960
|
|
next
|
|
edit "SurveyMonkey-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 5373961
|
|
next
|
|
edit "SurveyMonkey-LDAP"
|
|
set type default
|
|
set internet-service-id 5373966
|
|
next
|
|
edit "SurveyMonkey-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 5373967
|
|
next
|
|
edit "SurveyMonkey-RTMP"
|
|
set type default
|
|
set internet-service-id 5373968
|
|
next
|
|
edit "SurveyMonkey-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 5373976
|
|
next
|
|
edit "Cvent-Other"
|
|
set type default
|
|
set internet-service-id 5439488
|
|
next
|
|
edit "Cvent-Web"
|
|
set type default
|
|
set internet-service-id 5439489
|
|
next
|
|
edit "Cvent-ICMP"
|
|
set type default
|
|
set internet-service-id 5439490
|
|
next
|
|
edit "Cvent-DNS"
|
|
set type default
|
|
set internet-service-id 5439491
|
|
next
|
|
edit "Cvent-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 5439492
|
|
next
|
|
edit "Cvent-SSH"
|
|
set type default
|
|
set internet-service-id 5439494
|
|
next
|
|
edit "Cvent-FTP"
|
|
set type default
|
|
set internet-service-id 5439495
|
|
next
|
|
edit "Cvent-NTP"
|
|
set type default
|
|
set internet-service-id 5439496
|
|
next
|
|
edit "Cvent-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 5439497
|
|
next
|
|
edit "Cvent-LDAP"
|
|
set type default
|
|
set internet-service-id 5439502
|
|
next
|
|
edit "Cvent-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 5439503
|
|
next
|
|
edit "Cvent-RTMP"
|
|
set type default
|
|
set internet-service-id 5439504
|
|
next
|
|
edit "Cvent-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 5439512
|
|
next
|
|
edit "Blackbaud-Other"
|
|
set type default
|
|
set internet-service-id 5505024
|
|
next
|
|
edit "Blackbaud-Web"
|
|
set type default
|
|
set internet-service-id 5505025
|
|
next
|
|
edit "Blackbaud-ICMP"
|
|
set type default
|
|
set internet-service-id 5505026
|
|
next
|
|
edit "Blackbaud-DNS"
|
|
set type default
|
|
set internet-service-id 5505027
|
|
next
|
|
edit "Blackbaud-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 5505028
|
|
next
|
|
edit "Blackbaud-SSH"
|
|
set type default
|
|
set internet-service-id 5505030
|
|
next
|
|
edit "Blackbaud-FTP"
|
|
set type default
|
|
set internet-service-id 5505031
|
|
next
|
|
edit "Blackbaud-NTP"
|
|
set type default
|
|
set internet-service-id 5505032
|
|
next
|
|
edit "Blackbaud-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 5505033
|
|
next
|
|
edit "Blackbaud-LDAP"
|
|
set type default
|
|
set internet-service-id 5505038
|
|
next
|
|
edit "Blackbaud-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 5505039
|
|
next
|
|
edit "Blackbaud-RTMP"
|
|
set type default
|
|
set internet-service-id 5505040
|
|
next
|
|
edit "Blackbaud-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 5505048
|
|
next
|
|
edit "InsideSales-Other"
|
|
set type default
|
|
set internet-service-id 5570560
|
|
next
|
|
edit "InsideSales-Web"
|
|
set type default
|
|
set internet-service-id 5570561
|
|
next
|
|
edit "InsideSales-ICMP"
|
|
set type default
|
|
set internet-service-id 5570562
|
|
next
|
|
edit "InsideSales-DNS"
|
|
set type default
|
|
set internet-service-id 5570563
|
|
next
|
|
edit "InsideSales-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 5570564
|
|
next
|
|
edit "InsideSales-SSH"
|
|
set type default
|
|
set internet-service-id 5570566
|
|
next
|
|
edit "InsideSales-FTP"
|
|
set type default
|
|
set internet-service-id 5570567
|
|
next
|
|
edit "InsideSales-NTP"
|
|
set type default
|
|
set internet-service-id 5570568
|
|
next
|
|
edit "InsideSales-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 5570569
|
|
next
|
|
edit "InsideSales-LDAP"
|
|
set type default
|
|
set internet-service-id 5570574
|
|
next
|
|
edit "InsideSales-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 5570575
|
|
next
|
|
edit "InsideSales-RTMP"
|
|
set type default
|
|
set internet-service-id 5570576
|
|
next
|
|
edit "InsideSales-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 5570584
|
|
next
|
|
edit "ServiceMax-Other"
|
|
set type default
|
|
set internet-service-id 5636096
|
|
next
|
|
edit "ServiceMax-Web"
|
|
set type default
|
|
set internet-service-id 5636097
|
|
next
|
|
edit "ServiceMax-ICMP"
|
|
set type default
|
|
set internet-service-id 5636098
|
|
next
|
|
edit "ServiceMax-DNS"
|
|
set type default
|
|
set internet-service-id 5636099
|
|
next
|
|
edit "ServiceMax-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 5636100
|
|
next
|
|
edit "ServiceMax-SSH"
|
|
set type default
|
|
set internet-service-id 5636102
|
|
next
|
|
edit "ServiceMax-FTP"
|
|
set type default
|
|
set internet-service-id 5636103
|
|
next
|
|
edit "ServiceMax-NTP"
|
|
set type default
|
|
set internet-service-id 5636104
|
|
next
|
|
edit "ServiceMax-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 5636105
|
|
next
|
|
edit "ServiceMax-LDAP"
|
|
set type default
|
|
set internet-service-id 5636110
|
|
next
|
|
edit "ServiceMax-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 5636111
|
|
next
|
|
edit "ServiceMax-RTMP"
|
|
set type default
|
|
set internet-service-id 5636112
|
|
next
|
|
edit "ServiceMax-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 5636120
|
|
next
|
|
edit "Apptio-Other"
|
|
set type default
|
|
set internet-service-id 5701632
|
|
next
|
|
edit "Apptio-Web"
|
|
set type default
|
|
set internet-service-id 5701633
|
|
next
|
|
edit "Apptio-ICMP"
|
|
set type default
|
|
set internet-service-id 5701634
|
|
next
|
|
edit "Apptio-DNS"
|
|
set type default
|
|
set internet-service-id 5701635
|
|
next
|
|
edit "Apptio-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 5701636
|
|
next
|
|
edit "Apptio-SSH"
|
|
set type default
|
|
set internet-service-id 5701638
|
|
next
|
|
edit "Apptio-FTP"
|
|
set type default
|
|
set internet-service-id 5701639
|
|
next
|
|
edit "Apptio-NTP"
|
|
set type default
|
|
set internet-service-id 5701640
|
|
next
|
|
edit "Apptio-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 5701641
|
|
next
|
|
edit "Apptio-LDAP"
|
|
set type default
|
|
set internet-service-id 5701646
|
|
next
|
|
edit "Apptio-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 5701647
|
|
next
|
|
edit "Apptio-RTMP"
|
|
set type default
|
|
set internet-service-id 5701648
|
|
next
|
|
edit "Apptio-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 5701656
|
|
next
|
|
edit "Veracode-Other"
|
|
set type default
|
|
set internet-service-id 5767168
|
|
next
|
|
edit "Veracode-Web"
|
|
set type default
|
|
set internet-service-id 5767169
|
|
next
|
|
edit "Veracode-ICMP"
|
|
set type default
|
|
set internet-service-id 5767170
|
|
next
|
|
edit "Veracode-DNS"
|
|
set type default
|
|
set internet-service-id 5767171
|
|
next
|
|
edit "Veracode-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 5767172
|
|
next
|
|
edit "Veracode-SSH"
|
|
set type default
|
|
set internet-service-id 5767174
|
|
next
|
|
edit "Veracode-FTP"
|
|
set type default
|
|
set internet-service-id 5767175
|
|
next
|
|
edit "Veracode-NTP"
|
|
set type default
|
|
set internet-service-id 5767176
|
|
next
|
|
edit "Veracode-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 5767177
|
|
next
|
|
edit "Veracode-LDAP"
|
|
set type default
|
|
set internet-service-id 5767182
|
|
next
|
|
edit "Veracode-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 5767183
|
|
next
|
|
edit "Veracode-RTMP"
|
|
set type default
|
|
set internet-service-id 5767184
|
|
next
|
|
edit "Veracode-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 5767192
|
|
next
|
|
edit "Anaplan-Other"
|
|
set type default
|
|
set internet-service-id 5832704
|
|
next
|
|
edit "Anaplan-Web"
|
|
set type default
|
|
set internet-service-id 5832705
|
|
next
|
|
edit "Anaplan-ICMP"
|
|
set type default
|
|
set internet-service-id 5832706
|
|
next
|
|
edit "Anaplan-DNS"
|
|
set type default
|
|
set internet-service-id 5832707
|
|
next
|
|
edit "Anaplan-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 5832708
|
|
next
|
|
edit "Anaplan-SSH"
|
|
set type default
|
|
set internet-service-id 5832710
|
|
next
|
|
edit "Anaplan-FTP"
|
|
set type default
|
|
set internet-service-id 5832711
|
|
next
|
|
edit "Anaplan-NTP"
|
|
set type default
|
|
set internet-service-id 5832712
|
|
next
|
|
edit "Anaplan-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 5832713
|
|
next
|
|
edit "Anaplan-LDAP"
|
|
set type default
|
|
set internet-service-id 5832718
|
|
next
|
|
edit "Anaplan-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 5832719
|
|
next
|
|
edit "Anaplan-RTMP"
|
|
set type default
|
|
set internet-service-id 5832720
|
|
next
|
|
edit "Anaplan-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 5832728
|
|
next
|
|
edit "Rapid7-Other"
|
|
set type default
|
|
set internet-service-id 5898240
|
|
next
|
|
edit "Rapid7-Web"
|
|
set type default
|
|
set internet-service-id 5898241
|
|
next
|
|
edit "Rapid7-ICMP"
|
|
set type default
|
|
set internet-service-id 5898242
|
|
next
|
|
edit "Rapid7-DNS"
|
|
set type default
|
|
set internet-service-id 5898243
|
|
next
|
|
edit "Rapid7-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 5898244
|
|
next
|
|
edit "Rapid7-SSH"
|
|
set type default
|
|
set internet-service-id 5898246
|
|
next
|
|
edit "Rapid7-FTP"
|
|
set type default
|
|
set internet-service-id 5898247
|
|
next
|
|
edit "Rapid7-NTP"
|
|
set type default
|
|
set internet-service-id 5898248
|
|
next
|
|
edit "Rapid7-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 5898249
|
|
next
|
|
edit "Rapid7-LDAP"
|
|
set type default
|
|
set internet-service-id 5898254
|
|
next
|
|
edit "Rapid7-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 5898255
|
|
next
|
|
edit "Rapid7-RTMP"
|
|
set type default
|
|
set internet-service-id 5898256
|
|
next
|
|
edit "Rapid7-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 5898264
|
|
next
|
|
edit "ESET-Eset.Service"
|
|
set type default
|
|
set internet-service-id 6029426
|
|
next
|
|
edit "Slack-Other"
|
|
set type default
|
|
set internet-service-id 6094848
|
|
next
|
|
edit "Slack-Web"
|
|
set type default
|
|
set internet-service-id 6094849
|
|
next
|
|
edit "Slack-ICMP"
|
|
set type default
|
|
set internet-service-id 6094850
|
|
next
|
|
edit "Slack-DNS"
|
|
set type default
|
|
set internet-service-id 6094851
|
|
next
|
|
edit "Slack-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 6094852
|
|
next
|
|
edit "Slack-SSH"
|
|
set type default
|
|
set internet-service-id 6094854
|
|
next
|
|
edit "Slack-FTP"
|
|
set type default
|
|
set internet-service-id 6094855
|
|
next
|
|
edit "Slack-NTP"
|
|
set type default
|
|
set internet-service-id 6094856
|
|
next
|
|
edit "Slack-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 6094857
|
|
next
|
|
edit "Slack-LDAP"
|
|
set type default
|
|
set internet-service-id 6094862
|
|
next
|
|
edit "Slack-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 6094863
|
|
next
|
|
edit "Slack-RTMP"
|
|
set type default
|
|
set internet-service-id 6094864
|
|
next
|
|
edit "Slack-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 6094872
|
|
next
|
|
edit "ADP-Other"
|
|
set type default
|
|
set internet-service-id 6160384
|
|
next
|
|
edit "ADP-Web"
|
|
set type default
|
|
set internet-service-id 6160385
|
|
next
|
|
edit "ADP-ICMP"
|
|
set type default
|
|
set internet-service-id 6160386
|
|
next
|
|
edit "ADP-DNS"
|
|
set type default
|
|
set internet-service-id 6160387
|
|
next
|
|
edit "ADP-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 6160388
|
|
next
|
|
edit "ADP-SSH"
|
|
set type default
|
|
set internet-service-id 6160390
|
|
next
|
|
edit "ADP-FTP"
|
|
set type default
|
|
set internet-service-id 6160391
|
|
next
|
|
edit "ADP-NTP"
|
|
set type default
|
|
set internet-service-id 6160392
|
|
next
|
|
edit "ADP-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 6160393
|
|
next
|
|
edit "ADP-LDAP"
|
|
set type default
|
|
set internet-service-id 6160398
|
|
next
|
|
edit "ADP-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 6160399
|
|
next
|
|
edit "ADP-RTMP"
|
|
set type default
|
|
set internet-service-id 6160400
|
|
next
|
|
edit "ADP-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 6160408
|
|
next
|
|
edit "Blackboard-Other"
|
|
set type default
|
|
set internet-service-id 6225920
|
|
next
|
|
edit "Blackboard-Web"
|
|
set type default
|
|
set internet-service-id 6225921
|
|
next
|
|
edit "Blackboard-ICMP"
|
|
set type default
|
|
set internet-service-id 6225922
|
|
next
|
|
edit "Blackboard-DNS"
|
|
set type default
|
|
set internet-service-id 6225923
|
|
next
|
|
edit "Blackboard-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 6225924
|
|
next
|
|
edit "Blackboard-SSH"
|
|
set type default
|
|
set internet-service-id 6225926
|
|
next
|
|
edit "Blackboard-FTP"
|
|
set type default
|
|
set internet-service-id 6225927
|
|
next
|
|
edit "Blackboard-NTP"
|
|
set type default
|
|
set internet-service-id 6225928
|
|
next
|
|
edit "Blackboard-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 6225929
|
|
next
|
|
edit "Blackboard-LDAP"
|
|
set type default
|
|
set internet-service-id 6225934
|
|
next
|
|
edit "Blackboard-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 6225935
|
|
next
|
|
edit "Blackboard-RTMP"
|
|
set type default
|
|
set internet-service-id 6225936
|
|
next
|
|
edit "Blackboard-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 6225944
|
|
next
|
|
edit "SAP-Other"
|
|
set type default
|
|
set internet-service-id 6291456
|
|
next
|
|
edit "SAP-Web"
|
|
set type default
|
|
set internet-service-id 6291457
|
|
next
|
|
edit "SAP-ICMP"
|
|
set type default
|
|
set internet-service-id 6291458
|
|
next
|
|
edit "SAP-DNS"
|
|
set type default
|
|
set internet-service-id 6291459
|
|
next
|
|
edit "SAP-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 6291460
|
|
next
|
|
edit "SAP-SSH"
|
|
set type default
|
|
set internet-service-id 6291462
|
|
next
|
|
edit "SAP-FTP"
|
|
set type default
|
|
set internet-service-id 6291463
|
|
next
|
|
edit "SAP-NTP"
|
|
set type default
|
|
set internet-service-id 6291464
|
|
next
|
|
edit "SAP-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 6291465
|
|
next
|
|
edit "SAP-LDAP"
|
|
set type default
|
|
set internet-service-id 6291470
|
|
next
|
|
edit "SAP-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 6291471
|
|
next
|
|
edit "SAP-RTMP"
|
|
set type default
|
|
set internet-service-id 6291472
|
|
next
|
|
edit "SAP-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 6291480
|
|
next
|
|
edit "Snap-Snapchat"
|
|
set type default
|
|
set internet-service-id 6357108
|
|
next
|
|
edit "Zoom.us-Zoom.Meeting"
|
|
set type default
|
|
set internet-service-id 6422646
|
|
next
|
|
edit "Sophos-Other"
|
|
set type default
|
|
set internet-service-id 6488064
|
|
next
|
|
edit "Sophos-Web"
|
|
set type default
|
|
set internet-service-id 6488065
|
|
next
|
|
edit "Sophos-ICMP"
|
|
set type default
|
|
set internet-service-id 6488066
|
|
next
|
|
edit "Sophos-DNS"
|
|
set type default
|
|
set internet-service-id 6488067
|
|
next
|
|
edit "Sophos-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 6488068
|
|
next
|
|
edit "Sophos-SSH"
|
|
set type default
|
|
set internet-service-id 6488070
|
|
next
|
|
edit "Sophos-FTP"
|
|
set type default
|
|
set internet-service-id 6488071
|
|
next
|
|
edit "Sophos-NTP"
|
|
set type default
|
|
set internet-service-id 6488072
|
|
next
|
|
edit "Sophos-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 6488073
|
|
next
|
|
edit "Sophos-LDAP"
|
|
set type default
|
|
set internet-service-id 6488078
|
|
next
|
|
edit "Sophos-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 6488079
|
|
next
|
|
edit "Sophos-RTMP"
|
|
set type default
|
|
set internet-service-id 6488080
|
|
next
|
|
edit "Sophos-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 6488088
|
|
next
|
|
edit "Cloudflare-Other"
|
|
set type default
|
|
set internet-service-id 6553600
|
|
next
|
|
edit "Cloudflare-Web"
|
|
set type default
|
|
set internet-service-id 6553601
|
|
next
|
|
edit "Cloudflare-ICMP"
|
|
set type default
|
|
set internet-service-id 6553602
|
|
next
|
|
edit "Cloudflare-DNS"
|
|
set type default
|
|
set internet-service-id 6553603
|
|
next
|
|
edit "Cloudflare-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 6553604
|
|
next
|
|
edit "Cloudflare-SSH"
|
|
set type default
|
|
set internet-service-id 6553606
|
|
next
|
|
edit "Cloudflare-FTP"
|
|
set type default
|
|
set internet-service-id 6553607
|
|
next
|
|
edit "Cloudflare-NTP"
|
|
set type default
|
|
set internet-service-id 6553608
|
|
next
|
|
edit "Cloudflare-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 6553609
|
|
next
|
|
edit "Cloudflare-LDAP"
|
|
set type default
|
|
set internet-service-id 6553614
|
|
next
|
|
edit "Cloudflare-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 6553615
|
|
next
|
|
edit "Cloudflare-RTMP"
|
|
set type default
|
|
set internet-service-id 6553616
|
|
next
|
|
edit "Cloudflare-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 6553624
|
|
next
|
|
edit "Pexip-Pexip.Meeting"
|
|
set type default
|
|
set internet-service-id 6619256
|
|
next
|
|
edit "Zscaler-Other"
|
|
set type default
|
|
set internet-service-id 6684672
|
|
next
|
|
edit "Zscaler-Web"
|
|
set type default
|
|
set internet-service-id 6684673
|
|
next
|
|
edit "Zscaler-ICMP"
|
|
set type default
|
|
set internet-service-id 6684674
|
|
next
|
|
edit "Zscaler-DNS"
|
|
set type default
|
|
set internet-service-id 6684675
|
|
next
|
|
edit "Zscaler-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 6684676
|
|
next
|
|
edit "Zscaler-SSH"
|
|
set type default
|
|
set internet-service-id 6684678
|
|
next
|
|
edit "Zscaler-FTP"
|
|
set type default
|
|
set internet-service-id 6684679
|
|
next
|
|
edit "Zscaler-NTP"
|
|
set type default
|
|
set internet-service-id 6684680
|
|
next
|
|
edit "Zscaler-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 6684681
|
|
next
|
|
edit "Zscaler-LDAP"
|
|
set type default
|
|
set internet-service-id 6684686
|
|
next
|
|
edit "Zscaler-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 6684687
|
|
next
|
|
edit "Zscaler-RTMP"
|
|
set type default
|
|
set internet-service-id 6684688
|
|
next
|
|
edit "Zscaler-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 6684696
|
|
next
|
|
edit "Zscaler-Zscaler.Cloud"
|
|
set type default
|
|
set internet-service-id 6684793
|
|
next
|
|
edit "Yandex-Other"
|
|
set type default
|
|
set internet-service-id 6750208
|
|
next
|
|
edit "Yandex-Web"
|
|
set type default
|
|
set internet-service-id 6750209
|
|
next
|
|
edit "Yandex-ICMP"
|
|
set type default
|
|
set internet-service-id 6750210
|
|
next
|
|
edit "Yandex-DNS"
|
|
set type default
|
|
set internet-service-id 6750211
|
|
next
|
|
edit "Yandex-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 6750212
|
|
next
|
|
edit "Yandex-SSH"
|
|
set type default
|
|
set internet-service-id 6750214
|
|
next
|
|
edit "Yandex-FTP"
|
|
set type default
|
|
set internet-service-id 6750215
|
|
next
|
|
edit "Yandex-NTP"
|
|
set type default
|
|
set internet-service-id 6750216
|
|
next
|
|
edit "Yandex-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 6750217
|
|
next
|
|
edit "Yandex-LDAP"
|
|
set type default
|
|
set internet-service-id 6750222
|
|
next
|
|
edit "Yandex-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 6750223
|
|
next
|
|
edit "Yandex-RTMP"
|
|
set type default
|
|
set internet-service-id 6750224
|
|
next
|
|
edit "Yandex-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 6750232
|
|
next
|
|
edit "mail.ru-Other"
|
|
set type default
|
|
set internet-service-id 6815744
|
|
next
|
|
edit "mail.ru-Web"
|
|
set type default
|
|
set internet-service-id 6815745
|
|
next
|
|
edit "mail.ru-ICMP"
|
|
set type default
|
|
set internet-service-id 6815746
|
|
next
|
|
edit "mail.ru-DNS"
|
|
set type default
|
|
set internet-service-id 6815747
|
|
next
|
|
edit "mail.ru-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 6815748
|
|
next
|
|
edit "mail.ru-SSH"
|
|
set type default
|
|
set internet-service-id 6815750
|
|
next
|
|
edit "mail.ru-FTP"
|
|
set type default
|
|
set internet-service-id 6815751
|
|
next
|
|
edit "mail.ru-NTP"
|
|
set type default
|
|
set internet-service-id 6815752
|
|
next
|
|
edit "mail.ru-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 6815753
|
|
next
|
|
edit "mail.ru-LDAP"
|
|
set type default
|
|
set internet-service-id 6815758
|
|
next
|
|
edit "mail.ru-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 6815759
|
|
next
|
|
edit "mail.ru-RTMP"
|
|
set type default
|
|
set internet-service-id 6815760
|
|
next
|
|
edit "mail.ru-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 6815768
|
|
next
|
|
edit "Alibaba-Other"
|
|
set type default
|
|
set internet-service-id 6881280
|
|
next
|
|
edit "Alibaba-Web"
|
|
set type default
|
|
set internet-service-id 6881281
|
|
next
|
|
edit "Alibaba-ICMP"
|
|
set type default
|
|
set internet-service-id 6881282
|
|
next
|
|
edit "Alibaba-DNS"
|
|
set type default
|
|
set internet-service-id 6881283
|
|
next
|
|
edit "Alibaba-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 6881284
|
|
next
|
|
edit "Alibaba-SSH"
|
|
set type default
|
|
set internet-service-id 6881286
|
|
next
|
|
edit "Alibaba-FTP"
|
|
set type default
|
|
set internet-service-id 6881287
|
|
next
|
|
edit "Alibaba-NTP"
|
|
set type default
|
|
set internet-service-id 6881288
|
|
next
|
|
edit "Alibaba-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 6881289
|
|
next
|
|
edit "Alibaba-LDAP"
|
|
set type default
|
|
set internet-service-id 6881294
|
|
next
|
|
edit "Alibaba-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 6881295
|
|
next
|
|
edit "Alibaba-RTMP"
|
|
set type default
|
|
set internet-service-id 6881296
|
|
next
|
|
edit "Alibaba-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 6881304
|
|
next
|
|
edit "Alibaba-Alibaba.Cloud"
|
|
set type default
|
|
set internet-service-id 6881402
|
|
next
|
|
edit "GoDaddy-Other"
|
|
set type default
|
|
set internet-service-id 6946816
|
|
next
|
|
edit "GoDaddy-Web"
|
|
set type default
|
|
set internet-service-id 6946817
|
|
next
|
|
edit "GoDaddy-ICMP"
|
|
set type default
|
|
set internet-service-id 6946818
|
|
next
|
|
edit "GoDaddy-DNS"
|
|
set type default
|
|
set internet-service-id 6946819
|
|
next
|
|
edit "GoDaddy-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 6946820
|
|
next
|
|
edit "GoDaddy-SSH"
|
|
set type default
|
|
set internet-service-id 6946822
|
|
next
|
|
edit "GoDaddy-FTP"
|
|
set type default
|
|
set internet-service-id 6946823
|
|
next
|
|
edit "GoDaddy-NTP"
|
|
set type default
|
|
set internet-service-id 6946824
|
|
next
|
|
edit "GoDaddy-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 6946825
|
|
next
|
|
edit "GoDaddy-LDAP"
|
|
set type default
|
|
set internet-service-id 6946830
|
|
next
|
|
edit "GoDaddy-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 6946831
|
|
next
|
|
edit "GoDaddy-RTMP"
|
|
set type default
|
|
set internet-service-id 6946832
|
|
next
|
|
edit "GoDaddy-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 6946840
|
|
next
|
|
edit "GoDaddy-GoDaddy.Email"
|
|
set type default
|
|
set internet-service-id 6946939
|
|
next
|
|
edit "Webroot-Webroot.SecureAnywhere"
|
|
set type default
|
|
set internet-service-id 7078013
|
|
next
|
|
edit "Avast-Other"
|
|
set type default
|
|
set internet-service-id 7143424
|
|
next
|
|
edit "Avast-Web"
|
|
set type default
|
|
set internet-service-id 7143425
|
|
next
|
|
edit "Avast-ICMP"
|
|
set type default
|
|
set internet-service-id 7143426
|
|
next
|
|
edit "Avast-DNS"
|
|
set type default
|
|
set internet-service-id 7143427
|
|
next
|
|
edit "Avast-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 7143428
|
|
next
|
|
edit "Avast-SSH"
|
|
set type default
|
|
set internet-service-id 7143430
|
|
next
|
|
edit "Avast-FTP"
|
|
set type default
|
|
set internet-service-id 7143431
|
|
next
|
|
edit "Avast-NTP"
|
|
set type default
|
|
set internet-service-id 7143432
|
|
next
|
|
edit "Avast-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 7143433
|
|
next
|
|
edit "Avast-LDAP"
|
|
set type default
|
|
set internet-service-id 7143438
|
|
next
|
|
edit "Avast-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 7143439
|
|
next
|
|
edit "Avast-RTMP"
|
|
set type default
|
|
set internet-service-id 7143440
|
|
next
|
|
edit "Avast-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 7143448
|
|
next
|
|
edit "Avast-Avast.Security"
|
|
set type default
|
|
set internet-service-id 7143550
|
|
next
|
|
edit "Wetransfer-Other"
|
|
set type default
|
|
set internet-service-id 7208960
|
|
next
|
|
edit "Wetransfer-Web"
|
|
set type default
|
|
set internet-service-id 7208961
|
|
next
|
|
edit "Wetransfer-ICMP"
|
|
set type default
|
|
set internet-service-id 7208962
|
|
next
|
|
edit "Wetransfer-DNS"
|
|
set type default
|
|
set internet-service-id 7208963
|
|
next
|
|
edit "Wetransfer-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 7208964
|
|
next
|
|
edit "Wetransfer-SSH"
|
|
set type default
|
|
set internet-service-id 7208966
|
|
next
|
|
edit "Wetransfer-FTP"
|
|
set type default
|
|
set internet-service-id 7208967
|
|
next
|
|
edit "Wetransfer-NTP"
|
|
set type default
|
|
set internet-service-id 7208968
|
|
next
|
|
edit "Wetransfer-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 7208969
|
|
next
|
|
edit "Wetransfer-LDAP"
|
|
set type default
|
|
set internet-service-id 7208974
|
|
next
|
|
edit "Wetransfer-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 7208975
|
|
next
|
|
edit "Wetransfer-RTMP"
|
|
set type default
|
|
set internet-service-id 7208976
|
|
next
|
|
edit "Wetransfer-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 7208984
|
|
next
|
|
edit "Sendgrid-Sendgrid.Email"
|
|
set type default
|
|
set internet-service-id 7274623
|
|
next
|
|
edit "Ubiquiti-UniFi"
|
|
set type default
|
|
set internet-service-id 7340160
|
|
next
|
|
edit "Lifesize-Lifesize.Cloud"
|
|
set type default
|
|
set internet-service-id 7405697
|
|
next
|
|
edit "Okta-Other"
|
|
set type default
|
|
set internet-service-id 7471104
|
|
next
|
|
edit "Okta-Web"
|
|
set type default
|
|
set internet-service-id 7471105
|
|
next
|
|
edit "Okta-ICMP"
|
|
set type default
|
|
set internet-service-id 7471106
|
|
next
|
|
edit "Okta-DNS"
|
|
set type default
|
|
set internet-service-id 7471107
|
|
next
|
|
edit "Okta-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 7471108
|
|
next
|
|
edit "Okta-SSH"
|
|
set type default
|
|
set internet-service-id 7471110
|
|
next
|
|
edit "Okta-FTP"
|
|
set type default
|
|
set internet-service-id 7471111
|
|
next
|
|
edit "Okta-NTP"
|
|
set type default
|
|
set internet-service-id 7471112
|
|
next
|
|
edit "Okta-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 7471113
|
|
next
|
|
edit "Okta-LDAP"
|
|
set type default
|
|
set internet-service-id 7471118
|
|
next
|
|
edit "Okta-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 7471119
|
|
next
|
|
edit "Okta-RTMP"
|
|
set type default
|
|
set internet-service-id 7471120
|
|
next
|
|
edit "Okta-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 7471128
|
|
next
|
|
edit "Apple-APNs"
|
|
set type default
|
|
set internet-service-id 196747
|
|
next
|
|
edit "Microsoft-Dynamics"
|
|
set type default
|
|
set internet-service-id 327837
|
|
next
|
|
edit "Microsoft-WNS"
|
|
set type default
|
|
set internet-service-id 327839
|
|
next
|
|
edit "Microsoft-Intune"
|
|
set type default
|
|
set internet-service-id 327886
|
|
next
|
|
edit "Microsoft-Office365.Published.Optimize"
|
|
set type default
|
|
set internet-service-id 327902
|
|
next
|
|
edit "Microsoft-Office365.Published.Allow"
|
|
set type default
|
|
set internet-service-id 327903
|
|
next
|
|
edit "Microsoft-Office365.Published.USGOV"
|
|
set type default
|
|
set internet-service-id 327917
|
|
next
|
|
edit "Microsoft-Azure.Monitor"
|
|
set type default
|
|
set internet-service-id 327958
|
|
next
|
|
edit "Microsoft-Azure.SQL"
|
|
set type default
|
|
set internet-service-id 327959
|
|
next
|
|
edit "Microsoft-Azure.AD"
|
|
set type default
|
|
set internet-service-id 327960
|
|
next
|
|
edit "Microsoft-Azure.Data.Factory"
|
|
set type default
|
|
set internet-service-id 327961
|
|
next
|
|
edit "Microsoft-Azure.Virtual.Desktop"
|
|
set type default
|
|
set internet-service-id 327962
|
|
next
|
|
edit "Microsoft-Azure.Power.BI"
|
|
set type default
|
|
set internet-service-id 327963
|
|
next
|
|
edit "Microsoft-Azure.Connectors"
|
|
set type default
|
|
set internet-service-id 327980
|
|
next
|
|
edit "Microsoft-Teams.Published.Worldwide.Optimize"
|
|
set type default
|
|
set internet-service-id 327991
|
|
next
|
|
edit "Microsoft-Teams.Published.Worldwide.Allow"
|
|
set type default
|
|
set internet-service-id 327992
|
|
next
|
|
edit "Microsoft-Azure.Front.Door"
|
|
set type default
|
|
set internet-service-id 327993
|
|
next
|
|
edit "Microsoft-Azure.Service.Bus"
|
|
set type default
|
|
set internet-service-id 328007
|
|
next
|
|
edit "Microsoft-Azure.Microsoft.Defender"
|
|
set type default
|
|
set internet-service-id 328009
|
|
next
|
|
edit "Microsoft-Azure.Resource.Manager"
|
|
set type default
|
|
set internet-service-id 328013
|
|
next
|
|
edit "Microsoft-Azure.Arc.Infrastructure"
|
|
set type default
|
|
set internet-service-id 328014
|
|
next
|
|
edit "Microsoft-Azure.Storage"
|
|
set type default
|
|
set internet-service-id 328015
|
|
next
|
|
edit "Microsoft-Azure.ATP"
|
|
set type default
|
|
set internet-service-id 328016
|
|
next
|
|
edit "Microsoft-Azure.Traffic.Manager"
|
|
set type default
|
|
set internet-service-id 328017
|
|
next
|
|
edit "Microsoft-Azure.Windows.Admin.Center"
|
|
set type default
|
|
set internet-service-id 328018
|
|
next
|
|
edit "Microsoft-Azure.KeyVault"
|
|
set type default
|
|
set internet-service-id 328021
|
|
next
|
|
edit "Microsoft-Azure.Databricks"
|
|
set type default
|
|
set internet-service-id 328034
|
|
next
|
|
edit "Microsoft-Azure.Event.Hub"
|
|
set type default
|
|
set internet-service-id 328035
|
|
next
|
|
edit "Microsoft-Azure.Power.Platform"
|
|
set type default
|
|
set internet-service-id 328043
|
|
next
|
|
edit "Amazon-AWS.WorkSpaces.Gateway"
|
|
set type default
|
|
set internet-service-id 393403
|
|
next
|
|
edit "Amazon-Twitch"
|
|
set type default
|
|
set internet-service-id 393446
|
|
next
|
|
edit "Amazon-AWS.GovCloud.US"
|
|
set type default
|
|
set internet-service-id 393452
|
|
next
|
|
edit "Amazon-AWS.EBS"
|
|
set type default
|
|
set internet-service-id 393470
|
|
next
|
|
edit "Amazon-AWS.Cloud9"
|
|
set type default
|
|
set internet-service-id 393471
|
|
next
|
|
edit "Amazon-AWS.DynamoDB"
|
|
set type default
|
|
set internet-service-id 393472
|
|
next
|
|
edit "Amazon-AWS.Route53"
|
|
set type default
|
|
set internet-service-id 393473
|
|
next
|
|
edit "Amazon-AWS.S3"
|
|
set type default
|
|
set internet-service-id 393474
|
|
next
|
|
edit "Amazon-AWS.Kinesis.Video.Streams"
|
|
set type default
|
|
set internet-service-id 393475
|
|
next
|
|
edit "Amazon-AWS.Global.Accelerator"
|
|
set type default
|
|
set internet-service-id 393476
|
|
next
|
|
edit "Amazon-AWS.EC2"
|
|
set type default
|
|
set internet-service-id 393477
|
|
next
|
|
edit "Amazon-AWS.API.Gateway"
|
|
set type default
|
|
set internet-service-id 393478
|
|
next
|
|
edit "Amazon-AWS.Chime.Voice.Connector"
|
|
set type default
|
|
set internet-service-id 393479
|
|
next
|
|
edit "Amazon-AWS.Connect"
|
|
set type default
|
|
set internet-service-id 393480
|
|
next
|
|
edit "Amazon-AWS.CloudFront"
|
|
set type default
|
|
set internet-service-id 393481
|
|
next
|
|
edit "Amazon-AWS.CodeBuild"
|
|
set type default
|
|
set internet-service-id 393482
|
|
next
|
|
edit "Amazon-AWS.Chime.Meetings"
|
|
set type default
|
|
set internet-service-id 393483
|
|
next
|
|
edit "Amazon-AWS.AppFlow"
|
|
set type default
|
|
set internet-service-id 393484
|
|
next
|
|
edit "Amazon-Amazon.SES"
|
|
set type default
|
|
set internet-service-id 393493
|
|
next
|
|
edit "Salesforce-Email.Relay"
|
|
set type default
|
|
set internet-service-id 655530
|
|
next
|
|
edit "Adobe-Adobe.Experience.Cloud"
|
|
set type default
|
|
set internet-service-id 917640
|
|
next
|
|
edit "Adobe-Adobe.Sign"
|
|
set type default
|
|
set internet-service-id 917776
|
|
next
|
|
edit "Oracle-Oracle.Cloud"
|
|
set type default
|
|
set internet-service-id 983171
|
|
next
|
|
edit "Fortinet-FortiVoice.Cloud"
|
|
set type default
|
|
set internet-service-id 1245432
|
|
next
|
|
edit "Fortinet-FortiGuard.Secure.DNS"
|
|
set type default
|
|
set internet-service-id 1245454
|
|
next
|
|
edit "Fortinet-FortiEDR"
|
|
set type default
|
|
set internet-service-id 1245475
|
|
next
|
|
edit "Fortinet-FortiClient.EMS"
|
|
set type default
|
|
set internet-service-id 1245477
|
|
next
|
|
edit "Fortinet-FortiWeb.Cloud"
|
|
set type default
|
|
set internet-service-id 1245480
|
|
next
|
|
edit "Fortinet-FortiSASE"
|
|
set type default
|
|
set internet-service-id 1245481
|
|
next
|
|
edit "Fortinet-FortiGuard.SOCaaS"
|
|
set type default
|
|
set internet-service-id 1245514
|
|
next
|
|
edit "Fortinet-FortiDLP.Cloud"
|
|
set type default
|
|
set internet-service-id 1245546
|
|
next
|
|
edit "Symantec-Symantec.Cloud"
|
|
set type default
|
|
set internet-service-id 1441922
|
|
next
|
|
edit "VMware-Workspace.ONE"
|
|
set type default
|
|
set internet-service-id 1507461
|
|
next
|
|
edit "Zoho-Site24x7.Monitor"
|
|
set type default
|
|
set internet-service-id 1704153
|
|
next
|
|
edit "HP-Aruba"
|
|
set type default
|
|
set internet-service-id 1900726
|
|
next
|
|
edit "Cisco-Meraki.Cloud"
|
|
set type default
|
|
set internet-service-id 1966218
|
|
next
|
|
edit "Cisco-Duo.Security"
|
|
set type default
|
|
set internet-service-id 1966225
|
|
next
|
|
edit "Cisco-AppDynamic"
|
|
set type default
|
|
set internet-service-id 1966260
|
|
next
|
|
edit "Cisco-Webex.FedRAMP"
|
|
set type default
|
|
set internet-service-id 1966315
|
|
next
|
|
edit "Cisco-Secure.Endpoint"
|
|
set type default
|
|
set internet-service-id 1966324
|
|
next
|
|
edit "IBM-IBM.Cloud"
|
|
set type default
|
|
set internet-service-id 2031748
|
|
next
|
|
edit "Tencent-VooV.Meeting"
|
|
set type default
|
|
set internet-service-id 2556219
|
|
next
|
|
edit "Zendesk-Zendesk.Suite"
|
|
set type default
|
|
set internet-service-id 3408047
|
|
next
|
|
edit "GitHub-GitHub"
|
|
set type default
|
|
set internet-service-id 3604638
|
|
next
|
|
edit "Twilio-Elastic.SIP.Trunking"
|
|
set type default
|
|
set internet-service-id 3801277
|
|
next
|
|
edit "Atlassian-Atlassian.Cloud"
|
|
set type default
|
|
set internet-service-id 3932388
|
|
next
|
|
edit "Atlassian-Atlassian.Notification"
|
|
set type default
|
|
set internet-service-id 3932436
|
|
next
|
|
edit "Shopify-Shopify"
|
|
set type default
|
|
set internet-service-id 4522162
|
|
next
|
|
edit "NewRelic-Synthetic.Monitor"
|
|
set type default
|
|
set internet-service-id 4849970
|
|
next
|
|
edit "Rapid7-Scanner"
|
|
set type default
|
|
set internet-service-id 5898406
|
|
next
|
|
edit "AnyDesk-AnyDesk"
|
|
set type default
|
|
set internet-service-id 5963927
|
|
next
|
|
edit "Slack-Slack"
|
|
set type default
|
|
set internet-service-id 6095024
|
|
next
|
|
edit "SAP-HANA"
|
|
set type default
|
|
set internet-service-id 6291612
|
|
next
|
|
edit "SAP-SuccessFactors"
|
|
set type default
|
|
set internet-service-id 6291618
|
|
next
|
|
edit "SAP-SAP.Ariba"
|
|
set type default
|
|
set internet-service-id 6291766
|
|
next
|
|
edit "Cloudflare-CDN"
|
|
set type default
|
|
set internet-service-id 6553737
|
|
next
|
|
edit "Alibaba-DingTalk"
|
|
set type default
|
|
set internet-service-id 6881623
|
|
next
|
|
edit "Okta-Okta"
|
|
set type default
|
|
set internet-service-id 7471307
|
|
next
|
|
edit "Cybozu-Other"
|
|
set type default
|
|
set internet-service-id 7536640
|
|
next
|
|
edit "Cybozu-Web"
|
|
set type default
|
|
set internet-service-id 7536641
|
|
next
|
|
edit "Cybozu-ICMP"
|
|
set type default
|
|
set internet-service-id 7536642
|
|
next
|
|
edit "Cybozu-DNS"
|
|
set type default
|
|
set internet-service-id 7536643
|
|
next
|
|
edit "Cybozu-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 7536644
|
|
next
|
|
edit "Cybozu-SSH"
|
|
set type default
|
|
set internet-service-id 7536646
|
|
next
|
|
edit "Cybozu-FTP"
|
|
set type default
|
|
set internet-service-id 7536647
|
|
next
|
|
edit "Cybozu-NTP"
|
|
set type default
|
|
set internet-service-id 7536648
|
|
next
|
|
edit "Cybozu-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 7536649
|
|
next
|
|
edit "Cybozu-LDAP"
|
|
set type default
|
|
set internet-service-id 7536654
|
|
next
|
|
edit "Cybozu-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 7536655
|
|
next
|
|
edit "Cybozu-RTMP"
|
|
set type default
|
|
set internet-service-id 7536656
|
|
next
|
|
edit "Cybozu-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 7536664
|
|
next
|
|
edit "VNC-Other"
|
|
set type default
|
|
set internet-service-id 7602176
|
|
next
|
|
edit "VNC-Web"
|
|
set type default
|
|
set internet-service-id 7602177
|
|
next
|
|
edit "VNC-ICMP"
|
|
set type default
|
|
set internet-service-id 7602178
|
|
next
|
|
edit "VNC-DNS"
|
|
set type default
|
|
set internet-service-id 7602179
|
|
next
|
|
edit "VNC-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 7602180
|
|
next
|
|
edit "VNC-SSH"
|
|
set type default
|
|
set internet-service-id 7602182
|
|
next
|
|
edit "VNC-FTP"
|
|
set type default
|
|
set internet-service-id 7602183
|
|
next
|
|
edit "VNC-NTP"
|
|
set type default
|
|
set internet-service-id 7602184
|
|
next
|
|
edit "VNC-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 7602185
|
|
next
|
|
edit "VNC-LDAP"
|
|
set type default
|
|
set internet-service-id 7602190
|
|
next
|
|
edit "VNC-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 7602191
|
|
next
|
|
edit "VNC-RTMP"
|
|
set type default
|
|
set internet-service-id 7602192
|
|
next
|
|
edit "VNC-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 7602200
|
|
next
|
|
edit "Egnyte-Egnyte"
|
|
set type default
|
|
set internet-service-id 7667846
|
|
next
|
|
edit "CrowdStrike-CrowdStrike.Falcon.Cloud"
|
|
set type default
|
|
set internet-service-id 7733383
|
|
next
|
|
edit "Aruba.it-Other"
|
|
set type default
|
|
set internet-service-id 7798784
|
|
next
|
|
edit "Aruba.it-Web"
|
|
set type default
|
|
set internet-service-id 7798785
|
|
next
|
|
edit "Aruba.it-ICMP"
|
|
set type default
|
|
set internet-service-id 7798786
|
|
next
|
|
edit "Aruba.it-DNS"
|
|
set type default
|
|
set internet-service-id 7798787
|
|
next
|
|
edit "Aruba.it-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 7798788
|
|
next
|
|
edit "Aruba.it-SSH"
|
|
set type default
|
|
set internet-service-id 7798790
|
|
next
|
|
edit "Aruba.it-FTP"
|
|
set type default
|
|
set internet-service-id 7798791
|
|
next
|
|
edit "Aruba.it-NTP"
|
|
set type default
|
|
set internet-service-id 7798792
|
|
next
|
|
edit "Aruba.it-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 7798793
|
|
next
|
|
edit "Aruba.it-LDAP"
|
|
set type default
|
|
set internet-service-id 7798798
|
|
next
|
|
edit "Aruba.it-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 7798799
|
|
next
|
|
edit "Aruba.it-RTMP"
|
|
set type default
|
|
set internet-service-id 7798800
|
|
next
|
|
edit "Aruba.it-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 7798808
|
|
next
|
|
edit "ISLOnline-Other"
|
|
set type default
|
|
set internet-service-id 7864320
|
|
next
|
|
edit "ISLOnline-Web"
|
|
set type default
|
|
set internet-service-id 7864321
|
|
next
|
|
edit "ISLOnline-ICMP"
|
|
set type default
|
|
set internet-service-id 7864322
|
|
next
|
|
edit "ISLOnline-DNS"
|
|
set type default
|
|
set internet-service-id 7864323
|
|
next
|
|
edit "ISLOnline-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 7864324
|
|
next
|
|
edit "ISLOnline-SSH"
|
|
set type default
|
|
set internet-service-id 7864326
|
|
next
|
|
edit "ISLOnline-FTP"
|
|
set type default
|
|
set internet-service-id 7864327
|
|
next
|
|
edit "ISLOnline-NTP"
|
|
set type default
|
|
set internet-service-id 7864328
|
|
next
|
|
edit "ISLOnline-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 7864329
|
|
next
|
|
edit "ISLOnline-LDAP"
|
|
set type default
|
|
set internet-service-id 7864334
|
|
next
|
|
edit "ISLOnline-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 7864335
|
|
next
|
|
edit "ISLOnline-RTMP"
|
|
set type default
|
|
set internet-service-id 7864336
|
|
next
|
|
edit "ISLOnline-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 7864344
|
|
next
|
|
edit "ISLOnline-ISLOnline"
|
|
set type default
|
|
set internet-service-id 7864667
|
|
next
|
|
edit "Akamai-CDN"
|
|
set type default
|
|
set internet-service-id 7929993
|
|
next
|
|
edit "Akamai-Linode.Cloud"
|
|
set type default
|
|
set internet-service-id 7930148
|
|
next
|
|
edit "Rackspace-CDN"
|
|
set type default
|
|
set internet-service-id 7995529
|
|
next
|
|
edit "Instart-CDN"
|
|
set type default
|
|
set internet-service-id 8061065
|
|
next
|
|
edit "Bitdefender-Other"
|
|
set type default
|
|
set internet-service-id 8126464
|
|
next
|
|
edit "Bitdefender-Web"
|
|
set type default
|
|
set internet-service-id 8126465
|
|
next
|
|
edit "Bitdefender-ICMP"
|
|
set type default
|
|
set internet-service-id 8126466
|
|
next
|
|
edit "Bitdefender-DNS"
|
|
set type default
|
|
set internet-service-id 8126467
|
|
next
|
|
edit "Bitdefender-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 8126468
|
|
next
|
|
edit "Bitdefender-SSH"
|
|
set type default
|
|
set internet-service-id 8126470
|
|
next
|
|
edit "Bitdefender-FTP"
|
|
set type default
|
|
set internet-service-id 8126471
|
|
next
|
|
edit "Bitdefender-NTP"
|
|
set type default
|
|
set internet-service-id 8126472
|
|
next
|
|
edit "Bitdefender-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 8126473
|
|
next
|
|
edit "Bitdefender-LDAP"
|
|
set type default
|
|
set internet-service-id 8126478
|
|
next
|
|
edit "Bitdefender-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 8126479
|
|
next
|
|
edit "Bitdefender-RTMP"
|
|
set type default
|
|
set internet-service-id 8126480
|
|
next
|
|
edit "Bitdefender-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 8126488
|
|
next
|
|
edit "Pingdom-Other"
|
|
set type default
|
|
set internet-service-id 8192000
|
|
next
|
|
edit "Pingdom-Web"
|
|
set type default
|
|
set internet-service-id 8192001
|
|
next
|
|
edit "Pingdom-ICMP"
|
|
set type default
|
|
set internet-service-id 8192002
|
|
next
|
|
edit "Pingdom-DNS"
|
|
set type default
|
|
set internet-service-id 8192003
|
|
next
|
|
edit "Pingdom-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 8192004
|
|
next
|
|
edit "Pingdom-SSH"
|
|
set type default
|
|
set internet-service-id 8192006
|
|
next
|
|
edit "Pingdom-FTP"
|
|
set type default
|
|
set internet-service-id 8192007
|
|
next
|
|
edit "Pingdom-NTP"
|
|
set type default
|
|
set internet-service-id 8192008
|
|
next
|
|
edit "Pingdom-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 8192009
|
|
next
|
|
edit "Pingdom-LDAP"
|
|
set type default
|
|
set internet-service-id 8192014
|
|
next
|
|
edit "Pingdom-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 8192015
|
|
next
|
|
edit "Pingdom-RTMP"
|
|
set type default
|
|
set internet-service-id 8192016
|
|
next
|
|
edit "Pingdom-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 8192024
|
|
next
|
|
edit "UptimeRobot-Other"
|
|
set type default
|
|
set internet-service-id 8257536
|
|
next
|
|
edit "UptimeRobot-Web"
|
|
set type default
|
|
set internet-service-id 8257537
|
|
next
|
|
edit "UptimeRobot-ICMP"
|
|
set type default
|
|
set internet-service-id 8257538
|
|
next
|
|
edit "UptimeRobot-DNS"
|
|
set type default
|
|
set internet-service-id 8257539
|
|
next
|
|
edit "UptimeRobot-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 8257540
|
|
next
|
|
edit "UptimeRobot-SSH"
|
|
set type default
|
|
set internet-service-id 8257542
|
|
next
|
|
edit "UptimeRobot-FTP"
|
|
set type default
|
|
set internet-service-id 8257543
|
|
next
|
|
edit "UptimeRobot-NTP"
|
|
set type default
|
|
set internet-service-id 8257544
|
|
next
|
|
edit "UptimeRobot-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 8257545
|
|
next
|
|
edit "UptimeRobot-LDAP"
|
|
set type default
|
|
set internet-service-id 8257550
|
|
next
|
|
edit "UptimeRobot-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 8257551
|
|
next
|
|
edit "UptimeRobot-RTMP"
|
|
set type default
|
|
set internet-service-id 8257552
|
|
next
|
|
edit "UptimeRobot-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 8257560
|
|
next
|
|
edit "UptimeRobot-UptimeRobot.Monitor"
|
|
set type default
|
|
set internet-service-id 8257709
|
|
next
|
|
edit "Quovadisglobal-Other"
|
|
set type default
|
|
set internet-service-id 8323072
|
|
next
|
|
edit "Quovadisglobal-Web"
|
|
set type default
|
|
set internet-service-id 8323073
|
|
next
|
|
edit "Quovadisglobal-ICMP"
|
|
set type default
|
|
set internet-service-id 8323074
|
|
next
|
|
edit "Quovadisglobal-DNS"
|
|
set type default
|
|
set internet-service-id 8323075
|
|
next
|
|
edit "Quovadisglobal-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 8323076
|
|
next
|
|
edit "Quovadisglobal-SSH"
|
|
set type default
|
|
set internet-service-id 8323078
|
|
next
|
|
edit "Quovadisglobal-FTP"
|
|
set type default
|
|
set internet-service-id 8323079
|
|
next
|
|
edit "Quovadisglobal-NTP"
|
|
set type default
|
|
set internet-service-id 8323080
|
|
next
|
|
edit "Quovadisglobal-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 8323081
|
|
next
|
|
edit "Quovadisglobal-LDAP"
|
|
set type default
|
|
set internet-service-id 8323086
|
|
next
|
|
edit "Quovadisglobal-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 8323087
|
|
next
|
|
edit "Quovadisglobal-RTMP"
|
|
set type default
|
|
set internet-service-id 8323088
|
|
next
|
|
edit "Quovadisglobal-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 8323096
|
|
next
|
|
edit "Splashtop-Splashtop"
|
|
set type default
|
|
set internet-service-id 8388751
|
|
next
|
|
edit "Zoox-Other"
|
|
set type default
|
|
set internet-service-id 8454144
|
|
next
|
|
edit "Zoox-Web"
|
|
set type default
|
|
set internet-service-id 8454145
|
|
next
|
|
edit "Zoox-ICMP"
|
|
set type default
|
|
set internet-service-id 8454146
|
|
next
|
|
edit "Zoox-DNS"
|
|
set type default
|
|
set internet-service-id 8454147
|
|
next
|
|
edit "Zoox-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 8454148
|
|
next
|
|
edit "Zoox-SSH"
|
|
set type default
|
|
set internet-service-id 8454150
|
|
next
|
|
edit "Zoox-FTP"
|
|
set type default
|
|
set internet-service-id 8454151
|
|
next
|
|
edit "Zoox-NTP"
|
|
set type default
|
|
set internet-service-id 8454152
|
|
next
|
|
edit "Zoox-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 8454153
|
|
next
|
|
edit "Zoox-LDAP"
|
|
set type default
|
|
set internet-service-id 8454158
|
|
next
|
|
edit "Zoox-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 8454159
|
|
next
|
|
edit "Zoox-RTMP"
|
|
set type default
|
|
set internet-service-id 8454160
|
|
next
|
|
edit "Zoox-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 8454168
|
|
next
|
|
edit "Skyfii-Other"
|
|
set type default
|
|
set internet-service-id 8519680
|
|
next
|
|
edit "Skyfii-Web"
|
|
set type default
|
|
set internet-service-id 8519681
|
|
next
|
|
edit "Skyfii-ICMP"
|
|
set type default
|
|
set internet-service-id 8519682
|
|
next
|
|
edit "Skyfii-DNS"
|
|
set type default
|
|
set internet-service-id 8519683
|
|
next
|
|
edit "Skyfii-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 8519684
|
|
next
|
|
edit "Skyfii-SSH"
|
|
set type default
|
|
set internet-service-id 8519686
|
|
next
|
|
edit "Skyfii-FTP"
|
|
set type default
|
|
set internet-service-id 8519687
|
|
next
|
|
edit "Skyfii-NTP"
|
|
set type default
|
|
set internet-service-id 8519688
|
|
next
|
|
edit "Skyfii-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 8519689
|
|
next
|
|
edit "Skyfii-LDAP"
|
|
set type default
|
|
set internet-service-id 8519694
|
|
next
|
|
edit "Skyfii-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 8519695
|
|
next
|
|
edit "Skyfii-RTMP"
|
|
set type default
|
|
set internet-service-id 8519696
|
|
next
|
|
edit "Skyfii-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 8519704
|
|
next
|
|
edit "CoffeeBean-Other"
|
|
set type default
|
|
set internet-service-id 8585216
|
|
next
|
|
edit "CoffeeBean-Web"
|
|
set type default
|
|
set internet-service-id 8585217
|
|
next
|
|
edit "CoffeeBean-ICMP"
|
|
set type default
|
|
set internet-service-id 8585218
|
|
next
|
|
edit "CoffeeBean-DNS"
|
|
set type default
|
|
set internet-service-id 8585219
|
|
next
|
|
edit "CoffeeBean-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 8585220
|
|
next
|
|
edit "CoffeeBean-SSH"
|
|
set type default
|
|
set internet-service-id 8585222
|
|
next
|
|
edit "CoffeeBean-FTP"
|
|
set type default
|
|
set internet-service-id 8585223
|
|
next
|
|
edit "CoffeeBean-NTP"
|
|
set type default
|
|
set internet-service-id 8585224
|
|
next
|
|
edit "CoffeeBean-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 8585225
|
|
next
|
|
edit "CoffeeBean-LDAP"
|
|
set type default
|
|
set internet-service-id 8585230
|
|
next
|
|
edit "CoffeeBean-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 8585231
|
|
next
|
|
edit "CoffeeBean-RTMP"
|
|
set type default
|
|
set internet-service-id 8585232
|
|
next
|
|
edit "CoffeeBean-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 8585240
|
|
next
|
|
edit "Cloud4Wi-Other"
|
|
set type default
|
|
set internet-service-id 8650752
|
|
next
|
|
edit "Cloud4Wi-Web"
|
|
set type default
|
|
set internet-service-id 8650753
|
|
next
|
|
edit "Cloud4Wi-ICMP"
|
|
set type default
|
|
set internet-service-id 8650754
|
|
next
|
|
edit "Cloud4Wi-DNS"
|
|
set type default
|
|
set internet-service-id 8650755
|
|
next
|
|
edit "Cloud4Wi-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 8650756
|
|
next
|
|
edit "Cloud4Wi-SSH"
|
|
set type default
|
|
set internet-service-id 8650758
|
|
next
|
|
edit "Cloud4Wi-FTP"
|
|
set type default
|
|
set internet-service-id 8650759
|
|
next
|
|
edit "Cloud4Wi-NTP"
|
|
set type default
|
|
set internet-service-id 8650760
|
|
next
|
|
edit "Cloud4Wi-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 8650761
|
|
next
|
|
edit "Cloud4Wi-LDAP"
|
|
set type default
|
|
set internet-service-id 8650766
|
|
next
|
|
edit "Cloud4Wi-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 8650767
|
|
next
|
|
edit "Cloud4Wi-RTMP"
|
|
set type default
|
|
set internet-service-id 8650768
|
|
next
|
|
edit "Cloud4Wi-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 8650776
|
|
next
|
|
edit "Panda-Panda.Security"
|
|
set type default
|
|
set internet-service-id 8716432
|
|
next
|
|
edit "Ewon-Talk2M"
|
|
set type default
|
|
set internet-service-id 8781970
|
|
next
|
|
edit "Nutanix-Nutanix.Cloud"
|
|
set type default
|
|
set internet-service-id 8847507
|
|
next
|
|
edit "Backblaze-Other"
|
|
set type default
|
|
set internet-service-id 8912896
|
|
next
|
|
edit "Backblaze-Web"
|
|
set type default
|
|
set internet-service-id 8912897
|
|
next
|
|
edit "Backblaze-ICMP"
|
|
set type default
|
|
set internet-service-id 8912898
|
|
next
|
|
edit "Backblaze-DNS"
|
|
set type default
|
|
set internet-service-id 8912899
|
|
next
|
|
edit "Backblaze-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 8912900
|
|
next
|
|
edit "Backblaze-SSH"
|
|
set type default
|
|
set internet-service-id 8912902
|
|
next
|
|
edit "Backblaze-FTP"
|
|
set type default
|
|
set internet-service-id 8912903
|
|
next
|
|
edit "Backblaze-NTP"
|
|
set type default
|
|
set internet-service-id 8912904
|
|
next
|
|
edit "Backblaze-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 8912905
|
|
next
|
|
edit "Backblaze-LDAP"
|
|
set type default
|
|
set internet-service-id 8912910
|
|
next
|
|
edit "Backblaze-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 8912911
|
|
next
|
|
edit "Backblaze-RTMP"
|
|
set type default
|
|
set internet-service-id 8912912
|
|
next
|
|
edit "Backblaze-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 8912920
|
|
next
|
|
edit "Extreme-Extreme.Cloud"
|
|
set type default
|
|
set internet-service-id 8978580
|
|
next
|
|
edit "XING-Other"
|
|
set type default
|
|
set internet-service-id 9043968
|
|
next
|
|
edit "XING-Web"
|
|
set type default
|
|
set internet-service-id 9043969
|
|
next
|
|
edit "XING-ICMP"
|
|
set type default
|
|
set internet-service-id 9043970
|
|
next
|
|
edit "XING-DNS"
|
|
set type default
|
|
set internet-service-id 9043971
|
|
next
|
|
edit "XING-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 9043972
|
|
next
|
|
edit "XING-SSH"
|
|
set type default
|
|
set internet-service-id 9043974
|
|
next
|
|
edit "XING-FTP"
|
|
set type default
|
|
set internet-service-id 9043975
|
|
next
|
|
edit "XING-NTP"
|
|
set type default
|
|
set internet-service-id 9043976
|
|
next
|
|
edit "XING-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 9043977
|
|
next
|
|
edit "XING-LDAP"
|
|
set type default
|
|
set internet-service-id 9043982
|
|
next
|
|
edit "XING-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 9043983
|
|
next
|
|
edit "XING-RTMP"
|
|
set type default
|
|
set internet-service-id 9043984
|
|
next
|
|
edit "XING-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 9043992
|
|
next
|
|
edit "Genesys-PureCloud"
|
|
set type default
|
|
set internet-service-id 9109653
|
|
next
|
|
edit "BlackBerry-Cylance"
|
|
set type default
|
|
set internet-service-id 9175190
|
|
next
|
|
edit "DigiCert-OCSP"
|
|
set type default
|
|
set internet-service-id 9240728
|
|
next
|
|
edit "Infomaniak-SwissTransfer"
|
|
set type default
|
|
set internet-service-id 9306265
|
|
next
|
|
edit "Fuze-Fuze"
|
|
set type default
|
|
set internet-service-id 9371802
|
|
next
|
|
edit "Truecaller-Truecaller"
|
|
set type default
|
|
set internet-service-id 9437339
|
|
next
|
|
edit "GlobalSign-OCSP"
|
|
set type default
|
|
set internet-service-id 9502872
|
|
next
|
|
edit "VeriSign-OCSP"
|
|
set type default
|
|
set internet-service-id 9568408
|
|
next
|
|
edit "Sony-PlayStation.Network"
|
|
set type default
|
|
set internet-service-id 9633952
|
|
next
|
|
edit "Acronis-Cyber.Cloud"
|
|
set type default
|
|
set internet-service-id 9699489
|
|
next
|
|
edit "RingCentral-RingCentral"
|
|
set type default
|
|
set internet-service-id 9765027
|
|
next
|
|
edit "FSecure-FSecure"
|
|
set type default
|
|
set internet-service-id 9830564
|
|
next
|
|
edit "Kaseya-Kaseya.Cloud"
|
|
set type default
|
|
set internet-service-id 9896101
|
|
next
|
|
edit "Shodan-Scanner"
|
|
set type default
|
|
set internet-service-id 9961638
|
|
next
|
|
edit "Censys-Scanner"
|
|
set type default
|
|
set internet-service-id 10027174
|
|
next
|
|
edit "Valve-Steam"
|
|
set type default
|
|
set internet-service-id 10092711
|
|
next
|
|
edit "YouSeeU-Bongo"
|
|
set type default
|
|
set internet-service-id 10158248
|
|
next
|
|
edit "Cato-Cato.Cloud"
|
|
set type default
|
|
set internet-service-id 10223785
|
|
next
|
|
edit "SolarWinds-SpamExperts"
|
|
set type default
|
|
set internet-service-id 10289323
|
|
next
|
|
edit "SolarWinds-Pingdom.Probe"
|
|
set type default
|
|
set internet-service-id 10289326
|
|
next
|
|
edit "SolarWinds-SolarWinds.RMM"
|
|
set type default
|
|
set internet-service-id 10289379
|
|
next
|
|
edit "8X8-8X8.Cloud"
|
|
set type default
|
|
set internet-service-id 10354860
|
|
next
|
|
edit "Zattoo-Zattoo.TV"
|
|
set type default
|
|
set internet-service-id 10420401
|
|
next
|
|
edit "Datto-Datto.RMM"
|
|
set type default
|
|
set internet-service-id 10485939
|
|
next
|
|
edit "Datto-Datto.BCDR"
|
|
set type default
|
|
set internet-service-id 10486083
|
|
next
|
|
edit "Barracuda-Barracuda.Cloud"
|
|
set type default
|
|
set internet-service-id 10551477
|
|
next
|
|
edit "Naver-Line"
|
|
set type default
|
|
set internet-service-id 10617015
|
|
next
|
|
edit "Disney-Disney+"
|
|
set type default
|
|
set internet-service-id 10682552
|
|
next
|
|
edit "DNS-DoH_DoT"
|
|
set type default
|
|
set internet-service-id 10748089
|
|
next
|
|
edit "DNS-Root.Name.Servers"
|
|
set type default
|
|
set internet-service-id 10748156
|
|
next
|
|
edit "DNS-ARPA.Name.Servers"
|
|
set type default
|
|
set internet-service-id 10748206
|
|
next
|
|
edit "Quad9-Quad9.Standard.DNS"
|
|
set type default
|
|
set internet-service-id 10813626
|
|
next
|
|
edit "Stretchoid-Scanner"
|
|
set type default
|
|
set internet-service-id 10879142
|
|
next
|
|
edit "Poly-RealConnect.Service"
|
|
set type default
|
|
set internet-service-id 10944700
|
|
next
|
|
edit "Telegram-Telegram"
|
|
set type default
|
|
set internet-service-id 11010249
|
|
next
|
|
edit "Spotify-Spotify"
|
|
set type default
|
|
set internet-service-id 11075786
|
|
next
|
|
edit "NextDNS-NextDNS"
|
|
set type default
|
|
set internet-service-id 11141324
|
|
next
|
|
edit "Fastly-CDN"
|
|
set type default
|
|
set internet-service-id 11206793
|
|
next
|
|
edit "Neustar-UltraDNS.Probes"
|
|
set type default
|
|
set internet-service-id 11272397
|
|
next
|
|
edit "Malicious-Malicious.Server"
|
|
set type default
|
|
set internet-service-id 11337935
|
|
next
|
|
edit "NIST-ITS"
|
|
set type default
|
|
set internet-service-id 11403472
|
|
next
|
|
edit "Jamf-Jamf.Cloud"
|
|
set type default
|
|
set internet-service-id 11469009
|
|
next
|
|
edit "Alcatel.Lucent-Rainbow"
|
|
set type default
|
|
set internet-service-id 11534546
|
|
next
|
|
edit "Forcepoint-Forcepoint.Cloud"
|
|
set type default
|
|
set internet-service-id 11600083
|
|
next
|
|
edit "Datadog-Datadog"
|
|
set type default
|
|
set internet-service-id 11665620
|
|
next
|
|
edit "Mimecast-Mimecast"
|
|
set type default
|
|
set internet-service-id 11731157
|
|
next
|
|
edit "MediaFire-Other"
|
|
set type default
|
|
set internet-service-id 11796480
|
|
next
|
|
edit "MediaFire-Web"
|
|
set type default
|
|
set internet-service-id 11796481
|
|
next
|
|
edit "MediaFire-ICMP"
|
|
set type default
|
|
set internet-service-id 11796482
|
|
next
|
|
edit "MediaFire-DNS"
|
|
set type default
|
|
set internet-service-id 11796483
|
|
next
|
|
edit "MediaFire-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 11796484
|
|
next
|
|
edit "MediaFire-SSH"
|
|
set type default
|
|
set internet-service-id 11796486
|
|
next
|
|
edit "MediaFire-FTP"
|
|
set type default
|
|
set internet-service-id 11796487
|
|
next
|
|
edit "MediaFire-NTP"
|
|
set type default
|
|
set internet-service-id 11796488
|
|
next
|
|
edit "MediaFire-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 11796489
|
|
next
|
|
edit "MediaFire-LDAP"
|
|
set type default
|
|
set internet-service-id 11796494
|
|
next
|
|
edit "MediaFire-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 11796495
|
|
next
|
|
edit "MediaFire-RTMP"
|
|
set type default
|
|
set internet-service-id 11796496
|
|
next
|
|
edit "MediaFire-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 11796504
|
|
next
|
|
edit "Pandora-Pandora"
|
|
set type default
|
|
set internet-service-id 11862230
|
|
next
|
|
edit "SiriusXM-SiriusXM"
|
|
set type default
|
|
set internet-service-id 11927767
|
|
next
|
|
edit "Hopin-Hopin"
|
|
set type default
|
|
set internet-service-id 11993304
|
|
next
|
|
edit "RedShield-RedShield.Cloud"
|
|
set type default
|
|
set internet-service-id 12058842
|
|
next
|
|
edit "InterneTTL-Scanner"
|
|
set type default
|
|
set internet-service-id 12124326
|
|
next
|
|
edit "VadeSecure-VadeSecure.Cloud"
|
|
set type default
|
|
set internet-service-id 12189915
|
|
next
|
|
edit "Netskope-Netskope.Cloud"
|
|
set type default
|
|
set internet-service-id 12255452
|
|
next
|
|
edit "ClickMeeting-ClickMeeting"
|
|
set type default
|
|
set internet-service-id 12320989
|
|
next
|
|
edit "Tenable-Tenable.io.Cloud.Scanner"
|
|
set type default
|
|
set internet-service-id 12386528
|
|
next
|
|
edit "Vidyo-VidyoCloud"
|
|
set type default
|
|
set internet-service-id 12452065
|
|
next
|
|
edit "OpenNIC-OpenNIC.DNS"
|
|
set type default
|
|
set internet-service-id 12517602
|
|
next
|
|
edit "Sectigo-Sectigo"
|
|
set type default
|
|
set internet-service-id 12583141
|
|
next
|
|
edit "DigitalOcean-DigitalOcean.Platform"
|
|
set type default
|
|
set internet-service-id 12648679
|
|
next
|
|
edit "Pitney.Bowes-Pitney.Bowes.Data.Center"
|
|
set type default
|
|
set internet-service-id 12714216
|
|
next
|
|
edit "VPN-Anonymous.VPN"
|
|
set type default
|
|
set internet-service-id 12779753
|
|
next
|
|
edit "Blockchain-Crypto.Mining.Pool"
|
|
set type default
|
|
set internet-service-id 12845290
|
|
next
|
|
edit "FactSet-FactSet"
|
|
set type default
|
|
set internet-service-id 12910830
|
|
next
|
|
edit "Bloomberg-Bloomberg"
|
|
set type default
|
|
set internet-service-id 12976367
|
|
next
|
|
edit "Five9-Five9"
|
|
set type default
|
|
set internet-service-id 13041904
|
|
next
|
|
edit "Gigas-Gigas.Cloud"
|
|
set type default
|
|
set internet-service-id 13107441
|
|
next
|
|
edit "Imperva-Imperva.Cloud.WAF"
|
|
set type default
|
|
set internet-service-id 13172978
|
|
next
|
|
edit "HorizonIQ-HorizonIQ"
|
|
set type default
|
|
set internet-service-id 13238515
|
|
next
|
|
edit "Azion-Azion.Platform"
|
|
set type default
|
|
set internet-service-id 13304053
|
|
next
|
|
edit "Hurricane.Electric-Hurricane.Electric.Internet.Services"
|
|
set type default
|
|
set internet-service-id 13369590
|
|
next
|
|
edit "NodePing-NodePing.Probe"
|
|
set type default
|
|
set internet-service-id 13435127
|
|
next
|
|
edit "Frontline-Frontline"
|
|
set type default
|
|
set internet-service-id 13500665
|
|
next
|
|
edit "Tally-Tally.ERP"
|
|
set type default
|
|
set internet-service-id 13566202
|
|
next
|
|
edit "Hosting-Bulletproof.Hosting"
|
|
set type default
|
|
set internet-service-id 13631739
|
|
next
|
|
edit "Okko-Okko.TV"
|
|
set type default
|
|
set internet-service-id 13697277
|
|
next
|
|
edit "Voximplant-Voximplant.Platform"
|
|
set type default
|
|
set internet-service-id 13762829
|
|
next
|
|
edit "OVHcloud-OVHcloud"
|
|
set type default
|
|
set internet-service-id 13828367
|
|
next
|
|
edit "OVHcloud-OVH.Telecom"
|
|
set type default
|
|
set internet-service-id 13828461
|
|
next
|
|
edit "SentinelOne-SentinelOne.Cloud"
|
|
set type default
|
|
set internet-service-id 13893905
|
|
next
|
|
edit "Kakao-Kakao.Services"
|
|
set type default
|
|
set internet-service-id 13959442
|
|
next
|
|
edit "Stripe-Stripe"
|
|
set type default
|
|
set internet-service-id 14024979
|
|
next
|
|
edit "NetScout-Scanner"
|
|
set type default
|
|
set internet-service-id 14090406
|
|
next
|
|
edit "Recyber-Scanner"
|
|
set type default
|
|
set internet-service-id 14155942
|
|
next
|
|
edit "Cyber.Casa-Scanner"
|
|
set type default
|
|
set internet-service-id 14221478
|
|
next
|
|
edit "GTHost-Dedicated.Instant.Servers"
|
|
set type default
|
|
set internet-service-id 14287132
|
|
next
|
|
edit "ivi-ivi.Streaming"
|
|
set type default
|
|
set internet-service-id 14352669
|
|
next
|
|
edit "BinaryEdge-Scanner"
|
|
set type default
|
|
set internet-service-id 14418086
|
|
next
|
|
edit "Fintech-MarketMap.Terminal"
|
|
set type default
|
|
set internet-service-id 14483742
|
|
next
|
|
edit "xMatters-xMatters.Platform"
|
|
set type default
|
|
set internet-service-id 14549279
|
|
next
|
|
edit "Blizzard-Battle.Net"
|
|
set type default
|
|
set internet-service-id 14614816
|
|
next
|
|
edit "Axon-Evidence"
|
|
set type default
|
|
set internet-service-id 14680353
|
|
next
|
|
edit "CDN77-CDN"
|
|
set type default
|
|
set internet-service-id 14745737
|
|
next
|
|
edit "GCore.Labs-CDN"
|
|
set type default
|
|
set internet-service-id 14811273
|
|
next
|
|
edit "Matrix42-FastViewer"
|
|
set type default
|
|
set internet-service-id 14876962
|
|
next
|
|
edit "Bunny.net-CDN"
|
|
set type default
|
|
set internet-service-id 14942345
|
|
next
|
|
edit "StackPath-CDN"
|
|
set type default
|
|
set internet-service-id 15007881
|
|
next
|
|
edit "Edgio-CDN"
|
|
set type default
|
|
set internet-service-id 15073417
|
|
next
|
|
edit "CacheFly-CDN"
|
|
set type default
|
|
set internet-service-id 15138953
|
|
next
|
|
edit "Paylocity-Paylocity"
|
|
set type default
|
|
set internet-service-id 15204646
|
|
next
|
|
edit "Qualys-Qualys.Cloud.Platform"
|
|
set type default
|
|
set internet-service-id 15270183
|
|
next
|
|
edit "Dailymotion-Other"
|
|
set type default
|
|
set internet-service-id 15335424
|
|
next
|
|
edit "Dailymotion-Web"
|
|
set type default
|
|
set internet-service-id 15335425
|
|
next
|
|
edit "Dailymotion-ICMP"
|
|
set type default
|
|
set internet-service-id 15335426
|
|
next
|
|
edit "Dailymotion-DNS"
|
|
set type default
|
|
set internet-service-id 15335427
|
|
next
|
|
edit "Dailymotion-Outbound_Email"
|
|
set type default
|
|
set internet-service-id 15335428
|
|
next
|
|
edit "Dailymotion-SSH"
|
|
set type default
|
|
set internet-service-id 15335430
|
|
next
|
|
edit "Dailymotion-FTP"
|
|
set type default
|
|
set internet-service-id 15335431
|
|
next
|
|
edit "Dailymotion-NTP"
|
|
set type default
|
|
set internet-service-id 15335432
|
|
next
|
|
edit "Dailymotion-Inbound_Email"
|
|
set type default
|
|
set internet-service-id 15335433
|
|
next
|
|
edit "Dailymotion-LDAP"
|
|
set type default
|
|
set internet-service-id 15335438
|
|
next
|
|
edit "Dailymotion-NetBIOS.Session.Service"
|
|
set type default
|
|
set internet-service-id 15335439
|
|
next
|
|
edit "Dailymotion-RTMP"
|
|
set type default
|
|
set internet-service-id 15335440
|
|
next
|
|
edit "Dailymotion-NetBIOS.Name.Service"
|
|
set type default
|
|
set internet-service-id 15335448
|
|
next
|
|
edit "LaunchDarkly-LaunchDarkly.Platform"
|
|
set type default
|
|
set internet-service-id 15401258
|
|
next
|
|
edit "Medianova-CDN"
|
|
set type default
|
|
set internet-service-id 15466633
|
|
next
|
|
edit "NetDocuments-NetDocuments.Platform"
|
|
set type default
|
|
set internet-service-id 15532331
|
|
next
|
|
edit "Vonage-Vonage.Contact.Center"
|
|
set type default
|
|
set internet-service-id 15597869
|
|
next
|
|
edit "Vonage-Vonage.Video.API"
|
|
set type default
|
|
set internet-service-id 15597872
|
|
next
|
|
edit "Veritas-Enterprise.Vault.Cloud"
|
|
set type default
|
|
set internet-service-id 15663407
|
|
next
|
|
edit "UK.NCSC-Scanner"
|
|
set type default
|
|
set internet-service-id 15728806
|
|
next
|
|
edit "Restream-Restream.Platform"
|
|
set type default
|
|
set internet-service-id 15794481
|
|
next
|
|
edit "ArcticWolf-ArcticWolf.Cloud"
|
|
set type default
|
|
set internet-service-id 15860019
|
|
next
|
|
edit "CounterPath-Bria"
|
|
set type default
|
|
set internet-service-id 15925556
|
|
next
|
|
edit "CriminalIP-Scanner"
|
|
set type default
|
|
set internet-service-id 15990950
|
|
next
|
|
edit "IPFS-IPFS.Gateway"
|
|
set type default
|
|
set internet-service-id 16056629
|
|
next
|
|
edit "Internet.Census.Group-Scanner"
|
|
set type default
|
|
set internet-service-id 16122022
|
|
next
|
|
edit "Performive-Performive.Cloud"
|
|
set type default
|
|
set internet-service-id 16187706
|
|
next
|
|
edit "OneLogin-OneLogin"
|
|
set type default
|
|
set internet-service-id 16253244
|
|
next
|
|
edit "Shadowserver-Scanner"
|
|
set type default
|
|
set internet-service-id 16318630
|
|
next
|
|
edit "Turkcell-Suit.Conference"
|
|
set type default
|
|
set internet-service-id 16384317
|
|
next
|
|
edit "LeakIX-Scanner"
|
|
set type default
|
|
set internet-service-id 16449702
|
|
next
|
|
edit "Infoblox-BloxOne"
|
|
set type default
|
|
set internet-service-id 16515390
|
|
next
|
|
edit "Nice-CXone"
|
|
set type default
|
|
set internet-service-id 16580927
|
|
next
|
|
edit "Hetzner-Hetzner.Hosting.Service"
|
|
set type default
|
|
set internet-service-id 16646464
|
|
next
|
|
edit "ThreatLocker-ThreatLocker"
|
|
set type default
|
|
set internet-service-id 16712001
|
|
next
|
|
edit "ZPE-ZPE.Cloud"
|
|
set type default
|
|
set internet-service-id 16777538
|
|
next
|
|
edit "ColoCrossing-ColoCrossing.Hosting.Service"
|
|
set type default
|
|
set internet-service-id 16843076
|
|
next
|
|
edit "Sinch-Mailgun"
|
|
set type default
|
|
set internet-service-id 16908613
|
|
next
|
|
edit "SpaceX-Starlink"
|
|
set type default
|
|
set internet-service-id 16974150
|
|
next
|
|
edit "Ingenuity-Ingenuity.Cloud.Service"
|
|
set type default
|
|
set internet-service-id 17039688
|
|
next
|
|
edit "Skyhigh.Security-Secure.Web.Gateway"
|
|
set type default
|
|
set internet-service-id 17105227
|
|
next
|
|
edit "THE.Hosting-THE.Hosting.Hosting.Service"
|
|
set type default
|
|
set internet-service-id 17170764
|
|
next
|
|
edit "StatusCake-StatusCake.Monitor"
|
|
set type default
|
|
set internet-service-id 17236307
|
|
next
|
|
edit "NAP-NAPLAN"
|
|
set type default
|
|
set internet-service-id 17301844
|
|
next
|
|
edit "Elastic-Elastic.Cloud"
|
|
set type default
|
|
set internet-service-id 17367382
|
|
next
|
|
edit "NFON-NFON"
|
|
set type default
|
|
set internet-service-id 17432920
|
|
next
|
|
edit "SERVERD-SERVERD.Hosting.Service"
|
|
set type default
|
|
set internet-service-id 17498457
|
|
next
|
|
edit "MEGA-MEGA.Cloud"
|
|
set type default
|
|
set internet-service-id 17563994
|
|
next
|
|
edit "Hadrian-Scanner"
|
|
set type default
|
|
set internet-service-id 17629350
|
|
next
|
|
edit "Dotcom.Monitor-Dotcom.Monitor"
|
|
set type default
|
|
set internet-service-id 17695068
|
|
next
|
|
edit "Ahrefs-AhrefsBot"
|
|
set type default
|
|
set internet-service-id 17760605
|
|
next
|
|
edit "Semrush-SemrushBot"
|
|
set type default
|
|
set internet-service-id 17826142
|
|
next
|
|
edit "Zero.Networks-Zero.Networks"
|
|
set type default
|
|
set internet-service-id 17891679
|
|
next
|
|
edit "Vultr-Vultr.Cloud"
|
|
set type default
|
|
set internet-service-id 17957216
|
|
next
|
|
edit "EGI-EGI.Hosting.Service"
|
|
set type default
|
|
set internet-service-id 18022753
|
|
next
|
|
edit "ONYPHE-Scanner"
|
|
set type default
|
|
set internet-service-id 18088102
|
|
next
|
|
edit "Proofpoint-Proofpoint"
|
|
set type default
|
|
set internet-service-id 18153828
|
|
next
|
|
edit "Lookout-Lookout.Cloud"
|
|
set type default
|
|
set internet-service-id 18219365
|
|
next
|
|
edit "Heimdal-Heimdal.Security"
|
|
set type default
|
|
set internet-service-id 18284902
|
|
next
|
|
edit "Yealink-Yealink.Meeting"
|
|
set type default
|
|
set internet-service-id 18350439
|
|
next
|
|
edit "Secomea-Secomea"
|
|
set type default
|
|
set internet-service-id 18415976
|
|
next
|
|
edit "CallTower-CT.Cloud"
|
|
set type default
|
|
set internet-service-id 18481513
|
|
next
|
|
edit "OpenAI-OpenAI.Bot"
|
|
set type default
|
|
set internet-service-id 18547052
|
|
next
|
|
edit "Alpemix-Alpemix"
|
|
set type default
|
|
set internet-service-id 18612590
|
|
next
|
|
edit "M247-M247.Hosting.Service"
|
|
set type default
|
|
set internet-service-id 18678127
|
|
next
|
|
edit "Quintex-Quintex.Hosting.Service"
|
|
set type default
|
|
set internet-service-id 18743664
|
|
next
|
|
edit "Aeza-Aeza.Hosting.Service"
|
|
set type default
|
|
set internet-service-id 18809201
|
|
next
|
|
edit "Amanah-Amanah.Hosting.Service"
|
|
set type default
|
|
set internet-service-id 18874738
|
|
next
|
|
edit "ByteDance-Lark"
|
|
set type default
|
|
set internet-service-id 18940275
|
|
next
|
|
edit "KnowBe4-KnowBe4"
|
|
set type default
|
|
set internet-service-id 19005812
|
|
next
|
|
edit "Keeper-Keeper.Security"
|
|
set type default
|
|
set internet-service-id 19071349
|
|
next
|
|
edit "Fortinet-FortiMonitor"
|
|
set type default
|
|
set internet-service-id 1245558
|
|
next
|
|
edit "NinjaOne-NinjaOne"
|
|
set type default
|
|
set internet-service-id 19136887
|
|
next
|
|
edit "Fortinet-FortiSandbox"
|
|
set type default
|
|
set internet-service-id 1245560
|
|
next
|
|
edit "Fortinet-FortiSandbox.Cloud"
|
|
set type default
|
|
set internet-service-id 1245561
|
|
next
|
|
edit "Salesforce-Hyperforce"
|
|
set type default
|
|
set internet-service-id 655738
|
|
next
|
|
edit "Modat-Scanner"
|
|
set type default
|
|
set internet-service-id 19202214
|
|
next
|
|
edit "Bluejeans-Bluejeans.Meeting"
|
|
set type default
|
|
set internet-service-id 7012476
|
|
next
|
|
edit "Make-Make.Platform"
|
|
set type default
|
|
set internet-service-id 19267963
|
|
next
|
|
edit "DNS-Generic.TLD.Name.Servers"
|
|
set type default
|
|
set internet-service-id 10748284
|
|
next
|
|
edit "Cloudzy-Cloudzy.Hosting.Service"
|
|
set type default
|
|
set internet-service-id 19333501
|
|
next
|
|
edit "Nokia-Deepfield.Genome.Crawler"
|
|
set type default
|
|
set internet-service-id 19399038
|
|
next
|
|
edit "Neat-Neat.Cloud"
|
|
set type default
|
|
set internet-service-id 19464575
|
|
next
|
|
edit "Tor-Tor.Node"
|
|
set type default
|
|
set internet-service-id 2818432
|
|
next
|
|
edit "OpenAI-GPT.Actions"
|
|
set type default
|
|
set internet-service-id 18547073
|
|
next
|
|
edit "Brightree-Brightree"
|
|
set type default
|
|
set internet-service-id 19530114
|
|
next
|
|
edit "PagerDuty-PagerDuty"
|
|
set type default
|
|
set internet-service-id 19595651
|
|
next
|
|
edit "JFrog-JFrog"
|
|
set type default
|
|
set internet-service-id 19661188
|
|
next
|
|
edit "Tailscale-Tailscale"
|
|
set type default
|
|
set internet-service-id 19726725
|
|
next
|
|
edit "Gamma-Horizon"
|
|
set type default
|
|
set internet-service-id 19792265
|
|
next
|
|
edit "Automox-Automox"
|
|
set type default
|
|
set internet-service-id 19857802
|
|
next
|
|
edit "Pulseway-Pulseway.RMM"
|
|
set type default
|
|
set internet-service-id 19923339
|
|
next
|
|
edit "3xK-3xK.Hosting.Service"
|
|
set type default
|
|
set internet-service-id 19988876
|
|
next
|
|
edit "ASEM-UBIQUITY"
|
|
set type default
|
|
set internet-service-id 20054413
|
|
next
|
|
edit "Dialpad-Dialpad"
|
|
set type default
|
|
set internet-service-id 20119950
|
|
next
|
|
edit "iboss-iboss.Cloud"
|
|
set type default
|
|
set internet-service-id 20185487
|
|
next
|
|
edit "Microsoft-Azure.Front.Door.MicrosoftSecurity"
|
|
set type default
|
|
set internet-service-id 328080
|
|
next
|
|
edit "Redstor-Redstor"
|
|
set type default
|
|
set internet-service-id 20251025
|
|
next
|
|
edit "Anthropic-Claude"
|
|
set type default
|
|
set internet-service-id 20382099
|
|
next
|
|
edit "NETLOCK-NETLOCK"
|
|
set type default
|
|
set internet-service-id 20578711
|
|
next
|
|
edit "Aircall-Aircall"
|
|
set type default
|
|
set internet-service-id 20906400
|
|
next
|
|
edit "Mendix-Mendix.Cloud"
|
|
set type default
|
|
set internet-service-id 20971937
|
|
next
|
|
edit "Palo.Alto.Networks-Cortex.Xpanse.Scanner"
|
|
set type default
|
|
set internet-service-id 21365159
|
|
next
|
|
edit "Microsoft-Azure.OneDsCollector"
|
|
set type default
|
|
set internet-service-id 328104
|
|
next
|
|
end
|
|
config firewall internet-service-addition
|
|
end
|
|
config firewall internet-service-append
|
|
set addr-mode ipv4
|
|
set match-port 0
|
|
set append-port 0
|
|
end
|
|
config firewall internet-service-definition
|
|
end
|
|
config system external-resource
|
|
end
|
|
config certificate ca
|
|
end
|
|
config certificate remote
|
|
end
|
|
config certificate local
|
|
edit "Fortinet_CA_SSL"
|
|
set password ENC cvX4mxLS5fAkfgCvidz5KVAqx5bHoODR/boRtdqtxF74jmOO8UZPH29wFEtXkw/drPYMdMSTy0Pm1Nb3MnjjLmKZW8orjRkumeWu7jomHtat0wMvK5VCQnu5tPWRN8dky4e/vKAOxOt0vWQBHYNkdIffPU9vKtLQdA1xghlLUJAuHKrlEx+HKpmbV//HezQ59fIUHg==
|
|
set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
|
|
set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
|
|
MIIFJDBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQKycqPYNc47GT33uF
|
|
eJ50WgICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIeCeiYq18l24EggTI
|
|
AYTdpR8jIxHrCHaLZFHLSg2nqztCKQfQdv3NnjF0/4gg2eh75N0YxOFcOd1PLI6h
|
|
4VbapnRQdM6davs0OH1BHX5GCdLUSkEby25ZCUYbU6BALeXTpUFpS38GmU/VwTqJ
|
|
FEt0pMQERiC2b8120R8mBzKwRSZ7IKW3QzlcTRzF3lNnUBy8HwhMqCWN8dq1FHkr
|
|
uqYNXyYlgXIW+e0ld4VYJOs76uDBPbw2Ee325FUR3xo5vxksCJc9e/Z31Lu1olYe
|
|
nLiqj9k2xvFVRvCHruAcOiwU0jv++q3Byan5/xCIlnIdPtJ+EMfsH/47qxf/BtN1
|
|
q1F6MHnd90rbnB+miPMOfwNYpNAiLw/iM/+RWUau7xQ7SSbk/8olytTJMN4Dj4aU
|
|
qH4jefV+jDenAKJ1jYbC5ZFeSuIreYeU9/T55vOjAcyQfQQKJAusvwIaA7xICuSL
|
|
4eSl28ziUe58U045LzZYqKX6+n/JEXbPPFZggFHA3Bk3CltD0tbdivn1hV1UBphf
|
|
QaYtCBRTXyi+yfPsh2DUFhyJVti3SG/5yeGRkDrWcpPGRkblt6+CVO+B59/nGO64
|
|
sg6kW86YOX6xw1IGxSV4kiAP2Lgm7xMIgf/0sypnOTfeCx5w7Zs/cRsxi82/ubpV
|
|
WqdZ8M2TjBhyNfxKrCEcpp5hwkddnPR7DvNkOuiaJcfbpAvPMY7Z6gi9VurAgsuZ
|
|
YkqR5L+UPnEi2piuMAHzpMUbl7nr1o41+IIzPtJ0+gAXUiQDsQJlqv58k36ZnVK5
|
|
jd8siye4BDTqTgFYpLvyVXf+1DoiDTr0ogp3uZDTEEflLn1ixBnlcfHcPWH7UGIL
|
|
hcwldfGc10vPjAzyjmDPM5TgwaNyMqocI3OtoQFlKNHf2ov3vWAlKPDT/c5fuxzp
|
|
57+YwcIdOS9IVYpvVNQ28pYqc4OSI4x8HeqQVnFr5KDslVVTs/o2dFj3J8rPT+SR
|
|
EQt9FaGIkKMKj49hDVLvYmcLI1162zFqZzc0c7x0m1RUg5ePtGXhhJH1ByGqYqVN
|
|
i/GhLAPTbi+eqSnCkSNeH0dSqIcSeHYbAVXVAStJoaIhbneSdWwfl2iarPnIyN6q
|
|
G1qRRN0jjGkI48bdc+K2ucJZTurriL5ns/RbOSA5S3PH3hcoTuVZ0o/VJuGK3Gb1
|
|
0zFA40o2j4TuJHzwHBK/M9DkY+jMgnuYBVKp01t2Pc+P3bnDLVbjfUkO0PiPFsW4
|
|
4SHOIIQZYAolgD2hIBr1JlTqbXp2LbWXczPw32bMaqCWvkGhEMOcpW7GQwNcHQuS
|
|
roJrYxVvR1t7ZrzodMmOq55hQGM0zlU6sj8ncrRdv5Pn22VpPRCKp14BWDQ/SD81
|
|
xeRH7VUOgiqMSIw5KKZhCYayWJ2SZwtTMqt03Miq7nweovGnzdwBMF3P2nw2QpM5
|
|
0g7UrEDkTj3g1Hghb1X9xvAKvTDDO0ZevbxcaWmi+KdxhusqHNIK/m6pmq+L1BEV
|
|
uKP4lBRD9H4R+u/jg9qKse6rvkXwipeswJAmC97ffoeln6IJ+XaVcthXczx6B/Jn
|
|
i128RUZjdukB10mEVLhoM7ofPxNfYm3pknvMWGmtKQwKlrATuJs/BCesPYG9wrDt
|
|
jKqDQMKyC2OnlJ4DunwMVnxA8ScUEY+o
|
|
-----END ENCRYPTED PRIVATE KEY-----"
|
|
set certificate "-----BEGIN CERTIFICATE-----
|
|
MIID5jCCAs6gAwIBAgIIWxoMN372xYEwDQYJKoZIhvcNAQELBQAwgakxCzAJBgNV
|
|
BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx
|
|
ETAPBgNVBAoMCEZvcnRpbmV0MR4wHAYDVQQLDBVDZXJ0aWZpY2F0ZSBBdXRob3Jp
|
|
dHkxGTAXBgNVBAMMEEZHMUs1RFQ5MTk4MDIwOTMxIzAhBgkqhkiG9w0BCQEWFHN1
|
|
cHBvcnRAZm9ydGluZXQuY29tMB4XDTIxMDExNDA1MDY0MFoXDTMxMDExNTA1MDY0
|
|
MFowgakxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQH
|
|
DAlTdW5ueXZhbGUxETAPBgNVBAoMCEZvcnRpbmV0MR4wHAYDVQQLDBVDZXJ0aWZp
|
|
Y2F0ZSBBdXRob3JpdHkxGTAXBgNVBAMMEEZHMUs1RFQ5MTk4MDIwOTMxIzAhBgkq
|
|
hkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQuY29tMIIBIjANBgkqhkiG9w0BAQEF
|
|
AAOCAQ8AMIIBCgKCAQEAxXNARZDd73WGhKka86nTUNMFDVCRFiMixn86e+kJmqqW
|
|
OnRBrChqIuPtChKvLHxEPv4pGsuJUKk3r3fI4iVIRJYD7cFtro7gx/36K46UGrgd
|
|
1mzmLrJpxGBdVIgVv9cgfwE9ngu8rHdEkxu8InLxwp+fBrAvlG1OkcU2P5zARd7l
|
|
kSdmBLhiD5Wxz/MUZRljTWBmlKVmHc3MwJybb48u1uEudh9decx+GnhYLfFZ24MX
|
|
AI8BKe9+Bz2mx8dy7MDTj/jciT9ptvgeIFYMXz0g8GJu7yHP4bU28N6Ym7pCVvYY
|
|
kp+lW+c7yivJ6Tgd7RN+W0h7a3Wp1/4qudatPL9/JwIDAQABoxAwDjAMBgNVHRME
|
|
BTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQC6uQXDG3BjVqDkZyt8z0zb+Y1Vq5RT
|
|
ppk4buPxKkdkQNtUrWobppg3IkTMWEgFMg8cxF+UkmxWibHLAaL5Se7iUeD7g5TQ
|
|
qIFGI3jXH0GADs5NjMNFQRTf9xBc0cw6ZkIumpk1LsHnPRan2OCQLISWIsHHjiwZ
|
|
ceTlsVeqcutXC8sQrueCgMzKLu+aBfK3HJ6LTMAkBVoqTNSBxYXDUoXkVBOzHuxQ
|
|
N07e/jIW+8gm9s0p+UxsSEXS911TdlL00p+ksqAthkSYm1/BfjeaAXV/IGc1DNHw
|
|
bsB/P6rLaY08AU4ihEuph4Ae+qslZs2T4W0T37fYyJcD0QK4bl1nk0XI
|
|
-----END CERTIFICATE-----"
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_CA_Untrusted"
|
|
set password ENC dHeQ2Y3Mt1tDyIHa2WEHXb+2YtVGqiP7nwDKzHQN5qbDl+VYDWgC1grIFUWfMAfS2rt+0XZ8R7vO84FY5v6JqboR4ZdVhPoTcUlqEmyNmGlpENHF5CZNu/RYYCEJepJmH5YWxSwcS+BVwZR4zaZXP6Vf0BPt1e7rwBFdo7jXG+e2NgGTzmZ8JU7kZNm5D1cw4lq2TA==
|
|
set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
|
|
set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
|
|
MIIFJDBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQ5SuAuNwDK1UFLdFL
|
|
oBY6YAICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIsYieGvaNF7YEggTI
|
|
oPCQ0n5ZHgSP6hl/aFNobtfm/zVPBBIRZ75IPOOwahhqKIvjxZ2YRY/hKZzs5qpO
|
|
xmvoVcVGpAsmYNq2Mf87e2PZoOpMSlvGbc8iRqrKKqFVu7OxnRhCskXKGw7KmKDm
|
|
8Tv+ko13iixzeVB5BU+8Mal9snX/stYqcKZMbW8OkVjXqfumBCRM0VP6ukb019zD
|
|
2Zu9ekxZpZr2Hqvw2ddTrE26eVS3FaMrK0LMTarBYK/gOtAt4BGyMbTPKMZVTuCt
|
|
vG+hFkJMatP8rlhKDXm+GHpJHCWtG4RSPCWXoVdDF9aQm3tLLHs/Cu/WnuKmG7mT
|
|
KvbKPD2Fmnsbic6pWyNDuDukn7RlbnVFrvvF80KGnaJeGuZThbKmi57z3SoWc2Ff
|
|
Y3IjyffLlQ0sLPw5de7VR3Qz/0uaXcAChzG7ua4MBOUVpRh8dwVUs3QZAFHO+rDT
|
|
dRwpPIMqWn6e8vmvPWGmv6PkoHsOq/EdgtPp3mHz8m5TBcsYB09NSIE2J+G/6q+k
|
|
4xSBQ4hHac7JzRFEycGc4NHahI/G+nE5cchIbmPW3vdJLVD8Mtso4iO2wYeZAltY
|
|
nSafW8uTZ0jL360Dct5OhjXc1XW4KE21DQt0WNY2M0svhpANbRAxaTu8Pft1z1k3
|
|
V01QxEHHTz82D3Rob/Ads7EVKZZCRPyDp5RYMoSotdnR5scZPdfTKrwt3fGrkYk2
|
|
y+SKOJZhxiom6ymDwELHMAtXWl231fkqLUh4fzVbmnk+3FtxCamFPAiQZr0+eLYm
|
|
ekC6c5jRb7XDlPUS7DxpeKyqbGb+vkiUkF8KfDBhV8wauMifeMxWYKBimghH44bv
|
|
oPUEkvoMlbIAeo/3CglLnPcbrd2wntxRvgAaLh9RhiTMFFM4MJoG3GhcnixrDp9P
|
|
Sfmc3p+aSs4iKNuiHyofydGp87+UCFfr8VcpIqYE4Pjuy2wV8gqHI7yHYtxZKFp0
|
|
a2xILAgxMliZUMnE4Rh4fCkInLJN2wA2Y0XOk5ZEvcXWzw3Rvm3Bt6vR/e3eYzrt
|
|
03DTKCIFP8s+65IqFDhKwkYM7PWWwMcf6j3YAopnNeVGdFuiokTaNSHl49TR8MdQ
|
|
PdFkzAYKd83J2QDWrNZWmHW0Us52TsJ0gLOo4J4+ftw8tDXutEadJ1e07tfBSDBn
|
|
5judmIrV5jyodmeKeTgwSn6IbTYaJ6NyQhwq8UgDzK2IyZyhGo9NU+mAo8bPz5J+
|
|
8YLNWgAlE+DAnSfJXZrkYzFwYMDVknINFkOCUHZDpC8efqtoZ/MuvJEeRkqHLwlq
|
|
QeZqjrljYDMuJUYVg4s07JYN++DB7A56cIZd+UnvzwTpgn3gE8qEsdsfei185FEu
|
|
Za0G4ykaOeHLyVETPSjEg1M2d5mQ48bgAo6omgy1b0d0CqGN2QStA7U5OQQiXQvK
|
|
7vXuGIUDsr48B8ExdaiKLm8zWP2VunmcNZv0d/zxRBD6Vc5yuCRTReM3Pql0czJA
|
|
kWSTKbcZMygoiic7UwDsi0L877vMa+eQUqW2towkNxzS8u5iqYG+nUqW6WtoOaYp
|
|
p9f2Iqpm/bHjPtvy/YediTQp7pK3KzNr/ErbavYh/TimNmCBMZsq6+QLBCyXQPKA
|
|
TyRqlrHQA+KEqrxP4oKp6XsMlFrqC/a4
|
|
-----END ENCRYPTED PRIVATE KEY-----"
|
|
set certificate "-----BEGIN CERTIFICATE-----
|
|
MIID8DCCAtigAwIBAgIIfyiVAQWBoqkwDQYJKoZIhvcNAQELBQAwga4xCzAJBgNV
|
|
BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx
|
|
ETAPBgNVBAoMCEZvcnRpbmV0MR4wHAYDVQQLDBVDZXJ0aWZpY2F0ZSBBdXRob3Jp
|
|
dHkxHjAcBgNVBAMMFUZvcnRpbmV0IFVudHJ1c3RlZCBDQTEjMCEGCSqGSIb3DQEJ
|
|
ARYUc3VwcG9ydEBmb3J0aW5ldC5jb20wHhcNMTcxMjExMTYxNzU4WhcNMjcxMjEy
|
|
MTYxNzU4WjCBrjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEjAQ
|
|
BgNVBAcMCVN1bm55dmFsZTERMA8GA1UECgwIRm9ydGluZXQxHjAcBgNVBAsMFUNl
|
|
cnRpZmljYXRlIEF1dGhvcml0eTEeMBwGA1UEAwwVRm9ydGluZXQgVW50cnVzdGVk
|
|
IENBMSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0LmNvbTCCASIwDQYJ
|
|
KoZIhvcNAQEBBQADggEPADCCAQoCggEBALJTHo9lC01wsOiqysZb033UQgUZiIxI
|
|
3i0iotMx2JwsPbAYoz2sB54MHh8eP/3aCIrwdLINy0QjQOhcALE+RAmbBH8iC8+6
|
|
iYx0t6NU/kRW4IYPcYXAOR0bz8GrsqT3yMEqOig+mYp3Xn81a0kMF4YRBi8O6xPQ
|
|
MDNdHcuREItVdJZnVZbukTUu/KTkFRv0fsS3W9B2+ykspLsUebBn6TECuNlAXJn+
|
|
mU7TVIE69Knihd+buLb18pzVAaDQEb66C9qW25OtQk+CduuKFkaqjgfoO0o5i/6i
|
|
6kddmvuSFx5x2v2Y+k+2moC5RAtoo6LSAP0pOWuFKdCwi025NIQzp8ECAwEAAaMQ
|
|
MA4wDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAnwwx5h8esGNEqskb
|
|
qJLpu2hLKjyFo+38ptUntBrX+ga5J3j7GiUbCzMgiNJiPx8B/CrqdwGx5XG+bWI7
|
|
oQ9ixnvljpknWC4P/GB0Q+BmcoHnhP0PaupH/TS4ZSca6UXURtnuIrj3dKt18RWK
|
|
2Datz6Z8NyDCGO9UUfCSQRarB8fC7KC4USnDgDtikmq3U7OvJvGYHIKkOAjA/XD3
|
|
AtArIX3nWvPePyvWcZe8z7Idl4ZOEKzZWa4CMQ+7o0XVnznD/xYuPv10D4vSdxA7
|
|
yInoXd0khuv0roUzJE1QyavmiRH3wS72j+RsM5ZNrJ4VR8ia7b8r4dd1zZPL5iv/
|
|
EpNDPQ==
|
|
-----END CERTIFICATE-----"
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL"
|
|
set password ENC ObtRPfTX9+WlV/rkbdgjvMcYy13uumhbeRyu1KVSiouTAQjkYQx6UEA6SSPlXNYzLRiFUkcBmFDfAP1kF1c1eFxmJsyDBnTsTB9gOy62IjziP9/htNA5CRgYdYkB15CHgRAmFzz4z/rQ2Hg2jNoECM7RwCG5VPlEBZWxsHIWFNECzzLHIQHE1+m7UsWHUjSycmbGaQ==
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
|
|
MIIFJDBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQPnz7sK12/6nvGsG4
|
|
WPq0HwICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIAwCilG5qsJkEggTI
|
|
KHiWKsF7K3Oh9j2b3m1nBpdFAgvBfQ8SIcPY5ESTI46V6unkDEOKsumuJDnIsA8d
|
|
+GR+6dYmi39jcMkLV5+fdxQaFCeZKdphi4Gdw8WXqXyS+RIOIox+nN+vtfy7oLQL
|
|
T5zHujPPmC+BumEX6Q7iFgoaq0Mgc4yo/O0mD+gO9HCla7y3/JA5He5vcJ2km166
|
|
SCyBcxfImddDP+0pMzZ/yxFWFYlos4mjmj2RBy2z8bVlNx/n5uMLXZgzWqWubA3H
|
|
q+P5zd90UGYpqUzJzjFBsOV1ECU3d+2MW7GT1xu34eyThHqj3rskRGaD1+hPFzhf
|
|
eG8/ibAmIwaX0e6W9AiLIRwbplUONszn0jLxWf9TwF/4+LgwQJsZaFIsj5rL4q6h
|
|
DW6kBQzeZXRUJxlQI9IdGU6ILOgHqdVn/XzezHcrZQrnqZVSV42rbt8bR5ODVZEG
|
|
VXfAXTpe4IM3laq+M01pM1CUvJT/KZ9H9QTcBkMg4VfuL7baXNECOBzMrOsNZvM7
|
|
qZRvXb9q/7LdVAvMjfGyOOQrjglU6C/y3Pzb8PjinvdgU9MPIG/vTciJMdk49LeW
|
|
LnQO/kyY/7DUp8aSlWqkB6ZT0aeItGDOcdZ83dBeu5ruhsinzMIgSyKeIWjnDdYd
|
|
kq8+zJ2URLrNWih4phOShyxCOD04dcsxZvqO/ymhDmZZNU5c5e5wCtytggeSp4yD
|
|
NPZAc3IUIs4+DoU3pG7trKFfkeulXqF8iiv9y4yjoavWD4Q4sPVoTSB1JjLXul7/
|
|
gy54oF8UyCE/PonRXooan+2mviwWmINRNNVYeNG9QUkGkeT5wonuTTSKpfqG7rr3
|
|
iz2r1hjrXNmld+ZChiqfPXKsFexcaQd4NVx1GqFYCiIRVUsTUN5lI+xBrbJld84+
|
|
R4jnubOdYoIEITIhF+n0oG6RAyUcyheZXqxAp56eXdx8ufxFlxY4jIz+ScirXKez
|
|
sj5clXL1lH8hpbqtK8zxZ/WwIh/eUcHecGWHWfnZUguB8t/7EU0Bf3KHaapyhoo9
|
|
INeOtJtc/fTosUEY51wji0X+NegkztMPgin324NwOJeBplwm7ZOwdKQmm/BukvGl
|
|
5jLPoToeQTNyJQJhg+nDpEePlIUFJOtlzj/MyTY1vIM7Fv0lzvciFfbjWap0665G
|
|
Pnw8Tmd4D5jrLy4DeE1DBbQInvlxhTXAzZU9BF3df0OYUq5/broVtEk9YXvZ/6ps
|
|
q9XyQmaY13jV/ABdRw33nmKUqsyRUNSFReqiMycofSlGSZlE7xI1amIyrghpWC1p
|
|
sL7vOcqeBaVUypee4PPKmOfMd2Fpp89CFKtnjcGn/Ex8bvZvApAaxBHOVe47/D1B
|
|
UCDRoZ42HQrhBSkzjOQb5Fvly0w+DmddZRqciRh97h0wedvLtU+Z4hOPSHUKCkMN
|
|
01/ttlfoFByXlKkAAdFI8b5veZMP0sSttrs4veOtJa6nGKzHfPTuBOWMeROSM7P6
|
|
mcbniFlVb4hXtXrNTJNA5XILd+o053V92bWLaOiwvj164bobibyqJMC1QQsByQm0
|
|
pd6T1qz1tdJnykJ1DhvE8j5I0U5Wzz+SQOb+kcuxjJ6/LPX10q/cOwNbiGewZlWd
|
|
fTGI03iEgkfPEiXjRXgJ+SuoxC09G4pi
|
|
-----END ENCRYPTED PRIVATE KEY-----"
|
|
set certificate "-----BEGIN CERTIFICATE-----
|
|
MIIDyzCCArOgAwIBAgIIJ11cxhrhvdgwDQYJKoZIhvcNAQELBQAwgZ0xCzAJBgNV
|
|
BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx
|
|
ETAPBgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMM
|
|
EEZHMUs1RFQ5MTk4MDIwOTMxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGlu
|
|
ZXQuY29tMB4XDTIxMDExNDA1MDY0N1oXDTMxMDExNTA1MDY0N1owgZ0xCzAJBgNV
|
|
BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx
|
|
ETAPBgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMM
|
|
EEZHMUs1RFQ5MTk4MDIwOTMxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGlu
|
|
ZXQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjqouvddktNS
|
|
vqCBhupJSwyhDqHAA28+ju5kp4OA+BiYmTHcLpYhy8+VnowCiKuHawKCTupFpxDS
|
|
X7RDLDMGllTb1fYGPshd/uFDesUfrcnfECmjrTOi3RPThYhtb7ktF1MzJJTOtl9N
|
|
/p8aiYXNx86+F6d/9wB44KiI8b90/KzFhMPPGEp4rAxvPsLzBe+argdoI4WzzmEQ
|
|
/z4vYhuCYSddrgeWBLYY0MXUIqn7E6AyNj3dCuu6/p3sDC7VH55I8Xye0bsbuCC4
|
|
Orpgr256mR8ZoTXw+eNxV9y89CD8t2h9Hznpb+9q0z2fkW0uwl6GnGPWcIaZ3zSG
|
|
mTezmlBDEwIDAQABow0wCzAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQC4
|
|
fkpcVFYvnmmJChK49wtu1VLH+Td/CApYCfO7GQP9dYquhPgsSh4t+gWSDG3GCh51
|
|
yze/7Aii/QGLfOxllocOYwFbDkaVOZTv5dWXv7lSRT9sam5o14W3NXQOTziVpBpN
|
|
JeX81cs/SregeDuyUqhQV/humFR0Uh6fUkVP9rjsHBEASi7YHEHZh09Sqj+E+W+d
|
|
wFj13h3BBnsTrpM7isH4HbTuXpncH3+4RDrSsXZ+t0tR+lJ49pfPN9lA7swGjEOI
|
|
uY9rBFhXgujhqsPBe92eURNo5EqCLNxM5X8DeSDV9Ya2F1vgJ2oN1OPxJ/DNdPRb
|
|
FjdQhI62yKMSuSZ4FLRo
|
|
-----END CERTIFICATE-----"
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_GUI_Server"
|
|
set password ENC C4wWafk+sfto0vmiTgkIrlFDveSf1ScgU33fGWXQddwY1c2n0O2xypG8p1W6cEcLfDl5z63XMq2BpKvsHEdXc9+Y9UhNMn9fL6VXis6RsKpO143mrYzfViibwo9+TJs8Odpi+2h3Ytd1Iptuw/1QgT3d/9QB2/TbfBhSxtaxTqyviiId/A8q+rodNu26MLN79YwgAg==
|
|
set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
|
|
set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
|
|
MIIJpDBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQ8hL3auBX7ZXg7RMW
|
|
afapeQICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIRpp8gRXfNCAEgglI
|
|
o7VlSNpueLJIOb1LrTi//ebnXPCpPcr6FM0y5XQ3kMS35D98+B1YepK8zY89HM3A
|
|
2bWCjhSF4xVOUv/aCe97m1AeZD+NPywCA5TUEp8NN88MZJWNQbn/EKOTON5tGcBZ
|
|
/7zTtzFARERUsP5//NEMUFiKMUxdWCzO+5cnpdej4+IE4qV0W6LfgA0yOrxXxcsN
|
|
MAdnx379dWlYnyYTEgvUdFQkQ6o3OMmPE6OF7xAprvvVG6xiswxOBfVMRiv6fRUV
|
|
IxyQwXcofaum0m5qtoutmiyYHVc1q84dJMvqBTYdlbRE/88sg1MUsKYj6Q6lQ9WF
|
|
gA2G251bDFCV8Egt5MR2toYqBYPCf4oq2y90Aq5xJ+OtEuOLK4HAb2XvZSq3Wicw
|
|
2bWPV4UUE7Yr2dVuEI2LXtMoIXOlB/gcZNKhABesDqq2bOEWizNESk/vQ6gGS3o2
|
|
35cRCviT4RgzUUTIpXTpYU9FRT5nbcS0QBFayUiLN0YW2oDWaJiqIfHnH2OFesvJ
|
|
DjwEDzXoAqGiLBfrL+A6CMGlnVYy2p5RX1pAnk9k3LujKWbcdFFhlgiWqTXWyiQ5
|
|
iAtr5MPWzimDFwUzG1Q6YQ2r3eyD/hf5SCC4zpnxwgatJKp/v8Xyb5t0uE2MkFYO
|
|
AFs2/43FP67LacdzeXbgKioCNqAchqD+uYOZgMxYK//If7Ln7i7iF5/fK6bPt7z6
|
|
UKchOgaTmTG7TF5E+e5hmM9kzSqttUxgViJzc4j2zUxX7kIpC8KrZ+tYcD82qmgG
|
|
xXVaX2QOyDHUOJt5i0H9sakkBZHt8lfik+7tZetY5qR6z1hYi31wtn4xMkSo1tIX
|
|
dtLoVSFUZq1xGcyfuFDE92pRubwLAovkkWL7TosxRFJp9L3HSBIjmsfLwd2YS/JV
|
|
mzVPtW0aJ1CAiFSIyn+afTTW4+0badLG/MhYcKxWaTPSUEsOiG8DJK7p6Xgxi/Tq
|
|
no6MJBQERM55KmSlJKagfMKWpmBzNhGv6/f2TgWOMOGs922JT6ubuj8oE4eG56wY
|
|
8xM2AiJrKQnR97za52J0mOLBD42lz3PZ6GiLsdyxzdzVS+7kH+oQ5ksMe20F36rs
|
|
bZ2lRCoyal9J53u9M1UYmIj9LfaghioHfWgK+dgrDp25TZ+jENwm71r4ERBYJcwG
|
|
VzNjZTvFyxPwSthMiM77T8Dt/YAD5UQmscBGopWW/d1RMYjw45DPBE/e06Ha5lU9
|
|
g8wP4ZOvAnavsk4Sv1WftQi/QN7gam9f2VkYFLqElBGTLfYJKnWUbIbpvmaJQPhZ
|
|
msj83HZfUog1/mg6vlL9JaNCvnYk7ODkgOVbbwhtzAEsBBVdFGMjbIV+/tTEIFmY
|
|
a+fuLo6SL5j+dt/zioXS4lmKL+jhx+mtnNkLbFZXRldNXepl9MS2CvsFyLmO2whR
|
|
EZhYLaSk821yxSxr0KyI0eQs9YPEtCAJFKYCJd0L70LVBcNN88VtWAXyCyXsc+nc
|
|
gJL3ML1xueFRTlzIHmGqLrBHQ+4p5MDZIZCcgdTmuF0Dqwh6C+A85xTzbHmvAQJS
|
|
Yc4MRfoHIbU/Tw9tybCc8UN6UaaD3WXewMWsOgj789uFPfHM3uegC3PXVGmwyTN6
|
|
lDcDUfk6wvHQm62Mzrocx4r1WJ+Z1yQD6nTl02xLl127GTdcicOhjjyF8jqinRrq
|
|
6rUWYSXnJfDSNPjrHH31q2QQa7gZAfVxPWZ1rQUWe4gYngQkNUnovbvslGbdV7uq
|
|
MR3Ixb7l+WY4+SQa2Vse4TEXBHAd8fQCd2ZAoRoghN9avSiFEc+xLyKebgkPhTlg
|
|
HTBkLfP9XV49hKQ8r+aOQ+otYlpXPMYokzgLMhl0VMVNL7+Db8lrSEGyooU9ACb3
|
|
cQB1+ad/26vE/96W8TGBu6p3WFSGj3vOkfKdm7qvQ6x+MuqA4tD8zEAK2WV9Cn2M
|
|
w5N7xJlclIQvtVH6t+vW3Xpe7QWZHtWSJu90K7xBljTmYptKoU47NwhyS7VKElKG
|
|
MRTdvJ5R593vJK4UKuzfpGsh4yW3icSzVprbHrzrHHTKAppguSgdSrb6SPbS+rh4
|
|
gabhaivSf7klbsguw019BjbpPuYCFPbeUvVYZATuJosmEVFMSrHGZLLdk3kztWTR
|
|
CkjAZ36X977vS1KIvLdh02N4vPVDHfCs3G50Df/EyZ/SOqfEGxUIybrLvbFkVk5f
|
|
nOjIB3qijxhGfITXQ+CSq15BeEIJFS3MCCp/P/f27pZ3gr0HN+l7Vx8dpNPHijqg
|
|
LxTlucgk5QPr1IXeqpyX0hq2TYlsj42zCoS/9rJnU8yWfhM77yzg4hXc2RyvDNRh
|
|
nX/icJkJ+lNJSIBGt49JfPLzefkb/3EAk9noVBci74iKjcnHZ2Fhv0/lNj2U61TZ
|
|
SskodLVWhAKSM88htIqV3MCW3mZVIBa9Bf1oPHHYPlaD2QJWzM+uyFxCNYGA1f0k
|
|
52WNPt9u73Ajkaje9kxvlP1648op1XWBf7IdLpjR0rGY3u7bILCvj+T8eEj2E97l
|
|
62PIVy8OnmLcb8UBmjBOY0dqrBQKvFtgJPZPv96ZkLQCtS1+f7z0//EQFRAP85zK
|
|
lUDiC0MIni3qanvkaVMpaNcTTR3lk3kf/S36/BLsy83xj0V4UKOYRtZfT3AqUxbV
|
|
6O7KpxF6piO0XG60KRaylcKPNH4g9o0/AJ5fddZfL97FvnLJDuG6IbyYVb/KC3PT
|
|
wc5sM7Lis/LxfEbHV9tkd4qWKxjzKPnizJrVaSqwejCxV/AxLPo3vEEFGorOnk7p
|
|
GuV9sdQRCAAUZeRdBBXSv4u244OcARNWvEGn+2Jk/ZFoZzeRZOVoxRkvk/CkQOQn
|
|
Utac/saQ6a7UndRzLP9De/JtRULGORvxJstCAqAoGK6OhhB4CDFKmgyVYm1DZ30s
|
|
JBeXgfTvBbUMLu+VQQ90TDNj3dsMemHeUL9NcBtxp1SqIoxCQ7Y2p1oL2GUI5rhg
|
|
XK8kLx0dgUE7jPz6ImAqyu4SgJDa0roWZx01idwKyVx67oxWE7NwX5DzKX717UCi
|
|
05npsFTEBBwHa53C8VLEL0jabHBgVDHeTnLfBLxvyW3FurPVWSzpBl7/UFXv2YGg
|
|
Qnv5t3ZfHxnbOyAhUpoJW/V57TWIDosjIabP7jXVxiLV9/2v2bpwbjfD9IDsotDz
|
|
Tf1+/reA6yP/8+GMUlfrFa06lln6kxNi
|
|
-----END ENCRYPTED PRIVATE KEY-----"
|
|
set certificate "-----BEGIN CERTIFICATE-----
|
|
MIIF/zCCBOegAwIBAgIIO8SZ+xGMA0owDQYJKoZIhvcNAQELBQAwgakxCzAJBgNV
|
|
BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx
|
|
ETAPBgNVBAoMCEZvcnRpbmV0MR4wHAYDVQQLDBVDZXJ0aWZpY2F0ZSBBdXRob3Jp
|
|
dHkxGTAXBgNVBAMMEEZHMUs1RFQ5MTk4MDIwOTMxIzAhBgkqhkiG9w0BCQEWFHN1
|
|
cHBvcnRAZm9ydGluZXQuY29tMB4XDTI1MDkwNTA5NTIwNloXDTI3MTIwOTA5NTIw
|
|
NlowdjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcM
|
|
CVN1bm55dmFsZTEWMBQGA1UECgwNRm9ydGluZXQgTHRkLjESMBAGA1UECwwJRm9y
|
|
dGlHYXRlMRIwEAYDVQQDDAlGb3J0aUdhdGUwggIiMA0GCSqGSIb3DQEBAQUAA4IC
|
|
DwAwggIKAoICAQCmxtDGc8x/EtP2DHljW+dofI7LWR+NgwJghdbT20eiHxpcmJn9
|
|
te80NazXmb/2RFWaDwQsXYAC3V4HvS3RknccIESCqgB/dul7r4G+gSal4Agq0Jmn
|
|
zQZh4+CSKmKIH5UG+xaDgyLWvtOkWzHhc+JHAI1bUcJ+uq7R4H96gD5cz+jybICB
|
|
j9aXN57RNmkYnYVcE7yGaFtNGD1kamtNhjUSxILXSMRDZwyLlKwgGxgvKYTQZ2iH
|
|
FN2NiGWEcVT+OfX/IdtRdpN3YBjyWQXbjccqxDEicFneHCDuEVSJ7HIVTiYtL92E
|
|
X7EOKkI419Hu4rN3iEvl2j8p1A0UkOfzzp2/dSRTG0hjok+ZLpx69HgB12zSUPkr
|
|
1MkJrg06eA7M4NiQfHNtovNOgN8d6wIOCdkfNnrYfIFxaNIWpGGLT+mTQA+2yiiJ
|
|
gqGTSVQ8H2ysL50cqEREX5NgZhyXnm4/zdMVW8y/z1+jYw60yhM4G6tQ4PfkhJAF
|
|
vYnyWKZec3vgRoIXrHuqKV8B4UrM+3fXT3Skw+ABM07NdtWL1TCQvMpgl7e3Sfc6
|
|
tbwjaLPCG3kShjIFvtqewi34R6cmChXQglV86LDH7/88Bk6De+5OZaN95AEBSdnG
|
|
3uij0VIoKODDUq6FcZMvKEyQ70/hG3GFP2KmxHMg0/l/8ZOUxvJqJhLJ2QIDAQAB
|
|
o4IBWzCCAVcwCQYDVR0TBAIwADATBgNVHSUEDDAKBggrBgEFBQcDATALBgNVHQ8E
|
|
BAMCB4AwHQYDVR0OBBYEFFtl2LvTHimmkgzO4opSYSEjr77BMIHHBgNVHSMEgb8w
|
|
gbyhga+kgawwgakxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIw
|
|
EAYDVQQHDAlTdW5ueXZhbGUxETAPBgNVBAoMCEZvcnRpbmV0MR4wHAYDVQQLDBVD
|
|
ZXJ0aWZpY2F0ZSBBdXRob3JpdHkxGTAXBgNVBAMMEEZHMUs1RFQ5MTk4MDIwOTMx
|
|
IzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQuY29tgghbGgw3fvbFgTA/
|
|
BgNVHREEODA2hwQKCgABhwR2Q9l6hwR2Q9cOhwR2Q9IuhwR2Q9IyhwTAqAFjhwTA
|
|
qAJjhwTAqGP7hwR2Q9E9MA0GCSqGSIb3DQEBCwUAA4IBAQCtpQPiZqwtl8ZyjYbt
|
|
HddyMDrE6b95C5Zu+PutiXl/5CWg9tQdxsQW9f8q5+IKYxKO7ybCxB+gdZP+Du0x
|
|
/2YLitWwn8/gSTlFj1exOxClhISIFNoPWwTLBZgfVtOs3W8unO8H6c5FxvBdI0kr
|
|
0KW3yrJHByE1KIy2g7cEzCmpo8XzEg12yfLQADuqo9kFpS+ceZauIaxT+Om9pTYt
|
|
zqxWHd3o14FKW3MMZffXLDpjUgx+zVmwXFx8Oab9uORfWSM35/IoUsuigXR59NB/
|
|
38Qr1QmvbYuDKHmmATTUH6Vg7DdJudl6R1+zBuZMRwMCL4wX6wtOe8VFAUueRYPJ
|
|
/Hj3
|
|
-----END CERTIFICATE-----"
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_RSA1024"
|
|
set password ENC cNqysunRI5T4yF7AXx9OpqmE2BovoYZkHWU25SiwdxxZpdQMxVSVTEut6dzaSYaEbcFYq6gqii/4uFowOOb176rLoyd1Ml3fj9wNmewtvUprDb3FLlo1p0mb/AGE8e6owo7ElZ++xHVPVtRaoa/gsu69BhJ1Duwv19e1mYkJPK8gn85+PSIIAVUdsczjrACjktRYkQ==
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
|
|
MIIC3DBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQPshVfe5CDIT7FCcp
|
|
xonVPwICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIxrwJmqerul8EggKA
|
|
QzVB/L5P3WcmPw/bJY3dMnVIcTiJOy/c+DMD5XZvdCnX1xZTCjNv21Wi3WWNDGe2
|
|
bA7Bi6HWM9kADNoK/y07pPRAXgPjAarkA3Luxlx3/Txg9tiPyqtO5bM4TL4G95ix
|
|
84a49e+w8KQonhuEmnCTJwlj+Tp4rbAcKNmJtLluM++B6xCtZGXuCR3+xQc28Y0X
|
|
LVnHABN0NZScwhPeYscork6DrpmekSoBAR991QL/oxX6OTngz0ihJfZy63yMc+Z2
|
|
KliYHKF/87S3sexO8+oTjWpWMLZ/KkCOvCY+VEJlx2On46DaMXrbjvAsYcRXFtWq
|
|
7qK9YLk829l/gXwggK18yvfp8PxifClmRJNmwDOQXI5jOI0f+kQ8Krmmtu9Kiy27
|
|
mqDeEneIFRvaT+hsPuC30gBB/O325Mvy+K+ZFvM6HU+h5yOz8gpgjtLNwSpASW3O
|
|
OisWGQtuI81NQ6hGeeaTN9Su3BAYFJdiLayCi1FFPaWB0TyL7OmhKoCeXz4lsgKJ
|
|
RfFKrKMPSgy2373gO+F1nEQcTdKaqainavKj15k+YgAqVhSc1rIbLo2B5Kb72yeQ
|
|
wW0tR+qa5VO11zP26aZsojfRZarN0Uh2PW0ND995OXjN4UynQVqJX9icf6BEFss0
|
|
MHh0vhc1S/pCcjMSpKG6X7AjV1kza4Gdrz2zHFlKc+lQXR3g6LpvFDCne8rEJwow
|
|
kjskxOIwIMePdiSREQTYapgEv5PezllPIOGLTkgHPWxo0WvdJCtGHNOkDmQE5dzQ
|
|
ithpLxPtFymehRzmb3BHCA36nD1yWI+R5SY9RGkI3F08NFzmngosJ7xgTqbMz2ZB
|
|
iYlpz/oAqK7COv2+OwiyZw==
|
|
-----END ENCRYPTED PRIVATE KEY-----"
|
|
set certificate "-----BEGIN CERTIFICATE-----
|
|
MIICxjCCAi+gAwIBAgIITzRe32SZ9REwDQYJKoZIhvcNAQELBQAwgZ0xCzAJBgNV
|
|
BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx
|
|
ETAPBgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMM
|
|
EEZHMUs1RFQ5MTk4MDIwOTMxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGlu
|
|
ZXQuY29tMB4XDTIxMDExNDA1MDYzMFoXDTMxMDExNTA1MDYzMFowgZ0xCzAJBgNV
|
|
BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx
|
|
ETAPBgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMM
|
|
EEZHMUs1RFQ5MTk4MDIwOTMxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGlu
|
|
ZXQuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCvAjMpv7oowXmeKLsj
|
|
mbJuLic43sXsh9Y1QJSwmO9O8Wy9Zc+oiwcsbO5tNZvmzrbLxpczjsQgXGjx5W8W
|
|
iuoFrrGf/Ke/K7dsbd2wUC2S06wWny4nd4a5E2krhaPzvEb0tPJZ9auOncPAgJqL
|
|
n6bdIfjHUOKz1euwLb5Lfg4yKQIDAQABow0wCzAJBgNVHRMEAjAAMA0GCSqGSIb3
|
|
DQEBCwUAA4GBABVB5VYGrVfQLJ2zl36XEORoFhKzJJWZWSiOXq1BNgzwenY4HJzJ
|
|
dFDqB9deFy4X97vECDPvmedC2ucbRkzobhZB5ecZa/RlUzy057IVWzt0b5nsldEZ
|
|
2bVugidDdFNQJjrNPeTnJalyL6fet2jyyhxd5wZ3nop9SKNmMIEn/OpF
|
|
-----END CERTIFICATE-----"
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_RSA2048"
|
|
set password ENC +M8gDbRCraqN1cXhW841EC8yjVsE1D90SlEtDE8PJy8+Kh0EiAmjv14vEIyZLGXLGuJXaXIDQnuVyZ/gjkvHwW1KJVvwh8WPF/pYFhVUD1MTZyWVtIbgYr9XjTV8G6rdYY5JXqegN82l6EkdPiLCFsH9LcAiBDxnu0ZSllZGXBqA94YOalRDGB9iYgjkgotbU1Cm4A==
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
|
|
MIIFJDBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQ+QXdlTirROfSxZMv
|
|
sPEHBgICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQI8InMswTxyBEEggTI
|
|
PF7J0NVzg+lKNi+W7RzVc8ehXA5+Jphb8DAk3W7Dsi+lJadjXGGPwzngsq94uLL6
|
|
HimPL12VCEWFvwtaLFpzjNaVBa0tboEYyE96nc0kccXTH3EFYzpUKp+dUdebK5FJ
|
|
frKN+xLlRyJdZaemoldfrTCo/Zc5qiBhCD7immRaBrMYAT4OHxRnxexFDX/h4OQa
|
|
BMDu62y2vYO0aWmw4eg1pSQ97p8H0yfu58W7zKblGQpAQZbv+xOD+9qR+fb4HK34
|
|
oKXs1f84wyt9P3HQQyXmJSP9Pi+vb0erbY+G5k7pWDyP7g3xz41PUdUzZoWGdhmI
|
|
Q8E6b/NDserQIJdsG1IBtGQjw8XMEEBosZqo8g7XAvy5FLzZVTwfKZMiffvb6QKh
|
|
a9IkB/2PWEx5B1clNfk1sXN5IvNSwC5uncYGCXNkSmOB3HMc8+Al5ZY8XsRZHrAF
|
|
AviIwmYFa2sLfp56L7h99ZNh1qU1rmjXO16QBnuk9CuFf3WD4QC6xfSFcvnVMoVt
|
|
Mft5NiTil2qDfjXpCn5WCMEYJy+iHHEWcx2U+nXu69gH2ZHKW+n46z2DlH8C8NoU
|
|
2uiOArGC4tUE86anhFLj+zQddYY2Ye5XHVuzF2XZArWzgNlvbZVUC+j6XhI5Oghj
|
|
+8Wht3KL7bJXWk1kz/HXi27wNqivaRu84K7foz4AGLDEr0xjdg6/RDOvIBJs4ST6
|
|
pzsrjz4w9LwB9mvHG3VjPsy89whwG6nIf7YDOQp/zOp4uNUsQIi8PlPR89s1UIxP
|
|
GLYLOI39+xQrX5jHbb35z7D5N8DpBI2YFK8Pa1MGcIEFRwSInVijhxcqgBzE2J+V
|
|
fmaOdYeZZm8TO9ylw40N+JA3E9GDwXPosECeSHmz3Lm20Sz+ndSYIqUYVLDlhUxC
|
|
kQLRwVW2fGxVT2R53ZOFmWkbgPeDLyjKwfs1qLwI9EH7h2oxfkfotCbEZKZDfeRj
|
|
XBnA4bj/vB62LWPhxMbfJ3uK7G3cENNB4hHlvZPDoYBY+fitIMINRepE1n/yv+W5
|
|
ScJhupvHFLQQ+AYslbqTM5DnP5zI5EpgACY4CbrDBcql5QTlCkHURyJrGhJYlb7Q
|
|
eUOirbNnevugFblVTc/uFjHQigBNmrYscg0xKeWHbphNW76NsIiaaugQRQxq3zNy
|
|
PWBBLpIkAtkpdmeGSFVOivJn4fzLDrE4XDudrOiTMNkqJSx03gxqUe+dIgraN8Pj
|
|
gOTiNJBHuXD4epIEUyBVazCRpVQaFA4TgJMvP3Y/toWVDczve6/60OHWTSuosXBX
|
|
tGQAOr67NjXT/2eqG1E1bfntcq5vhjswf0+6XkhaJvv+A9L2j91VbElTpCtCt1gt
|
|
OkVte7YiVC51hFXK7u3u/KFpF20OlpsEU1oTSk2qpk+wF6PwzxHuuYvfIU0IEwdI
|
|
mMOLYP1Ulao7MsBWbKCIZQMlFyp5aOIT0LdHqkexuyZAMgDwBXhdESJSa37EXaFa
|
|
z5h3KbhaZLsbY1baROaBWRka8Ha0G6oT5eaSqCky61Xcyx7dcdyU5TYR8h+rr/2L
|
|
gxAvUUYRa+EyJ+ULHsogmpD1wpl3GaVDmqcm3m23FiJ8JpuMHyi9Efmd/WIY7I15
|
|
+bLboO8YhMF6vPGX3NCMHp70e09Yeq+a
|
|
-----END ENCRYPTED PRIVATE KEY-----"
|
|
set certificate "-----BEGIN CERTIFICATE-----
|
|
MIIDyzCCArOgAwIBAgIIN7lbgmNO9B0wDQYJKoZIhvcNAQELBQAwgZ0xCzAJBgNV
|
|
BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx
|
|
ETAPBgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMM
|
|
EEZHMUs1RFQ5MTk4MDIwOTMxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGlu
|
|
ZXQuY29tMB4XDTIxMDExNDA1MDYzMFoXDTMxMDExNTA1MDYzMFowgZ0xCzAJBgNV
|
|
BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx
|
|
ETAPBgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMM
|
|
EEZHMUs1RFQ5MTk4MDIwOTMxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGlu
|
|
ZXQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5tAN+nHupi0
|
|
Ji3kq+Hy/C7Cc82PaEJypI5I8+EsXBpJr60Ozfr0jCbVgPNK3YUFnwmpS4itLHA/
|
|
cLhWZi2QQ5/Viodjba745NVomBdlc6vsDoIaDSMcY6xFnI+WKDPiKKo67gk8Nc6e
|
|
06XfmLp2Quzsl/aYeHSnaSZruS5ZbQlVzWywlspU5jP75Ps9du9CJgB7wH2KZXk3
|
|
1MAyeP8oWQytJDLRMYd2K1QaW7d9Zrnl+3/fJdeNhr37z1xgoSjK+kKk2xDYX+DQ
|
|
VtOGL9/hn903Qu00lcidMoCnXjxIpbl4UGscdRDthpqElchS3VtOL0mr+ULb5J7A
|
|
MtuDqQoKTQIDAQABow0wCzAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQBk
|
|
280FenHMhUnGItFnuHrThXp+6wTIP5q19tFQ0LYj48WC1eEzCzb2Dc8GhUX+K9Hc
|
|
I//TXhovYc46Fx3c4J18iBoRJVHvqiuEPrf2PHRoqFqaMrNIW83xnHb1f+eL0jg+
|
|
8vWFduWiFW+tfO99T1Nz4mOzcV3pzE7d8akMzREtx1//IYn/0drggHFjUzN45iHH
|
|
HwwspCtiZPKcTZbsv+KIRFRDeK8axEvYZGg/DEU4XPkyxVB9pujZ6dCrjAbjuYIW
|
|
qaUElztAJO4YkU0v8+vYKBGqv80bmXt6EpDvcm6PpmVwb9jSGhE7Sz0XNO7IXatH
|
|
zgzZhYKPYGeP0l3zPXGQ
|
|
-----END CERTIFICATE-----"
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_RSA4096"
|
|
set password ENC buY+aPHp6EuM8Oxn3TvbUQZJ3/GKuvqTF457ooWHCvP2QYr2AOEZu34iBaXQNzhwRFAM4M82D4JsmrSyAXMJGU2lWU3Ipk8wNZ2Gu2u6YwykUBWzTb4q3PhBgdqCIN6pafvdf3UTVPpuwSoEkXsEMi5a5kcuJHDNDLXt38SzxrKQrQCOW97FzaHzHHM/LkkmUqEcGg==
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
|
|
MIIJpDBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQqFfuwVJogM/YqM7z
|
|
r0JJ7gICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIiwz2ZvxtCC8EgglI
|
|
tjKwujChyCWkKRSBTocfhkD6kPJWiLPHPmw1W4UlU7SDwdv+iAItFVlCHMVdnB3q
|
|
yH5MnE9kj5dWmZUb4bnuzZD2umugGgDPstCfZlMrZb7wOSzfb0BRKXF6vSJ5lxBV
|
|
EQhPixKrDFjFBvXUIZi8cOAHB3HYah9JiZk+AEjpWTaFlIEQEKu30iVrfRxvJKkK
|
|
CjouEOxpCPJ/gXBVvlMDagzwQACDFmvZTJkNt4WJEcKwEFZaDjbvuvJhShP+GhvD
|
|
Sly4tBFmIqJTtZ96I4kSjBkPile+pFERetXoE12tyr51bIo/RcDEkyqBpNiBlOhg
|
|
a1hp7HjlBU5HDXNDPlu30cMDuCFnTlkT4ECJiUIzhwQJ9UURQcPZJHtlCzjs0wEU
|
|
mxdAT7qHkv4FRjcPACFvXdj+ZLnmWJ0L2sy3EeR3MZmxMB6GZmOVGJNGHb+ea1By
|
|
xSm8H2Zo9rCIdorF72t48qR+sIB3L1ytmuSoCgFEOnygzUmVomyt/5u4bDmQEsj2
|
|
35MVUw+r0R5IzrRrpXkDtC3BkWVRyARZLa8ny3Sn8+bl164umlpKA5BhTBibQzBO
|
|
Fh3QHxS3k7tzGuZlo5nxd7qtB5lCeNtXHH0kD4y58tqVI/XfL9rrv+nqpaDNxKti
|
|
yASTRKCugguu9KESVUCGNk6pvCPAXo1S0CmTD+3HwlbwlSub1AdChZAYNBk0TXes
|
|
casT9l6t8dsKU/OR6/7zyCVNwRGUmIR185jSCGW/k4Z/mFFWSw7s9VXR2+qQUgMi
|
|
eUgR4xMwEz81g2lgusZpxQqlTetWRl/sWg0wu0skE08noPaH0I9mAZN9TfC8AVnx
|
|
g5494MVWKaCxMnOmfYIgya6/DR78y/UbVNDu05ZPazFz8H+odK3eA/kS0Ht9rd8u
|
|
XCdrKKMXwYK7xGlXEmeQl4zZ4hrHFhtv1RCizPQNfRxVqpgwK7n7SpPXIbYB3HmH
|
|
oWwl6IroGGL2hxPHB6gEjwe4XGXCYKoaoFl+sgg8D09bOGeJd6AwrwQYxxlDYZY7
|
|
gLZ2vPryWpku61R1AvLmwhjfHhljtDWBIR+NlukOpodDHrDaNS5kIRkPIp7m/e4u
|
|
Hi8zrUEOhoWapCPzIegU5/1DIH95aX6CVpiP9DsrJXOhRrMntes2KLUuLPNHkFnt
|
|
t/OFraQ5OOG2sOAVgJ5V35owzOR014CUoL3WzoRPoPXOXJIiJe+fBexNOvD9gFth
|
|
P3nORj7YS3ptvzaRFkLoWsMffFm/ufkqZwHDmTdALaZMRiMqZtSzRiQ4AmWLa3U4
|
|
Zm3rl03MFdeJh7EwDwj4jaPxstfhaZQ7zxhWZ5NowOyylzunkQFSEzYNdug7p+Te
|
|
gbeKedWhxR7igoRR1n6W+fSLgPavihEagxeRiIwYnZn6ak05Fd4zWkiqaZ1JIjxm
|
|
RKdJLbGtSebYbUMBttwjAFUuciuS7Jm70vf9vY0WChKIxyMv+e5FqKL2I3NPZG45
|
|
d7ultO0Xu+Y9M9lB+64N5UWDEQ9vP4+M8qdQeXDB1V386hHMFrmyf2s3zB2ER+PG
|
|
ewiWHznbx76atsMQDb2wl4vixcnkn1tNTiiBgSQeobNNWOER7W5WnfzNPZFge6xC
|
|
JS22DmQcjZVW7ctLxZB7ksHEc6T1MAp2Y6h4IZG+r4vz7/CqNHODCSn+9hWiwHES
|
|
UDDvhk4odx8OKDaTb2QpAG3lbS+89hrincEuV9U5VJAYQ8RX8+WWZGaIwDj+tU9z
|
|
81+RWvkSnl3yEbchIlE9Y9Oo1piPVkkAuI4eB950zdFrO5ajn6AL+0haJhAnK+oX
|
|
jK9tHZjgX6oM8Q4w9hRmC43p934JyHlut8xfCBmK5K6QPaC5c2+UidE++mrMzXfJ
|
|
n2rk7agtMIqxroksE9R8lPtVjWX7/2CssleIII7u0sSXIfwUCUFiqyYxx8cynoZm
|
|
vpAfvCp86UcoZxsdYPOdDRe03fUiltwiywfBX24zrZuBKnM2vTxbRj+ngMeSBdeY
|
|
yI4arnq1icKfFvCtCx0pdDAP1A1aC/ECeef0/x5dt65667/E8283T7KGouhIurUK
|
|
lFHswAPWRsEZ/9659jy7nMGeUaeAoBqJX78gce2+oNG5cGTMT4cwoRJd5bG99G4x
|
|
BKEqyARzR1QalnmIGSoBeNbaJUCadUqPVMijWpzK82iV3q9p/DXR2MGQZJMMhwWZ
|
|
AtwRTs+m4jKxxMfW7TbLCj/JwzSOUD7WL8JXIXmiGNMU/q6omXvhPj/HXq9qLjhM
|
|
gscbYCVn2T/8aF/Lrx63gNn2ysqG0xClbb3apvcW3ir7jtjiYvFNNIp/iRC4bLRz
|
|
grasSa16KIOT8U4z4UHJ0ySuTQNL0Yq0VFmoaBqwyLk5qBviSKPh2OxEQmyY/2pm
|
|
JD5RfNYLs+HqywbfK6kvfLGfi5oXFk01mEElvsfuFbGFk/jkDCKFClaJKMLvN1ql
|
|
KRk72p6VoPvQNbzYke+mX7r8EH/SPh96VyKkHW2yxFxmKZ10o8wrRltmpQo55tdQ
|
|
K+ijvFEpmF8K3DKiOzNJV8vJ2NKs8OKtF5i/S3s5PmvRMMJj4ktjOXESQaD042jH
|
|
IKjQ4Klu8kYgkEF8BYj/xsoAXZbfLLvnosZMl00cuBNY9XAn3LU+3rBsBTSkbcKT
|
|
4t54VorxwbwW3lD3ilTjIe0wnMst3reCLIgQYWJEPK88lO66i7J/++uuk/d8LS9+
|
|
uNYNAV22ie5mwFKj71wsjmgQPziA/1F8lYDu0AzNY+NJJBKoxDb5PhD8MMT4R96J
|
|
vaCgFqUybZXxMwMV+MeJIaWzDF98ETs0cokvOHL/PZQvSJZbyUg3iPYtk3uBV3Ge
|
|
b+52Y4qrbHE3yXz5X3KIZ0NHcCP0kviCstsif4HwVT+s1ZiLAwA4hVhg3d7zgKox
|
|
WU6qVa3ZeW21WWU9ARYiyqgm8ZLrDPr7xQctP+L8pNTfSiiDORkk2GuM5cFueLVU
|
|
SM9eWzNdm0M9cijwu7OTvT+J8QMudIqOKOiTPiCdlbygeJH8qq4aG5oPZeFxjPDG
|
|
pc7sasbRHJKzQvwJhl+MIJ6z7SshVYhBuHgJSa0VfPa9S1HH+Ns39iYAjNCMK+XA
|
|
ulC01ewXm+8AXGsHpabbTlmPKx0NfEOvRHZ3Dg0W4a28P0fzujuDDuLTgaCd5x61
|
|
+dPIRU0C13h8fr/HuRn/PQ3FActrVlh9
|
|
-----END ENCRYPTED PRIVATE KEY-----"
|
|
set certificate "-----BEGIN CERTIFICATE-----
|
|
MIIF4DCCA8igAwIBAgIIN0GmZ9jtmIUwDQYJKoZIhvcNAQELBQAwgZ0xCzAJBgNV
|
|
BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx
|
|
ETAPBgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMM
|
|
EEZHMUs1RFQ5MTk4MDIwOTMxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGlu
|
|
ZXQuY29tMB4XDTI1MDExMzE5MTM0MFoXDTI3MDQxODE5MTM0MFowgZ0xCzAJBgNV
|
|
BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx
|
|
ETAPBgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMM
|
|
EEZHMUs1RFQ5MTk4MDIwOTMxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGlu
|
|
ZXQuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuOhmH7hUHNRs
|
|
uWx8BD9axxHyTQoeuxYiQfq6a4H75Y1kYPArzaNpWuXp2h+6w6ikphcu0+qxSvjx
|
|
AEPpb1YhSP78RP4I2KpVa68JyCba+aAkUiVHzbBvFF1SXVKlkCUuptaKzy4GKLP/
|
|
/LgC4AexFDGqjOEnjCYNlY5OIa48cU9BpP6JFXXX8QcaaVyo7mNFrPDyUX5aERAq
|
|
kKIM8sof5atZ6BCIAoLQ6G07xfDBfNbroSNdoLkzGRCYsCrmJ2D1iJVK6pB40jzs
|
|
GljYyyNRBqjgVvA9qEt32E8JT5hFq/uHtitTS2faiKCsb6Mkj1qu1JiDTTZ+zSz5
|
|
K/3X2uQMfDzK/rZgSIIUlkfNRoCjv9q7LBS/5p6tAXfYIX/Yo2kAUr/bqvc/09zK
|
|
vqKyjacfRRcXoP0SLw39wu00aBePuXZ/TpTc/FUIt/rnhvrHwG7X2aDpsAgc07vo
|
|
Q4okinkAxtgnHzh5df19mDURaO6lSNuLfIpequCGeWgg7hd0c+fLryLogOqPgXLX
|
|
t6ZrMsxCN7gKmgA3yY08siBcl7mxLSL5+ijf4HfU+Wrj9/c4QCTT7y5ZS4q0l/up
|
|
W59DyUrEkEIFvZNYqnFhWdvq5NAYDIX/sQy6shXdLFny4kVC0/Hztf4omOZC/6VM
|
|
eRypl/UPMQl2eKGiE7NG2kNLGx8Zi40CAwEAAaMiMCAwCQYDVR0TBAIwADATBgNV
|
|
HSUEDDAKBggrBgEFBQcDATANBgkqhkiG9w0BAQsFAAOCAgEAAj9bS663Lt6Pk9QY
|
|
F7j3mlpqOIPIEfSr2LNiTXE7MKE5VeFgLXFXzButV3N8tP69LD/ln8CCpfde/ogt
|
|
14ZU4qI8DyzTBWNENd2KSDUqtv9V7Fjb2jeNC/WgpqWhG4WZ+9JDdI2ffvU7ULJf
|
|
b1H7LBaRFVALUJN338Z+PjLicZN2VGtfaUMcayx+OW+fhslqslQsgTPdpgC9735T
|
|
fUQriOseuEplPVz2VwjN0BLmIg1q78CZllf9txa+gseba90JytWTI2ycC+zvKKTk
|
|
ojsfpU47ZrCBtgMUmxR+hvdnVGu+Kz+ZGFwXMHWn3YwajbbPGuWw26fKvXWsBzh9
|
|
Jh65eF61G2VS8c1txpIxaV4WubMlecNVwfqQivu7WFRn+xX+4QxmWOoXQhPgfbC3
|
|
yK7LdZdip8lI7aA+8nWOsq8xwZ/16m6pktzXUK1dysv6wRtlgFvaH2MOHJbncQzW
|
|
O9IlA4k9LgCGmXeeRhZK9sffigMYyDoZPvrT5LRdplhVaj/ssMwM5N48WD8imzuT
|
|
tl0Kzvu/aczJ7+OMmiipO8iYcRef0gJWDID/QTSP87XV/8rzlT5LubWvBE3bmzX0
|
|
HXy05cwWI8Rt2gEKIcwvGRIbavlDOAgmRXmntmSPsUgBNzmp9VM0AWwReidCMXLH
|
|
mDFqNJiz0v0cMO0QO1vgeeDGPLU=
|
|
-----END CERTIFICATE-----"
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_DSA1024"
|
|
set password ENC 4z9ZcwcYk72O0EGtLRjmEDgMOMpXjLm1JYTsfkzURehULPWsAJUCdJHhaW+0pa6nm3AHhtixbUQUzne54YuapvrPgWSQT1kL7wnCnPLUrEhtW33x4aks3VTtwoYwF7G561Yz3bjgL27IXETZZoxfAYG2Ixs19m/koxgcIKvL6HzkaXGwpB+aEb5ogYj4UVEF9WCy7g==
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
|
|
MIIBrDBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQL2L+C5I5Zj/Lh00k
|
|
l7jcQwICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIChu2QtMytKAEggFQ
|
|
prj6PpLgvFL70pYI8KuNJnfazNuUtnlhnYxhoLoHBsJm8XVDtTxz6dHzxLO9svk7
|
|
vMJhbS8B+0ZcRK2CjBNv5w6mGgV2jLz31bpC/lKn664Giw8ePJpdhxOVG7mt6u5c
|
|
GXxkBWkQ2y92t+VmQGTNtM5jqyxO/4XedVGWB6K3913noMxEJcCHLuM3KodEj1U6
|
|
0B+w669c1vyDc0I3ql5yBmLZupSj9qLJ08knhpIMFJYOemMFs+ugY//xdzUqdIpH
|
|
7R+SKn/+KoqxgM15qbdQ58UPj3QMMAw8Vugd142JlFJkT8Ub7gM57wkTykJh2y6X
|
|
R7y+yUcwLcVfWZ9vyxRmPwhEaUCyLIqHmu6flSSotWYBI2gTqrH13pQwiNalCLCa
|
|
IaO8aOPxJk9d+d6ZGwCuGsMgjaHyZWoMzGoRTr98Ml2H50np4cDA+68MdTnjo5ly
|
|
-----END ENCRYPTED PRIVATE KEY-----"
|
|
set certificate "-----BEGIN CERTIFICATE-----
|
|
MIIDiDCCA0WgAwIBAgIIPMPgD9Fx49MwCwYJYIZIAWUDBAMCMIGdMQswCQYDVQQG
|
|
EwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU3Vubnl2YWxlMREw
|
|
DwYDVQQKDAhGb3J0aW5ldDESMBAGA1UECwwJRm9ydGlHYXRlMRkwFwYDVQQDDBBG
|
|
RzFLNURUOTE5ODAyMDkzMSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0
|
|
LmNvbTAeFw0yMTAxMTQwNTA2MzBaFw0zMTAxMTUwNTA2MzBaMIGdMQswCQYDVQQG
|
|
EwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU3Vubnl2YWxlMREw
|
|
DwYDVQQKDAhGb3J0aW5ldDESMBAGA1UECwwJRm9ydGlHYXRlMRkwFwYDVQQDDBBG
|
|
RzFLNURUOTE5ODAyMDkzMSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0
|
|
LmNvbTCCAbYwggErBgcqhkjOOAQBMIIBHgKBgQDF3rt17gyqam1uu711ihuhu6b2
|
|
kOvSzIAwPW16srtrWPIoqv6hIaGNo4W5sskw1onr0SWfc3LgePMR0OksQc5XvZc8
|
|
djRLgfpfLsAvjyD7qQFmY9DQ/6pOqh0Kju7QfLKm+8reGLkH/2XaL5oKV9+py8qQ
|
|
xzvDey+uExr/Hfm7MQIVAL6zmH5AQpvFHMf2aS/Ud2F4tTuLAoGAb8fOENnuh2Zl
|
|
eMr2aWO/zyGZxiW6xkUOotv+3b30tMevTaFoXB4zBYPme1uJX6+9QGbt4oe5VIwA
|
|
3DK6OX17MbeC2VU2Ic2SVU07y5XjMenUtFkovfyltl8mBVW3H/rM/0PbPHf0KIEw
|
|
aKxrxRP1LPW1JOeEAFCggoBw/3HWi80DgYQAAoGAKwoosL4WiM4CPsz1R8VzhPFM
|
|
lJhJQkj+YE7yUFOdtvRFhBzJOW+hj9bFEMlGVHz81d4r7+hlATS37HxHYghtdvZJ
|
|
O9kS5IorH4F8sBjCRmVslCoNpLOWMQB2K71wVP/ucP5Ihr3JFdQtGO4lOZTvhba6
|
|
CbbDmw2PoWO3tjYJtEujDTALMAkGA1UdEwQCMAAwCwYJYIZIAWUDBAMCAzAAMC0C
|
|
FG4QkZjO+XeMURnUzMi4j/j2UI6ZAhUAp08ZdS72y3TLlTvprvNt5Ui/Dw0=
|
|
-----END CERTIFICATE-----"
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_DSA2048"
|
|
set password ENC sgjVAmd8PD8UqPjjhovlhm2KovETKnmQuu6Ar5H+Wow5cnMgdiFY3D5SURepstjjmpnYAC8AjcKAR+w+2L56pEfM3wC2AV21LxE5PeGCugSJYNTi5UYENF/kLKPWzfshhQ8/6/AiMqCfwizrLAxsjKYYpgHOt0uy/pauE7SkngivVrZHq0tujKUWGiYfJ6XiWAYy8w==
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
|
|
MIICzDBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQ93kltnrrNClCfKME
|
|
d3JJJwICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIFOnAXkAnUhAEggJw
|
|
BWIdz252LEh7UF74Uc9QONUOQWuwP9yZ+//E1HBrlu34gKv758lgAXcL0Ujndmdr
|
|
GXobyWSFjCWHcee24PlUdgUKaqYkO8ByoOZOoiziKmN9WVLkWbwql/5NXYMfShkf
|
|
CjVwMTRrTwUlsp/6S+Fshc59YiTdUyH1kuNOv/0BDDQkIw6rk29Fb2ZmMxIZyYO6
|
|
ygVkASUG3bCqnmkp3WXlbvTZguASDev37Hf601g6RyDXoeOES4wVvM9pcxQg4rk9
|
|
vhgtcI3QVBYz6YUhiXOMifcZfWKtxlxZJJhwogUIgt2knxuvzUhVzVPemoOLbVda
|
|
zpQNMp6vWgbHHX2YnEVxWYIN/GLP3p9yUkqXDUx3QB7CsM4GoNYMJJ4uHrc4ikLq
|
|
VcK/Bkr+u/Zy+G22g3JNJhLeAzg/+dSnlTJNXK17qDYsDsul2g0O3CTJIBz5OOKo
|
|
J+QA09/ZnL3N8gDQm3yvhhrTW4onhgo5m/9d3G0LC4nLO002/sy7F1keRw9cLyWn
|
|
gfKLNCfWQL1COO1TkPC4b0mDhUikuW19GR1lwYBZOTY2osESZa426W61ZkURXxCC
|
|
EKaJsnsdVMsWzum3W/v6P193wgTxM+QklHGG6TU16uQFYvCzzAqnV2T2pOyuS89Y
|
|
RtnE48rahnj2PumrpRvJplrjxtosilXR/XH4YLHSHhzFzyYyxdq+JjP8Y0uX5XiJ
|
|
GCrvY3RbslETlSC8xJF6yJ27zu9OyO63jYDU4yA5SuCkPraM4U9eY+3h33NXJDMc
|
|
j+imEwPc8DtvTwtHMidJTQ7v/9ZZO1cNuGbcO4UREwq87MC3YyD/hmMsD0K2PCgu
|
|
-----END ENCRYPTED PRIVATE KEY-----"
|
|
set certificate "-----BEGIN CERTIFICATE-----
|
|
MIIFMTCCBNegAwIBAgIIZBkvB4M06iowCwYJYIZIAWUDBAMCMIGdMQswCQYDVQQG
|
|
EwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU3Vubnl2YWxlMREw
|
|
DwYDVQQKDAhGb3J0aW5ldDESMBAGA1UECwwJRm9ydGlHYXRlMRkwFwYDVQQDDBBG
|
|
RzFLNURUOTE5ODAyMDkzMSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0
|
|
LmNvbTAeFw0yMTAxMTQwNTA2MzJaFw0zMTAxMTUwNTA2MzJaMIGdMQswCQYDVQQG
|
|
EwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU3Vubnl2YWxlMREw
|
|
DwYDVQQKDAhGb3J0aW5ldDESMBAGA1UECwwJRm9ydGlHYXRlMRkwFwYDVQQDDBBG
|
|
RzFLNURUOTE5ODAyMDkzMSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0
|
|
LmNvbTCCA0gwggI6BgcqhkjOOAQBMIICLQKCAQEA6M4IV/mMqjp4pButvAxjij34
|
|
zlDoHz9wzLZGFL7k0FVFN7rBKERwcCMQiI+0EnR5KJOqa4anlpXQx/lg77LymneW
|
|
WTc1AO65eBJx/C/109pMZTatHPik1YLKs44EJjWZ9iV/pRrP7XuG2J1AXE43VT2p
|
|
8E3jaJokTkspseyxAmgV4IjouJC3HSCqUriVTlxnfbsixW2CvKhkC/xLy+E/+tlM
|
|
f1/1/GIPG333wlHHQszD89IYEXOeCStL9S8tF768Z82xGsFZ5npqzF8pw1YKQA/1
|
|
3N0Vi47Zz1CjXRWH601dNE0yE5PMGftW0QSFhvvLgEXnflcZ3+pxJcpnpEzrMwIh
|
|
ANFPk26emIGF4Zu7VjydqHIPZFBNip3DcqAtFA3YMMdbAoIBAQCYRFwONG3bbhXk
|
|
w4+p7KOGgEzG4G2dHSUuXMDKWrN0R507ucNphmupypuEHIjiCJ6Z5XrwVr2gW3pj
|
|
35jXxeLOxdBrBpR4kTGeTwj938HFu74EdQkJaqccpMxZ4p0uG+xbjRR96j7Ejx57
|
|
JAZ7MSZDdJ1h0Hokpr04oF442Oa28YG6Fe8FnO4xK9xEhQQacvpAqF4ZlO5JJ1Cx
|
|
JY2Foa/c/teG72ZwuRXsdmHHCOwfM/H4gyD1hm3zBMrfveMKcfAOT9972u4KV/t/
|
|
3Snf1T6p4QqEzBwZFrXn5d2wWdmvfGyqlCPqweP2arZ8aDTq1VGrvH5fhCvo+Q4G
|
|
hNjJ1fgeA4IBBgACggEBAIlJDGebgTXLh4a9MN+PY217ch4B8eKLTLbUDYSpcgGN
|
|
PIHZl9INWQu8AELrVUczaRiJa/fgRriT8gYXmq4FPZwjKyBtUHKpbMrbvZ4B+Ecp
|
|
cBuCWn6O9Yrz0wYGj4Tllbz/vtJEVOcWp1aPmu+SOgMLUnnZz/EDJxrRgrbBoc/f
|
|
Y6TTHkSv4E3A4RLK7f751Z68mwGiwTk329jtyOn1Ai2SYPYbMLAa+Yfhqg6R+t5O
|
|
D/GlGkYfLXzUt2gcGveV1UqfmuPOiqHVgtX3TH4aCT7lz4cFeV1oI+Qmv+ZAgCO5
|
|
DvbG+PL8b4u2QpwDoE4xlcOpKMSiQGeIQQi83vFB2gKjDTALMAkGA1UdEwQCMAAw
|
|
CwYJYIZIAWUDBAMCA0cAMEQCIAupwkK/IvPK6+neyeu7aq2c5uZN7sJCZ00HSZGF
|
|
AYwJAiA6JT5JqhYmdJqF46PM3Q3R+G3Q0rpZrDDlJM6xlBFBQA==
|
|
-----END CERTIFICATE-----"
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_ECDSA256"
|
|
set password ENC UcBIBB8OtNcARjbBVb3T+ZlWRKCFwp+1UDRBmoNPgbweTM5cAQooXr4J0frkk2Ua93KneOTkEbrqkBYVUWBD8JG/9m/Mfz1xAb/FcmkArYbamLWY4QmDWG/ABJ5CYoyQTMfebfqWghjdN3EeZFysnGvOZ0m/7qSCIGrqXYDQ2EStqdfybB8tmurPCbGxmFa+fmfN7A==
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
|
|
MIHrMFYGCSqGSIb3DQEFDTBJMDEGCSqGSIb3DQEFDDAkBBDwUE4oVU8bhdrp9iK+
|
|
59yaAgIIADAMBggqhkiG9w0CCQUAMBQGCCqGSIb3DQMHBAhEtbJHph2ipwSBkFha
|
|
FEWFiXstsGYsyY/W8EYi9kJ7HxP83c8xmVHTNKe9Q9W+Jg13dp51ejeoKKa6Tres
|
|
kMqsX8emKIR0r7oFkanU3qMaDxbDPwcTbH1EjuIJETUpdnlwVvFmGJncQ3Y4etqd
|
|
AlU/JgbnbElkyifr2NlNYVvSEx6OtOdKt813/TgGocMb9na7LZqOvRaSDEpjGQ==
|
|
-----END ENCRYPTED PRIVATE KEY-----"
|
|
set certificate "-----BEGIN CERTIFICATE-----
|
|
MIICPjCCAeWgAwIBAgIIIZH+whs2Y2owCgYIKoZIzj0EAwIwgZ0xCzAJBgNVBAYT
|
|
AlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUxETAP
|
|
BgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMMEEZH
|
|
MUs1RFQ5MTk4MDIwOTMxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQu
|
|
Y29tMB4XDTIxMDExNDA1MDYzMloXDTMxMDExNTA1MDYzMlowgZ0xCzAJBgNVBAYT
|
|
AlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUxETAP
|
|
BgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMMEEZH
|
|
MUs1RFQ5MTk4MDIwOTMxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQu
|
|
Y29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAESpUVKc+ZHjLHAylP2vg16L9M
|
|
0Qh1oCfiA06T3Gjn/11GlZdR/aInXtKeL7lCi20Hp1zUG9P/tBOpUiQkVGX/eaMN
|
|
MAswCQYDVR0TBAIwADAKBggqhkjOPQQDAgNHADBEAiB/GXLxZn47agiOWRyQIsuE
|
|
WeqRAJwi6fveATM4HPzcPwIgMaW8K8B+iXt2oIRD3yjNiYlgQqBOjb8SGIjHb4L7
|
|
qis=
|
|
-----END CERTIFICATE-----"
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_ECDSA384"
|
|
set password ENC osQp1D9GYiWHauQXNXbd7hbTZqoVJbWiPw42yR5Bj4DmB6XsoPTdH7tWBrM5GVRcb9Yp2+h/EVew86FiaNlZ3n0QJ6/e9SNSZIaYRO5WqQjH6A9DZp8l021sZ/qAtO3W9MqlF5CrxUcpg4FcZs4s/ORIJJ+2g5ILGLqb6qpNvfL2GbE4MT/fida/ktPI6i2rkUaieA==
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
|
|
MIIBGzBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQQh4wYNbEy+pffZcb
|
|
qHNbkwICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQInYj7jHNeCpsEgcAK
|
|
VBOp3jxdOrFbjh7D8LfoqZZkwsELmxbiqipsOdps5EJ1NKlQr8q/xDgA1KfbioN7
|
|
4kmILoG98UT78FrS0+knvqPYmUKJuEsf7MBL4ozAwnmGMS0QppqPcGuM3K3D3Pn4
|
|
NP/7dZs9neGQWv7t74sglvOpaDasb/Ew6KyHV8q1sqks5S4qBuB3qzo/8M2NKz/4
|
|
pIz/Hn9auaGnKP/p5vIapJ8iWWqYz9ukkPClzQVBl3UleBGEOupPj6HDub5pMGo=
|
|
-----END ENCRYPTED PRIVATE KEY-----"
|
|
set certificate "-----BEGIN CERTIFICATE-----
|
|
MIICfDCCAgKgAwIBAgIIL4j2dIsrfkAwCgYIKoZIzj0EAwIwgZ0xCzAJBgNVBAYT
|
|
AlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUxETAP
|
|
BgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMMEEZH
|
|
MUs1RFQ5MTk4MDIwOTMxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQu
|
|
Y29tMB4XDTIxMDExNDA1MDYzMloXDTMxMDExNTA1MDYzMlowgZ0xCzAJBgNVBAYT
|
|
AlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUxETAP
|
|
BgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMMEEZH
|
|
MUs1RFQ5MTk4MDIwOTMxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQu
|
|
Y29tMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAESFCl83yxoLGFmd7EmRcl13hytA5W
|
|
28BAi/Orlf2/4J1FTG+px92SiGvyy9rMYezZotm5mHP8FBRje+Yvsq6ELbyvloHT
|
|
/9CFoqTQ5GpxqpR2seejGf2GeotKq9PrcACEow0wCzAJBgNVHRMEAjAAMAoGCCqG
|
|
SM49BAMCA2gAMGUCMDRy+j0Q8oAUUOYKG4++nNWlWna7rsOjaG1UIXVUMyXyBSin
|
|
DqYHI1/10pQm5MVt4gIxAKs5RIwrKLVOYZNsnycTUxJ5N6Oz5Pz90tpK4OsA0whN
|
|
TBEhlDYhcxbX2FpH0rcNQg==
|
|
-----END CERTIFICATE-----"
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_ECDSA521"
|
|
set password ENC Ozd4enkNHCDW0t4OhzD6Ks75IiFyLS54AZJ2wwxx3vli+ob8UJWE4j3BaiAPe3oPDhw1JaBNjDFX3BhHIBpky54D3V12xSN/JgpueiPXgxaNaNUsQIeR+TNvoyUTTK+XS8Huo1zjJ2YlbKvSF0wGAOd7VeUSiXaKZ3hPH6CuLnRbb1VZ6fweDhhUyWBtuiR2cMY8iA==
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
|
|
MIIBUzBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQ+yWD85+blA10KCs9
|
|
pho0HgICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIpdSLl87Wkt8Egfhb
|
|
MTs24uDR0mVyRyLy8lVLUtDojusDmZa24Ehm+OuTeOUZtMO6+x+GLXqEhAhB6oPf
|
|
Wuc0QtA71+JjZEy/luR0nAPkEbLGKxRMQV+LsvJSS78aYQvZfgSDC6c0kLlgxBkx
|
|
y3tbsjaI+FJKBOVfdwfihoIrgKqMt8r6DR7ZuZUab/ERAmXYJZbCZ2JQKVt2dY6M
|
|
uPATrxFfy63Mwd2ck0tLzR/e+Sx8E2IIz9DmbfP3QOHQ3jAKWYMEBhLuiV5ecjeN
|
|
ez7CTgoD5Y15s5AnoBDBqNA3/0zw6k9NneiazPDuXnCms4qEPubKgPE3Z1/Ro3LG
|
|
WQ2a9jW+tQ==
|
|
-----END ENCRYPTED PRIVATE KEY-----"
|
|
set certificate "-----BEGIN CERTIFICATE-----
|
|
MIIC3DCCAj2gAwIBAgIIXrdTobnKdwgwCgYIKoZIzj0EAwIwgZ0xCzAJBgNVBAYT
|
|
AlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUxETAP
|
|
BgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMMEEZH
|
|
MUs1RFQ5MTk4MDIwOTMxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQu
|
|
Y29tMB4XDTI1MDExMzE5MTM0M1oXDTI3MDQxODE5MTM0M1owgZ0xCzAJBgNVBAYT
|
|
AlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUxETAP
|
|
BgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMMEEZH
|
|
MUs1RFQ5MTk4MDIwOTMxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQu
|
|
Y29tMIGbMBAGByqGSM49AgEGBSuBBAAjA4GGAAQBAq0mVqRyHLChQcpUAq+ZWE6G
|
|
E+OeWGScZ1j7Z8pg4MblrY8kkF/B84pwvzAyEnCUF2F4CAwza6vZIWzakouZKukB
|
|
G9M+E3k6VSVfqx3Wg1uk434zi5Rq7S4bEo7If0ZZ0OuTgX1Nrt6rEUnxr24tRxOP
|
|
/lFqH2Gb4rx0+BAZxyUrCIqjIjAgMAkGA1UdEwQCMAAwEwYDVR0lBAwwCgYIKwYB
|
|
BQUHAwEwCgYIKoZIzj0EAwIDgYwAMIGIAkIAuXGvwxB+dvxqjRCQQAtfRChH8HX2
|
|
6ElLFYDu/dciYi4cIOgIpMgFnChs5NbYrfIx5pPXOcktwKRiakGo3kOxSIYCQgHh
|
|
MwKiTtsB2F3BqOVeLuyawOw6yh4covlQjfkHNcPT1BSmV+9GRwPV3BFGMCiwPU15
|
|
ad1mwu8F74TvFhQd3h8AEQ==
|
|
-----END CERTIFICATE-----"
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_ED25519"
|
|
set password ENC XWm+9/0NNBZ1s35xxZz3tkqeAwB0XU82lAyScMpx0EAZe0fMiuZQyp0FIlOly9L1uvBEAI5UGKaevHlSlIwZUqhfsrHAkyXl7ifLU1EhoukNXQnohEiPeZNma+BPtDNLOpShqQ4vqJZFzHW1nTypvpvnIA3ITH0Mvn+h9evXZrbj2vcPwYk+L0WgSEkbcAjQRrulhA==
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
|
|
MIGSMFYGCSqGSIb3DQEFDTBJMDEGCSqGSIb3DQEFDDAkBBAJo88J6sENlJOCTPuM
|
|
Q99BAgIIADAMBggqhkiG9w0CCQUAMBQGCCqGSIb3DQMHBAiUyAcqB0lyVAQ4VxLC
|
|
V9FxsWRfDT7KAberhaPV8Nj3HW+FaaaOyAujCeKX228bB3sgZx+8lqcAbYRWInRR
|
|
K9MqDLw=
|
|
-----END ENCRYPTED PRIVATE KEY-----"
|
|
set certificate "-----BEGIN CERTIFICATE-----
|
|
MIICFDCCAcagAwIBAgIIGuv1MVE+qHMwBQYDK2VwMIGdMQswCQYDVQQGEwJVUzET
|
|
MBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU3Vubnl2YWxlMREwDwYDVQQK
|
|
DAhGb3J0aW5ldDESMBAGA1UECwwJRm9ydGlHYXRlMRkwFwYDVQQDDBBGRzFLNURU
|
|
OTE5ODAyMDkzMSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0LmNvbTAe
|
|
Fw0yNTAxMTMxOTEzNDNaFw0yNzA0MTgxOTEzNDNaMIGdMQswCQYDVQQGEwJVUzET
|
|
MBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU3Vubnl2YWxlMREwDwYDVQQK
|
|
DAhGb3J0aW5ldDESMBAGA1UECwwJRm9ydGlHYXRlMRkwFwYDVQQDDBBGRzFLNURU
|
|
OTE5ODAyMDkzMSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0LmNvbTAq
|
|
MAUGAytlcAMhAPwBBHQqw/ZQDqo4OwY1dXROkucscT6ZdxO5oa28rnrpoyIwIDAJ
|
|
BgNVHRMEAjAAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAUGAytlcANBANTTosR+GnFw
|
|
4dN6a4RPwQP+EccbggcNu8AO152eE0pRd/Md49YBkKOQvhNbz2YPVDcKqLlSo5/2
|
|
gB/r7KvXtQA=
|
|
-----END CERTIFICATE-----"
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_ED448"
|
|
set password ENC DDV2yJTo9u1R6RE7WgEoZS2PvDDYbml6kY7rOgGnmJ3eiH4V6vYOLccZfXysaQ+KTqdThKJ/XgtQhwY+QdZZN7Yt4rr3mcMk+al07DP6kX/MRZink1N1uY7p3GOnnOYesrRiO+OOAItoY8FsmNuEcRUZ6cNhJ3Z5jjfc309giILfLWz4Y6HD87MYMRy3xyeMuCx7dA==
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
|
|
MIGqMFYGCSqGSIb3DQEFDTBJMDEGCSqGSIb3DQEFDDAkBBDYVCg8O6ONyUpv4YAK
|
|
3oZ1AgIIADAMBggqhkiG9w0CCQUAMBQGCCqGSIb3DQMHBAh+4uV2xYW3agRQHw1Z
|
|
MX6cl491fqMltzHF+NA0MeFmtznbTJCibbPu7uB8jhQPYNmxcPoEP229d9+xohxH
|
|
NaMJ83DoDXlqd6jVWnne2WZZu2rI6bYZxt0YVN0=
|
|
-----END ENCRYPTED PRIVATE KEY-----"
|
|
set certificate "-----BEGIN CERTIFICATE-----
|
|
MIICXzCCAd+gAwIBAgIIDS0JvxML9w8wBQYDK2VxMIGdMQswCQYDVQQGEwJVUzET
|
|
MBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU3Vubnl2YWxlMREwDwYDVQQK
|
|
DAhGb3J0aW5ldDESMBAGA1UECwwJRm9ydGlHYXRlMRkwFwYDVQQDDBBGRzFLNURU
|
|
OTE5ODAyMDkzMSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0LmNvbTAe
|
|
Fw0yNTAxMTMxOTEzNDNaFw0yNzA0MTgxOTEzNDNaMIGdMQswCQYDVQQGEwJVUzET
|
|
MBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU3Vubnl2YWxlMREwDwYDVQQK
|
|
DAhGb3J0aW5ldDESMBAGA1UECwwJRm9ydGlHYXRlMRkwFwYDVQQDDBBGRzFLNURU
|
|
OTE5ODAyMDkzMSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0LmNvbTBD
|
|
MAUGAytlcQM6AB+igquvbGuH1CJTglwG9Ju7Okg1h2tIN6892ekUc3I6oeFyn3Nz
|
|
JSzdOzt1hc29JAimVVprpo9bAKMiMCAwCQYDVR0TBAIwADATBgNVHSUEDDAKBggr
|
|
BgEFBQcDATAFBgMrZXEDcwAyp2Sp10RzyrhR1LZ2V04CSUdN7rko+fihKu74ngpN
|
|
61TalIFgHO8Ad0R1GN7sl6QWSRlCerHUiYB2RicYugM+srmrmFBJqYdnSeaksGv6
|
|
iG4tzdWztpOGZ04W7exv9AIh52kPkVI4kXciBoGUHSceOQA=
|
|
-----END CERTIFICATE-----"
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "fw-brilliant2"
|
|
set password ENC aAWKSLRJ87u25MEv+OJq7V1jgpJjY0PQPE1pu52IVeTCgOa9WOqt+hbJrXjHIRxu4ywLV/kbHVc5hvTwSNdxdrDnKMnHhFi/oRfE9D8JMIY7maeBWkbNUOPaTWmoaFh4R4Up8vkBe215qyCJ1tOgma0M6l9Vi7qPo1nFOwmMQptkKPNmBD313P/Aimlgrw9xhEcVYQ==
|
|
set comments ''
|
|
set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
|
|
MIIFJDBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQJlvslFFqjD3LiYn3
|
|
zrYwYQICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIbffUB2jlK8QEggTI
|
|
bPGOpVUYbqk0Y642+YFPpH/2/JJFW9XobJr/5ueh/afsoAlrmzjX6+fGYkjBL4Qz
|
|
bGjnnJKBr4qJTJQ7T0sDq3WE1EGtHXJKEf+z80gkyroAdOpGRmaPEzWPmh/r6Fgx
|
|
NQg7V0Bley4J+ML326n+VKVOEiEABYbahGQqWj6IiYY4FEqEGlwDG7u6ZNUj6Gxm
|
|
B5Ueo3+cf/ZHHz5YKlxeMQqlp/+RZCmPo3pUa5p6kbvmgAoqT1BO0F+9u1gzwkLD
|
|
oEaR4x3jIgiN1Zt2318bWwmVLx81X7neJUvuYWvDVillmw/cY0lSTP8CSwdFrm2Q
|
|
7A44rTRUg9hz1VQWIHH4zLGultHcoprZaYY7CM8Fm31PqAX2riCgTiuSfKxA6NrI
|
|
SnrDlRksddlFwMHZCX9sQ8tqsjneNG5tUcu89DL/OmrDdSGGyo0BGhlMhv8u9V+H
|
|
arQ6rCiIZGyfD4wP8WeGiQJ8Gt9Kp4YRWHNiOfQB1vovHTav86MNRsTb6G8yuzHV
|
|
HOH2Wjo64iVjoCJfzbP6BaIjOd5G54KqepLd0d3+rp0BNgFMYuzra0Y9CScw46TL
|
|
j+e8piEsFh2dzNxUF1PCWBZFLhieBTPxGqXH147gv3NvSYOzZO6ln2jFYs2+q/4h
|
|
FaF8H+LB4sKPRaqWC/Y6ga2W21XApt4+Pb2EHuSmM9b5swISK4yNGPuqrIr/vits
|
|
GKOwedAbLgiZrUPtb9y/GRxlBhmL5rbHRzbCX1nNPoHY8cqybUh55Wawwb3Rjfzd
|
|
wL76VMRSoW/ZOyy/p8oDoG6A+wr9TPHSvZhWehitN1KkP73juqMoAZc/BUnbNy/e
|
|
r1FDkce5pPAcB4mCv/1tDQdd5c89pjWD8NxHQ4+OrWtmnN79FcBeDkJXRIWVe/fT
|
|
xVi4iFbetoqh9EDZTyL9fFCr/+D9w9YkNrlARmSkRYTgM2audG4Vm3OPvOBsqwG4
|
|
Fk4iXJQaaQdOD53E8aDZWZyXA59qpmgi9SDSkNELBb+hDiu2IiJZUdZCx4FangwT
|
|
HhYdA0Cx0BJW8AkzbarE7jHHX1V/foJI2jcAlTFtvDmU+TISY7asX70dOBhodWIn
|
|
2q3V/q8rZVCJcgoMnmySh0RWMTL4Of8auLpQfX6Kc516MxJCJVlu9CeWCnx4oTlq
|
|
caYfd2gtZERCrpF+DyTMlkidMneP0lvWbr9QJ9rE2xbdEPu6Vox/Y1mIMrhCoGKD
|
|
pys+80s81T3YKqWw6Gpr47fniB6JMvKVxyoeYE+GIwkyM/706Kx9ZENZmwzoxYNd
|
|
c7E4FBSMPaDea5Z66OmiTyjk6pPfA5RLS9YT8xGR5VJvVMd77BA0NKbD+afx+4Vp
|
|
DN88WbHT4O32fS1N9c5yyY86KBHLSxFu264AhHTau5db2UTJiNwqMSzEONeybsPH
|
|
eyW6h+3PegpaCMRbDrIpeHhLLxwh2uIEarUxkpU54jYH0ma9KRDXjGWUlGOYXQiI
|
|
JtDt5PZcPBqM1Oc+XFZLql+fTzGfLeAbGzEaiKfkgOJYcR8KcufUF5o6uCWDJBxA
|
|
z3FX5fZx/13zV+sO0DswhzMLyhXGJ5ZfbThlOiuj+KLGy4hOjl/K6SIqILmvco91
|
|
Zhwb+zlnctwdrKqTu0dF22P3inFk5HI0
|
|
-----END ENCRYPTED PRIVATE KEY-----"
|
|
set certificate "-----BEGIN CERTIFICATE-----
|
|
MIIDvjCCAqYCCQDVOxeuj5koFDANBgkqhkiG9w0BAQsFADCBoDELMAkGA1UEBhMC
|
|
QkQxDjAMBgNVBAgTBWRoYWthMQ4wDAYDVQQHEwVkaGFrYTETMBEGA1UEChMKaW50
|
|
ZXJjbG91ZDESMBAGA1UECxMJZm9ydGlnYXRlMRcwFQYDVQQDEw4xMTguNjcuMjE3
|
|
LjEyMjEvMC0GCSqGSIb3DQEJARYgY2xvdWQub3BlcmF0aW9uQGJyaWxsaWFudC5j
|
|
b20uYmQwHhcNMjAwNzMwMDQzNjU1WhcNMjEwNzMwMDQzNjU1WjCBoDELMAkGA1UE
|
|
BhMCQkQxDjAMBgNVBAgTBWRoYWthMQ4wDAYDVQQHEwVkaGFrYTETMBEGA1UEChMK
|
|
aW50ZXJjbG91ZDESMBAGA1UECxMJZm9ydGlnYXRlMRcwFQYDVQQDEw4xMTguNjcu
|
|
MjE3LjEyMjEvMC0GCSqGSIb3DQEJARYgY2xvdWQub3BlcmF0aW9uQGJyaWxsaWFu
|
|
dC5jb20uYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/SwPQE4nV
|
|
hm93iBssZhIZgnowJkm4L3SNZiHeJOYFcQd1zWFzOWyVGPRWyjvWF53OV6UTI5vm
|
|
nja+FQcWLJYERYFWOzr8tBAxH+w0A98Zq/aw5ncjiu600vrklFe6c767BZuVnvj2
|
|
wijLtkptwf3T2YRUttue6mfDJorecwS/r1aJQi1zUEfo3nq6G6ucJQ04U2Cw9ea9
|
|
yunee+4lou1u3PfCIjZAOsL6vhpakjZJ9NdTbdRMI5iEe/rt9shiXgOF+QGG9RhK
|
|
juZVPbR9vEgaKJQa/HiBl0aphcG6tq5+5ri1t7vweSS/CdbBZU1Xsqx43K0K/2Rq
|
|
+q60vY/ijOgTAgMBAAEwDQYJKoZIhvcNAQELBQADggEBAD7lwx/oCqtb0TlpfLGZ
|
|
v83GBHTu4E4/fxcCwphqXr/yVgDW5KzmFqi/rl8dk9ID5H/diHF5MVxLm1IWPz4C
|
|
ghCWU3dxU2NV69ViaQu6ppyoW4iP8P9C3RD3tMrDOmyhQi3O5/RAvHv9xpoQBsIB
|
|
DIeKLpzh1rIaMHsdAalYz5rZtIa7EQTRaRTJpSNElUecbmJKYwXK8tzi7ozpanpI
|
|
kaymbrPac759c0lsSor2d2SVmeWh1kmGCu6S2VKluxt9JwbcVdIzroniO6A6Ew5R
|
|
z2wNnFCkZwzekkfpFlng4UIovMBWDEQhUjX0jzVfUSmNjYj66gLbqO5x+Qy+ujhG
|
|
/n8=
|
|
-----END CERTIFICATE-----"
|
|
set range global
|
|
set source user
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "brilliant com bd certificate"
|
|
set password ENC L3UCvsxSmS3SKz/Aw1Vz4YeP/j0ep9rB80g1N27kw0ADbklogs/zRBbvlSWcTEixKgljWCG7EzgZCjgGtf/YrlM0m4UotJXNHUw5xkL/thjEMo05eYrG3OBAsDBKiN1Xfh0tu4lKEWGd4RK8kbNljz2sjJfPOkIpLZ4mvBhBi5rVOBWwo9p5+hTANXW0xS9FXK4aag==
|
|
set comments ''
|
|
set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
|
|
MIIFJDBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQYbU5JjbB+/FJ83ub
|
|
ajhI+QICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQI4Xm+nlLeP3oEggTI
|
|
Ilvt0DL9K4Xb6IwIS8aITq/z7Nk427Mzc/E0tC4ce7fLGNjcsutFbI2f976dle5n
|
|
tN8EGWjkoAg8daFIeJayZPCZbPsRRmpeFFJjZory308ESuuDOyjfUvUMTyK+TQ+A
|
|
8/YpS1FZEZ0hn1ktXwFkVERtoWFPCQcBKtOGy6/LsiVa93VeQQx362FW9syb1lir
|
|
6sOeKmUQeMz0XsjApqpuIp7nZlss5Sf8rVjjcht3BD2Bu6YpGca3axVnOgk5T/gZ
|
|
xQYoXQRmIUEPcEOQsio6iD6Us3H7x8kCCicH82WmsZeLulWKOuGGnatRQuYYL7qX
|
|
4GxJ5W58fHRYHZl+w7BD2C6u7pBNoUrayuH9T7W1SYzS/V2XGUJV0KCJUTM71Aoa
|
|
AE2ExsLI5Bh+rYOlEVIRgwdxq+hG5rUhy+6JYEbt9RGmwu4926KAPiaVcTWgsoJI
|
|
mCr8vu1BC9ka4KnjWbj2KQxHJEaq53MugfNsUt5twHYYo+KKN8TlFhNVTqHizAXT
|
|
3lSdq/pAueTq4RFeEN/aNEXoUoOYDuVZRm99xlfumpzp1rxhQ11ZWF6VyXlYjkDz
|
|
SReaYHIEk95HKRiXM2mez1NqayyJTLD6xSFdPT7v3qOJIrU1GGu4H00EkKJqWTIU
|
|
LHH51AAnK3vBcBB/Ss0FIAFnKCgIkyYgHD77K8m72ENzVcWfaGLo5obFTTvNzkwL
|
|
zF3RsEB0Nh55qJ5gc1a74bL7jp4vOtThx9nYUXF53HipyQXnT7fDyGxy2BqpD+mU
|
|
GRDZkEeIUD1QKaGq1SdSv+G8jFj+N+jFwmy8nptAbpWwuq0W0gu9MV5cLGFFwX0O
|
|
c8501NzSp9nrCzKEftegVSmwfMklsr7OpCCs6pbauCJYr4aKDYLCm1cBk+NnBmoc
|
|
mOnEHmQu6WTIPL5uM8855C6GXr+hGd2Ha3ZxdeapK5izNSq2ic87siPwPzvwx3AS
|
|
O9E/gzzAPjql/Q9x0HSnrlYQPlSi7e15b9A9gJTfZZqVPsDEaH7+ZxuIzrt7uzdc
|
|
81v57O9RhCiDevn/hIIh2IHcnNRUIIycoADN88WDyowun98Tos3KNHylsm0LuGzo
|
|
QpNOCCbsVtA5+fupEXW3ah60IHUVsapQslxnh3/c7leeUVc8XA8rBGokvzUrFsiV
|
|
RhPO+MMyVjI2xavzQ+8uAL7mblqpYG1dIUQsJXq2p7BxlaH67P36DU95Lzw+ToQ+
|
|
X0YV+pN0ziSt5eZSvDJbn80iGnPlzJBptOppSAjQXROfGT0OjJmiRX/INUms8ptZ
|
|
PKNrnBVdAxZt9/Orl8EKfD786EHDAoLIhA8xZpOfbadDbw/ZqB506zRCMiw3XCCg
|
|
kaQ+9RuVk0jYgtIz3It1qNhGCAbNsv2zteabv5ZlWRDIqwTd7jtwACxgUfSnCuZ0
|
|
bvL8bwx/mP5aSVzk+dxT590ppcxAD66b7ko4iNhfQ4DWkTtzZulCfs9I324ho6rU
|
|
UuRFRFzo3F/uCJO5WR42xfNR5R8XqioGzmLvbqe1xl6wYi48t5wQcZDGVHZ55JtD
|
|
itw+LyMoJ3ZbBNk+KMRDr+H8QYPoO1oE18rB9N3isYYMRUT39UnXP91CeIMp49WN
|
|
R+Q0nzYRkKhnoc5fro10etOPViSxzONf
|
|
-----END ENCRYPTED PRIVATE KEY-----"
|
|
set certificate "-----BEGIN CERTIFICATE-----
|
|
MIIGwDCCBaigAwIBAgIJANBXXBWNmTItMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD
|
|
VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa
|
|
MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0
|
|
cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj
|
|
dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIwMDUxMDEyMjA1NFoX
|
|
DTIyMDcwOTEyMDg1NVowQDEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRh
|
|
dGVkMRswGQYDVQQDDBIqLmJyaWxsaWFudC5jb20uYmQwggEiMA0GCSqGSIb3DQEB
|
|
AQUAA4IBDwAwggEKAoIBAQCflc34dHQsik46jJvsrm2yYujPjNCzwkE0peB4XD6w
|
|
6GLM5VMA8/ZTFGMJ5QbGIxmBnpeSTFuUAhlo+OFOgnayEXLLA96AXxuzqpdtKzH/
|
|
tRD5kNmdEmOZoIfUW2NjXgvs6Me6D5RXXoIlEEML/8W2COOOF1J/NT4jN5pPQr5Y
|
|
E5/hrIl6YrIo3WgnaoibbYaUGhRUlwB9mNi1LO13uP7oHDv7kxqGSz06e520w3aa
|
|
HF7iR7zP0uAZ7ZTHV//i3t39mdDvXQ09RKi8qzybusCirNluibk9YVrKD5QG3VlK
|
|
SXVQZxG79o1TtBt/XByEcZg//1VZwBTKX7ohtMIJKEtrAgMBAAGjggNGMIIDQjAM
|
|
BgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAOBgNV
|
|
HQ8BAf8EBAMCBaAwOAYDVR0fBDEwLzAtoCugKYYnaHR0cDovL2NybC5nb2RhZGR5
|
|
LmNvbS9nZGlnMnMxLTE5NDguY3JsMF0GA1UdIARWMFQwSAYLYIZIAYb9bQEHFwEw
|
|
OTA3BggrBgEFBQcCARYraHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9y
|
|
ZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYIKwYBBQUHAQEEajBoMCQGCCsGAQUFBzAB
|
|
hhhodHRwOi8vb2NzcC5nb2RhZGR5LmNvbS8wQAYIKwYBBQUHMAKGNGh0dHA6Ly9j
|
|
ZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS9nZGlnMi5jcnQwHwYD
|
|
VR0jBBgwFoAUQMK9J47MNIMwojPX+2yz8LQsgM4wLwYDVR0RBCgwJoISKi5icmls
|
|
bGlhbnQuY29tLmJkghBicmlsbGlhbnQuY29tLmJkMB0GA1UdDgQWBBRfK406RyeQ
|
|
jlkjejLumfV2Bue7FjCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHYApLkJkLQY
|
|
WBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFx/ofzXgAABAMARzBFAiEAlCri
|
|
wGqN3RK+hUCBmo9+ooWva8VXfekQVAjZarFnNskCIEYp+DWye6GSB+O0rIkY+kfq
|
|
AH/4IqzhIu3lXkaH0LDpAHcAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e
|
|
0YUAAAFx/of5MwAABAMASDBGAiEAzeUpB/3pzhEyT9titq3JS/zSnghwXcGoUjQG
|
|
dgB44zgCIQCPh4OyE81KtNiCQZ1QkF/TVA3WMPkXXTyZcwdN4PNJLgB2AFYUBpov
|
|
18Ls0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAABcf6H/B4AAAQDAEcwRQIhAOKC
|
|
WDKhCkyNIW9GCytv7MT4n9lQhM4ZMt8Pd5vGGJBgAiBSMLHPxGZOc6HYBUo3iFS/
|
|
CW/yZtZx6FLqto+FnD274zANBgkqhkiG9w0BAQsFAAOCAQEAjR9GGwJ+Ddy36yOZ
|
|
288ztjWzhZnukN/vKh6BtzIKgR750fdDM0Nbv7i/Lfavb1des/zDdgTT/qMSrrDt
|
|
qVgZRjKguooTDw/ouZJ7ULW+oGZwnG4Cu+h6IIpFaO76JLii+HdYoXlEA3ayVomW
|
|
lr55UNTCoFhlOhxRo+GoE4dB/JP51jCPa/+TGphD2d1fB5i5YO3Uj6Sm8AieHMR7
|
|
MtQ7ynYGSs/zdiAD+VBk6PkHfetQqBfVUsaxrDVW8fk0fjewEF/uHEB2UUAzUsu6
|
|
dVI0L4COqiHefDvALRJWntu4/0FtOAwniT/MVeK+DZ3z08oCT8SKWCSlNqviNKhK
|
|
o6Onpg==
|
|
-----END CERTIFICATE-----"
|
|
set range global
|
|
set source user
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
end
|
|
config certificate crl
|
|
end
|
|
config ips sensor
|
|
edit "g-default"
|
|
set comment "Prevent critical attacks."
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location all
|
|
set severity medium high critical
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Monitor IPS attacks."
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location all
|
|
set severity medium high critical
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
edit "g-wifi-default"
|
|
set comment "Default configuration for offloading WiFi traffic."
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location all
|
|
set severity medium high critical
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config sctp-filter profile
|
|
end
|
|
config application list
|
|
edit "g-default"
|
|
set comment "Monitor all applications."
|
|
set replacemsg-group ''
|
|
set extended-log disable
|
|
set other-application-action pass
|
|
set app-replacemsg enable
|
|
set other-application-log disable
|
|
set enforce-default-app-port disable
|
|
set force-inclusion-ssl-di-sigs disable
|
|
set unknown-application-action pass
|
|
set unknown-application-log disable
|
|
unset p2p-block-list
|
|
set deep-app-inspection enable
|
|
set options allow-dns
|
|
config entries
|
|
edit 1
|
|
set application 50413
|
|
set action block
|
|
set log enable
|
|
set log-packet disable
|
|
set rate-count 0
|
|
set session-ttl 0
|
|
set quarantine none
|
|
next
|
|
edit 2
|
|
set protocols all
|
|
set vendor all
|
|
set technology all
|
|
set behavior all
|
|
set popularity 1 2 3 4 5
|
|
set action pass
|
|
set log enable
|
|
set log-packet disable
|
|
set session-ttl 0
|
|
set shaper ''
|
|
set shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
set quarantine none
|
|
next
|
|
end
|
|
set control-default-network-services disable
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Monitor all applications."
|
|
set replacemsg-group ''
|
|
set extended-log disable
|
|
set other-application-action pass
|
|
set app-replacemsg enable
|
|
set other-application-log disable
|
|
set enforce-default-app-port disable
|
|
set force-inclusion-ssl-di-sigs disable
|
|
set unknown-application-action pass
|
|
set unknown-application-log disable
|
|
unset p2p-block-list
|
|
set deep-app-inspection enable
|
|
unset options
|
|
config entries
|
|
edit 1
|
|
set protocols all
|
|
set vendor all
|
|
set technology all
|
|
set behavior all
|
|
set popularity 1 2 3 4 5
|
|
set action pass
|
|
set log enable
|
|
set log-packet disable
|
|
set session-ttl 0
|
|
set shaper ''
|
|
set shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
set quarantine none
|
|
next
|
|
end
|
|
set control-default-network-services disable
|
|
next
|
|
edit "g-wifi-default"
|
|
set comment "Default configuration for offloading WiFi traffic."
|
|
set replacemsg-group ''
|
|
set extended-log disable
|
|
set other-application-action pass
|
|
set app-replacemsg enable
|
|
set other-application-log disable
|
|
set enforce-default-app-port disable
|
|
set force-inclusion-ssl-di-sigs disable
|
|
set unknown-application-action pass
|
|
set unknown-application-log disable
|
|
unset p2p-block-list
|
|
set deep-app-inspection disable
|
|
set options allow-dns
|
|
config entries
|
|
edit 1
|
|
set protocols all
|
|
set vendor all
|
|
set technology all
|
|
set behavior all
|
|
set popularity 1 2 3 4 5
|
|
set action pass
|
|
set log disable
|
|
set log-packet disable
|
|
set session-ttl 0
|
|
set shaper ''
|
|
set shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
set quarantine none
|
|
next
|
|
end
|
|
set control-default-network-services disable
|
|
next
|
|
end
|
|
config dlp data-type
|
|
edit "g-keyword"
|
|
set pattern "built-in"
|
|
set verify ''
|
|
set transform ''
|
|
set comment ''
|
|
next
|
|
edit "g-regex"
|
|
set pattern "built-in"
|
|
set verify ''
|
|
set transform ''
|
|
set comment ''
|
|
next
|
|
edit "g-hex"
|
|
set pattern "built-in"
|
|
set verify ''
|
|
set transform ''
|
|
set comment ''
|
|
next
|
|
edit "g-mip-label"
|
|
set pattern "^[[:xdigit:]]{8}-[[:xdigit:]]{4}-[[:xdigit:]]{4}-[[:xdigit:]]{4}-[[:xdigit:]]{12}$"
|
|
set verify ''
|
|
set transform "built-in"
|
|
set comment ''
|
|
next
|
|
edit "g-credit-card"
|
|
set pattern "\\b([2-6]{1}\\d{3})[- ]?(\\d{4})[- ]?(\\d{2})[- ]?(\\d{2})[- ]?(\\d{2,4})\\b"
|
|
set verify "built-in"
|
|
set look-back 20
|
|
set look-ahead 1
|
|
set transform "\\b\\1[- ]?\\2[- ]?\\3[- ]?\\4[- ]?\\5\\b"
|
|
set verify-transformed-pattern disable
|
|
set comment ''
|
|
next
|
|
edit "g-ssn-us"
|
|
set pattern "\\b(\\d{3})-(\\d{2})-(\\d{4})\\b"
|
|
set verify "(?<!-)\\b(?!666|000|9\\d{2})\\d{3}-(?!00)\\d{2}-(?!0{4})\\d{4}\\b(?!-)"
|
|
set look-back 12
|
|
set look-ahead 1
|
|
set transform "\\b\\1-\\2-\\3\\b"
|
|
set verify-transformed-pattern disable
|
|
set comment ''
|
|
next
|
|
end
|
|
config dlp dictionary
|
|
end
|
|
config dlp sensor
|
|
end
|
|
config dlp profile
|
|
edit "g-default"
|
|
set comment "Default profile."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set dlp-log enable
|
|
set extended-log disable
|
|
set nac-quar-log disable
|
|
unset full-archive-proto
|
|
unset summary-proto
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Log a summary of email and web traffic."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set dlp-log enable
|
|
set extended-log disable
|
|
set nac-quar-log disable
|
|
unset full-archive-proto
|
|
set summary-proto smtp pop3 imap http-get http-post
|
|
next
|
|
end
|
|
config webfilter ips-urlfilter-cache-setting
|
|
set dns-retry-interval 0
|
|
set extended-ttl 0
|
|
end
|
|
config system ips-urlfilter-dns
|
|
end
|
|
config system ips-urlfilter-dns6
|
|
end
|
|
config antivirus profile
|
|
edit "g-default"
|
|
set comment "Scan files and block viruses."
|
|
set replacemsg-group ''
|
|
set feature-set flow
|
|
set mobile-malware-db enable
|
|
config http
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config ftp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config imap
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config pop3
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config smtp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config nntp
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config cifs
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config nac-quar
|
|
set infected none
|
|
set log disable
|
|
end
|
|
set outbreak-prevention-archive-scan disable
|
|
set external-blocklist-enable-all enable
|
|
set ems-threat-feed disable
|
|
set av-virus-log enable
|
|
set av-block-log enable
|
|
set extended-log disable
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Scan files and monitor viruses."
|
|
set replacemsg-group ''
|
|
set feature-set flow
|
|
set mobile-malware-db enable
|
|
config http
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config ftp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config imap
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config pop3
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config smtp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config nntp
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config cifs
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config nac-quar
|
|
set infected none
|
|
set log disable
|
|
end
|
|
set outbreak-prevention-archive-scan disable
|
|
set external-blocklist-enable-all enable
|
|
set ems-threat-feed disable
|
|
set av-virus-log enable
|
|
set av-block-log enable
|
|
set extended-log disable
|
|
next
|
|
edit "g-wifi-default"
|
|
set comment "Default configuration for offloading WiFi traffic."
|
|
set replacemsg-group ''
|
|
set feature-set flow
|
|
set mobile-malware-db enable
|
|
config http
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config ftp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config imap
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config pop3
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config smtp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config nntp
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config cifs
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config nac-quar
|
|
set infected none
|
|
set log disable
|
|
end
|
|
set outbreak-prevention-archive-scan disable
|
|
set external-blocklist-enable-all enable
|
|
set ems-threat-feed disable
|
|
set av-virus-log enable
|
|
set av-block-log enable
|
|
set extended-log disable
|
|
next
|
|
end
|
|
config file-filter profile
|
|
edit "g-default"
|
|
set comment "File type inspection."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set log enable
|
|
set extended-log disable
|
|
set scan-archive-contents enable
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "File type inspection."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set log enable
|
|
set extended-log disable
|
|
set scan-archive-contents enable
|
|
next
|
|
end
|
|
config webfilter profile
|
|
edit "g-default"
|
|
set comment "Default web filtering."
|
|
set feature-set proxy
|
|
set replacemsg-group ''
|
|
unset options
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
unset safe-search
|
|
set log-search disable
|
|
end
|
|
config ftgd-wf
|
|
unset options
|
|
set exempt-quota 17
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 0
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 2
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 7
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 8
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 9
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 11
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 12
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 13
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 14
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 15
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 16
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 26
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 57
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 61
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 63
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 64
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 65
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 66
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 67
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 86
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 88
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 90
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 91
|
|
set action block
|
|
set log enable
|
|
next
|
|
end
|
|
set max-quota-timeout 300
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
config antiphish
|
|
set status disable
|
|
set check-uri disable
|
|
set check-basic-auth disable
|
|
set check-username-only disable
|
|
set max-body-len 1024
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-activex-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-filter-applet-log enable
|
|
set web-filter-jscript-log enable
|
|
set web-filter-js-log enable
|
|
set web-filter-vbs-log enable
|
|
set web-filter-unknown-log enable
|
|
set web-filter-referer-log enable
|
|
set web-filter-cookie-removal-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set web-ftgd-quota-usage enable
|
|
set extended-log disable
|
|
set web-antiphishing-log enable
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Monitor web traffic."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
unset options
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
end
|
|
config ftgd-wf
|
|
set options ftgd-disable
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 0
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 1
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 2
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 3
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 4
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 5
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 6
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 7
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 8
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 9
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 11
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 12
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 13
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 14
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 15
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 16
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 17
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 18
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 19
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 20
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 23
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 24
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 25
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 24
|
|
set category 26
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 25
|
|
set category 28
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 26
|
|
set category 29
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 27
|
|
set category 30
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 28
|
|
set category 31
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 29
|
|
set category 33
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 30
|
|
set category 34
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 31
|
|
set category 35
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 32
|
|
set category 36
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 33
|
|
set category 37
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 34
|
|
set category 38
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 35
|
|
set category 39
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 36
|
|
set category 40
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 37
|
|
set category 41
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 38
|
|
set category 42
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 39
|
|
set category 43
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 40
|
|
set category 44
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 41
|
|
set category 46
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 42
|
|
set category 47
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 43
|
|
set category 48
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 44
|
|
set category 49
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 45
|
|
set category 50
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 46
|
|
set category 51
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 47
|
|
set category 52
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 48
|
|
set category 53
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 49
|
|
set category 54
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 50
|
|
set category 55
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 51
|
|
set category 56
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 52
|
|
set category 57
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 53
|
|
set category 58
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 54
|
|
set category 59
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 55
|
|
set category 61
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 56
|
|
set category 62
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 57
|
|
set category 63
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 58
|
|
set category 64
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 59
|
|
set category 65
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 60
|
|
set category 66
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 61
|
|
set category 67
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 62
|
|
set category 68
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 63
|
|
set category 69
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 64
|
|
set category 70
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 65
|
|
set category 71
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 66
|
|
set category 72
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 67
|
|
set category 75
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 68
|
|
set category 76
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 69
|
|
set category 77
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 70
|
|
set category 78
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 71
|
|
set category 79
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 72
|
|
set category 80
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 73
|
|
set category 81
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 74
|
|
set category 82
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 75
|
|
set category 83
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 76
|
|
set category 84
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 77
|
|
set category 85
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 78
|
|
set category 86
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 79
|
|
set category 87
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 80
|
|
set category 88
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 81
|
|
set category 89
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 82
|
|
set category 90
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 83
|
|
set category 91
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 84
|
|
set category 92
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 85
|
|
set category 93
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 86
|
|
set category 94
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 87
|
|
set category 95
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
end
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set extended-log disable
|
|
next
|
|
edit "g-wifi-default"
|
|
set comment "Default configuration for offloading WiFi traffic."
|
|
set feature-set proxy
|
|
set replacemsg-group ''
|
|
set options block-invalid-url
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
unset safe-search
|
|
set log-search disable
|
|
end
|
|
config ftgd-wf
|
|
unset options
|
|
set exempt-quota 17
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 0
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 2
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 7
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 8
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 9
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 11
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 12
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 13
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 14
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 15
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 16
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 26
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 57
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 61
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 63
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 64
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 65
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 66
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 67
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 86
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 88
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 90
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 91
|
|
set action block
|
|
set log enable
|
|
next
|
|
end
|
|
set max-quota-timeout 300
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
config antiphish
|
|
set status disable
|
|
set check-uri disable
|
|
set check-basic-auth disable
|
|
set check-username-only disable
|
|
set max-body-len 1024
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-activex-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-filter-applet-log enable
|
|
set web-filter-jscript-log enable
|
|
set web-filter-js-log enable
|
|
set web-filter-vbs-log enable
|
|
set web-filter-unknown-log enable
|
|
set web-filter-referer-log enable
|
|
set web-filter-cookie-removal-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set web-ftgd-quota-usage enable
|
|
set extended-log disable
|
|
set web-antiphishing-log enable
|
|
next
|
|
end
|
|
config webfilter fortiguard
|
|
set cache-mode ttl
|
|
set cache-prefix-match enable
|
|
set cache-mem-percent 2
|
|
set ovrd-auth-port-http 8008
|
|
set ovrd-auth-port-https 8010
|
|
set ovrd-auth-port-https-flow 8015
|
|
set ovrd-auth-port-warning 8020
|
|
set ovrd-auth-https enable
|
|
set warn-auth-https enable
|
|
set close-ports disable
|
|
set request-packet-size-limit 0
|
|
set embed-image enable
|
|
end
|
|
config webfilter search-engine
|
|
edit "g-google"
|
|
set hostname ".*\\.google\\..*"
|
|
set url "^\\/((custom|search|images|videosearch|webhp)\\?)"
|
|
set query "q="
|
|
set safesearch url
|
|
set safesearch-str "&safe=active"
|
|
next
|
|
edit "g-yahoo"
|
|
set hostname ".*\\.yahoo\\..*"
|
|
set url "^\\/search(\\/video|\\/images){0,1}(\\?|;)"
|
|
set query "p="
|
|
set safesearch url
|
|
set safesearch-str "&vm=r"
|
|
next
|
|
edit "g-bing"
|
|
set hostname ".*\\.bing\\..*"
|
|
set url "^(\\/images|\\/videos)?(\\/search|\\/async|\\/asyncv2)\\?"
|
|
set query "q="
|
|
set safesearch header
|
|
next
|
|
edit "g-yandex"
|
|
set hostname "yandex\\..*"
|
|
set url "^\\/((yand|images\\/|video\\/)(search)|search\\/)\\?"
|
|
set query "text="
|
|
set safesearch url
|
|
set safesearch-str "&family=yes"
|
|
next
|
|
edit "g-youtube"
|
|
set hostname ".*youtube.*"
|
|
set url ''
|
|
set query ''
|
|
set safesearch header
|
|
next
|
|
edit "g-baidu"
|
|
set hostname ".*\\.baidu\\.com"
|
|
set url "^\\/s?\\?"
|
|
set query "wd="
|
|
set safesearch disable
|
|
next
|
|
edit "g-baidu2"
|
|
set hostname ".*\\.baidu\\.com"
|
|
set url "^\\/(ns|q|m|i|v)\\?"
|
|
set query "word="
|
|
set safesearch disable
|
|
next
|
|
edit "g-baidu3"
|
|
set hostname "tieba\\.baidu\\.com"
|
|
set url "^\\/f\\?"
|
|
set query "kw="
|
|
set safesearch disable
|
|
next
|
|
edit "g-vimeo"
|
|
set hostname ".*vimeo.*"
|
|
set url "^\\/search\\?"
|
|
set query "q="
|
|
set safesearch header
|
|
next
|
|
edit "g-yt-scan-1"
|
|
set hostname ''
|
|
set url "www.youtube.com/user/"
|
|
set query ''
|
|
set safesearch yt-scan
|
|
next
|
|
edit "g-yt-scan-2"
|
|
set hostname ''
|
|
set url "www.youtube.com/youtubei/v1/browse"
|
|
set query ''
|
|
set safesearch yt-scan
|
|
next
|
|
edit "g-yt-scan-3"
|
|
set hostname ''
|
|
set url "www.youtube.com/youtubei/v1/player"
|
|
set query ''
|
|
set safesearch yt-scan
|
|
next
|
|
edit "g-yt-scan-4"
|
|
set hostname ''
|
|
set url "www.youtube.com/youtubei/v1/navigator"
|
|
set query ''
|
|
set safesearch yt-scan
|
|
next
|
|
edit "g-yt-channel"
|
|
set hostname ''
|
|
set url "www.youtube.com/channel"
|
|
set query ''
|
|
set safesearch yt-channel
|
|
next
|
|
edit "g-yt-pattern"
|
|
set hostname ''
|
|
set url "youtube.com/channel/"
|
|
set query ''
|
|
set safesearch yt-pattern
|
|
next
|
|
edit "g-twitter"
|
|
set hostname "twitter\\.com"
|
|
set url "^\\/i\\/api\\/graphql\\/.*\\/UserByScreenName"
|
|
set query "variables="
|
|
set safesearch translate
|
|
set safesearch-str "regex::%22screen_name%22:%22([A-Za-z0-9_]{4,15})%22::twitter.com/\\1"
|
|
next
|
|
edit "g-google-translate-1"
|
|
set hostname "translate\\.google\\..*"
|
|
set url "^\\/translate"
|
|
set query "u="
|
|
set safesearch translate
|
|
set safesearch-str "regex::(?:\\?|&)u=([^&]+)::\\1"
|
|
next
|
|
edit "g-google-translate-2"
|
|
set hostname ".*\\.translate\\.goog"
|
|
set url "^\\/"
|
|
set query ''
|
|
set safesearch translate
|
|
set safesearch-str "case::google-translate"
|
|
next
|
|
end
|
|
config wanopt content-delivery-network-rule
|
|
edit "vcache://"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.m3u8"
|
|
next
|
|
end
|
|
config content-id
|
|
set target hls-manifest
|
|
set start-str "/"
|
|
set start-skip 0
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
edit "rule2"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.mpd"
|
|
next
|
|
end
|
|
config content-id
|
|
set target dash-manifest
|
|
set start-str "/"
|
|
set start-skip 0
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
edit "rule3"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.ts"
|
|
next
|
|
end
|
|
config content-id
|
|
set target hls-fragment
|
|
set start-str "/"
|
|
set start-skip 0
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
edit "rule4"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.*"
|
|
next
|
|
end
|
|
config content-id
|
|
set target dash-fragment
|
|
set start-str "/"
|
|
set start-skip 0
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://youtube/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "youtube.com"
|
|
set category youtube
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires disable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/videoplayback"
|
|
next
|
|
end
|
|
config content-id
|
|
set target youtube-id
|
|
set start-str "v="
|
|
set start-skip 2
|
|
set start-direction forward
|
|
set end-str "&"
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
edit "rule2"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/videoplayback"
|
|
next
|
|
end
|
|
config content-id
|
|
set target youtube-id
|
|
set start-str "v="
|
|
set start-skip 2
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
edit "rule3"
|
|
set match-mode any
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/stream_204"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/ptracking"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/get_video_info"
|
|
next
|
|
end
|
|
config content-id
|
|
set target youtube-map
|
|
set start-str "/"
|
|
set start-skip 0
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://googlevideo/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "googlevideo.com"
|
|
set category youtube
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires disable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/videoplayback"
|
|
next
|
|
end
|
|
config content-id
|
|
set target youtube-id
|
|
set start-str "v="
|
|
set start-skip 2
|
|
set start-direction forward
|
|
set end-str "&"
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
edit "rule2"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/videoplayback"
|
|
next
|
|
end
|
|
config content-id
|
|
set target youtube-id
|
|
set start-str "v="
|
|
set start-skip 2
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
edit "rule3"
|
|
set match-mode any
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/stream_204"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/ptracking"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/get_video_info"
|
|
next
|
|
end
|
|
config content-id
|
|
set target youtube-map
|
|
set start-str "/"
|
|
set start-skip 0
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://metacafe/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "mccont.com" "akvideos.metacafe.com" "cdn.metacafe.com"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode any
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.ts"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://facebook/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "fbcdn.net" "facebook.com"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode any
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.ts"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://dailymotion/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "dailymotion.com" "dmcdn.net"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/video/*.mp4"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/video/*.flv"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/video/*.ts"
|
|
next
|
|
edit 4
|
|
set target path
|
|
set pattern "/video/*.on2"
|
|
next
|
|
edit 5
|
|
set target path
|
|
set pattern "/video/*.aac"
|
|
next
|
|
edit 6
|
|
set target path
|
|
set pattern "/video/*.h264"
|
|
next
|
|
edit 7
|
|
set target path
|
|
set pattern "/video/*.h263"
|
|
next
|
|
edit 8
|
|
set target path
|
|
set pattern "/sec*.mp4"
|
|
next
|
|
edit 9
|
|
set target path
|
|
set pattern "/sec*.flv"
|
|
next
|
|
edit 10
|
|
set target path
|
|
set pattern "/sec*.on2"
|
|
next
|
|
edit 11
|
|
set target path
|
|
set pattern "/sec*.aac"
|
|
next
|
|
edit 12
|
|
set target path
|
|
set pattern "/sec*.h264"
|
|
next
|
|
edit 13
|
|
set target path
|
|
set pattern "/sec*.h263"
|
|
next
|
|
edit 14
|
|
set target path
|
|
set pattern "*.ts"
|
|
next
|
|
end
|
|
config skip-entries
|
|
edit 1
|
|
set target parameter
|
|
set pattern "start=*"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://break/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "break.com" "0ebe.edgecastcdn.net"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/dnet/media/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/dnet/media/*.mp4"
|
|
next
|
|
end
|
|
config skip-entries
|
|
edit 1
|
|
set target parameter
|
|
set pattern "ec_seek=*"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
edit "rule2"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.mp4*"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "*Seg*"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "*Frag*"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://msn/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "video.msn.com"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode any
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.ts"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://llnwd/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "llnwd.net"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.fll"
|
|
next
|
|
end
|
|
config skip-entries
|
|
edit 1
|
|
set target parameter
|
|
set pattern "fs=*"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://yahoo/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "yimg.com"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.m4s"
|
|
next
|
|
end
|
|
config content-id
|
|
set target parameter
|
|
set start-str "vid="
|
|
set start-skip 0
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://myspace/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "myspacecdn.com"
|
|
set category vcache
|
|
set request-cache-control enable
|
|
set response-cache-control enable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode any
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.ts"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://vimeo/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "vimeo.com" "vimeocdn.com" "56skyfiregce-a.akamaihd.net"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.m4s"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://blip.tv/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "blip.tv"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.m4v"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 4
|
|
set target path
|
|
set pattern "/*.wmv"
|
|
next
|
|
edit 5
|
|
set target path
|
|
set pattern "/*.rm"
|
|
next
|
|
edit 6
|
|
set target path
|
|
set pattern "/*.ram"
|
|
next
|
|
edit 7
|
|
set target path
|
|
set pattern "/*.mov"
|
|
next
|
|
edit 8
|
|
set target path
|
|
set pattern "/*.avi"
|
|
next
|
|
end
|
|
config skip-entries
|
|
edit 1
|
|
set target parameter
|
|
set pattern "ms=*"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://maker.tv/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "videos-f.jwpsrv.com"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.ts"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://aol/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "stream.aol.com" "5min.com" "vidiblevod-vh.akamaihd.net" "stg-ec-ore-u.uplynk.com" "vidible.tv"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
end
|
|
config skip-entries
|
|
edit 1
|
|
set target parameter
|
|
set pattern "*timeoffset=*"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
edit "rule2"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.ts"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://clipfish/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "clipfish.de" "universal-music.de"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.f4v"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 4
|
|
set target path
|
|
set pattern "/*.m4v"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://cnn/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "cnn-vh.akamaihd.net"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv*"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "*Seg*"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "*Frag*"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
edit "rule2"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.mp4*"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "*Seg*"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "*Frag*"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
edit "rule3"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.ts*"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "*Seg*"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "*Frag*"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://foxnews/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "foxnews.com" "foxnews-f.akamaihd.net"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.mp4*"
|
|
next
|
|
edit 2
|
|
set target parameter
|
|
set pattern "*Seg*"
|
|
next
|
|
edit 3
|
|
set target parameter
|
|
set pattern "*Frag*"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://discovery/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "discovery.com" "discidevflash-f.akamaihd.net"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode any
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.ts"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://liveleak/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "edge.liveleak.com" "cdn.liveleak.com"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target parameter
|
|
set pattern "*seek=0"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
edit "rule2"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 2
|
|
set target parameter
|
|
set pattern "*seek=0"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
edit "rule3"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.wmv"
|
|
next
|
|
edit 2
|
|
set target parameter
|
|
set pattern "*seek=0"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://sevenload/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "sevenload.com"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
end
|
|
config skip-entries
|
|
edit 1
|
|
set target parameter
|
|
set pattern "aktimeoffset=*"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://stupidvideos/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "stupidvideos.com"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode any
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.ts"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://howcast/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "media.howcast.com"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
end
|
|
config skip-entries
|
|
edit 1
|
|
set target parameter
|
|
set pattern "start=*"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://vevo/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "vevo.com"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode any
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.ts"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://ooyala/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "ooyala.com"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "*Seg*"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "*Frag*"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://ms-ads/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "msads.net"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode any
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.ts"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://yumenetworks-ads/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "yumenetworks.com"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode any
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.ts"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://2mdn-ads/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "2mdn.net"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode any
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.ts"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://eyewonder-ads/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "eyewonder.com"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode any
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.ts"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://eyereturn-ads/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "eyereturn.com"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode any
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.ts"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://serving-sys-ads/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "serving-sys.com"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode any
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.ts"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://amazonaws-ads/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "amazonaws.com"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode any
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.ts"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://edgesuite-ads/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "edgesuite.net"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode any
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.ts"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://gorillanation-ads/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "video.gorillanation.com"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode any
|
|
set skip-rule-mode any
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/*.flv"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "/*.mp4"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "/*.ts"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://youku/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/youku/*.mp4"
|
|
next
|
|
edit 2
|
|
set target parameter
|
|
set pattern "*start=0"
|
|
next
|
|
end
|
|
config content-id
|
|
set target youku-id
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction backward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
edit "rule2"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/youku/*.flv"
|
|
next
|
|
edit 2
|
|
set target parameter
|
|
set pattern "*start=0"
|
|
next
|
|
end
|
|
config content-id
|
|
set target youku-id
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction backward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
edit "rule3"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/youku/*.kux"
|
|
next
|
|
edit 2
|
|
set target parameter
|
|
set pattern "*start=0"
|
|
next
|
|
end
|
|
config content-id
|
|
set target youku-id
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction backward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
edit "rule4"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/youku/*.mp4"
|
|
next
|
|
end
|
|
config skip-entries
|
|
edit 1
|
|
set target parameter
|
|
set pattern "*start=*"
|
|
next
|
|
end
|
|
config content-id
|
|
set target youku-id
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction backward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
edit "rule5"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/youku/*.flv"
|
|
next
|
|
end
|
|
config skip-entries
|
|
edit 1
|
|
set target parameter
|
|
set pattern "*start=*"
|
|
next
|
|
end
|
|
config content-id
|
|
set target youku-id
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction backward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
edit "rule6"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/youku/*.kux"
|
|
next
|
|
end
|
|
config skip-entries
|
|
edit 1
|
|
set target parameter
|
|
set pattern "*start=*"
|
|
next
|
|
end
|
|
config content-id
|
|
set target youku-id
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction backward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://tudou/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/f4v/*"
|
|
next
|
|
edit 2
|
|
set target parameter
|
|
set pattern "*id=tudou*"
|
|
next
|
|
end
|
|
config skip-entries
|
|
edit 1
|
|
set target parameter
|
|
set pattern "*begin=*"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction backward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://cbc/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "cbc.ca" "mobilehls-vh.akamaihd.net"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "*.mp4*"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "*Seg*"
|
|
next
|
|
edit 3
|
|
set target path
|
|
set pattern "*Frag*"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
edit "rule2"
|
|
set match-mode any
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "*.ts"
|
|
next
|
|
edit 2
|
|
set target path
|
|
set pattern "*.mp4"
|
|
next
|
|
end
|
|
config content-id
|
|
set target path
|
|
set start-str "/"
|
|
set start-skip 1
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "vcache://megaupload/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "megaupload.com"
|
|
set category vcache
|
|
set request-cache-control disable
|
|
set response-cache-control disable
|
|
set response-expires enable
|
|
set updateserver disable
|
|
config rules
|
|
edit "rule1"
|
|
set match-mode all
|
|
set skip-rule-mode all
|
|
config match-entries
|
|
edit 1
|
|
set target path
|
|
set pattern "/files/*"
|
|
next
|
|
end
|
|
config content-id
|
|
set target referrer
|
|
set start-str "d="
|
|
set start-skip 2
|
|
set start-direction forward
|
|
set end-str ''
|
|
set end-skip 0
|
|
set end-direction forward
|
|
set range-str ''
|
|
end
|
|
next
|
|
end
|
|
next
|
|
edit "update://windowsupdate/"
|
|
set comment "Static entries are not allowed to change except disable."
|
|
set status enable
|
|
set host-domain-name-suffix "download.windowsupdate.com"
|
|
set category vcache
|
|
set request-cache-control enable
|
|
set response-cache-control enable
|
|
set response-expires enable
|
|
set updateserver enable
|
|
next
|
|
end
|
|
config wanopt cache-service
|
|
set prefer-scenario balance
|
|
set collaboration disable
|
|
set device-id "default_dev_id"
|
|
set acceptable-connections any
|
|
end
|
|
config wanopt remote-storage
|
|
set status disable
|
|
end
|
|
config system resource-limits
|
|
set log-disk-quota 169005
|
|
end
|
|
config system vdom-property
|
|
edit "root"
|
|
set description "property limits for vdom root"
|
|
set snmp-index 1
|
|
set session 0 0
|
|
set ipsec-phase1 0 0
|
|
set ipsec-phase2 0 0
|
|
set ipsec-phase1-interface 0 0
|
|
set ipsec-phase2-interface 0 0
|
|
set dialup-tunnel 0 0
|
|
set firewall-policy 0 0
|
|
set firewall-address 0 0
|
|
set firewall-addrgrp 0 0
|
|
set custom-service 0 0
|
|
set service-group 0 0
|
|
set onetime-schedule 0 0
|
|
set recurring-schedule 0 0
|
|
set user 0 0
|
|
set user-group 0 0
|
|
set sslvpn 0 0
|
|
set proxy 0 0
|
|
set log-disk-quota 0 0
|
|
next
|
|
edit "IC-CLOUD"
|
|
set description "property limits for vdom IC-CLOUD"
|
|
set snmp-index 2
|
|
set session 0 0
|
|
set ipsec-phase1 0 0
|
|
set ipsec-phase2 0 0
|
|
set ipsec-phase1-interface 0 0
|
|
set ipsec-phase2-interface 0 0
|
|
set dialup-tunnel 0 0
|
|
set firewall-policy 0 0
|
|
set firewall-address 0 0
|
|
set firewall-addrgrp 0 0
|
|
set custom-service 0 0
|
|
set service-group 0 0
|
|
set onetime-schedule 0 0
|
|
set recurring-schedule 0 0
|
|
set user 0 0
|
|
set user-group 0 0
|
|
set sslvpn 0 0
|
|
set proxy 0 0
|
|
set log-disk-quota 40960 0
|
|
next
|
|
edit "RnD"
|
|
set description "property limits for vdom RnD"
|
|
set snmp-index 4
|
|
set session 0 0
|
|
set ipsec-phase1 0 0
|
|
set ipsec-phase2 0 0
|
|
set ipsec-phase1-interface 0 0
|
|
set ipsec-phase2-interface 0 0
|
|
set dialup-tunnel 0 0
|
|
set firewall-policy 0 0
|
|
set firewall-address 0 0
|
|
set firewall-addrgrp 0 0
|
|
set custom-service 0 0
|
|
set service-group 0 0
|
|
set onetime-schedule 0 0
|
|
set recurring-schedule 0 0
|
|
set user 0 0
|
|
set user-group 0 0
|
|
set sslvpn 0 0
|
|
set proxy 0 0
|
|
set log-disk-quota 0 0
|
|
next
|
|
end
|
|
config log syslogd setting
|
|
set status enable
|
|
set server "10.10.20.115"
|
|
set mode udp
|
|
set port 5140
|
|
set facility user
|
|
set source-ip ''
|
|
set format default
|
|
set priority default
|
|
set max-log-rate 0
|
|
set interface-select-method auto
|
|
end
|
|
config log syslogd2 setting
|
|
set status disable
|
|
end
|
|
config log syslogd3 setting
|
|
set status disable
|
|
end
|
|
config log syslogd4 setting
|
|
set status disable
|
|
end
|
|
config log webtrends setting
|
|
set status disable
|
|
end
|
|
config log memory global-setting
|
|
set max-size 168432394
|
|
set full-first-warning-threshold 75
|
|
set full-second-warning-threshold 90
|
|
set full-final-warning-threshold 95
|
|
end
|
|
config log syslogd filter
|
|
set severity information
|
|
set forward-traffic enable
|
|
set local-traffic enable
|
|
set multicast-traffic enable
|
|
set sniffer-traffic enable
|
|
set ztna-traffic enable
|
|
set anomaly enable
|
|
set voip enable
|
|
end
|
|
config log syslogd2 filter
|
|
set severity information
|
|
set forward-traffic enable
|
|
set local-traffic enable
|
|
set multicast-traffic enable
|
|
set sniffer-traffic enable
|
|
set ztna-traffic enable
|
|
set anomaly enable
|
|
set voip enable
|
|
end
|
|
config log syslogd3 filter
|
|
set severity information
|
|
set forward-traffic enable
|
|
set local-traffic enable
|
|
set multicast-traffic enable
|
|
set sniffer-traffic enable
|
|
set ztna-traffic enable
|
|
set anomaly enable
|
|
set voip enable
|
|
end
|
|
config log syslogd4 filter
|
|
set severity information
|
|
set forward-traffic enable
|
|
set local-traffic enable
|
|
set multicast-traffic enable
|
|
set sniffer-traffic enable
|
|
set ztna-traffic enable
|
|
set anomaly enable
|
|
set voip enable
|
|
end
|
|
config log webtrends filter
|
|
set severity information
|
|
set forward-traffic enable
|
|
set local-traffic enable
|
|
set multicast-traffic enable
|
|
set sniffer-traffic enable
|
|
set ztna-traffic enable
|
|
set anomaly enable
|
|
set voip enable
|
|
end
|
|
config log fortiguard setting
|
|
set status disable
|
|
set access-config enable
|
|
set source-ip 0.0.0.0
|
|
set interface-select-method auto
|
|
end
|
|
config log fortianalyzer setting
|
|
set status enable
|
|
set ips-archive enable
|
|
set server "10.10.20.115"
|
|
set alt-server ''
|
|
set fallback-to-primary enable
|
|
set certificate-verification enable
|
|
set server-cert-ca ''
|
|
set preshared-key ''
|
|
set access-config enable
|
|
set enc-algorithm high
|
|
set ssl-min-proto-version default
|
|
set conn-timeout 10
|
|
set monitor-keepalive-period 5
|
|
set monitor-failure-retry-period 5
|
|
set certificate ''
|
|
set source-ip ''
|
|
set interface-select-method auto
|
|
set upload-option realtime
|
|
set reliable enable
|
|
set priority default
|
|
set max-log-rate 0
|
|
end
|
|
config log fortianalyzer2 setting
|
|
set status disable
|
|
end
|
|
config log fortianalyzer3 setting
|
|
set status disable
|
|
end
|
|
config log fortianalyzer-cloud setting
|
|
set status disable
|
|
end
|
|
config log fortianalyzer filter
|
|
set severity information
|
|
set forward-traffic enable
|
|
set local-traffic enable
|
|
set multicast-traffic enable
|
|
set sniffer-traffic enable
|
|
set ztna-traffic enable
|
|
set anomaly enable
|
|
set voip enable
|
|
set dlp-archive enable
|
|
end
|
|
config firewall ssh local-key
|
|
edit "g-Fortinet_SSH_RSA2048"
|
|
set password ENC p8jxGOKGa5oSxlR+fEFeMIeVVgp5fHAslvIEmSYWu2NYEcUGAxQyN3iC4zhJwSwgwzLXSKD2G7SQHlMTNyQ+Mrpm5PV7FEpKckTqLmxd3IUg9tqVOKGEnIq3VEyxCPvDM0UsqBdKkoVq97hVHAQzH981lh3ZB3Sf9WIF/TeKyxie7lVFujtECrmZkn57RjeZlwvcfQ==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCIxks//i
|
|
r/V0cczJOMcqwyAAAAEAAAAAEAAAEXAAAAB3NzaC1yc2EAAAADAQABAAABAQC7dywqSRiZ
|
|
KIHLNhfwQmGUnUJcp440VbLDXkL1A5EDXOc+ngDIMEaeAiq0Spbx/XkHx7wamsfCV8EMhz
|
|
7xZWYaJDicc/LWePPgAoAsHqfN7RXhsgZyTaqISUyvxOArLCUIFWwKga/no8ESfaXUhV0w
|
|
KjCc+iuc/y+28Cke27AMJKLMwyOuMSTdYTm9ipNhp/j+oPtooJaP/kpVZGUP7lMTIX0dnU
|
|
RknbgK/7rP7+D9oWqbHvwMBT5ncCh5B13N9q91nYRVkY1jdHdHkqnocdJ22Rl4DqjmHNaU
|
|
ZhT58y4HHWN8qfX1AA4sVO7/CkYPkTJE7mj1FwWlTm4w/uk0Qpt9AAADwCJbmKlqnqykt0
|
|
msxMzHLHO0v/MT6SfemhK9NlQsK2JDi7paYww98cDs1RUCtwV2EC3BtgoMYwryFRqCtLpS
|
|
RqqYe/gwPErpDW9cESKfVbbmTQsJqGivnlZtXfii9ugazC8jo6Y7PHFevkApINvbXRVWpD
|
|
I5k4UwkAcmj/gwaHjvxbaXtNSbVP5FqlZX8XkvAn+r/wQ7IN7UcO98smuAjYZuCo2r9vvM
|
|
vx189sKseQ5oeKkQ2EBLAtUoSovdsQ2irbx+eMUQYUf3h0OSo155q+l5Hf6cEAJx+0bPpB
|
|
XzJemgWuIl6okw1fBG0R8q6j5iJGyNnwCAMp86EWkeVe1e+fY7GTyXf2SepqsWYuGwkv0b
|
|
IEMxJkuJwhbgZKxEJMxYNlrjN5urraD4+3QGvViQkRunkm4Z8McHSnjw9b0Mjz/OrfynUr
|
|
c5cni1fbQHXaBpNI8obgKufvqSf2V9B2V+BhrPxVq1iFXw4COl6rxKVlCivilo/P0JU4xc
|
|
k/JnnlAl2uJvI4xuW6Ty/hQKXqHMU780QGa2xGMUlr64+g1XtaE/jUr8wmTkvd3crHDno9
|
|
lPKPnCkAwnfHVKm8S/fMq6IItdue+nlUMJ1gnOsQ1iBIqIBpm6Mu9EfkYSXLVLL4fcIqPQ
|
|
n49vPICLdkHXspC0Kph+xPT1kkaLJvH4/aRanuFYMmzAV8CEBhqU5yVptz9XMukCdn+mV1
|
|
/WhMjAClzHFlqUCIE1bLdKjjY+pjC+uVNctgAzxv8/08T4aeBGLh2ABfdyGwkeDMAD0vYr
|
|
/mtEo7tzC7nxQZG0h5AvSSF6vE/6wNtJ1HFfzXV/+700i3M00k5gUcK4ttzyYd8iCVvAXG
|
|
YcIa2uIMFdWpwcaDtca1lx7Z7g9TzWih+a53YuuUidEozBSPeLTc5rwLckUkrWLv1Z+F6Y
|
|
COh+wMqo4nYVRGTQpjqdkmHjNUTXh7B51rYlIOUoROak5oTmgbqsMCOqbdFqW9/N2h06To
|
|
c4CTFuUQTWDsIJ2whvsQAwznm9GCaQfjqT1xtgil9mRQiZKDBwfC1zQ+6RsWqviUOBPIbj
|
|
EzJyxOd7ZvIrtJXy2I3I1d1caH7FERMEHQeBFCa5n+S2KZ7J+Q9ZlN6beT/xFuOn00CaB8
|
|
Egx546ps6YDFHrcd0aIn0GW//NBZW2lu6mjYg45oR7L39bvoLu4x1TvmFeHWkVn/xVOr5O
|
|
nHkDZ2eKMkzqfus18aWNdPwStA45JuR9JWVFaJqTrrRLoKCKZ+jNbwJGH95pORW3Jt7DYa
|
|
156NdbMg==
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7dywqSRiZKIHLNhfwQmGUnUJcp440VbLDXkL1A5EDXOc+ngDIMEaeAiq0Spbx/XkHx7wamsfCV8EMhz7xZWYaJDicc/LWePPgAoAsHqfN7RXhsgZyTaqISUyvxOArLCUIFWwKga/no8ESfaXUhV0wKjCc+iuc/y+28Cke27AMJKLMwyOuMSTdYTm9ipNhp/j+oPtooJaP/kpVZGUP7lMTIX0dnURknbgK/7rP7+D9oWqbHvwMBT5ncCh5B13N9q91nYRVkY1jdHdHkqnocdJ22Rl4DqjmHNaUZhT58y4HHWN8qfX1AA4sVO7/CkYPkTJE7mj1FwWlTm4w/uk0Qpt9"
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_DSA1024"
|
|
set password ENC 2UdUD+vifIDzGzhu/ZyGbqM/BwzJV/n5Rw/ZDYL8Wjpf81cBHmeSRhN8YpjdwRfjrnuEIrHVOSyulzCRTcD0pjuLuQMe9Jp2N2jW+9pI1WRwo8at5EGRguRxHPzu2MTCraCHMoytOR7S4i73TFZb7+RaZnJA4nmMX+iC/bkdVTSdn2WsBuea8AldzA3ptqpZM4296g==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCCsc2D7A
|
|
O4qDYfXxVb5RSUAAAAEAAAAAEAAAGxAAAAB3NzaC1kc3MAAACBAMS+4XEri0vAnEcpawSE
|
|
aonawgM7jTatyBDkWZQkz5GApTwO5L1arpNUuOgZg115Or2doSVcxCtN/u79auu7Hy+1Oq
|
|
vVy1Vht4Tnj4teP45Pfqxb1T5ANhxlfG80SWi+hPAarZeNiMgQK9l+dZp4yfQQNTLULzyi
|
|
BpoeJnVSOSoLAAAAFQCWO4AICCOMPozW7SSviDrjcUEDfQAAAIABVmqI9Iz3TKUviuaEfx
|
|
kyw24WGR9kfBp4AXoCYjWf+21eh8M9+xGiOf6kayScyDvB2MkYhjB2Q+JCxClp/ckV3nrM
|
|
7svLU5wd3Cv7oyGm6mE/FVeZkdRgsiVkSwHVjnxsUsyKmxmLwcoQt5a+L56qy4DQ/T4QrQ
|
|
CUCIdlGsDy0AAAAIBy99SCy5/e6YcW0gThoPlGws0LpAjJniMZurMkX0UUcMDSsWrtcnJb
|
|
/HyafIWiNXW/4exOZk8V4Pd+THL1fLMnJgw9xyZeYjsyLufOyaSoldpqS2m1AOJk08EPrm
|
|
iRpUcoKh0tFuwUQU8dKx2Kx5M9UUp04/SnG1qYAamGVXaoLgAAAeDn2w4iToLUKtWXoH8U
|
|
dbWETBhfmNTD4pk60pXg4tijS1zGu2bzgTc5UlLqjB+EmAFhVrpXAfw9TCPXuoH8ZrwRJh
|
|
v9cmtWuMLBj6Tu4ovYTWag8Kh6LXbtbD/hSauZYZDJiJUl7nhfvjtK4oTQUUX7DXS3dtdH
|
|
hxP6WrsN3JOYnbSLQMEHmh/4ZubUM+PSP5ogGEphJO/hi4cA3GG4iD85etrUcyXA+bdGBR
|
|
g39U2TToZEHcuz7SIFfMBtLuG99SoT08wYQlzzR9ZJfhs99iYddtD7YWcxVh9VSesJ2i6R
|
|
PQtYTFBYTUY0/qnCviL1ZMm7URBcflWJnyOVyRdonZgR2CgR7jY4u+rgKVTnITHBe2WxvV
|
|
6TA3OC9uxmO2urtr3vTsOtLqJK3hdrxoCn1jYCbRqKeo4CSINB5i+9phriLQ83jMCp5NaZ
|
|
8yaWayteQXcIhBAKti+ndsvrj6UQx0ltkk17o/QYTy2oIpCGhM+0ubfz29msX/Fgf9vkrK
|
|
+FViZYMBJEUQ7Ntz2WwHOC/bcLr8RoHdWcusJ/7uKbXTWf5VMDC1Hg+dGbk6zmIZd8y0V0
|
|
8fttEP5Z9AnNi3T1pTUSEFxjpQofdXIL8y8Uut8WXMaoZJ8jqQYufvVtaBB3NMg=
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ssh-dss 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"
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_ECDSA256"
|
|
set password ENC uXe/izAuOSVM6jC0q+AfiZAM+HFmKzZKwiUcVIpnuVZDKCeWq/UF4NvwI+ivv7UQnPnucoWzwDRTGqlH4/Baro0Vbm9fWGiev6ozfkL7GSAloWf6ejFBWAaTwwopi91a87oWnOcSOdv+uOP62E7/6ImvRu20oNx2SkAvp3YA7O+XaJbni37MIO6LxoZ0SQc9D+nQqA==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABA0Q3tLD+
|
|
dFrK1X0hDwEiEyAAAAEAAAAAEAAABoAAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlz
|
|
dHAyNTYAAABBBI7qFojD9363V6AtyoJU+yJQmp2hIdNAv0KAg+2iqJn6edGSkZeVuXa8ue
|
|
chXxhedXcaon1Bo2TlKH6ITmCAMFQAAACgKKWEsPw4CPtmUfVW7SpyDKpz68FPzs8xVcyb
|
|
ci86C5RuV5VOETT8t/hS0TRQm6OpHBGnUJ7oxx/gCcY40xlCOTUuatg4Kt3tN9z43gbnL9
|
|
DjACOSfBRQq18w2wDLDZsDPpf7mHL5ou2g5BZbKY9HslQh7N6mzhfR/1Hf+1PGrrdddDXM
|
|
Y/ta/1LrGriT/tjY6yJeuFzaxVU4ZUusEYting==
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBI7qFojD9363V6AtyoJU+yJQmp2hIdNAv0KAg+2iqJn6edGSkZeVuXa8uechXxhedXcaon1Bo2TlKH6ITmCAMFQ="
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_ECDSA384"
|
|
set password ENC ojdKFlaROrtdSeJJeFu1Ihty2JvU8DqmmVtAcd8RpFa9Om+JuiHC3UPEUCGc4v/bN+v3ml3xIuRuOSyxaso5udkkAAzmzHFpNZCQv8UR5epC3XpxDCjKJsFqnA08rUStJZ+tbuvJ/opAhLDKMS2Z873trKK7714z5vZR1ENqY5iksi3hrZMCie1ADA1SLXEfe4Eh2Q==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCIeQz+rx
|
|
cNkpJYPCumwIx5AAAAEAAAAAEAAACIAAAAE2VjZHNhLXNoYTItbmlzdHAzODQAAAAIbmlz
|
|
dHAzODQAAABhBNjiQRHQuK+ZAVLpqq28qHmXgFHSR2vMwZMBKGci4aEmXwJSLrorwTjR7+
|
|
rH570WB2hecq3RP+4z1FyBYoiyiLq7cpDBVmajs2icMfPJEbaCqzRUb/2nxYHiQsPKI34E
|
|
rgAAANAhHdU5FnUynwmWJGmcEpYwiH1FmLH3XcAPtEsv/f0sR1NrkDAy70nrSg0QIfgoOa
|
|
RlRG3JKEieyttxeTTyS3+WB+weEm4adefxWqLH+mzJg+TzbjMWC0hd8mK+GKKg6sTvxnVE
|
|
W7+VCY0qRY9vqUav4/I53jEoETsop9v7ibKECPK/3c1dYIcAKnX0J64h3fZvj4+3jmOzwx
|
|
WN6YhLvf2cze+ADz6w8DtoT2PmT+dW9yViPHx3kGwar7jmOBUggwkfV4XT+CnMEsVFx8Kj
|
|
MIgY
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ecdsa-sha2-nistp384 AAAAE2VjZHNhLXNoYTItbmlzdHAzODQAAAAIbmlzdHAzODQAAABhBNjiQRHQuK+ZAVLpqq28qHmXgFHSR2vMwZMBKGci4aEmXwJSLrorwTjR7+rH570WB2hecq3RP+4z1FyBYoiyiLq7cpDBVmajs2icMfPJEbaCqzRUb/2nxYHiQsPKI34Erg=="
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_ECDSA521"
|
|
set password ENC Ivlo5jlHojI1KGA/7zo9DBy2VWY6YGfPsFT4bgy24QgedFrpCNvTV+CtC/RxUWsEE/Wz+bXCxaZnkZZrhgalShjJHp/7q5m2GlZy92sdxTp7r3Asub5e6bgQ9NZYpT2ntB3ngwiAT8ZymPGqJN+KPCEUjyJRlmzOP/ifA6uXmN+U3fmU0XHROPvpvlrIL43HaCJ8NA==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCIhQKfZq
|
|
WpMaANE2lH2Nx0AAAAEAAAAAEAAACsAAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlz
|
|
dHA1MjEAAACFBACqneEJaZZLCOJ4MwQIa21hDIeBc9FX/cX286PVg0GppfJWAPEoAWrZgw
|
|
MnNBAls1xRAayrSjAmcCFnnsMA0uqOHAFfmIkqNC0Krb/qyaSnrXZMO+u39VecyLkwlg/m
|
|
UGsU9VyC8ubGG6G+hf7R0IZ3LdPFRBoP69WPaMlRYZYUdI2WUQAAAQDr0O5sP85Nt4SA7z
|
|
k8g/MzqbvzCWFEeID8uhKALq/dxhKzUSuNzAWqFxE4kDxf+c5xFtE0ZyhhHLemh5gdBTTM
|
|
kLjUue/e98qGnqxCHkhrLWWQFaeWGtZFpXERAiU2ypJYs5FxSETnOHy4kfqyUYYYP+Oar2
|
|
V/q9/cwMiwdN10Z7n51XwrxjymjXys5Njl4gExdjkREvXF2MnuWYEOXVmUsdOqPgTj5YEd
|
|
Qk+4DzwKvc3BTRcwnS+rKHLvBBKXRefJSNM/4MgSWbEcR/Fs1zkbFz0AHurSGGtOXwnoIw
|
|
6a4phhJqZ+DeIPSl3stNCMr/4Pq/7+yooplplX9r7yAlJa
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBACqneEJaZZLCOJ4MwQIa21hDIeBc9FX/cX286PVg0GppfJWAPEoAWrZgwMnNBAls1xRAayrSjAmcCFnnsMA0uqOHAFfmIkqNC0Krb/qyaSnrXZMO+u39VecyLkwlg/mUGsU9VyC8ubGG6G+hf7R0IZ3LdPFRBoP69WPaMlRYZYUdI2WUQ=="
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_ED25519"
|
|
set password ENC CbpJBZjtERz5E5QYS060AXz3oZMfToXAl12b5F9wtD3P21qC9xfwGyosShS9JglMLekFIeCSwKe5uqOVcFiu0oIQuFkLP/05v2VO96jgV8pJlIQnU8fazE0vi9woMqp3yYFt1lFrEz6wS+Q2H+zOWg/JTKjOxP02J0afKoGnO5mlwXV4rIZ0rmGQjTbex0ZaZ2Ps3Q==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABANmtIKne
|
|
CI7yqyd3LwTmZhAAAAEAAAAAEAAAAzAAAAC3NzaC1lZDI1NTE5AAAAIBkU0tdoqAEA8Z+R
|
|
frW2pyHjnuyOFFAp4qBam1aDpO4wAAAAkEg5eRec4VKSVdmDS1J1vs2VY8uDSDJ6vulk4f
|
|
OLxJTy5cEsz+MzADfVt4H7malC/ol7Eax+FLctO9DAQWRxXsBBU2X5uAM5FnS4TYp7mHOY
|
|
U0RY8tU8VEY+8oClknnJ+NcJ7eJ3RhEhkX9qFsKLhVe/9MO8JVsqJO7Q/CcM70uoFhNgcf
|
|
u8TMSlBTOJnJ245w==
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBkU0tdoqAEA8Z+RfrW2pyHjnuyOFFAp4qBam1aDpO4w"
|
|
set source built-in
|
|
next
|
|
end
|
|
config firewall ssh local-ca
|
|
edit "g-Fortinet_SSH_CA"
|
|
set password ENC aG2Dfs2kGtXQJeox9BUiZR4lro/UhXkoeep+GbccW20u2SjVsmT2LSodzkYYYz08wGZX91MiWZ/+cP94GxYHJOHa5DByhJW9H2ZBBRFQ6cUVL9oxE3vV7DRK23Wkke//XolzV4Uf2jmeiOnGGOAhQ63K7dD1ippVZ0ZPbJHbkxs/GmSUGACqQn+RjxVcsqGSXVnTaQ==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABDyuh3zpN
|
|
HXpKIKCT7FetnEAAAAEAAAAAEAAAEXAAAAB3NzaC1yc2EAAAADAQABAAABAQDWiV0aIqNb
|
|
iSdn5/C+GqDwBa1aPB3i3cNCHh7AgAWMo2xJOFVgqrBH6cWYfJ/eB86ySooWMRbOuhmpTc
|
|
pa5Zx9e5erEX7QT5eLf/f2i03aWvoYGl5dOHRpJlsSe7AuUyak0A0eaOMODpiGdeyb7Xqe
|
|
YQ/uhEewIs/BgZgh68CVCrdDLVgWmTMdVV9DSrk9Zup+AnO2fSc7789Nu2Hj5fkmXe29us
|
|
mdnjPC288+qzbc2ToYOHfmVCXT72ZhV0LeD9L+HQUsiRVDDV8ErKQWSGv3+T8aQ5mrnygG
|
|
QLoo6m1exPqvvkdmgfuOXOMMy3FS3GkRGBmsVVMCwQQk8cy4D9TnAAADwAhUTQWWd9MyyI
|
|
ztaTmETZf2/1RpsN6Z11GieyoWFGT6OYJODzWPIpzsliGQ+wj3WoMq+CzrO1frsgpbhtHg
|
|
B2mC1zUBrvDNLlfaZCcQr3o1WpNKnb9sswriZIrKwHU+94yt02+z8ynVxH2/zwJpB4ax/P
|
|
npTymjyPR53bfsII5PBAerjzon7OR4dTuXjJc7I1iBcHlFeKDItbazxG4IsaRu0dreW9gf
|
|
S08r1DYc8sGJGUWowT8mijPUkJZBIQNhBo8w0PD1s1SYGDN5XJzEL02o5OwzI2lbTt/asj
|
|
FNPT4NlIF6GPcr8g7aB0/FhVsFizEM6ZPjgRoZrj5vmYxwInSQ6ieGxrnTwR+i3VedfrVY
|
|
lvaEsn3V7RrFKqCXb2ZLgridblGMSv4gFcnAQfkcoJgFNsjcEg5EIRnEBrXH6Mxz0z0wcG
|
|
WswaXzvqejxoGkXXEhbPpdx76mAbvmZms+Ui0yytpWgaTPkg+wyrAr6l/uIeXoPDaeZbS3
|
|
WzQGKCkvFWpPPH1zlHK+Sf6kzGMXvyz/q9I23ZAHMFUzYH5vi8dsLG0mItxWwIIaJQ24V/
|
|
I7/z4v6MDS72p/OiKk7quU2rAiekZa1yMkiQ0Phoi6EKwXUpQGGK0hR7nlljYmX2I7aCbf
|
|
smL2YwplikCtKkTyouBUtqlMtrgDIvwRtgaW0NureDAGsrELdDMX+8aAvkILKb1eSxX2c/
|
|
Jev9kBvHLuMZN5qTxdONnRs75Hb+u1Yr1VJymwZET9uQsHOvEnDV61giCG4d4ENy8TmMx6
|
|
i2lVEdzQCLXB1wuW3fKZPAnPKj7ruCekqm4SX7frRyC0yad0VCsvlOSqsFdq6CN8SSShaF
|
|
Z/zTGAEp/kje49O/mrDUiG28yN/hCGoeHdHhNxgpq/UTIrf4ZUAC6xyesp3eKcVje/P8L7
|
|
219eRzyI+E/STBA0XCuESg0LXgEWRwnTA0W8YGUUgPyvxmh/thCtiJN/voFwJIzniIYUTx
|
|
HdAzfuhRRCGOm41ogMMvve+muMw2c/KFMDW+8mFK6RlOL0Sp+E/NQj/TYXM6xVGTbRz+BA
|
|
6tNUzFqorIRqOXC/4nGxx+iatAhdVqpMmW+pKKtMxeZ+ah5A6OwPUqhEuboHJVtLHvLYa4
|
|
u7mBZ5hOQjyZxOgW2ya4hrPbevbOGbuh+vNqsiowzvMsh9i+tjAq4mgg/pbWqe4C60R5Fi
|
|
7VXOj/P8aZLri7BuiPGXa2PdwS7pZOjTZZyaktwuxZT1WnrnVMgQdCm2WxdmTax3DChBh0
|
|
v0Cb0bDw==
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWiV0aIqNbiSdn5/C+GqDwBa1aPB3i3cNCHh7AgAWMo2xJOFVgqrBH6cWYfJ/eB86ySooWMRbOuhmpTcpa5Zx9e5erEX7QT5eLf/f2i03aWvoYGl5dOHRpJlsSe7AuUyak0A0eaOMODpiGdeyb7XqeYQ/uhEewIs/BgZgh68CVCrdDLVgWmTMdVV9DSrk9Zup+AnO2fSc7789Nu2Hj5fkmXe29usmdnjPC288+qzbc2ToYOHfmVCXT72ZhV0LeD9L+HQUsiRVDDV8ErKQWSGv3+T8aQ5mrnygGQLoo6m1exPqvvkdmgfuOXOMMy3FS3GkRGBmsVVMCwQQk8cy4D9Tn"
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_CA_Untrusted"
|
|
set password ENC i4p3/WQwa+zylLFToDo4DPmUI0iwzSXUF++BtEYvAR1nZVJNgwOfcNreVKmuy/jvCeSLn9f3t5a24SAXsYrmD9vt8/HbMw2uf0vw76fdNgG6OC/rTB6rpQiAgt19i/ADyefqECKI2TVv8CTmqVx56OTFpnHqKBAVxiwuPE41rMRktrrOTkprtqdGDK1Srzg8zod5Gg==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABBQl4Zet4
|
|
cT1vY5gtR7Al7bAAAAEAAAAAEAAAEXAAAAB3NzaC1yc2EAAAADAQABAAABAQDYUFiCOzZ8
|
|
jkWReh8ohyBpy6ZHkccvy13tZdDl9QYc14NBf6PCr2AgfvKh34LBqvjkXG3dOt4Mf8viDy
|
|
FiHIsUhBOyUvVWGb5nYSYYGyH5a7jIQ6hHT3ycjsfpZKVCp9QOpdAQ3mSkbmSjCgvdLr1c
|
|
A5uKsqdo5yXDFMUqM7a30JMkS1OyUC6/wdkGkx5LfaBySqw7huTcHGGxnAq7EIkvdBpoAL
|
|
wOW8s/BBX1/MEorJ1dJULbBUz0myAWwHF7Nh1EP09w3bPGeJrJYzABJOJaSNvYTLzvw2p1
|
|
odmDu+Z/+0J494OV8CT0fsk8Z8O85dknUeQRulYBJesqeURy280zAAADwLuyDsegVHlUsH
|
|
h0bEoYb+d8lT6ntoUGgLX8ntGmEWgrGXX4Sw2k0L5yHGeLG+hUvBXY2fOfJUVjCkoqlwEf
|
|
0Y10tKUVDJl1tBTzYYyB6H1ZszMyiWWbr+ytDs11wJ86WhM2n4udyrMsjVQmURNN2nTlvF
|
|
Q4Z+rMAOC//1OtB1LDDMU4FWw1J50QUoYQ1lsNt2XLfMIECm4Adm9ucYbrXUyiceegnBDU
|
|
bCL73uQg3dBPkIUQvt4di28TUChDKsHO2TkyrYU2+9I+PIiphdsDmMc/Q0P0QnuYFomWI+
|
|
3vhNU9Ht0FoKD3dzAxDj81H2AzHAx3pU8uuhFgA8tIEPaT5bjgY6Xws0Ret771sjYLbM5F
|
|
7LHBFl+lkB2sEK3BWjd/Mj5VpLebwiZOUyLgrEESb+4vNlU82n15G08bxrOo/4vMKsrnCL
|
|
3JFIGKzCseZFd4VE8BZBp89H1Nr+TmDRArqUZ4B7FHGVPUjW+SAE7T2m3Ujz1A4J9l0KQ4
|
|
7OK4kaziRPkpaZb7XccP4lDalcxJRC+zjF/hlor/YlDIBpghYAw1JLMgPbG1uuEnKNuGIv
|
|
1gfGML2U/bQSRbygUVk6nos9i4SdBfWMSNkYYfXTJ6NYTbopMAZ0VK1X9IDgoN91ZNoRbB
|
|
M4BWCghcmm6eEF15tqDQ4nJ9caZMMeE4vUNKuF5T5It4LuBLafPWYZUeuKmiJecFqxjr8M
|
|
uhq0d91LSQwwH8tANq6Nt/Hj/lubSomjxGGRkhtz0fNpE5gM6LJNa5R7VIFu8PHXHOGypC
|
|
Z0PTTa2r+L8AnzwjMv1H5dISOm3zF1AYZ9HG6a8MJn8z3SpeAUM1iqeQ488/ppmYlX0d5T
|
|
JYHZoDFhBGvy3xtLZQ6j4/4IZga8HgHHxz7Ch2KdMzQiFUaMIOfixd5ljVVKiOi/VdvBFn
|
|
3e5piSYFyCfvHpjK+YOQ9nLXigLwUbDgS2BiZ+gMdydKQX42+JXU+/ICItdZl+wP7mkai+
|
|
xqTFDS4oOu637kfKI6ChT/Fsey5Ylip5IcfRg0Ubyow0omxW4o/J+S/bFIlGHSgb9PUs+T
|
|
x2c9IXXcclt31xkCz+JASa6LW+ldUUvEMiv3uW84Un5D6vFByX8lEV6FOc27QUCIYgWjqV
|
|
jAgZg4FmI+bj3/kRaLVjpxcjEGZjfxNn3gRAgeETWSLzAUyF8CN9vzV8+K64AuJNa5J2tx
|
|
+qezsx6kJTHdy3OoztCoFmgU29BBn0b7Ip4u9agaW53R7N4tjwPKg9IrDEqTIAmY+O2nk7
|
|
rM5cY3OQ==
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYUFiCOzZ8jkWReh8ohyBpy6ZHkccvy13tZdDl9QYc14NBf6PCr2AgfvKh34LBqvjkXG3dOt4Mf8viDyFiHIsUhBOyUvVWGb5nYSYYGyH5a7jIQ6hHT3ycjsfpZKVCp9QOpdAQ3mSkbmSjCgvdLr1cA5uKsqdo5yXDFMUqM7a30JMkS1OyUC6/wdkGkx5LfaBySqw7huTcHGGxnAq7EIkvdBpoALwOW8s/BBX1/MEorJ1dJULbBUz0myAWwHF7Nh1EP09w3bPGeJrJYzABJOJaSNvYTLzvw2p1odmDu+Z/+0J494OV8CT0fsk8Z8O85dknUeQRulYBJesqeURy280z"
|
|
set source built-in
|
|
next
|
|
end
|
|
config firewall ssl setting
|
|
set proxy-connect-timeout 30
|
|
set ssl-dh-bits 2048
|
|
set ssl-send-empty-frags enable
|
|
set no-matching-cipher-action bypass
|
|
set cert-cache-capacity 200
|
|
set cert-cache-timeout 10
|
|
set session-cache-capacity 500
|
|
set session-cache-timeout 20
|
|
set kxp-queue-threshold 16
|
|
set ssl-queue-threshold 32
|
|
set abbreviate-handshake enable
|
|
end
|
|
config firewall ipv6-eh-filter
|
|
set hop-opt disable
|
|
set dest-opt disable
|
|
set routing enable
|
|
set routing-type 0
|
|
set fragment disable
|
|
set auth disable
|
|
set no-next disable
|
|
end
|
|
config firewall global
|
|
set banned-ip-persistency disabled
|
|
end
|
|
config system speed-test-setting
|
|
set latency-threshold 60
|
|
set multiple-tcp-stream 4
|
|
end
|
|
config dlp settings
|
|
set storage-device ''
|
|
set size 16
|
|
set db-mode stop-adding
|
|
set cache-mem-percent 2
|
|
set chunk-size 2800
|
|
end
|
|
config system standalone-cluster
|
|
set standalone-group-id 0
|
|
set group-member-id 0
|
|
set layer2-connection unavailable
|
|
unset session-sync-dev
|
|
set encryption disable
|
|
config cluster-peer
|
|
end
|
|
end
|
|
config switch-controller system
|
|
set parallel-process-override disable
|
|
set data-sync-interval 60
|
|
set iot-weight-threshold 1
|
|
set iot-scan-interval 60
|
|
set iot-holdoff 5
|
|
set iot-mac-idle 1440
|
|
set nac-periodic-interval 60
|
|
set dynamic-periodic-interval 60
|
|
set tunnel-mode compatible
|
|
end
|
|
config wireless-controller timers
|
|
set echo-interval 30
|
|
set discovery-interval 5
|
|
set client-idle-timeout 300
|
|
set client-idle-rehome-timeout 20
|
|
set auth-timeout 5
|
|
set rogue-ap-log 0
|
|
set fake-ap-log 1
|
|
set rogue-ap-cleanup 0
|
|
set sta-stats-interval 1
|
|
set vap-stats-interval 15
|
|
set radio-stats-interval 15
|
|
set sta-capability-interval 30
|
|
set sta-locate-timer 1800
|
|
set ipsec-intf-cleanup 120
|
|
set ble-scan-report-intv 30
|
|
set drma-interval 60
|
|
end
|
|
config emailfilter fortishield
|
|
set spam-submit-srv "www.nospammer.net"
|
|
set spam-submit-force enable
|
|
set spam-submit-txt2htm enable
|
|
end
|
|
config emailfilter options
|
|
set dns-timeout 7
|
|
end
|
|
config system fortiguard
|
|
set fortiguard-anycast disable
|
|
set protocol udp
|
|
set port 8888
|
|
set load-balance-servers 1
|
|
set update-server-location automatic
|
|
set sandbox-region ''
|
|
set update-ffdb enable
|
|
set update-uwdb enable
|
|
set update-extdb enable
|
|
set update-build-proxy enable
|
|
set vdom "root"
|
|
set auto-firmware-upgrade disable
|
|
set gui-prompt-auto-upgrade disable
|
|
set antispam-force-off disable
|
|
set antispam-cache enable
|
|
set antispam-cache-ttl 1800
|
|
set antispam-cache-mpercent 2
|
|
set antispam-timeout 7
|
|
set outbreak-prevention-force-off disable
|
|
set outbreak-prevention-cache enable
|
|
set outbreak-prevention-cache-ttl 300
|
|
set outbreak-prevention-cache-mpercent 2
|
|
set outbreak-prevention-timeout 7
|
|
set webfilter-force-off disable
|
|
set webfilter-cache enable
|
|
set webfilter-cache-ttl 3600
|
|
set webfilter-timeout 15
|
|
set sdns-server-ip "208.91.112.220" "173.243.140.53" "210.7.96.53"
|
|
set sdns-server-port 53
|
|
unset sdns-options
|
|
set source-ip 0.0.0.0
|
|
set source-ip6 ::
|
|
set proxy-server-ip ''
|
|
set proxy-server-port 0
|
|
set proxy-username ''
|
|
set proxy-password ENC 4JWGNoUP9BrIJFNXUoo8ePY9J8fnNYqST6HZWu92Zqsl81KxHke8gu/RSGJ1Mq3sLU3CxBE/M3tL6/IyQiBWNKYS1XKLCcwwPKEDgZbvlsFOtjIuy3vjtswbWcSqqog7gL+OmbrXWpqqIoIfMc8puxBHjwnfncTr0leKvt/b5QjJ5B504+cFwNqLNPQlv1ffU/k+Mw==
|
|
set ddns-server-ip 0.0.0.0
|
|
set ddns-server-ip6 ::
|
|
set ddns-server-port 443
|
|
set interface-select-method auto
|
|
end
|
|
config endpoint-control fctems
|
|
edit 1
|
|
set status disable
|
|
set name ''
|
|
set dirty-reason none
|
|
set fortinetone-cloud-authentication disable
|
|
set server ''
|
|
set https-port 443
|
|
set serial-number ''
|
|
set tenant-id ''
|
|
set source-ip 0.0.0.0
|
|
set pull-sysinfo enable
|
|
set pull-vulnerabilities enable
|
|
set pull-avatars enable
|
|
set pull-tags enable
|
|
set pull-malware-hash enable
|
|
unset capabilities
|
|
set call-timeout 30
|
|
set out-of-sync-threshold 180
|
|
set websocket-override disable
|
|
set preserve-ssl-session disable
|
|
set interface-select-method auto
|
|
set trust-ca-cn enable
|
|
next
|
|
edit 2
|
|
set status disable
|
|
set name ''
|
|
set dirty-reason none
|
|
set fortinetone-cloud-authentication disable
|
|
set server ''
|
|
set https-port 443
|
|
set serial-number ''
|
|
set tenant-id ''
|
|
set source-ip 0.0.0.0
|
|
set pull-sysinfo enable
|
|
set pull-vulnerabilities enable
|
|
set pull-avatars enable
|
|
set pull-tags enable
|
|
set pull-malware-hash enable
|
|
unset capabilities
|
|
set call-timeout 30
|
|
set out-of-sync-threshold 180
|
|
set websocket-override disable
|
|
set preserve-ssl-session disable
|
|
set interface-select-method auto
|
|
set trust-ca-cn enable
|
|
next
|
|
edit 3
|
|
set status disable
|
|
set name ''
|
|
set dirty-reason none
|
|
set fortinetone-cloud-authentication disable
|
|
set server ''
|
|
set https-port 443
|
|
set serial-number ''
|
|
set tenant-id ''
|
|
set source-ip 0.0.0.0
|
|
set pull-sysinfo enable
|
|
set pull-vulnerabilities enable
|
|
set pull-avatars enable
|
|
set pull-tags enable
|
|
set pull-malware-hash enable
|
|
unset capabilities
|
|
set call-timeout 30
|
|
set out-of-sync-threshold 180
|
|
set websocket-override disable
|
|
set preserve-ssl-session disable
|
|
set interface-select-method auto
|
|
set trust-ca-cn enable
|
|
next
|
|
edit 4
|
|
set status disable
|
|
set name ''
|
|
set dirty-reason none
|
|
set fortinetone-cloud-authentication disable
|
|
set server ''
|
|
set https-port 443
|
|
set serial-number ''
|
|
set tenant-id ''
|
|
set source-ip 0.0.0.0
|
|
set pull-sysinfo enable
|
|
set pull-vulnerabilities enable
|
|
set pull-avatars enable
|
|
set pull-tags enable
|
|
set pull-malware-hash enable
|
|
unset capabilities
|
|
set call-timeout 30
|
|
set out-of-sync-threshold 180
|
|
set websocket-override disable
|
|
set preserve-ssl-session disable
|
|
set interface-select-method auto
|
|
set trust-ca-cn enable
|
|
next
|
|
edit 5
|
|
set status disable
|
|
set name ''
|
|
set dirty-reason none
|
|
set fortinetone-cloud-authentication disable
|
|
set server ''
|
|
set https-port 443
|
|
set serial-number ''
|
|
set tenant-id ''
|
|
set source-ip 0.0.0.0
|
|
set pull-sysinfo enable
|
|
set pull-vulnerabilities enable
|
|
set pull-avatars enable
|
|
set pull-tags enable
|
|
set pull-malware-hash enable
|
|
unset capabilities
|
|
set call-timeout 30
|
|
set out-of-sync-threshold 180
|
|
set websocket-override disable
|
|
set preserve-ssl-session disable
|
|
set interface-select-method auto
|
|
set trust-ca-cn enable
|
|
next
|
|
edit 6
|
|
set status disable
|
|
set name ''
|
|
set dirty-reason none
|
|
set fortinetone-cloud-authentication disable
|
|
set server ''
|
|
set https-port 443
|
|
set serial-number ''
|
|
set tenant-id ''
|
|
set source-ip 0.0.0.0
|
|
set pull-sysinfo enable
|
|
set pull-vulnerabilities enable
|
|
set pull-avatars enable
|
|
set pull-tags enable
|
|
set pull-malware-hash enable
|
|
unset capabilities
|
|
set call-timeout 30
|
|
set out-of-sync-threshold 180
|
|
set websocket-override disable
|
|
set preserve-ssl-session disable
|
|
set interface-select-method auto
|
|
set trust-ca-cn enable
|
|
next
|
|
edit 7
|
|
set status disable
|
|
set name ''
|
|
set dirty-reason none
|
|
set fortinetone-cloud-authentication disable
|
|
set server ''
|
|
set https-port 443
|
|
set serial-number ''
|
|
set tenant-id ''
|
|
set source-ip 0.0.0.0
|
|
set pull-sysinfo enable
|
|
set pull-vulnerabilities enable
|
|
set pull-avatars enable
|
|
set pull-tags enable
|
|
set pull-malware-hash enable
|
|
unset capabilities
|
|
set call-timeout 30
|
|
set out-of-sync-threshold 180
|
|
set websocket-override disable
|
|
set preserve-ssl-session disable
|
|
set interface-select-method auto
|
|
set trust-ca-cn enable
|
|
next
|
|
end
|
|
config ips global
|
|
set fail-open disable
|
|
set database extended
|
|
set traffic-submit enable
|
|
set anomaly-mode continuous
|
|
set session-limit-mode heuristic
|
|
set socket-size 128
|
|
set engine-count 0
|
|
set sync-session-ttl enable
|
|
set np-accel-mode basic
|
|
set ips-reserve-cpu disable
|
|
set cp-accel-mode advanced
|
|
set deep-app-insp-timeout 0
|
|
set deep-app-insp-db-limit 0
|
|
set exclude-signatures none
|
|
set packet-log-queue-depth 128
|
|
set ngfw-max-scan-range 4096
|
|
config tls-active-probe
|
|
set interface-select-method auto
|
|
end
|
|
end
|
|
config system email-server
|
|
set type custom
|
|
set reply-to ''
|
|
set server "email.intercloud.com.bd"
|
|
set port 465
|
|
set source-ip 0.0.0.0
|
|
set source-ip6 ::
|
|
set authenticate enable
|
|
set validate-server disable
|
|
set username "soc@intercloud.com.bd"
|
|
set password ENC XYHbtOgbh/ycxHsMX1L48CIs61l5yytKaj0ieTSq4+oe7un3Np7yByVsvLkNW1NmsiJNrrz5+RqpFA/VYPyPcxnBSj4mGKQn5OwbzF45D9P1J/VFFyoTp7URC0oO87SGcfd0m6cI0jvvyKdiM7rLSNoVxU4CCWIQGa6vezF8Rc8EjrrDTtR56JKIqX677YcEbNqSLQ==
|
|
set security smtps
|
|
set ssl-min-proto-version default
|
|
set interface-select-method auto
|
|
end
|
|
config system session-helper
|
|
edit 1
|
|
set name pptp
|
|
set protocol 6
|
|
set port 1723
|
|
next
|
|
edit 2
|
|
set name h323
|
|
set protocol 6
|
|
set port 1720
|
|
next
|
|
edit 3
|
|
set name ras
|
|
set protocol 17
|
|
set port 1719
|
|
next
|
|
edit 4
|
|
set name tns
|
|
set protocol 6
|
|
set port 1521
|
|
next
|
|
edit 5
|
|
set name tftp
|
|
set protocol 17
|
|
set port 69
|
|
next
|
|
edit 6
|
|
set name rtsp
|
|
set protocol 6
|
|
set port 554
|
|
next
|
|
edit 7
|
|
set name rtsp
|
|
set protocol 6
|
|
set port 7070
|
|
next
|
|
edit 8
|
|
set name rtsp
|
|
set protocol 6
|
|
set port 8554
|
|
next
|
|
edit 9
|
|
set name ftp
|
|
set protocol 6
|
|
set port 21
|
|
next
|
|
edit 10
|
|
set name mms
|
|
set protocol 6
|
|
set port 1863
|
|
next
|
|
edit 11
|
|
set name pmap
|
|
set protocol 6
|
|
set port 111
|
|
next
|
|
edit 12
|
|
set name pmap
|
|
set protocol 17
|
|
set port 111
|
|
next
|
|
edit 13
|
|
set name sip
|
|
set protocol 17
|
|
set port 5060
|
|
next
|
|
edit 14
|
|
set name dns-udp
|
|
set protocol 17
|
|
set port 53
|
|
next
|
|
edit 15
|
|
set name rsh
|
|
set protocol 6
|
|
set port 514
|
|
next
|
|
edit 16
|
|
set name rsh
|
|
set protocol 6
|
|
set port 512
|
|
next
|
|
edit 17
|
|
set name dcerpc
|
|
set protocol 6
|
|
set port 135
|
|
next
|
|
edit 18
|
|
set name dcerpc
|
|
set protocol 17
|
|
set port 135
|
|
next
|
|
edit 19
|
|
set name mgcp
|
|
set protocol 17
|
|
set port 2427
|
|
next
|
|
edit 20
|
|
set name mgcp
|
|
set protocol 17
|
|
set port 2727
|
|
next
|
|
end
|
|
config system fips-cc
|
|
end
|
|
config system tos-based-priority
|
|
end
|
|
config system dscp-based-priority
|
|
end
|
|
config system probe-response
|
|
set mode none
|
|
end
|
|
config system auto-install
|
|
set auto-install-config enable
|
|
set auto-install-image enable
|
|
set default-config-file "fgt_system.conf"
|
|
set default-image-file "image.out"
|
|
end
|
|
config system console
|
|
set mode line
|
|
set output standard
|
|
set login enable
|
|
set fortiexplorer enable
|
|
end
|
|
config system ntp
|
|
set ntpsync enable
|
|
set type fortiguard
|
|
set syncinterval 60
|
|
set source-ip 0.0.0.0
|
|
set source-ip6 ::
|
|
set server-mode disable
|
|
end
|
|
config system vdom-radius-server
|
|
end
|
|
config system ftm-push
|
|
set server-port 4433
|
|
set server-cert "Fortinet_Factory"
|
|
set server-ip 0.0.0.0
|
|
set server ''
|
|
set status disable
|
|
end
|
|
config system geoip-override
|
|
end
|
|
config system fortisandbox
|
|
set status disable
|
|
set email ''
|
|
end
|
|
config system fortindr
|
|
set status disable
|
|
end
|
|
config system vdom-exception
|
|
end
|
|
config system csf
|
|
set status disable
|
|
set log-unification enable
|
|
set fabric-workers 2
|
|
set forticloud-account-enforcement enable
|
|
end
|
|
config automation setting
|
|
set max-concurrent-stitches 512
|
|
set fabric-sync enable
|
|
end
|
|
config system automation-trigger
|
|
edit "test"
|
|
set description ''
|
|
set trigger-type event-based
|
|
set event-type config-change
|
|
next
|
|
edit "Network Down"
|
|
set description ''
|
|
set trigger-type event-based
|
|
set event-type event-log
|
|
set logid 20099
|
|
config fields
|
|
edit 1
|
|
set name "status"
|
|
set value "DOWN"
|
|
next
|
|
end
|
|
next
|
|
edit "HA Failover"
|
|
set description ''
|
|
set trigger-type event-based
|
|
set event-type ha-failover
|
|
next
|
|
edit "Reboot"
|
|
set description ''
|
|
set trigger-type event-based
|
|
set event-type reboot
|
|
next
|
|
edit "FortiAnalyzer Connection Down"
|
|
set description ''
|
|
set trigger-type event-based
|
|
set event-type event-log
|
|
set logid 22902
|
|
next
|
|
edit "License Expired Notification"
|
|
set description ''
|
|
set trigger-type event-based
|
|
set event-type license-near-expiry
|
|
set license-type any
|
|
next
|
|
edit "Compromised Host Quarantine"
|
|
set description ''
|
|
set trigger-type event-based
|
|
set event-type ioc
|
|
next
|
|
edit "Incoming Webhook Call"
|
|
set description ''
|
|
set trigger-type event-based
|
|
set event-type incoming-webhook
|
|
next
|
|
edit "Security Rating Notification"
|
|
set description ''
|
|
set trigger-type event-based
|
|
set event-type security-rating-summary
|
|
set report-type posture
|
|
next
|
|
edit "Local Cert Expired Notification"
|
|
set description "Default automation trigger configuration for when a local certificate is near expiration."
|
|
set trigger-type event-based
|
|
set event-type local-cert-near-expiry
|
|
next
|
|
end
|
|
config system automation-action
|
|
edit "test_email"
|
|
set description ''
|
|
set action-type email
|
|
set email-to "hejbul.tawhid@brilliant.com.bd"
|
|
set email-from ''
|
|
set email-subject "test"
|
|
set minimum-interval 0
|
|
set message "%%log%%"
|
|
set replacement-message disable
|
|
next
|
|
edit "Network Down_email"
|
|
set description ''
|
|
set action-type email
|
|
set email-from ''
|
|
set email-subject "Network Down"
|
|
set minimum-interval 0
|
|
set message "%%log%%"
|
|
set replacement-message disable
|
|
next
|
|
edit "HA Failover_email"
|
|
set description ''
|
|
set action-type email
|
|
set email-from ''
|
|
set email-subject "HA Failover"
|
|
set minimum-interval 0
|
|
set message "%%log%%"
|
|
set replacement-message disable
|
|
next
|
|
edit "Reboot_email"
|
|
set description ''
|
|
set action-type email
|
|
set email-from ''
|
|
set email-subject "Reboot"
|
|
set minimum-interval 0
|
|
set message "%%log%%"
|
|
set replacement-message disable
|
|
next
|
|
edit "FortiAnalyzer Connection Down_ios-notification"
|
|
set description ''
|
|
set action-type fortiexplorer-notification
|
|
set minimum-interval 0
|
|
next
|
|
edit "License Expired Notification_ios-notification"
|
|
set description ''
|
|
set action-type fortiexplorer-notification
|
|
set minimum-interval 0
|
|
next
|
|
edit "Security Rating Notification_ios-notification"
|
|
set description ''
|
|
set action-type fortiexplorer-notification
|
|
set minimum-interval 0
|
|
next
|
|
edit "Compromised Host Quarantine_quarantine"
|
|
set description ''
|
|
set action-type quarantine
|
|
next
|
|
edit "Compromised Host Quarantine_quarantine-forticlient"
|
|
set description ''
|
|
set action-type quarantine-forticlient
|
|
next
|
|
edit "Reboot FortiGate"
|
|
set description "Default automation action configuration for rebooting this FortiGate unit."
|
|
set action-type system-actions
|
|
set system-action reboot
|
|
set minimum-interval 300
|
|
next
|
|
edit "Shutdown FortiGate"
|
|
set description "Default automation action configuration for shuting down this FortiGate unit."
|
|
set action-type system-actions
|
|
set system-action shutdown
|
|
set minimum-interval 0
|
|
next
|
|
edit "Backup Config Disk"
|
|
set description "Default automation action configuration for backing up the configuration on disk."
|
|
set action-type system-actions
|
|
set system-action backup-config
|
|
set minimum-interval 0
|
|
next
|
|
end
|
|
config system automation-destination
|
|
end
|
|
config system automation-stitch
|
|
edit "test"
|
|
set description ''
|
|
set status disable
|
|
set trigger "test"
|
|
config actions
|
|
edit 1
|
|
set action "test_email"
|
|
set delay 0
|
|
set required disable
|
|
next
|
|
end
|
|
next
|
|
edit "Network Down"
|
|
set description ''
|
|
set status disable
|
|
set trigger "Network Down"
|
|
config actions
|
|
edit 1
|
|
set action "Network Down_email"
|
|
set delay 0
|
|
set required disable
|
|
next
|
|
end
|
|
next
|
|
edit "HA Failover"
|
|
set description ''
|
|
set status disable
|
|
set trigger "HA Failover"
|
|
config actions
|
|
edit 1
|
|
set action "HA Failover_email"
|
|
set delay 0
|
|
set required disable
|
|
next
|
|
end
|
|
next
|
|
edit "Reboot"
|
|
set description ''
|
|
set status disable
|
|
set trigger "Reboot"
|
|
config actions
|
|
edit 1
|
|
set action "Reboot_email"
|
|
set delay 0
|
|
set required disable
|
|
next
|
|
end
|
|
next
|
|
edit "FortiAnalyzer Connection Down"
|
|
set description ''
|
|
set status enable
|
|
set trigger "FortiAnalyzer Connection Down"
|
|
config actions
|
|
edit 1
|
|
set action "FortiAnalyzer Connection Down_ios-notification"
|
|
set delay 0
|
|
set required disable
|
|
next
|
|
end
|
|
next
|
|
edit "License Expired Notification"
|
|
set description ''
|
|
set status enable
|
|
set trigger "License Expired Notification"
|
|
config actions
|
|
edit 1
|
|
set action "License Expired Notification_ios-notification"
|
|
set delay 0
|
|
set required disable
|
|
next
|
|
end
|
|
next
|
|
edit "Compromised Host Quarantine"
|
|
set description ''
|
|
set status disable
|
|
set trigger "Compromised Host Quarantine"
|
|
config actions
|
|
edit 1
|
|
set action "Compromised Host Quarantine_quarantine"
|
|
set delay 0
|
|
set required disable
|
|
next
|
|
edit 2
|
|
set action "Compromised Host Quarantine_quarantine-forticlient"
|
|
set delay 0
|
|
set required disable
|
|
next
|
|
end
|
|
next
|
|
edit "Incoming Webhook Quarantine"
|
|
set description ''
|
|
set status disable
|
|
set trigger "Incoming Webhook Call"
|
|
config actions
|
|
edit 1
|
|
set action "Compromised Host Quarantine_quarantine"
|
|
set delay 0
|
|
set required disable
|
|
next
|
|
edit 2
|
|
set action "Compromised Host Quarantine_quarantine-forticlient"
|
|
set delay 0
|
|
set required disable
|
|
next
|
|
end
|
|
next
|
|
edit "Security Rating Notification"
|
|
set description ''
|
|
set status enable
|
|
set trigger "Security Rating Notification"
|
|
config actions
|
|
edit 1
|
|
set action "Security Rating Notification_ios-notification"
|
|
set delay 0
|
|
set required disable
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config monitoring np6-ipsec-engine
|
|
set status disable
|
|
set interval 1
|
|
set threshold 15 15 12 12 8 8 5 5
|
|
end
|
|
config monitoring npu-hpe
|
|
set status disable
|
|
set interval 1
|
|
set multipliers 4 4 4 4 8 8 8 8 8 8 8 8
|
|
end
|
|
config system saml
|
|
set status disable
|
|
set default-login-page normal
|
|
set default-profile ''
|
|
end
|
|
config system federated-upgrade
|
|
set status disabled
|
|
set upgrade-id 0
|
|
set next-path-index 0
|
|
end
|
|
config system device-upgrade
|
|
end
|
|
config system ike
|
|
set embryonic-limit 5000
|
|
set dh-multiprocess disable
|
|
end
|
|
config system acme
|
|
set source-ip 0.0.0.0
|
|
set source-ip6 ::
|
|
end
|
|
config system ipam
|
|
set status disable
|
|
set server-type fabric-root
|
|
end
|
|
config system fabric-vpn
|
|
set status disable
|
|
end
|
|
end
|
|
|
|
config vdom
|
|
edit root
|
|
config wireless-controller hotspot20 anqp-venue-name
|
|
end
|
|
config wireless-controller hotspot20 anqp-venue-url
|
|
end
|
|
config wireless-controller hotspot20 anqp-network-auth-type
|
|
end
|
|
config wireless-controller hotspot20 anqp-roaming-consortium
|
|
end
|
|
config wireless-controller hotspot20 anqp-nai-realm
|
|
end
|
|
config wireless-controller hotspot20 anqp-3gpp-cellular
|
|
end
|
|
config wireless-controller hotspot20 anqp-ip-address-type
|
|
end
|
|
config wireless-controller hotspot20 h2qp-operator-name
|
|
end
|
|
config wireless-controller hotspot20 h2qp-wan-metric
|
|
end
|
|
config wireless-controller hotspot20 h2qp-conn-capability
|
|
end
|
|
config wireless-controller hotspot20 icon
|
|
end
|
|
config wireless-controller hotspot20 h2qp-osu-provider
|
|
end
|
|
config wireless-controller hotspot20 qos-map
|
|
end
|
|
config wireless-controller hotspot20 h2qp-advice-of-charge
|
|
end
|
|
config wireless-controller hotspot20 h2qp-osu-provider-nai
|
|
end
|
|
config wireless-controller hotspot20 h2qp-terms-and-conditions
|
|
end
|
|
config wireless-controller hotspot20 hs-profile
|
|
end
|
|
config wireless-controller vap
|
|
end
|
|
config system object-tagging
|
|
edit "default"
|
|
set address optional
|
|
set device optional
|
|
set interface optional
|
|
set multiple enable
|
|
set color 0
|
|
next
|
|
end
|
|
config switch-controller traffic-policy
|
|
edit "quarantine"
|
|
set description "Rate control for quarantined traffic"
|
|
set policer-status enable
|
|
set guaranteed-bandwidth 163840
|
|
set guaranteed-burst 8192
|
|
set maximum-burst 163840
|
|
set cos-queue 0
|
|
next
|
|
edit "sniffer"
|
|
set description "Rate control for sniffer mirrored traffic"
|
|
set policer-status enable
|
|
set guaranteed-bandwidth 50000
|
|
set guaranteed-burst 8192
|
|
set maximum-burst 163840
|
|
set cos-queue 0
|
|
next
|
|
end
|
|
config switch-controller fortilink-settings
|
|
end
|
|
config system settings
|
|
set comments ''
|
|
set vdom-type traffic
|
|
set opmode nat
|
|
set ngfw-mode profile-based
|
|
set http-external-dest fortiweb
|
|
set firewall-session-dirty check-all
|
|
set bfd disable
|
|
set utf8-spam-tagging enable
|
|
set wccp-cache-engine disable
|
|
set vpn-stats-log ipsec pptp l2tp ssl
|
|
set vpn-stats-period 600
|
|
set v4-ecmp-mode source-ip-based
|
|
set fw-session-hairpin disable
|
|
set prp-trailer-action disable
|
|
set snat-hairpin-traffic enable
|
|
set dhcp-proxy disable
|
|
set central-nat disable
|
|
set lldp-reception global
|
|
set lldp-transmission global
|
|
set link-down-access enable
|
|
set nat46-generate-ipv6-fragment-header disable
|
|
set nat46-force-ipv4-packet-forwarding disable
|
|
set nat64-force-ipv6-packet-forwarding enable
|
|
set detect-unknown-esp enable
|
|
set auxiliary-session disable
|
|
set asymroute disable
|
|
set asymroute-icmp disable
|
|
set tcp-session-without-syn disable
|
|
set ses-denied-traffic disable
|
|
set strict-src-check disable
|
|
set allow-linkdown-path disable
|
|
set asymroute6 disable
|
|
set asymroute6-icmp disable
|
|
set sctp-session-without-init disable
|
|
set sip-expectation enable
|
|
set sip-nat-trace enable
|
|
set h323-direct-model enable
|
|
set status enable
|
|
set sip-tcp-port 5060
|
|
set sip-udp-port 5060
|
|
set sip-ssl-port 5061
|
|
set sccp-port 2000
|
|
set multicast-forward enable
|
|
set multicast-ttl-notchange disable
|
|
set allow-subnet-overlap disable
|
|
set deny-tcp-with-icmp disable
|
|
set ecmp-max-paths 255
|
|
set discovered-device-timeout 28
|
|
set email-portal-check-dns enable
|
|
set default-voip-alg-mode proxy-based
|
|
set gui-proxy-inspection enable
|
|
set gui-icap disable
|
|
set gui-implicit-policy enable
|
|
set gui-dns-database disable
|
|
set gui-load-balance disable
|
|
set gui-multicast-policy disable
|
|
set gui-dos-policy enable
|
|
set gui-object-colors enable
|
|
set gui-voip-profile disable
|
|
set gui-ap-profile enable
|
|
set gui-security-profile-group disable
|
|
set gui-local-in-policy disable
|
|
set gui-wanopt-cache disable
|
|
set gui-explicit-proxy disable
|
|
set gui-dynamic-routing enable
|
|
set gui-sslvpn-personal-bookmarks disable
|
|
set gui-sslvpn-realms disable
|
|
set gui-policy-based-ipsec enable
|
|
set gui-threat-weight enable
|
|
set gui-spamfilter disable
|
|
set gui-file-filter enable
|
|
set gui-application-control enable
|
|
set gui-ips enable
|
|
set gui-dhcp-advanced enable
|
|
set gui-vpn enable
|
|
set gui-wireless-controller enable
|
|
set gui-advanced-wireless-features disable
|
|
set gui-switch-controller enable
|
|
set gui-fortiap-split-tunneling disable
|
|
set gui-webfilter-advanced disable
|
|
set gui-traffic-shaping enable
|
|
set gui-wan-load-balancing enable
|
|
set gui-antivirus enable
|
|
set gui-webfilter enable
|
|
set gui-videofilter enable
|
|
set gui-dnsfilter enable
|
|
set gui-waf-profile disable
|
|
set gui-dlp-profile disable
|
|
set gui-fortiextender-controller disable
|
|
set gui-advanced-policy disable
|
|
set gui-allow-unnamed-policy enable
|
|
set gui-email-collection disable
|
|
set gui-multiple-interface-policy enable
|
|
set gui-policy-disclaimer disable
|
|
set gui-ztna enable
|
|
set gui-ot disable
|
|
set location-id 0.0.0.0
|
|
set ike-session-resume disable
|
|
set ike-quick-crash-detect disable
|
|
set ike-dn-format with-space
|
|
set ike-port 500
|
|
set ike-policy-route disable
|
|
set block-land-attack disable
|
|
set application-bandwidth-tracking disable
|
|
set fqdn-session-check disable
|
|
set ext-resource-session-check disable
|
|
set dyn-addr-session-check disable
|
|
set default-policy-expiry-days 30
|
|
set gui-enforce-change-summary require
|
|
set internet-service-database-cache disable
|
|
end
|
|
config system sit-tunnel
|
|
end
|
|
config system arp-table
|
|
end
|
|
config system ipv6-neighbor-cache
|
|
end
|
|
config system replacemsg-group
|
|
edit "default"
|
|
set comment "Default replacement message group."
|
|
set group-type default
|
|
next
|
|
end
|
|
config system session-ttl
|
|
set default 3600
|
|
end
|
|
config system dhcp server
|
|
end
|
|
config system dhcp6 server
|
|
end
|
|
config system modem
|
|
set status disable
|
|
set pin-init ''
|
|
set network-init ''
|
|
set lockdown-lac ''
|
|
set mode standalone
|
|
set auto-dial disable
|
|
set dial-on-demand disable
|
|
set idle-timer 5
|
|
set redial none
|
|
set reset 0
|
|
set connect-timeout 90
|
|
set wireless-port 0
|
|
set dont-send-CR1 disable
|
|
set phone1 ''
|
|
set dial-cmd1 ''
|
|
set username1 ''
|
|
set passwd1 ENC 14oJpkyJeyzL0QdHhMjDZ+HUYRXqEQiLjtDnYrfImxePPYMzxGQlzEjKy6QOv/iUThvs7gYEwUXAKM1+ZlzcZ5MpVeIkN0OLOJdNkgvFqOM/z2zscc+CsOtsm+R/Fbe0j8XZSLo0riv7JobuD3VexzutnpE90cIWotcVFydt60EEPDDvWLgFeTOHz4dlRB3MR0szQA==
|
|
set extra-init1 ''
|
|
set peer-modem1 generic
|
|
set ppp-echo-request1 enable
|
|
set authtype1 pap chap mschap mschapv2
|
|
set dont-send-CR2 disable
|
|
set phone2 ''
|
|
set dial-cmd2 ''
|
|
set username2 ''
|
|
set passwd2 ENC knKNAE0Vm7sJey3LVODiHzjt4v35h9JIOrJT2sHb1XEayZb1Iof1q3IocvMEpbzL7KExuihx6XFtLG7bo1rwxW6oDRzWZTuF4XO2732MQLrK0WY/mL52SltiiRQkOwZVwpJDLV0G/IB4nvHzkirKP/WYGZh0lAZSBLHRrsbB9cPBhqtxiHW1N4j1y9fo5IDZs4L5Ng==
|
|
set extra-init2 ''
|
|
set peer-modem2 generic
|
|
set ppp-echo-request2 enable
|
|
set authtype2 pap chap mschap mschapv2
|
|
set dont-send-CR3 disable
|
|
set phone3 ''
|
|
set dial-cmd3 ''
|
|
set username3 ''
|
|
set passwd3 ENC nmoa2IVWT1+HRkuYYG822ELtEAYk0FR4ByGxqNv2AYqR8a5mrRW/i17ByhqW/T3QHnNdxukX400M5pb7/h47l38PaauR7Udj3P4XuMz6j4QPL2EGU58n23/wQWu1EmK8PKjIC3VblHmyBYuH2nBl0Mrzcaiork64V24NlIjfBDGreYZmyxSLkcLc1BeSMOlow2OseQ==
|
|
set extra-init3 ''
|
|
set peer-modem3 generic
|
|
set ppp-echo-request3 enable
|
|
set altmode enable
|
|
set authtype3 pap chap mschap mschapv2
|
|
set distance 1
|
|
set priority 0
|
|
end
|
|
config system 3g-modem custom
|
|
end
|
|
config system zone
|
|
end
|
|
config firewall address
|
|
edit "FABRIC_DEVICE"
|
|
set uuid 8256ab80-d1e2-51ef-c047-878643a948a1
|
|
set type ipmask
|
|
set comment "IPv4 addresses of Fabric Devices."
|
|
set associated-interface ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set subnet 0.0.0.0 0.0.0.0
|
|
next
|
|
edit "FIREWALL_AUTH_PORTAL_ADDRESS"
|
|
set uuid dc59d41c-de8e-51e7-8d09-f2ced71ca55e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 0.0.0.0 0.0.0.0
|
|
next
|
|
edit "SSLVPN_TUNNEL_ADDR1"
|
|
set uuid dc5a84fc-de8e-51e7-a6d5-dfb947d518eb
|
|
set type iprange
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set start-ip 10.212.134.200
|
|
set end-ip 10.212.134.210
|
|
next
|
|
edit "all"
|
|
set uuid dc89e580-de8e-51e7-cbe9-b3debf224f10
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 0.0.0.0 0.0.0.0
|
|
next
|
|
edit "none"
|
|
set uuid dc89efa8-de8e-51e7-a82d-b862a3fc5110
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 0.0.0.0 255.255.255.255
|
|
next
|
|
edit "login.microsoftonline.com"
|
|
set uuid 8a136ef8-d1e2-51ef-94dc-b6cecaa85afd
|
|
set type fqdn
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set fqdn "login.microsoftonline.com"
|
|
set cache-ttl 0
|
|
next
|
|
edit "login.microsoft.com"
|
|
set uuid 8a1371e6-d1e2-51ef-310b-6b93d7980e04
|
|
set type fqdn
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set fqdn "login.microsoft.com"
|
|
set cache-ttl 0
|
|
next
|
|
edit "login.windows.net"
|
|
set uuid 8a1374a2-d1e2-51ef-2f68-c5bc2234ed41
|
|
set type fqdn
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set fqdn "login.windows.net"
|
|
set cache-ttl 0
|
|
next
|
|
edit "gmail.com"
|
|
set uuid 8a137722-d1e2-51ef-7a73-7240b43a9382
|
|
set type fqdn
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set fqdn "gmail.com"
|
|
set cache-ttl 0
|
|
next
|
|
edit "wildcard.google.com"
|
|
set uuid 8a1379ac-d1e2-51ef-b0e6-464b811a4119
|
|
set type fqdn
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set fqdn "*.google.com"
|
|
set cache-ttl 0
|
|
next
|
|
edit "wildcard.dropbox.com"
|
|
set uuid 8a137c36-d1e2-51ef-2931-def6e935621e
|
|
set type fqdn
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set fqdn "*.dropbox.com"
|
|
set cache-ttl 0
|
|
next
|
|
edit "EMS_ALL_UNMANAGEABLE_CLIENTS"
|
|
set uuid 67840664-d1e6-51ef-e4bf-75152366d30b
|
|
set type dynamic
|
|
set sub-type ems-tag
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set obj-tag ''
|
|
set obj-type ip
|
|
set tag-detection-level ''
|
|
set tag-type ''
|
|
next
|
|
edit "EMS_ALL_UNKNOWN_CLIENTS"
|
|
set uuid 6784254a-d1e6-51ef-0abd-51d34c31195d
|
|
set type dynamic
|
|
set sub-type ems-tag
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set obj-tag ''
|
|
set obj-type ip
|
|
set tag-detection-level ''
|
|
set tag-type ''
|
|
next
|
|
edit "FCTEMS_ALL_FORTICLOUD_SERVERS"
|
|
set uuid e123e336-d1e6-51ef-13ba-1a032543ac50
|
|
set type dynamic
|
|
set sub-type ems-tag
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set obj-tag ''
|
|
set obj-type ip
|
|
set tag-detection-level ''
|
|
set tag-type ''
|
|
next
|
|
end
|
|
config firewall multicast-address
|
|
edit "all"
|
|
set type multicastrange
|
|
set start-ip 224.0.0.0
|
|
set end-ip 239.255.255.255
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
next
|
|
edit "all_hosts"
|
|
set type multicastrange
|
|
set start-ip 224.0.0.1
|
|
set end-ip 224.0.0.1
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
next
|
|
edit "all_routers"
|
|
set type multicastrange
|
|
set start-ip 224.0.0.2
|
|
set end-ip 224.0.0.2
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
next
|
|
edit "Bonjour"
|
|
set type multicastrange
|
|
set start-ip 224.0.0.251
|
|
set end-ip 224.0.0.251
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
next
|
|
edit "EIGRP"
|
|
set type multicastrange
|
|
set start-ip 224.0.0.10
|
|
set end-ip 224.0.0.10
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
next
|
|
edit "OSPF"
|
|
set type multicastrange
|
|
set start-ip 224.0.0.5
|
|
set end-ip 224.0.0.6
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
next
|
|
end
|
|
config firewall address6-template
|
|
end
|
|
config firewall address6
|
|
edit "SSLVPN_TUNNEL_IPv6_ADDR1"
|
|
set uuid dc5a881c-de8e-51e7-c134-810602989bab
|
|
set type ipprefix
|
|
set ip6 fdff:ffff::/120
|
|
set color 0
|
|
set comment ''
|
|
set fabric-object disable
|
|
next
|
|
edit "all"
|
|
set uuid dc8b03de-de8e-51e7-48ab-4f356ec87e15
|
|
set type ipprefix
|
|
set ip6 ::/0
|
|
set color 0
|
|
set comment ''
|
|
set fabric-object disable
|
|
next
|
|
edit "none"
|
|
set uuid dc8b0c08-de8e-51e7-eec6-587291a6174e
|
|
set type ipprefix
|
|
set ip6 ::/128
|
|
set color 0
|
|
set comment ''
|
|
set fabric-object disable
|
|
next
|
|
end
|
|
config firewall multicast-address6
|
|
edit "all"
|
|
set ip6 ff00::/8
|
|
set comment ''
|
|
set color 0
|
|
next
|
|
end
|
|
config system ipv6-tunnel
|
|
end
|
|
config firewall addrgrp
|
|
edit "Microsoft Office 365"
|
|
set type default
|
|
set category default
|
|
set uuid 8a137ee8-d1e2-51ef-2b75-b0d75e6caaf2
|
|
set member "login.microsoftonline.com" "login.microsoft.com" "login.windows.net"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "G Suite"
|
|
set type default
|
|
set category default
|
|
set uuid 8a13830c-d1e2-51ef-39eb-1fd8bd1d687b
|
|
set member "gmail.com" "wildcard.google.com"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
end
|
|
config firewall addrgrp6
|
|
end
|
|
config firewall wildcard-fqdn custom
|
|
edit "g-Adobe Login"
|
|
set uuid 45a1370a-5626-51eb-48d2-02f82ddf8bb4
|
|
set wildcard-fqdn "*.adobelogin.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-Gotomeeting"
|
|
set uuid 45a14286-5626-51eb-a3ba-d0d8dacc1a38
|
|
set wildcard-fqdn "*.gotomeeting.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-Windows update 2"
|
|
set uuid 45a14a10-5626-51eb-b443-017c85c812aa
|
|
set wildcard-fqdn "*.windowsupdate.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-adobe"
|
|
set uuid 45a1361a-5626-51eb-6736-aa8a00428ef9
|
|
set wildcard-fqdn "*.adobe.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-android"
|
|
set uuid 45a137dc-5626-51eb-cf37-a4b5e8b1cee0
|
|
set wildcard-fqdn "*.android.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-apple"
|
|
set uuid 45a138a4-5626-51eb-9605-a30d9276dc87
|
|
set wildcard-fqdn "*.apple.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-appstore"
|
|
set uuid 45a1396c-5626-51eb-a324-5453959153d7
|
|
set wildcard-fqdn "*.appstore.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-auth.gfx.ms"
|
|
set uuid 45a13a52-5626-51eb-fd10-4326504354ff
|
|
set wildcard-fqdn "*.auth.gfx.ms"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-autoupdate.opera.com"
|
|
set uuid 45a14e5c-5626-51eb-f8ac-5ee802453388
|
|
set wildcard-fqdn "*autoupdate.opera.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-cdn-apple"
|
|
set uuid b56aac36-d1e4-51ef-eff4-b8a920746d4f
|
|
set wildcard-fqdn "*.cdn-apple.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-citrix"
|
|
set uuid 45a13b1a-5626-51eb-6ab8-28a0f6b48412
|
|
set wildcard-fqdn "*.citrixonline.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-dropbox.com"
|
|
set uuid 45a13bec-5626-51eb-7584-7bd101c811cf
|
|
set wildcard-fqdn "*.dropbox.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-eease"
|
|
set uuid 45a13cb4-5626-51eb-953a-f9abede8bf24
|
|
set wildcard-fqdn "*.eease.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-firefox update server"
|
|
set uuid 45a13d86-5626-51eb-448c-d907ac122bf1
|
|
set wildcard-fqdn "aus*.mozilla.org"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-fortinet"
|
|
set uuid 45a13e4e-5626-51eb-0fd5-bf5be8c7ba63
|
|
set wildcard-fqdn "*.fortinet.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-google-drive"
|
|
set uuid 45a14006-5626-51eb-3060-78f71fe5e882
|
|
set wildcard-fqdn "*drive.google.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-google-play"
|
|
set uuid 45a14bb4-5626-51eb-dfae-8e0e0083e420
|
|
set wildcard-fqdn "*play.google.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-google-play2"
|
|
set uuid 45a140d8-5626-51eb-91dc-4c06db505e61
|
|
set wildcard-fqdn "*.ggpht.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-google-play3"
|
|
set uuid 45a141aa-5626-51eb-1c05-445beb99a892
|
|
set wildcard-fqdn "*.books.google.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-googleapis.com"
|
|
set uuid 45a13f34-5626-51eb-3659-1ea74e2ed87a
|
|
set wildcard-fqdn "*.googleapis.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-icloud"
|
|
set uuid 45a144de-5626-51eb-db4c-4f034a7bd727
|
|
set wildcard-fqdn "*.icloud.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-itunes"
|
|
set uuid 45a145d8-5626-51eb-6c3e-f5b30ff1682b
|
|
set wildcard-fqdn "*itunes.apple.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-live.com"
|
|
set uuid 45a14ae2-5626-51eb-f528-341943507dd9
|
|
set wildcard-fqdn "*.live.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-microsoft"
|
|
set uuid 45a146be-5626-51eb-d120-df8cf68e1e8e
|
|
set wildcard-fqdn "*.microsoft.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-mzstatic-apple"
|
|
set uuid b56aad4e-d1e4-51ef-7eca-79d68c7b28d8
|
|
set wildcard-fqdn "*.mzstatic.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-skype"
|
|
set uuid 45a14790-5626-51eb-d759-0b0d0cba8267
|
|
set wildcard-fqdn "*.messenger.live.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-softwareupdate.vmware.com"
|
|
set uuid 45a14862-5626-51eb-d564-48386edea9f7
|
|
set wildcard-fqdn "*.softwareupdate.vmware.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-swscan.apple.com"
|
|
set uuid 45a14d8a-5626-51eb-723e-8c6e26b98fb0
|
|
set wildcard-fqdn "*swscan.apple.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-update.microsoft.com"
|
|
set uuid 45a14c90-5626-51eb-cf31-6d26a1ee4593
|
|
set wildcard-fqdn "*update.microsoft.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-verisign"
|
|
set uuid 45a1493e-5626-51eb-b831-9457577c78c2
|
|
set wildcard-fqdn "*.verisign.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
end
|
|
config firewall wildcard-fqdn group
|
|
end
|
|
config firewall traffic-class
|
|
end
|
|
config firewall service category
|
|
edit "General"
|
|
set comment "General services."
|
|
set fabric-object disable
|
|
next
|
|
edit "Web Access"
|
|
set comment "Web access."
|
|
set fabric-object disable
|
|
next
|
|
edit "File Access"
|
|
set comment "File access."
|
|
set fabric-object disable
|
|
next
|
|
edit "Email"
|
|
set comment "Email services."
|
|
set fabric-object disable
|
|
next
|
|
edit "Network Services"
|
|
set comment "Network services."
|
|
set fabric-object disable
|
|
next
|
|
edit "Authentication"
|
|
set comment "Authentication service."
|
|
set fabric-object disable
|
|
next
|
|
edit "Remote Access"
|
|
set comment "Remote access."
|
|
set fabric-object disable
|
|
next
|
|
edit "Tunneling"
|
|
set comment "Tunneling service."
|
|
set fabric-object disable
|
|
next
|
|
edit "VoIP, Messaging & Other Applications"
|
|
set comment "VoIP, messaging, and other applications."
|
|
set fabric-object disable
|
|
next
|
|
edit "Web Proxy"
|
|
set comment "Explicit web proxy."
|
|
set fabric-object disable
|
|
next
|
|
end
|
|
config firewall service custom
|
|
edit "DNS"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 53
|
|
set udp-portrange 53
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "HTTP"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 80
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "HTTPS"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 443
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "IMAP"
|
|
set proxy disable
|
|
set category "Email"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 143
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "IMAPS"
|
|
set proxy disable
|
|
set category "Email"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 993
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "LDAP"
|
|
set proxy disable
|
|
set category "Authentication"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 389
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "DCE-RPC"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 135
|
|
set udp-portrange 135
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "POP3"
|
|
set proxy disable
|
|
set category "Email"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 110
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "POP3S"
|
|
set proxy disable
|
|
set category "Email"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 995
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SAMBA"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 139
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SMTP"
|
|
set proxy disable
|
|
set category "Email"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 25
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SMTPS"
|
|
set proxy disable
|
|
set category "Email"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 465
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "KERBEROS"
|
|
set proxy disable
|
|
set category "Authentication"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 88 464
|
|
set udp-portrange 88 464
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "LDAP_UDP"
|
|
set proxy disable
|
|
set category "Authentication"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 389
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SMB"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 445
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "FTP"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 21
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "FTP_GET"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 21
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "FTP_PUT"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 21
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "ALL"
|
|
set proxy disable
|
|
set category "General"
|
|
set protocol IP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set protocol-number 0
|
|
next
|
|
edit "ALL_TCP"
|
|
set proxy disable
|
|
set category "General"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1-65535
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "ALL_UDP"
|
|
set proxy disable
|
|
set category "General"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 1-65535
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "ALL_ICMP"
|
|
set proxy disable
|
|
set category "General"
|
|
set protocol ICMP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
unset icmptype
|
|
next
|
|
edit "ALL_ICMP6"
|
|
set proxy disable
|
|
set category "General"
|
|
set protocol ICMP6
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
unset icmptype
|
|
next
|
|
edit "GRE"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol IP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set protocol-number 47
|
|
next
|
|
edit "AH"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol IP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set protocol-number 51
|
|
next
|
|
edit "ESP"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol IP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set protocol-number 50
|
|
next
|
|
edit "AOL"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 5190-5194
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "BGP"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 179
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "DHCP"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 67-68
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "FINGER"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 79
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "GOPHER"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 70
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "H323"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1720 1503
|
|
set udp-portrange 1719
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "IKE"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 500 4500
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Internet-Locator-Service"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 389
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "IRC"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 6660-6669
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "L2TP"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1701
|
|
set udp-portrange 1701
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "NetMeeting"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1720
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "NFS"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 111 2049
|
|
set udp-portrange 111 2049
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "NNTP"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 119
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "NTP"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 123
|
|
set udp-portrange 123
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "OSPF"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol IP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set protocol-number 89
|
|
next
|
|
edit "PC-Anywhere"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 5631
|
|
set udp-portrange 5632
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "PING"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol ICMP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set icmptype 8
|
|
unset icmpcode
|
|
next
|
|
edit "TIMESTAMP"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol ICMP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set icmptype 13
|
|
unset icmpcode
|
|
next
|
|
edit "INFO_REQUEST"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol ICMP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set icmptype 15
|
|
unset icmpcode
|
|
next
|
|
edit "INFO_ADDRESS"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol ICMP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set icmptype 17
|
|
unset icmpcode
|
|
next
|
|
edit "ONC-RPC"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 111
|
|
set udp-portrange 111
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "PPTP"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1723
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "QUAKE"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 26000 27000 27910 27960
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RAUDIO"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 7070
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "REXEC"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 512
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RIP"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 520
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RLOGIN"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 513:512-1023
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RSH"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 514:512-1023
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SCCP"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 2000
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SIP"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 5060
|
|
set udp-portrange 5060
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SIP-MSNmessenger"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1863
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SNMP"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 161-162
|
|
set udp-portrange 161-162
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SSH"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 22
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SYSLOG"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 514
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "TALK"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 517-518
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "TELNET"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 23
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "TFTP"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 69
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "MGCP"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 2427 2727
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "UUCP"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 540
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "VDOLIVE"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 7000-7010
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "WAIS"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 210
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "WINFRAME"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1494 2598
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "X-WINDOWS"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 6000-6063
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "PING6"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol ICMP6
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set icmptype 128
|
|
unset icmpcode
|
|
next
|
|
edit "MS-SQL"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1433 1434
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "MYSQL"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 3306
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RDP"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 3389
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "VNC"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 5900
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "DHCP6"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 546 547
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SQUID"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 3128
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SOCKS"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1080
|
|
set udp-portrange 1080
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "WINS"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1512
|
|
set udp-portrange 1512
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RADIUS"
|
|
set proxy disable
|
|
set category "Authentication"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 1812 1813
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RADIUS-OLD"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 1645 1646
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "CVSPSERVER"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 2401
|
|
set udp-portrange 2401
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "AFS3"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 7000-7009
|
|
set udp-portrange 7000-7009
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "TRACEROUTE"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 33434-33535
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RTSP"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 554 7070 8554
|
|
set udp-portrange 554
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "MMS"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1755
|
|
set udp-portrange 1024-5000
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "NONE"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 0
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "webproxy"
|
|
set proxy enable
|
|
set category "Web Proxy"
|
|
set protocol ALL
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set app-service-type disable
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 0-65535:0-65535
|
|
next
|
|
end
|
|
config firewall service group
|
|
edit "Email Access"
|
|
set proxy disable
|
|
set member "DNS" "IMAP" "IMAPS" "POP3" "POP3S" "SMTP" "SMTPS"
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Web Access"
|
|
set proxy disable
|
|
set member "DNS" "HTTP" "HTTPS"
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Windows AD"
|
|
set proxy disable
|
|
set member "DCE-RPC" "DNS" "KERBEROS" "LDAP" "LDAP_UDP" "SAMBA" "SMB"
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Exchange Server"
|
|
set proxy disable
|
|
set member "DCE-RPC" "DNS" "HTTPS"
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
end
|
|
config firewall internet-service-group
|
|
end
|
|
config firewall internet-service-extension
|
|
end
|
|
config firewall internet-service-custom
|
|
end
|
|
config firewall internet-service-custom-group
|
|
end
|
|
config firewall network-service-dynamic
|
|
end
|
|
config system external-resource
|
|
end
|
|
config vpn certificate ca
|
|
end
|
|
config vpn certificate remote
|
|
end
|
|
config vpn certificate local
|
|
edit "Fortinet_CA_SSL"
|
|
set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_CA_Untrusted"
|
|
set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_GUI_Server"
|
|
set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_RSA1024"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_RSA2048"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_RSA4096"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_DSA1024"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_DSA2048"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_ECDSA256"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_ECDSA384"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_ECDSA521"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_ED25519"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_ED448"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "fw-brilliant2"
|
|
set comments ''
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source user
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "brilliant com bd certificate"
|
|
set comments ''
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source user
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
end
|
|
config vpn certificate crl
|
|
end
|
|
config vpn certificate ocsp-server
|
|
end
|
|
config vpn certificate setting
|
|
set ocsp-status disable
|
|
set ocsp-option server
|
|
set proxy ''
|
|
set source-ip ''
|
|
set ocsp-default-server ''
|
|
set interface-select-method auto
|
|
set check-ca-cert enable
|
|
set check-ca-chain disable
|
|
set subject-match substring
|
|
set subject-set subset
|
|
set cn-match substring
|
|
set cn-allow-multi enable
|
|
config crl-verification
|
|
set expiry ignore
|
|
set leaf-crl-absence ignore
|
|
set chain-crl-absence ignore
|
|
end
|
|
set strict-ocsp-check disable
|
|
set ssl-min-proto-version default
|
|
set cmp-save-extra-certs disable
|
|
set cmp-key-usage-checking enable
|
|
set cert-expire-warning 14
|
|
set certname-rsa1024 "Fortinet_SSL_RSA1024"
|
|
set certname-rsa2048 "Fortinet_SSL_RSA2048"
|
|
set certname-rsa4096 "Fortinet_SSL_RSA4096"
|
|
set certname-dsa1024 "Fortinet_SSL_DSA1024"
|
|
set certname-dsa2048 "Fortinet_SSL_DSA2048"
|
|
set certname-ecdsa256 "Fortinet_SSL_ECDSA256"
|
|
set certname-ecdsa384 "Fortinet_SSL_ECDSA384"
|
|
set certname-ecdsa521 "Fortinet_SSL_ECDSA521"
|
|
set certname-ed25519 "Fortinet_SSL_ED25519"
|
|
set certname-ed448 "Fortinet_SSL_ED448"
|
|
end
|
|
config webfilter ftgd-local-cat
|
|
edit "custom1"
|
|
set status enable
|
|
set id 140
|
|
next
|
|
edit "custom2"
|
|
set status enable
|
|
set id 141
|
|
next
|
|
end
|
|
config ips sensor
|
|
edit "g-default"
|
|
set comment "Prevent critical attacks."
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location all
|
|
set severity medium high critical
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Monitor IPS attacks."
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location all
|
|
set severity medium high critical
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
edit "g-wifi-default"
|
|
set comment "Default configuration for offloading WiFi traffic."
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location all
|
|
set severity medium high critical
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
edit "all_default"
|
|
set comment "All predefined signatures with default setting."
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location all
|
|
set severity all
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
edit "all_default_pass"
|
|
set comment "All predefined signatures with PASS action."
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location all
|
|
set severity all
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action pass
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
edit "high_security"
|
|
set comment "Blocks all Critical/High/Medium and some Low severity vulnerabilities"
|
|
set replacemsg-group ''
|
|
set block-malicious-url enable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location all
|
|
set severity medium high critical
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set quarantine none
|
|
next
|
|
edit 2
|
|
set location all
|
|
set severity low
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
edit "protect_client"
|
|
set comment "Protect against client-side vulnerabilities."
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location client
|
|
set severity all
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
edit "protect_email_server"
|
|
set comment "Protect against email server-side vulnerabilities."
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location server
|
|
set severity all
|
|
set protocol SMTP POP3 IMAP
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
edit "protect_http_server"
|
|
set comment "Protect against HTTP server-side vulnerabilities."
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location server
|
|
set severity all
|
|
set protocol HTTP
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
edit "sniffer-profile"
|
|
set comment "Monitor IPS attacks."
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location all
|
|
set severity high critical
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config sctp-filter profile
|
|
end
|
|
config firewall shaper traffic-shaper
|
|
edit "high-priority"
|
|
set guaranteed-bandwidth 0
|
|
set maximum-bandwidth 1048576
|
|
set bandwidth-unit kbps
|
|
set priority high
|
|
set per-policy enable
|
|
set diffserv disable
|
|
set overhead 0
|
|
next
|
|
edit "medium-priority"
|
|
set guaranteed-bandwidth 0
|
|
set maximum-bandwidth 1048576
|
|
set bandwidth-unit kbps
|
|
set priority medium
|
|
set per-policy enable
|
|
set diffserv disable
|
|
set overhead 0
|
|
next
|
|
edit "low-priority"
|
|
set guaranteed-bandwidth 0
|
|
set maximum-bandwidth 1048576
|
|
set bandwidth-unit kbps
|
|
set priority low
|
|
set per-policy enable
|
|
set diffserv disable
|
|
set overhead 0
|
|
next
|
|
edit "guarantee-100kbps"
|
|
set guaranteed-bandwidth 100
|
|
set maximum-bandwidth 1048576
|
|
set bandwidth-unit kbps
|
|
set priority high
|
|
set per-policy enable
|
|
set diffserv disable
|
|
set overhead 0
|
|
next
|
|
edit "shared-1M-pipe"
|
|
set guaranteed-bandwidth 0
|
|
set maximum-bandwidth 1024
|
|
set bandwidth-unit kbps
|
|
set priority high
|
|
set per-policy disable
|
|
set diffserv disable
|
|
set overhead 0
|
|
next
|
|
end
|
|
config firewall shaper per-ip-shaper
|
|
end
|
|
config firewall proxy-address
|
|
edit "IPv4-address"
|
|
set uuid 49887140-d1e6-51ef-5856-63818daf1ad5
|
|
set type host-regex
|
|
set host-regex "^([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}$"
|
|
set referrer disable
|
|
set case-sensitivity disable
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "IPv6-address"
|
|
set uuid 49887352-d1e6-51ef-9d9a-a89e7a277625
|
|
set type host-regex
|
|
set host-regex "^\\[(([0-9a-f]{0,4}:){1,7}[0-9a-f]{1,4})\\]$"
|
|
set referrer disable
|
|
set case-sensitivity disable
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
end
|
|
config firewall proxy-addrgrp
|
|
end
|
|
config web-proxy profile
|
|
end
|
|
config web-proxy global
|
|
set ssl-cert "Fortinet_Factory"
|
|
set ssl-ca-cert "Fortinet_CA_SSL"
|
|
set fast-policy-match enable
|
|
set ldap-user-cache disable
|
|
set proxy-fqdn "default.fqdn"
|
|
set max-request-length 8
|
|
set max-message-length 32
|
|
set strict-web-check disable
|
|
set forward-proxy-auth disable
|
|
set forward-server-affinity-timeout 30
|
|
set max-waf-body-cache-length 1
|
|
set webproxy-profile ''
|
|
set learn-client-ip disable
|
|
set policy-category-deep-inspect enable
|
|
set log-policy-pending disable
|
|
end
|
|
config web-proxy explicit
|
|
set status disable
|
|
set http-connection-mode static
|
|
set ipv6-status disable
|
|
set strict-guest disable
|
|
set https-replacement-message enable
|
|
set ssl-algorithm low
|
|
end
|
|
config web-proxy forward-server
|
|
end
|
|
config web-proxy forward-server-group
|
|
end
|
|
config web-proxy debug-url
|
|
end
|
|
config web-proxy wisp
|
|
end
|
|
config wanopt webcache
|
|
set max-object-size 512000
|
|
set neg-resp-time 0
|
|
set fresh-factor 100
|
|
set max-ttl 7200
|
|
set min-ttl 5
|
|
set default-ttl 1440
|
|
set ignore-ims disable
|
|
set ignore-conditional disable
|
|
set ignore-pnc disable
|
|
set ignore-ie-reload enable
|
|
set cache-expired disable
|
|
set cache-cookie disable
|
|
set reval-pnc disable
|
|
set always-revalidate disable
|
|
set cache-by-default disable
|
|
set host-validate disable
|
|
set external disable
|
|
end
|
|
config ftp-proxy explicit
|
|
set status disable
|
|
set ssl disable
|
|
end
|
|
config web-proxy url-match
|
|
end
|
|
config application custom
|
|
end
|
|
config application list
|
|
edit "g-default"
|
|
set comment "Monitor all applications."
|
|
set replacemsg-group ''
|
|
set extended-log disable
|
|
set other-application-action pass
|
|
set app-replacemsg enable
|
|
set other-application-log disable
|
|
set enforce-default-app-port disable
|
|
set force-inclusion-ssl-di-sigs disable
|
|
set unknown-application-action pass
|
|
set unknown-application-log disable
|
|
unset p2p-block-list
|
|
set deep-app-inspection enable
|
|
set options allow-dns
|
|
config entries
|
|
edit 1
|
|
set application 50413
|
|
set action block
|
|
set log enable
|
|
set log-packet disable
|
|
set rate-count 0
|
|
set session-ttl 0
|
|
set quarantine none
|
|
next
|
|
edit 2
|
|
set protocols all
|
|
set vendor all
|
|
set technology all
|
|
set behavior all
|
|
set popularity 1 2 3 4 5
|
|
set action pass
|
|
set log enable
|
|
set log-packet disable
|
|
set session-ttl 0
|
|
set shaper ''
|
|
set shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
set quarantine none
|
|
next
|
|
end
|
|
set control-default-network-services disable
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Monitor all applications."
|
|
set replacemsg-group ''
|
|
set extended-log disable
|
|
set other-application-action pass
|
|
set app-replacemsg enable
|
|
set other-application-log disable
|
|
set enforce-default-app-port disable
|
|
set force-inclusion-ssl-di-sigs disable
|
|
set unknown-application-action pass
|
|
set unknown-application-log disable
|
|
unset p2p-block-list
|
|
set deep-app-inspection enable
|
|
unset options
|
|
config entries
|
|
edit 1
|
|
set protocols all
|
|
set vendor all
|
|
set technology all
|
|
set behavior all
|
|
set popularity 1 2 3 4 5
|
|
set action pass
|
|
set log enable
|
|
set log-packet disable
|
|
set session-ttl 0
|
|
set shaper ''
|
|
set shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
set quarantine none
|
|
next
|
|
end
|
|
set control-default-network-services disable
|
|
next
|
|
edit "g-wifi-default"
|
|
set comment "Default configuration for offloading WiFi traffic."
|
|
set replacemsg-group ''
|
|
set extended-log disable
|
|
set other-application-action pass
|
|
set app-replacemsg enable
|
|
set other-application-log disable
|
|
set enforce-default-app-port disable
|
|
set force-inclusion-ssl-di-sigs disable
|
|
set unknown-application-action pass
|
|
set unknown-application-log disable
|
|
unset p2p-block-list
|
|
set deep-app-inspection disable
|
|
set options allow-dns
|
|
config entries
|
|
edit 1
|
|
set protocols all
|
|
set vendor all
|
|
set technology all
|
|
set behavior all
|
|
set popularity 1 2 3 4 5
|
|
set action pass
|
|
set log disable
|
|
set log-packet disable
|
|
set session-ttl 0
|
|
set shaper ''
|
|
set shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
set quarantine none
|
|
next
|
|
end
|
|
set control-default-network-services disable
|
|
next
|
|
edit "block-high-risk"
|
|
set comment ''
|
|
set replacemsg-group ''
|
|
set extended-log disable
|
|
set other-application-action pass
|
|
set app-replacemsg enable
|
|
set other-application-log disable
|
|
set enforce-default-app-port disable
|
|
set force-inclusion-ssl-di-sigs disable
|
|
set unknown-application-action pass
|
|
set unknown-application-log disable
|
|
unset p2p-block-list
|
|
set deep-app-inspection enable
|
|
set options allow-dns
|
|
config entries
|
|
edit 1
|
|
set category 2 6
|
|
set protocols all
|
|
set vendor all
|
|
set technology all
|
|
set behavior all
|
|
set popularity 1 2 3 4 5
|
|
set action block
|
|
set log enable
|
|
set log-packet disable
|
|
set session-ttl 0
|
|
set quarantine none
|
|
next
|
|
edit 2
|
|
set protocols all
|
|
set vendor all
|
|
set technology all
|
|
set behavior all
|
|
set popularity 1 2 3 4 5
|
|
set action pass
|
|
set log enable
|
|
set log-packet disable
|
|
set session-ttl 0
|
|
set shaper ''
|
|
set shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
set quarantine none
|
|
next
|
|
end
|
|
set control-default-network-services disable
|
|
next
|
|
end
|
|
config application group
|
|
end
|
|
config dlp data-type
|
|
edit "g-credit-card"
|
|
set pattern "\\b([2-6]{1}\\d{3})[- ]?(\\d{4})[- ]?(\\d{2})[- ]?(\\d{2})[- ]?(\\d{2,4})\\b"
|
|
set verify "built-in"
|
|
set look-back 20
|
|
set look-ahead 1
|
|
set transform "\\b\\1[- ]?\\2[- ]?\\3[- ]?\\4[- ]?\\5\\b"
|
|
set verify-transformed-pattern disable
|
|
set comment ''
|
|
next
|
|
edit "g-hex"
|
|
set pattern "built-in"
|
|
set verify ''
|
|
set transform ''
|
|
set comment ''
|
|
next
|
|
edit "g-keyword"
|
|
set pattern "built-in"
|
|
set verify ''
|
|
set transform ''
|
|
set comment ''
|
|
next
|
|
edit "g-mip-label"
|
|
set pattern "^[[:xdigit:]]{8}-[[:xdigit:]]{4}-[[:xdigit:]]{4}-[[:xdigit:]]{4}-[[:xdigit:]]{12}$"
|
|
set verify ''
|
|
set transform "built-in"
|
|
set comment ''
|
|
next
|
|
edit "g-regex"
|
|
set pattern "built-in"
|
|
set verify ''
|
|
set transform ''
|
|
set comment ''
|
|
next
|
|
edit "g-ssn-us"
|
|
set pattern "\\b(\\d{3})-(\\d{2})-(\\d{4})\\b"
|
|
set verify "(?<!-)\\b(?!666|000|9\\d{2})\\d{3}-(?!00)\\d{2}-(?!0{4})\\d{4}\\b(?!-)"
|
|
set look-back 12
|
|
set look-ahead 1
|
|
set transform "\\b\\1-\\2-\\3\\b"
|
|
set verify-transformed-pattern disable
|
|
set comment ''
|
|
next
|
|
end
|
|
config dlp dictionary
|
|
edit "SSN-Sensor-r1d"
|
|
set uuid 53645ff8-d1e6-51ef-3a39-2667eb876a26
|
|
set match-type match-any
|
|
set comment ''
|
|
config entries
|
|
edit 1
|
|
set type "g-regex"
|
|
set pattern "WebEx"
|
|
set repeat disable
|
|
set status enable
|
|
set comment ''
|
|
next
|
|
end
|
|
next
|
|
edit "def-cc-dict"
|
|
set uuid 536439b0-d1e6-51ef-583e-2a2efaab2c52
|
|
set match-type match-any
|
|
set comment ''
|
|
config entries
|
|
edit 1
|
|
set type "g-credit-card"
|
|
set pattern ''
|
|
set repeat disable
|
|
set status enable
|
|
set comment ''
|
|
next
|
|
end
|
|
next
|
|
edit "def-ssn-dict"
|
|
set uuid 53649c98-d1e6-51ef-a1d1-fd764c018283
|
|
set match-type match-any
|
|
set comment ''
|
|
config entries
|
|
edit 1
|
|
set type "g-ssn-us"
|
|
set pattern ''
|
|
set repeat disable
|
|
set status enable
|
|
set comment ''
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config dlp sensor
|
|
edit "SSN-Sensor-r1s"
|
|
set match-type match-any
|
|
set comment ''
|
|
config entries
|
|
edit 1
|
|
set dictionary "SSN-Sensor-r1d"
|
|
set count 1
|
|
set status enable
|
|
next
|
|
end
|
|
next
|
|
edit "def-cc-sensor"
|
|
set match-type match-any
|
|
set comment ''
|
|
config entries
|
|
edit 1
|
|
set dictionary "def-cc-dict"
|
|
set count 1
|
|
set status enable
|
|
next
|
|
end
|
|
next
|
|
edit "def-ssn-sensor"
|
|
set match-type match-any
|
|
set comment ''
|
|
config entries
|
|
edit 1
|
|
set dictionary "def-ssn-dict"
|
|
set count 1
|
|
set status enable
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config dlp filepattern
|
|
edit 1
|
|
set name "builtin-patterns"
|
|
set comment ''
|
|
config entries
|
|
edit "*.bat"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.com"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.dll"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.doc"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.exe"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.gz"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.hta"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.ppt"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.rar"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.scr"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.tar"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.tgz"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.vb?"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.wps"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.xl?"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.zip"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.pif"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.cpl"
|
|
set filter-type pattern
|
|
next
|
|
end
|
|
next
|
|
edit 2
|
|
set name "all_executables"
|
|
set comment ''
|
|
config entries
|
|
edit "bat"
|
|
set filter-type type
|
|
set file-type bat
|
|
next
|
|
edit "exe"
|
|
set filter-type type
|
|
set file-type exe
|
|
next
|
|
edit "elf"
|
|
set filter-type type
|
|
set file-type elf
|
|
next
|
|
edit "hta"
|
|
set filter-type type
|
|
set file-type hta
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config dlp sensitivity
|
|
edit "Private"
|
|
next
|
|
edit "Critical"
|
|
next
|
|
edit "Warning"
|
|
next
|
|
end
|
|
config dlp fp-doc-source
|
|
end
|
|
config dlp profile
|
|
edit "g-default"
|
|
set comment "Default profile."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set dlp-log enable
|
|
set extended-log disable
|
|
set nac-quar-log disable
|
|
unset full-archive-proto
|
|
unset summary-proto
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Log a summary of email and web traffic."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set dlp-log enable
|
|
set extended-log disable
|
|
set nac-quar-log disable
|
|
unset full-archive-proto
|
|
set summary-proto smtp pop3 imap http-get http-post
|
|
next
|
|
edit "Content_Archive"
|
|
set comment ''
|
|
set feature-set proxy
|
|
set replacemsg-group ''
|
|
set dlp-log enable
|
|
set extended-log disable
|
|
set nac-quar-log disable
|
|
set full-archive-proto smtp pop3 imap http-get http-post ftp nntp mapi
|
|
set summary-proto smtp pop3 imap http-get http-post ftp nntp mapi
|
|
next
|
|
edit "Content_Summary"
|
|
set comment ''
|
|
set feature-set proxy
|
|
set replacemsg-group ''
|
|
set dlp-log enable
|
|
set extended-log disable
|
|
set nac-quar-log disable
|
|
unset full-archive-proto
|
|
set summary-proto smtp pop3 imap http-get http-post ftp nntp mapi
|
|
next
|
|
edit "Credit-Card"
|
|
set comment ''
|
|
set feature-set proxy
|
|
set replacemsg-group ''
|
|
config rule
|
|
edit 1
|
|
set name "Credit-Card-Filter"
|
|
set severity high
|
|
set type file
|
|
set proto smtp pop3 imap http-get http-post mapi
|
|
set filter-by sensor
|
|
set file-size 0
|
|
unset file-type
|
|
set sensor "def-cc-sensor"
|
|
set archive disable
|
|
set action log-only
|
|
next
|
|
edit 2
|
|
set name "Credit-Card-Filter"
|
|
set severity high
|
|
set type message
|
|
set proto smtp pop3 imap http-post mapi
|
|
set filter-by sensor
|
|
set sensor "def-cc-sensor"
|
|
set archive disable
|
|
set action log-only
|
|
next
|
|
end
|
|
set dlp-log enable
|
|
set extended-log disable
|
|
set nac-quar-log disable
|
|
unset full-archive-proto
|
|
unset summary-proto
|
|
next
|
|
edit "Large-File"
|
|
set comment ''
|
|
set feature-set proxy
|
|
set replacemsg-group ''
|
|
config rule
|
|
edit 1
|
|
set name "Large-File-Filter"
|
|
set severity medium
|
|
set type file
|
|
set proto smtp pop3 imap http-get http-post mapi
|
|
set filter-by none
|
|
set file-size 5120
|
|
unset file-type
|
|
set archive disable
|
|
set action log-only
|
|
next
|
|
end
|
|
set dlp-log enable
|
|
set extended-log disable
|
|
set nac-quar-log disable
|
|
unset full-archive-proto
|
|
unset summary-proto
|
|
next
|
|
edit "SSN-Sensor"
|
|
set comment "Match SSN numbers but NOT WebEx invite emails."
|
|
set feature-set proxy
|
|
set replacemsg-group ''
|
|
config rule
|
|
edit 1
|
|
set name "SSN-Sensor-Filter"
|
|
set severity high
|
|
set type message
|
|
set proto smtp pop3 imap mapi
|
|
set filter-by sensor
|
|
set sensor "SSN-Sensor-r1s"
|
|
set archive disable
|
|
set action allow
|
|
next
|
|
edit 2
|
|
set name "SSN-Sensor-Filter"
|
|
set severity high
|
|
set type message
|
|
set proto smtp pop3 imap mapi
|
|
set filter-by sensor
|
|
set sensor "def-ssn-sensor"
|
|
set archive disable
|
|
set action log-only
|
|
next
|
|
edit 3
|
|
set name "SSN-Sensor-Filter"
|
|
set severity high
|
|
set type file
|
|
set proto smtp pop3 imap http-get http-post ftp mapi
|
|
set filter-by sensor
|
|
set file-size 0
|
|
unset file-type
|
|
set sensor "def-ssn-sensor"
|
|
set archive disable
|
|
set action log-only
|
|
next
|
|
end
|
|
set dlp-log enable
|
|
set extended-log disable
|
|
set nac-quar-log disable
|
|
unset full-archive-proto
|
|
unset summary-proto
|
|
next
|
|
end
|
|
config webfilter content
|
|
end
|
|
config webfilter content-header
|
|
end
|
|
config webfilter urlfilter
|
|
end
|
|
config videofilter youtube-key
|
|
end
|
|
config videofilter youtube-channel-filter
|
|
end
|
|
config videofilter profile
|
|
end
|
|
config webfilter ips-urlfilter-setting
|
|
set device ''
|
|
set distance 1
|
|
set gateway 0.0.0.0
|
|
set geo-filter ''
|
|
end
|
|
config webfilter ips-urlfilter-setting6
|
|
set device ''
|
|
set distance 1
|
|
set gateway6 ::
|
|
set geo-filter ''
|
|
end
|
|
config emailfilter bword
|
|
end
|
|
config emailfilter block-allow-list
|
|
end
|
|
config emailfilter mheader
|
|
end
|
|
config emailfilter dnsbl
|
|
end
|
|
config emailfilter iptrust
|
|
end
|
|
config log threat-weight
|
|
set status enable
|
|
config level
|
|
set low 5
|
|
set medium 10
|
|
set high 30
|
|
set critical 50
|
|
end
|
|
set blocked-connection high
|
|
set failed-connection low
|
|
set url-block-detected high
|
|
set botnet-connection-detected critical
|
|
config malware
|
|
set virus-infected critical
|
|
set fortindr critical
|
|
set fortisandbox critical
|
|
set file-blocked low
|
|
set command-blocked disable
|
|
set oversized disable
|
|
set virus-scan-error high
|
|
set switch-proto disable
|
|
set mimefragmented disable
|
|
set virus-file-type-executable medium
|
|
set virus-outbreak-prevention critical
|
|
set content-disarm medium
|
|
set malware-list medium
|
|
set ems-threat-feed medium
|
|
set fsa-malicious critical
|
|
set fsa-high-risk high
|
|
set fsa-medium-risk medium
|
|
end
|
|
config ips
|
|
set info-severity disable
|
|
set low-severity low
|
|
set medium-severity medium
|
|
set high-severity high
|
|
set critical-severity critical
|
|
end
|
|
config web
|
|
edit 1
|
|
set category 26
|
|
set level high
|
|
next
|
|
edit 2
|
|
set category 61
|
|
set level high
|
|
next
|
|
edit 3
|
|
set category 86
|
|
set level high
|
|
next
|
|
edit 4
|
|
set category 1
|
|
set level medium
|
|
next
|
|
edit 5
|
|
set category 3
|
|
set level medium
|
|
next
|
|
edit 6
|
|
set category 4
|
|
set level medium
|
|
next
|
|
edit 7
|
|
set category 5
|
|
set level medium
|
|
next
|
|
edit 8
|
|
set category 6
|
|
set level medium
|
|
next
|
|
edit 9
|
|
set category 12
|
|
set level medium
|
|
next
|
|
edit 10
|
|
set category 59
|
|
set level medium
|
|
next
|
|
edit 11
|
|
set category 62
|
|
set level medium
|
|
next
|
|
edit 12
|
|
set category 83
|
|
set level medium
|
|
next
|
|
edit 13
|
|
set category 72
|
|
set level low
|
|
next
|
|
edit 14
|
|
set category 14
|
|
set level low
|
|
next
|
|
edit 15
|
|
set category 96
|
|
set level medium
|
|
next
|
|
end
|
|
config application
|
|
edit 1
|
|
set category 2
|
|
set level low
|
|
next
|
|
edit 2
|
|
set category 6
|
|
set level medium
|
|
next
|
|
end
|
|
end
|
|
config icap server
|
|
end
|
|
config icap server-group
|
|
end
|
|
config icap profile
|
|
edit "default"
|
|
set replacemsg-group ''
|
|
set comment ''
|
|
set request disable
|
|
set response disable
|
|
unset file-transfer
|
|
set streaming-content-bypass disable
|
|
set 204-response disable
|
|
set preview disable
|
|
set methods delete get head options post put trace connect other
|
|
set icap-block-log disable
|
|
set chunk-encap disable
|
|
unset extension-feature
|
|
set timeout 30
|
|
next
|
|
end
|
|
config system network-visibility
|
|
set destination-visibility enable
|
|
set source-location enable
|
|
set destination-hostname-visibility enable
|
|
set hostname-ttl 86400
|
|
set hostname-limit 5000
|
|
set destination-location enable
|
|
end
|
|
config user certificate
|
|
end
|
|
config user radius
|
|
end
|
|
config user tacacs+
|
|
end
|
|
config user exchange
|
|
end
|
|
config user ldap
|
|
end
|
|
config user krb-keytab
|
|
end
|
|
config user domain-controller
|
|
end
|
|
config user pop3
|
|
end
|
|
config user saml
|
|
end
|
|
config user external-identity-provider
|
|
end
|
|
config user fsso
|
|
end
|
|
config user adgrp
|
|
end
|
|
config user fsso-polling
|
|
end
|
|
config user fortitoken
|
|
edit "FTKMOB8367CB88D5"
|
|
set status active
|
|
set comments ''
|
|
set license "FTMTRIAL02065464"
|
|
set activation-code ''
|
|
set activation-expire 0
|
|
set reg-id ''
|
|
set os-ver ''
|
|
next
|
|
edit "FTKMOB837DEE79C1"
|
|
set status active
|
|
set comments ''
|
|
set license "FTMTRIAL02065464"
|
|
set activation-code ''
|
|
set activation-expire 0
|
|
set reg-id ''
|
|
set os-ver ''
|
|
next
|
|
end
|
|
config user password-policy
|
|
end
|
|
config user local
|
|
edit "guest"
|
|
set status enable
|
|
set type password
|
|
set two-factor disable
|
|
set email-to ''
|
|
set sms-server fortiguard
|
|
set sms-phone ''
|
|
set passwd-policy ''
|
|
set passwd-time 0000-00-00 00:00:00
|
|
set authtimeout 0
|
|
set auth-concurrent-override disable
|
|
set ppk-secret ENC Nf5q1oPIoa7V+y7SWH02+PAqKPcj4x7LAVs0O0YIQkvSLk6Z0AuS4u37umIvS6+28o1uWIfBP+RgiUu2GA4dlia89PgResILxSUEq+DPJLYXFl6mtH5P6htIUhVcd9AIXJzm7Uc9taWJ1MpOCjCNO6vB59SqWh5uel99iXng8pXkHR7dyfcP0YJv5Xnh7f9iLVIVMg==
|
|
set ppk-identity ''
|
|
set passwd ENC s27XLusSyuaEd0VvtbO2c8qWMzceAq2wZ14dhxWC43MTJKzcXHlp6MxGNLw2ow/T8LyHQYENCDe3+S2Q933j40Mv3kjKgZF49B2wh3P3dbp5Z/V32eOw4Mw01vrBU733DiVvWyiZ9BVImP85MCv0Jt/8UF/gbItSb6+Txc3YKsgYVrtI4761OOMwFIVJOWpux4zLSg==
|
|
next
|
|
end
|
|
config user setting
|
|
set auth-type http https ftp telnet
|
|
set auth-cert "Fortinet_Factory"
|
|
set auth-ca-cert ''
|
|
set auth-secure-http disable
|
|
set auth-http-basic disable
|
|
set auth-ssl-allow-renegotiation disable
|
|
set auth-src-mac enable
|
|
set auth-on-demand implicitly
|
|
set auth-timeout 5
|
|
set auth-timeout-type idle-timeout
|
|
set auth-portal-timeout 3
|
|
set radius-ses-timeout-act hard-timeout
|
|
set auth-blackout-time 0
|
|
set auth-invalid-max 5
|
|
set auth-lockout-threshold 3
|
|
set auth-lockout-duration 0
|
|
set per-policy-disclaimer disable
|
|
set auth-ssl-min-proto-version default
|
|
unset auth-ssl-max-proto-version
|
|
set auth-ssl-sigalgs all
|
|
end
|
|
config user peer
|
|
end
|
|
config user peergrp
|
|
end
|
|
config user quarantine
|
|
set quarantine disable
|
|
set traffic-policy ''
|
|
set firewall-groups ''
|
|
end
|
|
config user group
|
|
edit "SSO_Guest_Users"
|
|
set authtimeout 0
|
|
set http-digest-realm ''
|
|
next
|
|
edit "Guest-group"
|
|
set group-type firewall
|
|
set authtimeout 0
|
|
set auth-concurrent-override disable
|
|
set http-digest-realm ''
|
|
set member "guest"
|
|
next
|
|
end
|
|
config user security-exempt-list
|
|
end
|
|
config vpn ssl web realm
|
|
end
|
|
config vpn ssl web host-check-software
|
|
edit "FortiClient-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "1A0271D5-3D4F-46DB-0C2C-AB37BA90D9F7"
|
|
next
|
|
edit "FortiClient-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "528CB157-D384-4593-AAAA-E42DFF111CED"
|
|
next
|
|
edit "FortiClient-AV-Vista"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "385618A6-2256-708E-3FB9-7E98B93F91F9"
|
|
next
|
|
edit "FortiClient-FW-Vista"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "006D9983-6839-71D6-14E6-D7AD47ECD682"
|
|
next
|
|
edit "FortiClient-AV-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "71629DC5-BE6F-CCD3-C5A5-014980643264"
|
|
next
|
|
edit "AVG-Internet-Security-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "17DDD097-36FF-435F-9E1B-52D74245D6BF"
|
|
next
|
|
edit "AVG-Internet-Security-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "8DECF618-9569-4340-B34A-D78D28969B66"
|
|
next
|
|
edit "AVG-Internet-Security-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "0C939084-9E57-CBDB-EA61-0B0C7F62AF82"
|
|
next
|
|
edit "AVG-Internet-Security-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "34A811A1-D438-CA83-C13E-A23981B1E8F9"
|
|
next
|
|
edit "CA-Anti-Virus"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "17CFD1EA-56CF-40B5-A06B-BD3A27397C93"
|
|
next
|
|
edit "CA-Internet-Security-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "6B98D35F-BB76-41C0-876B-A50645ED099A"
|
|
next
|
|
edit "CA-Internet-Security-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "38102F93-1B6E-4922-90E1-A35D8DC6DAA3"
|
|
next
|
|
edit "CA-Internet-Security-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "3EED0195-0A4B-4EF3-CC4F-4F401BDC245F"
|
|
next
|
|
edit "CA-Internet-Security-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "06D680B0-4024-4FAB-E710-E675E50F6324"
|
|
next
|
|
edit "CA-Personal-Firewall"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "14CB4B80-8E52-45EA-905E-67C1267B4160"
|
|
next
|
|
edit "F-Secure-Internet-Security-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "E7512ED5-4245-4B4D-AF3A-382D3F313F15"
|
|
next
|
|
edit "F-Secure-Internet-Security-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "D4747503-0346-49EB-9262-997542F79BF4"
|
|
next
|
|
edit "F-Secure-Internet-Security-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "15414183-282E-D62C-CA37-EF24860A2F17"
|
|
next
|
|
edit "F-Secure-Internet-Security-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "2D7AC0A6-6241-D774-E168-461178D9686C"
|
|
next
|
|
edit "Kaspersky-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "2C4D4BC6-0793-4956-A9F9-E252435469C0"
|
|
next
|
|
edit "Kaspersky-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "2C4D4BC6-0793-4956-A9F9-E252435469C0"
|
|
next
|
|
edit "Kaspersky-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "AE1D740B-8F0F-D137-211D-873D44B3F4AE"
|
|
next
|
|
edit "Kaspersky-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "9626F52E-C560-D06F-0A42-2E08BA60B3D5"
|
|
next
|
|
edit "McAfee-Internet-Security-Suite-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "84B5EE75-6421-4CDE-A33A-DD43BA9FAD83"
|
|
next
|
|
edit "McAfee-Internet-Security-Suite-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "94894B63-8C7F-4050-BDA4-813CA00DA3E8"
|
|
next
|
|
edit "McAfee-Internet-Security-Suite-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "86355677-4064-3EA7-ABB3-1B136EB04637"
|
|
next
|
|
edit "McAfee-Internet-Security-Suite-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "BE0ED752-0A0B-3FFF-80EC-B2269063014C"
|
|
next
|
|
edit "McAfee-Virus-Scan-Enterprise"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "918A2B0B-2C60-4016-A4AB-E868DEABF7F0"
|
|
next
|
|
edit "Norton-360-2.0-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "A5F1BC7C-EA33-4247-961C-0217208396C4"
|
|
next
|
|
edit "Norton-360-2.0-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "371C0A40-5A0C-4AD2-A6E5-69C02037FBF3"
|
|
next
|
|
edit "Norton-360-3.0-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "E10A9785-9598-4754-B552-92431C1C35F8"
|
|
next
|
|
edit "Norton-360-3.0-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "7C21A4C9-F61F-4AC4-B722-A6E19C16F220"
|
|
next
|
|
edit "Norton-Internet-Security-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "E10A9785-9598-4754-B552-92431C1C35F8"
|
|
next
|
|
edit "Norton-Internet-Security-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "7C21A4C9-F61F-4AC4-B722-A6E19C16F220"
|
|
next
|
|
edit "Norton-Internet-Security-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855"
|
|
next
|
|
edit "Norton-Internet-Security-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "B0F2DB13-C654-2E74-30D4-99C9310F0F2E"
|
|
next
|
|
edit "Symantec-Endpoint-Protection-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "FB06448E-52B8-493A-90F3-E43226D3305C"
|
|
next
|
|
edit "Symantec-Endpoint-Protection-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "BE898FE3-CD0B-4014-85A9-03DB9923DDB6"
|
|
next
|
|
edit "Symantec-Endpoint-Protection-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855"
|
|
next
|
|
edit "Symantec-Endpoint-Protection-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "B0F2DB13-C654-2E74-30D4-99C9310F0F2E"
|
|
next
|
|
edit "Panda-Antivirus+Firewall-2008-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "EEE2D94A-D4C1-421A-AB2C-2CE8FE51747A"
|
|
next
|
|
edit "Panda-Antivirus+Firewall-2008-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "7B090DC0-8905-4BAF-8040-FD98A41C8FB8"
|
|
next
|
|
edit "Panda-Internet-Security-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "4570FB70-5C9E-47E9-B16C-A3A6A06C4BF0"
|
|
next
|
|
edit "Panda-Internet-Security-2006~2007-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "4570FB70-5C9E-47E9-B16C-A3A6A06C4BF0"
|
|
next
|
|
edit "Panda-Internet-Security-2008~2009-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "7B090DC0-8905-4BAF-8040-FD98A41C8FB8"
|
|
next
|
|
edit "Sophos-Anti-Virus"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "3F13C776-3CBE-4DE9-8BF6-09E5183CA2BD"
|
|
next
|
|
edit "Sophos-Enpoint-Secuirty-and-Control-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "0786E95E-326A-4524-9691-41EF88FB52EA"
|
|
next
|
|
edit "Sophos-Enpoint-Secuirty-and-Control-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "479CCF92-4960-B3E0-7373-BF453B467D2C"
|
|
next
|
|
edit "Sophos-Enpoint-Secuirty-and-Control-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "7FA74EB7-030F-B2B8-582C-1670C5953A57"
|
|
next
|
|
edit "Trend-Micro-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "7D2296BC-32CC-4519-917E-52E652474AF5"
|
|
next
|
|
edit "Trend-Micro-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "3E790E9E-6A5D-4303-A7F9-185EC20F3EB6"
|
|
next
|
|
edit "Trend-Micro-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "48929DFC-7A52-A34F-8351-C4DBEDBD9C50"
|
|
next
|
|
edit "Trend-Micro-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "70A91CD9-303D-A217-A80E-6DEE136EDB2B"
|
|
next
|
|
edit "ZoneAlarm-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "5D467B10-818C-4CAB-9FF7-6893B5B8F3CF"
|
|
next
|
|
edit "ZoneAlarm-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "829BDA32-94B3-44F4-8446-F8FCFF809F8B"
|
|
next
|
|
edit "ZoneAlarm-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "D61596DF-D219-341C-49B3-AD30538CBC5B"
|
|
next
|
|
edit "ZoneAlarm-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "EE2E17FA-9876-3544-62EC-0405AD5FFB20"
|
|
next
|
|
edit "ESET-Smart-Security-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "19259FAE-8396-A113-46DB-15B0E7DFA289"
|
|
next
|
|
edit "ESET-Smart-Security-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "211E1E8B-C9F9-A04B-6D84-BC85190CE5F2"
|
|
next
|
|
edit "FortiClient-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "385618A6-2256-708E-3FB9-7E98B93F91F9"
|
|
next
|
|
edit "FortiClient5-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "5EEDDB8C-C27A-6714-3657-DBD811D1F1B7"
|
|
next
|
|
end
|
|
config vpn ssl web portal
|
|
edit "full-access"
|
|
set tunnel-mode disable
|
|
set ipv6-tunnel-mode disable
|
|
set web-mode enable
|
|
set allow-user-access web ftp smb sftp telnet ssh vnc rdp ping
|
|
set limit-user-logins disable
|
|
set forticlient-download enable
|
|
set dns-suffix ''
|
|
set display-bookmark enable
|
|
set user-bookmark enable
|
|
set user-group-bookmark enable
|
|
config bookmark-group
|
|
edit "gui-bookmarks"
|
|
next
|
|
end
|
|
set display-connection-tools enable
|
|
set display-history enable
|
|
set display-status enable
|
|
set rewrite-ip-uri-ui disable
|
|
set heading "SSL-VPN Portal"
|
|
set redir-url ''
|
|
set theme neutrino
|
|
set smb-ntlmv1-auth disable
|
|
set smb-min-version smbv2
|
|
set smb-max-version smbv3
|
|
set use-sdwan disable
|
|
set clipboard enable
|
|
set default-window-width 1024
|
|
set default-window-height 768
|
|
set forticlient-download-method direct
|
|
set customize-forticlient-download-url disable
|
|
set hide-sso-credential enable
|
|
next
|
|
edit "web-access"
|
|
set tunnel-mode disable
|
|
set ipv6-tunnel-mode disable
|
|
set web-mode enable
|
|
set allow-user-access web ftp smb sftp telnet ssh vnc rdp ping
|
|
set limit-user-logins disable
|
|
set forticlient-download enable
|
|
set dns-suffix ''
|
|
set display-bookmark enable
|
|
set user-bookmark enable
|
|
set user-group-bookmark enable
|
|
set display-connection-tools enable
|
|
set display-history enable
|
|
set display-status enable
|
|
set rewrite-ip-uri-ui disable
|
|
set heading "SSL-VPN Portal"
|
|
set redir-url ''
|
|
set theme neutrino
|
|
set smb-ntlmv1-auth disable
|
|
set smb-min-version smbv2
|
|
set smb-max-version smbv3
|
|
set use-sdwan disable
|
|
set clipboard enable
|
|
set default-window-width 1024
|
|
set default-window-height 768
|
|
set forticlient-download-method direct
|
|
set customize-forticlient-download-url disable
|
|
set hide-sso-credential enable
|
|
next
|
|
edit "tunnel-access"
|
|
set tunnel-mode disable
|
|
set ipv6-tunnel-mode disable
|
|
set web-mode enable
|
|
set allow-user-access web ftp smb sftp telnet ssh vnc rdp ping
|
|
set limit-user-logins disable
|
|
set forticlient-download enable
|
|
set dns-suffix ''
|
|
set display-bookmark enable
|
|
set user-bookmark enable
|
|
set user-group-bookmark enable
|
|
config bookmark-group
|
|
edit "gui-bookmarks"
|
|
next
|
|
end
|
|
set display-connection-tools enable
|
|
set display-history enable
|
|
set display-status enable
|
|
set rewrite-ip-uri-ui disable
|
|
set heading "SSL-VPN Portal"
|
|
set redir-url ''
|
|
set theme neutrino
|
|
set smb-ntlmv1-auth disable
|
|
set smb-min-version smbv2
|
|
set smb-max-version smbv3
|
|
set use-sdwan disable
|
|
set clipboard enable
|
|
set default-window-width 1024
|
|
set default-window-height 768
|
|
set forticlient-download-method direct
|
|
set customize-forticlient-download-url disable
|
|
set hide-sso-credential enable
|
|
next
|
|
end
|
|
config vpn ssl settings
|
|
set status enable
|
|
set reqclientcert disable
|
|
set ssl-max-proto-ver tls1-3
|
|
set ssl-min-proto-ver tls1-1
|
|
unset banned-cipher
|
|
set ciphersuite TLS-AES-128-GCM-SHA256 TLS-AES-256-GCM-SHA384 TLS-CHACHA20-POLY1305-SHA256
|
|
set ssl-insert-empty-fragment enable
|
|
set https-redirect disable
|
|
set x-content-type-options enable
|
|
set ssl-client-renegotiation disable
|
|
set force-two-factor-auth disable
|
|
set servercert "Fortinet_Factory"
|
|
set algorithm high
|
|
set idle-timeout 300
|
|
set auth-timeout 28800
|
|
set login-attempt-limit 2
|
|
set login-block-time 60
|
|
set login-timeout 30
|
|
set dtls-hello-timeout 10
|
|
set dns-suffix ''
|
|
set dns-server1 0.0.0.0
|
|
set dns-server2 0.0.0.0
|
|
set wins-server1 0.0.0.0
|
|
set wins-server2 0.0.0.0
|
|
set ipv6-dns-server1 ::
|
|
set ipv6-dns-server2 ::
|
|
set ipv6-wins-server1 ::
|
|
set ipv6-wins-server2 ::
|
|
set url-obscuration disable
|
|
set http-compression disable
|
|
set http-only-cookie enable
|
|
set port 443
|
|
set port-precedence enable
|
|
set auto-tunnel-static-route enable
|
|
set header-x-forwarded-for add
|
|
set browser-language-detection enable
|
|
set dtls-tunnel enable
|
|
set check-referer disable
|
|
set http-request-header-timeout 20
|
|
set http-request-body-timeout 30
|
|
set auth-session-check-source-ip enable
|
|
set tunnel-connect-without-reauth disable
|
|
set hsts-include-subdomains disable
|
|
set transform-backward-slashes disable
|
|
set encode-2f-sequence disable
|
|
set encrypt-and-store-password disable
|
|
set client-sigalgs all
|
|
set dual-stack-mode disable
|
|
set tunnel-addr-assigned-method first-available
|
|
set saml-redirect-port 8020
|
|
set ztna-trusted-client disable
|
|
set server-hostname ''
|
|
set dtls-max-proto-ver dtls1-2
|
|
set dtls-min-proto-ver dtls1-0
|
|
end
|
|
config vpn ssl web user-group-bookmark
|
|
end
|
|
config vpn ssl web user-bookmark
|
|
end
|
|
config vpn ssl client
|
|
end
|
|
config voip profile
|
|
edit "default"
|
|
set comment "Default VoIP profile."
|
|
config sip
|
|
set status enable
|
|
set rtp enable
|
|
set nat-port-range 5117-65533
|
|
set open-register-pinhole enable
|
|
set open-contact-pinhole enable
|
|
set strict-register enable
|
|
set register-rate 0
|
|
set invite-rate 0
|
|
set max-dialogs 0
|
|
set max-line-length 998
|
|
set block-long-lines enable
|
|
set block-unknown enable
|
|
set call-keepalive 0
|
|
set block-ack disable
|
|
set block-bye disable
|
|
set block-cancel disable
|
|
set block-info disable
|
|
set block-invite disable
|
|
set block-message disable
|
|
set block-notify disable
|
|
set block-options disable
|
|
set block-prack disable
|
|
set block-publish disable
|
|
set block-refer disable
|
|
set block-register disable
|
|
set block-subscribe disable
|
|
set block-update disable
|
|
set register-contact-trace disable
|
|
set open-via-pinhole disable
|
|
set open-record-route-pinhole enable
|
|
set rfc2543-branch disable
|
|
set log-violations disable
|
|
set log-call-summary enable
|
|
set nat-trace enable
|
|
set subscribe-rate 0
|
|
set message-rate 0
|
|
set notify-rate 0
|
|
set refer-rate 0
|
|
set update-rate 0
|
|
set options-rate 0
|
|
set ack-rate 0
|
|
set prack-rate 0
|
|
set info-rate 0
|
|
set publish-rate 0
|
|
set bye-rate 0
|
|
set cancel-rate 0
|
|
set preserve-override disable
|
|
set no-sdp-fixup disable
|
|
set contact-fixup enable
|
|
set max-idle-dialogs 0
|
|
set block-geo-red-options disable
|
|
set hosted-nat-traversal disable
|
|
set hnt-restrict-source-ip disable
|
|
set max-body-length 0
|
|
set unknown-header pass
|
|
set malformed-request-line pass
|
|
set malformed-header-via pass
|
|
set malformed-header-from pass
|
|
set malformed-header-to pass
|
|
set malformed-header-call-id pass
|
|
set malformed-header-cseq pass
|
|
set malformed-header-rack pass
|
|
set malformed-header-rseq pass
|
|
set malformed-header-contact pass
|
|
set malformed-header-record-route pass
|
|
set malformed-header-route pass
|
|
set malformed-header-expires pass
|
|
set malformed-header-content-type pass
|
|
set malformed-header-content-length pass
|
|
set malformed-header-max-forwards pass
|
|
set malformed-header-allow pass
|
|
set malformed-header-p-asserted-identity pass
|
|
set malformed-header-sdp-v pass
|
|
set malformed-header-sdp-o pass
|
|
set malformed-header-sdp-s pass
|
|
set malformed-header-sdp-i pass
|
|
set malformed-header-sdp-c pass
|
|
set malformed-header-sdp-b pass
|
|
set malformed-header-sdp-z pass
|
|
set malformed-header-sdp-k pass
|
|
set malformed-header-sdp-a pass
|
|
set malformed-header-sdp-t pass
|
|
set malformed-header-sdp-r pass
|
|
set malformed-header-sdp-m pass
|
|
set provisional-invite-expiry-time 210
|
|
set ips-rtp enable
|
|
set ssl-mode off
|
|
end
|
|
config sccp
|
|
set status enable
|
|
set block-mcast disable
|
|
set verify-header disable
|
|
set log-call-summary disable
|
|
set log-violations disable
|
|
set max-calls 0
|
|
end
|
|
next
|
|
edit "strict"
|
|
set feature-set voipd
|
|
set comment ''
|
|
config sip
|
|
set status enable
|
|
set rtp enable
|
|
set nat-port-range 5117-65533
|
|
set open-register-pinhole enable
|
|
set open-contact-pinhole enable
|
|
set strict-register enable
|
|
set register-rate 0
|
|
set invite-rate 0
|
|
set max-dialogs 0
|
|
set max-line-length 998
|
|
set block-long-lines enable
|
|
set block-unknown enable
|
|
set call-keepalive 0
|
|
set block-ack disable
|
|
set block-bye disable
|
|
set block-cancel disable
|
|
set block-info disable
|
|
set block-invite disable
|
|
set block-message disable
|
|
set block-notify disable
|
|
set block-options disable
|
|
set block-prack disable
|
|
set block-publish disable
|
|
set block-refer disable
|
|
set block-register disable
|
|
set block-subscribe disable
|
|
set block-update disable
|
|
set register-contact-trace disable
|
|
set open-via-pinhole disable
|
|
set open-record-route-pinhole enable
|
|
set rfc2543-branch disable
|
|
set log-violations disable
|
|
set log-call-summary enable
|
|
set nat-trace enable
|
|
set subscribe-rate 0
|
|
set message-rate 0
|
|
set notify-rate 0
|
|
set refer-rate 0
|
|
set update-rate 0
|
|
set options-rate 0
|
|
set ack-rate 0
|
|
set prack-rate 0
|
|
set info-rate 0
|
|
set publish-rate 0
|
|
set bye-rate 0
|
|
set cancel-rate 0
|
|
set preserve-override disable
|
|
set no-sdp-fixup disable
|
|
set contact-fixup enable
|
|
set max-idle-dialogs 0
|
|
set block-geo-red-options disable
|
|
set hosted-nat-traversal disable
|
|
set hnt-restrict-source-ip disable
|
|
set max-body-length 0
|
|
set unknown-header pass
|
|
set malformed-request-line discard
|
|
set malformed-header-via discard
|
|
set malformed-header-from discard
|
|
set malformed-header-to discard
|
|
set malformed-header-call-id discard
|
|
set malformed-header-cseq discard
|
|
set malformed-header-rack discard
|
|
set malformed-header-rseq discard
|
|
set malformed-header-contact discard
|
|
set malformed-header-record-route discard
|
|
set malformed-header-route discard
|
|
set malformed-header-expires discard
|
|
set malformed-header-content-type discard
|
|
set malformed-header-content-length discard
|
|
set malformed-header-max-forwards discard
|
|
set malformed-header-allow discard
|
|
set malformed-header-p-asserted-identity discard
|
|
set malformed-header-sdp-v discard
|
|
set malformed-header-sdp-o discard
|
|
set malformed-header-sdp-s discard
|
|
set malformed-header-sdp-i discard
|
|
set malformed-header-sdp-c discard
|
|
set malformed-header-sdp-b discard
|
|
set malformed-header-sdp-z discard
|
|
set malformed-header-sdp-k discard
|
|
set malformed-header-sdp-a discard
|
|
set malformed-header-sdp-t discard
|
|
set malformed-header-sdp-r discard
|
|
set malformed-header-sdp-m discard
|
|
set provisional-invite-expiry-time 210
|
|
set ips-rtp enable
|
|
set ssl-mode off
|
|
end
|
|
config sccp
|
|
set status enable
|
|
set block-mcast disable
|
|
set verify-header disable
|
|
set log-call-summary disable
|
|
set log-violations disable
|
|
set max-calls 0
|
|
end
|
|
next
|
|
end
|
|
config system sdwan
|
|
set status disable
|
|
set load-balance-mode source-ip-based
|
|
set speedtest-bypass-routing disable
|
|
set duplication-max-num 2
|
|
set neighbor-hold-down disable
|
|
set neighbor-hold-down-time 0
|
|
set neighbor-hold-boot-time 0
|
|
set fail-detect disable
|
|
config zone
|
|
edit "virtual-wan-link"
|
|
set service-sla-tie-break cfg-order
|
|
next
|
|
end
|
|
end
|
|
config vpn ipsec phase1
|
|
end
|
|
config vpn ipsec phase2
|
|
end
|
|
config vpn ipsec manualkey
|
|
end
|
|
config vpn ipsec concentrator
|
|
end
|
|
config vpn ipsec fec
|
|
end
|
|
config vpn ipsec phase1-interface
|
|
end
|
|
config vpn ipsec phase2-interface
|
|
end
|
|
config vpn ipsec manualkey-interface
|
|
end
|
|
config vpn pptp
|
|
set status disable
|
|
end
|
|
config vpn l2tp
|
|
set status disable
|
|
set lcp-max-echo-fails 3
|
|
set hello-interval 60
|
|
end
|
|
config vpn ipsec forticlient
|
|
end
|
|
config vpn ocvpn
|
|
set status disable
|
|
set role spoke
|
|
set multipath enable
|
|
set sdwan disable
|
|
set auto-discovery enable
|
|
set poll-interval 30
|
|
end
|
|
config dnsfilter domain-filter
|
|
end
|
|
config dnsfilter profile
|
|
edit "default"
|
|
set comment "Default dns filtering."
|
|
config domain-filter
|
|
unset domain-filter-table
|
|
end
|
|
config ftgd-dns
|
|
unset options
|
|
config filters
|
|
edit 1
|
|
set category 2
|
|
set action monitor
|
|
next
|
|
edit 2
|
|
set category 7
|
|
set action monitor
|
|
next
|
|
edit 3
|
|
set category 8
|
|
set action monitor
|
|
next
|
|
edit 4
|
|
set category 9
|
|
set action monitor
|
|
next
|
|
edit 5
|
|
set category 11
|
|
set action monitor
|
|
next
|
|
edit 6
|
|
set category 12
|
|
set action monitor
|
|
next
|
|
edit 7
|
|
set category 13
|
|
set action monitor
|
|
next
|
|
edit 8
|
|
set category 14
|
|
set action monitor
|
|
next
|
|
edit 9
|
|
set category 15
|
|
set action monitor
|
|
next
|
|
edit 10
|
|
set category 16
|
|
set action monitor
|
|
next
|
|
edit 11
|
|
set category 0
|
|
set action monitor
|
|
next
|
|
edit 12
|
|
set category 57
|
|
set action monitor
|
|
next
|
|
edit 13
|
|
set category 63
|
|
set action monitor
|
|
next
|
|
edit 14
|
|
set category 64
|
|
set action monitor
|
|
next
|
|
edit 15
|
|
set category 65
|
|
set action monitor
|
|
next
|
|
edit 16
|
|
set category 66
|
|
set action monitor
|
|
next
|
|
edit 17
|
|
set category 67
|
|
set action monitor
|
|
next
|
|
edit 18
|
|
set category 26
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 61
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 86
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 88
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 90
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 91
|
|
set action block
|
|
set log enable
|
|
next
|
|
end
|
|
end
|
|
set log-all-domain disable
|
|
set sdns-ftgd-err-log enable
|
|
set sdns-domain-log enable
|
|
set block-action redirect
|
|
set block-botnet enable
|
|
set safe-search disable
|
|
set redirect-portal 0.0.0.0
|
|
set redirect-portal6 ::
|
|
next
|
|
end
|
|
config system gre-tunnel
|
|
end
|
|
config system ipsec-aggregate
|
|
end
|
|
config system ipip-tunnel
|
|
end
|
|
config system mobile-tunnel
|
|
end
|
|
config system pppoe-interface
|
|
end
|
|
config system vxlan
|
|
end
|
|
config system geneve
|
|
end
|
|
config system virtual-wire-pair
|
|
end
|
|
config system dns-database
|
|
end
|
|
config system dns-server
|
|
end
|
|
config log custom-field
|
|
end
|
|
config antivirus settings
|
|
set machine-learning-detection enable
|
|
set use-extreme-db disable
|
|
set grayware enable
|
|
set override-timeout 0
|
|
set cache-infected-result enable
|
|
end
|
|
config antivirus quarantine
|
|
set agelimit 0
|
|
set maxfilesize 0
|
|
set quarantine-quota 0
|
|
unset drop-infected
|
|
set store-infected imap smtp pop3 http ftp nntp imaps smtps pop3s https ftps mapi cifs ssh
|
|
unset drop-blocked
|
|
set store-blocked imap smtp pop3 http ftp nntp imaps smtps pop3s ftps mapi cifs ssh
|
|
unset drop-machine-learning
|
|
set store-machine-learning imap smtp pop3 http ftp nntp imaps smtps pop3s https ftps mapi cifs ssh
|
|
set lowspace ovrw-old
|
|
set destination disk
|
|
end
|
|
config antivirus exempt-list
|
|
end
|
|
config ssh-filter profile
|
|
end
|
|
config antivirus profile
|
|
edit "g-default"
|
|
set comment "Scan files and block viruses."
|
|
set replacemsg-group ''
|
|
set feature-set flow
|
|
set mobile-malware-db enable
|
|
config http
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config ftp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config imap
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config pop3
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config smtp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config nntp
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config cifs
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config nac-quar
|
|
set infected none
|
|
set log disable
|
|
end
|
|
set outbreak-prevention-archive-scan disable
|
|
set external-blocklist-enable-all enable
|
|
set ems-threat-feed disable
|
|
set av-virus-log enable
|
|
set av-block-log enable
|
|
set extended-log disable
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Scan files and monitor viruses."
|
|
set replacemsg-group ''
|
|
set feature-set flow
|
|
set mobile-malware-db enable
|
|
config http
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config ftp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config imap
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config pop3
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config smtp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config nntp
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config cifs
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config nac-quar
|
|
set infected none
|
|
set log disable
|
|
end
|
|
set outbreak-prevention-archive-scan disable
|
|
set external-blocklist-enable-all enable
|
|
set ems-threat-feed disable
|
|
set av-virus-log enable
|
|
set av-block-log enable
|
|
set extended-log disable
|
|
next
|
|
edit "g-wifi-default"
|
|
set comment "Default configuration for offloading WiFi traffic."
|
|
set replacemsg-group ''
|
|
set feature-set flow
|
|
set mobile-malware-db enable
|
|
config http
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config ftp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config imap
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config pop3
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config smtp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config nntp
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config cifs
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config nac-quar
|
|
set infected none
|
|
set log disable
|
|
end
|
|
set outbreak-prevention-archive-scan disable
|
|
set external-blocklist-enable-all enable
|
|
set ems-threat-feed disable
|
|
set av-virus-log enable
|
|
set av-block-log enable
|
|
set extended-log disable
|
|
next
|
|
edit "default"
|
|
set comment "Scan files and block viruses."
|
|
set replacemsg-group ''
|
|
set feature-set flow
|
|
set mobile-malware-db enable
|
|
config http
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config ftp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config imap
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config pop3
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config smtp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config nntp
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config cifs
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config nac-quar
|
|
set infected none
|
|
set log disable
|
|
end
|
|
set outbreak-prevention-archive-scan disable
|
|
set external-blocklist-enable-all enable
|
|
set ems-threat-feed disable
|
|
set av-virus-log enable
|
|
set av-block-log enable
|
|
set extended-log disable
|
|
next
|
|
end
|
|
config file-filter profile
|
|
edit "g-default"
|
|
set comment "File type inspection."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set log enable
|
|
set extended-log disable
|
|
set scan-archive-contents enable
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "File type inspection."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set log enable
|
|
set extended-log disable
|
|
set scan-archive-contents enable
|
|
next
|
|
end
|
|
config webfilter profile
|
|
edit "g-default"
|
|
set comment "Default web filtering."
|
|
set feature-set proxy
|
|
set replacemsg-group ''
|
|
unset options
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
unset safe-search
|
|
set log-search disable
|
|
end
|
|
config ftgd-wf
|
|
unset options
|
|
set exempt-quota 17
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 0
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 2
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 7
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 8
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 9
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 11
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 12
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 13
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 14
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 15
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 16
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 26
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 57
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 61
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 63
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 64
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 65
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 66
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 67
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 86
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 88
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 90
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 91
|
|
set action block
|
|
set log enable
|
|
next
|
|
end
|
|
set max-quota-timeout 300
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
config antiphish
|
|
set status disable
|
|
set check-uri disable
|
|
set check-basic-auth disable
|
|
set check-username-only disable
|
|
set max-body-len 1024
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-activex-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-filter-applet-log enable
|
|
set web-filter-jscript-log enable
|
|
set web-filter-js-log enable
|
|
set web-filter-vbs-log enable
|
|
set web-filter-unknown-log enable
|
|
set web-filter-referer-log enable
|
|
set web-filter-cookie-removal-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set web-ftgd-quota-usage enable
|
|
set extended-log disable
|
|
set web-antiphishing-log enable
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Monitor web traffic."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
unset options
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
end
|
|
config ftgd-wf
|
|
set options ftgd-disable
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 0
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 1
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 2
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 3
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 4
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 5
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 6
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 7
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 8
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 9
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 11
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 12
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 13
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 14
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 15
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 16
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 17
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 18
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 19
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 20
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 23
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 24
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 25
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 24
|
|
set category 26
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 25
|
|
set category 28
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 26
|
|
set category 29
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 27
|
|
set category 30
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 28
|
|
set category 31
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 29
|
|
set category 33
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 30
|
|
set category 34
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 31
|
|
set category 35
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 32
|
|
set category 36
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 33
|
|
set category 37
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 34
|
|
set category 38
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 35
|
|
set category 39
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 36
|
|
set category 40
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 37
|
|
set category 41
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 38
|
|
set category 42
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 39
|
|
set category 43
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 40
|
|
set category 44
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 41
|
|
set category 46
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 42
|
|
set category 47
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 43
|
|
set category 48
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 44
|
|
set category 49
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 45
|
|
set category 50
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 46
|
|
set category 51
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 47
|
|
set category 52
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 48
|
|
set category 53
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 49
|
|
set category 54
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 50
|
|
set category 55
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 51
|
|
set category 56
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 52
|
|
set category 57
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 53
|
|
set category 58
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 54
|
|
set category 59
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 55
|
|
set category 61
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 56
|
|
set category 62
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 57
|
|
set category 63
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 58
|
|
set category 64
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 59
|
|
set category 65
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 60
|
|
set category 66
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 61
|
|
set category 67
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 62
|
|
set category 68
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 63
|
|
set category 69
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 64
|
|
set category 70
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 65
|
|
set category 71
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 66
|
|
set category 72
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 67
|
|
set category 75
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 68
|
|
set category 76
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 69
|
|
set category 77
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 70
|
|
set category 78
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 71
|
|
set category 79
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 72
|
|
set category 80
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 73
|
|
set category 81
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 74
|
|
set category 82
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 75
|
|
set category 83
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 76
|
|
set category 84
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 77
|
|
set category 85
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 78
|
|
set category 86
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 79
|
|
set category 87
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 80
|
|
set category 88
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 81
|
|
set category 89
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 82
|
|
set category 90
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 83
|
|
set category 91
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 84
|
|
set category 92
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 85
|
|
set category 93
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 86
|
|
set category 94
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 87
|
|
set category 95
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
end
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set extended-log disable
|
|
next
|
|
edit "g-wifi-default"
|
|
set comment "Default configuration for offloading WiFi traffic."
|
|
set feature-set proxy
|
|
set replacemsg-group ''
|
|
set options block-invalid-url
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
unset safe-search
|
|
set log-search disable
|
|
end
|
|
config ftgd-wf
|
|
unset options
|
|
set exempt-quota 17
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 0
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 2
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 7
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 8
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 9
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 11
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 12
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 13
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 14
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 15
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 16
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 26
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 57
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 61
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 63
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 64
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 65
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 66
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 67
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 86
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 88
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 90
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 91
|
|
set action block
|
|
set log enable
|
|
next
|
|
end
|
|
set max-quota-timeout 300
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
config antiphish
|
|
set status disable
|
|
set check-uri disable
|
|
set check-basic-auth disable
|
|
set check-username-only disable
|
|
set max-body-len 1024
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-activex-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-filter-applet-log enable
|
|
set web-filter-jscript-log enable
|
|
set web-filter-js-log enable
|
|
set web-filter-vbs-log enable
|
|
set web-filter-unknown-log enable
|
|
set web-filter-referer-log enable
|
|
set web-filter-cookie-removal-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set web-ftgd-quota-usage enable
|
|
set extended-log disable
|
|
set web-antiphishing-log enable
|
|
next
|
|
edit "default"
|
|
set comment "Default web filtering."
|
|
set feature-set proxy
|
|
set replacemsg-group ''
|
|
unset options
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
unset safe-search
|
|
set log-search disable
|
|
end
|
|
config ftgd-wf
|
|
unset options
|
|
set exempt-quota 17
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 2
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 7
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 8
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 9
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 11
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 12
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 13
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 14
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 15
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 16
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 0
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 57
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 63
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 64
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 65
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 66
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 67
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 26
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 61
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 86
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 88
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 90
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 91
|
|
set action block
|
|
set log enable
|
|
next
|
|
end
|
|
set max-quota-timeout 300
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
config antiphish
|
|
set status disable
|
|
set check-uri disable
|
|
set check-basic-auth disable
|
|
set check-username-only disable
|
|
set max-body-len 1024
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-activex-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-filter-applet-log enable
|
|
set web-filter-jscript-log enable
|
|
set web-filter-js-log enable
|
|
set web-filter-vbs-log enable
|
|
set web-filter-unknown-log enable
|
|
set web-filter-referer-log enable
|
|
set web-filter-cookie-removal-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set web-ftgd-quota-usage enable
|
|
set extended-log disable
|
|
set web-antiphishing-log enable
|
|
next
|
|
edit "g-default"
|
|
set comment "Default web filtering."
|
|
set feature-set proxy
|
|
set replacemsg-group ''
|
|
unset options
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
unset safe-search
|
|
set log-search disable
|
|
end
|
|
config ftgd-wf
|
|
unset options
|
|
set exempt-quota 17
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 2
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 7
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 8
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 9
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 11
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 12
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 13
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 14
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 15
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 16
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 0
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 57
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 63
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 64
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 65
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 66
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 67
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 26
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 61
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 86
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 88
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 90
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 91
|
|
set action block
|
|
set log enable
|
|
next
|
|
end
|
|
set max-quota-timeout 300
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
config antiphish
|
|
set status disable
|
|
set check-uri disable
|
|
set check-basic-auth disable
|
|
set check-username-only disable
|
|
set max-body-len 1024
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-activex-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-filter-applet-log enable
|
|
set web-filter-jscript-log enable
|
|
set web-filter-js-log enable
|
|
set web-filter-vbs-log enable
|
|
set web-filter-unknown-log enable
|
|
set web-filter-referer-log enable
|
|
set web-filter-cookie-removal-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set web-ftgd-quota-usage enable
|
|
set extended-log disable
|
|
set web-antiphishing-log enable
|
|
next
|
|
edit "monitor-all"
|
|
set comment "Monitor and log all visited URLs, flow-based."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
unset options
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
end
|
|
config ftgd-wf
|
|
unset options
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 1
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 3
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 4
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 5
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 6
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 12
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 59
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 62
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 83
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 2
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 7
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 8
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 9
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 11
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 13
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 14
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 15
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 16
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 57
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 63
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 64
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 65
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 66
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 24
|
|
set category 67
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 25
|
|
set category 19
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 26
|
|
set category 24
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 27
|
|
set category 25
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 28
|
|
set category 72
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 29
|
|
set category 75
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 30
|
|
set category 76
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 31
|
|
set category 26
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 32
|
|
set category 61
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 33
|
|
set category 86
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 34
|
|
set category 17
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 35
|
|
set category 18
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 36
|
|
set category 20
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 37
|
|
set category 23
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 38
|
|
set category 28
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 39
|
|
set category 29
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 40
|
|
set category 30
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 41
|
|
set category 33
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 42
|
|
set category 34
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 43
|
|
set category 35
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 44
|
|
set category 36
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 45
|
|
set category 37
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 46
|
|
set category 38
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 47
|
|
set category 39
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 48
|
|
set category 40
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 49
|
|
set category 42
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 50
|
|
set category 44
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 51
|
|
set category 46
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 52
|
|
set category 47
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 53
|
|
set category 48
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 54
|
|
set category 54
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 55
|
|
set category 55
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 56
|
|
set category 58
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 57
|
|
set category 68
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 58
|
|
set category 69
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 59
|
|
set category 70
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 60
|
|
set category 71
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 61
|
|
set category 77
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 62
|
|
set category 78
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 63
|
|
set category 79
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 64
|
|
set category 80
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 65
|
|
set category 82
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 66
|
|
set category 85
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 67
|
|
set category 87
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 68
|
|
set category 31
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 69
|
|
set category 41
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 70
|
|
set category 43
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 71
|
|
set category 49
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 72
|
|
set category 50
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 73
|
|
set category 51
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 74
|
|
set category 52
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 75
|
|
set category 53
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 76
|
|
set category 56
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 77
|
|
set category 81
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 78
|
|
set category 84
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 79
|
|
set category 0
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 80
|
|
set category 88
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 81
|
|
set category 89
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 82
|
|
set category 90
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 83
|
|
set category 91
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 84
|
|
set category 92
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 85
|
|
set category 93
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 86
|
|
set category 94
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 87
|
|
set category 95
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
end
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
set wisp disable
|
|
set log-all-url enable
|
|
set web-content-log disable
|
|
set web-filter-command-block-log disable
|
|
set web-filter-cookie-log disable
|
|
set web-url-log disable
|
|
set web-invalid-domain-log disable
|
|
set web-ftgd-err-log disable
|
|
set extended-log disable
|
|
next
|
|
edit "sniffer-profile"
|
|
set comment "Monitor web traffic."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
unset options
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
end
|
|
config ftgd-wf
|
|
set options ftgd-disable
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 0
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 1
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 2
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 3
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 4
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 5
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 6
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 7
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 8
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 9
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 11
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 12
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 13
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 14
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 15
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 16
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 17
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 18
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 19
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 20
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 23
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 24
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 25
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 24
|
|
set category 26
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 25
|
|
set category 28
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 26
|
|
set category 29
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 27
|
|
set category 30
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 28
|
|
set category 31
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 29
|
|
set category 33
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 30
|
|
set category 34
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 31
|
|
set category 35
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 32
|
|
set category 36
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 33
|
|
set category 37
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 34
|
|
set category 38
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 35
|
|
set category 39
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 36
|
|
set category 40
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 37
|
|
set category 41
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 38
|
|
set category 42
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 39
|
|
set category 43
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 40
|
|
set category 44
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 41
|
|
set category 46
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 42
|
|
set category 47
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 43
|
|
set category 48
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 44
|
|
set category 49
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 45
|
|
set category 50
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 46
|
|
set category 51
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 47
|
|
set category 52
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 48
|
|
set category 53
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 49
|
|
set category 54
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 50
|
|
set category 55
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 51
|
|
set category 56
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 52
|
|
set category 57
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 53
|
|
set category 58
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 54
|
|
set category 59
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 55
|
|
set category 61
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 56
|
|
set category 62
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 57
|
|
set category 63
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 58
|
|
set category 64
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 59
|
|
set category 65
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 60
|
|
set category 66
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 61
|
|
set category 67
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 62
|
|
set category 68
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 63
|
|
set category 69
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 64
|
|
set category 70
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 65
|
|
set category 71
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 66
|
|
set category 72
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 67
|
|
set category 75
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 68
|
|
set category 76
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 69
|
|
set category 77
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 70
|
|
set category 78
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 71
|
|
set category 79
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 72
|
|
set category 80
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 73
|
|
set category 81
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 74
|
|
set category 82
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 75
|
|
set category 83
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 76
|
|
set category 84
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 77
|
|
set category 85
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 78
|
|
set category 86
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 79
|
|
set category 87
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 80
|
|
set category 88
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 81
|
|
set category 89
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 82
|
|
set category 90
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 83
|
|
set category 91
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 84
|
|
set category 92
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 85
|
|
set category 93
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 86
|
|
set category 94
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 87
|
|
set category 95
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 88
|
|
set category 140
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 89
|
|
set category 141
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
end
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set extended-log disable
|
|
next
|
|
end
|
|
config webfilter override
|
|
end
|
|
config webfilter ftgd-local-rating
|
|
end
|
|
config webfilter search-engine
|
|
edit "g-baidu"
|
|
set hostname ".*\\.baidu\\.com"
|
|
set url "^\\/s?\\?"
|
|
set query "wd="
|
|
set safesearch disable
|
|
next
|
|
edit "g-baidu2"
|
|
set hostname ".*\\.baidu\\.com"
|
|
set url "^\\/(ns|q|m|i|v)\\?"
|
|
set query "word="
|
|
set safesearch disable
|
|
next
|
|
edit "g-baidu3"
|
|
set hostname "tieba\\.baidu\\.com"
|
|
set url "^\\/f\\?"
|
|
set query "kw="
|
|
set safesearch disable
|
|
next
|
|
edit "g-bing"
|
|
set hostname ".*\\.bing\\..*"
|
|
set url "^(\\/images|\\/videos)?(\\/search|\\/async|\\/asyncv2)\\?"
|
|
set query "q="
|
|
set safesearch header
|
|
next
|
|
edit "g-google"
|
|
set hostname ".*\\.google\\..*"
|
|
set url "^\\/((custom|search|images|videosearch|webhp)\\?)"
|
|
set query "q="
|
|
set safesearch url
|
|
set safesearch-str "&safe=active"
|
|
next
|
|
edit "g-google-translate-1"
|
|
set hostname "translate\\.google\\..*"
|
|
set url "^\\/translate"
|
|
set query "u="
|
|
set safesearch translate
|
|
set safesearch-str "regex::(?:\\?|&)u=([^&]+)::\\1"
|
|
next
|
|
edit "g-google-translate-2"
|
|
set hostname ".*\\.translate\\.goog"
|
|
set url "^\\/"
|
|
set query ''
|
|
set safesearch translate
|
|
set safesearch-str "case::google-translate"
|
|
next
|
|
edit "g-twitter"
|
|
set hostname "twitter\\.com"
|
|
set url "^\\/i\\/api\\/graphql\\/.*\\/UserByScreenName"
|
|
set query "variables="
|
|
set safesearch translate
|
|
set safesearch-str "regex::%22screen_name%22:%22([A-Za-z0-9_]{4,15})%22::twitter.com/\\1"
|
|
next
|
|
edit "g-vimeo"
|
|
set hostname ".*vimeo.*"
|
|
set url "^\\/search\\?"
|
|
set query "q="
|
|
set safesearch header
|
|
next
|
|
edit "g-yahoo"
|
|
set hostname ".*\\.yahoo\\..*"
|
|
set url "^\\/search(\\/video|\\/images){0,1}(\\?|;)"
|
|
set query "p="
|
|
set safesearch url
|
|
set safesearch-str "&vm=r"
|
|
next
|
|
edit "g-yandex"
|
|
set hostname "yandex\\..*"
|
|
set url "^\\/((yand|images\\/|video\\/)(search)|search\\/)\\?"
|
|
set query "text="
|
|
set safesearch url
|
|
set safesearch-str "&family=yes"
|
|
next
|
|
edit "g-youtube"
|
|
set hostname ".*youtube.*"
|
|
set url ''
|
|
set query ''
|
|
set safesearch header
|
|
next
|
|
edit "g-yt-channel"
|
|
set hostname ''
|
|
set url "www.youtube.com/channel"
|
|
set query ''
|
|
set safesearch yt-channel
|
|
next
|
|
edit "g-yt-pattern"
|
|
set hostname ''
|
|
set url "youtube.com/channel/"
|
|
set query ''
|
|
set safesearch yt-pattern
|
|
next
|
|
edit "g-yt-scan-1"
|
|
set hostname ''
|
|
set url "www.youtube.com/user/"
|
|
set query ''
|
|
set safesearch yt-scan
|
|
next
|
|
edit "g-yt-scan-2"
|
|
set hostname ''
|
|
set url "www.youtube.com/youtubei/v1/browse"
|
|
set query ''
|
|
set safesearch yt-scan
|
|
next
|
|
edit "g-yt-scan-3"
|
|
set hostname ''
|
|
set url "www.youtube.com/youtubei/v1/player"
|
|
set query ''
|
|
set safesearch yt-scan
|
|
next
|
|
edit "g-yt-scan-4"
|
|
set hostname ''
|
|
set url "www.youtube.com/youtubei/v1/navigator"
|
|
set query ''
|
|
set safesearch yt-scan
|
|
next
|
|
edit "yt-video"
|
|
set hostname ''
|
|
set url "www.youtube.com/watch"
|
|
set query ''
|
|
set safesearch yt-video
|
|
next
|
|
end
|
|
config emailfilter profile
|
|
edit "sniffer-profile"
|
|
set comment "Malware and phishing URL monitoring."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set spam-log enable
|
|
set spam-filtering disable
|
|
unset options
|
|
config imap
|
|
set log-all disable
|
|
end
|
|
config pop3
|
|
set log-all disable
|
|
end
|
|
config smtp
|
|
set log-all disable
|
|
end
|
|
config msn-hotmail
|
|
set log-all disable
|
|
end
|
|
config gmail
|
|
set log-all disable
|
|
end
|
|
set spam-bword-threshold 10
|
|
unset spam-bword-table
|
|
unset spam-bal-table
|
|
unset spam-mheader-table
|
|
unset spam-iptrust-table
|
|
next
|
|
edit "default"
|
|
set comment "Malware and phishing URL filtering."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set spam-log enable
|
|
set spam-filtering disable
|
|
unset options
|
|
config imap
|
|
set log-all disable
|
|
end
|
|
config pop3
|
|
set log-all disable
|
|
end
|
|
config smtp
|
|
set log-all disable
|
|
end
|
|
config msn-hotmail
|
|
set log-all disable
|
|
end
|
|
config gmail
|
|
set log-all disable
|
|
end
|
|
set spam-bword-threshold 10
|
|
unset spam-bword-table
|
|
unset spam-bal-table
|
|
unset spam-mheader-table
|
|
unset spam-iptrust-table
|
|
next
|
|
end
|
|
config report layout
|
|
edit "default"
|
|
set title "FortiGate System Analysis Report"
|
|
set subtitle ''
|
|
set description ''
|
|
set style-theme "default-report"
|
|
set options include-table-of-content view-chart-as-heading
|
|
set format pdf
|
|
set schedule-type daily
|
|
set time 00:00
|
|
set cutoff-option run-time
|
|
set email-send disable
|
|
set max-pdf-report 31
|
|
config page
|
|
set paper letter
|
|
unset column-break-before
|
|
set page-break-before heading1
|
|
unset options
|
|
config header
|
|
set style ''
|
|
config header-item
|
|
edit 1
|
|
set description ''
|
|
set type image
|
|
set style "header-image"
|
|
set img-src "fortinet_logo_small.png"
|
|
next
|
|
end
|
|
end
|
|
config footer
|
|
set style ''
|
|
config footer-item
|
|
edit 1
|
|
set description ''
|
|
set type text
|
|
set style "footer-text"
|
|
set content "FortiGate ${schedule_type} Security Report - Host Name: ${hostname}"
|
|
next
|
|
edit 2
|
|
set description ''
|
|
set type text
|
|
set style "footer-pageno"
|
|
set content ''
|
|
next
|
|
end
|
|
end
|
|
end
|
|
config body-item
|
|
edit 101
|
|
set description ''
|
|
set type image
|
|
set style "report-cover1"
|
|
set img-src "fortigate_log.png"
|
|
next
|
|
edit 103
|
|
set description ''
|
|
set type text
|
|
set style "report-cover2"
|
|
set text-component text
|
|
set content "FortiGate ${schedule_type} Security Report"
|
|
next
|
|
edit 105
|
|
set description ''
|
|
set type text
|
|
set style "report-cover3"
|
|
set text-component text
|
|
set content "Report Date: ${started_time}"
|
|
next
|
|
edit 107
|
|
set description ''
|
|
set type text
|
|
set style "report-cover3"
|
|
set text-component text
|
|
set content "Data Range: ${report_data_range} (${hostname})"
|
|
next
|
|
edit 109
|
|
set description ''
|
|
set type text
|
|
set style "report-cover3"
|
|
set text-component text
|
|
set content "${vdom}"
|
|
next
|
|
edit 111
|
|
set description ''
|
|
set type image
|
|
set style "report-cover4"
|
|
set img-src "fortinet_logo_small.png"
|
|
next
|
|
edit 121
|
|
set description ''
|
|
set type misc
|
|
set misc-component page-break
|
|
next
|
|
edit 301
|
|
set description ''
|
|
set type text
|
|
set style ''
|
|
set text-component heading1
|
|
set content "Bandwidth and Applications"
|
|
next
|
|
edit 311
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.bandwidth.history_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 321
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.sessions.history_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 331
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.statistics"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 411
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.bandwidth.apps_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 421
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.bandwidth.cats_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 511
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.bandwidth.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 521
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.users.history.hour_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 611
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.bandwidth.destinations_tab"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1001
|
|
set description ''
|
|
set type text
|
|
set style ''
|
|
set text-component heading1
|
|
set content "Web Usage"
|
|
next
|
|
edit 1011
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.allowed-request.sites_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1021
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.bandwidth.sites_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1031
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.blocked-request.sites_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1041
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.blocked-request.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1051
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.requests.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1061
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.bandwidth.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1071
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.bandwidth.stream-sites_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1301
|
|
set description ''
|
|
set type text
|
|
set style ''
|
|
set text-component heading1
|
|
set content "Emails"
|
|
next
|
|
edit 1311
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "email.request.senders_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1321
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "email.bandwidth.senders_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1331
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "email.request.recipients_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1341
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "email.bandwidth.recipients_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1501
|
|
set description ''
|
|
set type text
|
|
set style ''
|
|
set text-component heading1
|
|
set content "Threats"
|
|
next
|
|
edit 1511
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "virus.count.viruses_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1531
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "virus.count.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1541
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "virus.count.sources_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1551
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "virus.count.history_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1561
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "botnet.count_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1571
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "botnet.count.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1581
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "botnet.count.sources_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1591
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "botnet.count.history_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1601
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "attack.count.attacks_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1611
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "attack.count.victims_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1621
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "attack.count.source_bar_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1631
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "attack.count.blocked_attacks_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1641
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "attack.count.severity_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1651
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "attack.count.history_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1701
|
|
set description ''
|
|
set type text
|
|
set style ''
|
|
set text-component heading1
|
|
set content "VPN Usage"
|
|
next
|
|
edit 1711
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "vpn.bandwidth.static-tunnels_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1721
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "vpn.bandwidth.dynamic-tunnels_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1731
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "vpn.bandwidth.ssl-tunnel.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1741
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "vpn.bandwidth.ssl-web.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1901
|
|
set description ''
|
|
set type text
|
|
set style ''
|
|
set text-component heading1
|
|
set content "Admin Login and System Events"
|
|
next
|
|
edit 1911
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "event.login.summary_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1931
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "event.failed.login_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1961
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "event.system.group_events_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config report setting
|
|
set pdf-report disable
|
|
set fortiview enable
|
|
set report-source forward-traffic
|
|
set web-browsing-threshold 3
|
|
set top-n 1000
|
|
end
|
|
config wanopt settings
|
|
set host-id "default-id"
|
|
set tunnel-ssl-algorithm high
|
|
set auto-detect-algorithm simple
|
|
set tunnel-optimization balanced
|
|
end
|
|
config wanopt peer
|
|
end
|
|
config wanopt auth-group
|
|
end
|
|
config wanopt profile
|
|
edit "default"
|
|
set transparent enable
|
|
set comments "Default WANopt profile."
|
|
set auth-group ''
|
|
config http
|
|
set status disable
|
|
set secure-tunnel disable
|
|
set byte-caching enable
|
|
set ssl disable
|
|
set prefer-chunking fix
|
|
set protocol-opt protocol
|
|
set tunnel-sharing private
|
|
end
|
|
config cifs
|
|
set status disable
|
|
set secure-tunnel disable
|
|
set byte-caching enable
|
|
set prefer-chunking fix
|
|
set protocol-opt protocol
|
|
set tunnel-sharing private
|
|
end
|
|
config mapi
|
|
set status disable
|
|
set secure-tunnel disable
|
|
set byte-caching enable
|
|
set tunnel-sharing private
|
|
end
|
|
config ftp
|
|
set status disable
|
|
set secure-tunnel disable
|
|
set byte-caching enable
|
|
set prefer-chunking fix
|
|
set protocol-opt protocol
|
|
set tunnel-sharing private
|
|
end
|
|
config tcp
|
|
set status disable
|
|
end
|
|
next
|
|
end
|
|
config system speed-test-server
|
|
end
|
|
config log memory setting
|
|
set status disable
|
|
end
|
|
config log disk setting
|
|
set status enable
|
|
set ips-archive enable
|
|
set max-policy-packet-capture-size 100
|
|
set log-quota 0
|
|
set dlp-archive-quota 0
|
|
set report-quota 0
|
|
set maximum-log-age 7
|
|
set upload disable
|
|
set full-first-warning-threshold 75
|
|
set full-second-warning-threshold 90
|
|
set full-final-warning-threshold 95
|
|
set max-log-file-size 20
|
|
set roll-schedule daily
|
|
set roll-time 00:00
|
|
set diskfull overwrite
|
|
end
|
|
config log eventfilter
|
|
set event enable
|
|
set system enable
|
|
set vpn enable
|
|
set user enable
|
|
set router enable
|
|
set wireless-activity enable
|
|
set wan-opt enable
|
|
set endpoint enable
|
|
set ha enable
|
|
set security-rating enable
|
|
set fortiextender enable
|
|
set connector enable
|
|
set sdwan enable
|
|
set cifs enable
|
|
set switch-controller enable
|
|
set webproxy enable
|
|
end
|
|
config log memory filter
|
|
set severity information
|
|
set forward-traffic enable
|
|
set local-traffic enable
|
|
set multicast-traffic enable
|
|
set sniffer-traffic enable
|
|
set ztna-traffic enable
|
|
set anomaly enable
|
|
set voip enable
|
|
end
|
|
config log disk filter
|
|
set severity information
|
|
set forward-traffic enable
|
|
set local-traffic enable
|
|
set multicast-traffic enable
|
|
set sniffer-traffic enable
|
|
set ztna-traffic enable
|
|
set anomaly enable
|
|
set voip enable
|
|
set dlp-archive enable
|
|
end
|
|
config log fortiguard override-setting
|
|
set override disable
|
|
set access-config enable
|
|
end
|
|
config log tacacs+accounting setting
|
|
set status disable
|
|
set source-ip ''
|
|
set interface-select-method auto
|
|
end
|
|
config log tacacs+accounting2 setting
|
|
set status disable
|
|
set source-ip ''
|
|
set interface-select-method auto
|
|
end
|
|
config log tacacs+accounting3 setting
|
|
set status disable
|
|
set source-ip ''
|
|
set interface-select-method auto
|
|
end
|
|
config log tacacs+accounting filter
|
|
set login-audit enable
|
|
set config-change-audit enable
|
|
set cli-cmd-audit disable
|
|
end
|
|
config log tacacs+accounting2 filter
|
|
set login-audit enable
|
|
set config-change-audit enable
|
|
set cli-cmd-audit disable
|
|
end
|
|
config log tacacs+accounting3 filter
|
|
set login-audit enable
|
|
set config-change-audit enable
|
|
set cli-cmd-audit disable
|
|
end
|
|
config log null-device setting
|
|
set status disable
|
|
end
|
|
config log null-device filter
|
|
set severity information
|
|
set forward-traffic enable
|
|
set local-traffic enable
|
|
set multicast-traffic enable
|
|
set sniffer-traffic enable
|
|
set ztna-traffic enable
|
|
set anomaly enable
|
|
set voip enable
|
|
end
|
|
config log setting
|
|
set resolve-ip disable
|
|
set resolve-port enable
|
|
set log-user-in-upper disable
|
|
set fwpolicy-implicit-log disable
|
|
set fwpolicy6-implicit-log disable
|
|
set log-invalid-packet disable
|
|
set local-in-allow enable
|
|
set local-in-deny-unicast enable
|
|
set local-in-deny-broadcast enable
|
|
set local-out enable
|
|
set local-out-ioc-detection enable
|
|
set daemon-log disable
|
|
set neighbor-event disable
|
|
set brief-traffic-format disable
|
|
set user-anonymize disable
|
|
set fortiview-weekly-data disable
|
|
set expolicy-implicit-log disable
|
|
set log-policy-comment disable
|
|
set faz-override disable
|
|
set syslog-override disable
|
|
set rest-api-set disable
|
|
set rest-api-get disable
|
|
end
|
|
config log gui-display
|
|
set resolve-hosts enable
|
|
set resolve-apps enable
|
|
set fortiview-unscanned-apps disable
|
|
end
|
|
config system lldp network-policy
|
|
end
|
|
config firewall schedule onetime
|
|
end
|
|
config firewall schedule recurring
|
|
edit "always"
|
|
set start 00:00
|
|
set end 00:00
|
|
set day sunday monday tuesday wednesday thursday friday saturday
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "none"
|
|
set start 00:00
|
|
set end 00:00
|
|
set day none
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "default-darrp-optimize"
|
|
set start 01:00
|
|
set end 01:30
|
|
set day sunday monday tuesday wednesday thursday friday saturday
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
end
|
|
config firewall schedule group
|
|
end
|
|
config firewall ippool
|
|
end
|
|
config firewall ippool6
|
|
end
|
|
config firewall ldb-monitor
|
|
end
|
|
config firewall vip
|
|
edit "FHV"
|
|
set id 0
|
|
set uuid b82ee578-1610-51e8-5ef6-e8370ccbb6f4
|
|
set comment ''
|
|
set type static-nat
|
|
set extip 118.67.217.122
|
|
set nat44 enable
|
|
set nat46 disable
|
|
set mappedip "192.168.1.100"
|
|
set extintf "3rd-Link"
|
|
set arp-reply enable
|
|
set nat-source-vip disable
|
|
set portforward enable
|
|
set gratuitous-arp-interval 0
|
|
set ssl-client-rekey-count 0
|
|
set color 0
|
|
set protocol tcp
|
|
set extport 10443
|
|
set mappedport 22
|
|
set portmapping-type 1-to-1
|
|
next
|
|
end
|
|
config firewall vip6
|
|
end
|
|
config firewall vipgrp
|
|
end
|
|
config firewall vipgrp6
|
|
end
|
|
config firewall ssh local-key
|
|
edit "g-Fortinet_SSH_DSA1024"
|
|
set password ENC pFFfxijmjbs/ZlYWOW5xMQ5tW5yPMAkUaHZTApp8EEgPggKtTbzg7mqzHVVst6QY599m9d3GjGRdBQZMUy29vXKUS4g29Kinmnsyj9vGfqXqYvVnQfAwIMAk4CwjmNrGU8RfQymQWxgdM2CizVecKLUIVGo0y6SQjba6Oj21qcoMfUw5D2FRbnz5RZJScXVOAgRKfA==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCCsc2D7A
|
|
O4qDYfXxVb5RSUAAAAEAAAAAEAAAGxAAAAB3NzaC1kc3MAAACBAMS+4XEri0vAnEcpawSE
|
|
aonawgM7jTatyBDkWZQkz5GApTwO5L1arpNUuOgZg115Or2doSVcxCtN/u79auu7Hy+1Oq
|
|
vVy1Vht4Tnj4teP45Pfqxb1T5ANhxlfG80SWi+hPAarZeNiMgQK9l+dZp4yfQQNTLULzyi
|
|
BpoeJnVSOSoLAAAAFQCWO4AICCOMPozW7SSviDrjcUEDfQAAAIABVmqI9Iz3TKUviuaEfx
|
|
kyw24WGR9kfBp4AXoCYjWf+21eh8M9+xGiOf6kayScyDvB2MkYhjB2Q+JCxClp/ckV3nrM
|
|
7svLU5wd3Cv7oyGm6mE/FVeZkdRgsiVkSwHVjnxsUsyKmxmLwcoQt5a+L56qy4DQ/T4QrQ
|
|
CUCIdlGsDy0AAAAIBy99SCy5/e6YcW0gThoPlGws0LpAjJniMZurMkX0UUcMDSsWrtcnJb
|
|
/HyafIWiNXW/4exOZk8V4Pd+THL1fLMnJgw9xyZeYjsyLufOyaSoldpqS2m1AOJk08EPrm
|
|
iRpUcoKh0tFuwUQU8dKx2Kx5M9UUp04/SnG1qYAamGVXaoLgAAAeDn2w4iToLUKtWXoH8U
|
|
dbWETBhfmNTD4pk60pXg4tijS1zGu2bzgTc5UlLqjB+EmAFhVrpXAfw9TCPXuoH8ZrwRJh
|
|
v9cmtWuMLBj6Tu4ovYTWag8Kh6LXbtbD/hSauZYZDJiJUl7nhfvjtK4oTQUUX7DXS3dtdH
|
|
hxP6WrsN3JOYnbSLQMEHmh/4ZubUM+PSP5ogGEphJO/hi4cA3GG4iD85etrUcyXA+bdGBR
|
|
g39U2TToZEHcuz7SIFfMBtLuG99SoT08wYQlzzR9ZJfhs99iYddtD7YWcxVh9VSesJ2i6R
|
|
PQtYTFBYTUY0/qnCviL1ZMm7URBcflWJnyOVyRdonZgR2CgR7jY4u+rgKVTnITHBe2WxvV
|
|
6TA3OC9uxmO2urtr3vTsOtLqJK3hdrxoCn1jYCbRqKeo4CSINB5i+9phriLQ83jMCp5NaZ
|
|
8yaWayteQXcIhBAKti+ndsvrj6UQx0ltkk17o/QYTy2oIpCGhM+0ubfz29msX/Fgf9vkrK
|
|
+FViZYMBJEUQ7Ntz2WwHOC/bcLr8RoHdWcusJ/7uKbXTWf5VMDC1Hg+dGbk6zmIZd8y0V0
|
|
8fttEP5Z9AnNi3T1pTUSEFxjpQofdXIL8y8Uut8WXMaoZJ8jqQYufvVtaBB3NMg=
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ssh-dss 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"
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_ECDSA256"
|
|
set password ENC tPzwr4xaJX/142vVTRtf4A5tUztGeFWjS/ukegU5Kh193z1lFDldd+b2bFPt+Aax2CMriCbzDnyMNE6VCB6dyvRl91QH32lxf1QdvH+LIc/3K65G1ueuCiFlm3XZ83DuvDLMdnbm0Q5C9YiKf3JEF870XoJNewxps59AGKaCQUY/B383Rc+EcwYh8DmEYB0BsUGjGg==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABA0Q3tLD+
|
|
dFrK1X0hDwEiEyAAAAEAAAAAEAAABoAAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlz
|
|
dHAyNTYAAABBBI7qFojD9363V6AtyoJU+yJQmp2hIdNAv0KAg+2iqJn6edGSkZeVuXa8ue
|
|
chXxhedXcaon1Bo2TlKH6ITmCAMFQAAACgKKWEsPw4CPtmUfVW7SpyDKpz68FPzs8xVcyb
|
|
ci86C5RuV5VOETT8t/hS0TRQm6OpHBGnUJ7oxx/gCcY40xlCOTUuatg4Kt3tN9z43gbnL9
|
|
DjACOSfBRQq18w2wDLDZsDPpf7mHL5ou2g5BZbKY9HslQh7N6mzhfR/1Hf+1PGrrdddDXM
|
|
Y/ta/1LrGriT/tjY6yJeuFzaxVU4ZUusEYting==
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBI7qFojD9363V6AtyoJU+yJQmp2hIdNAv0KAg+2iqJn6edGSkZeVuXa8uechXxhedXcaon1Bo2TlKH6ITmCAMFQ="
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_ECDSA384"
|
|
set password ENC Hrz5IZykjtaIIgOmAf5tgFFea0RRnzkoqe+1vbc8yzxAZwneJeHPttp4cl4FL7BeTO87J8FAFT9TMSJKX6doi2hPLO8bj19yl/k6xDGVgLfsHFAVS0d+sj3ochEY72txiEPWMlLHitoj6fKvLFHA67yk6BJYzhLQV6VUx5ZzOf+cjRE35e5UdolKRG+/nY1vVu75MQ==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCIeQz+rx
|
|
cNkpJYPCumwIx5AAAAEAAAAAEAAACIAAAAE2VjZHNhLXNoYTItbmlzdHAzODQAAAAIbmlz
|
|
dHAzODQAAABhBNjiQRHQuK+ZAVLpqq28qHmXgFHSR2vMwZMBKGci4aEmXwJSLrorwTjR7+
|
|
rH570WB2hecq3RP+4z1FyBYoiyiLq7cpDBVmajs2icMfPJEbaCqzRUb/2nxYHiQsPKI34E
|
|
rgAAANAhHdU5FnUynwmWJGmcEpYwiH1FmLH3XcAPtEsv/f0sR1NrkDAy70nrSg0QIfgoOa
|
|
RlRG3JKEieyttxeTTyS3+WB+weEm4adefxWqLH+mzJg+TzbjMWC0hd8mK+GKKg6sTvxnVE
|
|
W7+VCY0qRY9vqUav4/I53jEoETsop9v7ibKECPK/3c1dYIcAKnX0J64h3fZvj4+3jmOzwx
|
|
WN6YhLvf2cze+ADz6w8DtoT2PmT+dW9yViPHx3kGwar7jmOBUggwkfV4XT+CnMEsVFx8Kj
|
|
MIgY
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ecdsa-sha2-nistp384 AAAAE2VjZHNhLXNoYTItbmlzdHAzODQAAAAIbmlzdHAzODQAAABhBNjiQRHQuK+ZAVLpqq28qHmXgFHSR2vMwZMBKGci4aEmXwJSLrorwTjR7+rH570WB2hecq3RP+4z1FyBYoiyiLq7cpDBVmajs2icMfPJEbaCqzRUb/2nxYHiQsPKI34Erg=="
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_ECDSA521"
|
|
set password ENC u8KkmlyNVhoeastxjOx9BX3b1/Hh1N7q5FvLQVAqdMmf0E/Nc2scsOYhaqA3yS0i9nGDpsifwItN1La3VAv7Uz1gWoEXyUsx5QU+iA4untppZMrCz/1qbx0loeB/Zmyh/k4q8XiSyFeDys+DN7CtM+MoOjwD2hef2xIKq4JSU1mCU37rdO2Uw9mdkUTwoZS9XB0AJw==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCIhQKfZq
|
|
WpMaANE2lH2Nx0AAAAEAAAAAEAAACsAAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlz
|
|
dHA1MjEAAACFBACqneEJaZZLCOJ4MwQIa21hDIeBc9FX/cX286PVg0GppfJWAPEoAWrZgw
|
|
MnNBAls1xRAayrSjAmcCFnnsMA0uqOHAFfmIkqNC0Krb/qyaSnrXZMO+u39VecyLkwlg/m
|
|
UGsU9VyC8ubGG6G+hf7R0IZ3LdPFRBoP69WPaMlRYZYUdI2WUQAAAQDr0O5sP85Nt4SA7z
|
|
k8g/MzqbvzCWFEeID8uhKALq/dxhKzUSuNzAWqFxE4kDxf+c5xFtE0ZyhhHLemh5gdBTTM
|
|
kLjUue/e98qGnqxCHkhrLWWQFaeWGtZFpXERAiU2ypJYs5FxSETnOHy4kfqyUYYYP+Oar2
|
|
V/q9/cwMiwdN10Z7n51XwrxjymjXys5Njl4gExdjkREvXF2MnuWYEOXVmUsdOqPgTj5YEd
|
|
Qk+4DzwKvc3BTRcwnS+rKHLvBBKXRefJSNM/4MgSWbEcR/Fs1zkbFz0AHurSGGtOXwnoIw
|
|
6a4phhJqZ+DeIPSl3stNCMr/4Pq/7+yooplplX9r7yAlJa
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBACqneEJaZZLCOJ4MwQIa21hDIeBc9FX/cX286PVg0GppfJWAPEoAWrZgwMnNBAls1xRAayrSjAmcCFnnsMA0uqOHAFfmIkqNC0Krb/qyaSnrXZMO+u39VecyLkwlg/mUGsU9VyC8ubGG6G+hf7R0IZ3LdPFRBoP69WPaMlRYZYUdI2WUQ=="
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_ED25519"
|
|
set password ENC lLb0RRpBZT1kgKntnI1ZvZdLSfKfEvxuKCgbDHrSnmGN8E4YoUNvlDPFZ8CvNqTBTF+ax+GLzs4XgtyUzNvhtH2SEzPIBQjngtnkc8n6kd4+TgMFq+ejVLBB2+eok7eFHtQfFQCaShnhToQfPI4x2PH5tJ54yKfbiZBjU9pjqnoYIsnQJzA0CwmSeU6c5k7grEjL4w==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABANmtIKne
|
|
CI7yqyd3LwTmZhAAAAEAAAAAEAAAAzAAAAC3NzaC1lZDI1NTE5AAAAIBkU0tdoqAEA8Z+R
|
|
frW2pyHjnuyOFFAp4qBam1aDpO4wAAAAkEg5eRec4VKSVdmDS1J1vs2VY8uDSDJ6vulk4f
|
|
OLxJTy5cEsz+MzADfVt4H7malC/ol7Eax+FLctO9DAQWRxXsBBU2X5uAM5FnS4TYp7mHOY
|
|
U0RY8tU8VEY+8oClknnJ+NcJ7eJ3RhEhkX9qFsKLhVe/9MO8JVsqJO7Q/CcM70uoFhNgcf
|
|
u8TMSlBTOJnJ245w==
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBkU0tdoqAEA8Z+RfrW2pyHjnuyOFFAp4qBam1aDpO4w"
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_RSA2048"
|
|
set password ENC JA69+mRZcL9Bv7xgjwK2DJ+L7LGdqfJL/DeJJNusynY19zBU882B4Bq1bGbHGmP7AtJ9LfSqcNyX37tyV5fEsrRRV7vsRUmd6lrJYmfhxUXlRlMVvY1RwrnxW6+ZNSK+1mZYJWYMYrCLbYt17Ab16QXa1H3KYCjIYyOuMkZWOOiRjvZVKCvXTC9Es0Yl/vD6e82OWA==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCIxks//i
|
|
r/V0cczJOMcqwyAAAAEAAAAAEAAAEXAAAAB3NzaC1yc2EAAAADAQABAAABAQC7dywqSRiZ
|
|
KIHLNhfwQmGUnUJcp440VbLDXkL1A5EDXOc+ngDIMEaeAiq0Spbx/XkHx7wamsfCV8EMhz
|
|
7xZWYaJDicc/LWePPgAoAsHqfN7RXhsgZyTaqISUyvxOArLCUIFWwKga/no8ESfaXUhV0w
|
|
KjCc+iuc/y+28Cke27AMJKLMwyOuMSTdYTm9ipNhp/j+oPtooJaP/kpVZGUP7lMTIX0dnU
|
|
RknbgK/7rP7+D9oWqbHvwMBT5ncCh5B13N9q91nYRVkY1jdHdHkqnocdJ22Rl4DqjmHNaU
|
|
ZhT58y4HHWN8qfX1AA4sVO7/CkYPkTJE7mj1FwWlTm4w/uk0Qpt9AAADwCJbmKlqnqykt0
|
|
msxMzHLHO0v/MT6SfemhK9NlQsK2JDi7paYww98cDs1RUCtwV2EC3BtgoMYwryFRqCtLpS
|
|
RqqYe/gwPErpDW9cESKfVbbmTQsJqGivnlZtXfii9ugazC8jo6Y7PHFevkApINvbXRVWpD
|
|
I5k4UwkAcmj/gwaHjvxbaXtNSbVP5FqlZX8XkvAn+r/wQ7IN7UcO98smuAjYZuCo2r9vvM
|
|
vx189sKseQ5oeKkQ2EBLAtUoSovdsQ2irbx+eMUQYUf3h0OSo155q+l5Hf6cEAJx+0bPpB
|
|
XzJemgWuIl6okw1fBG0R8q6j5iJGyNnwCAMp86EWkeVe1e+fY7GTyXf2SepqsWYuGwkv0b
|
|
IEMxJkuJwhbgZKxEJMxYNlrjN5urraD4+3QGvViQkRunkm4Z8McHSnjw9b0Mjz/OrfynUr
|
|
c5cni1fbQHXaBpNI8obgKufvqSf2V9B2V+BhrPxVq1iFXw4COl6rxKVlCivilo/P0JU4xc
|
|
k/JnnlAl2uJvI4xuW6Ty/hQKXqHMU780QGa2xGMUlr64+g1XtaE/jUr8wmTkvd3crHDno9
|
|
lPKPnCkAwnfHVKm8S/fMq6IItdue+nlUMJ1gnOsQ1iBIqIBpm6Mu9EfkYSXLVLL4fcIqPQ
|
|
n49vPICLdkHXspC0Kph+xPT1kkaLJvH4/aRanuFYMmzAV8CEBhqU5yVptz9XMukCdn+mV1
|
|
/WhMjAClzHFlqUCIE1bLdKjjY+pjC+uVNctgAzxv8/08T4aeBGLh2ABfdyGwkeDMAD0vYr
|
|
/mtEo7tzC7nxQZG0h5AvSSF6vE/6wNtJ1HFfzXV/+700i3M00k5gUcK4ttzyYd8iCVvAXG
|
|
YcIa2uIMFdWpwcaDtca1lx7Z7g9TzWih+a53YuuUidEozBSPeLTc5rwLckUkrWLv1Z+F6Y
|
|
COh+wMqo4nYVRGTQpjqdkmHjNUTXh7B51rYlIOUoROak5oTmgbqsMCOqbdFqW9/N2h06To
|
|
c4CTFuUQTWDsIJ2whvsQAwznm9GCaQfjqT1xtgil9mRQiZKDBwfC1zQ+6RsWqviUOBPIbj
|
|
EzJyxOd7ZvIrtJXy2I3I1d1caH7FERMEHQeBFCa5n+S2KZ7J+Q9ZlN6beT/xFuOn00CaB8
|
|
Egx546ps6YDFHrcd0aIn0GW//NBZW2lu6mjYg45oR7L39bvoLu4x1TvmFeHWkVn/xVOr5O
|
|
nHkDZ2eKMkzqfus18aWNdPwStA45JuR9JWVFaJqTrrRLoKCKZ+jNbwJGH95pORW3Jt7DYa
|
|
156NdbMg==
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7dywqSRiZKIHLNhfwQmGUnUJcp440VbLDXkL1A5EDXOc+ngDIMEaeAiq0Spbx/XkHx7wamsfCV8EMhz7xZWYaJDicc/LWePPgAoAsHqfN7RXhsgZyTaqISUyvxOArLCUIFWwKga/no8ESfaXUhV0wKjCc+iuc/y+28Cke27AMJKLMwyOuMSTdYTm9ipNhp/j+oPtooJaP/kpVZGUP7lMTIX0dnURknbgK/7rP7+D9oWqbHvwMBT5ncCh5B13N9q91nYRVkY1jdHdHkqnocdJ22Rl4DqjmHNaUZhT58y4HHWN8qfX1AA4sVO7/CkYPkTJE7mj1FwWlTm4w/uk0Qpt9"
|
|
set source built-in
|
|
next
|
|
end
|
|
config firewall ssh local-ca
|
|
edit "g-Fortinet_SSH_CA"
|
|
set password ENC er8c4PSen+UOpDVVkUnxt2QMGrZhkq7CPRcNtXDxjlQOSmaYJLL8glvgsLVl2XfLfKEOdhHkiiZwE6sPKWXRrbYRejvQsU4sjY3D2FO3WbFTTBNFgxVT0e8gpeswvDehUZ6/aUoQQL194jet4LoCFaXFur5N/uVtpIOtyf9G5uXoCi3wGNuY+KzVz3u+R3H5ByZzjA==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABDyuh3zpN
|
|
HXpKIKCT7FetnEAAAAEAAAAAEAAAEXAAAAB3NzaC1yc2EAAAADAQABAAABAQDWiV0aIqNb
|
|
iSdn5/C+GqDwBa1aPB3i3cNCHh7AgAWMo2xJOFVgqrBH6cWYfJ/eB86ySooWMRbOuhmpTc
|
|
pa5Zx9e5erEX7QT5eLf/f2i03aWvoYGl5dOHRpJlsSe7AuUyak0A0eaOMODpiGdeyb7Xqe
|
|
YQ/uhEewIs/BgZgh68CVCrdDLVgWmTMdVV9DSrk9Zup+AnO2fSc7789Nu2Hj5fkmXe29us
|
|
mdnjPC288+qzbc2ToYOHfmVCXT72ZhV0LeD9L+HQUsiRVDDV8ErKQWSGv3+T8aQ5mrnygG
|
|
QLoo6m1exPqvvkdmgfuOXOMMy3FS3GkRGBmsVVMCwQQk8cy4D9TnAAADwAhUTQWWd9MyyI
|
|
ztaTmETZf2/1RpsN6Z11GieyoWFGT6OYJODzWPIpzsliGQ+wj3WoMq+CzrO1frsgpbhtHg
|
|
B2mC1zUBrvDNLlfaZCcQr3o1WpNKnb9sswriZIrKwHU+94yt02+z8ynVxH2/zwJpB4ax/P
|
|
npTymjyPR53bfsII5PBAerjzon7OR4dTuXjJc7I1iBcHlFeKDItbazxG4IsaRu0dreW9gf
|
|
S08r1DYc8sGJGUWowT8mijPUkJZBIQNhBo8w0PD1s1SYGDN5XJzEL02o5OwzI2lbTt/asj
|
|
FNPT4NlIF6GPcr8g7aB0/FhVsFizEM6ZPjgRoZrj5vmYxwInSQ6ieGxrnTwR+i3VedfrVY
|
|
lvaEsn3V7RrFKqCXb2ZLgridblGMSv4gFcnAQfkcoJgFNsjcEg5EIRnEBrXH6Mxz0z0wcG
|
|
WswaXzvqejxoGkXXEhbPpdx76mAbvmZms+Ui0yytpWgaTPkg+wyrAr6l/uIeXoPDaeZbS3
|
|
WzQGKCkvFWpPPH1zlHK+Sf6kzGMXvyz/q9I23ZAHMFUzYH5vi8dsLG0mItxWwIIaJQ24V/
|
|
I7/z4v6MDS72p/OiKk7quU2rAiekZa1yMkiQ0Phoi6EKwXUpQGGK0hR7nlljYmX2I7aCbf
|
|
smL2YwplikCtKkTyouBUtqlMtrgDIvwRtgaW0NureDAGsrELdDMX+8aAvkILKb1eSxX2c/
|
|
Jev9kBvHLuMZN5qTxdONnRs75Hb+u1Yr1VJymwZET9uQsHOvEnDV61giCG4d4ENy8TmMx6
|
|
i2lVEdzQCLXB1wuW3fKZPAnPKj7ruCekqm4SX7frRyC0yad0VCsvlOSqsFdq6CN8SSShaF
|
|
Z/zTGAEp/kje49O/mrDUiG28yN/hCGoeHdHhNxgpq/UTIrf4ZUAC6xyesp3eKcVje/P8L7
|
|
219eRzyI+E/STBA0XCuESg0LXgEWRwnTA0W8YGUUgPyvxmh/thCtiJN/voFwJIzniIYUTx
|
|
HdAzfuhRRCGOm41ogMMvve+muMw2c/KFMDW+8mFK6RlOL0Sp+E/NQj/TYXM6xVGTbRz+BA
|
|
6tNUzFqorIRqOXC/4nGxx+iatAhdVqpMmW+pKKtMxeZ+ah5A6OwPUqhEuboHJVtLHvLYa4
|
|
u7mBZ5hOQjyZxOgW2ya4hrPbevbOGbuh+vNqsiowzvMsh9i+tjAq4mgg/pbWqe4C60R5Fi
|
|
7VXOj/P8aZLri7BuiPGXa2PdwS7pZOjTZZyaktwuxZT1WnrnVMgQdCm2WxdmTax3DChBh0
|
|
v0Cb0bDw==
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWiV0aIqNbiSdn5/C+GqDwBa1aPB3i3cNCHh7AgAWMo2xJOFVgqrBH6cWYfJ/eB86ySooWMRbOuhmpTcpa5Zx9e5erEX7QT5eLf/f2i03aWvoYGl5dOHRpJlsSe7AuUyak0A0eaOMODpiGdeyb7XqeYQ/uhEewIs/BgZgh68CVCrdDLVgWmTMdVV9DSrk9Zup+AnO2fSc7789Nu2Hj5fkmXe29usmdnjPC288+qzbc2ToYOHfmVCXT72ZhV0LeD9L+HQUsiRVDDV8ErKQWSGv3+T8aQ5mrnygGQLoo6m1exPqvvkdmgfuOXOMMy3FS3GkRGBmsVVMCwQQk8cy4D9Tn"
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_CA_Untrusted"
|
|
set password ENC GLF4uJyBHaiK7gY29ZX34YnCPr4jZwaJxoNUgcstq6CImwnIb3Pc56VEyzy0cWDDzlNdvflFi8rDr1Z69+4RNwhvcmcb24C0VGDDxEsPQRTKKwrR5k66bL33T8pf92z3LxXEWw4TgXVwV5ju7ZAFKCJ7jtaLu/Ri+d5ajp2bR2sH0nPiTGreZ0+OQeSWRlsWCacPFA==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABBQl4Zet4
|
|
cT1vY5gtR7Al7bAAAAEAAAAAEAAAEXAAAAB3NzaC1yc2EAAAADAQABAAABAQDYUFiCOzZ8
|
|
jkWReh8ohyBpy6ZHkccvy13tZdDl9QYc14NBf6PCr2AgfvKh34LBqvjkXG3dOt4Mf8viDy
|
|
FiHIsUhBOyUvVWGb5nYSYYGyH5a7jIQ6hHT3ycjsfpZKVCp9QOpdAQ3mSkbmSjCgvdLr1c
|
|
A5uKsqdo5yXDFMUqM7a30JMkS1OyUC6/wdkGkx5LfaBySqw7huTcHGGxnAq7EIkvdBpoAL
|
|
wOW8s/BBX1/MEorJ1dJULbBUz0myAWwHF7Nh1EP09w3bPGeJrJYzABJOJaSNvYTLzvw2p1
|
|
odmDu+Z/+0J494OV8CT0fsk8Z8O85dknUeQRulYBJesqeURy280zAAADwLuyDsegVHlUsH
|
|
h0bEoYb+d8lT6ntoUGgLX8ntGmEWgrGXX4Sw2k0L5yHGeLG+hUvBXY2fOfJUVjCkoqlwEf
|
|
0Y10tKUVDJl1tBTzYYyB6H1ZszMyiWWbr+ytDs11wJ86WhM2n4udyrMsjVQmURNN2nTlvF
|
|
Q4Z+rMAOC//1OtB1LDDMU4FWw1J50QUoYQ1lsNt2XLfMIECm4Adm9ucYbrXUyiceegnBDU
|
|
bCL73uQg3dBPkIUQvt4di28TUChDKsHO2TkyrYU2+9I+PIiphdsDmMc/Q0P0QnuYFomWI+
|
|
3vhNU9Ht0FoKD3dzAxDj81H2AzHAx3pU8uuhFgA8tIEPaT5bjgY6Xws0Ret771sjYLbM5F
|
|
7LHBFl+lkB2sEK3BWjd/Mj5VpLebwiZOUyLgrEESb+4vNlU82n15G08bxrOo/4vMKsrnCL
|
|
3JFIGKzCseZFd4VE8BZBp89H1Nr+TmDRArqUZ4B7FHGVPUjW+SAE7T2m3Ujz1A4J9l0KQ4
|
|
7OK4kaziRPkpaZb7XccP4lDalcxJRC+zjF/hlor/YlDIBpghYAw1JLMgPbG1uuEnKNuGIv
|
|
1gfGML2U/bQSRbygUVk6nos9i4SdBfWMSNkYYfXTJ6NYTbopMAZ0VK1X9IDgoN91ZNoRbB
|
|
M4BWCghcmm6eEF15tqDQ4nJ9caZMMeE4vUNKuF5T5It4LuBLafPWYZUeuKmiJecFqxjr8M
|
|
uhq0d91LSQwwH8tANq6Nt/Hj/lubSomjxGGRkhtz0fNpE5gM6LJNa5R7VIFu8PHXHOGypC
|
|
Z0PTTa2r+L8AnzwjMv1H5dISOm3zF1AYZ9HG6a8MJn8z3SpeAUM1iqeQ488/ppmYlX0d5T
|
|
JYHZoDFhBGvy3xtLZQ6j4/4IZga8HgHHxz7Ch2KdMzQiFUaMIOfixd5ljVVKiOi/VdvBFn
|
|
3e5piSYFyCfvHpjK+YOQ9nLXigLwUbDgS2BiZ+gMdydKQX42+JXU+/ICItdZl+wP7mkai+
|
|
xqTFDS4oOu637kfKI6ChT/Fsey5Ylip5IcfRg0Ubyow0omxW4o/J+S/bFIlGHSgb9PUs+T
|
|
x2c9IXXcclt31xkCz+JASa6LW+ldUUvEMiv3uW84Un5D6vFByX8lEV6FOc27QUCIYgWjqV
|
|
jAgZg4FmI+bj3/kRaLVjpxcjEGZjfxNn3gRAgeETWSLzAUyF8CN9vzV8+K64AuJNa5J2tx
|
|
+qezsx6kJTHdy3OoztCoFmgU29BBn0b7Ip4u9agaW53R7N4tjwPKg9IrDEqTIAmY+O2nk7
|
|
rM5cY3OQ==
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYUFiCOzZ8jkWReh8ohyBpy6ZHkccvy13tZdDl9QYc14NBf6PCr2AgfvKh34LBqvjkXG3dOt4Mf8viDyFiHIsUhBOyUvVWGb5nYSYYGyH5a7jIQ6hHT3ycjsfpZKVCp9QOpdAQ3mSkbmSjCgvdLr1cA5uKsqdo5yXDFMUqM7a30JMkS1OyUC6/wdkGkx5LfaBySqw7huTcHGGxnAq7EIkvdBpoALwOW8s/BBX1/MEorJ1dJULbBUz0myAWwHF7Nh1EP09w3bPGeJrJYzABJOJaSNvYTLzvw2p1odmDu+Z/+0J494OV8CT0fsk8Z8O85dknUeQRulYBJesqeURy280z"
|
|
set source built-in
|
|
next
|
|
end
|
|
config firewall ssh setting
|
|
set caname "g-Fortinet_SSH_CA"
|
|
set untrusted-caname "g-Fortinet_SSH_CA_Untrusted"
|
|
set hostkey-rsa2048 "g-Fortinet_SSH_RSA2048"
|
|
set hostkey-dsa1024 "g-Fortinet_SSH_DSA1024"
|
|
set hostkey-ecdsa256 "g-Fortinet_SSH_ECDSA256"
|
|
set hostkey-ecdsa384 "g-Fortinet_SSH_ECDSA384"
|
|
set hostkey-ecdsa521 "g-Fortinet_SSH_ECDSA521"
|
|
set hostkey-ed25519 "g-Fortinet_SSH_ED25519"
|
|
set host-trusted-checking enable
|
|
end
|
|
config firewall ssh host-key
|
|
end
|
|
config firewall decrypted-traffic-mirror
|
|
end
|
|
config firewall access-proxy-virtual-host
|
|
end
|
|
config firewall access-proxy-ssh-client-cert
|
|
end
|
|
config firewall access-proxy
|
|
end
|
|
config firewall access-proxy6
|
|
end
|
|
config firewall ipmacbinding setting
|
|
set bindthroughfw disable
|
|
set bindtofw disable
|
|
end
|
|
config firewall ipmacbinding table
|
|
end
|
|
config firewall profile-protocol-options
|
|
edit "default"
|
|
set comment "All services."
|
|
set replacemsg-group ''
|
|
set oversize-log disable
|
|
set switching-protocols-log disable
|
|
config http
|
|
set ports 80
|
|
set status enable
|
|
set inspect-all disable
|
|
set proxy-after-tcp-handshake disable
|
|
unset options
|
|
set comfort-interval 10
|
|
set comfort-amount 1
|
|
set range-block disable
|
|
set strip-x-forwarded-for disable
|
|
unset post-lang
|
|
set streaming-content-bypass enable
|
|
set switching-protocols bypass
|
|
set unknown-http-version reject
|
|
set tunnel-non-http enable
|
|
set h2c disable
|
|
set unknown-content-encoding block
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set stream-based-uncompressed-limit 0
|
|
set scan-bzip2 enable
|
|
set verify-dns-for-policy-matching enable
|
|
set block-page-status-code 403
|
|
set retry-count 0
|
|
set tcp-window-type auto-tuning
|
|
set ssl-offloaded no
|
|
set address-ip-rating enable
|
|
end
|
|
config ftp
|
|
set ports 21
|
|
set status enable
|
|
set inspect-all disable
|
|
set options splice
|
|
set comfort-interval 10
|
|
set comfort-amount 1
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set stream-based-uncompressed-limit 0
|
|
set scan-bzip2 enable
|
|
set tcp-window-type auto-tuning
|
|
set ssl-offloaded no
|
|
set explicit-ftp-tls disable
|
|
end
|
|
config imap
|
|
set ports 143
|
|
set status enable
|
|
set inspect-all disable
|
|
set proxy-after-tcp-handshake disable
|
|
set options fragmail
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
set ssl-offloaded no
|
|
end
|
|
config mapi
|
|
set ports 135
|
|
set status enable
|
|
set options fragmail
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
end
|
|
config pop3
|
|
set ports 110
|
|
set status enable
|
|
set inspect-all disable
|
|
set proxy-after-tcp-handshake disable
|
|
set options fragmail
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
set ssl-offloaded no
|
|
end
|
|
config smtp
|
|
set ports 25
|
|
set status enable
|
|
set inspect-all disable
|
|
set proxy-after-tcp-handshake disable
|
|
set options fragmail splice
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
set server-busy disable
|
|
set ssl-offloaded no
|
|
end
|
|
config nntp
|
|
set ports 119
|
|
set status enable
|
|
set inspect-all disable
|
|
set proxy-after-tcp-handshake disable
|
|
set options splice
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
end
|
|
config ssh
|
|
unset options
|
|
set comfort-interval 10
|
|
set comfort-amount 1
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set stream-based-uncompressed-limit 0
|
|
set scan-bzip2 enable
|
|
set tcp-window-type auto-tuning
|
|
set ssl-offloaded no
|
|
end
|
|
config dns
|
|
set ports 53
|
|
set status enable
|
|
end
|
|
config cifs
|
|
set ports 445
|
|
set status enable
|
|
unset options
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
set tcp-window-type auto-tuning
|
|
set server-credential-type none
|
|
end
|
|
config mail-signature
|
|
set status disable
|
|
set signature ''
|
|
end
|
|
set rpc-over-http disable
|
|
next
|
|
end
|
|
config firewall ssl-ssh-profile
|
|
edit "no-inspection"
|
|
set comment "Read-only profile that does no inspection."
|
|
config ssl
|
|
set inspect-all disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config https
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set sni-server-cert-check enable
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config ftps
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config imaps
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config pop3s
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config smtps
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config ssh
|
|
set ports 22
|
|
set status disable
|
|
set inspect-all disable
|
|
set unsupported-version bypass
|
|
set ssh-tun-policy-check disable
|
|
set ssh-algorithm compatible
|
|
end
|
|
config dot
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
set block-blocklisted-certificates enable
|
|
set caname "Fortinet_CA_SSL"
|
|
set ssl-anomaly-log enable
|
|
set ssl-negotiation-log disable
|
|
set ssl-server-cert-log disable
|
|
set ssl-handshake-log disable
|
|
next
|
|
edit "custom-deep-inspection"
|
|
set comment "Customizable deep inspection profile."
|
|
config ssl
|
|
set inspect-all disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config https
|
|
set ports 443
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set sni-server-cert-check enable
|
|
set cert-probe-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config ftps
|
|
set ports 990
|
|
set status deep-inspection
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config imaps
|
|
set ports 993
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config pop3s
|
|
set ports 995
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config smtps
|
|
set ports 465
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config ssh
|
|
set ports 22
|
|
set status disable
|
|
set inspect-all disable
|
|
set unsupported-version bypass
|
|
set ssh-tun-policy-check disable
|
|
set ssh-algorithm compatible
|
|
end
|
|
config dot
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
set allowlist disable
|
|
set block-blocklisted-certificates enable
|
|
config ssl-exempt
|
|
edit 1
|
|
set type fortiguard-category
|
|
set fortiguard-category 31
|
|
next
|
|
edit 2
|
|
set type fortiguard-category
|
|
set fortiguard-category 33
|
|
next
|
|
edit 3
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-android"
|
|
next
|
|
edit 4
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-apple"
|
|
next
|
|
edit 5
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-appstore"
|
|
next
|
|
edit 6
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-citrix"
|
|
next
|
|
edit 7
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-eease"
|
|
next
|
|
edit 8
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-drive"
|
|
next
|
|
edit 9
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-play"
|
|
next
|
|
edit 10
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-play2"
|
|
next
|
|
edit 11
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-play3"
|
|
next
|
|
edit 12
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-Gotomeeting"
|
|
next
|
|
edit 13
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-microsoft"
|
|
next
|
|
edit 14
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-update.microsoft.com"
|
|
next
|
|
edit 15
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-adobe"
|
|
next
|
|
edit 16
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-Adobe Login"
|
|
next
|
|
edit 17
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-dropbox.com"
|
|
next
|
|
edit 18
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-fortinet"
|
|
next
|
|
edit 19
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-googleapis.com"
|
|
next
|
|
edit 20
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-icloud"
|
|
next
|
|
edit 21
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-itunes"
|
|
next
|
|
edit 22
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-skype"
|
|
next
|
|
edit 23
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-swscan.apple.com"
|
|
next
|
|
edit 24
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-verisign"
|
|
next
|
|
edit 25
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-Windows update 2"
|
|
next
|
|
edit 26
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-auth.gfx.ms"
|
|
next
|
|
edit 27
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-autoupdate.opera.com"
|
|
next
|
|
edit 28
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-softwareupdate.vmware.com"
|
|
next
|
|
edit 29
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-firefox update server"
|
|
next
|
|
edit 30
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-cdn-apple"
|
|
next
|
|
edit 31
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-mzstatic-apple"
|
|
next
|
|
end
|
|
set server-cert-mode re-sign
|
|
set caname "Fortinet_CA_SSL"
|
|
set untrusted-caname "Fortinet_CA_Untrusted"
|
|
set ssl-exemption-ip-rating enable
|
|
set ssl-exemption-log disable
|
|
set ssl-anomaly-log enable
|
|
set ssl-negotiation-log disable
|
|
set ssl-server-cert-log disable
|
|
set ssl-handshake-log disable
|
|
set rpc-over-https disable
|
|
set mapi-over-https disable
|
|
set supported-alpn all
|
|
set use-ssl-server disable
|
|
next
|
|
edit "certificate-inspection"
|
|
set comment "Read-only SSL handshake inspection profile."
|
|
config ssl
|
|
set inspect-all disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config https
|
|
set ports 443
|
|
set status certificate-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set sni-server-cert-check enable
|
|
set cert-probe-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config ftps
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config imaps
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config pop3s
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config smtps
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config ssh
|
|
set ports 22
|
|
set status disable
|
|
set inspect-all disable
|
|
set unsupported-version bypass
|
|
set ssh-tun-policy-check disable
|
|
set ssh-algorithm compatible
|
|
end
|
|
config dot
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
set block-blocklisted-certificates enable
|
|
set caname "Fortinet_CA_SSL"
|
|
set ssl-anomaly-log enable
|
|
set ssl-negotiation-log disable
|
|
set ssl-server-cert-log disable
|
|
set ssl-handshake-log disable
|
|
next
|
|
edit "deep-inspection"
|
|
set comment "Read-only deep inspection profile."
|
|
config ssl
|
|
set inspect-all disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config https
|
|
set ports 443
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set sni-server-cert-check enable
|
|
set cert-probe-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config ftps
|
|
set ports 990
|
|
set status deep-inspection
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config imaps
|
|
set ports 993
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config pop3s
|
|
set ports 995
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config smtps
|
|
set ports 465
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config ssh
|
|
set ports 22
|
|
set status disable
|
|
set inspect-all disable
|
|
set unsupported-version bypass
|
|
set ssh-tun-policy-check disable
|
|
set ssh-algorithm compatible
|
|
end
|
|
config dot
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
set allowlist disable
|
|
set block-blocklisted-certificates enable
|
|
config ssl-exempt
|
|
edit 1
|
|
set type fortiguard-category
|
|
set fortiguard-category 31
|
|
next
|
|
edit 2
|
|
set type fortiguard-category
|
|
set fortiguard-category 33
|
|
next
|
|
edit 3
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-adobe"
|
|
next
|
|
edit 4
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-Adobe Login"
|
|
next
|
|
edit 5
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-android"
|
|
next
|
|
edit 6
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-apple"
|
|
next
|
|
edit 7
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-appstore"
|
|
next
|
|
edit 8
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-auth.gfx.ms"
|
|
next
|
|
edit 9
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-citrix"
|
|
next
|
|
edit 10
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-dropbox.com"
|
|
next
|
|
edit 11
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-eease"
|
|
next
|
|
edit 12
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-firefox update server"
|
|
next
|
|
edit 13
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-fortinet"
|
|
next
|
|
edit 14
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-googleapis.com"
|
|
next
|
|
edit 15
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-drive"
|
|
next
|
|
edit 16
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-play2"
|
|
next
|
|
edit 17
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-play3"
|
|
next
|
|
edit 18
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-Gotomeeting"
|
|
next
|
|
edit 19
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-icloud"
|
|
next
|
|
edit 20
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-itunes"
|
|
next
|
|
edit 21
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-microsoft"
|
|
next
|
|
edit 22
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-skype"
|
|
next
|
|
edit 23
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-softwareupdate.vmware.com"
|
|
next
|
|
edit 24
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-verisign"
|
|
next
|
|
edit 25
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-Windows update 2"
|
|
next
|
|
edit 26
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-live.com"
|
|
next
|
|
edit 27
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-play"
|
|
next
|
|
edit 28
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-update.microsoft.com"
|
|
next
|
|
edit 29
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-swscan.apple.com"
|
|
next
|
|
edit 30
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-autoupdate.opera.com"
|
|
next
|
|
edit 31
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-cdn-apple"
|
|
next
|
|
edit 32
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-mzstatic-apple"
|
|
next
|
|
end
|
|
set server-cert-mode re-sign
|
|
set caname "Fortinet_CA_SSL"
|
|
set untrusted-caname "Fortinet_CA_Untrusted"
|
|
set ssl-exemption-ip-rating enable
|
|
set ssl-exemption-log disable
|
|
set ssl-anomaly-log enable
|
|
set ssl-negotiation-log disable
|
|
set ssl-server-cert-log disable
|
|
set ssl-handshake-log disable
|
|
set rpc-over-https disable
|
|
set mapi-over-https disable
|
|
set supported-alpn all
|
|
set use-ssl-server disable
|
|
next
|
|
end
|
|
config waf profile
|
|
edit "default"
|
|
set external disable
|
|
set extended-log disable
|
|
config signature
|
|
config main-class 100000000
|
|
set status disable
|
|
set action block
|
|
set log disable
|
|
set severity high
|
|
end
|
|
config main-class 20000000
|
|
set status disable
|
|
set action allow
|
|
set log disable
|
|
set severity medium
|
|
end
|
|
config main-class 30000000
|
|
set status enable
|
|
set action block
|
|
set log disable
|
|
set severity high
|
|
end
|
|
config main-class 40000000
|
|
set status disable
|
|
set action allow
|
|
set log disable
|
|
set severity medium
|
|
end
|
|
config main-class 50000000
|
|
set status enable
|
|
set action block
|
|
set log disable
|
|
set severity high
|
|
end
|
|
config main-class 60000000
|
|
set status disable
|
|
set action allow
|
|
set log disable
|
|
set severity medium
|
|
end
|
|
config main-class 70000000
|
|
set status enable
|
|
set action block
|
|
set log disable
|
|
set severity high
|
|
end
|
|
config main-class 80000000
|
|
set status enable
|
|
set action allow
|
|
set log disable
|
|
set severity low
|
|
end
|
|
config main-class 110000000
|
|
set status enable
|
|
set action allow
|
|
set log disable
|
|
set severity high
|
|
end
|
|
config main-class 90000000
|
|
set status enable
|
|
set action block
|
|
set log disable
|
|
set severity high
|
|
end
|
|
set disabled-signature 80080005 80200001 60030001 60120001 80080003 90410001 90410002
|
|
set credit-card-detection-threshold 3
|
|
end
|
|
config constraint
|
|
config header-length
|
|
set status enable
|
|
set length 8192
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config content-length
|
|
set status enable
|
|
set length 67108864
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config param-length
|
|
set status enable
|
|
set length 8192
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config line-length
|
|
set status enable
|
|
set length 1024
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config url-param-length
|
|
set status enable
|
|
set length 8192
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config version
|
|
set status disable
|
|
set action allow
|
|
set log enable
|
|
set severity medium
|
|
end
|
|
config method
|
|
set status disable
|
|
set action block
|
|
set log enable
|
|
set severity medium
|
|
end
|
|
config hostname
|
|
set status disable
|
|
set action block
|
|
set log enable
|
|
set severity medium
|
|
end
|
|
config malformed
|
|
set status disable
|
|
set action allow
|
|
set log enable
|
|
set severity medium
|
|
end
|
|
config max-cookie
|
|
set status enable
|
|
set max-cookie 16
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config max-header-line
|
|
set status enable
|
|
set max-header-line 32
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config max-url-param
|
|
set status enable
|
|
set max-url-param 16
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config max-range-segment
|
|
set status enable
|
|
set max-range-segment 5
|
|
set action allow
|
|
set log enable
|
|
set severity high
|
|
end
|
|
end
|
|
config method
|
|
set status disable
|
|
set log disable
|
|
set severity medium
|
|
unset default-allowed-methods
|
|
end
|
|
config address-list
|
|
set status disable
|
|
set blocked-log disable
|
|
set severity medium
|
|
end
|
|
set comment ''
|
|
next
|
|
end
|
|
config firewall profile-group
|
|
end
|
|
config firewall ssl-server
|
|
end
|
|
config firewall identity-based-route
|
|
end
|
|
config firewall auth-portal
|
|
set portal-addr ''
|
|
set portal-addr6 ''
|
|
set identity-based-route ''
|
|
set proxy-auth disable
|
|
end
|
|
config firewall policy
|
|
edit 1
|
|
set status enable
|
|
set name "FHV"
|
|
set uuid fd4f2d20-1610-51e8-5cae-7b460309780e
|
|
set srcintf "3rd-Link"
|
|
set dstintf "mgmt1"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "FHV"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "HTTPS" "SSH"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
end
|
|
config firewall shaping-policy
|
|
end
|
|
config firewall shaping-profile
|
|
end
|
|
config firewall local-in-policy
|
|
end
|
|
config firewall local-in-policy6
|
|
end
|
|
config firewall ttl-policy
|
|
end
|
|
config firewall proxy-policy
|
|
end
|
|
config firewall dnstranslation
|
|
end
|
|
config firewall multicast-policy
|
|
end
|
|
config firewall multicast-policy6
|
|
end
|
|
config firewall interface-policy
|
|
end
|
|
config firewall interface-policy6
|
|
end
|
|
config firewall DoS-policy
|
|
end
|
|
config firewall DoS-policy6
|
|
end
|
|
config firewall sniffer
|
|
end
|
|
config firewall acl
|
|
end
|
|
config firewall acl6
|
|
end
|
|
config firewall central-snat-map
|
|
end
|
|
config firewall ip-translation
|
|
end
|
|
config authentication scheme
|
|
end
|
|
config authentication rule
|
|
end
|
|
config authentication setting
|
|
set active-auth-scheme ''
|
|
set sso-auth-scheme ''
|
|
set update-time 0000-00-00 00:00:00
|
|
set persistent-cookie enable
|
|
set ip-auth-cookie disable
|
|
set cookie-max-age 480
|
|
set cookie-refresh-div 2
|
|
set captive-portal-type fqdn
|
|
set captive-portal ''
|
|
set captive-portal6 ''
|
|
set cert-auth disable
|
|
set captive-portal-port 7830
|
|
set auth-https enable
|
|
set captive-portal-ssl-port 7831
|
|
end
|
|
config system speed-test-schedule
|
|
end
|
|
config switch-controller switch-interface-tag
|
|
end
|
|
config switch-controller 802-1X-settings
|
|
set link-down-auth set-unauth
|
|
set reauth-period 60
|
|
set max-reauth-attempt 3
|
|
set tx-period 30
|
|
set mab-reauth disable
|
|
end
|
|
config switch-controller security-policy 802-1X
|
|
edit "802-1X-policy-default"
|
|
set security-mode 802.1X
|
|
set user-group "SSO_Guest_Users"
|
|
set mac-auth-bypass disable
|
|
set open-auth disable
|
|
set eap-passthru enable
|
|
set eap-auto-untagged-vlans enable
|
|
set guest-vlan disable
|
|
set guest-auth-delay 30
|
|
set auth-fail-vlan disable
|
|
set framevid-apply enable
|
|
set radius-timeout-overwrite disable
|
|
set policy-type 802.1X
|
|
set authserver-timeout-vlan disable
|
|
next
|
|
end
|
|
config switch-controller security-policy local-access
|
|
edit "default"
|
|
set mgmt-allowaccess https ping ssh
|
|
set internal-allowaccess https ping ssh
|
|
next
|
|
end
|
|
config switch-controller location
|
|
end
|
|
config switch-controller lldp-settings
|
|
set tx-hold 4
|
|
set tx-interval 30
|
|
set fast-start-interval 2
|
|
set management-interface internal
|
|
set device-detection enable
|
|
end
|
|
config switch-controller lldp-profile
|
|
edit "default"
|
|
set med-tlvs inventory-management network-policy
|
|
unset 802.1-tlvs
|
|
unset 802.3-tlvs
|
|
set auto-isl disable
|
|
config med-network-policy
|
|
edit "voice"
|
|
set status disable
|
|
next
|
|
edit "voice-signaling"
|
|
set status disable
|
|
next
|
|
edit "guest-voice"
|
|
set status disable
|
|
next
|
|
edit "guest-voice-signaling"
|
|
set status disable
|
|
next
|
|
edit "softphone-voice"
|
|
set status disable
|
|
next
|
|
edit "video-conferencing"
|
|
set status disable
|
|
next
|
|
edit "streaming-video"
|
|
set status disable
|
|
next
|
|
edit "video-signaling"
|
|
set status disable
|
|
next
|
|
end
|
|
next
|
|
edit "default-auto-isl"
|
|
unset med-tlvs
|
|
unset 802.1-tlvs
|
|
unset 802.3-tlvs
|
|
set auto-isl enable
|
|
set auto-isl-hello-timer 3
|
|
set auto-isl-receive-timeout 60
|
|
set auto-isl-port-group 0
|
|
set auto-mclag-icl disable
|
|
next
|
|
edit "default-auto-mclag-icl"
|
|
unset med-tlvs
|
|
unset 802.1-tlvs
|
|
unset 802.3-tlvs
|
|
set auto-isl enable
|
|
set auto-isl-hello-timer 3
|
|
set auto-isl-receive-timeout 60
|
|
set auto-isl-port-group 0
|
|
set auto-mclag-icl enable
|
|
next
|
|
end
|
|
config switch-controller qos dot1p-map
|
|
edit "voice-dot1p"
|
|
set description ''
|
|
set egress-pri-tagging disable
|
|
set priority-0 queue-4
|
|
set priority-1 queue-4
|
|
set priority-2 queue-3
|
|
set priority-3 queue-2
|
|
set priority-4 queue-3
|
|
set priority-5 queue-1
|
|
set priority-6 queue-2
|
|
set priority-7 queue-2
|
|
next
|
|
end
|
|
config switch-controller qos ip-dscp-map
|
|
edit "voice-dscp"
|
|
set description ''
|
|
config map
|
|
edit "1"
|
|
set cos-queue 1
|
|
set value 46
|
|
next
|
|
edit "2"
|
|
set cos-queue 2
|
|
set value 24,26,48,56
|
|
next
|
|
edit "5"
|
|
set cos-queue 3
|
|
set value 34
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config switch-controller qos queue-policy
|
|
edit "default"
|
|
set schedule round-robin
|
|
set rate-by kbps
|
|
config cos-queue
|
|
edit "queue-0"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-1"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-2"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-3"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-4"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-5"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-6"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-7"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
end
|
|
next
|
|
edit "voice-egress"
|
|
set schedule weighted
|
|
set rate-by kbps
|
|
config cos-queue
|
|
edit "queue-0"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-1"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 0
|
|
next
|
|
edit "queue-2"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 6
|
|
next
|
|
edit "queue-3"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 37
|
|
next
|
|
edit "queue-4"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 12
|
|
next
|
|
edit "queue-5"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-6"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-7"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config switch-controller qos qos-policy
|
|
edit "default"
|
|
set default-cos 0
|
|
set trust-dot1p-map ''
|
|
set trust-ip-dscp-map ''
|
|
set queue-policy "default"
|
|
next
|
|
edit "voice-qos"
|
|
set default-cos 0
|
|
set trust-dot1p-map "voice-dot1p"
|
|
set trust-ip-dscp-map "voice-dscp"
|
|
set queue-policy "voice-egress"
|
|
next
|
|
end
|
|
config switch-controller storm-control-policy
|
|
edit "default"
|
|
set description "default storm control on all port"
|
|
set storm-control-mode global
|
|
next
|
|
edit "auto-config"
|
|
set description "storm control policy for fortilink-isl-icl port"
|
|
set storm-control-mode disabled
|
|
next
|
|
end
|
|
config switch-controller auto-config policy
|
|
edit "pse"
|
|
set qos-policy "default"
|
|
set storm-control-policy "auto-config"
|
|
set poe-status enable
|
|
set igmp-flood-report disable
|
|
set igmp-flood-traffic disable
|
|
next
|
|
edit "default"
|
|
set qos-policy "default"
|
|
set storm-control-policy "auto-config"
|
|
set poe-status enable
|
|
set igmp-flood-report disable
|
|
set igmp-flood-traffic disable
|
|
next
|
|
edit "default-icl"
|
|
set qos-policy "default"
|
|
set storm-control-policy "auto-config"
|
|
set poe-status disable
|
|
set igmp-flood-report enable
|
|
set igmp-flood-traffic enable
|
|
next
|
|
end
|
|
config switch-controller auto-config default
|
|
set fgt-policy "default"
|
|
set isl-policy "default"
|
|
set icl-policy "default-icl"
|
|
end
|
|
config switch-controller auto-config custom
|
|
end
|
|
config switch-controller initial-config template
|
|
edit "_default"
|
|
set vlanid 1
|
|
unset allowaccess
|
|
set dhcp-server disable
|
|
next
|
|
edit "quarantine"
|
|
set vlanid 4093
|
|
unset allowaccess
|
|
set auto-ip enable
|
|
set dhcp-server enable
|
|
next
|
|
edit "rspan"
|
|
set vlanid 4092
|
|
unset allowaccess
|
|
set auto-ip enable
|
|
set dhcp-server enable
|
|
next
|
|
edit "voice"
|
|
set vlanid 4091
|
|
unset allowaccess
|
|
set dhcp-server disable
|
|
next
|
|
edit "video"
|
|
set vlanid 4090
|
|
unset allowaccess
|
|
set dhcp-server disable
|
|
next
|
|
edit "onboarding"
|
|
set vlanid 4089
|
|
unset allowaccess
|
|
set dhcp-server disable
|
|
next
|
|
edit "nac_segment"
|
|
set vlanid 4088
|
|
unset allowaccess
|
|
set auto-ip enable
|
|
set dhcp-server enable
|
|
next
|
|
end
|
|
config switch-controller initial-config vlans
|
|
set default-vlan "_default"
|
|
set quarantine "quarantine"
|
|
set rspan "rspan"
|
|
set voice "voice"
|
|
set video "video"
|
|
set nac "onboarding"
|
|
set nac-segment "nac_segment"
|
|
end
|
|
config switch-controller switch-profile
|
|
edit "default"
|
|
set login-passwd-override disable
|
|
set login enable
|
|
set revision-backup-on-logout disable
|
|
set revision-backup-on-upgrade disable
|
|
next
|
|
end
|
|
config switch-controller custom-command
|
|
end
|
|
config switch-controller virtual-port-pool
|
|
end
|
|
config switch-controller ptp settings
|
|
set mode disable
|
|
end
|
|
config switch-controller ptp policy
|
|
edit "default"
|
|
set status enable
|
|
next
|
|
end
|
|
config switch-controller vlan-policy
|
|
end
|
|
config switch-controller dynamic-port-policy
|
|
end
|
|
config switch-controller managed-switch
|
|
end
|
|
config switch-controller switch-group
|
|
end
|
|
config switch-controller stp-settings
|
|
set name ''
|
|
set revision 0
|
|
set hello-time 2
|
|
set forward-time 15
|
|
set max-age 20
|
|
set max-hops 20
|
|
end
|
|
config switch-controller stp-instance
|
|
end
|
|
config switch-controller storm-control
|
|
set rate 500
|
|
set unknown-unicast disable
|
|
set unknown-multicast disable
|
|
set broadcast disable
|
|
end
|
|
config switch-controller global
|
|
set mac-aging-interval 300
|
|
set https-image-push enable
|
|
set vlan-optimization enable
|
|
set vlan-identity name
|
|
set mac-retention-period 24
|
|
set default-virtual-switch-vlan ''
|
|
set dhcp-server-access-list disable
|
|
set log-mac-limit-violations disable
|
|
set sn-dns-resolution enable
|
|
set mac-event-logging disable
|
|
set bounce-quarantined-link disable
|
|
set quarantine-mode by-vlan
|
|
set update-user-device mac-cache lldp dhcp-snooping l2-db l3-db
|
|
set fips-enforce enable
|
|
set firmware-provision-on-authorization disable
|
|
end
|
|
config switch-controller switch-log
|
|
set status enable
|
|
set severity notification
|
|
end
|
|
config switch-controller igmp-snooping
|
|
set aging-time 300
|
|
set flood-unknown-multicast disable
|
|
set query-interval 125
|
|
end
|
|
config switch-controller sflow
|
|
set collector-ip 0.0.0.0
|
|
set collector-port 6343
|
|
end
|
|
config switch-controller network-monitor-settings
|
|
set network-monitoring disable
|
|
end
|
|
config switch-controller flow-tracking
|
|
set sample-mode perimeter
|
|
set sample-rate 512
|
|
set format netflow9
|
|
set level ip
|
|
set max-export-pkt-size 512
|
|
set template-export-period 5
|
|
set timeout-general 3600
|
|
set timeout-icmp 300
|
|
set timeout-max 604800
|
|
set timeout-tcp 3600
|
|
set timeout-tcp-fin 300
|
|
set timeout-tcp-rst 120
|
|
set timeout-udp 300
|
|
end
|
|
config switch-controller snmp-sysinfo
|
|
set status disable
|
|
set engine-id ''
|
|
set description ''
|
|
set contact-info ''
|
|
set location ''
|
|
end
|
|
config switch-controller snmp-trap-threshold
|
|
set trap-high-cpu-threshold 80
|
|
set trap-low-memory-threshold 80
|
|
set trap-log-full-threshold 90
|
|
end
|
|
config switch-controller snmp-community
|
|
end
|
|
config switch-controller snmp-user
|
|
end
|
|
config switch-controller traffic-sniffer
|
|
set mode erspan-auto
|
|
set erspan-ip 0.0.0.0
|
|
end
|
|
config switch-controller remote-log
|
|
edit "syslogd"
|
|
set status disable
|
|
next
|
|
edit "syslogd2"
|
|
set status disable
|
|
next
|
|
end
|
|
config switch-controller mac-policy
|
|
end
|
|
config wireless-controller setting
|
|
set account-id ''
|
|
set country US
|
|
set duplicate-ssid disable
|
|
set fapc-compatibility disable
|
|
set wfa-compatibility disable
|
|
set phishing-ssid-detect enable
|
|
set fake-ssid-action log
|
|
set device-weight 1
|
|
set device-holdoff 5
|
|
set device-idle 1440
|
|
set firmware-provision-on-authorization disable
|
|
set darrp-optimize 86400
|
|
set darrp-optimize-schedules "default-darrp-optimize"
|
|
end
|
|
config wireless-controller log
|
|
set status enable
|
|
set addrgrp-log notification
|
|
set ble-log notification
|
|
set clb-log notification
|
|
set dhcp-starv-log notification
|
|
set led-sched-log notification
|
|
set radio-event-log notification
|
|
set rogue-event-log notification
|
|
set sta-event-log notification
|
|
set sta-locate-log notification
|
|
set wids-log notification
|
|
set wtp-event-log notification
|
|
end
|
|
config wireless-controller apcfg-profile
|
|
end
|
|
config wireless-controller bonjour-profile
|
|
end
|
|
config wireless-controller arrp-profile
|
|
edit "arrp-default"
|
|
set comment ''
|
|
set selection-period 3600
|
|
set monitor-period 300
|
|
set weight-managed-ap 50
|
|
set weight-rogue-ap 10
|
|
set weight-noise-floor 40
|
|
set weight-channel-load 20
|
|
set weight-spectral-rssi 40
|
|
set weight-weather-channel 0
|
|
set weight-dfs-channel 0
|
|
set threshold-ap 250
|
|
set threshold-noise-floor "-85"
|
|
set threshold-channel-load 60
|
|
set threshold-spectral-rssi "-65"
|
|
set threshold-tx-retries 300
|
|
set threshold-rx-errors 50
|
|
set include-weather-channel enable
|
|
set include-dfs-channel enable
|
|
set override-darrp-optimize disable
|
|
next
|
|
end
|
|
config wireless-controller region
|
|
end
|
|
config wireless-controller vap-group
|
|
end
|
|
config wireless-controller wids-profile
|
|
edit "default"
|
|
set comment "Default WIDS profile."
|
|
set sensor-mode disable
|
|
set ap-scan enable
|
|
set ap-bgscan-period 600
|
|
set ap-bgscan-intv 1
|
|
set ap-bgscan-duration 20
|
|
set ap-bgscan-idle 0
|
|
set ap-bgscan-report-intv 30
|
|
set ap-fgscan-report-intv 15
|
|
set ap-scan-passive disable
|
|
set ap-scan-threshold "-90"
|
|
set wireless-bridge enable
|
|
set deauth-broadcast enable
|
|
set null-ssid-probe-resp enable
|
|
set long-duration-attack enable
|
|
set long-duration-thresh 8200
|
|
set invalid-mac-oui enable
|
|
set weak-wep-iv enable
|
|
set auth-frame-flood enable
|
|
set auth-flood-time 10
|
|
set auth-flood-thresh 30
|
|
set assoc-frame-flood enable
|
|
set assoc-flood-time 10
|
|
set assoc-flood-thresh 30
|
|
set spoofed-deauth enable
|
|
set asleap-attack enable
|
|
set eapol-start-flood enable
|
|
set eapol-start-thresh 10
|
|
set eapol-start-intv 1
|
|
set eapol-logoff-flood enable
|
|
set eapol-logoff-thresh 10
|
|
set eapol-logoff-intv 1
|
|
set eapol-succ-flood enable
|
|
set eapol-succ-thresh 10
|
|
set eapol-succ-intv 1
|
|
set eapol-fail-flood enable
|
|
set eapol-fail-thresh 10
|
|
set eapol-fail-intv 1
|
|
set eapol-pre-succ-flood enable
|
|
set eapol-pre-succ-thresh 10
|
|
set eapol-pre-succ-intv 1
|
|
set eapol-pre-fail-flood enable
|
|
set eapol-pre-fail-thresh 10
|
|
set eapol-pre-fail-intv 1
|
|
set deauth-unknown-src-thresh 10
|
|
next
|
|
edit "default-wids-apscan-enabled"
|
|
set comment ''
|
|
set sensor-mode disable
|
|
set ap-scan enable
|
|
set ap-bgscan-period 600
|
|
set ap-bgscan-intv 1
|
|
set ap-bgscan-duration 20
|
|
set ap-bgscan-idle 0
|
|
set ap-bgscan-report-intv 30
|
|
set ap-fgscan-report-intv 15
|
|
set ap-scan-passive disable
|
|
set ap-scan-threshold "-90"
|
|
set wireless-bridge disable
|
|
set deauth-broadcast disable
|
|
set null-ssid-probe-resp disable
|
|
set long-duration-attack disable
|
|
set long-duration-thresh 8200
|
|
set invalid-mac-oui disable
|
|
set weak-wep-iv disable
|
|
set auth-frame-flood disable
|
|
set assoc-frame-flood disable
|
|
set spoofed-deauth disable
|
|
set asleap-attack disable
|
|
set eapol-start-flood disable
|
|
set eapol-logoff-flood disable
|
|
set eapol-succ-flood disable
|
|
set eapol-fail-flood disable
|
|
set eapol-pre-succ-flood disable
|
|
set eapol-pre-fail-flood disable
|
|
set deauth-unknown-src-thresh 10
|
|
next
|
|
end
|
|
config wireless-controller ble-profile
|
|
edit "fortiap-discovery"
|
|
set comment ''
|
|
set advertising ibeacon eddystone-uid eddystone-url
|
|
set ibeacon-uuid "wtp-uuid"
|
|
set major-id 1000
|
|
set minor-id 2000
|
|
set eddystone-namespace "0102030405"
|
|
set eddystone-instance "abcdef"
|
|
set eddystone-url "http://www.fortinet.com"
|
|
set txpower 0
|
|
set beacon-interval 100
|
|
set ble-scanning disable
|
|
next
|
|
end
|
|
config wireless-controller syslog-profile
|
|
end
|
|
config wireless-controller wtp-profile
|
|
end
|
|
config wireless-controller wtp
|
|
end
|
|
config wireless-controller wtp-group
|
|
end
|
|
config wireless-controller qos-profile
|
|
end
|
|
config wireless-controller wag-profile
|
|
end
|
|
config wireless-controller snmp
|
|
set engine-id ''
|
|
set contact-info ''
|
|
set trap-high-cpu-threshold 80
|
|
set trap-high-mem-threshold 80
|
|
end
|
|
config wireless-controller mpsk-profile
|
|
end
|
|
config wireless-controller nac-profile
|
|
end
|
|
config wireless-controller ssid-policy
|
|
end
|
|
config wireless-controller access-control-list
|
|
end
|
|
config wireless-controller ap-status
|
|
end
|
|
config user nac-policy
|
|
end
|
|
config extension-controller dataplan
|
|
end
|
|
config extension-controller extender-profile
|
|
end
|
|
config extension-controller extender
|
|
end
|
|
config extension-controller fortigate-profile
|
|
end
|
|
config extension-controller fortigate
|
|
end
|
|
config system ips
|
|
set signature-hold-time 0h
|
|
end
|
|
config ips custom
|
|
end
|
|
config ips settings
|
|
set packet-log-history 1
|
|
set packet-log-post-attack 0
|
|
set ips-packet-quota 0
|
|
end
|
|
config alertemail setting
|
|
set username "soc@intercloud.com.bd"
|
|
set mailto1 "soc@intercloud.com.bd"
|
|
set mailto2 ''
|
|
set mailto3 ''
|
|
set filter-mode threshold
|
|
set emergency-interval 1
|
|
set alert-interval 2
|
|
set critical-interval 3
|
|
set error-interval 5
|
|
set warning-interval 10
|
|
set notification-interval 20
|
|
set information-interval 30
|
|
set debug-interval 60
|
|
set severity emergency
|
|
end
|
|
config router access-list
|
|
end
|
|
config router access-list6
|
|
end
|
|
config router aspath-list
|
|
end
|
|
config router prefix-list
|
|
end
|
|
config router prefix-list6
|
|
end
|
|
config router key-chain
|
|
end
|
|
config router community-list
|
|
end
|
|
config router extcommunity-list
|
|
end
|
|
config router route-map
|
|
end
|
|
config router rip
|
|
set default-information-originate disable
|
|
set default-metric 1
|
|
set max-out-metric 0
|
|
config redistribute "connected"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "static"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "ospf"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "bgp"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "isis"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
set update-timer 30
|
|
set timeout-timer 180
|
|
set garbage-timer 120
|
|
set version 2
|
|
end
|
|
config router ripng
|
|
set default-information-originate disable
|
|
set default-metric 1
|
|
set max-out-metric 0
|
|
config redistribute "connected"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "static"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "ospf"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "bgp"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "isis"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
set update-timer 30
|
|
set timeout-timer 180
|
|
set garbage-timer 120
|
|
end
|
|
config router static
|
|
edit 2
|
|
set status enable
|
|
set dst 0.0.0.0 0.0.0.0
|
|
set gateway 118.67.217.121
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "3rd-Link"
|
|
set comment "To-3rd-Link"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set dstaddr ''
|
|
unset internet-service
|
|
set internet-service-custom ''
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 3
|
|
set status enable
|
|
set dst 192.168.1.100 255.255.255.255
|
|
set gateway 192.168.1.100
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "mgmt1"
|
|
set comment ''
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 4
|
|
set status enable
|
|
set dst 0.0.0.0 0.0.0.0
|
|
set gateway 192.168.100.33
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port30"
|
|
set comment ''
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set dstaddr ''
|
|
unset internet-service
|
|
set internet-service-custom ''
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
end
|
|
config router policy
|
|
end
|
|
config router policy6
|
|
end
|
|
config router static6
|
|
end
|
|
config router ospf
|
|
set abr-type standard
|
|
set auto-cost-ref-bandwidth 1000
|
|
set distance-external 110
|
|
set distance-inter-area 110
|
|
set distance-intra-area 110
|
|
set database-overflow disable
|
|
set database-overflow-max-lsas 10000
|
|
set database-overflow-time-to-recover 300
|
|
set default-information-originate disable
|
|
set default-information-metric 10
|
|
set default-information-metric-type 2
|
|
set default-information-route-map ''
|
|
set default-metric 10
|
|
set distance 110
|
|
set rfc1583-compatible disable
|
|
set router-id 0.0.0.0
|
|
set spf-timers 5 10
|
|
set bfd disable
|
|
set log-neighbour-changes enable
|
|
set distribute-list-in ''
|
|
set distribute-route-map-in ''
|
|
set restart-mode none
|
|
config redistribute "connected"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
set tag 0
|
|
end
|
|
config redistribute "static"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
set tag 0
|
|
end
|
|
config redistribute "rip"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
set tag 0
|
|
end
|
|
config redistribute "bgp"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
set tag 0
|
|
end
|
|
config redistribute "isis"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
set tag 0
|
|
end
|
|
end
|
|
config router ospf6
|
|
set abr-type standard
|
|
set auto-cost-ref-bandwidth 1000
|
|
set default-information-originate disable
|
|
set log-neighbour-changes enable
|
|
set default-information-metric 10
|
|
set default-information-metric-type 2
|
|
set default-information-route-map ''
|
|
set default-metric 10
|
|
set router-id 0.0.0.0
|
|
set spf-timers 5 10
|
|
set bfd disable
|
|
set restart-mode none
|
|
config redistribute "connected"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
end
|
|
config redistribute "static"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
end
|
|
config redistribute "rip"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
end
|
|
config redistribute "bgp"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
end
|
|
config redistribute "isis"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
end
|
|
end
|
|
config router bgp
|
|
unset as
|
|
set keepalive-timer 60
|
|
set holdtime-timer 180
|
|
set always-compare-med disable
|
|
set bestpath-as-path-ignore disable
|
|
set bestpath-cmp-confed-aspath disable
|
|
set bestpath-cmp-routerid disable
|
|
set bestpath-med-confed disable
|
|
set bestpath-med-missing-as-worst disable
|
|
set client-to-client-reflection enable
|
|
set dampening disable
|
|
set deterministic-med disable
|
|
set ebgp-multipath disable
|
|
set ibgp-multipath disable
|
|
set enforce-first-as enable
|
|
set fast-external-failover enable
|
|
set log-neighbour-changes enable
|
|
set network-import-check enable
|
|
set ignore-optional-capability enable
|
|
set multipath-recursive-distance disable
|
|
set recursive-next-hop disable
|
|
set recursive-inherit-priority disable
|
|
set tag-resolve-mode disable
|
|
set cluster-id 0.0.0.0
|
|
set confederation-identifier 0
|
|
set default-local-preference 100
|
|
set scan-time 60
|
|
set distance-external 20
|
|
set distance-internal 200
|
|
set distance-local 200
|
|
set synchronization disable
|
|
set graceful-restart disable
|
|
config redistribute "connected"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute "rip"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute "ospf"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute "static"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute "isis"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute6 "connected"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute6 "rip"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute6 "ospf"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute6 "static"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute6 "isis"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
end
|
|
config router isis
|
|
set is-type level-1-2
|
|
set adv-passive-only disable
|
|
set adv-passive-only6 disable
|
|
set auth-mode-l1 password
|
|
set auth-mode-l2 password
|
|
set auth-password-l1 ENC TKzQTGu6CATDnM94WkxlqZTlItU4Oo2rQUisgIhCEqNBe81Bfd6z5+NNlULqsf3j+8OiCquoutCXQx19AMXTVgcrHBqA8sRnRRno8tL6TYKKos2ZO2I6Iq5/OW4O5q0E+z6KB2eZ6IyqbvGrIRx1K9Aw4btACL8Jw6wSZ9nst4sRtRVgUY9LhlQ7Y3/kRKel3Bsfbw==
|
|
set auth-password-l2 ENC kZLiIDdiVnslwDNAE2lGR4xibghQUCHSx1i+FAGLvU5FMiABqIGCs1RUEWKuaFsZ84AZkPSr9M0vdGnECh5IU8RjJ32+NHXsEw3KdOsO7KjMyub5kEegsA/FvlMZU7digmcCNEUyxKOahDjDsVDc9lzTJH3GrgWoGuZpgT/X49c+RTI6iPlif9CT8/5n/ymOiCkrCw==
|
|
set auth-sendonly-l1 disable
|
|
set auth-sendonly-l2 disable
|
|
set ignore-lsp-errors disable
|
|
set lsp-gen-interval-l1 30
|
|
set lsp-gen-interval-l2 30
|
|
set lsp-refresh-interval 900
|
|
set max-lsp-lifetime 1200
|
|
set spf-interval-exp-l1 500 50000
|
|
set spf-interval-exp-l2 500 50000
|
|
set dynamic-hostname disable
|
|
set adjacency-check disable
|
|
set adjacency-check6 disable
|
|
set overload-bit disable
|
|
unset overload-bit-suppress
|
|
set overload-bit-on-startup 0
|
|
set default-originate disable
|
|
set default-originate6 disable
|
|
set metric-style narrow
|
|
set redistribute-l1 disable
|
|
set redistribute-l2 disable
|
|
set redistribute6-l1 disable
|
|
set redistribute6-l2 disable
|
|
config redistribute "connected"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute "rip"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute "ospf"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute "bgp"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute "static"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute6 "connected"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute6 "rip"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute6 "ospf"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute6 "bgp"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute6 "static"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
end
|
|
config router multicast-flow
|
|
end
|
|
config router multicast
|
|
set route-limit 2147483647
|
|
set multicast-routing disable
|
|
config pim-sm-global
|
|
set message-interval 60
|
|
set join-prune-holdtime 210
|
|
set accept-register-list ''
|
|
set accept-source-list ''
|
|
set bsr-candidate disable
|
|
set bsr-allow-quick-refresh disable
|
|
set cisco-register-checksum disable
|
|
set cisco-crp-prefix disable
|
|
set cisco-ignore-rp-set-priority disable
|
|
set register-rp-reachability enable
|
|
set register-source disable
|
|
set register-supression 60
|
|
set null-register-retries 1
|
|
set rp-register-keepalive 185
|
|
set spt-threshold enable
|
|
set ssm disable
|
|
set register-rate-limit 0
|
|
set spt-threshold-group ''
|
|
end
|
|
end
|
|
config router multicast6
|
|
set multicast-routing disable
|
|
config pim-sm-global
|
|
end
|
|
end
|
|
config router auth-path
|
|
end
|
|
config router setting
|
|
set show-filter ''
|
|
set hostname ''
|
|
end
|
|
config router bfd
|
|
end
|
|
config router bfd6
|
|
end
|
|
config system proxy-arp
|
|
end
|
|
config system link-monitor
|
|
end
|
|
config system wccp
|
|
end
|
|
config system dns64
|
|
set status disable
|
|
set dns64-prefix 64:ff9b::/96
|
|
set always-synthesize-aaaa-record enable
|
|
end
|
|
config system nd-proxy
|
|
set status disable
|
|
end
|
|
config system vne-tunnel
|
|
set status disable
|
|
end
|
|
end
|
|
|
|
config vdom
|
|
edit IC-CLOUD
|
|
config wireless-controller hotspot20 anqp-venue-name
|
|
end
|
|
config wireless-controller hotspot20 anqp-venue-url
|
|
end
|
|
config wireless-controller hotspot20 anqp-network-auth-type
|
|
end
|
|
config wireless-controller hotspot20 anqp-roaming-consortium
|
|
end
|
|
config wireless-controller hotspot20 anqp-nai-realm
|
|
end
|
|
config wireless-controller hotspot20 anqp-3gpp-cellular
|
|
end
|
|
config wireless-controller hotspot20 anqp-ip-address-type
|
|
end
|
|
config wireless-controller hotspot20 h2qp-operator-name
|
|
end
|
|
config wireless-controller hotspot20 h2qp-wan-metric
|
|
end
|
|
config wireless-controller hotspot20 h2qp-conn-capability
|
|
end
|
|
config wireless-controller hotspot20 icon
|
|
end
|
|
config wireless-controller hotspot20 h2qp-osu-provider
|
|
end
|
|
config wireless-controller hotspot20 qos-map
|
|
end
|
|
config wireless-controller hotspot20 h2qp-advice-of-charge
|
|
end
|
|
config wireless-controller hotspot20 h2qp-osu-provider-nai
|
|
end
|
|
config wireless-controller hotspot20 h2qp-terms-and-conditions
|
|
end
|
|
config wireless-controller hotspot20 hs-profile
|
|
end
|
|
config wireless-controller vap
|
|
end
|
|
config system object-tagging
|
|
edit "default"
|
|
set address optional
|
|
set device optional
|
|
set interface optional
|
|
set multiple enable
|
|
set color 0
|
|
next
|
|
end
|
|
config switch-controller traffic-policy
|
|
edit "quarantine"
|
|
set description "Rate control for quarantined traffic"
|
|
set policer-status enable
|
|
set guaranteed-bandwidth 163840
|
|
set guaranteed-burst 8192
|
|
set maximum-burst 163840
|
|
set cos-queue 0
|
|
next
|
|
edit "sniffer"
|
|
set description "Rate control for sniffer mirrored traffic"
|
|
set policer-status enable
|
|
set guaranteed-bandwidth 50000
|
|
set guaranteed-burst 8192
|
|
set maximum-burst 163840
|
|
set cos-queue 0
|
|
next
|
|
end
|
|
config switch-controller fortilink-settings
|
|
end
|
|
config system settings
|
|
set comments ''
|
|
set vdom-type traffic
|
|
set opmode nat
|
|
set ngfw-mode profile-based
|
|
set http-external-dest fortiweb
|
|
set firewall-session-dirty check-all
|
|
set bfd disable
|
|
set utf8-spam-tagging enable
|
|
set wccp-cache-engine disable
|
|
set vpn-stats-log ipsec pptp l2tp ssl
|
|
set vpn-stats-period 600
|
|
set v4-ecmp-mode source-ip-based
|
|
set fw-session-hairpin disable
|
|
set prp-trailer-action disable
|
|
set snat-hairpin-traffic enable
|
|
set dhcp-proxy disable
|
|
set central-nat disable
|
|
set lldp-reception global
|
|
set lldp-transmission global
|
|
set link-down-access enable
|
|
set nat46-generate-ipv6-fragment-header disable
|
|
set nat46-force-ipv4-packet-forwarding disable
|
|
set nat64-force-ipv6-packet-forwarding enable
|
|
set detect-unknown-esp enable
|
|
set auxiliary-session disable
|
|
set asymroute enable
|
|
set tcp-session-without-syn disable
|
|
set ses-denied-traffic disable
|
|
set strict-src-check disable
|
|
set allow-linkdown-path disable
|
|
set asymroute6 disable
|
|
set asymroute6-icmp disable
|
|
set sctp-session-without-init disable
|
|
set sip-expectation enable
|
|
set sip-nat-trace enable
|
|
set h323-direct-model enable
|
|
set status enable
|
|
set sip-tcp-port 5060
|
|
set sip-udp-port 5060
|
|
set sip-ssl-port 5061
|
|
set sccp-port 2000
|
|
set multicast-forward enable
|
|
set multicast-ttl-notchange disable
|
|
set allow-subnet-overlap disable
|
|
set deny-tcp-with-icmp disable
|
|
set ecmp-max-paths 255
|
|
set discovered-device-timeout 28
|
|
set email-portal-check-dns enable
|
|
set default-voip-alg-mode proxy-based
|
|
set gui-proxy-inspection enable
|
|
set gui-icap disable
|
|
set gui-implicit-policy enable
|
|
set gui-dns-database disable
|
|
set gui-load-balance enable
|
|
set gui-multicast-policy enable
|
|
set gui-dos-policy enable
|
|
set gui-object-colors enable
|
|
set gui-voip-profile disable
|
|
set gui-ap-profile enable
|
|
set gui-security-profile-group disable
|
|
set gui-local-in-policy enable
|
|
set gui-wanopt-cache disable
|
|
set gui-explicit-proxy disable
|
|
set gui-dynamic-routing enable
|
|
set gui-sslvpn-personal-bookmarks disable
|
|
set gui-sslvpn-realms disable
|
|
set gui-policy-based-ipsec disable
|
|
set gui-threat-weight enable
|
|
set gui-spamfilter enable
|
|
set gui-file-filter enable
|
|
set gui-application-control enable
|
|
set gui-ips enable
|
|
set gui-dhcp-advanced enable
|
|
set gui-vpn enable
|
|
set gui-wireless-controller disable
|
|
set gui-advanced-wireless-features disable
|
|
set gui-switch-controller disable
|
|
set gui-fortiap-split-tunneling disable
|
|
set gui-webfilter-advanced disable
|
|
set gui-traffic-shaping enable
|
|
set gui-wan-load-balancing disable
|
|
set gui-antivirus enable
|
|
set gui-webfilter enable
|
|
set gui-videofilter enable
|
|
set gui-dnsfilter enable
|
|
set gui-waf-profile enable
|
|
set gui-dlp-profile disable
|
|
set gui-fortiextender-controller disable
|
|
set gui-advanced-policy enable
|
|
set gui-allow-unnamed-policy disable
|
|
set gui-email-collection disable
|
|
set gui-multiple-interface-policy enable
|
|
set gui-policy-disclaimer disable
|
|
set gui-ztna enable
|
|
set gui-ot disable
|
|
set location-id 0.0.0.0
|
|
set ike-session-resume disable
|
|
set ike-quick-crash-detect disable
|
|
set ike-dn-format with-space
|
|
set ike-port 500
|
|
set ike-policy-route disable
|
|
set block-land-attack disable
|
|
set application-bandwidth-tracking disable
|
|
set fqdn-session-check disable
|
|
set ext-resource-session-check disable
|
|
set dyn-addr-session-check disable
|
|
set default-policy-expiry-days 30
|
|
set gui-enforce-change-summary require
|
|
set internet-service-database-cache disable
|
|
end
|
|
config system sit-tunnel
|
|
end
|
|
config system arp-table
|
|
end
|
|
config system ipv6-neighbor-cache
|
|
end
|
|
config system vdom-sflow
|
|
set vdom-sflow disable
|
|
set interface-select-method auto
|
|
end
|
|
config system vdom-netflow
|
|
set vdom-netflow disable
|
|
end
|
|
config system vdom-dns
|
|
set vdom-dns disable
|
|
set alt-primary 0.0.0.0
|
|
set alt-secondary 0.0.0.0
|
|
end
|
|
config system replacemsg-group
|
|
edit "default"
|
|
set comment "Default replacement message group."
|
|
set group-type default
|
|
next
|
|
end
|
|
config system session-ttl
|
|
set default 3600
|
|
end
|
|
config system dhcp server
|
|
end
|
|
config system dhcp6 server
|
|
end
|
|
config system zone
|
|
end
|
|
config firewall address
|
|
edit "FABRIC_DEVICE"
|
|
set uuid 825efa2e-d1e2-51ef-8aba-ab79c59dca07
|
|
set type ipmask
|
|
set comment "IPv4 addresses of Fabric Devices."
|
|
set associated-interface ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set subnet 0.0.0.0 0.0.0.0
|
|
next
|
|
edit "none"
|
|
set uuid 1e780d50-160c-51e8-a501-a1380c499eb0
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 0.0.0.0 255.255.255.255
|
|
next
|
|
edit "SSLVPN_TUNNEL_ADDR1"
|
|
set uuid 1ede2e0a-160c-51e8-8295-ff0361e42587
|
|
set type iprange
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set start-ip 10.212.134.200
|
|
set end-ip 10.212.134.210
|
|
next
|
|
edit "all"
|
|
set uuid 1ede478c-160c-51e8-68cb-47729563136e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 0.0.0.0 0.0.0.0
|
|
next
|
|
edit "FIREWALL_AUTH_PORTAL_ADDRESS"
|
|
set uuid 1ede4a0c-160c-51e8-815b-e3537dfdb892
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 0.0.0.0 0.0.0.0
|
|
next
|
|
edit "Admin-Access-1"
|
|
set uuid 517509ba-1b75-51e8-e352-6ac65a38e2c1
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.9.136.34 255.255.255.255
|
|
next
|
|
edit "Admin-Access-2"
|
|
set uuid 653f126a-1b75-51e8-eb46-45abf0f054ae
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.9.136.35 255.255.255.255
|
|
next
|
|
edit "Admin-Access-3"
|
|
set uuid 743190cc-1b75-51e8-58c9-361f19e76673
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.9.136.66 255.255.255.255
|
|
next
|
|
edit "Admin-Access-4"
|
|
set uuid 89ba19b4-1b75-51e8-3311-20852c721c9b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.12.0 255.255.255.0
|
|
next
|
|
edit "Admin-Access-5"
|
|
set uuid 959e5470-1b75-51e8-5e9e-b142ac1cdc97
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 163.53.150.248 255.255.255.248
|
|
next
|
|
edit "Admin-Access-6"
|
|
set uuid a287aba0-1b75-51e8-9bcb-4d5f9ad0fca5
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.13.66 255.255.255.255
|
|
next
|
|
edit "CLOUD-IP-1"
|
|
set uuid b327a136-1b75-51e8-858a-16ef8e307b0e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.0 255.255.255.240
|
|
next
|
|
edit "CLOUD-IP-2"
|
|
set uuid bf3015c6-1b75-51e8-e0de-629c31416f93
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.128 255.255.255.192
|
|
next
|
|
edit "SaaS-BLOCK"
|
|
set uuid 5b89da32-2cf2-51e8-d060-48a7adc404f4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.192 255.255.255.192
|
|
next
|
|
edit "BRILLIANT-ZIMBRA-PROXY-NEW"
|
|
set uuid f19cfadc-3e4e-51e8-ad29-bbccb1a226c7
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.213 255.255.255.255
|
|
next
|
|
edit "BRILLIANT-ZIMBRA-MTA-NEW"
|
|
set uuid 116850dc-3e4f-51e8-28f7-29a8ef780c76
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.44 255.255.255.255
|
|
next
|
|
edit "CPSD"
|
|
set uuid c5a7a132-3edc-51e8-3936-f1dddcb90ef6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.181 255.255.255.255
|
|
next
|
|
edit "LAN_NETWORK"
|
|
set uuid 2e5d6b08-800f-51e8-e18f-262b17d9ede3
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface "port31"
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 192.168.10.0 255.255.255.0
|
|
next
|
|
edit "MEDIA-AGENT-1"
|
|
set uuid bf9b736e-b4ba-51e8-206d-f4ea84ba8d40
|
|
set type ipmask
|
|
set comment "MEDIA-AGENT-1(COMMVAULT )"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.216.96 255.255.255.252
|
|
next
|
|
edit "MEDIA-AGENT-2"
|
|
set uuid e328b88c-b4ba-51e8-681c-376268940045
|
|
set type ipmask
|
|
set comment "MEDIA-AGENT-2 (COMMVAULT)"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.216.100 255.255.255.252
|
|
next
|
|
edit "MEDIA-AGENT-3"
|
|
set uuid 0829c1a8-b4bb-51e8-5ecb-eceaf6d4ae6a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.216.104 255.255.255.252
|
|
next
|
|
edit "CS-1"
|
|
set uuid 700295f2-b4de-51e8-2306-45478357e6b3
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.206 255.255.255.255
|
|
next
|
|
edit "CS-2"
|
|
set uuid 7ba9cc18-b4de-51e8-8bf2-3a00f83f58c7
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.220 255.255.255.255
|
|
next
|
|
edit "COMMVAULT-VSA"
|
|
set uuid bd60f5f4-b4df-51e8-8497-e18b498fffbc
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.222 255.255.255.255
|
|
next
|
|
edit "COMMVAULT-PROXY"
|
|
set uuid 41f535a8-b717-51e8-e444-43011378d310
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.224 255.255.255.255
|
|
next
|
|
edit "DADA"
|
|
set uuid f52d2408-bfde-51e8-d2b3-2747fa89fe89
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.141 255.255.255.255
|
|
next
|
|
edit "TEST-MIKROTIK"
|
|
set uuid 084129b8-bfdf-51e8-2cd5-fa62799f170a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 163.53.150.254 255.255.255.255
|
|
next
|
|
edit "CS-PRODUCTION"
|
|
set uuid 8533db0e-c7c9-51e8-2dfa-96cc415e4b77
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.220 255.255.255.255
|
|
next
|
|
edit "CS-STANDBY"
|
|
set uuid 9163d6fe-c7c9-51e8-7850-640008c835bf
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.206 255.255.255.255
|
|
next
|
|
edit "COMVAULT-OSP-VSA"
|
|
set uuid b520b896-c7c9-51e8-6ab1-5b7d2a90c887
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.222 255.255.255.255
|
|
next
|
|
edit "COMVAULT-PROXY"
|
|
set uuid cd6a9d54-c7c9-51e8-58e1-2982ff05b90c
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.224 255.255.255.255
|
|
next
|
|
edit "MEDIA-AGENT-4"
|
|
set uuid 49615952-c7ca-51e8-9f0a-2dd4c8481476
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.219.44 255.255.255.255
|
|
next
|
|
edit "PLAN-SMTP"
|
|
set uuid f7ee20f2-e009-51e8-30f7-142a4acd0236
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.60 255.255.255.255
|
|
next
|
|
edit "PLAN-SMTP2"
|
|
set uuid 8211802a-e00b-51e8-e253-f09261f82497
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 192.168.66.10 255.255.255.255
|
|
next
|
|
edit "Mail Border GW-mgw.intercloud.com.bd"
|
|
set uuid ff28c55a-f15e-51e8-28c9-8a41310063e6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.12.40 255.255.255.255
|
|
next
|
|
edit "IT-FW-Peering-Block"
|
|
set uuid b42622fe-f948-51e8-17d4-525ef738fba5
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 172.25.26.0 255.255.255.252
|
|
next
|
|
edit "IPTSP-Cloud-PFSense-Public-IP"
|
|
set uuid f5de180a-f948-51e8-df06-27438674bf77
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.40 255.255.255.255
|
|
next
|
|
edit "smtp.brilliant.com.bd"
|
|
set uuid e1f00e5e-fdec-51e8-0d5a-bb4fb04aeeb0
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.58 255.255.255.255
|
|
next
|
|
edit "Mail-Clean-13.89"
|
|
set uuid e6cbfa3c-0738-51e9-5ebe-784dda5453b8
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.13.89 255.255.255.255
|
|
next
|
|
edit "Mail-Cleaner-IP"
|
|
set uuid 7e7814d6-076d-51e9-9fec-3f5d39391a9d
|
|
set type ipmask
|
|
set comment "Ref-Ziaul-Bhai"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.13.89 255.255.255.255
|
|
next
|
|
edit "cPanel"
|
|
set uuid 5920bc60-0e61-51e9-e652-09f362291547
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 163.53.149.2 255.255.255.255
|
|
next
|
|
edit "cPanel-2nd-IP"
|
|
set uuid d1539ad0-1178-51e9-efda-4d34b83ad13c
|
|
set type ipmask
|
|
set comment "cPanel-2nd-IP"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 163.53.149.3 255.255.255.255
|
|
next
|
|
edit "Openstack-Rocky-Infra-Block"
|
|
set uuid 39c2f4cc-3a54-51e9-d9ce-8baea4fa8ecd
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.0 255.255.255.224
|
|
next
|
|
edit "Admin-Access-7-PPTP"
|
|
set uuid 1416e908-3a55-51e9-e615-c0eeec32786e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.220.34 255.255.255.255
|
|
next
|
|
edit "Cloud-proxy-22-march"
|
|
set uuid c7349fae-4cbf-51e9-76df-b66cefb6015e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.138 255.255.255.255
|
|
next
|
|
edit "Zangi Public IP"
|
|
set uuid a446e1b8-58f0-51e9-296d-9a2b04ca4bb3
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 212.34.233.10 255.255.255.255
|
|
next
|
|
edit "IPTSP LAN"
|
|
set uuid ca4397e4-58f0-51e9-b939-69c8a5367612
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 172.19.1.0 255.255.255.0
|
|
next
|
|
edit "Billing LAN"
|
|
set uuid d68ad63e-58f0-51e9-f582-5f0762dca620
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 192.168.5.0 255.255.255.0
|
|
next
|
|
edit "Porta Public-1"
|
|
set uuid 04958420-58f1-51e9-936d-39d1bdb4d480
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.12.224 255.255.255.224
|
|
next
|
|
edit "Porta Public-2"
|
|
set uuid 2efa9548-58f1-51e9-5510-eeb675d32cad
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.214.0 255.255.255.224
|
|
next
|
|
edit "HTTP01-Brilliant"
|
|
set uuid c118a398-58f1-51e9-6a49-ca223d125580
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.41 255.255.255.255
|
|
next
|
|
edit "HTTP02--Brilliant"
|
|
set uuid de0d1862-58f1-51e9-88f5-bd5a894645bd
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.29 255.255.255.255
|
|
next
|
|
edit "HTTP03--Brilliant"
|
|
set uuid ebc85412-58f1-51e9-7acb-4e838eeccab4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.31 255.255.255.255
|
|
next
|
|
edit "Other 3-DashBoard-Brilliant"
|
|
set uuid 01e85f58-58f2-51e9-cb38-440ac1d29ae2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.24 255.255.255.255
|
|
next
|
|
edit "stream 1-Brilliant"
|
|
set uuid 0d27f16c-58f2-51e9-bd00-01fefd1b41b9
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.48 255.255.255.255
|
|
next
|
|
edit "stream 3-Brilliant"
|
|
set uuid e84a434e-58f2-51e9-56e3-73efb491664e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.25 255.255.255.255
|
|
next
|
|
edit "other 1-Brilliant"
|
|
set uuid 191a9578-58f3-51e9-0fae-33599c5a0154
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.50 255.255.255.255
|
|
next
|
|
edit "Other 2-Brilliant"
|
|
set uuid 2ca320c4-58f3-51e9-61ed-930c9c8122e6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.42 255.255.255.255
|
|
next
|
|
edit "Other 4-Brilliant"
|
|
set uuid 6eb0a89c-58f3-51e9-938b-3dadc786bec5
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.6 255.255.255.255
|
|
next
|
|
edit "Other 5-Brilliant"
|
|
set uuid 7ea5e60e-58f3-51e9-808e-ea7ccef42f85
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.49 255.255.255.255
|
|
next
|
|
edit "Other 6-Brilliant"
|
|
set uuid 9384d06c-58f3-51e9-f35a-ea1b10d85592
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.52 255.255.255.255
|
|
next
|
|
edit "VOIP Plugin-Brilliant"
|
|
set uuid cc6eed72-58f3-51e9-3255-4610f1ff505c
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.16 255.255.255.255
|
|
next
|
|
edit "Test"
|
|
set uuid 4d0c95c6-59d8-51e9-c798-427a713aea8e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.78 255.255.255.255
|
|
next
|
|
edit "Test-Server-Brilliant"
|
|
set uuid 9c59726a-59e3-51e9-af7d-c0c4ef3f9a9a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.45 255.255.255.255
|
|
next
|
|
edit "NovoTel-Zenoses"
|
|
set uuid 0f09bf64-5a83-51e9-7c2e-8eeb2f2ab7c1
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.13.70 255.255.255.255
|
|
next
|
|
edit "Reza Sir Residence"
|
|
set uuid 74a1e8d6-7632-51e9-b3a6-4b420fc1b179
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.23.41.40 255.255.255.252
|
|
next
|
|
edit "MailBorder-v5"
|
|
set uuid eee40328-9288-51e9-468d-ffc402d1cb89
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.12.53 255.255.255.255
|
|
next
|
|
edit "Cloud-Floating-Network-2"
|
|
set uuid 7089a508-98ac-51e9-0145-38484e8f0a13
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.0 255.255.255.0
|
|
next
|
|
edit "Plan-SMTP-IP"
|
|
set uuid d0000386-98b8-51e9-e81c-f8dd040facc8
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.83 255.255.255.255
|
|
next
|
|
edit "New-Commserve"
|
|
set uuid 82ccf15c-b1f7-51e9-dc36-7d091a04c674
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.51 255.255.255.255
|
|
next
|
|
edit "Commvault-New-Cloud-VSA-Proxy"
|
|
set uuid 3494fca0-b382-51e9-9169-b9200a1211af
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.45 255.255.255.255
|
|
next
|
|
edit "New-Cloud-VSA-Proxy-2"
|
|
set uuid c158643c-b437-51e9-052c-7d343ee6fe35
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.49 255.255.255.255
|
|
next
|
|
edit "InterCloud-NMS"
|
|
set uuid 1f6b79d8-c342-51e9-9a93-a222c58ac584
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.12.33 255.255.255.255
|
|
next
|
|
edit "Red-Hat-Cloud-Dashboard"
|
|
set uuid 83b3e6d0-c4ac-51e9-be44-3a22ab06ab61
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.14 255.255.255.255
|
|
next
|
|
edit "NTP-Brilliant"
|
|
set uuid c4a4e4e2-c8d9-51e9-b2b5-bd8ab1caec4a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.70 255.255.255.255
|
|
next
|
|
edit "East-West-RDP-BLock"
|
|
set uuid f7943b32-e02b-51e9-f577-2b7d1fab66b9
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.133.165.0 255.255.255.0
|
|
next
|
|
edit "NovoTel-Exchange-1"
|
|
set uuid 1c6ab066-e43d-51e9-4959-6b00a584961b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.154 255.255.255.255
|
|
next
|
|
edit "NovoTel-Exchange-2"
|
|
set uuid 2b64e352-e43d-51e9-4099-523e0281b804
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.230 255.255.255.255
|
|
next
|
|
edit "RDP-Attack-Block-3"
|
|
set uuid 9532f096-e8e6-51e9-3d64-09626d7cce74
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 185.209.0.0 255.255.255.0
|
|
next
|
|
edit "SSH-attack_01"
|
|
set uuid 52a1a874-ef32-51e9-f3a5-f5bbce2540dc
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.249.100.22 255.255.255.255
|
|
next
|
|
edit "RDP-attack-4"
|
|
set uuid aeb1e0b6-ef37-51e9-bca5-3612f6770cd2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 185.156.177.6 255.255.255.255
|
|
next
|
|
edit "Novotel-NAT-IP"
|
|
set uuid 777e8748-f3d8-51e9-7899-a5cc2db771e4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.13.64 255.255.255.224
|
|
next
|
|
edit "Cloud-Team-File-Server-IP"
|
|
set uuid 8d3189e6-f3d8-51e9-6342-e2b902965b48
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.251 255.255.255.255
|
|
next
|
|
edit "hdhttp01"
|
|
set uuid 4b7777a8-f62c-51e9-d74d-b9fa246711fc
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.120 255.255.255.255
|
|
next
|
|
edit "hdhttp02"
|
|
set uuid 99449e98-f631-51e9-a995-c6fde023be55
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.126 255.255.255.255
|
|
next
|
|
edit "hdhttp03"
|
|
set uuid a278174c-f631-51e9-48be-ec9609625388
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.78 255.255.255.255
|
|
next
|
|
edit "hddash01"
|
|
set uuid b9d89aec-f631-51e9-c7b1-7e824ab8b524
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.117 255.255.255.255
|
|
next
|
|
edit "hdstrm01"
|
|
set uuid 4cde6852-f633-51e9-7775-022dd872d345
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.104 255.255.255.255
|
|
next
|
|
edit "hdstrm02"
|
|
set uuid 56a3e858-f633-51e9-04b5-8c0d2e487031
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.103 255.255.255.255
|
|
next
|
|
edit "hdstrm03"
|
|
set uuid 5f9a636a-f633-51e9-4e75-0e9cb18db9cd
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.102 255.255.255.255
|
|
next
|
|
edit "hdstrm04"
|
|
set uuid 676827c6-f633-51e9-235a-f5548a6e7ade
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.99 255.255.255.255
|
|
next
|
|
edit "hdvoip01"
|
|
set uuid daf1b7fc-f633-51e9-c299-b96478c1a043
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.110 255.255.255.255
|
|
next
|
|
edit "hdvoip02"
|
|
set uuid e8810bac-f633-51e9-fc95-de04881904eb
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.106 255.255.255.255
|
|
next
|
|
edit "DB-1-snap"
|
|
set uuid 532c8904-f634-51e9-3438-de25411b35b4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.118 255.255.255.255
|
|
next
|
|
edit "hdvoip04-new-media-proxy"
|
|
set uuid 5b8a5fa4-f634-51e9-5da3-41c60b393db9
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.119 255.255.255.255
|
|
next
|
|
edit "hdvoip03"
|
|
set uuid 6855a9a0-f634-51e9-6d05-60ccfe288e3d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.16 255.255.255.255
|
|
next
|
|
edit "hdntdn01"
|
|
set uuid 7166bcb4-f634-51e9-fa39-cd08a5a255dd
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.124 255.255.255.255
|
|
next
|
|
edit "hdznos01"
|
|
set uuid 7997d0bc-f634-51e9-1435-83386bcbb7f3
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.93 255.255.255.255
|
|
next
|
|
edit "hdadtn01"
|
|
set uuid 8132ee2e-f634-51e9-adcd-32e1347754f6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.116 255.255.255.255
|
|
next
|
|
edit "IPTSP_Temp_IP"
|
|
set uuid e454275a-fa23-51e9-4893-495e31cad4b5
|
|
set type ipmask
|
|
set comment "Mail Ref: 118.67.213.43 || Access List"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.43 255.255.255.255
|
|
next
|
|
edit "RDP-attack-5"
|
|
set uuid 46dd8664-fe1b-51e9-e247-fef16288dcfc
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 202.5.46.234 255.255.255.255
|
|
next
|
|
edit "RDP-Attack-6"
|
|
set uuid 7b7a31a0-fe1c-51e9-eb20-71715674ff66
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 185.156.177.0 255.255.255.0
|
|
next
|
|
edit "RDP-Attack-7"
|
|
set uuid 3e3e9a14-fe1d-51e9-7b5a-b7bce87a0487
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 193.188.22.0 255.255.255.0
|
|
next
|
|
edit "paragon-source"
|
|
set uuid 34824a1c-fe30-51e9-26ba-61df7d2504d2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 175.29.184.6 255.255.255.255
|
|
next
|
|
edit "paragon-destination"
|
|
set uuid 4415eeca-fe30-51e9-ceb8-01bf8b346576
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.181 255.255.255.255
|
|
next
|
|
edit "Kaplan-MNP-Brilliant"
|
|
set uuid 00827a60-ffc6-51e9-5174-10f5c422e842
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.92 255.255.255.255
|
|
next
|
|
edit "Genband-C3-IP-Kaplan-Allow-5060"
|
|
set uuid cd212896-ffc6-51e9-607c-941a8962ba74
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.214.25 255.255.255.255
|
|
next
|
|
edit "Novotel-DB-pri"
|
|
set uuid e273dcb8-158b-51ea-2ff0-74af23721f3b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.146 255.255.255.255
|
|
next
|
|
edit "Novotel-DB-Sec"
|
|
set uuid f1ce15ca-158b-51ea-d5d3-009f5d4ca06d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.199 255.255.255.255
|
|
next
|
|
edit "RDP-attack-8"
|
|
set uuid a47148fa-1b13-51ea-908b-6fe902a0ab76
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 192.129.227.90 255.255.255.255
|
|
next
|
|
edit "RDP-attack-9"
|
|
set uuid ce8349fe-1b13-51ea-2e3b-4dfd762a0181
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 175.107.63.0 255.255.255.0
|
|
next
|
|
edit "RDP-attack-10"
|
|
set uuid 04c309f0-1b14-51ea-cf30-1c040ede38f0
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 45.127.246.0 255.255.255.0
|
|
next
|
|
edit "Novotel-Finance-File-server-IP"
|
|
set uuid ffcb4214-2554-51ea-b684-d61877a068c5
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.254 255.255.255.255
|
|
next
|
|
edit "New-cloud-Dashboard"
|
|
set uuid 870c5280-265f-51ea-9788-05924612b534
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.8 255.255.255.248
|
|
next
|
|
edit "Novoair-mail-server1"
|
|
set uuid 2ca160dc-32a4-51ea-2e17-ab050be65b6d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.167 255.255.255.255
|
|
next
|
|
edit "Novotel-Mail-server-2"
|
|
set uuid 3cb97a4a-32a4-51ea-914b-1a3fba23ea1a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.240 255.255.255.255
|
|
next
|
|
edit "Kaplan-MNP-02-Brilliant"
|
|
set uuid 0ecb1fb4-40cb-51ea-9d58-36a2e327cb44
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.100 255.255.255.255
|
|
next
|
|
edit "Admin-Access-8-Cloud-MKT"
|
|
set uuid be797bd6-443b-51ea-8785-d687155398a6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 163.53.151.2 255.255.255.255
|
|
next
|
|
edit "STAAS-Server-IP"
|
|
set uuid 939b76ae-4719-51ea-b03e-8352f6c830e1
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.61 255.255.255.255
|
|
next
|
|
edit "kona-1"
|
|
set uuid 43fbeaa8-4bc8-51ea-9216-e5348cccf864
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.102 255.255.255.255
|
|
next
|
|
edit "kona-2"
|
|
set uuid 4ff225d4-4bc8-51ea-75bf-4b39c082d89e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.106 255.255.255.255
|
|
next
|
|
edit "smb-attack-10"
|
|
set uuid 82c64e04-4bdc-51ea-30d8-8689b2dddb98
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 113.212.111.241 255.255.255.255
|
|
next
|
|
edit "CPSD-HTTP-236"
|
|
set uuid 082f3e5e-4bf9-51ea-e3f7-71177e067c3e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.236 255.255.255.255
|
|
next
|
|
edit "route-mobile-ssh-allow"
|
|
set uuid 280d6a98-5239-51ea-3e48-8f40fb31c8e3
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 59.152.53.54 255.255.255.255
|
|
next
|
|
edit "route-mobile-ssh-allow2"
|
|
set uuid 359d3990-5239-51ea-7934-05ed37834df3
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 123.252.222.141 255.255.255.255
|
|
next
|
|
edit "route-mobile-opensense"
|
|
set uuid 77f8ee1a-5239-51ea-549c-548ea50d4336
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.112 255.255.255.255
|
|
next
|
|
edit "route-mobile-app-2"
|
|
set uuid 87d0fbfc-5239-51ea-ebec-ca6acc51e8f1
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.116 255.255.255.255
|
|
next
|
|
edit "route-mobile-user-db"
|
|
set uuid 95acf122-5239-51ea-8b26-75a4596c2990
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.77 255.255.255.255
|
|
next
|
|
edit "route-mobile-cdr"
|
|
set uuid a3ed76a8-5239-51ea-3f07-221aa4f2c866
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.123 255.255.255.255
|
|
next
|
|
edit "route-mobile-dnd"
|
|
set uuid b1887a2e-5239-51ea-d8b0-5c02b3fdf250
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.113 255.255.255.255
|
|
next
|
|
edit "route-mobile-bbox"
|
|
set uuid bd76e960-5239-51ea-d227-916311a6626d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.111 255.255.255.255
|
|
next
|
|
edit "route-mobile-app-1"
|
|
set uuid db64480a-5239-51ea-e076-0fd7153138be
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.68 255.255.255.255
|
|
next
|
|
edit "ENZUINC-US-Block"
|
|
set uuid a115bc60-55f9-51ea-6019-a2c6c4b31bd6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 192.157.192.0 255.255.192.0
|
|
next
|
|
edit "Signaling-Server-1"
|
|
set uuid ef7639a6-55fa-51ea-a865-57139cccaffd
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.82 255.255.255.255
|
|
next
|
|
edit "Signaling-Server-2"
|
|
set uuid f8cb18c8-55fa-51ea-5442-87cd39137efe
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.95 255.255.255.255
|
|
next
|
|
edit "Signaling-Server-3"
|
|
set uuid 02f94bd0-55fb-51ea-3027-16750641dc64
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.111 255.255.255.255
|
|
next
|
|
edit "DB-Server-118.67.215.72"
|
|
set uuid 0fd010f0-55fb-51ea-eb39-c268ea42326a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.72 255.255.255.255
|
|
next
|
|
edit "AWS-IP-1-for-Brilliant"
|
|
set uuid a1b03ad4-56d9-51ea-8c23-f4841e2e7d9a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 3.0.84.248 255.255.255.255
|
|
next
|
|
edit "AWS-IP-2-for-Brilliant"
|
|
set uuid aff8adce-56d9-51ea-e69d-efac768ffbab
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 52.76.221.45 255.255.255.255
|
|
next
|
|
edit "IC-ISP-DNS1"
|
|
set uuid 2fa94d74-579f-51ea-10a7-fc5de18b7181
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.12.62 255.255.255.255
|
|
next
|
|
edit "IC-ISP-DNS2"
|
|
set uuid 3b8ec844-579f-51ea-36c3-f43697ac12e1
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.12.61 255.255.255.255
|
|
next
|
|
edit "Google-DNS"
|
|
set uuid 26df4062-57a0-51ea-c8b4-6fecda000817
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 8.8.8.8 255.255.255.255
|
|
next
|
|
edit "Openstack-new-cloud-controller1"
|
|
set uuid 583a2ede-57b3-51ea-4a18-ed9b52a04510
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.11 255.255.255.255
|
|
next
|
|
edit "Openstack-new-cloud-controller2"
|
|
set uuid 65e8623a-57b3-51ea-7387-1b0a5fd1c9d4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.12 255.255.255.255
|
|
next
|
|
edit "Openstack-new-cloud-controller3"
|
|
set uuid 7891c32c-57b3-51ea-9ff4-b1b65204a18e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.13 255.255.255.255
|
|
next
|
|
edit "Openstack-new-cloud-compute16"
|
|
set uuid 8c56ad00-57b3-51ea-bf40-b6c2593ee093
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.14 255.255.255.255
|
|
next
|
|
edit "Openstack-new-cloud-compute19"
|
|
set uuid 9c83f354-57b3-51ea-5c12-db09712671da
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.15 255.255.255.255
|
|
next
|
|
edit "Openstack-new-cloud-compute3"
|
|
set uuid a9a0f578-57b3-51ea-9dd5-9cac7ef854a7
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.16 255.255.255.255
|
|
next
|
|
edit "Openstack-new-cloud-compute4"
|
|
set uuid b4097bf2-57b3-51ea-ebeb-e9f3928e04f6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.17 255.255.255.255
|
|
next
|
|
edit "Openstack-new-cloud-compute5"
|
|
set uuid c9962df8-57b3-51ea-0e9d-b3699d8894bd
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.18 255.255.255.255
|
|
next
|
|
edit "Openstack-new-cloud-compute6"
|
|
set uuid eb039db8-57b3-51ea-c359-1c3cf5a90aed
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.19 255.255.255.255
|
|
next
|
|
edit "Openstack-new-cloud-compute7"
|
|
set uuid fa6a3e6a-57b3-51ea-f2ea-741d0ce16238
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.26 255.255.255.255
|
|
next
|
|
edit "Openstack-new-cloud-compute8"
|
|
set uuid 3d549d4c-57b4-51ea-ea01-7d53495691f2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.27 255.255.255.255
|
|
next
|
|
edit "VNC-attack-source-1"
|
|
set uuid 14a1a846-57d6-51ea-daf5-9c308aea8d84
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 23.129.64.153 255.255.255.255
|
|
next
|
|
edit "mn-test"
|
|
set uuid 7d4286bc-5b7e-51ea-c375-410ff2deee52
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.43 255.255.255.255
|
|
next
|
|
edit "databiz-224-source-ip"
|
|
set uuid e36ca9e4-5dfa-51ea-fa99-0873e19ca457
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 106.0.61.130 255.255.255.255
|
|
next
|
|
edit "databiz-224-ip"
|
|
set uuid 175cf290-5dfb-51ea-2683-49e981094cf0
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.224 255.255.255.255
|
|
next
|
|
edit "openstack-haproxy-1"
|
|
set uuid ef292b76-5e9b-51ea-b426-764400e4e3d9
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.4 255.255.255.255
|
|
next
|
|
edit "openstack-haproxy-2"
|
|
set uuid fcd0ae2a-5e9b-51ea-f73d-776ac466fd94
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.5 255.255.255.255
|
|
next
|
|
edit "openstack-haproxy-3"
|
|
set uuid 09c57ff2-5e9c-51ea-c1d9-223d3333ec0d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.6 255.255.255.255
|
|
next
|
|
edit "openstack-haproxy-vip"
|
|
set uuid 192a751a-5e9c-51ea-8ea0-b6baa6b88e06
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.10 255.255.255.255
|
|
next
|
|
edit "philipine-attacker-ip"
|
|
set uuid 9932d366-6350-51ea-9acb-3c94e18cc542
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 203.82.35.18 255.255.255.255
|
|
next
|
|
edit "Momagic-ssh-allow-ip-1"
|
|
set uuid 76d356e8-6368-51ea-fcc0-7b34ebf3a413
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.43.230.5 255.255.255.255
|
|
next
|
|
edit "Momagic-ssh-allow-ip-2"
|
|
set uuid 81da9182-6368-51ea-b361-882d8a4054b3
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 202.0.94.5 255.255.255.255
|
|
next
|
|
edit "Momagic-ssh-allow-ip-3"
|
|
set uuid 9460dc4e-6368-51ea-c564-259e690eaeb5
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 113.11.109.29 255.255.255.255
|
|
next
|
|
edit "Momagic-VM-IP"
|
|
set uuid c78b2d04-6368-51ea-314b-2e7ff4b5276f
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.149 255.255.255.255
|
|
next
|
|
edit "Brilliant-kaplan-vendor-IP"
|
|
set uuid 55127928-6375-51ea-9b18-039a319fac17
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 178.18.207.213 255.255.255.255
|
|
next
|
|
edit "NovoTel-NAT-Public-IP"
|
|
set uuid 86c91e18-66a9-51ea-00d3-1bae4d5f3fe5
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.13.66 255.255.255.255
|
|
next
|
|
edit "route-mobile-new-source"
|
|
set uuid 703300be-68f8-51ea-1154-af9919da7a14
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.16.59.0 255.255.255.0
|
|
next
|
|
edit "kaplan-mnp-1433-allow-IP"
|
|
set uuid 5d04cf3e-68fa-51ea-f402-210c88022d7e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.13.68 255.255.255.255
|
|
next
|
|
edit "Openstack-new-cloud-compute9"
|
|
set uuid dbd1dd5a-6b4a-51ea-bba0-8b705fbe05f3
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.28 255.255.255.255
|
|
next
|
|
edit "Openstack-new-cloud-compute10"
|
|
set uuid edc33df6-6b4a-51ea-8363-ddb9085335f4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.29 255.255.255.255
|
|
next
|
|
edit "Momagic-ssh-allow-ip-4"
|
|
set uuid b275fde0-70ba-51ea-a268-e1fee80f97d1
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.36.103.78 255.255.255.255
|
|
next
|
|
edit "Momagic-ssh-allow-ip-5"
|
|
set uuid c2a624f6-70ba-51ea-4347-d5d7656ebfb6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.23.31.25 255.255.255.255
|
|
next
|
|
edit "Dingi-Application-DB-server"
|
|
set uuid 2d11a180-7359-51ea-4adb-45659e3463df
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.228 255.255.255.255
|
|
next
|
|
edit "Dingi-Queue -Server"
|
|
set uuid 40da4cbc-7359-51ea-7f0a-ae99c1a00408
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.162 255.255.255.255
|
|
next
|
|
edit "Mailborder-IP-IN-Cloud"
|
|
set uuid 0c98ca4a-74b3-51ea-f437-56aae0965210
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.41 255.255.255.255
|
|
next
|
|
edit "brilliant-autoprovision-server"
|
|
set uuid f24406a4-7571-51ea-977f-bd0d4d1a8a38
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.81 255.255.255.255
|
|
next
|
|
edit "CBBL-CLOUDUAT2-FinJ2EE"
|
|
set uuid b49cf338-7666-51ea-0ce1-dbd2281dba41
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.144 255.255.255.255
|
|
next
|
|
edit "Billing-iptsp-sms-itc-iig-isp"
|
|
set uuid 34dd8e44-77f3-51ea-6d6a-766cf6f987a8
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.100 255.255.255.255
|
|
next
|
|
edit "DB-server-1"
|
|
set uuid 0e949916-7c81-51ea-c6f2-9375a1bf2404
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.68 255.255.255.255
|
|
next
|
|
edit "DB-server-2"
|
|
set uuid 1eb3bca0-7c81-51ea-accd-950aa6e6d398
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.73 255.255.255.255
|
|
next
|
|
edit "DB-server-3"
|
|
set uuid 2518cf2c-7c81-51ea-a325-e6d7d5038459
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.91 255.255.255.255
|
|
next
|
|
edit "IPTSP-source-for-DB"
|
|
set uuid bb38faae-7c81-51ea-1047-6825eba1af02
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.12.241 255.255.255.255
|
|
next
|
|
edit "IPTSP-source-103.248.13.68"
|
|
set uuid ee89d3ea-7c8d-51ea-e80b-400a69a78356
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.13.68 255.255.255.255
|
|
next
|
|
edit "logic-soft-vm-1"
|
|
set uuid e8119946-91c1-51ea-ff6f-87031ba74db5
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.50 255.255.255.255
|
|
next
|
|
edit "IHI-infrustructure"
|
|
set uuid 0a56ea74-96a4-51ea-e22e-4b47a8ec7ee3
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.223.168 255.255.255.248
|
|
next
|
|
edit "IHI-infrustructure-VM"
|
|
set uuid 4db4199a-96a4-51ea-351b-3a460818cf3c
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.40 255.255.255.255
|
|
next
|
|
edit "http-https-attacker1"
|
|
set uuid cff59e54-a619-51ea-a904-8a0f13b4686b
|
|
set type ipmask
|
|
set comment "193.27.228.145"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 193.27.228.0 255.255.255.0
|
|
next
|
|
edit "zimbra-attacker-2"
|
|
set uuid 22278548-a61a-51ea-d8e3-949137bfac11
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 78.128.113.101 255.255.255.255
|
|
next
|
|
edit "zimbra-attacker-3"
|
|
set uuid 73578dd2-a61a-51ea-9e42-4ea407a64975
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 87.246.7.74 255.255.255.255
|
|
next
|
|
edit "http-https-attacker2"
|
|
set uuid 4a62d434-a61c-51ea-e957-553eda9b7004
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 195.54.160.0 255.255.254.0
|
|
next
|
|
edit "http-https-attacker3"
|
|
set uuid 5e50d0b8-a61c-51ea-dadf-d7fdc375c03e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 195.54.166.0 255.255.254.0
|
|
next
|
|
edit "http-https-attacker4"
|
|
set uuid 6e93156c-a61c-51ea-1cc6-a40cba788688
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 185.153.196.0 255.255.252.0
|
|
next
|
|
edit "http-https-attacker5"
|
|
set uuid bde6e42c-a68a-51ea-580e-61b8ae9083b1
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 89.248.160.0 255.255.240.0
|
|
next
|
|
edit "attacker-6"
|
|
set uuid b92aeeae-b43d-51ea-7e3b-671db894c7ed
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 185.156.73.0 255.255.255.0
|
|
next
|
|
edit "Darco-IP-Blacklist"
|
|
set uuid 9f6450b2-b476-51ea-5dfd-1626152775b7
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.196 255.255.255.255
|
|
next
|
|
edit "SMTP-attacker"
|
|
set uuid 2d760a9e-b882-51ea-dc6a-e1ded0b42883
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 193.56.28.0 255.255.255.0
|
|
next
|
|
edit "SMTP-attacker-2"
|
|
set uuid 4d948614-b915-51ea-23ae-efd8f634e277
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 45.143.223.102 255.255.255.255
|
|
next
|
|
edit "KA-Fortis-Source-for-RDP"
|
|
set uuid fdcd5538-b9dd-51ea-0d81-2e32a960bd23
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.217.69 255.255.255.255
|
|
next
|
|
edit "KA-Fortis-VM"
|
|
set uuid 15218fec-b9de-51ea-d8ab-b1ea5ff5821d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.248 255.255.255.255
|
|
next
|
|
edit "Doreen-IP"
|
|
set uuid 97a608ae-bc44-51ea-428b-32e1286677ef
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 182.160.124.206 255.255.255.255
|
|
next
|
|
edit "Netherlands-IP-compromised-VM-communicate"
|
|
set uuid 9e3a49ea-bde4-51ea-eff9-37c9d1aa5c5d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 45.9.148.99 255.255.255.255
|
|
next
|
|
edit "attacker-7"
|
|
set uuid 1a33ee20-c5f6-51ea-4d02-bd73ca7c525e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 92.63.196.3 255.255.255.255
|
|
next
|
|
edit "hddash-source-1"
|
|
set uuid 158d7d18-cce1-51ea-7ab6-d893d8f52f23
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 37.252.80.51 255.255.255.255
|
|
next
|
|
edit "hddash-source-2"
|
|
set uuid 240a6522-cce1-51ea-6eb7-314c4bfc7c93
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 37.252.91.38 255.255.255.255
|
|
next
|
|
edit "binirmaan-pfsense-IP"
|
|
set uuid 2e4d7d66-ce81-51ea-d60c-f220b2b9e3c6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.75 255.255.255.255
|
|
next
|
|
edit "brilliant-app-web-server"
|
|
set uuid 5f2a2882-cfe2-51ea-de26-4c03ab0fee72
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.69 255.255.255.255
|
|
next
|
|
edit "BUET-APP-SERVER-1-IP-109"
|
|
set uuid 2374dd04-d85d-51ea-0ea5-b917ca590257
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.109 255.255.255.255
|
|
next
|
|
edit "BUET-APP-SERVER-2-IP-108"
|
|
set uuid 389e1fec-d85d-51ea-f587-aeff508d5844
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.108 255.255.255.255
|
|
next
|
|
edit "BUET-APP-SERVER--8-IP-134"
|
|
set uuid d2eb97aa-d85d-51ea-2e07-b6690da10612
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.134 255.255.255.255
|
|
next
|
|
edit "BUET-DB-SERVER-VM-1-IP-114"
|
|
set uuid ed4283a2-d85d-51ea-656b-ed89157321e6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.114 255.255.255.255
|
|
next
|
|
edit "SMS-sourece-1"
|
|
set uuid 10f87b56-e6a2-51ea-44f6-0f64160835f7
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.220.2 255.255.255.255
|
|
next
|
|
edit "SMS-sourece-2"
|
|
set uuid 43ca48de-e6a2-51ea-a0b7-bb38dcf93833
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.220.4 255.255.255.255
|
|
next
|
|
edit "SMS-sourece-3"
|
|
set uuid 4f3c0bda-e6a2-51ea-3a17-f5c99eea4f26
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.220.195 255.255.255.255
|
|
next
|
|
edit "SMS-sourece-4"
|
|
set uuid 5b591fac-e6a2-51ea-f432-b59e9801cf75
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.222.74 255.255.255.255
|
|
next
|
|
edit "SMS-sourece-5"
|
|
set uuid 676acbec-e6a2-51ea-6b8e-29a93c20a46f
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.126.214.0 255.255.255.0
|
|
next
|
|
edit "SMS-sourece-6"
|
|
set uuid 71f40402-e6a2-51ea-d578-f2a1be0e0881
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.58.73.0 255.255.255.0
|
|
next
|
|
edit "Brilliant-SMS-VM"
|
|
set uuid 98b84e04-e6a2-51ea-f7e7-a66acfaf07a5
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.165 255.255.255.255
|
|
next
|
|
edit "Digital-ocean-IP-1"
|
|
set uuid fa1f5eb8-e926-51ea-3367-71ff52bb5582
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 192.241.128.0 255.255.128.0
|
|
next
|
|
edit "RDP-attacker-1"
|
|
set uuid 93ee3da2-e931-51ea-ea7f-799feec12486
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.247.226.0 255.255.254.0
|
|
next
|
|
edit "Brilliant-OBD-VM"
|
|
set uuid f8f6d842-eeb5-51ea-696e-7e5687e00b02
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.39 255.255.255.255
|
|
next
|
|
edit "Brilliant-OBD-VM-Source-1"
|
|
set uuid 0a6dcc16-eeb6-51ea-a56b-f8f751c08b37
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.220.2 255.255.255.255
|
|
next
|
|
edit "Brilliant-OBD-VM-Source-2"
|
|
set uuid 1cd18078-eeb6-51ea-24e9-c136701cf20d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.220.4 255.255.255.255
|
|
next
|
|
edit "Brilliant-OBD-VM-Source-3"
|
|
set uuid 4d334bac-eeb6-51ea-9db3-790103ee9e64
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.220.195 255.255.255.255
|
|
next
|
|
edit "Brilliant-OBD-VM-Source-4"
|
|
set uuid 571431a4-eeb6-51ea-9bb6-026757b893ae
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.222.74 255.255.255.255
|
|
next
|
|
edit "Brilliant-OBD-VM-Source-5"
|
|
set uuid 62c7ac74-eeb6-51ea-4146-0fda243b801a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.126.214.0 255.255.255.0
|
|
next
|
|
edit "Brilliant-OBD-VM-Source-6"
|
|
set uuid 6a0a110c-eeb6-51ea-d158-26ba858b3056
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.58.73.0 255.255.255.0
|
|
next
|
|
edit "Brilliant-OBD-VM-Source-7"
|
|
set uuid 7f25fd62-eeb6-51ea-afea-510b3cbf3fd2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.14.30 255.255.255.255
|
|
next
|
|
edit "Brilliant-OBD-VM-Source-8"
|
|
set uuid 87f682d6-eeb6-51ea-bc96-caed3afa7b6c
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 121.241.150.138 255.255.255.255
|
|
next
|
|
edit "Brilliant-OBD-VM-Source-9"
|
|
set uuid 922329bc-eeb6-51ea-1de3-b25a23b2bc14
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 23.106.37.69 255.255.255.255
|
|
next
|
|
edit "Brilliant-OBD-VM-Source-10"
|
|
set uuid a9b7ecfc-eeb6-51ea-f2c1-802ebd57fb83
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 142.91.170.191 255.255.255.255
|
|
next
|
|
edit "Brilliant-OBD-VM-Source-11"
|
|
set uuid b1d1b0f8-eeb6-51ea-dff5-cbcfd9e51eb9
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 37.48.87.18 255.255.255.255
|
|
next
|
|
edit "attacker-from-france"
|
|
set uuid ca8c5b76-f126-51ea-e8a3-b303e4c0a58e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 51.15.0.0 255.255.0.0
|
|
next
|
|
edit "Digital-ocean-IP-2"
|
|
set uuid cfd666d2-f264-51ea-09a9-b0df96b745a4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 165.22.32.0 255.255.240.0
|
|
next
|
|
edit "Digital-ocean-IP-3"
|
|
set uuid ffea0824-f264-51ea-bdfa-f86d3481efff
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 165.227.0.0 255.255.240.0
|
|
next
|
|
edit "Indian-ip-1"
|
|
set uuid 167b0812-f266-51ea-0f3e-f10e8b3a2b12
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.248.0 255.255.254.0
|
|
next
|
|
edit "BTEB-VM-02-215-141"
|
|
set uuid 80705ade-f319-51ea-a31b-7459f8219fe7
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.141 255.255.255.255
|
|
next
|
|
edit "USA-IP-Prio-bazar-attack"
|
|
set uuid dde45f94-f31e-51ea-fc4a-2c9123f4c3ac
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 74.91.112.0 255.255.255.0
|
|
next
|
|
edit "SMS-sourece-7"
|
|
set uuid e1cd063c-f351-51ea-c683-177116216da1
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.49.169.140 255.255.255.255
|
|
next
|
|
edit "BrackBank-Edge-IP"
|
|
set uuid dbdb8c2e-f655-51ea-5570-28c9293eaac2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.179.217.208 255.255.255.255
|
|
next
|
|
edit "Monasca-HAProxy"
|
|
set uuid ae7b1ccc-fb3c-51ea-84e5-aa27bb36ec20
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.88 255.255.255.255
|
|
next
|
|
edit "Monasca-Master-node"
|
|
set uuid c1cea3d4-fb3c-51ea-652c-1dc5a03d8d7e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.97 255.255.255.255
|
|
next
|
|
edit "usa_rdp_attacker_ip"
|
|
set uuid 7dc53ce8-fbfa-51ea-0be1-9b617edc21a7
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 45.58.126.0 255.255.255.0
|
|
next
|
|
edit "NovoAir-VM-02"
|
|
set uuid de2ca9dc-fc8f-51ea-1453-a80c986a571d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.216 255.255.255.255
|
|
next
|
|
edit "munna-vm"
|
|
set uuid 25722148-fe32-51ea-6396-1a6b7258a6e7
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.32 255.255.255.255
|
|
next
|
|
edit "mehrab-vm"
|
|
set uuid 9dce1d9c-0006-51eb-b40d-d8344a87d95b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.85 255.255.255.255
|
|
next
|
|
edit "mn-openstack-temp"
|
|
set uuid ff88d8a8-07de-51eb-4519-641ce399d8fd
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.170 255.255.255.255
|
|
next
|
|
edit "Walton-test-VM"
|
|
set uuid 48d2fcee-0ab6-51eb-442b-36f50c00c64b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.200 255.255.255.255
|
|
next
|
|
edit "Walton-source-IP"
|
|
set uuid 8ea4443a-0ab6-51eb-789f-c851378efc0f
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.243.140.0 255.255.252.0
|
|
next
|
|
edit "SMS-Source-8"
|
|
set uuid 9879e1de-0adb-51eb-3de6-f75130e587cd
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.150.255.0 255.255.255.0
|
|
next
|
|
edit "Walton-Production-DB-VM"
|
|
set uuid 859b56c2-0bdc-51eb-a1f4-d9f367aaf245
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.211 255.255.255.255
|
|
next
|
|
edit "OBD-Source-21"
|
|
set uuid a6b83f76-1359-51eb-470d-531fdaa79411
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 43.246.203.50 255.255.255.255
|
|
next
|
|
edit "OBD-Source-22"
|
|
set uuid b0361776-1359-51eb-5d06-757f811a99d8
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 119.148.6.102 255.255.255.255
|
|
next
|
|
edit "OBD-Source-23"
|
|
set uuid b8ba56f0-1359-51eb-07cf-b3a5b253c697
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 54.245.79.202 255.255.255.255
|
|
next
|
|
edit "OBD-Source-24"
|
|
set uuid c0d3e4a0-1359-51eb-c814-1493d32477f3
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 44.231.252.250 255.255.255.255
|
|
next
|
|
edit "OBD-Source-25"
|
|
set uuid c82ab468-1359-51eb-fdb6-a542593c03b8
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 54.203.242.57 255.255.255.255
|
|
next
|
|
edit "OBD-Source-26"
|
|
set uuid ceb51df0-1359-51eb-5a8a-ec234a2f19ab
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 34.215.214.98 255.255.255.255
|
|
next
|
|
edit "OBD-Source-27"
|
|
set uuid d877c7ac-1359-51eb-b3c8-1080495f5257
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 44.242.135.78 255.255.255.255
|
|
next
|
|
edit "china-based-IP"
|
|
set uuid ffa16a10-19a1-51eb-ad1d-0f46d0378569
|
|
set type geography
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set country "CN"
|
|
next
|
|
edit "netherland_ip_1"
|
|
set uuid 768844d2-1f33-51eb-679d-0036a487732f
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.145.13.0 255.255.255.0
|
|
next
|
|
edit "france-attacker-1"
|
|
set uuid fa6bd0b8-2a30-51eb-8ea2-f2ec311d5ea1
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 62.210.70.0 255.255.255.0
|
|
next
|
|
edit "PP-VM-01"
|
|
set uuid 5dc91d18-2ee2-51eb-0333-b5ebf96b03c0
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.172 255.255.255.255
|
|
next
|
|
edit "PP-VM-02"
|
|
set uuid 683bfc5c-2ee2-51eb-e897-5b13bea68ad4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.128 255.255.255.255
|
|
next
|
|
edit "PP-VM-03"
|
|
set uuid 767e3faa-2ee2-51eb-85ea-7b1a261a7749
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.111 255.255.255.255
|
|
next
|
|
edit "PP-VM-04"
|
|
set uuid 80976d0e-2ee2-51eb-f487-7730e392e746
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.153 255.255.255.255
|
|
next
|
|
edit "PP-VM-05"
|
|
set uuid 88bbf43c-2ee2-51eb-5315-cff339ee77e2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.94 255.255.255.255
|
|
next
|
|
edit "PP-VM-06"
|
|
set uuid 91e4f7b6-2ee2-51eb-247e-b4c9f1f5ac6d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.113 255.255.255.255
|
|
next
|
|
edit "PP-VM-07"
|
|
set uuid 9da8e76a-2ee2-51eb-7d75-03c98f86f3fa
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.160 255.255.255.255
|
|
next
|
|
edit "PP-VM-08"
|
|
set uuid a8a83af8-2ee2-51eb-5023-09a3cfe262aa
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.148 255.255.255.255
|
|
next
|
|
edit "PP-VM-09"
|
|
set uuid b8b9ecc0-2ee2-51eb-942b-72d089d5d894
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.149 255.255.255.255
|
|
next
|
|
edit "Binirmaan-VM"
|
|
set uuid 13b0c68c-32ec-51eb-2199-d02fdc05f9b8
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.106 255.255.255.255
|
|
next
|
|
edit "Centos-repo"
|
|
set uuid 2159c42a-33bc-51eb-669a-39d6983d4d00
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.232.121.196 255.255.255.255
|
|
next
|
|
edit "BR-OBD-Source-8"
|
|
set uuid 4380fa5c-345f-51eb-62b2-7fdb00faf9a1
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.150.255.0 255.255.255.0
|
|
next
|
|
edit "temp-blacklist-imran-IP"
|
|
set uuid 5309fe94-42a4-51eb-c9a2-ee46c2227770
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.10 255.255.255.255
|
|
next
|
|
edit "Netherland-IP-Block"
|
|
set uuid 3b915b34-4355-51eb-cd17-2d54d79a2c58
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 92.63.196.0 255.255.255.0
|
|
next
|
|
edit "usa_attacker_1"
|
|
set uuid 3b6fced8-45a3-51eb-159a-2b6668410d52
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 104.236.11.0 255.255.255.0
|
|
next
|
|
edit "Bangladeshi-IP"
|
|
set uuid 20983ac8-45f3-51eb-5bfd-f3c8c2203156
|
|
set type geography
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set country "BD"
|
|
next
|
|
edit "attacket-34"
|
|
set uuid 30900e28-48d3-51eb-2ebd-118e1d9e032f
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 94.102.49.0 255.255.255.0
|
|
next
|
|
edit "ICAB-VM-01"
|
|
set uuid f6ae3d90-49c4-51eb-838a-e1c329589dd7
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.140 255.255.255.255
|
|
next
|
|
edit "USA-IP-block-3"
|
|
set uuid 62c62c6c-4a84-51eb-db90-f6e92bd5cd3d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 194.26.25.0 255.255.255.0
|
|
next
|
|
edit "rdp-attacker5"
|
|
set uuid a23cbb7a-4c2f-51eb-ea7b-9a572315a151
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 78.38.176.0 255.255.255.0
|
|
next
|
|
edit "airtel-attacker"
|
|
set uuid 910ecbec-4dae-51eb-c9b0-25e460c3ba9b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.240.0 255.255.252.0
|
|
next
|
|
edit "RDP-attack-russian-ip"
|
|
set uuid 3ef7730c-53fa-51eb-453f-95472ee608b6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 92.119.160.0 255.255.255.0
|
|
next
|
|
edit "sifat-1"
|
|
set uuid 2d721534-5958-51eb-f417-a20733a9c2fd
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.9 255.255.255.255
|
|
next
|
|
edit "sifat-4"
|
|
set uuid 37e8781e-5958-51eb-96a6-0c47ab6d7d9a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.15 255.255.255.255
|
|
next
|
|
edit "sifat-2"
|
|
set uuid 415ad504-5958-51eb-1ee1-e6241ce78751
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.253 255.255.255.255
|
|
next
|
|
edit "sakib-mahmud"
|
|
set uuid 49d60500-5958-51eb-2e3f-9f83d6173e9e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.5 255.255.255.255
|
|
next
|
|
edit "imranex"
|
|
set uuid 51fffe5c-5958-51eb-41ae-fb06a0fb2703
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.213 255.255.255.255
|
|
next
|
|
edit "sajjad-vm-1"
|
|
set uuid 5ad2a8ae-5958-51eb-fbbd-d9bfa0b94799
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.12 255.255.255.255
|
|
next
|
|
edit "sifat-3"
|
|
set uuid 65c7e08a-5958-51eb-215c-eaea85f30c64
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.18 255.255.255.255
|
|
next
|
|
edit "webns-vm-1"
|
|
set uuid 6ba3b312-5958-51eb-8d9d-6d1e1d31cbb6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.114 255.255.255.255
|
|
next
|
|
edit "primary-ip-https-mgt"
|
|
set uuid bf14421a-5ca9-51eb-6e46-841fbe3ca287
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.210.46 255.255.255.255
|
|
next
|
|
edit "mahfuz-bhai-VM"
|
|
set uuid 08e8c4ec-5e1c-51eb-126f-935fc3376213
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.210 255.255.255.255
|
|
next
|
|
edit "dr-syfullah"
|
|
set uuid dc49e35c-5eda-51eb-8667-9b6bc20c70a2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.23 255.255.255.255
|
|
next
|
|
edit "momagic-ssh-allow-6"
|
|
set uuid e8f9efce-5fc1-51eb-8964-9c7344604a41
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 192.140.252.181 255.255.255.255
|
|
next
|
|
edit "Walton-VPN-IP"
|
|
set uuid 210f98f4-606d-51eb-9377-c5e8fd89211e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.174 255.255.255.255
|
|
next
|
|
edit "Walton-RTR-IP"
|
|
set uuid 450e9d86-606d-51eb-f59d-e49e1157c842
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.63 255.255.255.255
|
|
next
|
|
edit "indian-mssql-attacker"
|
|
set uuid bf0f7076-63b3-51eb-fa93-3c8b92ace598
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.244.0 255.255.255.0
|
|
next
|
|
edit "usa-attacker-tcp-split"
|
|
set uuid 6928197e-6485-51eb-f0e2-64d91c849813
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 92.38.173.0 255.255.255.0
|
|
next
|
|
edit "usa-attacker-tcp-split3"
|
|
set uuid 8eeeea48-6485-51eb-ed6e-350e34207e95
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 92.223.82.0 255.255.255.0
|
|
next
|
|
edit "NovoAir-File-Server"
|
|
set uuid 1d6220f8-6529-51eb-fdff-461fafc18cb3
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.134 255.255.255.255
|
|
next
|
|
edit "ic-mrtg"
|
|
set uuid b3da17fa-690e-51eb-3786-263a3cf89dc7
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.12.33 255.255.255.255
|
|
next
|
|
edit "gkg-ip"
|
|
set uuid 188c19f2-6c32-51eb-e819-87ef1d5c4365
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.21 255.255.255.255
|
|
next
|
|
edit "sifat-ador"
|
|
set uuid a04ddd3a-6c32-51eb-c87e-f7ccb6829448
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.21 255.255.255.255
|
|
next
|
|
edit "Evaly-Cloud-IP"
|
|
set uuid 3c6f0cf4-7695-51eb-0291-1f5af0d31adb
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.6 255.255.255.255
|
|
next
|
|
edit "Evaly-Source-IP"
|
|
set uuid 50e22090-7695-51eb-3560-52b267011457
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.15.202 255.255.255.255
|
|
next
|
|
edit "hdstrm-5-test-one-month"
|
|
set uuid 801e29f6-772d-51eb-8ebb-9e9d33533e1a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.105 255.255.255.255
|
|
next
|
|
edit "Evaly-Source-IP-2"
|
|
set uuid 0692294a-7f05-51eb-678c-168e6c8d3822
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.15.184 255.255.255.248
|
|
next
|
|
edit "dingi-test-33"
|
|
set uuid edbf2698-7fef-51eb-f00a-cf1f7739918c
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.179 255.255.255.255
|
|
next
|
|
edit "Dingi-vm-07"
|
|
set uuid e375aa74-7ff2-51eb-3544-b58bf33a44a5
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.179 255.255.255.255
|
|
next
|
|
edit "Dingi-vm-06"
|
|
set uuid 080b9060-7ff3-51eb-fad8-bf036be8f58c
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.174 255.255.255.255
|
|
next
|
|
edit "Dingi-vm-05"
|
|
set uuid 1b9d7a76-7ff3-51eb-c626-58331a4e9c39
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.178 255.255.255.255
|
|
next
|
|
edit "Dingi-vm-03"
|
|
set uuid 2f2af712-7ff3-51eb-7787-55b8184d285b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.220 255.255.255.255
|
|
next
|
|
edit "Amazon-ip-for-Dingi"
|
|
set uuid 6c6a7ee4-7ff4-51eb-478a-9c3eb5fa761a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 34.211.48.219 255.255.255.255
|
|
next
|
|
edit "Openstack-new-cloud-compute11"
|
|
set uuid f6975ce2-8254-51eb-8645-fe2b2807af9b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.30 255.255.255.255
|
|
next
|
|
edit "Openstack-new-cloud-compute12"
|
|
set uuid 481fb7f8-8255-51eb-d4df-20a8600a7a9c
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.23 255.255.255.255
|
|
next
|
|
edit "Openstack-new-cloud-compute14"
|
|
set uuid 526602a8-8255-51eb-ba12-06de51bbaefb
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.24 255.255.255.255
|
|
next
|
|
edit "firewall-to-nexus-1-lan1"
|
|
set uuid 39b2203e-8485-51eb-714e-32e4bfc2b671
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.209.49 255.255.255.255
|
|
next
|
|
edit "cloud-observium"
|
|
set uuid 66d43db6-96a7-51eb-37f3-da7c862ce348
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.48 255.255.255.255
|
|
next
|
|
edit "IPTSP-IP-118.67.214.5"
|
|
set uuid e03dd596-a73b-51eb-262f-36546233ccb1
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.214.5 255.255.255.255
|
|
next
|
|
edit "IOTA-vm-ip"
|
|
set uuid 8997f4d0-aa72-51eb-7fdc-3de5bb74d86c
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.86 255.255.255.255
|
|
next
|
|
edit "idrac-public-IP"
|
|
set uuid 8b3a246a-aeab-51eb-47e3-550ae9f6ca97
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.220.34 255.255.255.255
|
|
next
|
|
edit "Cloud-IPSec-Block"
|
|
set uuid 972e9194-c8e0-51eb-f95b-b2ef2d1af7fe
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.217.64 255.255.255.252
|
|
next
|
|
edit "route-mobile-vm-8"
|
|
set uuid e4c1729a-cdd2-51eb-1391-78d4df598bb7
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.110 255.255.255.255
|
|
next
|
|
edit "Openstack-new-cloud-compute15"
|
|
set uuid 63a6294a-d4de-51eb-f75f-1caa7cb3d629
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.25 255.255.255.255
|
|
next
|
|
edit "VPS-1-MGMT"
|
|
set uuid 834fa47e-d89e-51eb-a1d9-b5d31c284132
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.218.115 255.255.255.255
|
|
next
|
|
edit "VPS-1-Traffic-1"
|
|
set uuid 9123edbc-d89e-51eb-3b1e-f3d817dec1d7
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.218.118 255.255.255.255
|
|
next
|
|
edit "VPS-1-Traffic-2"
|
|
set uuid 9f7679de-d89e-51eb-ef84-b9c3886988cd
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.218.117 255.255.255.255
|
|
next
|
|
edit "VPS-1-Hypervisor"
|
|
set uuid 075a840a-d89f-51eb-3e4d-bc02d342c3f9
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.218.114 255.255.255.255
|
|
next
|
|
edit "VPS-2-Hypervisor"
|
|
set uuid 380c859e-d89f-51eb-e9cb-a9a0213e6df4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.218.186 255.255.255.255
|
|
next
|
|
edit "VPS-2-MGMT"
|
|
set uuid 4a023d84-d89f-51eb-2f65-78ee96fdff77
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.218.187 255.255.255.255
|
|
next
|
|
edit "VPS-2-VM-06"
|
|
set uuid 567035b2-d89f-51eb-e6e7-19c6b60184d0
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.218.188 255.255.255.255
|
|
next
|
|
edit "VPS-2-Traffic2"
|
|
set uuid 5dc6b1f6-d89f-51eb-6801-46896509104d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.218.189 255.255.255.255
|
|
next
|
|
edit "cloud-nagios"
|
|
set uuid 78c226e2-d8cd-51eb-fd4a-0e5a944e2ba6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.37 255.255.255.255
|
|
next
|
|
edit "VPS-BDCOM-MGT"
|
|
set uuid 949ba448-da2f-51eb-a84f-fea65ea1c3a4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 172.28.10.56 255.255.255.252
|
|
next
|
|
edit "VPS-Traffic-IP"
|
|
set uuid 864d5d74-da33-51eb-ef44-72093b3029b2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.223.16 255.255.255.248
|
|
next
|
|
edit "Openstack-new-cloud-compute13"
|
|
set uuid 00f61696-dcb5-51eb-6352-ccd0439f7e04
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.7 255.255.255.255
|
|
next
|
|
edit "AWS-IP-3-for-Brilliant-IPTSP"
|
|
set uuid 7bae6802-de3b-51eb-5979-0a7a8baa0ff6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 13.251.253.253 255.255.255.255
|
|
next
|
|
edit "hdstrm05"
|
|
set uuid ccd706aa-de4d-51eb-8312-ff2f1506510e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.79 255.255.255.255
|
|
next
|
|
edit "hdstrm06"
|
|
set uuid dd178ab2-de4d-51eb-119d-154dccf960f7
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.84 255.255.255.255
|
|
next
|
|
edit "Route_Mobile_VM_9"
|
|
set uuid 1f920b3a-de5b-51eb-8b77-4608954e502f
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.98 255.255.255.255
|
|
next
|
|
edit "Toku-VM-07"
|
|
set uuid 1fde678e-e557-51eb-6266-ae77ab7457cb
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.218.118 255.255.255.255
|
|
next
|
|
edit "toku-vm-03-traffic"
|
|
set uuid 35621c0e-e557-51eb-c5f0-b034f33d2fd4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.223.22 255.255.255.255
|
|
next
|
|
edit "Toku-Source-Add-122.166.250.182"
|
|
set uuid aa91c368-e94d-51eb-5a7b-2b7439fcbad3
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 122.166.250.182 255.255.255.255
|
|
next
|
|
edit "toku-Source-49.213.20.4"
|
|
set uuid f27b6d00-eac9-51eb-5a14-7b43e6069ac9
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 49.213.20.4 255.255.255.255
|
|
next
|
|
edit "Toku-VM-04-mgmt"
|
|
set uuid 34225868-ede5-51eb-42e5-e82affd96f57
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.218.190 255.255.255.255
|
|
next
|
|
edit "Toku-VM-04-Traffic"
|
|
set uuid 41848878-ede5-51eb-7c93-2aaacb3507f7
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.223.21 255.255.255.255
|
|
next
|
|
edit "amar-astha-vm"
|
|
set uuid ff077fa2-f030-51eb-b6dc-818b159cf6e4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.210 255.255.255.255
|
|
next
|
|
edit "novotel-pfsense"
|
|
set uuid 42c36fda-062f-51ec-1d51-c7e2c34f43cb
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.250 255.255.255.255
|
|
next
|
|
edit "Novotel-end-IP-for-IPSEC"
|
|
set uuid 627e2e0a-062f-51ec-6d5f-696a243ca498
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.13.87 255.255.255.255
|
|
next
|
|
edit "imranex2"
|
|
set uuid cb9898fa-0722-51ec-8bd0-fb0c9d75929b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.9 255.255.255.255
|
|
next
|
|
edit "sabit"
|
|
set uuid da4c56de-0722-51ec-0917-03e770835162
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.166 255.255.255.255
|
|
next
|
|
edit "ifinity1"
|
|
set uuid e44961ea-0722-51ec-fe18-66abbc198054
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.154 255.255.255.255
|
|
next
|
|
edit "ifinity2"
|
|
set uuid f1326ce4-0722-51ec-d2be-4c8faec4cd7a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.163 255.255.255.255
|
|
next
|
|
edit "atm-suva1"
|
|
set uuid fb2a1ba2-0722-51ec-9c85-2e1006d65a8a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.168 255.255.255.255
|
|
next
|
|
edit "atm-suva2"
|
|
set uuid 058886c4-0723-51ec-3d6b-945374f7611a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.37 255.255.255.255
|
|
next
|
|
edit "free-video"
|
|
set uuid 0f7a0dba-0723-51ec-375e-f189051cc5d0
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.204 255.255.255.255
|
|
next
|
|
edit "saiful"
|
|
set uuid 211d54d2-0723-51ec-41fd-d197a916a11d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.226 255.255.255.255
|
|
next
|
|
edit "nitro"
|
|
set uuid 2f22c670-0723-51ec-1e64-53e7aef86f3e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.192 255.255.255.255
|
|
next
|
|
edit "techies"
|
|
set uuid 3d251da4-0723-51ec-cb4f-010fbd71b73d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.68 255.255.255.255
|
|
next
|
|
edit "masum"
|
|
set uuid 5420a424-0723-51ec-cbca-8a07b785f09a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.16 255.255.255.255
|
|
next
|
|
edit "virtual-365"
|
|
set uuid 632b5162-0723-51ec-907d-1321e9420f4c
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.36 255.255.255.255
|
|
next
|
|
edit "monirul"
|
|
set uuid 6ca4a1c6-0723-51ec-a6b8-63c52bc76f9b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.152 255.255.255.255
|
|
next
|
|
edit "bssl-business-software"
|
|
set uuid dbb45a00-0ed7-51ec-cffc-65860aa01e5e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.201 255.255.255.255
|
|
next
|
|
edit "Dns-Group Bypass IP"
|
|
set uuid 63da1ac0-15e8-51ec-9d43-27279316f435
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.51 255.255.255.255
|
|
next
|
|
edit "Toku-VM-Database-Public-IP"
|
|
set uuid f0701e14-1901-51ec-2018-d808c3e23272
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.218.117 255.255.255.255
|
|
next
|
|
edit "Toku-VM-Application-Public-IP"
|
|
set uuid 031a7cda-1902-51ec-da31-06cd7699bfb9
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.218.189 255.255.255.255
|
|
next
|
|
edit "BSSL-Public-IP"
|
|
set uuid a1b329b0-1924-51ec-240d-3d5ed06798d2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.134 255.255.255.255
|
|
next
|
|
edit "Toku-VM-Windows-Svr-2019"
|
|
set uuid c040d978-19fa-51ec-95bb-1e178f652eed
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.218.116 255.255.255.255
|
|
next
|
|
edit "AirShip-RTR-IP"
|
|
set uuid c800c720-1c36-51ec-3f1e-a8719dfee05e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.209.115 255.255.255.255
|
|
next
|
|
edit "Toku-Source-159.69.64.151/32"
|
|
set uuid e7391200-1eac-51ec-30f0-f069c00a7f6a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 159.69.64.151 255.255.255.255
|
|
next
|
|
edit "Toku-Source-148.251.28.178/32"
|
|
set uuid f2db399e-1eac-51ec-0bc1-e77380ac7517
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 148.251.28.178 255.255.255.255
|
|
next
|
|
edit "Mainberg_File_Server"
|
|
set uuid e1f6145c-2503-51ec-855c-2a24c8865afb
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.73 255.255.255.255
|
|
next
|
|
edit "BMS-DB-Server_Primary"
|
|
set uuid cca9ab80-2987-51ec-b52d-106a51a59a4b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.101 255.255.255.255
|
|
next
|
|
edit "tanvir"
|
|
set uuid ad5b043e-2ce0-51ec-5ec8-7bd265c2adee
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.21 255.255.255.255
|
|
next
|
|
edit "BitopI_VM_IP"
|
|
set uuid 2e8534bc-3588-51ec-eaba-ae86f3a30b1f
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.141 255.255.255.255
|
|
next
|
|
edit "Brilliant-OBD-VM-Source-12"
|
|
set uuid a8ae67da-4079-51ec-83e2-e7c65b076361
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 195.154.20.230 255.255.255.255
|
|
next
|
|
edit "hdsapi01"
|
|
set uuid 59c8924e-4d0d-51ec-350d-92a7a4a269cc
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.98 255.255.255.255
|
|
next
|
|
edit "CEO-sir-CCTV-storage"
|
|
set uuid 8416e4dc-519b-51ec-2a97-c8973897fcdf
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.37 255.255.255.255
|
|
next
|
|
edit "Toku-Backup-Server"
|
|
set uuid 8484856c-5cce-51ec-2c93-5cac70a4bcd4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.90 255.255.255.255
|
|
next
|
|
edit "Steel-Tech-VM"
|
|
set uuid 4d7ba9be-67ba-51ec-cd36-0ac6d128bd77
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.17 255.255.255.255
|
|
next
|
|
edit "AWS-IP-4-for-Brilliant-IPTSP"
|
|
set uuid 129e7010-71d8-51ec-4fd6-5a89d13e061d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 13.213.252.144 255.255.255.255
|
|
next
|
|
edit "Brilliant-IPTSP-UCOM-IP-ACL"
|
|
set uuid ed63015c-7214-51ec-3782-d50067b86397
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 37.252.88.226 255.255.255.255
|
|
next
|
|
edit "Brilliant-IPTSP-GNC-Alfa-IP"
|
|
set uuid baad65b2-7cf1-51ec-50f4-5da139c67df4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 93.185.34.161 255.255.255.255
|
|
next
|
|
edit "TruGroup_file-Server"
|
|
set uuid 84b19464-7dbf-51ec-5493-1b8e3199a40c
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.130 255.255.255.255
|
|
next
|
|
edit "ceo-sir-source"
|
|
set uuid 073c5a36-7f46-51ec-8ed8-cc08c57bdd25
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.23.42.0 255.255.255.252
|
|
next
|
|
edit "ceo-sir-source-2"
|
|
set uuid 62bd0ef0-7f46-51ec-88ea-4ed0a6dd619b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.23.40.46 255.255.255.255
|
|
next
|
|
edit "test-observium"
|
|
set uuid a1a99750-8342-51ec-7ef7-def0dfe4cf1e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.3 255.255.255.255
|
|
next
|
|
edit "BAT-encoders-source-allow"
|
|
set uuid 3fbb8fcc-8355-51ec-e3f1-78d22acd75c2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 64.39.102.0 255.255.255.0
|
|
next
|
|
edit "BAT-Encoders-VM-IP"
|
|
set uuid 68627abc-8355-51ec-fb73-d8ed56385e1b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.5 255.255.255.255
|
|
next
|
|
edit "tru-group-data-test"
|
|
set uuid fba70aae-9886-51ec-85c3-9cb097f72a3a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.32 255.255.255.255
|
|
next
|
|
edit "Codes-and-Labels-VM-01_SMB_Allow"
|
|
set uuid 46433fe6-9d3d-51ec-30fe-67e900971fcf
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.197 255.255.255.255
|
|
next
|
|
edit "BAT-encoders-source-allow_IP_Rang2"
|
|
set uuid f4ae4272-9ec5-51ec-4970-f50bf7fabd61
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 64.39.102.0 255.255.255.0
|
|
next
|
|
edit "BAT-encoders-source-allow_IP_Rang3"
|
|
set uuid 132c83a8-9ec6-51ec-c279-5cfe4b4b24b7
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 139.87.112.0 255.255.254.0
|
|
next
|
|
edit "Toku-source-103.178.39.151"
|
|
set uuid 9f177388-a375-51ec-c948-f03c8887347b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.178.39.151 255.255.255.255
|
|
next
|
|
edit "BAT-Encoders-VM2-IP"
|
|
set uuid 7f032bce-a9c3-51ec-1511-77c79f20d712
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.29 255.255.255.255
|
|
next
|
|
edit "core-network-cacti"
|
|
set uuid a1b6abba-aa8f-51ec-6247-f060f07f0184
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.95 255.255.255.255
|
|
next
|
|
edit "New-Signaling-Server-1"
|
|
set uuid 243ab64a-aea4-51ec-4636-69ecfb0c9e55
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.108 255.255.255.255
|
|
next
|
|
edit "New-Signaling-Server-2"
|
|
set uuid 307dcb0e-aea4-51ec-46a8-00b0d0cf64ab
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.109 255.255.255.255
|
|
next
|
|
edit "nwdbsr03"
|
|
set uuid 44a2ff28-aea4-51ec-0b1b-53887fd6dab8
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.123 255.255.255.255
|
|
next
|
|
edit "new-db-server-vendor-IP"
|
|
set uuid 69558c1e-aea4-51ec-09b9-b3231bc5c721
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.149.143.82 255.255.255.255
|
|
next
|
|
edit "HTTP-Attaker"
|
|
set uuid 5ab08a48-c9d3-51ec-f30b-2cd9552d5f67
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 156.226.18.227 255.255.255.255
|
|
next
|
|
edit "HTTP-Attaker2-Subnet-block"
|
|
set uuid 130b0f4e-c9db-51ec-ec9a-c7cdba1ac900
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.244.116.0 255.255.252.0
|
|
next
|
|
edit "toku-Source-2-49.213.20.42"
|
|
set uuid ef79e908-d031-51ec-896a-9bfdbfa071c3
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 49.213.20.42 255.255.255.255
|
|
next
|
|
edit "Brilliant-IPTSP-Source-37.252.90.168"
|
|
set uuid ca209c1c-d0e3-51ec-b00c-835e93ca4daf
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 37.252.90.168 255.255.255.255
|
|
next
|
|
edit "HTTP-Attaker3"
|
|
set uuid 33f4faf8-dcaf-51ec-f2d8-37b82c467dba
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 168.119.110.39 255.255.255.255
|
|
next
|
|
edit "AttackerIP-4"
|
|
set uuid 82fd29f0-e352-51ec-94d5-e0e176eac509
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 45.179.176.140 255.255.255.255
|
|
next
|
|
edit "Attacker-IP-5"
|
|
set uuid c4c583bc-e7aa-51ec-6d61-7d1238e4e786
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 193.201.9.224 255.255.255.255
|
|
next
|
|
edit "Attacker-IP-6-Https"
|
|
set uuid c03418aa-ff41-51ec-a2a5-564cc05cc037
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.132.251.74 255.255.255.255
|
|
next
|
|
edit "Attacker-ip-7"
|
|
set uuid 78dada4e-0bd4-51ed-19eb-296c80ef5734
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.226.55.38 255.255.255.255
|
|
next
|
|
edit "Admin-Access-7"
|
|
set uuid 9a59d6ea-16cc-51ed-618c-4227503190aa
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 163.53.151.2 255.255.255.255
|
|
next
|
|
edit "asoft_VM_Smb_allow"
|
|
set uuid 8498aaf2-1933-51ed-123c-0aff21ac189d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.108 255.255.255.255
|
|
next
|
|
edit "Attacker-IP-10"
|
|
set uuid d6a38474-212c-51ed-7de7-75cd38296813
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 104.168.34.180 255.255.255.255
|
|
next
|
|
edit "Attacker-IP-6"
|
|
set uuid ffb7d522-212c-51ed-3a3e-b210cfa58c06
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 185.50.70.0 255.255.255.0
|
|
next
|
|
edit "Zimbra Mail"
|
|
set uuid 09b9d1f2-28d9-51ed-c8f4-9dffe9a4166d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.50 255.255.255.255
|
|
next
|
|
edit "Toku-Source-3.1.47.248"
|
|
set uuid 0ee78ef2-2d03-51ed-436e-ee2c73d5623d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 3.1.47.248 255.255.255.255
|
|
next
|
|
edit "toku-Source-18.142.165.167"
|
|
set uuid e4e55372-4847-51ed-80a0-f63a089d8c09
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 18.142.165.167 255.255.255.255
|
|
next
|
|
edit "Uttara Club-Vm01"
|
|
set uuid 7c3f430e-4e06-51ed-e199-4dddb09638c1
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.154 255.255.255.255
|
|
next
|
|
edit "Toku-Source-IP-3.0.196.232"
|
|
set uuid bb2b0462-4e98-51ed-c229-772a471bb6f3
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 3.0.196.232 255.255.255.255
|
|
next
|
|
edit "Toku-Source-IP-54.254.210.111"
|
|
set uuid d1bdc9bc-4e98-51ed-c0da-69356a8e9279
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 54.254.210.111 255.255.255.255
|
|
next
|
|
edit "cacti-ip"
|
|
set uuid 91c7c56a-55af-51ed-c92b-929e0c85f222
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.46 255.255.255.255
|
|
next
|
|
edit "Attacker11"
|
|
set uuid 43d8c372-5a8c-51ed-ddf0-b85275853556
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 178.176.174.215 255.255.255.255
|
|
next
|
|
edit "attacker12"
|
|
set uuid 185a2d02-5a8d-51ed-45ad-1a9bf83aa682
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 188.162.43.83 255.255.255.255
|
|
next
|
|
edit "Attacker IP 13"
|
|
set uuid bbdebb3c-5a8d-51ed-7cd3-e23cf36cd6b5
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 39.108.66.68 255.255.255.255
|
|
next
|
|
edit "hdvoip05"
|
|
set uuid f2577126-5d86-51ed-ad3f-929325c026a1
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.94 255.255.255.255
|
|
next
|
|
edit "Attacker14"
|
|
set uuid b0330838-5db2-51ed-6362-0aaf06d99c37
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 142.132.210.230 255.255.255.255
|
|
next
|
|
edit "Attacker15"
|
|
set uuid 831aa7be-5e4f-51ed-d9b9-dbf93003529d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 185.137.15.0 255.255.255.0
|
|
next
|
|
edit "Attacker16"
|
|
set uuid 0f5bc14a-5e5a-51ed-df78-3ad67dac274a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 188.138.24.139 255.255.255.255
|
|
next
|
|
edit "IP-36.255.70.88"
|
|
set uuid 8bfa0f5c-60a5-51ed-cfb3-ade52c545235
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.88 255.255.255.255
|
|
next
|
|
edit "IP-36.255.70.79"
|
|
set uuid 9f199a26-60a5-51ed-be39-59ec23444297
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.79 255.255.255.255
|
|
next
|
|
edit "mahfuz_ip"
|
|
set uuid 7cd9f8ea-659e-51ed-ca28-d820fe5c0785
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.69 255.255.255.255
|
|
next
|
|
edit "toku_VPS-1_ALL_VM"
|
|
set uuid a18222e2-6622-51ed-71d6-f72f1b9017d7
|
|
set type iprange
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set start-ip 118.67.218.115
|
|
set end-ip 118.67.218.118
|
|
next
|
|
edit "toku_VPS-2_ALL_VM"
|
|
set uuid f5d9e294-6622-51ed-a34e-fc0401d0ead8
|
|
set type iprange
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set start-ip 118.67.218.187
|
|
set end-ip 118.67.218.190
|
|
next
|
|
edit "toku_CLOUD_VM-01"
|
|
set uuid daf29c72-6623-51ed-3e0c-bb7905262321
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.17 255.255.255.255
|
|
next
|
|
edit "toku_CLOUD_VM-02"
|
|
set uuid f8b1dce6-6623-51ed-1026-d6fc851d7fdb
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.211 255.255.255.255
|
|
next
|
|
edit "route-mobile-temporary-ip-testing-49.248.29.23"
|
|
set uuid f2b9c73a-6fbb-51ed-9b78-6fc3c8cff086
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 49.248.29.23 255.255.255.255
|
|
next
|
|
edit "Media_Soft_IP_36.255.70.223"
|
|
set uuid ccbe9448-7b91-51ed-0d00-0b7d8dbc3c2e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.223 255.255.255.255
|
|
next
|
|
edit "Media_Soft_Allowed_IP_123.136.26.210"
|
|
set uuid f61c3a70-7b91-51ed-f6ea-2c1a2e1f9505
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 123.136.26.210 255.255.255.255
|
|
next
|
|
edit "toku_CLOUD_VM-03"
|
|
set uuid 0bdad35e-81c7-51ed-ef1b-6798d886c3fd
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.240 255.255.255.255
|
|
next
|
|
edit "tanvir_ip_36.255.70.98/32"
|
|
set uuid 7c52d4ba-8be0-51ed-f29c-9c0a437bfaf4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.98 255.255.255.255
|
|
next
|
|
edit "Chinese-Dest-for-Novotel-Exchange"
|
|
set uuid d52024b0-9ad3-51ed-24c1-23341f257426
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.88.33.33 255.255.255.255
|
|
next
|
|
edit "Novotel-Xchange-118.67.215.237"
|
|
set uuid 3a1232d2-9ad4-51ed-cdee-d89423701d72
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.237 255.255.255.255
|
|
next
|
|
edit "DB-server-1-new"
|
|
set uuid 7fdacc14-a13e-51ed-e9ba-01b76ab688b2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.97 255.255.255.255
|
|
next
|
|
edit "Openstack-New-Cloud-compute-17"
|
|
set uuid 52673bf4-a775-51ed-9a6a-98a731a2c9ff
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.8 255.255.255.255
|
|
next
|
|
edit "hdsapi02"
|
|
set uuid 428123aa-a7c3-51ed-8d89-0c4fb948f02e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.89 255.255.255.255
|
|
next
|
|
edit "Core-Cacti-118.67.212.69"
|
|
set uuid 71dc1cb8-ab88-51ed-bf96-dc6cb271d9c5
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.69 255.255.255.255
|
|
next
|
|
edit "Core-IC-VPN"
|
|
set uuid d50c4ad0-ab8b-51ed-8151-7b7a19a75e31
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 163.53.150.254 255.255.255.255
|
|
next
|
|
edit "Openstack-New-Cloud-Compute-18"
|
|
set uuid a0c1ec82-b29b-51ed-b9ed-a6c07bc6d70b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.9 255.255.255.255
|
|
next
|
|
edit "toku-source-jenkin_49.213.20.55/32"
|
|
set uuid 304af826-b2a1-51ed-5ece-af6b1aadbe3b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 49.213.20.55 255.255.255.255
|
|
next
|
|
edit "Openstack-Rocky-Infra-Block-2"
|
|
set uuid 51e10480-cc5a-51ed-8bce-9fdc808373fe
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.211.32 255.255.255.224
|
|
next
|
|
edit "Openstack-New-Cloud-Compute-20"
|
|
set uuid c46689c2-cc63-51ed-6f9c-0efe76bfad74
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.211.36 255.255.255.255
|
|
next
|
|
edit "mahfuz_home_43.230.122.137"
|
|
set uuid e1454ef6-e767-51ed-72d6-e20a1a171281
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 43.230.122.137 255.255.255.255
|
|
next
|
|
edit "Openstack-New-Cloud-Compute-21"
|
|
set uuid 17eac398-e982-51ed-13f9-f42738b9623f
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.211.37 255.255.255.255
|
|
next
|
|
edit "Openstack-New-Cloud-Compute-22"
|
|
set uuid 592fd0e6-e982-51ed-983b-89c0fd758bc2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.211.38 255.255.255.255
|
|
next
|
|
edit "SMTP-attack"
|
|
set uuid 8c680756-ef01-51ed-e012-017665986d46
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 46.148.40.0 255.255.255.0
|
|
next
|
|
edit "Novotel-Pfsense-IP"
|
|
set uuid c1306224-efb2-51ed-6765-91fd57e8cab3
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.250 255.255.255.255
|
|
next
|
|
edit "toku_source-49.213.20.35"
|
|
set uuid 16d7d72c-f94d-51ed-01a7-bb6d699e45d9
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 49.213.20.35 255.255.255.255
|
|
next
|
|
edit "Attacker IP 17"
|
|
set uuid 691c8d4e-0293-51ee-0209-e799f118a4b6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 182.253.111.133 255.255.255.255
|
|
next
|
|
edit "Attacker IP 18"
|
|
set uuid 6ee0e688-0295-51ee-0616-08f9a7cdcb9f
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 220.247.166.46 255.255.255.255
|
|
next
|
|
edit "toku_CLOUD_VM-04"
|
|
set uuid 0568eed2-04f0-51ee-b2b3-2a2df63fc785
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.71.203 255.255.255.255
|
|
next
|
|
edit "toku_CLOUD_VM-05"
|
|
set uuid 399eebac-04f0-51ee-95e3-92068f6e278f
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.137 255.255.255.255
|
|
next
|
|
edit "toku_CLOUD_VM-test"
|
|
set uuid 6bb00978-04f0-51ee-4e5d-bcc4faa07286
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.71.56 255.255.255.255
|
|
next
|
|
edit "toku_VPS_VIP_block"
|
|
set uuid 189de2b8-04f1-51ee-0644-9085f6245531
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.223.16 255.255.255.248
|
|
next
|
|
edit "DB-Server-118.67.215.107"
|
|
set uuid cc6a4680-1412-51ee-018f-6206f149fe50
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.107 255.255.255.255
|
|
next
|
|
edit "Openstack-New-Cloud-Compute-23"
|
|
set uuid e0ca4efa-26c2-51ee-d729-af5e3cd09684
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.211.39 255.255.255.255
|
|
next
|
|
edit "Openstack-New-Cloud-Compute-24"
|
|
set uuid 23a4694a-26c3-51ee-960c-fdacaf334dd4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.211.40 255.255.255.255
|
|
next
|
|
edit "toku_source_13.251.201.165"
|
|
set uuid 8ee057ae-2d2c-51ee-bc9e-e5ba607f29ff
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 13.251.201.165 255.255.255.255
|
|
next
|
|
edit "hightechpark_officeip_118.67.223.70"
|
|
set uuid 3f12dd6c-3675-51ee-7aec-648987e6710a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.223.70 255.255.255.255
|
|
next
|
|
edit "ECRL_SMB_Allow"
|
|
set uuid 8fbd8d84-4d63-51ee-9903-f92c294d5956
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.114 255.255.255.255
|
|
next
|
|
edit "RDP-Attacker"
|
|
set uuid e92cf6f0-51ed-51ee-779d-b3c9b6b8ee4b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.89.83.198 255.255.255.255
|
|
next
|
|
edit "Attacker-19"
|
|
set uuid 2cac057c-56a0-51ee-4f09-9ecdeedede83
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 39.155.225.111 255.255.255.255
|
|
next
|
|
edit "IPTSP-Observium"
|
|
set uuid 515e080e-56a3-51ee-f825-1a6a5eebc285
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.125 255.255.255.255
|
|
next
|
|
edit "attacker RDP"
|
|
set uuid a19ecfd0-56a6-51ee-a1f8-ea4df2f7d29b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 94.231.110.217 255.255.255.255
|
|
next
|
|
edit "RDP Attacker"
|
|
set uuid b502d9b8-56a6-51ee-3fce-1e9de1ef2408
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 78.186.2.37 255.255.255.255
|
|
next
|
|
edit "Attacker Ip 21"
|
|
set uuid b89151c8-56aa-51ee-e84c-df85ac6373c0
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 194.165.16.78 255.255.255.255
|
|
next
|
|
edit "Attacker 22"
|
|
set uuid d09b9b2a-56aa-51ee-4377-1db04566c13a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 194.165.16.37 255.255.255.255
|
|
next
|
|
edit "Attacker 23"
|
|
set uuid dfc508f2-56aa-51ee-b3e0-3f3f926be6e8
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 45.227.254.48 255.255.255.255
|
|
next
|
|
edit "attacker 24"
|
|
set uuid fa7e6062-56aa-51ee-d8ee-aaa2f0a3890d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 194.165.16.10 255.255.255.255
|
|
next
|
|
edit "Attacker 25"
|
|
set uuid 08e08298-56ab-51ee-fa8e-b082adff4e7b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 194.165.16.76 255.255.255.255
|
|
next
|
|
edit "Attacker 26"
|
|
set uuid 14b05986-56ab-51ee-3fd3-b2002f0413e4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 45.227.254.49 255.255.255.255
|
|
next
|
|
edit "toku_CLOUD_VM-06"
|
|
set uuid 240fdb86-5cf0-51ee-da6b-b6d66ba6c1e0
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.31 255.255.255.255
|
|
next
|
|
edit "toku_temp_ip_202.133.192.140"
|
|
set uuid 02a153d6-61ef-51ee-df85-9df40cd961a8
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 202.133.192.140 255.255.255.255
|
|
next
|
|
edit "toku_temp_ip_49.205.105.212"
|
|
set uuid 3d0687f8-61ef-51ee-68c0-2beaad01d997
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 49.205.105.212 255.255.255.255
|
|
next
|
|
edit "toku_tmp_IP_122.172.83.206"
|
|
set uuid a0ddae60-61f3-51ee-59d9-e58c4d1739c9
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 122.172.83.206 255.255.255.255
|
|
next
|
|
edit "toku_temp_IP_222.164.155.125"
|
|
set uuid 305eced6-61f7-51ee-9233-4e3cb27402ef
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 222.164.155.125 255.255.255.255
|
|
next
|
|
edit "Openstack-New-Cloud-Compute-25"
|
|
set uuid e96b2b2c-626f-51ee-f180-38dc0df15948
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.211.41 255.255.255.255
|
|
next
|
|
edit "SMTP_Attacker-1"
|
|
set uuid 42766704-6478-51ee-eb43-c5b765a49289
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 178.176.174.12 255.255.255.255
|
|
next
|
|
edit "SMTP_Attacker-2"
|
|
set uuid 51364232-6478-51ee-20a1-51c9c29e31cc
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 178.176.174.134 255.255.255.255
|
|
next
|
|
edit "SMTP_Attacker-3"
|
|
set uuid 62278e2a-6478-51ee-943e-8a6554e56934
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 178.176.174.233 255.255.255.255
|
|
next
|
|
edit "SMTP_Attacker-4"
|
|
set uuid 769fd876-6478-51ee-21cd-bea43dd63e0f
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 178.176.175.118 255.255.255.255
|
|
next
|
|
edit "SMTP_Attacker-5"
|
|
set uuid 8d74e6e0-6478-51ee-4137-13b3a5f4f226
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 178.176.175.173 255.255.255.255
|
|
next
|
|
edit "SMTP_Attacker-6"
|
|
set uuid a5340f4a-6478-51ee-5ec7-3a414e82e177
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 178.176.175.76 255.255.255.255
|
|
next
|
|
edit "SMTP_Attacker-7"
|
|
set uuid ca37278c-6478-51ee-37cc-32e7531c7c67
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 178.176.175.99 255.255.255.255
|
|
next
|
|
edit "SMTP_Attacker-8"
|
|
set uuid 4abea44c-647a-51ee-6a17-94efb63ec045
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 107.173.177.136 255.255.255.255
|
|
next
|
|
edit "SMTP_Attacker-9"
|
|
set uuid 9487ef02-647a-51ee-1c77-8db845a8e1e9
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 188.162.43.170 255.255.255.255
|
|
next
|
|
edit "toku_src_ip_203.76.96.85"
|
|
set uuid 1968f6ba-66bc-51ee-a8d0-8358d57c2b54
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 203.76.96.85 255.255.255.255
|
|
next
|
|
edit "toku_src_intercloud_103.248.12.227"
|
|
set uuid 7d16bc88-66bc-51ee-1ea0-d3fff3385601
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.12.227 255.255.255.255
|
|
next
|
|
edit "IPTSP-new source_163.53.150.254"
|
|
set uuid 7cf25112-6960-51ee-4868-807f21898119
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 163.53.150.254 255.255.255.255
|
|
next
|
|
edit "Toku-BD-BLT-Quark-PROD-02"
|
|
set uuid 03cc44a2-6bed-51ee-8bcb-4263ad93272a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.71.47 255.255.255.255
|
|
next
|
|
edit "RDP-Attacker-10"
|
|
set uuid 149f8fc0-714f-51ee-1bea-ca8770f721c9
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 43.156.64.83 255.255.255.255
|
|
next
|
|
edit "RDP-Attaker-11"
|
|
set uuid a686ea7e-7608-51ee-69a9-3069e4a8e4a8
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 176.98.41.39 255.255.255.255
|
|
next
|
|
edit "attacker ip 19"
|
|
set uuid f1ad83f4-76d6-51ee-98c4-570455f25c90
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 159.65.153.238 255.255.255.255
|
|
next
|
|
edit "Attacker IP 30"
|
|
set uuid a66d5294-7c57-51ee-d0f2-778d6ddf00d5
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 79.124.62.78 255.255.255.255
|
|
next
|
|
edit "Attacker IP 31"
|
|
set uuid b365137e-7c57-51ee-e16c-3a6f977542cd
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 79.124.62.82 255.255.255.255
|
|
next
|
|
edit "attacker IP"
|
|
set uuid ccc02106-7c57-51ee-c8dc-30227f07ad60
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 79.124.62.86 255.255.255.255
|
|
next
|
|
edit "Attacker Ip 33"
|
|
set uuid d81e6148-7c57-51ee-a769-9dd8332d02f8
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 79.124.62.130 255.255.255.255
|
|
next
|
|
edit "Attacker-IP-HTTP-1"
|
|
set uuid d0e7e7c0-8c22-51ee-e6af-293dc7e9d9e3
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.115.118.6 255.255.255.255
|
|
next
|
|
edit "RDP-Attacker-2"
|
|
set uuid 8b9dc258-8e9c-51ee-d905-fdeebade1467
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 195.201.86.117 255.255.255.255
|
|
next
|
|
edit "Toku-FTP-IP"
|
|
set uuid b82bc2f4-97d7-51ee-ad76-1c307099628f
|
|
set type ipmask
|
|
set comment "Toku ftp allow"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.231 255.255.255.255
|
|
next
|
|
edit "Toku-FTP-Remote"
|
|
set uuid fce39e44-97d7-51ee-0e81-82b433211b37
|
|
set type ipmask
|
|
set comment "toku remote ip"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 52.179.195.180 255.255.255.255
|
|
next
|
|
edit "Openstack-new-cloud-compute26"
|
|
set uuid a234c018-9e3f-51ee-acd7-c4d5e2411cb4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.211.42 255.255.255.255
|
|
next
|
|
edit "Attacker-IP-34"
|
|
set uuid 5730c82a-9e42-51ee-bac9-18a45a90bc0d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 63.223.59.110 255.255.255.255
|
|
next
|
|
edit "IPTSP-UK-Server-1"
|
|
set uuid 0f534c90-9f18-51ee-663c-60f583eef972
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.9.139.154 255.255.255.255
|
|
next
|
|
edit "IPTSP-UK-Server-2"
|
|
set uuid 1c55e52e-9f18-51ee-4f9b-b1cb72c5dcd3
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.9.139.155 255.255.255.255
|
|
next
|
|
edit "loadbalancer-2_iptsp_118.67.213.155"
|
|
set uuid e7a21dba-a3c3-51ee-6d09-494d3ad60352
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.155 255.255.255.255
|
|
next
|
|
edit "loadbalancer-1_iptsp_118.67.213.119"
|
|
set uuid 5d7d57ac-a3c4-51ee-5260-daea58291b55
|
|
set type ipmask
|
|
set comment "loadbalancer-1_iptsp_118.67.213.119"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.119 255.255.255.255
|
|
next
|
|
edit "Softifybd-Limited-VM_149"
|
|
set uuid 96e4cc32-be6d-51ee-2ea7-3e66900a1fbe
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.149 255.255.255.255
|
|
next
|
|
edit "Softifybd-Limited-VM_140"
|
|
set uuid a100c4a0-be6d-51ee-6218-0fef0bbec9f2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.140 255.255.255.255
|
|
next
|
|
edit "attacker-35"
|
|
set uuid 1ef6dcc2-bf5a-51ee-c0a0-b5af43b60f9d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 217.145.164.226 255.255.255.255
|
|
next
|
|
edit "Attacker-36"
|
|
set uuid 60a5a45c-c36d-51ee-79f8-b0446aca4934
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 142.250.76.132 255.255.255.255
|
|
next
|
|
edit "Attacker-37"
|
|
set uuid a7135d26-c36d-51ee-e79e-f81788091edc
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 142.250.206.196 255.255.255.255
|
|
next
|
|
edit "Attacker-38"
|
|
set uuid 06aad516-c36e-51ee-f84e-c98f6fde1333
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 178.22.65.11 255.255.255.255
|
|
next
|
|
edit "Attacker-39"
|
|
set uuid edc5ccc0-c739-51ee-d13f-f2f00a1865d1
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 115.92.229.10 255.255.255.255
|
|
next
|
|
edit "Attacker-40"
|
|
set uuid ffd424ac-c739-51ee-289a-369ca3a4e2c6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 115.92.229.20 255.255.255.255
|
|
next
|
|
edit "Attacker-41"
|
|
set uuid 0d72b254-c73a-51ee-f418-681054bcdcb5
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 115.92.229.30 255.255.255.255
|
|
next
|
|
edit "Attacker-42"
|
|
set uuid 20a70f0a-c73a-51ee-59a8-bf7acea9cb5f
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 115.92.229.40 255.255.255.255
|
|
next
|
|
edit "country_based_lock_India"
|
|
set uuid dde7697c-ce1d-51ee-8612-2de270380d73
|
|
set type geography
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set country "IN"
|
|
next
|
|
edit "Attacker-43"
|
|
set uuid d865b4c0-cf28-51ee-ac9b-c2f245b44171
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 94.26.40.30 255.255.255.255
|
|
next
|
|
edit "Attacker-44"
|
|
set uuid 636d2baa-cf2b-51ee-94ae-72bea64829a2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 35.214.169.245 255.255.255.255
|
|
next
|
|
edit "Openstack-New-cloud-compute27"
|
|
set uuid c8f9cdd2-dec8-51ee-1f73-63ae1138310d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.211.43 255.255.255.255
|
|
next
|
|
edit "RDP-Attacker-12"
|
|
set uuid bc69ff50-f6f2-51ee-9203-b69e80add9a5
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 179.50.60.17 255.255.255.255
|
|
next
|
|
edit "SSH_Attacker-1"
|
|
set uuid 1d1cb3ea-f7c7-51ee-2b9f-d7b1be5853a6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 167.99.65.128 255.255.255.255
|
|
next
|
|
edit "SSH-Attacker-2"
|
|
set uuid 2b3667fa-f7c7-51ee-a9ab-856f05109fc9
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 152.42.207.210 255.255.255.255
|
|
next
|
|
edit "SSH_Attacker-3"
|
|
set uuid 42feabf4-f7c7-51ee-6af1-4b8469287031
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 167.172.70.239 255.255.255.255
|
|
next
|
|
edit "SSH_Attacker-4"
|
|
set uuid 5e619a5a-f7c7-51ee-2507-6814a868e893
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 159.223.52.102 255.255.255.255
|
|
next
|
|
edit "SSH_Attacker-5"
|
|
set uuid 77363ae0-f7c7-51ee-494e-354caf1ac555
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 152.42.174.144 255.255.255.255
|
|
next
|
|
edit "SSH-Attacker-6"
|
|
set uuid 59fcc13c-f7c8-51ee-a6c5-c182dca1c1db
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 165.232.165.111 255.255.255.255
|
|
next
|
|
edit "SSH-Attacker-7"
|
|
set uuid 820f6710-f7c8-51ee-1a42-3686e283df51
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 178.128.93.17 255.255.255.255
|
|
next
|
|
edit "SSH-Attacker-8"
|
|
set uuid a799622e-f7c8-51ee-3524-ecb061bf9695
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 152.42.199.170 255.255.255.255
|
|
next
|
|
edit "SSH-Attacker-9"
|
|
set uuid c82077a8-f7c8-51ee-3e88-537d3d02f364
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 152.42.227.145 255.255.255.255
|
|
next
|
|
edit "SSH-Attacker-10"
|
|
set uuid eb06673c-f7c8-51ee-c394-2e744b8684ab
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 159.223.87.242 255.255.255.255
|
|
next
|
|
edit "RDP-Attacker-13"
|
|
set uuid 8a015308-f885-51ee-3cb1-0a6aed83ccc4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 185.23.73.34 255.255.255.255
|
|
next
|
|
edit "attacker-45-ftp-htp"
|
|
set uuid 079af862-fc7a-51ee-88f9-4575d02032b2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 185.52.101.77 255.255.255.255
|
|
next
|
|
edit "Openstack-New-cloud-compute28"
|
|
set uuid f7764066-ffc3-51ee-6888-fb7654d5d0d9
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.211.44 255.255.255.255
|
|
next
|
|
edit "Novotel CDR server_118.67.215.149"
|
|
set uuid 3a45c4a2-ffc4-51ee-3597-b5a510d45174
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.149 255.255.255.255
|
|
next
|
|
edit "Novotel_office_IP_103.248.13.66"
|
|
set uuid a9232f90-ffc4-51ee-f013-4259ff7ab6b4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.13.66 255.255.255.255
|
|
next
|
|
edit "RDP_Attacker-14"
|
|
set uuid 4607fe7c-0834-51ef-4e62-696e460f66d4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 46.10.205.44 255.255.255.255
|
|
next
|
|
edit "RDP-Attack-15"
|
|
set uuid df63171c-0845-51ef-b8d5-5e4d9d273399
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.191.179.176 255.255.255.255
|
|
next
|
|
edit "RDP-Attacker-16"
|
|
set uuid c75f95fe-0846-51ef-2c68-00f19a44e9ea
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.191.178.42 255.255.255.255
|
|
next
|
|
edit "Voip-Proxy-Test-VM"
|
|
set uuid 667c5fd2-0879-51ef-c0b7-415b0189feb8
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.12 255.255.255.255
|
|
next
|
|
edit "Voip-Plugin-Test-VM"
|
|
set uuid 71f00fd0-0879-51ef-6ea1-f40e7dd3d4da
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.6 255.255.255.255
|
|
next
|
|
edit "RDP_attacker-17"
|
|
set uuid 2c2647a6-0b5f-51ef-04fe-c276646432c0
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 121.67.133.181 255.255.255.255
|
|
next
|
|
edit "AttackerIP-15"
|
|
set uuid 16427a9e-0d45-51ef-3ddd-ae2b0f875756
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 141.98.11.18 255.255.255.255
|
|
next
|
|
edit "AttackerIP-16"
|
|
set uuid 6cb38e80-0d50-51ef-ac36-3af4c14d3fc4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 84.238.195.239 255.255.255.255
|
|
next
|
|
edit "AttackerIP-17"
|
|
set uuid c89d7bc0-0db9-51ef-2ea3-56f9426dd0ed
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 185.124.136.197 255.255.255.255
|
|
next
|
|
edit "green-delta-VM-12_36.255.71.104"
|
|
set uuid a9ef6098-0dd8-51ef-bc8b-b8232b6f59e8
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.71.104 255.255.255.255
|
|
next
|
|
edit "green-delta-VM-11_36.255.70.205"
|
|
set uuid 5163e45c-0dd9-51ef-ae08-b086300ed559
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.205 255.255.255.255
|
|
next
|
|
edit "green-delta-VM-10_36.255.68.99"
|
|
set uuid 7b3af590-0dd9-51ef-34ae-d3826605bda4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.99 255.255.255.255
|
|
next
|
|
edit "green-delta-VM-9_36.255.68.173"
|
|
set uuid 9ad2d9ea-0dd9-51ef-6964-711d59a44c71
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.71.55 255.255.255.255
|
|
next
|
|
edit "green-delta-VM-8_36.255.69.60"
|
|
set uuid ac7346bc-0dd9-51ef-dda8-b44596b45d8f
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.60 255.255.255.255
|
|
next
|
|
edit "green-delta-VM-7_36.255.70.118"
|
|
set uuid bd1099a2-0dd9-51ef-1902-abd660352f40
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.118 255.255.255.255
|
|
next
|
|
edit "green-delta-VM-6_36.255.70.27"
|
|
set uuid d55742cc-0dd9-51ef-9cc5-c861cec643b9
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.27 255.255.255.255
|
|
next
|
|
edit "green-delta-VM-2_36.255.69.198"
|
|
set uuid eeb739f2-0dd9-51ef-449f-de848f7e5cb0
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.198 255.255.255.255
|
|
next
|
|
edit "AttackerIP-18"
|
|
set uuid f611b0c6-0e04-51ef-e043-d1eb76f91640
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 64.227.146.204 255.255.255.255
|
|
next
|
|
edit "Openstack-New-cloud-compute29"
|
|
set uuid 279b342a-1272-51ef-916b-02bdf5843eb1
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.211.45 255.255.255.255
|
|
next
|
|
edit "AttackerIP-19"
|
|
set uuid fc968104-136f-51ef-71c7-c66ec343ce5c
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 94.156.79.12 255.255.255.255
|
|
next
|
|
edit "BUET_dest_103.209.41.137"
|
|
set uuid 45fb605e-1374-51ef-87fc-5016cd27b59e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.41.137 255.255.255.255
|
|
next
|
|
edit "BUET_SRC_103.94.135.141"
|
|
set uuid 5f64b8a6-1374-51ef-10c9-bee5c40fbf8c
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.94.135.141 255.255.255.255
|
|
next
|
|
edit "RDP_Attacker-18"
|
|
set uuid 290e4d7e-19ac-51ef-532b-5f356da437e0
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 154.91.83.171 255.255.255.255
|
|
next
|
|
edit "attacker Ip 17"
|
|
set uuid 4b57f2f6-19c3-51ef-32b9-a90e4bb02b9e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 162.0.231.157 255.255.255.255
|
|
next
|
|
edit "Attacker-46-http-ftp"
|
|
set uuid e5633710-1b59-51ef-0b25-cf52121ed955
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 94.236.164.197 255.255.255.255
|
|
next
|
|
edit "Attacker_Ip-34"
|
|
set uuid 5a3b9b00-1f05-51ef-ba2c-d6dc70800f79
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 185.161.208.180 255.255.255.255
|
|
next
|
|
edit "Attacker_IP_46"
|
|
set uuid ed83cdac-2300-51ef-2293-bddd7e110165
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 206.217.139.242 255.255.255.255
|
|
next
|
|
edit "FTP_Attack-1"
|
|
set uuid 0e6eb3ec-2af4-51ef-19fa-2f3109cbb5de
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 78.128.8.27 255.255.255.255
|
|
next
|
|
edit "Openstack-New-Cloud-compute-30"
|
|
set uuid 8f7af2c8-32c1-51ef-f2ea-719c26cdc5b7
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.211.46 255.255.255.255
|
|
next
|
|
edit "attacker-ip-79.124.62.126"
|
|
set uuid a8d8e3b4-343e-51ef-c7eb-f9b7b9449e87
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 79.124.62.126 255.255.255.255
|
|
next
|
|
edit "brilliant-C3-SIP-private-IP_10.246.20.8"
|
|
set uuid 1a2a3f4e-3477-51ef-1281-d82d16c59dc2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 10.246.20.8 255.255.255.255
|
|
next
|
|
edit "brilliant-C3-RTP-private-IP_10.246.20.21"
|
|
set uuid 32d4558e-3477-51ef-446c-ad1ec54b5619
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 10.246.20.21 255.255.255.255
|
|
next
|
|
edit "Briliant-Router-PVT-SIg-GW_10.246.20.1"
|
|
set uuid b9854b54-378f-51ef-3ed5-0710b9ccec50
|
|
set type ipmask
|
|
set comment "Briliant-Router-PVT-SIg-GW"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 10.246.20.1 255.255.255.255
|
|
next
|
|
edit "Briliant-Router-PVT-Med-GW_10.246.20.17"
|
|
set uuid 51df0d72-3790-51ef-5b3e-adaefeb77384
|
|
set type ipmask
|
|
set comment "Briliant-Router-PVT-Med-GW_10.246.20.17"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 10.246.20.17 255.255.255.255
|
|
next
|
|
edit "Brilliant-C3-SingTel-Rivate-IP-Block_203.208.207.32/29"
|
|
set uuid 18b86d0c-3792-51ef-d3dd-560fbf62793f
|
|
set type ipmask
|
|
set comment "Brilliant-C3-SingTel-Rivate-IP-Block_203.208.207.32/29"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 203.208.207.32 255.255.255.248
|
|
next
|
|
edit "SMTP_Attacker-10"
|
|
set uuid b51d7a22-3b8c-51ef-46fc-019bcf32514b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 149.50.116.115 255.255.255.255
|
|
next
|
|
edit "Attacker_Novoair_1"
|
|
set uuid 892f495e-3dc6-51ef-4f7d-3833fe143202
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 83.97.73.245 255.255.255.255
|
|
next
|
|
edit "Attacker_Novoair_2"
|
|
set uuid 975df606-3dc6-51ef-d17e-c18e3b10dc0b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 45.128.232.128 255.255.255.255
|
|
next
|
|
edit "Attacker_NovoAir_3"
|
|
set uuid 6dc8c242-3e77-51ef-b733-665eadb1f655
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 66.240.205.34 255.255.255.255
|
|
next
|
|
edit "Attacker_NovoAir_4"
|
|
set uuid 80aef57a-3e77-51ef-3297-a40612c087c9
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 104.42.186.132 255.255.255.255
|
|
next
|
|
edit "Attacker_Ip_35"
|
|
set uuid 5e4a16e0-4ef3-51ef-6584-7376de670629
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 23.139.82.97 255.255.255.255
|
|
next
|
|
edit "route-mobile-ssh-allow-3"
|
|
set uuid 31fac5a2-5881-51ef-206c-22fc63218261
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 59.152.53.49 255.255.255.255
|
|
next
|
|
edit "route-mobile-ssh-allow-4"
|
|
set uuid 54ea3782-5881-51ef-04a4-a316c005d43d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 59.152.53.50 255.255.255.255
|
|
next
|
|
edit "route-mobile-ssh-allow-5"
|
|
set uuid ba5dc674-5881-51ef-c9e7-2e90a7837fac
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 59.152.53.51 255.255.255.255
|
|
next
|
|
edit "route-mobile-ssh-allow-6"
|
|
set uuid cd45b760-5881-51ef-5825-44c102b2bb47
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 59.152.53.52 255.255.255.255
|
|
next
|
|
edit "route-mobile-ssh-allow-7"
|
|
set uuid e1dcc6aa-5881-51ef-9ec6-ee820a6388ee
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 59.152.53.53 255.255.255.255
|
|
next
|
|
edit "cnMaestro-server-ip"
|
|
set uuid 7ee31f82-5df3-51ef-b6ea-6b09c641ccaf
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.218.140 255.255.255.252
|
|
next
|
|
edit "Openstack-New-Cloud-Compute-31"
|
|
set uuid 5dc95a8c-6159-51ef-1374-8c64ec9aef24
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.211.47 255.255.255.255
|
|
next
|
|
edit "Intercloud SMS Server-118.67.222.107"
|
|
set uuid 5ee74c28-6e9a-51ef-d61b-156890611d74
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.222.107 255.255.255.255
|
|
next
|
|
edit "Openstack-New-Cloud-Compute-32"
|
|
set uuid dc07f830-912f-51ef-fb06-248c76c5d8cb
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.211.48 255.255.255.255
|
|
next
|
|
edit "network-worm-01"
|
|
set uuid ce02805e-9b37-51ef-6ef8-2deedee0b3a8
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 179.43.139.84 255.255.255.255
|
|
next
|
|
edit "network-worm-02"
|
|
set uuid f3dc9742-9b37-51ef-468d-8d1bf5f8c1a4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 207.180.217.230 255.255.255.255
|
|
next
|
|
edit "network-worm-03"
|
|
set uuid 242eff66-9b38-51ef-0ed3-be470e82b131
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 179.43.139.82 255.255.255.255
|
|
next
|
|
edit "network-worm-04"
|
|
set uuid 3aeee856-9b38-51ef-9056-d3d23d637bc4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 150.109.152.83 255.255.255.255
|
|
next
|
|
edit "network-worm-05"
|
|
set uuid d247e0ba-9b68-51ef-bf16-d446a4e0e8c6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 45.86.86.205 255.255.255.255
|
|
next
|
|
edit "network-worm-06"
|
|
set uuid 82e54e60-9b6b-51ef-a333-8a53f5a0e6ca
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 101.32.198.18 255.255.255.255
|
|
next
|
|
edit "network-worm-07"
|
|
set uuid 954f7b42-9b6c-51ef-88b8-c34c9090b8d3
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 179.43.139.86 255.255.255.255
|
|
next
|
|
edit "network-worm-08"
|
|
set uuid cca9aec8-9c1b-51ef-f026-c17d28190604
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 131.153.76.130 255.255.255.255
|
|
next
|
|
edit "Shadhin_Music _vm_02"
|
|
set uuid 462753de-9c23-51ef-46fb-d6f4f641590a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.41.131 255.255.255.255
|
|
next
|
|
edit "network-worm-09"
|
|
set uuid ce156022-9cca-51ef-15c0-23ef8d6bd05f
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 125.253.92.50 255.255.255.255
|
|
next
|
|
edit "dos_ip_1"
|
|
set uuid 5d81acda-9f1d-51ef-7434-ccefd9a9b125
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 159.223.40.204 255.255.255.255
|
|
next
|
|
edit "dos_ip_2"
|
|
set uuid 4f5a47e4-9f21-51ef-e6ad-15ee592aa52e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 157.230.45.248 255.255.255.255
|
|
next
|
|
edit "Mediasoft_Shoishob_36.255.69.159"
|
|
set uuid cf825400-c692-51ef-8487-41337dd3a51c
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.159 255.255.255.255
|
|
next
|
|
edit "BHL_grp_Test"
|
|
set uuid d8663a12-c69e-51ef-1745-952d5c2f141a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.83 255.255.255.255
|
|
next
|
|
edit "attacker-48"
|
|
set uuid dff253d6-c803-51ef-d040-653c04812a30
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 216.218.246.20 255.255.255.255
|
|
next
|
|
edit "Mediasoft_Bluecheez_36.255.68.87"
|
|
set uuid fe95d272-ca83-51ef-3132-0bb2c8d5d36d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.87 255.255.255.255
|
|
next
|
|
edit "Mediasoft_Ghorer_bazar_36.255.68.169"
|
|
set uuid 12730918-ca84-51ef-684e-f5b986424a70
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.169 255.255.255.255
|
|
next
|
|
edit "RTV-APP-36.255.69.138"
|
|
set uuid 62141d0e-ca84-51ef-4a9b-ab49894d9234
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.138 255.255.255.255
|
|
next
|
|
edit "Graphics-Textile-36.255.71.39"
|
|
set uuid 7e5d7546-ca84-51ef-848a-517ea0c2d168
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.71.39 255.255.255.255
|
|
next
|
|
edit "Graphics-Textile-36.255.71.181"
|
|
set uuid 8dcc5b64-ca84-51ef-b979-e02d0808477a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.71.181 255.255.255.255
|
|
next
|
|
edit "Netswift Technologies-103.209.40.255"
|
|
set uuid f2166ddc-cb22-51ef-623f-a388b63c3d8f
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.40.255 255.255.255.255
|
|
next
|
|
edit "likhon-500-error"
|
|
set uuid a06ae412-cb28-51ef-d835-8554769373f9
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.41.157 255.255.255.255
|
|
next
|
|
edit "likhon-500-error-vm-2"
|
|
set uuid 003ce5dc-cb2b-51ef-c80b-89121c0c5c3a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.41.123 255.255.255.255
|
|
next
|
|
edit "Daeyu-Bamgladesh-36.255.71.55"
|
|
set uuid 8d0fc40e-cc0f-51ef-60a0-d3d6298fc6bf
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.71.55 255.255.255.255
|
|
next
|
|
edit "BHL-Group-118.67.213.83"
|
|
set uuid a5447fd8-cc0f-51ef-0ee4-74d32a83ca59
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.83 255.255.255.255
|
|
next
|
|
edit "Desh-Tv-36.255.71.207"
|
|
set uuid b9d15fca-cc0f-51ef-a115-fc269f96195e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.71.207 255.255.255.255
|
|
next
|
|
edit "Mediasoft_Parjatan_Corporation_36.255.70.122"
|
|
set uuid fc94eef8-cc0f-51ef-41a5-6df69fb789a6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.122 255.255.255.255
|
|
next
|
|
edit "Mediasoft_Babar_Shoe_103.209.40.183"
|
|
set uuid 45358f46-cc10-51ef-71ea-4949a6b07fb3
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.40.183 255.255.255.255
|
|
next
|
|
edit "Mediasoft_SplashInglot_36.255.71.69"
|
|
set uuid 6051cbe6-cc10-51ef-f97b-85f5c20c3e9b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.71.69 255.255.255.255
|
|
next
|
|
edit "Miclo_118.67.213.191"
|
|
set uuid b26a3e2c-cc10-51ef-c128-1233471f77c6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.191 255.255.255.255
|
|
next
|
|
edit "CSL-36.255.70.117"
|
|
set uuid c57c90f0-cc10-51ef-cf36-e90af687ee13
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.117 255.255.255.255
|
|
next
|
|
edit "CSL_36.255.68.151"
|
|
set uuid d6f8fb20-cc10-51ef-8ce1-ca667572f898
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.151 255.255.255.255
|
|
next
|
|
edit "CSL_36.255.68.237"
|
|
set uuid e337df00-cc10-51ef-4788-d1c2fc18739e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.237 255.255.255.255
|
|
next
|
|
edit "Pluspoint_103.209.40.192"
|
|
set uuid f35364cc-cc10-51ef-9ffb-2870f5d11930
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.40.192 255.255.255.255
|
|
next
|
|
edit "Abdur-Rahim_36.255.69.32"
|
|
set uuid 0585c518-cc11-51ef-4d03-aee0f84b7f17
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.32 255.255.255.255
|
|
next
|
|
edit "Mediasoft_Hyper_solution_36.255.70.126"
|
|
set uuid 311d07ae-cc11-51ef-21ee-0da1fce9bdbf
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.126 255.255.255.255
|
|
next
|
|
edit "eMythMaker1_103.209.42.165"
|
|
set uuid bc5788e0-cc3d-51ef-22f6-710e32e1701c
|
|
set type ipmask
|
|
set comment "eMythMaker1_103.209.42.165"
|
|
set associated-interface ''
|
|
set color 24
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.42.165 255.255.255.255
|
|
next
|
|
edit "eMythMaker2_103.209.42.198"
|
|
set uuid cd1f9938-cc3d-51ef-d5bf-f22d74f7dff2
|
|
set type ipmask
|
|
set comment "eMythMaker2_103.209.42.198"
|
|
set associated-interface ''
|
|
set color 24
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.42.198 255.255.255.255
|
|
next
|
|
edit "eMythMaker3_103.209.42.203"
|
|
set uuid e2febcca-cc3d-51ef-cd47-01152d1ede32
|
|
set type ipmask
|
|
set comment "eMythMaker3_103.209.42.203"
|
|
set associated-interface ''
|
|
set color 24
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.42.203 255.255.255.255
|
|
next
|
|
edit "eMythMaker4_103.209.42.200"
|
|
set uuid f16ba7fa-cc3d-51ef-624c-21ce73dc05d4
|
|
set type ipmask
|
|
set comment "eMythMaker4_103.209.42.200"
|
|
set associated-interface ''
|
|
set color 24
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.42.200 255.255.255.255
|
|
next
|
|
edit "Encoders1_118.67.215.206"
|
|
set uuid 0c04e342-cc3e-51ef-f438-103e34d10f4e
|
|
set type ipmask
|
|
set comment "Encoders1_118.67.215.206"
|
|
set associated-interface ''
|
|
set color 16
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.206 255.255.255.255
|
|
next
|
|
edit "BHL2_118.67.213.59"
|
|
set uuid 216aa906-cc3e-51ef-e64c-58a9f0405d2e
|
|
set type ipmask
|
|
set comment "BHL2_118.67.213.59"
|
|
set associated-interface ''
|
|
set color 8
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.59 255.255.255.255
|
|
next
|
|
edit "RH-Corp1_36.255.70.182"
|
|
set uuid 3897f21e-cc3e-51ef-1879-9234d3eda4b4
|
|
set type ipmask
|
|
set comment "RH-Corp1_36.255.70.182"
|
|
set associated-interface ''
|
|
set color 31
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.182 255.255.255.255
|
|
next
|
|
edit "3S_Software1_103.209.41.92"
|
|
set uuid d0995e72-cc3e-51ef-a887-23d45561da27
|
|
set type ipmask
|
|
set comment "3S_Software1_103.209.41.92"
|
|
set associated-interface ''
|
|
set color 23
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.41.92 255.255.255.255
|
|
next
|
|
edit "JI_Impex1_36.255.70.142"
|
|
set uuid 2e2642c6-ccad-51ef-9491-c1575a46ff49
|
|
set type ipmask
|
|
set comment "JI_Impex1_36.255.70.142"
|
|
set associated-interface ''
|
|
set color 13
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.142 255.255.255.255
|
|
next
|
|
edit "Pasha_Energy_103.209.41.0"
|
|
set uuid 2df45d22-ccb9-51ef-aaa4-d91e7a8dbb18
|
|
set type ipmask
|
|
set comment "Pasha_Energy_103.209.41.0"
|
|
set associated-interface ''
|
|
set color 25
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.41.0 255.255.255.255
|
|
next
|
|
edit "MediaSoft_Sailor_POC-103.209.41.12"
|
|
set uuid de8e0af8-ccc2-51ef-02a1-f8ccdc27f610
|
|
set type ipmask
|
|
set comment "MediaSoft_Sailor_POC-103.209.41.12"
|
|
set associated-interface ''
|
|
set color 22
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.41.12 255.255.255.255
|
|
next
|
|
edit "Bengal-Meat-VM-2-36.255.68.90"
|
|
set uuid ec9955a8-ccdb-51ef-5db3-a7d945c590e6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.90 255.255.255.255
|
|
next
|
|
edit "Innocon_Pharma_103.209.42.199"
|
|
set uuid d6febd8a-cce2-51ef-48d5-c4203244862b
|
|
set type ipmask
|
|
set comment "Innocon_Pharma_103.209.42.199"
|
|
set associated-interface ''
|
|
set color 8
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.42.199 255.255.255.255
|
|
next
|
|
edit "Mediasoft-O_Neutral_36.255.71.139"
|
|
set uuid e560a85e-ccef-51ef-fffb-859b128d6653
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.71.139 255.255.255.255
|
|
next
|
|
edit "Mediasoft_Cycle_Life-36.255.69.200"
|
|
set uuid ff066cf0-cd10-51ef-b963-f4bfd737b288
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.200 255.255.255.255
|
|
next
|
|
edit "Mediasoft-Meghna-36.255.68.137"
|
|
set uuid 2bec39fc-cd11-51ef-c908-9e4398d6276e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.137 255.255.255.255
|
|
next
|
|
edit "3s-software-VM-03-103.209.41.42"
|
|
set uuid 0aa5d6e4-cd17-51ef-fc04-159772b174c4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.41.42 255.255.255.255
|
|
next
|
|
edit "JI_Impex2_103.209.41.89"
|
|
set uuid e46a07be-cd77-51ef-d106-7b1fb763c4f8
|
|
set type ipmask
|
|
set comment "JI_Impex2_103.209.41.89"
|
|
set associated-interface ''
|
|
set color 13
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.41.89 255.255.255.255
|
|
next
|
|
edit "JI_Impex3_103.209.40.200"
|
|
set uuid 1c9893d0-cd78-51ef-6678-f0140759b373
|
|
set type ipmask
|
|
set comment "JI_Impex3_103.209.40.200"
|
|
set associated-interface ''
|
|
set color 15
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.40.200 255.255.255.255
|
|
next
|
|
edit "MediaSoft2-36.255.71.150"
|
|
set uuid b1bb53c8-cd80-51ef-9cab-7a320122fd8e
|
|
set type ipmask
|
|
set comment "Mediasoft2-36.255.71.150"
|
|
set associated-interface ''
|
|
set color 22
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.71.150 255.255.255.255
|
|
next
|
|
edit "HyperSolution1_36.255.71.233"
|
|
set uuid 83e6947c-cd93-51ef-482f-7d70789ac1c0
|
|
set type ipmask
|
|
set comment "HyperSolution1_36.255.71.233"
|
|
set associated-interface ''
|
|
set color 10
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.71.233 255.255.255.255
|
|
next
|
|
edit "Mediasoft3_103.209.40.253"
|
|
set uuid 5a5e6916-cda4-51ef-ded5-7df7ccc840f2
|
|
set type ipmask
|
|
set comment "Mediasoft3_103.209.40.253"
|
|
set associated-interface ''
|
|
set color 24
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.40.253 255.255.255.255
|
|
next
|
|
edit "DigiLab1_36.255.69.35"
|
|
set uuid 4680c816-ce86-51ef-7373-ffeda7e75bc1
|
|
set type ipmask
|
|
set comment "DigiLab1_36.255.69.35"
|
|
set associated-interface ''
|
|
set color 2
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.35 255.255.255.255
|
|
next
|
|
edit "Digilab2_36.255.69.92"
|
|
set uuid 588be31a-ce86-51ef-7911-48192c7056a5
|
|
set type ipmask
|
|
set comment "Digilab2_36.255.69.92"
|
|
set associated-interface ''
|
|
set color 2
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.92 255.255.255.255
|
|
next
|
|
edit "Digilab3_36.255.69.18"
|
|
set uuid 71003176-ce86-51ef-5ccc-6dc16f8fdde5
|
|
set type ipmask
|
|
set comment "Digilab3_36.255.69.18"
|
|
set associated-interface ''
|
|
set color 2
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.18 255.255.255.255
|
|
next
|
|
edit "Digilab4_36.255.70.91"
|
|
set uuid 85858362-ce86-51ef-4da8-730b9243f07b
|
|
set type ipmask
|
|
set comment "Digilab4_36.255.70.91"
|
|
set associated-interface ''
|
|
set color 2
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.91 255.255.255.255
|
|
next
|
|
edit "MediaSoft3_36.255.71.108"
|
|
set uuid 57eb97d2-d0d6-51ef-8ddc-fd300377edfc
|
|
set type ipmask
|
|
set comment "MediaSoft3_36.255.71.108"
|
|
set associated-interface ''
|
|
set color 24
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.71.108 255.255.255.255
|
|
next
|
|
edit "MediaSoft4_36.255.71.53"
|
|
set uuid 6a9aab8e-d0d6-51ef-7c8c-586d78575d1c
|
|
set type ipmask
|
|
set comment "MediaSoft4_36.255.71.53"
|
|
set associated-interface ''
|
|
set color 24
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.71.53 255.255.255.255
|
|
next
|
|
edit "Bengal_Meat2_36.255.69.171"
|
|
set uuid 4833f728-d192-51ef-d3a2-622217ae92ad
|
|
set type ipmask
|
|
set comment "Bengal_Meat2_36.255.69.171"
|
|
set associated-interface ''
|
|
set color 11
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.171 255.255.255.255
|
|
next
|
|
edit "DNS-Software-36.255.71.217"
|
|
set uuid 0e5ce8be-d1ad-51ef-ab58-7590bafd7ae2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.71.217 255.255.255.255
|
|
next
|
|
edit "Sadhin-Music-VM-4-103.209.40.118"
|
|
set uuid c6099bf4-d1b4-51ef-470c-01a9f5e2058a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.40.118 255.255.255.255
|
|
next
|
|
edit "Shadhin-Music-VM-2-103.209.41.131"
|
|
set uuid d6c3f43a-d1b4-51ef-e11f-1cb56bfe8c9d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.41.131 255.255.255.255
|
|
next
|
|
edit "Shadhin-Music-VM-4-103.209.40.118"
|
|
set uuid 2b6b0d8e-d1b5-51ef-d3e1-2ee33c76a5b6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.40.118 255.255.255.255
|
|
next
|
|
edit "login.microsoftonline.com"
|
|
set uuid 8b3ef0e0-d1e2-51ef-7aeb-4f6ae37995b1
|
|
set type fqdn
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set fqdn "login.microsoftonline.com"
|
|
set cache-ttl 0
|
|
next
|
|
edit "login.microsoft.com"
|
|
set uuid 8b3ef374-d1e2-51ef-8602-5c21beee756b
|
|
set type fqdn
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set fqdn "login.microsoft.com"
|
|
set cache-ttl 0
|
|
next
|
|
edit "login.windows.net"
|
|
set uuid 8b3ef61c-d1e2-51ef-5792-549ddbee44ed
|
|
set type fqdn
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set fqdn "login.windows.net"
|
|
set cache-ttl 0
|
|
next
|
|
edit "gmail.com"
|
|
set uuid 8b3ef89c-d1e2-51ef-013e-a93555e7514f
|
|
set type fqdn
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set fqdn "gmail.com"
|
|
set cache-ttl 0
|
|
next
|
|
edit "wildcard.google.com"
|
|
set uuid 8b3efab8-d1e2-51ef-cc8e-4c5ce9a83b11
|
|
set type fqdn
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set fqdn "*.google.com"
|
|
set cache-ttl 0
|
|
next
|
|
edit "wildcard.dropbox.com"
|
|
set uuid 8b3efcc0-d1e2-51ef-a278-d1df845f7e97
|
|
set type fqdn
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set fqdn "*.dropbox.com"
|
|
set cache-ttl 0
|
|
next
|
|
edit "EMS_ALL_UNMANAGEABLE_CLIENTS"
|
|
set uuid 677ff970-d1e6-51ef-3717-bb85dbc9de8a
|
|
set type dynamic
|
|
set sub-type ems-tag
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set obj-tag ''
|
|
set obj-type ip
|
|
set tag-detection-level ''
|
|
set tag-type ''
|
|
next
|
|
edit "EMS_ALL_UNKNOWN_CLIENTS"
|
|
set uuid 67831de4-d1e6-51ef-ba14-da5f1f9a936e
|
|
set type dynamic
|
|
set sub-type ems-tag
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set obj-tag ''
|
|
set obj-type ip
|
|
set tag-detection-level ''
|
|
set tag-type ''
|
|
next
|
|
edit "FCTEMS_ALL_FORTICLOUD_SERVERS"
|
|
set uuid e1237450-d1e6-51ef-ae8c-f299e5533a56
|
|
set type dynamic
|
|
set sub-type ems-tag
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set obj-tag ''
|
|
set obj-type ip
|
|
set tag-detection-level ''
|
|
set tag-type ''
|
|
next
|
|
edit "Cloud_DNS1_118.67.212.96"
|
|
set uuid de7d6a12-d23b-51ef-2749-e6b2776783dc
|
|
set type ipmask
|
|
set comment "Cloud_DNS1_118.67.212.96"
|
|
set associated-interface ''
|
|
set color 7
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.96 255.255.255.255
|
|
next
|
|
edit "Cloud_DNS2_118.67.220.182"
|
|
set uuid f2616ae2-d23b-51ef-b144-062a2c0d1395
|
|
set type ipmask
|
|
set comment "Cloud_DNS2_118.67.220.182"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.220.182 255.255.255.255
|
|
next
|
|
edit "Cloud_DNS3_118.67.220.182"
|
|
set uuid 09a79ee2-d23c-51ef-bc26-3486ada70adb
|
|
set type ipmask
|
|
set comment "Cloud_DNS3_118.67.220.182"
|
|
set associated-interface ''
|
|
set color 7
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.13.22 255.255.255.255
|
|
next
|
|
edit "Cloud_DNS3_103.248.13.22"
|
|
set uuid 1f385512-d23c-51ef-2cea-22ca7ce27e44
|
|
set type ipmask
|
|
set comment "Cloud_DNS3_103.248.13.22"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.13.22 255.255.255.255
|
|
next
|
|
edit "Toku_36.255.71.234-VOIP"
|
|
set uuid 28951216-d256-51ef-d6c2-537ff7e8aa60
|
|
set type ipmask
|
|
set comment "Toku_36.255.71.234-VOIP"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.71.234 255.255.255.255
|
|
next
|
|
edit "Nirob_DNS_36.255.69.146"
|
|
set uuid 7372046c-d25e-51ef-0f17-9233be98b9ae
|
|
set type ipmask
|
|
set comment "Nirob_DNS_36.255.69.146"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.146 255.255.255.255
|
|
next
|
|
edit "Democracy1_36.255.70.84"
|
|
set uuid 84e1cdae-d268-51ef-3902-ead8c5a844b2
|
|
set type ipmask
|
|
set comment "Democracy1_36.255.70.84"
|
|
set associated-interface ''
|
|
set color 10
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.70.84 255.255.255.255
|
|
next
|
|
edit "Democracy2_36.255.71.17"
|
|
set uuid bfbbf742-d268-51ef-11a4-99a0d1e857e5
|
|
set type ipmask
|
|
set comment "Democracy2_36.255.71.17"
|
|
set associated-interface ''
|
|
set color 10
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.71.17 255.255.255.255
|
|
next
|
|
edit "Democracy3_36.255.68.233"
|
|
set uuid e081f508-d268-51ef-b035-bf10ad63f5e5
|
|
set type ipmask
|
|
set comment "Democracy3_36.255.68.233"
|
|
set associated-interface ''
|
|
set color 10
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.233 255.255.255.255
|
|
next
|
|
edit "Quantic-Dynamics-103.209.40.166"
|
|
set uuid a18b5ce8-d300-51ef-1651-bf93e15dde3c
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.40.166 255.255.255.255
|
|
next
|
|
edit "Quantic-Dynamics-103.209.41.15"
|
|
set uuid 9584a738-d305-51ef-e568-0112515cbcf4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.41.15 255.255.255.255
|
|
next
|
|
edit "Quantic-Dynamics-103.209.40.157"
|
|
set uuid 23da271e-d320-51ef-4c9f-b466cf8d88bd
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.40.157 255.255.255.255
|
|
next
|
|
edit "Quantic-Dynamics-103.209.40.250"
|
|
set uuid 36fe6bf2-d320-51ef-527a-797ba892885e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.40.250 255.255.255.255
|
|
next
|
|
edit "Quantic-Dynamics-103.209.40.180"
|
|
set uuid 5dd325ec-d320-51ef-6592-e56f58905480
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.40.180 255.255.255.255
|
|
next
|
|
edit "Quantic-Dynamics-103.209.40.234"
|
|
set uuid 72cfab5a-d320-51ef-baa8-b9b91c17d510
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.40.234 255.255.255.255
|
|
next
|
|
edit "Quantic-Dynamics-103.209.40.162"
|
|
set uuid 8c835e98-d320-51ef-670c-22530e61acc0
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.40.162 255.255.255.255
|
|
next
|
|
edit "Quantic-Dynamics-103.209.40.217"
|
|
set uuid 9ddeb624-d320-51ef-77d9-0520f8a6a53c
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.40.217 255.255.255.255
|
|
next
|
|
edit "Quantic-Dynamics-103.209.40.177"
|
|
set uuid b7a45e06-d320-51ef-d43a-4809bc24952f
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.40.177 255.255.255.255
|
|
next
|
|
edit "Quantic-Dynamics-103.209.40.212"
|
|
set uuid c5699cfe-d320-51ef-acfc-3e975676c751
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.40.212 255.255.255.255
|
|
next
|
|
edit "IC_DNS_Primay_103.248.12.62"
|
|
set uuid 1d1d523a-d329-51ef-040b-f18312b00495
|
|
set type ipmask
|
|
set comment "IC_DNS_Primay_103.248.12.62"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.12.62 255.255.255.255
|
|
next
|
|
edit "CEO_SIR_IPCAM_103.23.40.46"
|
|
set uuid dbc4b2f8-d3e9-51ef-f6a8-c22836c6d987
|
|
set type ipmask
|
|
set comment "CEO_SIR_IPCAM_103.23.40.46"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.23.40.46 255.255.255.255
|
|
next
|
|
edit "Bol-DNS-FOR-ICAB-202.84.32.22"
|
|
set uuid 019d887c-d40f-51ef-c7c0-ff92977f0e1b
|
|
set type ipmask
|
|
set comment "Bol-DNS-1-FOR-ICAB-202.84.32.22"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 202.84.32.22 255.255.255.255
|
|
next
|
|
edit "BOL-DNS-2-FOR-ICAB-202.84.32.23"
|
|
set uuid 81c2f4ec-d40f-51ef-2546-90b855084d55
|
|
set type ipmask
|
|
set comment "BOL-DNS-2-FOR-ICAB-202.84.32.23"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 202.84.32.23 255.255.255.255
|
|
next
|
|
edit "ICAB2_36.255.69.142"
|
|
set uuid ab54ddd0-d4bd-51ef-d916-77ff7683b1ce
|
|
set type ipmask
|
|
set comment "ICAB2_36.255.69.142"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.142 255.255.255.255
|
|
next
|
|
edit "ICAB2_36.255.69.203"
|
|
set uuid 7f6368dc-d638-51ef-d16f-3fe885f8093f
|
|
set type ipmask
|
|
set comment "ICAB3_36.255.69.203"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.203 255.255.255.255
|
|
next
|
|
edit "ICAB4_36.255.69.193"
|
|
set uuid c05db9a0-d638-51ef-55ab-7f1da897be54
|
|
set type ipmask
|
|
set comment "ICAB4_36.255.69.193"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.193 255.255.255.255
|
|
next
|
|
edit "ICAB5_36.255.69.208"
|
|
set uuid efeb01d2-d638-51ef-3d4f-9c51c1ef6efa
|
|
set type ipmask
|
|
set comment "ICAB5_36.255.69.208"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.208 255.255.255.255
|
|
next
|
|
edit "ICAB6_36.255.69.212"
|
|
set uuid 069433d6-d639-51ef-7668-2a5ad31b0cf0
|
|
set type ipmask
|
|
set comment "ICAB6_36.255.69.212"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.212 255.255.255.255
|
|
next
|
|
edit "ICAB7_36.255.69.150"
|
|
set uuid 1d79fec8-d639-51ef-9414-99d7436fe96f
|
|
set type ipmask
|
|
set comment "ICAB7_36.255.69.150"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.150 255.255.255.255
|
|
next
|
|
edit "ICAB8_36.255.69.238"
|
|
set uuid 316ba5ee-d639-51ef-94cc-7a49f6ee2ff8
|
|
set type ipmask
|
|
set comment "ICAB8_36.255.69.238"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.238 255.255.255.255
|
|
next
|
|
edit "ICAB9_36.255.69.246"
|
|
set uuid 468a9a16-d639-51ef-63d3-e20c6990ea02
|
|
set type ipmask
|
|
set comment "ICAB9_36.255.69.246"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.246 255.255.255.255
|
|
next
|
|
edit "ICAB10_36.255.69.222"
|
|
set uuid 5e398262-d639-51ef-8c8f-237d24058146
|
|
set type ipmask
|
|
set comment "ICAB10_36.255.69.222"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.222 255.255.255.255
|
|
next
|
|
edit "ICAB11_36.255.69.225"
|
|
set uuid 7146e6e2-d639-51ef-97f8-66f94bd63311
|
|
set type ipmask
|
|
set comment "ICAB11_36.255.69.225"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.225 255.255.255.255
|
|
next
|
|
edit "ICAB12_36.255.69.165"
|
|
set uuid 910f1dd2-d639-51ef-e34e-23553d4614d6
|
|
set type ipmask
|
|
set comment "ICAB12_36.255.69.165"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.165 255.255.255.255
|
|
next
|
|
edit "ICAB13_36.255.69.199"
|
|
set uuid a8f24d8e-d639-51ef-32e9-9e8725ce97d0
|
|
set type ipmask
|
|
set comment "ICAB13_36.255.69.199"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.199 255.255.255.255
|
|
next
|
|
edit "ICAB14_36.255.68.225"
|
|
set uuid c16660a8-d639-51ef-2d3c-a5d852146559
|
|
set type ipmask
|
|
set comment "ICAB14_36.255.68.225"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.225 255.255.255.255
|
|
next
|
|
edit "ICAB15_36.255.68.235"
|
|
set uuid d2822976-d639-51ef-a5e7-7ddbc7551545
|
|
set type ipmask
|
|
set comment "ICAB15_36.255.68.235"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.68.235 255.255.255.255
|
|
next
|
|
edit "TAC test"
|
|
set uuid 21457356-d7e8-51ef-c29a-9e1224ecf104
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 111.93.135.130 255.255.255.255
|
|
next
|
|
edit "DigiMobi1"
|
|
set uuid 1b4b29ee-d989-51ef-1a79-47f7902056da
|
|
set type ipmask
|
|
set comment "DigiMobi1"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.43.12 255.255.255.255
|
|
next
|
|
edit "DigiMobi2"
|
|
set uuid 5157dfb4-d989-51ef-3aae-c291bfea1da1
|
|
set type ipmask
|
|
set comment "DigiMobi2"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 119.148.40.122 255.255.255.255
|
|
next
|
|
edit "Digimobi2"
|
|
set uuid 7eb80e84-d989-51ef-19e9-0721232df345
|
|
set type ipmask
|
|
set comment "Digimobi2"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 119.148.40.122 255.255.255.255
|
|
next
|
|
edit "Digimobi3"
|
|
set uuid cbbb88c8-d989-51ef-1da6-46a7077bc22a
|
|
set type ipmask
|
|
set comment "Digimobi3"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 119.148.40.121 255.255.255.255
|
|
next
|
|
edit "Test_Test"
|
|
set uuid 032151de-dbbb-51ef-e37e-d2aacfb6e125
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.149 255.255.255.255
|
|
next
|
|
edit "Softify_MKT_TEST"
|
|
set uuid d6d1b0dc-de45-51ef-ae06-8b242a10f981
|
|
set type ipmask
|
|
set comment "Softify_MKT_TEST"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.109.97.145 255.255.255.255
|
|
next
|
|
edit "CelloScope_Test_Bypass"
|
|
set uuid caeca1ac-e217-51ef-bb37-77d3e16d68ba
|
|
set type ipmask
|
|
set comment "CelloScope_Test_Bypass"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 180.92.224.142 255.255.255.255
|
|
next
|
|
edit "CelloScope_1"
|
|
set uuid f5ad59f4-e217-51ef-dacd-4faeff558a54
|
|
set type ipmask
|
|
set comment "CelloScope_1"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.164 255.255.255.255
|
|
next
|
|
edit "Window_VM_1"
|
|
set uuid 139ac4b0-e934-51ef-fefd-24f47017eb40
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.43.134 255.255.255.255
|
|
next
|
|
edit "Autonemo-VM-1"
|
|
set uuid ea2e7a20-ee99-51ef-d5f7-a3d30425575a
|
|
set type ipmask
|
|
set comment "For HTTPs Test"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.43.58 255.255.255.255
|
|
next
|
|
edit "IPTSP_PFSense"
|
|
set uuid 277faa08-ef70-51ef-6508-83e8da2f8392
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.121 255.255.255.255
|
|
next
|
|
edit "Admin-Access-8"
|
|
set uuid cc183d1e-f19b-51ef-55a4-e831787ec9db
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.43.134 255.255.255.255
|
|
next
|
|
edit "Test_For_DigitalLab"
|
|
set uuid bafe0d02-f68b-51ef-b5a7-f5e613d0be0a
|
|
set type ipmask
|
|
set comment "Test_For_DigitalLab"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.134.88.127 255.255.255.255
|
|
next
|
|
edit "IP_CAM_FTP_FOR_CEO_SIR"
|
|
set uuid 9fa0e5ce-f727-51ef-318d-b54a04db9096
|
|
set type ipmask
|
|
set comment "IP_CAM_FTP_FOR_CEO_SIR 118.67.212.101"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.101 255.255.255.255
|
|
next
|
|
edit "port33 address"
|
|
set uuid f31f7394-f981-51ef-a48e-2514a42f5484
|
|
set type interface-subnet
|
|
set comment ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.218.112 255.255.255.248
|
|
set interface "port33"
|
|
next
|
|
edit "B2M"
|
|
set uuid e9fe7972-f9a9-51ef-2080-1a6458e83fd5
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.190 255.255.255.255
|
|
next
|
|
edit "cPanel-2nd_IP_BLOCK"
|
|
set uuid 43569f7a-fcc2-51ef-8ea4-d8d6da0f2dc8
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 163.53.151.168 255.255.255.248
|
|
next
|
|
edit "FriendShip_NGO_ISP_IP"
|
|
set uuid 6f2a7e04-02e5-51f0-261b-588139ce4e76
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 163.53.150.192 255.255.255.240
|
|
next
|
|
edit "NovoCom_SBC_platform"
|
|
set uuid c086077e-0acd-51f0-548b-84b2c38309ac
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.9.139.138 255.255.255.255
|
|
next
|
|
edit "Novotel-Desktop-VM-103.209.42.202"
|
|
set uuid 4faa997a-0aeb-51f0-9247-46d032db196f
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.42.202 255.255.255.255
|
|
next
|
|
edit "Novotel-Desktop-VM-103.209.43.175"
|
|
set uuid d58b9272-12d6-51f0-9d1a-f165c7ace394
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.43.175 255.255.255.255
|
|
next
|
|
edit "Novotel-Desktop-VM-103.209.43.66"
|
|
set uuid f0772f1a-12d6-51f0-8fa6-4cbe7e34efc1
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.43.66 255.255.255.255
|
|
next
|
|
edit "Novotel_PFSense"
|
|
set uuid 81d18cda-19cb-51f0-501c-e4346655ebf6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.88 255.255.255.255
|
|
next
|
|
edit "Signalling_Server_212.133.75.34"
|
|
set uuid 753b684c-19e4-51f0-25d6-518061823581
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 212.133.75.34 255.255.255.255
|
|
next
|
|
edit "Signalling_Server_212.133.75.35"
|
|
set uuid 28505910-19e5-51f0-27e8-37e3d2212c19
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 212.133.75.35 255.255.255.255
|
|
next
|
|
edit "NovoTel_Sonido_VM"
|
|
set uuid b81ad608-1d99-51f0-4fcd-8ab08e838c9b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.43.195 255.255.255.255
|
|
next
|
|
edit "VM-Private-Service-Mosiur-Cloud"
|
|
set uuid 0cf9ca26-1f2f-51f0-aa96-1f96e4bc9b02
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.42.218 255.255.255.255
|
|
next
|
|
edit "Toku_External_IP_1"
|
|
set uuid 674a7172-24e0-51f0-a1db-721e2001a922
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 18.138.89.241 255.255.255.255
|
|
next
|
|
edit "Toku_External_IP_2"
|
|
set uuid ac54e022-24e0-51f0-814e-9f7751f35dd9
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 18.143.110.44 255.255.255.255
|
|
next
|
|
edit "Toku_External_IP_3"
|
|
set uuid c6ac84fc-24e0-51f0-9cb8-4da48c24ca6c
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 52.220.1.138 255.255.255.255
|
|
next
|
|
edit "Toku_External_IP_4"
|
|
set uuid dee5c63c-24e0-51f0-866a-e476689f4084
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 13.213.236.125 255.255.255.255
|
|
next
|
|
edit "Toku_External_IP_5"
|
|
set uuid f2c7d794-24e0-51f0-7229-97714d940c74
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 18.141.73.17 255.255.255.255
|
|
next
|
|
edit "Toku_External_IP_6"
|
|
set uuid 270104ea-24e1-51f0-c74b-abbbede2690a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 54.254.150.91 255.255.255.255
|
|
next
|
|
edit "GPU-Commercial-Prefix"
|
|
set uuid d8d50818-25d8-51f0-8754-d66508030319
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.32 255.255.255.224
|
|
next
|
|
edit "Blacklist-IP- 152.32.227.252"
|
|
set uuid 02c3159a-2b31-51f0-7a2b-d73c02165246
|
|
set type ipmask
|
|
set comment "AS135377, DNS Brute Force, Hong Kong"
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 152.32.227.252 255.255.255.255
|
|
next
|
|
edit "Blacklist-IP-2-45.148.10.81"
|
|
set uuid e34fb97e-35db-51f0-ff1e-9ccacdeacd95
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 45.148.10.81 255.255.255.255
|
|
next
|
|
edit "Blacklist_IP-3-157.230.45.248"
|
|
set uuid 2af7ac32-35dc-51f0-f509-734b0b246ad8
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 157.230.45.248 255.255.255.255
|
|
next
|
|
edit "Blacklist-IP-4-60.26.62.15"
|
|
set uuid 48a4e362-35dc-51f0-879e-0e6fa7ae1ab5
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 60.26.62.15 255.255.255.255
|
|
next
|
|
edit "Blacklist-IP-5-122.228.23.224"
|
|
set uuid 6a3a760e-35dc-51f0-223a-e3f6e587582b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 122.228.23.224 255.255.255.255
|
|
next
|
|
edit "Blacklist-IP-6-102.249.62.0/24"
|
|
set uuid 6f24a1ea-35e0-51f0-3b25-70964579e824
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 102.249.62.0 255.255.255.0
|
|
next
|
|
edit "IPTSP_Physiacl_Srv_1"
|
|
set uuid 4d73e058-3aca-51f0-b190-eb387f5a4233
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.14.51 255.255.255.255
|
|
next
|
|
edit "Softifybd-Limited-131"
|
|
set uuid 5ec4af70-3d3d-51f0-e3d0-b1f8ff3e06b5
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.213.131 255.255.255.255
|
|
next
|
|
edit "pfSense-likhon"
|
|
set uuid a438ccdc-3d6d-51f0-990b-a706775b3286
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.40.139 255.255.255.255
|
|
next
|
|
edit "Telnet_IP"
|
|
set uuid 4d204d8e-4061-51f0-3663-35e31a418e57
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 120.50.11.194 255.255.255.255
|
|
next
|
|
edit "Link3"
|
|
set uuid 69f574b6-4061-51f0-b7a5-f6dcd65ac517
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 27.147.142.142 255.255.255.255
|
|
next
|
|
edit "Horizon-dashboard-1"
|
|
set uuid dabfd2da-4cf1-51f0-557a-da82a18aa0f2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.11 255.255.255.255
|
|
next
|
|
edit "Horizon-dashboard-2"
|
|
set uuid f2816df2-4cf1-51f0-9a98-0e30c62bcbdd
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.12 255.255.255.255
|
|
next
|
|
edit "Horizon-dashboard-3"
|
|
set uuid 0e461092-4cf2-51f0-4a9d-9673c1912afe
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.13 255.255.255.255
|
|
next
|
|
edit "Folklore _Corporation_VM"
|
|
set uuid 90177ccc-570c-51f0-2d83-03921b83274a
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.43.122 255.255.255.255
|
|
next
|
|
edit "blacklist-ip-141.98.80.48"
|
|
set uuid 5c7a20f0-5bbb-51f0-725c-2876db2f99a8
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 141.98.80.48 255.255.255.255
|
|
next
|
|
edit "Blacklist_Ip_95.214.52.169"
|
|
set uuid f83bcc3c-5fd5-51f0-4a8d-c1818ed69380
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 95.214.52.169 255.255.255.255
|
|
next
|
|
edit "blacklist_ip_190.123.195.139"
|
|
set uuid 1715ed04-5fd6-51f0-4939-755478a97523
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 190.123.195.139 255.255.255.255
|
|
next
|
|
edit "Catalyeya-VIOS-SBC-MGT-NovoTel"
|
|
set uuid 1e3af980-6850-51f0-9af4-38ad106fc43d
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 202.45.159.16 255.255.255.248
|
|
next
|
|
edit "LAUGH-GAS-VM"
|
|
set uuid 2ef191da-761f-51f0-f614-5dd42694e601
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.43.169 255.255.255.255
|
|
next
|
|
edit "MB_elasticsearch"
|
|
set uuid ec7e2e6e-782e-51f0-1981-476703e596e5
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.248.15.66 255.255.255.255
|
|
next
|
|
edit "voice_mb_access_1"
|
|
set uuid f32bf500-7830-51f0-7cf3-969190fbffe2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.42.202 255.255.255.255
|
|
next
|
|
edit "Client-MediaSoft"
|
|
set uuid ce3d67a6-79cf-51f0-45b7-d49192a1bf74
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.71.107 255.255.255.255
|
|
next
|
|
edit "Anomaly_IP"
|
|
set uuid ce54308c-79d2-51f0-d258-acd1998c1815
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 45.153.34.0 255.255.255.0
|
|
next
|
|
edit "Novotel-Desktop-VM-103.209.43.239"
|
|
set uuid 896ded3a-7cc7-51f0-89d7-c3037e79d928
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.43.239 255.255.255.255
|
|
next
|
|
edit "Toku_AWS-18.139.236.58"
|
|
set uuid 57039c18-8a6a-51f0-135d-793855775c61
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 18.139.236.58 255.255.255.255
|
|
next
|
|
edit "IPTSP-Push-3"
|
|
set uuid 62132178-946f-51f0-7fdf-c867ee420572
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.115 255.255.255.255
|
|
next
|
|
edit "google_api"
|
|
set uuid 671a79ee-9471-51f0-a002-91de8879c0f7
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 74.125.68.102 255.255.255.255
|
|
next
|
|
edit "Toku-VIP-36.255.69.100"
|
|
set uuid 8bb66c1a-9db6-51f0-2a7e-28824df6d093
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.100 255.255.255.255
|
|
next
|
|
edit "Client_118.67.212.23"
|
|
set uuid 264b9d24-ae68-51f0-0e20-dc1fdb624f19
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.212.23 255.255.255.255
|
|
next
|
|
edit "cpanel-attack-1"
|
|
set uuid 414f0cae-b319-51f0-20d8-2ce86f29a254
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 49.37.208.0 255.255.240.0
|
|
next
|
|
edit "cpanel-attack-2"
|
|
set uuid 849152ba-b319-51f0-a704-de1e313f07d1
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 46.30.208.0 255.255.248.0
|
|
next
|
|
edit "cpanel-attack-3"
|
|
set uuid 9679de16-b319-51f0-26e0-73e949aad251
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 5.249.224.0 255.255.224.0
|
|
next
|
|
edit "Bahon-VM"
|
|
set uuid 039b6b20-b31c-51f0-a52e-4ede5a065933
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.41.215 255.255.255.255
|
|
next
|
|
edit "IPTSP_Vendor_IP_5.77.205.167"
|
|
set uuid d9f115da-b4a2-51f0-e266-0da74e0b3c83
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 5.77.205.167 255.255.255.255
|
|
next
|
|
edit "NVTEL_Q21_CDR_192.168.8.64"
|
|
set uuid 7abcf03c-bb20-51f0-fb27-235a506a4123
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 192.168.8.64 255.255.255.224
|
|
next
|
|
edit "Novotel_CDR_Server_203.208.207.16/29"
|
|
set uuid 61f04ffc-bb22-51f0-0abf-1f9499ba6e98
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 203.208.207.16 255.255.255.248
|
|
next
|
|
edit "Novotel_New_CDR_DB_118.67.215.173"
|
|
set uuid 73470b9a-bb2e-51f0-eb6a-bbaf811a0d7c
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.215.173 255.255.255.255
|
|
next
|
|
edit "BICX-CDR"
|
|
set uuid 3ffcc686-bd62-51f0-65cc-8acc482f468e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 172.16.1.248 255.255.255.252
|
|
next
|
|
edit "PPTP-IP"
|
|
set uuid 620ac7a8-c381-51f0-ab3e-3ebf55857c55
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 192.168.25.0 255.255.255.0
|
|
next
|
|
edit "SF-SSD-Node"
|
|
set uuid 7dbcd464-c381-51f0-3841-72bbd04f6fd2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 192.168.10.206 255.255.255.255
|
|
next
|
|
edit "Openstack-New-Cloud-Compute-33"
|
|
set uuid f5daae24-c504-51f0-8e13-b7fe9de297d5
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 118.67.211.49 255.255.255.255
|
|
next
|
|
edit "Bengal_Meat_DApps"
|
|
set uuid 6e3d9f8c-dbff-51f0-023b-11a69a7ebee0
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.71 255.255.255.255
|
|
next
|
|
edit "Novotel-Desktop-VM-103.209.42.126"
|
|
set uuid 2f869818-e71f-51f0-f735-6b6b9ca4be3c
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.42.126 255.255.255.255
|
|
next
|
|
edit "103.209.42.105"
|
|
set uuid ab78225e-f604-51f0-62da-6b4bf41ba6ca
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.42.105 255.255.255.255
|
|
next
|
|
edit "103.209.42.105-d"
|
|
set uuid be6802e4-f604-51f0-94e6-66b8bee8a83e
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.42.105 255.255.255.255
|
|
next
|
|
edit "Windows"
|
|
set uuid a8657d8c-f8f7-51f0-d815-06598398c2b0
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 36.255.69.132 255.255.255.255
|
|
next
|
|
edit "Q21_Node_1_IP"
|
|
set uuid 19677f4c-00ed-51f1-3584-54820798225c
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 172.16.16.3 255.255.255.255
|
|
next
|
|
edit "Q21_node_2-IP"
|
|
set uuid 3517b950-00ed-51f1-a610-1422c1c0eac4
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 172.16.16.4 255.255.255.255
|
|
next
|
|
edit "Q21_Node_Gateway_NV1SR3"
|
|
set uuid 64dde476-0277-51f1-d964-fe7fa4181830
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 172.16.16.1 255.255.255.255
|
|
next
|
|
edit "JnZ-Group"
|
|
set uuid dda1693e-0aef-51f1-9af5-e4d4a4079215
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 103.209.40.46 255.255.255.255
|
|
next
|
|
end
|
|
config firewall multicast-address
|
|
edit "all_hosts"
|
|
set type multicastrange
|
|
set start-ip 224.0.0.1
|
|
set end-ip 224.0.0.1
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
next
|
|
edit "all_routers"
|
|
set type multicastrange
|
|
set start-ip 224.0.0.2
|
|
set end-ip 224.0.0.2
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
next
|
|
edit "Bonjour"
|
|
set type multicastrange
|
|
set start-ip 224.0.0.251
|
|
set end-ip 224.0.0.251
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
next
|
|
edit "EIGRP"
|
|
set type multicastrange
|
|
set start-ip 224.0.0.10
|
|
set end-ip 224.0.0.10
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
next
|
|
edit "OSPF"
|
|
set type multicastrange
|
|
set start-ip 224.0.0.5
|
|
set end-ip 224.0.0.6
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
next
|
|
edit "all"
|
|
set type multicastrange
|
|
set start-ip 224.0.0.0
|
|
set end-ip 239.255.255.255
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
next
|
|
end
|
|
config firewall address6-template
|
|
end
|
|
config firewall address6
|
|
edit "all"
|
|
set uuid 1e79816c-160c-51e8-f46a-00d8605b82ea
|
|
set type ipprefix
|
|
set ip6 ::/0
|
|
set color 0
|
|
set comment ''
|
|
set fabric-object disable
|
|
next
|
|
edit "none"
|
|
set uuid 1e798c3e-160c-51e8-2c83-ff36e267fbe1
|
|
set type ipprefix
|
|
set ip6 ::/128
|
|
set color 0
|
|
set comment ''
|
|
set fabric-object disable
|
|
next
|
|
edit "SSLVPN_TUNNEL_IPv6_ADDR1"
|
|
set uuid 1ede321a-160c-51e8-4ad9-6fc1cf347a61
|
|
set type ipprefix
|
|
set ip6 fdff:ffff::/120
|
|
set color 0
|
|
set comment ''
|
|
set fabric-object disable
|
|
next
|
|
end
|
|
config firewall multicast-address6
|
|
edit "all"
|
|
set ip6 ff00::/8
|
|
set comment ''
|
|
set color 0
|
|
next
|
|
end
|
|
config system ipv6-tunnel
|
|
end
|
|
config firewall addrgrp
|
|
edit "BRILLIANT-ZIMBRA"
|
|
set type default
|
|
set category default
|
|
set uuid 9415fb90-2033-51e8-cf7a-e54b76ff68df
|
|
set member "BRILLIANT-ZIMBRA-MTA-NEW" "smtp.brilliant.com.bd" "Zimbra Mail"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "ADMIN-ACCESS-GRP"
|
|
set type default
|
|
set category default
|
|
set uuid de510678-2510-51e8-c3f1-9e1dece0969f
|
|
set member "Admin-Access-1" "Admin-Access-2" "Admin-Access-3" "Admin-Access-4" "Admin-Access-5" "Admin-Access-6" "Admin-Access-7-PPTP" "Admin-Access-8-Cloud-MKT" "idrac-public-IP" "Core-IC-VPN" "Admin-Access-8"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "COMMVAULT-INFRA"
|
|
set type default
|
|
set category default
|
|
set uuid 4454f404-b4bb-51e8-205d-5d09bb765213
|
|
set member "MEDIA-AGENT-3" "MEDIA-AGENT-1" "MEDIA-AGENT-2" "COMMVAULT-PROXY" "COMMVAULT-VSA" "CS-PRODUCTION" "CS-STANDBY" "MEDIA-AGENT-4" "New-Commserve" "Commvault-New-Cloud-VSA-Proxy" "New-Cloud-VSA-Proxy-2"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "SMTP-Incoming-Allow"
|
|
set type default
|
|
set category default
|
|
set uuid cab141b0-f246-51e8-8b73-97a7b2bda383
|
|
set member "BRILLIANT-ZIMBRA-MTA-NEW" "Mail Border GW-mgw.intercloud.com.bd"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Brilliant Trusted IP List"
|
|
set type default
|
|
set category default
|
|
set uuid 87b6d70a-58f1-51e9-1846-243063b7bbca
|
|
set member "Admin-Access-6" "Billing LAN" "IPTSP LAN" "Porta Public-1" "Porta Public-2" "Zangi Public IP" "NovoTel-Zenoses" "Admin-Access-8-Cloud-MKT" "hightechpark_officeip_118.67.223.70" "brilliant-C3-RTP-private-IP_10.246.20.21" "brilliant-C3-SIP-private-IP_10.246.20.8" "Briliant-Router-PVT-SIg-GW_10.246.20.1" "Briliant-Router-PVT-Med-GW_10.246.20.17" "Brilliant-C3-SingTel-Rivate-IP-Block_203.208.207.32/29"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "HTTP-Brilliant"
|
|
set type default
|
|
set category default
|
|
set uuid 5a6ff096-58f2-51e9-4467-9909ae6a33f7
|
|
set member "HTTP01-Brilliant" "HTTP02--Brilliant" "HTTP03--Brilliant"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "SIGNALING & Media Proxy -Brilliant"
|
|
set type default
|
|
set category default
|
|
set uuid bc75be5a-58f3-51e9-4b4c-f6fb5937da40
|
|
set member "other 1-Brilliant" "Other 2-Brilliant" "Other 4-Brilliant" "Other 5-Brilliant" "Other 6-Brilliant" "stream 1-Brilliant" "stream 3-Brilliant"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Novotel-Exchange-IP"
|
|
set type default
|
|
set category default
|
|
set uuid 30216136-e43d-51e9-1ed3-69c840781a71
|
|
set member "NovoTel-Exchange-1" "NovoTel-Exchange-2" "Novoair-mail-server1" "Novotel-Mail-server-2"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Openstack-New-Cloud-Nodes"
|
|
set type default
|
|
set category default
|
|
set uuid 54446f64-57b4-51ea-567f-7660ced58dab
|
|
set member "Openstack-new-cloud-compute16" "Openstack-new-cloud-compute3" "Openstack-new-cloud-compute4" "Openstack-new-cloud-compute5" "Openstack-new-cloud-compute6" "Openstack-new-cloud-compute7" "Openstack-new-cloud-compute8" "Openstack-new-cloud-controller1" "Openstack-new-cloud-controller2" "Openstack-new-cloud-controller3" "Openstack-new-cloud-compute10" "Openstack-new-cloud-compute9" "Openstack-new-cloud-compute11" "Openstack-new-cloud-compute12" "Openstack-new-cloud-compute14" "Openstack-new-cloud-compute15" "Openstack-new-cloud-compute13" "Openstack-New-Cloud-compute-17" "Openstack-New-Cloud-Compute-18" "Openstack-new-cloud-compute19" "Openstack-New-Cloud-Compute-20" "Openstack-New-Cloud-Compute-21" "Openstack-New-Cloud-Compute-22" "Openstack-New-Cloud-Compute-23" "Openstack-New-Cloud-Compute-24" "Openstack-New-Cloud-Compute-25" "Openstack-new-cloud-compute26" "Openstack-New-cloud-compute27" "Openstack-New-cloud-compute28" "Openstack-New-cloud-compute29" "Openstack-New-Cloud-compute-30" "Admin-Access-1" "Openstack-New-Cloud-Compute-31" "Openstack-New-Cloud-Compute-32" "Openstack-New-Cloud-Compute-33" "3s-software-VM-03-103.209.41.42"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "openstack-haproxy-ip-group"
|
|
set type default
|
|
set category default
|
|
set uuid 3a9cee3a-5e9c-51ea-cb82-4e0e33163f9c
|
|
set member "openstack-haproxy-1" "openstack-haproxy-2" "openstack-haproxy-3" "openstack-haproxy-vip" "Horizon-dashboard-1" "Horizon-dashboard-2" "Horizon-dashboard-3"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Momagic-ssh-allow-ip-group"
|
|
set type default
|
|
set category default
|
|
set uuid a433926a-6368-51ea-5795-ac3389b93f9f
|
|
set member "Momagic-ssh-allow-ip-1" "Momagic-ssh-allow-ip-2" "Momagic-ssh-allow-ip-3" "Momagic-ssh-allow-ip-4" "Momagic-ssh-allow-ip-5" "momagic-ssh-allow-6"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Buet-Server-Group-1"
|
|
set type default
|
|
set category default
|
|
set uuid 5082f24e-d85e-51ea-9652-6894c9195df3
|
|
set member "BUET-APP-SERVER-1-IP-109" "BUET-APP-SERVER-2-IP-108"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "OBD-Source-Group-21-Oct"
|
|
set type default
|
|
set category default
|
|
set uuid b3483c4a-135a-51eb-78fa-2998798383ff
|
|
set member "OBD-Source-21" "OBD-Source-22" "OBD-Source-23" "OBD-Source-24" "OBD-Source-25" "OBD-Source-26" "OBD-Source-27"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "purple-patch-wizard-New-IP-GRP"
|
|
set type default
|
|
set category default
|
|
set uuid db27cea8-2ee2-51eb-1d58-9e9f9fa6c31e
|
|
set member "PP-VM-01" "PP-VM-02" "PP-VM-03" "PP-VM-04" "PP-VM-05" "PP-VM-06" "PP-VM-07" "PP-VM-08" "PP-VM-09"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Brilliant-media-proxy-group"
|
|
set type default
|
|
set category default
|
|
set uuid 869d09a0-772d-51eb-04b7-39422ecfb541
|
|
set member "hdstrm-5-test-one-month" "hdstrm01" "hdstrm02" "hdstrm03" "hdstrm04" "Admin-Access-1" "hdstrm05" "hdstrm06" "New-Signaling-Server-1" "hdvoip05"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Dingi-VM-group-for-amazon"
|
|
set type default
|
|
set category default
|
|
set uuid 72491376-7ff3-51eb-11ab-0a9afc4f52b0
|
|
set member "Dingi-vm-03" "Dingi-vm-05" "Dingi-vm-06" "Dingi-vm-07"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Attacker IP Group"
|
|
set type default
|
|
set category default
|
|
set uuid 420288fc-5a8d-51ed-727d-770aaa4e9064
|
|
set member "Attacker11" "Attacker IP 13" "Attacker14" "Attacker15" "Attacker16" "Attacker IP 17" "Attacker IP 18" "Attacker-19" "attacker RDP" "RDP Attacker" "Attacker Ip 21" "RDP-Attacker-10" "RDP-Attaker-11" "attacker ip 19" "attacker IP" "Attacker IP 30" "Attacker IP 31" "Attacker Ip 33" "Attacker-IP-HTTP-1" "RDP-Attacker-2" "Attacker-IP-34" "RDP-Attacker-12" "SSH-Attacker-2" "SSH_Attacker-1" "SSH_Attacker-3" "SSH_Attacker-4" "SSH_Attacker-5" "SSH-Attacker-10" "SSH-Attacker-6" "SSH-Attacker-7" "SSH-Attacker-8" "SSH-Attacker-9" "RDP-Attacker-13" "RDP_Attacker-14" "RDP-Attack-15" "RDP-Attacker-16" "RDP_attacker-17" "AttackerIP-15" "AttackerIP-16" "AttackerIP-17" "AttackerIP-18" "AttackerIP-19" "RDP_Attacker-18" "attacker Ip 17" "Attacker_Ip-34" "SMTP_Attacker-10" "Attacker_Novoair_1" "Attacker_Novoair_2" "Attacker_NovoAir_3" "Attacker_NovoAir_4" "Attacker_Ip_35" "attacker-48"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "mahfuz_access_list"
|
|
set type default
|
|
set category default
|
|
set uuid e6c7398e-e767-51ed-3edb-de0a65805ae3
|
|
set member "mahfuz-bhai-VM" "mahfuz_home_43.230.122.137" "mahfuz_ip" "Admin-Access-7-PPTP"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "SMTP_Attacker"
|
|
set type default
|
|
set category default
|
|
set uuid 98202a80-647a-51ee-32e7-1104027f9cd7
|
|
set member "SMTP_Attacker-1" "SMTP_Attacker-2" "SMTP_Attacker-3" "SMTP_Attacker-4" "SMTP_Attacker-5" "SMTP_Attacker-6" "SMTP_Attacker-7" "SMTP_Attacker-8" "SMTP_Attacker-9"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Green-Delta-IP-list"
|
|
set type default
|
|
set category default
|
|
set uuid b09cda7e-0dd8-51ef-b5d2-0951b15c6782
|
|
set member "green-delta-VM-12_36.255.71.104" "green-delta-VM-10_36.255.68.99" "green-delta-VM-11_36.255.70.205" "green-delta-VM-2_36.255.69.198" "green-delta-VM-6_36.255.70.27" "green-delta-VM-7_36.255.70.118" "green-delta-VM-8_36.255.69.60" "green-delta-VM-9_36.255.68.173"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "500 error VM List"
|
|
set type default
|
|
set category default
|
|
set uuid 89b69170-cb4c-51ef-96fe-f50e7cb6329b
|
|
set member "Graphics-Textile-36.255.71.39" "Graphics-Textile-36.255.71.181" "Mediasoft_Bluecheez_36.255.68.87" "Mediasoft_Ghorer_bazar_36.255.68.169" "Mediasoft_Shoishob_36.255.69.159" "RTV-APP-36.255.69.138" "Netswift Technologies-103.209.40.255" "Abdur-Rahim_36.255.69.32" "BHL-Group-118.67.213.83" "CSL-36.255.70.117" "CSL_36.255.68.151" "CSL_36.255.68.237" "Daeyu-Bamgladesh-36.255.71.55" "Desh-Tv-36.255.71.207" "Mediasoft_Babar_Shoe_103.209.40.183" "Mediasoft_Hyper_solution_36.255.70.126" "Mediasoft_Parjatan_Corporation_36.255.70.122" "Mediasoft_SplashInglot_36.255.71.69" "Miclo_118.67.213.191" "Pluspoint_103.209.40.192" "BHL2_118.67.213.59" "eMythMaker1_103.209.42.165" "eMythMaker2_103.209.42.198" "eMythMaker3_103.209.42.203" "eMythMaker4_103.209.42.200" "Encoders1_118.67.215.206" "RH-Corp1_36.255.70.182" "JI_Impex1_36.255.70.142" "Pasha_Energy_103.209.41.0" "MediaSoft_Sailor_POC-103.209.41.12" "Bengal-Meat-VM-2-36.255.68.90" "Mediasoft-O_Neutral_36.255.71.139" "Mediasoft_Cycle_Life-36.255.69.200" "Mediasoft-Meghna-36.255.68.137" "3s-software-VM-03-103.209.41.42" "JI_Impex2_103.209.41.89" "JI_Impex3_103.209.40.200" "HyperSolution1_36.255.71.233" "Media_Soft_IP_36.255.70.223" "MediaSoft2-36.255.71.150" "Mediasoft3_103.209.40.253" "DigiLab1_36.255.69.35" "Digilab2_36.255.69.92" "Digilab3_36.255.69.18" "Digilab4_36.255.70.91" "3S_Software1_103.209.41.92" "MediaSoft3_36.255.71.108" "MediaSoft4_36.255.71.53" "ICAB-VM-01" "Bengal_Meat2_36.255.69.171" "DNS-Software-36.255.71.217" "Shadhin-Music-VM-2-103.209.41.131" "Shadhin-Music-VM-4-103.209.40.118"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Microsoft Office 365"
|
|
set type default
|
|
set category default
|
|
set uuid 8b3efee6-d1e2-51ef-8bbe-53b48211ae56
|
|
set member "login.microsoftonline.com" "login.microsoft.com" "login.windows.net"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "G Suite"
|
|
set type default
|
|
set category default
|
|
set uuid 8b3f047c-d1e2-51ef-36a1-39016548e9eb
|
|
set member "gmail.com" "wildcard.google.com"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "cPanel-Clusture-and-DNS"
|
|
set type default
|
|
set category default
|
|
set uuid 306c4050-d23c-51ef-0425-2b08f8b559f8
|
|
set member "Cloud_DNS1_118.67.212.96" "Cloud_DNS2_118.67.220.182" "cPanel" "Cloud_DNS3_103.248.13.22" "Nirob_DNS_36.255.69.146" "Democracy1_36.255.70.84" "Democracy2_36.255.71.17" "Democracy3_36.255.68.233" "Quantic-Dynamics-103.209.40.166" "Quantic-Dynamics-103.209.41.15" "Quantic-Dynamics-103.209.40.157" "Quantic-Dynamics-103.209.40.162" "Quantic-Dynamics-103.209.40.177" "Quantic-Dynamics-103.209.40.180" "Quantic-Dynamics-103.209.40.212" "Quantic-Dynamics-103.209.40.217" "Quantic-Dynamics-103.209.40.234" "Quantic-Dynamics-103.209.40.250" "IC-ISP-DNS1" "IC-ISP-DNS2" "IC_DNS_Primay_103.248.12.62" "CEO_SIR_IPCAM_103.23.40.46" "ICAB-VM-01" "Bol-DNS-FOR-ICAB-202.84.32.22" "BOL-DNS-2-FOR-ICAB-202.84.32.23" "ICAB2_36.255.69.142" "ICAB2_36.255.69.203" "ICAB4_36.255.69.193" "ICAB5_36.255.69.208" "ICAB6_36.255.69.212" "ICAB10_36.255.69.222" "ICAB11_36.255.69.225" "ICAB12_36.255.69.165" "ICAB13_36.255.69.199" "ICAB14_36.255.68.225" "ICAB15_36.255.68.235" "ICAB7_36.255.69.150" "ICAB8_36.255.69.238" "ICAB9_36.255.69.246" "DigiMobi1" "Digimobi2" "Digimobi3" "3s-software-VM-03-103.209.41.42" "Softifybd-Limited-VM_140" "Softifybd-Limited-VM_149" "CelloScope_1" "CelloScope_Test_Bypass" "Window_VM_1"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 28
|
|
set fabric-object disable
|
|
next
|
|
edit "Toku"
|
|
set type default
|
|
set category default
|
|
set uuid 358ccbc6-d256-51ef-51fb-c69d6c8a27e4
|
|
set member "Toku_36.255.71.234-VOIP"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Friendshif-NGO-Address-Group"
|
|
set type default
|
|
set category default
|
|
set uuid 78ad7ec2-02e5-51f0-9895-1c3580dbe794
|
|
set member "FriendShip_NGO_ISP_IP" "port33 address" "Novotel_office_IP_103.248.13.66" "cloud-nagios" "cloud-observium"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 9
|
|
set fabric-object disable
|
|
next
|
|
edit "Toku_External_IP"
|
|
set type default
|
|
set category default
|
|
set uuid 2ed37c84-24e1-51f0-e461-a6b7b14bb2d9
|
|
set member "Toku_External_IP_1" "Toku_External_IP_2" "Toku_External_IP_3" "Toku_External_IP_4" "Toku_External_IP_5" "Toku_External_IP_6"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Blacklisted IP"
|
|
set type default
|
|
set category default
|
|
set uuid 09143d34-2b31-51f0-a6b2-22ed897c87e0
|
|
set member "Blacklist-IP- 152.32.227.252" "Blacklist-IP-2-45.148.10.81" "Blacklist-IP-4-60.26.62.15" "Blacklist-IP-5-122.228.23.224" "Blacklist-IP-6-102.249.62.0/24" "webns-vm-1" "blacklist-ip-141.98.80.48" "blacklist_ip_190.123.195.139" "Blacklist_Ip_95.214.52.169" "cpanel-attack-1" "cpanel-attack-2" "cpanel-attack-3"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Controller_IP"
|
|
set type default
|
|
set category default
|
|
set uuid bf4fae4c-65f3-51f0-98c7-45193c412aff
|
|
set member "Horizon-dashboard-1" "Horizon-dashboard-2" "Horizon-dashboard-3" "Openstack-Rocky-Infra-Block" "Openstack-Rocky-Infra-Block-2"
|
|
set comment "This group is only for Openstack Controller IP"
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
end
|
|
config firewall addrgrp6
|
|
end
|
|
config firewall wildcard-fqdn custom
|
|
edit "g-Adobe Login"
|
|
set uuid 45a1370a-5626-51eb-48d2-02f82ddf8bb4
|
|
set wildcard-fqdn "*.adobelogin.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-Gotomeeting"
|
|
set uuid 45a14286-5626-51eb-a3ba-d0d8dacc1a38
|
|
set wildcard-fqdn "*.gotomeeting.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-Windows update 2"
|
|
set uuid 45a14a10-5626-51eb-b443-017c85c812aa
|
|
set wildcard-fqdn "*.windowsupdate.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-adobe"
|
|
set uuid 45a1361a-5626-51eb-6736-aa8a00428ef9
|
|
set wildcard-fqdn "*.adobe.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-android"
|
|
set uuid 45a137dc-5626-51eb-cf37-a4b5e8b1cee0
|
|
set wildcard-fqdn "*.android.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-apple"
|
|
set uuid 45a138a4-5626-51eb-9605-a30d9276dc87
|
|
set wildcard-fqdn "*.apple.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-appstore"
|
|
set uuid 45a1396c-5626-51eb-a324-5453959153d7
|
|
set wildcard-fqdn "*.appstore.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-auth.gfx.ms"
|
|
set uuid 45a13a52-5626-51eb-fd10-4326504354ff
|
|
set wildcard-fqdn "*.auth.gfx.ms"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-autoupdate.opera.com"
|
|
set uuid 45a14e5c-5626-51eb-f8ac-5ee802453388
|
|
set wildcard-fqdn "*autoupdate.opera.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-cdn-apple"
|
|
set uuid b56aac36-d1e4-51ef-eff4-b8a920746d4f
|
|
set wildcard-fqdn "*.cdn-apple.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-citrix"
|
|
set uuid 45a13b1a-5626-51eb-6ab8-28a0f6b48412
|
|
set wildcard-fqdn "*.citrixonline.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-dropbox.com"
|
|
set uuid 45a13bec-5626-51eb-7584-7bd101c811cf
|
|
set wildcard-fqdn "*.dropbox.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-eease"
|
|
set uuid 45a13cb4-5626-51eb-953a-f9abede8bf24
|
|
set wildcard-fqdn "*.eease.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-firefox update server"
|
|
set uuid 45a13d86-5626-51eb-448c-d907ac122bf1
|
|
set wildcard-fqdn "aus*.mozilla.org"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-fortinet"
|
|
set uuid 45a13e4e-5626-51eb-0fd5-bf5be8c7ba63
|
|
set wildcard-fqdn "*.fortinet.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-google-drive"
|
|
set uuid 45a14006-5626-51eb-3060-78f71fe5e882
|
|
set wildcard-fqdn "*drive.google.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-google-play"
|
|
set uuid 45a14bb4-5626-51eb-dfae-8e0e0083e420
|
|
set wildcard-fqdn "*play.google.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-google-play2"
|
|
set uuid 45a140d8-5626-51eb-91dc-4c06db505e61
|
|
set wildcard-fqdn "*.ggpht.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-google-play3"
|
|
set uuid 45a141aa-5626-51eb-1c05-445beb99a892
|
|
set wildcard-fqdn "*.books.google.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-googleapis.com"
|
|
set uuid 45a13f34-5626-51eb-3659-1ea74e2ed87a
|
|
set wildcard-fqdn "*.googleapis.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-icloud"
|
|
set uuid 45a144de-5626-51eb-db4c-4f034a7bd727
|
|
set wildcard-fqdn "*.icloud.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-itunes"
|
|
set uuid 45a145d8-5626-51eb-6c3e-f5b30ff1682b
|
|
set wildcard-fqdn "*itunes.apple.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-live.com"
|
|
set uuid 45a14ae2-5626-51eb-f528-341943507dd9
|
|
set wildcard-fqdn "*.live.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-microsoft"
|
|
set uuid 45a146be-5626-51eb-d120-df8cf68e1e8e
|
|
set wildcard-fqdn "*.microsoft.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-mzstatic-apple"
|
|
set uuid b56aad4e-d1e4-51ef-7eca-79d68c7b28d8
|
|
set wildcard-fqdn "*.mzstatic.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-skype"
|
|
set uuid 45a14790-5626-51eb-d759-0b0d0cba8267
|
|
set wildcard-fqdn "*.messenger.live.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-softwareupdate.vmware.com"
|
|
set uuid 45a14862-5626-51eb-d564-48386edea9f7
|
|
set wildcard-fqdn "*.softwareupdate.vmware.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-swscan.apple.com"
|
|
set uuid 45a14d8a-5626-51eb-723e-8c6e26b98fb0
|
|
set wildcard-fqdn "*swscan.apple.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-update.microsoft.com"
|
|
set uuid 45a14c90-5626-51eb-cf31-6d26a1ee4593
|
|
set wildcard-fqdn "*update.microsoft.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-verisign"
|
|
set uuid 45a1493e-5626-51eb-b831-9457577c78c2
|
|
set wildcard-fqdn "*.verisign.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
end
|
|
config firewall wildcard-fqdn group
|
|
end
|
|
config firewall traffic-class
|
|
end
|
|
config firewall service category
|
|
edit "General"
|
|
set comment "General services."
|
|
set fabric-object disable
|
|
next
|
|
edit "Web Access"
|
|
set comment "Web access."
|
|
set fabric-object disable
|
|
next
|
|
edit "File Access"
|
|
set comment "File access."
|
|
set fabric-object disable
|
|
next
|
|
edit "Email"
|
|
set comment "Email services."
|
|
set fabric-object disable
|
|
next
|
|
edit "Network Services"
|
|
set comment "Network services."
|
|
set fabric-object disable
|
|
next
|
|
edit "Authentication"
|
|
set comment "Authentication service."
|
|
set fabric-object disable
|
|
next
|
|
edit "Remote Access"
|
|
set comment "Remote access."
|
|
set fabric-object disable
|
|
next
|
|
edit "Tunneling"
|
|
set comment "Tunneling service."
|
|
set fabric-object disable
|
|
next
|
|
edit "VoIP, Messaging & Other Applications"
|
|
set comment "VoIP, messaging, and other applications."
|
|
set fabric-object disable
|
|
next
|
|
edit "Web Proxy"
|
|
set comment "Explicit web proxy."
|
|
set fabric-object disable
|
|
next
|
|
end
|
|
config firewall service custom
|
|
edit "DNS"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 53
|
|
set udp-portrange 53
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "HTTP"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 80
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "HTTPS"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 443
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "IMAP"
|
|
set proxy disable
|
|
set category "Email"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 143
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "IMAPS"
|
|
set proxy disable
|
|
set category "Email"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 993
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "LDAP"
|
|
set proxy disable
|
|
set category "Authentication"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 389
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "DCE-RPC"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 135
|
|
set udp-portrange 135
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "POP3"
|
|
set proxy disable
|
|
set category "Email"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 110
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "POP3S"
|
|
set proxy disable
|
|
set category "Email"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 995
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SAMBA"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 139
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SMTP"
|
|
set proxy disable
|
|
set category "Email"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 25
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SMTPS"
|
|
set proxy disable
|
|
set category "Email"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 465
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "KERBEROS"
|
|
set proxy disable
|
|
set category "Authentication"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 88 464
|
|
set udp-portrange 88 464
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "LDAP_UDP"
|
|
set proxy disable
|
|
set category "Authentication"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 389
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SMB"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 445
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "FTP"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 21 20
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "FTP_GET"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 21
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "FTP_PUT"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 21
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "ALL"
|
|
set proxy disable
|
|
set category "General"
|
|
set protocol IP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set protocol-number 0
|
|
next
|
|
edit "ALL_TCP"
|
|
set proxy disable
|
|
set category "General"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1-65535
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "ALL_UDP"
|
|
set proxy disable
|
|
set category "General"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 1-65535
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "ALL_ICMP"
|
|
set proxy disable
|
|
set category "General"
|
|
set protocol ICMP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
unset icmptype
|
|
next
|
|
edit "ALL_ICMP6"
|
|
set proxy disable
|
|
set category "General"
|
|
set protocol ICMP6
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
unset icmptype
|
|
next
|
|
edit "GRE"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol IP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set protocol-number 47
|
|
next
|
|
edit "AH"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol IP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set protocol-number 51
|
|
next
|
|
edit "ESP"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol IP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set protocol-number 50
|
|
next
|
|
edit "AOL"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 5190-5194
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "BGP"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 179
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "DHCP"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 67-68
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "FINGER"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 79
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "GOPHER"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 70
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "H323"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1720 1503
|
|
set udp-portrange 1719
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "IKE"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 500 4500
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Internet-Locator-Service"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 389
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "IRC"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 6660-6669
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "L2TP"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1701
|
|
set udp-portrange 1701
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "NetMeeting"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1720
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "NFS"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 111 2049
|
|
set udp-portrange 111 2049
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "NNTP"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 119
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "NTP"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 123
|
|
set udp-portrange 123
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "OSPF"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol IP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set protocol-number 89
|
|
next
|
|
edit "PC-Anywhere"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 5631
|
|
set udp-portrange 5632
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "PING"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol ICMP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set icmptype 8
|
|
unset icmpcode
|
|
next
|
|
edit "TIMESTAMP"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol ICMP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set icmptype 13
|
|
unset icmpcode
|
|
next
|
|
edit "INFO_REQUEST"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol ICMP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set icmptype 15
|
|
unset icmpcode
|
|
next
|
|
edit "INFO_ADDRESS"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol ICMP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set icmptype 17
|
|
unset icmpcode
|
|
next
|
|
edit "ONC-RPC"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 111
|
|
set udp-portrange 111
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "PPTP"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1723
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "QUAKE"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 26000 27000 27910 27960
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RAUDIO"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 7070
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "REXEC"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 512
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RIP"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 520
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RLOGIN"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 513:512-1023
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RSH"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 514:512-1023
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SCCP"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 2000
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SIP"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 5060
|
|
set udp-portrange 5060
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SIP-MSNmessenger"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1863
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SNMP"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 161-162
|
|
set udp-portrange 161-162
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SSH"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 22
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SYSLOG"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 514
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "TALK"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 517-518
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "TELNET"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 23
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "TFTP"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 69
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "MGCP"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 2427 2727
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "UUCP"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 540
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "VDOLIVE"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 7000-7010
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "WAIS"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 210
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "WINFRAME"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1494 2598
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "X-WINDOWS"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 6000-6063
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "PING6"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol ICMP6
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set icmptype 128
|
|
unset icmpcode
|
|
next
|
|
edit "MS-SQL"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1433 1434
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "MYSQL"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 3306
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RDP"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 3389
|
|
set udp-portrange 3389
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "VNC"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 5900
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "DHCP6"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 546 547
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SQUID"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 3128
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SOCKS"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1080
|
|
set udp-portrange 1080
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "WINS"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1512
|
|
set udp-portrange 1512
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RADIUS"
|
|
set proxy disable
|
|
set category "Authentication"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 1812 1813
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RADIUS-OLD"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 1645 1646
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "CVSPSERVER"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 2401
|
|
set udp-portrange 2401
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "AFS3"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 7000-7009
|
|
set udp-portrange 7000-7009
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "TRACEROUTE"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 33434-33535
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RTSP"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 554 7070 8554
|
|
set udp-portrange 554
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "MMS"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1755
|
|
set udp-portrange 1024-5000
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "NONE"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 0
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "webproxy"
|
|
set proxy enable
|
|
set category "Web Proxy"
|
|
set protocol ALL
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set app-service-type disable
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 0-65535:0-65535
|
|
next
|
|
edit "PORT-7493"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 7493
|
|
set udp-portrange 7493
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Memcached-11211"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment "ZIMBRA-VULNERABILITY"
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 11211
|
|
set udp-portrange 11211
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "openstack-rocky-SSH-Port"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 58923
|
|
set udp-portrange 58923
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RabbitMQ-Port"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 15672
|
|
set udp-portrange 15672
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "TCP 8080"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 8080
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Brilliant-tcp-5223"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment "Brilliant-tcp-5223"
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 5223
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Brilliant-UDP-10K-to-all"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment "Brilliant-UDP-10K-to-all"
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 10000-65535
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Brilliant-UDP-5065"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment "Brilliant-UDP-5065"
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 5065
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SSH-2020-IPTSP"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 2020
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "custom-ssh-seafile"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment "custom-ssh-seafile"
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 2048
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Brilliant-3002"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 3002
|
|
set udp-portrange 3002
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "brilliant-3001"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 3001
|
|
set udp-portrange 3001
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "openstack-vnc-6080"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 6080
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "9090-port"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 9090
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "route-mobile-9000-port"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 9000
|
|
set udp-portrange 9000
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "TCP-5432"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 5432
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Brilliant-UDP-3478"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 3478
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "wizard-8086"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 8086
|
|
set udp-portrange 8086
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "wizard-8088"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 8088
|
|
set udp-portrange 8088
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "wizard-8091"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 8091
|
|
set udp-portrange 8091
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "wizard-3000-3004"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 3000-3004
|
|
set udp-portrange 3000-3004
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "wizard-8092"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 8092
|
|
set udp-portrange 8092
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "wizard-8123-8124"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 8123-8124
|
|
set udp-portrange 8123-8124
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "wizard-9000"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 9000
|
|
set udp-portrange 9000
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "wizard-9009"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 9009
|
|
set udp-portrange 9009
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "wizard-8093"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 8093
|
|
set udp-portrange 8093
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "wizard-8094"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 8094
|
|
set udp-portrange 8094
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "wizard-9001"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 9001
|
|
set udp-portrange 9001
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "wizard-8095"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 8095
|
|
set udp-portrange 8095
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "WIZARD-8099"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 8099
|
|
set udp-portrange 8099
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "WIZARD-8096"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 8096
|
|
set udp-portrange 8096
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "wizard-8097"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 8097
|
|
set udp-portrange 8097
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "route-mobile-8443"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 8443
|
|
set udp-portrange 8443
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "port-324"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 324
|
|
set udp-portrange 324
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "port-8081"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 8081
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "port-1421"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1421
|
|
set udp-portrange 1421
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SMS-VM-SVC-4432"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 4432
|
|
set udp-portrange 4432
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RDP_UDP"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 3389
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "OBD-port-8082"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 8082
|
|
set udp-portrange 8082
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "tcp-587"
|
|
set proxy disable
|
|
set category "Email"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 587
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "tcp-8008"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 8008
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "tcp-8010"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 8010
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "7001-service"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 7001
|
|
set udp-portrange 7001
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "route-mobile-2345"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 2345
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "route-mobile-3345"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 3345
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Toku-7584"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 7584
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Toku-9656"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 9656
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Toku-5746"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 5746
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Toku-9894"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 9894
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Toku-10000-20000"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 10000-20000
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Toku-4000-5000"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment "Toku-4000-5000"
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 4000-5000
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Toku-161/162-UDP"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment "Toku-161/162-UDP"
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 161-162
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Toku-4866"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment "Toku-4866"
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 4866
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "TOKU-3956"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment "TOKU-3956"
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 3956
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Toku-135"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 135
|
|
set udp-portrange 135
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Toku-10080"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 10080
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Toku-udp-8090"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 8090
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Toku-UDP-10000-20000"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 10000-20000
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Brilliant-OBD-100"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 100
|
|
set udp-portrange 100
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Toku-TCP-8000"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 8000
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Toku-TCP-9000-9001"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 9000-9001
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Toku-tcp-44300-44301"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 44300-44301
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Toku-161-TCP"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment "Toku-161-TCP"
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 161
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Toku-4866-UDP"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 4668
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Zimbra_AdminPort"
|
|
set proxy disable
|
|
set category "General"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 9071
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "zimbra-xmpp"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 5222
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Zimbra-xmpp-ssl"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 5223
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Zimbra-proxy"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 3443
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "TOKU-SSH-Port-3956"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 3956
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Port_714"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 714
|
|
set udp-portrange 714
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SSH-Authentication"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 22
|
|
set udp-portrange 22
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "toku-123"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment "toku-123"
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 123
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "toku-123_UDP"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment "toku-123_UDP"
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 123
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "IPTSP_UDP_63546"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 63546
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "toku_udp_5060"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment "toku_udp_5060"
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 5060
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "toku_udp_5080"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment "toku_udp_5080"
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 5080
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "toku_udp_6000-65534"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment "toku_udp_6000-65534"
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 6000-65534
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Apache Kafka port-9092"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 9092
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Brilliant-5201"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 5201
|
|
set udp-portrange 5201
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Friendship-NGO-Port-9876"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 9876
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "FriendShip-NGO-Port-7780"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 7780
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "FriendShip-NGO-Port-1500-to1502"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1500-1501
|
|
set udp-portrange 1502
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Custom-SSH-Port-58923"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 58923
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "kafka-9092"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment "Shadhin_Music"
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 9092
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "UDP 10000-65535"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 10000-65535
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
end
|
|
config firewall service group
|
|
edit "Email Access"
|
|
set proxy disable
|
|
set member "DNS" "IMAP" "IMAPS" "POP3" "POP3S" "SMTP" "SMTPS"
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Web Access"
|
|
set proxy disable
|
|
set member "DNS" "HTTP" "HTTPS"
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Windows AD"
|
|
set proxy disable
|
|
set member "DCE-RPC" "DNS" "KERBEROS" "LDAP" "LDAP_UDP" "SAMBA" "SMB"
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Exchange Server"
|
|
set proxy disable
|
|
set member "DCE-RPC" "DNS" "HTTPS"
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "FriendShip-NGO-Service-Group"
|
|
set proxy disable
|
|
set member "FriendShip-NGO-Port-1500-to1502" "FriendShip-NGO-Port-7780" "Friendship-NGO-Port-9876" "FTP" "HTTP" "HTTPS" "RDP" "SAMBA" "SMB" "SSH" "ALL_ICMP" "Custom-SSH-Port-58923" "SNMP"
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
end
|
|
config firewall internet-service-group
|
|
end
|
|
config firewall internet-service-extension
|
|
end
|
|
config firewall internet-service-custom
|
|
end
|
|
config firewall internet-service-custom-group
|
|
end
|
|
config firewall network-service-dynamic
|
|
end
|
|
config system external-resource
|
|
end
|
|
config vpn certificate ca
|
|
end
|
|
config vpn certificate remote
|
|
end
|
|
config vpn certificate local
|
|
edit "Fortinet_CA_SSL"
|
|
set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_CA_Untrusted"
|
|
set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_GUI_Server"
|
|
set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_RSA1024"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_RSA2048"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_RSA4096"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_DSA1024"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_DSA2048"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_ECDSA256"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_ECDSA384"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_ECDSA521"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_ED25519"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_ED448"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "fw-brilliant2"
|
|
set comments ''
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source user
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "brilliant com bd certificate"
|
|
set comments ''
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source user
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
end
|
|
config vpn certificate crl
|
|
end
|
|
config vpn certificate ocsp-server
|
|
end
|
|
config vpn certificate setting
|
|
set ocsp-status disable
|
|
set ocsp-option server
|
|
set proxy ''
|
|
set source-ip ''
|
|
set ocsp-default-server ''
|
|
set interface-select-method auto
|
|
set check-ca-cert enable
|
|
set check-ca-chain disable
|
|
set subject-match substring
|
|
set subject-set subset
|
|
set cn-match substring
|
|
set cn-allow-multi enable
|
|
config crl-verification
|
|
set expiry ignore
|
|
set leaf-crl-absence ignore
|
|
set chain-crl-absence ignore
|
|
end
|
|
set strict-ocsp-check disable
|
|
set ssl-min-proto-version default
|
|
set cmp-save-extra-certs disable
|
|
set cmp-key-usage-checking enable
|
|
set cert-expire-warning 14
|
|
set certname-rsa1024 "Fortinet_SSL_RSA1024"
|
|
set certname-rsa2048 "Fortinet_SSL_RSA2048"
|
|
set certname-rsa4096 "Fortinet_SSL_RSA4096"
|
|
set certname-dsa1024 "Fortinet_SSL_DSA1024"
|
|
set certname-dsa2048 "Fortinet_SSL_DSA2048"
|
|
set certname-ecdsa256 "Fortinet_SSL_ECDSA256"
|
|
set certname-ecdsa384 "Fortinet_SSL_ECDSA384"
|
|
set certname-ecdsa521 "Fortinet_SSL_ECDSA521"
|
|
set certname-ed25519 "Fortinet_SSL_ED25519"
|
|
set certname-ed448 "Fortinet_SSL_ED448"
|
|
end
|
|
config webfilter ftgd-local-cat
|
|
edit "custom1"
|
|
set status enable
|
|
set id 140
|
|
next
|
|
edit "custom2"
|
|
set status enable
|
|
set id 141
|
|
next
|
|
end
|
|
config ips sensor
|
|
edit "g-default"
|
|
set comment "Prevent critical attacks."
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location all
|
|
set severity medium high critical
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Monitor IPS attacks."
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location all
|
|
set severity medium high critical
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
edit "g-wifi-default"
|
|
set comment "Default configuration for offloading WiFi traffic."
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location all
|
|
set severity medium high critical
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
edit "For-BD-IP"
|
|
set comment ''
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set rule 35662
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 200
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 2
|
|
set rule 12090
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 2000
|
|
set rate-duration 60
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 3
|
|
set rule 33106
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 200
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 4
|
|
set rule 109772808
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 0
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
edit "IPS-IC-CLOUD"
|
|
set comment ''
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 3
|
|
set rule 48411
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set rate-count 39
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 4
|
|
set rule 48379
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set rate-count 100
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 5
|
|
set rule 48364
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set rate-count 200
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 6
|
|
set rule 48340
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set rate-count 6
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 7
|
|
set rule 48319
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set rate-count 300
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 8
|
|
set rule 43632
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set rate-count 5
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 9
|
|
set rule 43461
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set rate-count 300
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 10
|
|
set rule 42862
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set rate-count 100
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 11
|
|
set rule 42856
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set rate-count 2000
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 12
|
|
set rule 40130
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set rate-count 5
|
|
set rate-duration 2
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 13
|
|
set rule 38273
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set rate-count 20
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 14
|
|
set rule 35350
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set rate-count 60
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 15
|
|
set rule 30582
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set rate-count 200
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 16
|
|
set rule 30023
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set rate-count 100
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 17
|
|
set rule 29575
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set rate-count 200
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 18
|
|
set rule 29520
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set rate-count 300
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 19
|
|
set rule 29512
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set rate-count 300
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 20
|
|
set rule 24072
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set rate-count 5
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 21
|
|
set rule 17991
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action pass
|
|
set rate-count 275
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 22
|
|
set rule 17554
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set rate-count 1000
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 23
|
|
set rule 29519
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 1000
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 24
|
|
set rule 46177
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 30
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 25
|
|
set rule 20940
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 60
|
|
set rate-duration 60
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 26
|
|
set rule 29856
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set rate-count 200
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 5m
|
|
set quarantine-log enable
|
|
next
|
|
edit 27
|
|
set rule 35662
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 200
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 10m
|
|
set quarantine-log enable
|
|
next
|
|
edit 28
|
|
set rule 12090
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 2000
|
|
set rate-duration 60
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 10m
|
|
set quarantine-log enable
|
|
next
|
|
edit 29
|
|
set rule 47088
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 500
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 30
|
|
set rule 43171
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 100
|
|
set rate-duration 5
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 31
|
|
set rule 20945
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 200
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 32
|
|
set rule 42016
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 35
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 33
|
|
set rule 42802
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 10
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 34
|
|
set rule 20954
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 60
|
|
set rate-duration 60
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 35
|
|
set rule 45650
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 50
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 36
|
|
set rule 42617
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 500
|
|
set rate-duration 5
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 37
|
|
set rule 41842
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 100
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 38
|
|
set rule 48326
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 100
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 39
|
|
set rule 33106
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 200
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 10m
|
|
set quarantine-log enable
|
|
next
|
|
edit 40
|
|
set rule 39292
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 15
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 41
|
|
set rule 47583
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 200
|
|
set rate-duration 5
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 42
|
|
set rule 37047
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 100
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 44
|
|
set rule 46575
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 1000
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 45
|
|
set rule 20946
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 60
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 46
|
|
set rule 38623
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 10
|
|
set rate-duration 2
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 47
|
|
set rule 46269
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 20
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 48
|
|
set rule 22909
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 200
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine attacker
|
|
set quarantine-expiry 10m
|
|
set quarantine-log enable
|
|
next
|
|
edit 49
|
|
set rule 47803
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 128
|
|
set rate-duration 5
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 50
|
|
set rule 24900
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 1000
|
|
set rate-duration 5
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 51
|
|
set rule 45359
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 100
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 52
|
|
set rule 43960
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 30
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 53
|
|
set rule 47781
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 50
|
|
set rate-duration 2
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 54
|
|
set rule 44633
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 10
|
|
set rate-duration 50
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 55
|
|
set rule 109772808
|
|
set status enable
|
|
set log enable
|
|
set log-packet enable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 0
|
|
set quarantine attacker
|
|
set quarantine-expiry 10m
|
|
set quarantine-log enable
|
|
next
|
|
edit 56
|
|
set rule 5247
|
|
set status enable
|
|
set log enable
|
|
set log-packet enable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 0
|
|
set quarantine none
|
|
next
|
|
edit 1
|
|
set location all
|
|
set severity high critical
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status enable
|
|
set log enable
|
|
set log-packet enable
|
|
set log-attack-context disable
|
|
set action block
|
|
set quarantine none
|
|
next
|
|
edit 57
|
|
set rule 33730
|
|
set status enable
|
|
set log enable
|
|
set log-packet enable
|
|
set log-attack-context disable
|
|
set action pass
|
|
set rate-count 0
|
|
set quarantine none
|
|
next
|
|
edit 43
|
|
set location all
|
|
set severity low medium
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
edit "sniffer-profile"
|
|
set comment "Monitor IPS attacks."
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location all
|
|
set severity high critical
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config sctp-filter profile
|
|
end
|
|
config firewall shaper traffic-shaper
|
|
edit "high-priority"
|
|
set guaranteed-bandwidth 0
|
|
set maximum-bandwidth 1048576
|
|
set bandwidth-unit kbps
|
|
set priority high
|
|
set per-policy enable
|
|
set diffserv disable
|
|
set overhead 0
|
|
next
|
|
edit "medium-priority"
|
|
set guaranteed-bandwidth 0
|
|
set maximum-bandwidth 1048576
|
|
set bandwidth-unit kbps
|
|
set priority medium
|
|
set per-policy enable
|
|
set diffserv disable
|
|
set overhead 0
|
|
next
|
|
edit "low-priority"
|
|
set guaranteed-bandwidth 0
|
|
set maximum-bandwidth 1048576
|
|
set bandwidth-unit kbps
|
|
set priority low
|
|
set per-policy enable
|
|
set diffserv disable
|
|
set overhead 0
|
|
next
|
|
edit "guarantee-100kbps"
|
|
set guaranteed-bandwidth 100
|
|
set maximum-bandwidth 1048576
|
|
set bandwidth-unit kbps
|
|
set priority high
|
|
set per-policy enable
|
|
set diffserv disable
|
|
set overhead 0
|
|
next
|
|
edit "shared-1M-pipe"
|
|
set guaranteed-bandwidth 0
|
|
set maximum-bandwidth 1024
|
|
set bandwidth-unit kbps
|
|
set priority high
|
|
set per-policy disable
|
|
set diffserv disable
|
|
set overhead 0
|
|
next
|
|
edit "10-mbps"
|
|
set guaranteed-bandwidth 10000
|
|
set maximum-bandwidth 11000
|
|
set bandwidth-unit kbps
|
|
set priority medium
|
|
set per-policy disable
|
|
set diffserv disable
|
|
set overhead 0
|
|
next
|
|
end
|
|
config firewall shaper per-ip-shaper
|
|
end
|
|
config firewall proxy-address
|
|
edit "IPv4-address"
|
|
set uuid 49c4a494-d1e6-51ef-e5e9-97ed3430f3ff
|
|
set type host-regex
|
|
set host-regex "^([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}$"
|
|
set referrer disable
|
|
set case-sensitivity disable
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "IPv6-address"
|
|
set uuid 49c4a69c-d1e6-51ef-5d4e-87e67067759f
|
|
set type host-regex
|
|
set host-regex "^\\[(([0-9a-f]{0,4}:){1,7}[0-9a-f]{1,4})\\]$"
|
|
set referrer disable
|
|
set case-sensitivity disable
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
end
|
|
config firewall proxy-addrgrp
|
|
end
|
|
config web-proxy profile
|
|
end
|
|
config web-proxy global
|
|
set ssl-cert "Fortinet_Factory"
|
|
set ssl-ca-cert "Fortinet_CA_SSL"
|
|
set fast-policy-match enable
|
|
set ldap-user-cache disable
|
|
set proxy-fqdn "default.fqdn"
|
|
set max-request-length 8
|
|
set max-message-length 32
|
|
set strict-web-check disable
|
|
set forward-proxy-auth disable
|
|
set forward-server-affinity-timeout 30
|
|
set max-waf-body-cache-length 1
|
|
set webproxy-profile ''
|
|
set learn-client-ip disable
|
|
set policy-category-deep-inspect enable
|
|
set log-policy-pending disable
|
|
end
|
|
config web-proxy explicit
|
|
set status disable
|
|
set http-connection-mode static
|
|
set ipv6-status disable
|
|
set strict-guest disable
|
|
set https-replacement-message enable
|
|
set ssl-algorithm low
|
|
end
|
|
config web-proxy forward-server
|
|
end
|
|
config web-proxy forward-server-group
|
|
end
|
|
config web-proxy debug-url
|
|
end
|
|
config web-proxy wisp
|
|
end
|
|
config wanopt webcache
|
|
set max-object-size 512000
|
|
set neg-resp-time 0
|
|
set fresh-factor 100
|
|
set max-ttl 7200
|
|
set min-ttl 5
|
|
set default-ttl 1440
|
|
set ignore-ims disable
|
|
set ignore-conditional disable
|
|
set ignore-pnc disable
|
|
set ignore-ie-reload enable
|
|
set cache-expired disable
|
|
set cache-cookie disable
|
|
set reval-pnc disable
|
|
set always-revalidate disable
|
|
set cache-by-default disable
|
|
set host-validate disable
|
|
set external disable
|
|
end
|
|
config ftp-proxy explicit
|
|
set status disable
|
|
set ssl disable
|
|
end
|
|
config web-proxy url-match
|
|
end
|
|
config application custom
|
|
end
|
|
config application list
|
|
edit "g-default"
|
|
set comment "Monitor all applications."
|
|
set replacemsg-group ''
|
|
set extended-log disable
|
|
set other-application-action pass
|
|
set app-replacemsg enable
|
|
set other-application-log disable
|
|
set enforce-default-app-port disable
|
|
set force-inclusion-ssl-di-sigs disable
|
|
set unknown-application-action pass
|
|
set unknown-application-log disable
|
|
unset p2p-block-list
|
|
set deep-app-inspection enable
|
|
set options allow-dns
|
|
config entries
|
|
edit 1
|
|
set application 50413
|
|
set action block
|
|
set log enable
|
|
set log-packet disable
|
|
set rate-count 0
|
|
set session-ttl 0
|
|
set quarantine none
|
|
next
|
|
edit 2
|
|
set protocols all
|
|
set vendor all
|
|
set technology all
|
|
set behavior all
|
|
set popularity 1 2 3 4 5
|
|
set action pass
|
|
set log enable
|
|
set log-packet disable
|
|
set session-ttl 0
|
|
set shaper ''
|
|
set shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
set quarantine none
|
|
next
|
|
end
|
|
set control-default-network-services disable
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Monitor all applications."
|
|
set replacemsg-group ''
|
|
set extended-log disable
|
|
set other-application-action pass
|
|
set app-replacemsg enable
|
|
set other-application-log disable
|
|
set enforce-default-app-port disable
|
|
set force-inclusion-ssl-di-sigs disable
|
|
set unknown-application-action pass
|
|
set unknown-application-log disable
|
|
unset p2p-block-list
|
|
set deep-app-inspection enable
|
|
unset options
|
|
config entries
|
|
edit 1
|
|
set protocols all
|
|
set vendor all
|
|
set technology all
|
|
set behavior all
|
|
set popularity 1 2 3 4 5
|
|
set action pass
|
|
set log enable
|
|
set log-packet disable
|
|
set session-ttl 0
|
|
set shaper ''
|
|
set shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
set quarantine none
|
|
next
|
|
end
|
|
set control-default-network-services disable
|
|
next
|
|
edit "g-wifi-default"
|
|
set comment "Default configuration for offloading WiFi traffic."
|
|
set replacemsg-group ''
|
|
set extended-log disable
|
|
set other-application-action pass
|
|
set app-replacemsg enable
|
|
set other-application-log disable
|
|
set enforce-default-app-port disable
|
|
set force-inclusion-ssl-di-sigs disable
|
|
set unknown-application-action pass
|
|
set unknown-application-log disable
|
|
unset p2p-block-list
|
|
set deep-app-inspection disable
|
|
set options allow-dns
|
|
config entries
|
|
edit 1
|
|
set protocols all
|
|
set vendor all
|
|
set technology all
|
|
set behavior all
|
|
set popularity 1 2 3 4 5
|
|
set action pass
|
|
set log disable
|
|
set log-packet disable
|
|
set session-ttl 0
|
|
set shaper ''
|
|
set shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
set quarantine none
|
|
next
|
|
end
|
|
set control-default-network-services disable
|
|
next
|
|
edit "AC-CLOUD"
|
|
set comment ''
|
|
set replacemsg-group ''
|
|
set extended-log disable
|
|
set other-application-action pass
|
|
set app-replacemsg enable
|
|
set other-application-log enable
|
|
set enforce-default-app-port disable
|
|
set force-inclusion-ssl-di-sigs disable
|
|
set unknown-application-action pass
|
|
set unknown-application-log enable
|
|
unset p2p-block-list
|
|
set deep-app-inspection enable
|
|
set options allow-dns
|
|
set control-default-network-services disable
|
|
next
|
|
edit "Restricted"
|
|
set comment ''
|
|
set replacemsg-group ''
|
|
set extended-log disable
|
|
set other-application-action pass
|
|
set app-replacemsg enable
|
|
set other-application-log enable
|
|
set enforce-default-app-port disable
|
|
set force-inclusion-ssl-di-sigs disable
|
|
set unknown-application-action pass
|
|
set unknown-application-log disable
|
|
unset p2p-block-list
|
|
set deep-app-inspection enable
|
|
set options allow-dns
|
|
config entries
|
|
edit 1
|
|
set application 6 30074 30147 30175 30233 31554 38683
|
|
set action pass
|
|
set log enable
|
|
set log-packet disable
|
|
set rate-count 0
|
|
set session-ttl 0
|
|
set shaper ''
|
|
set shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
set quarantine none
|
|
next
|
|
edit 2
|
|
set application 18155 28844 30184 35444 38500
|
|
set action block
|
|
set log enable
|
|
set log-packet disable
|
|
set rate-count 0
|
|
set session-ttl 0
|
|
set quarantine none
|
|
next
|
|
edit 3
|
|
set category 2 3 5 6 7 8 12 15 17 21 22 23 25 26 28 29 30 31
|
|
set protocols all
|
|
set vendor all
|
|
set technology all
|
|
set behavior all
|
|
set popularity 1 2 3 4 5
|
|
set action pass
|
|
set log disable
|
|
set log-packet disable
|
|
set session-ttl 0
|
|
set shaper ''
|
|
set shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
set quarantine none
|
|
next
|
|
end
|
|
set control-default-network-services disable
|
|
next
|
|
end
|
|
config application group
|
|
end
|
|
config dlp data-type
|
|
edit "g-credit-card"
|
|
set pattern "\\b([2-6]{1}\\d{3})[- ]?(\\d{4})[- ]?(\\d{2})[- ]?(\\d{2})[- ]?(\\d{2,4})\\b"
|
|
set verify "built-in"
|
|
set look-back 20
|
|
set look-ahead 1
|
|
set transform "\\b\\1[- ]?\\2[- ]?\\3[- ]?\\4[- ]?\\5\\b"
|
|
set verify-transformed-pattern disable
|
|
set comment ''
|
|
next
|
|
edit "g-hex"
|
|
set pattern "built-in"
|
|
set verify ''
|
|
set transform ''
|
|
set comment ''
|
|
next
|
|
edit "g-keyword"
|
|
set pattern "built-in"
|
|
set verify ''
|
|
set transform ''
|
|
set comment ''
|
|
next
|
|
edit "g-mip-label"
|
|
set pattern "^[[:xdigit:]]{8}-[[:xdigit:]]{4}-[[:xdigit:]]{4}-[[:xdigit:]]{4}-[[:xdigit:]]{12}$"
|
|
set verify ''
|
|
set transform "built-in"
|
|
set comment ''
|
|
next
|
|
edit "g-regex"
|
|
set pattern "built-in"
|
|
set verify ''
|
|
set transform ''
|
|
set comment ''
|
|
next
|
|
edit "g-ssn-us"
|
|
set pattern "\\b(\\d{3})-(\\d{2})-(\\d{4})\\b"
|
|
set verify "(?<!-)\\b(?!666|000|9\\d{2})\\d{3}-(?!00)\\d{2}-(?!0{4})\\d{4}\\b(?!-)"
|
|
set look-back 12
|
|
set look-ahead 1
|
|
set transform "\\b\\1-\\2-\\3\\b"
|
|
set verify-transformed-pattern disable
|
|
set comment ''
|
|
next
|
|
end
|
|
config dlp dictionary
|
|
end
|
|
config dlp sensor
|
|
end
|
|
config dlp filepattern
|
|
edit 1
|
|
set name "builtin-patterns"
|
|
set comment ''
|
|
config entries
|
|
edit "*.bat"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.com"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.dll"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.doc"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.exe"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.gz"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.hta"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.ppt"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.rar"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.scr"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.tar"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.tgz"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.vb?"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.wps"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.xl?"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.zip"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.pif"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.cpl"
|
|
set filter-type pattern
|
|
next
|
|
end
|
|
next
|
|
edit 2
|
|
set name "all_executables"
|
|
set comment ''
|
|
config entries
|
|
edit "bat"
|
|
set filter-type type
|
|
set file-type bat
|
|
next
|
|
edit "exe"
|
|
set filter-type type
|
|
set file-type exe
|
|
next
|
|
edit "elf"
|
|
set filter-type type
|
|
set file-type elf
|
|
next
|
|
edit "hta"
|
|
set filter-type type
|
|
set file-type hta
|
|
next
|
|
end
|
|
next
|
|
edit 3
|
|
set name "av_AV-IC-CLOUD3"
|
|
set comment "Automatically generated by AntiVirus profile: AV-IC-CLOUD"
|
|
config entries
|
|
edit "gif"
|
|
set filter-type type
|
|
set file-type gif
|
|
next
|
|
edit "html"
|
|
set filter-type type
|
|
set file-type html
|
|
next
|
|
edit "class"
|
|
set filter-type type
|
|
set file-type class
|
|
next
|
|
edit "javascript"
|
|
set filter-type type
|
|
set file-type javascript
|
|
next
|
|
edit "jpeg"
|
|
set filter-type type
|
|
set file-type jpeg
|
|
next
|
|
edit "pdf"
|
|
set filter-type type
|
|
set file-type pdf
|
|
next
|
|
edit "msi"
|
|
set filter-type type
|
|
set file-type msi
|
|
next
|
|
edit "async"
|
|
set filter-type pattern
|
|
next
|
|
end
|
|
next
|
|
edit 4
|
|
set name "av_Test-Profile4"
|
|
set comment "Automatically generated by AntiVirus profile: Test-Profile"
|
|
config entries
|
|
edit "gif"
|
|
set filter-type type
|
|
set file-type gif
|
|
next
|
|
edit "html"
|
|
set filter-type type
|
|
set file-type html
|
|
next
|
|
edit "class"
|
|
set filter-type type
|
|
set file-type class
|
|
next
|
|
edit "javascript"
|
|
set filter-type type
|
|
set file-type javascript
|
|
next
|
|
edit "jpeg"
|
|
set filter-type type
|
|
set file-type jpeg
|
|
next
|
|
edit "pdf"
|
|
set filter-type type
|
|
set file-type pdf
|
|
next
|
|
edit "msi"
|
|
set filter-type type
|
|
set file-type msi
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config dlp sensitivity
|
|
edit "Private"
|
|
next
|
|
edit "Critical"
|
|
next
|
|
edit "Warning"
|
|
next
|
|
end
|
|
config dlp fp-doc-source
|
|
end
|
|
config dlp profile
|
|
edit "g-default"
|
|
set comment "Default profile."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set dlp-log enable
|
|
set extended-log disable
|
|
set nac-quar-log disable
|
|
unset full-archive-proto
|
|
unset summary-proto
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Log a summary of email and web traffic."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set dlp-log enable
|
|
set extended-log disable
|
|
set nac-quar-log disable
|
|
unset full-archive-proto
|
|
set summary-proto smtp pop3 imap http-get http-post
|
|
next
|
|
end
|
|
config webfilter content
|
|
end
|
|
config webfilter content-header
|
|
end
|
|
config webfilter urlfilter
|
|
end
|
|
config videofilter youtube-key
|
|
end
|
|
config videofilter youtube-channel-filter
|
|
end
|
|
config videofilter profile
|
|
end
|
|
config webfilter ips-urlfilter-setting
|
|
set device ''
|
|
set distance 1
|
|
set gateway 0.0.0.0
|
|
set geo-filter ''
|
|
end
|
|
config webfilter ips-urlfilter-setting6
|
|
set device ''
|
|
set distance 1
|
|
set gateway6 ::
|
|
set geo-filter ''
|
|
end
|
|
config emailfilter bword
|
|
end
|
|
config emailfilter block-allow-list
|
|
end
|
|
config emailfilter mheader
|
|
end
|
|
config emailfilter dnsbl
|
|
end
|
|
config emailfilter iptrust
|
|
end
|
|
config log threat-weight
|
|
set status enable
|
|
config level
|
|
set low 5
|
|
set medium 10
|
|
set high 30
|
|
set critical 50
|
|
end
|
|
set blocked-connection high
|
|
set failed-connection low
|
|
set url-block-detected high
|
|
set botnet-connection-detected critical
|
|
config malware
|
|
set virus-infected critical
|
|
set fortindr critical
|
|
set fortisandbox critical
|
|
set file-blocked low
|
|
set command-blocked disable
|
|
set oversized disable
|
|
set virus-scan-error high
|
|
set switch-proto disable
|
|
set mimefragmented disable
|
|
set virus-file-type-executable medium
|
|
set virus-outbreak-prevention critical
|
|
set content-disarm medium
|
|
set malware-list medium
|
|
set ems-threat-feed medium
|
|
set fsa-malicious critical
|
|
set fsa-high-risk high
|
|
set fsa-medium-risk medium
|
|
end
|
|
config ips
|
|
set info-severity medium
|
|
set low-severity medium
|
|
set medium-severity medium
|
|
set high-severity high
|
|
set critical-severity critical
|
|
end
|
|
config web
|
|
edit 1
|
|
set category 26
|
|
set level high
|
|
next
|
|
edit 2
|
|
set category 61
|
|
set level high
|
|
next
|
|
edit 3
|
|
set category 86
|
|
set level high
|
|
next
|
|
edit 4
|
|
set category 1
|
|
set level medium
|
|
next
|
|
edit 5
|
|
set category 3
|
|
set level medium
|
|
next
|
|
edit 6
|
|
set category 4
|
|
set level medium
|
|
next
|
|
edit 7
|
|
set category 5
|
|
set level medium
|
|
next
|
|
edit 8
|
|
set category 6
|
|
set level medium
|
|
next
|
|
edit 9
|
|
set category 12
|
|
set level medium
|
|
next
|
|
edit 10
|
|
set category 59
|
|
set level medium
|
|
next
|
|
edit 11
|
|
set category 62
|
|
set level medium
|
|
next
|
|
edit 12
|
|
set category 83
|
|
set level medium
|
|
next
|
|
edit 13
|
|
set category 72
|
|
set level low
|
|
next
|
|
edit 14
|
|
set category 14
|
|
set level low
|
|
next
|
|
edit 15
|
|
set category 96
|
|
set level medium
|
|
next
|
|
end
|
|
config application
|
|
edit 1
|
|
set category 2
|
|
set level low
|
|
next
|
|
edit 2
|
|
set category 6
|
|
set level medium
|
|
next
|
|
end
|
|
end
|
|
config icap server
|
|
end
|
|
config icap server-group
|
|
end
|
|
config icap profile
|
|
edit "default"
|
|
set replacemsg-group ''
|
|
set comment ''
|
|
set request disable
|
|
set response disable
|
|
unset file-transfer
|
|
set streaming-content-bypass disable
|
|
set 204-response disable
|
|
set preview disable
|
|
set methods delete get head options post put trace connect other
|
|
set icap-block-log disable
|
|
set chunk-encap disable
|
|
unset extension-feature
|
|
set timeout 30
|
|
next
|
|
end
|
|
config system network-visibility
|
|
set destination-visibility enable
|
|
set source-location enable
|
|
set destination-hostname-visibility enable
|
|
set hostname-ttl 86400
|
|
set hostname-limit 5000
|
|
set destination-location enable
|
|
end
|
|
config user certificate
|
|
end
|
|
config user radius
|
|
end
|
|
config user tacacs+
|
|
end
|
|
config user exchange
|
|
end
|
|
config user ldap
|
|
end
|
|
config user krb-keytab
|
|
end
|
|
config user domain-controller
|
|
end
|
|
config user pop3
|
|
end
|
|
config user saml
|
|
end
|
|
config user external-identity-provider
|
|
end
|
|
config user fsso
|
|
end
|
|
config user adgrp
|
|
end
|
|
config user fsso-polling
|
|
end
|
|
config user fortitoken
|
|
end
|
|
config user password-policy
|
|
end
|
|
config user local
|
|
edit "brilliant"
|
|
set status disable
|
|
set type password
|
|
set two-factor disable
|
|
set email-to ''
|
|
set sms-server fortiguard
|
|
set sms-phone ''
|
|
set passwd-policy ''
|
|
set passwd-time 2018-07-05 10:43:04
|
|
set authtimeout 0
|
|
set auth-concurrent-override disable
|
|
set ppk-secret ENC 4I/wK5GJFbCxrPSb3rd4z0P+W0V7NKDGkY7G4g3+plZU8Vz8nQA3RFvrrL8Nhz8ylFdG8mJtjodu6lVtTa+zk2cp13Db6YCz34hVOqLTYQ0Z8h8Rhq4P4UV/CG2iywy+W7267v8VSt7l779NiVAhAYkqFVDqjjA3nzTfErh5H5i8xI1vVB1pQfFosrGgkditdm3dQw==
|
|
set ppk-identity ''
|
|
set passwd ENC w+xuitiZBpqInD6Y44l9uUtCUf4LxpG647Nd0mIK5KUvoszq71QA0x9iyqc1byfEjfg8IxNn1ld04t/TDlOtwZRk1NKXm1Taw4JY3qnPsrnloUHROLtMUgsz42OMkB/uKmLqGT1jCbuw2hXHYn0FdBND4BYu/CCWVet5HJBFBoFKp81CaWSkV/5nACVDtcvDVNE8Hg==
|
|
next
|
|
end
|
|
config user setting
|
|
set auth-type http https ftp telnet
|
|
set auth-cert "Fortinet_Factory"
|
|
set auth-ca-cert ''
|
|
set auth-secure-http disable
|
|
set auth-http-basic disable
|
|
set auth-ssl-allow-renegotiation disable
|
|
set auth-src-mac enable
|
|
set auth-on-demand implicitly
|
|
set auth-timeout 5
|
|
set auth-timeout-type idle-timeout
|
|
set auth-portal-timeout 3
|
|
set radius-ses-timeout-act hard-timeout
|
|
set auth-blackout-time 0
|
|
set auth-invalid-max 5
|
|
set auth-lockout-threshold 3
|
|
set auth-lockout-duration 0
|
|
set per-policy-disclaimer disable
|
|
set auth-ssl-min-proto-version default
|
|
unset auth-ssl-max-proto-version
|
|
set auth-ssl-sigalgs all
|
|
end
|
|
config user peer
|
|
end
|
|
config user peergrp
|
|
end
|
|
config user quarantine
|
|
set quarantine disable
|
|
set traffic-policy ''
|
|
set firewall-groups ''
|
|
end
|
|
config user group
|
|
edit "SSO_Guest_Users"
|
|
set authtimeout 0
|
|
set http-digest-realm ''
|
|
next
|
|
edit "SSL_VPN"
|
|
set group-type firewall
|
|
set authtimeout 0
|
|
set auth-concurrent-override disable
|
|
set http-digest-realm ''
|
|
set member "brilliant"
|
|
next
|
|
end
|
|
config user security-exempt-list
|
|
end
|
|
config vpn ssl web realm
|
|
end
|
|
config vpn ssl web host-check-software
|
|
edit "FortiClient-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "1A0271D5-3D4F-46DB-0C2C-AB37BA90D9F7"
|
|
next
|
|
edit "FortiClient-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "528CB157-D384-4593-AAAA-E42DFF111CED"
|
|
next
|
|
edit "FortiClient-AV-Vista"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "385618A6-2256-708E-3FB9-7E98B93F91F9"
|
|
next
|
|
edit "FortiClient-FW-Vista"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "006D9983-6839-71D6-14E6-D7AD47ECD682"
|
|
next
|
|
edit "FortiClient-AV-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "71629DC5-BE6F-CCD3-C5A5-014980643264"
|
|
next
|
|
edit "AVG-Internet-Security-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "17DDD097-36FF-435F-9E1B-52D74245D6BF"
|
|
next
|
|
edit "AVG-Internet-Security-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "8DECF618-9569-4340-B34A-D78D28969B66"
|
|
next
|
|
edit "AVG-Internet-Security-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "0C939084-9E57-CBDB-EA61-0B0C7F62AF82"
|
|
next
|
|
edit "AVG-Internet-Security-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "34A811A1-D438-CA83-C13E-A23981B1E8F9"
|
|
next
|
|
edit "CA-Anti-Virus"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "17CFD1EA-56CF-40B5-A06B-BD3A27397C93"
|
|
next
|
|
edit "CA-Internet-Security-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "6B98D35F-BB76-41C0-876B-A50645ED099A"
|
|
next
|
|
edit "CA-Internet-Security-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "38102F93-1B6E-4922-90E1-A35D8DC6DAA3"
|
|
next
|
|
edit "CA-Internet-Security-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "3EED0195-0A4B-4EF3-CC4F-4F401BDC245F"
|
|
next
|
|
edit "CA-Internet-Security-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "06D680B0-4024-4FAB-E710-E675E50F6324"
|
|
next
|
|
edit "CA-Personal-Firewall"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "14CB4B80-8E52-45EA-905E-67C1267B4160"
|
|
next
|
|
edit "F-Secure-Internet-Security-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "E7512ED5-4245-4B4D-AF3A-382D3F313F15"
|
|
next
|
|
edit "F-Secure-Internet-Security-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "D4747503-0346-49EB-9262-997542F79BF4"
|
|
next
|
|
edit "F-Secure-Internet-Security-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "15414183-282E-D62C-CA37-EF24860A2F17"
|
|
next
|
|
edit "F-Secure-Internet-Security-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "2D7AC0A6-6241-D774-E168-461178D9686C"
|
|
next
|
|
edit "Kaspersky-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "2C4D4BC6-0793-4956-A9F9-E252435469C0"
|
|
next
|
|
edit "Kaspersky-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "2C4D4BC6-0793-4956-A9F9-E252435469C0"
|
|
next
|
|
edit "Kaspersky-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "AE1D740B-8F0F-D137-211D-873D44B3F4AE"
|
|
next
|
|
edit "Kaspersky-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "9626F52E-C560-D06F-0A42-2E08BA60B3D5"
|
|
next
|
|
edit "McAfee-Internet-Security-Suite-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "84B5EE75-6421-4CDE-A33A-DD43BA9FAD83"
|
|
next
|
|
edit "McAfee-Internet-Security-Suite-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "94894B63-8C7F-4050-BDA4-813CA00DA3E8"
|
|
next
|
|
edit "McAfee-Internet-Security-Suite-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "86355677-4064-3EA7-ABB3-1B136EB04637"
|
|
next
|
|
edit "McAfee-Internet-Security-Suite-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "BE0ED752-0A0B-3FFF-80EC-B2269063014C"
|
|
next
|
|
edit "McAfee-Virus-Scan-Enterprise"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "918A2B0B-2C60-4016-A4AB-E868DEABF7F0"
|
|
next
|
|
edit "Norton-360-2.0-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "A5F1BC7C-EA33-4247-961C-0217208396C4"
|
|
next
|
|
edit "Norton-360-2.0-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "371C0A40-5A0C-4AD2-A6E5-69C02037FBF3"
|
|
next
|
|
edit "Norton-360-3.0-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "E10A9785-9598-4754-B552-92431C1C35F8"
|
|
next
|
|
edit "Norton-360-3.0-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "7C21A4C9-F61F-4AC4-B722-A6E19C16F220"
|
|
next
|
|
edit "Norton-Internet-Security-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "E10A9785-9598-4754-B552-92431C1C35F8"
|
|
next
|
|
edit "Norton-Internet-Security-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "7C21A4C9-F61F-4AC4-B722-A6E19C16F220"
|
|
next
|
|
edit "Norton-Internet-Security-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855"
|
|
next
|
|
edit "Norton-Internet-Security-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "B0F2DB13-C654-2E74-30D4-99C9310F0F2E"
|
|
next
|
|
edit "Symantec-Endpoint-Protection-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "FB06448E-52B8-493A-90F3-E43226D3305C"
|
|
next
|
|
edit "Symantec-Endpoint-Protection-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "BE898FE3-CD0B-4014-85A9-03DB9923DDB6"
|
|
next
|
|
edit "Symantec-Endpoint-Protection-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855"
|
|
next
|
|
edit "Symantec-Endpoint-Protection-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "B0F2DB13-C654-2E74-30D4-99C9310F0F2E"
|
|
next
|
|
edit "Panda-Antivirus+Firewall-2008-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "EEE2D94A-D4C1-421A-AB2C-2CE8FE51747A"
|
|
next
|
|
edit "Panda-Antivirus+Firewall-2008-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "7B090DC0-8905-4BAF-8040-FD98A41C8FB8"
|
|
next
|
|
edit "Panda-Internet-Security-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "4570FB70-5C9E-47E9-B16C-A3A6A06C4BF0"
|
|
next
|
|
edit "Panda-Internet-Security-2006~2007-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "4570FB70-5C9E-47E9-B16C-A3A6A06C4BF0"
|
|
next
|
|
edit "Panda-Internet-Security-2008~2009-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "7B090DC0-8905-4BAF-8040-FD98A41C8FB8"
|
|
next
|
|
edit "Sophos-Anti-Virus"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "3F13C776-3CBE-4DE9-8BF6-09E5183CA2BD"
|
|
next
|
|
edit "Sophos-Enpoint-Secuirty-and-Control-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "0786E95E-326A-4524-9691-41EF88FB52EA"
|
|
next
|
|
edit "Sophos-Enpoint-Secuirty-and-Control-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "479CCF92-4960-B3E0-7373-BF453B467D2C"
|
|
next
|
|
edit "Sophos-Enpoint-Secuirty-and-Control-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "7FA74EB7-030F-B2B8-582C-1670C5953A57"
|
|
next
|
|
edit "Trend-Micro-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "7D2296BC-32CC-4519-917E-52E652474AF5"
|
|
next
|
|
edit "Trend-Micro-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "3E790E9E-6A5D-4303-A7F9-185EC20F3EB6"
|
|
next
|
|
edit "Trend-Micro-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "48929DFC-7A52-A34F-8351-C4DBEDBD9C50"
|
|
next
|
|
edit "Trend-Micro-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "70A91CD9-303D-A217-A80E-6DEE136EDB2B"
|
|
next
|
|
edit "ZoneAlarm-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "5D467B10-818C-4CAB-9FF7-6893B5B8F3CF"
|
|
next
|
|
edit "ZoneAlarm-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "829BDA32-94B3-44F4-8446-F8FCFF809F8B"
|
|
next
|
|
edit "ZoneAlarm-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "D61596DF-D219-341C-49B3-AD30538CBC5B"
|
|
next
|
|
edit "ZoneAlarm-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "EE2E17FA-9876-3544-62EC-0405AD5FFB20"
|
|
next
|
|
edit "ESET-Smart-Security-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "19259FAE-8396-A113-46DB-15B0E7DFA289"
|
|
next
|
|
edit "ESET-Smart-Security-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "211E1E8B-C9F9-A04B-6D84-BC85190CE5F2"
|
|
next
|
|
edit "FortiClient-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "385618A6-2256-708E-3FB9-7E98B93F91F9"
|
|
next
|
|
edit "FortiClient5-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "5EEDDB8C-C27A-6714-3657-DBD811D1F1B7"
|
|
next
|
|
end
|
|
config vpn ssl web portal
|
|
edit "full-access"
|
|
set tunnel-mode enable
|
|
set ipv6-tunnel-mode enable
|
|
set web-mode enable
|
|
set allow-user-access web ftp smb sftp telnet ssh vnc rdp ping
|
|
set limit-user-logins disable
|
|
set forticlient-download enable
|
|
set ip-mode range
|
|
set auto-connect disable
|
|
set keep-alive disable
|
|
set save-password disable
|
|
set ip-pools "SSLVPN_TUNNEL_ADDR1"
|
|
set split-tunneling enable
|
|
set split-tunneling-routing-negate disable
|
|
set dns-server1 0.0.0.0
|
|
set dns-server2 0.0.0.0
|
|
set dns-suffix ''
|
|
set wins-server1 0.0.0.0
|
|
set wins-server2 0.0.0.0
|
|
set dhcp-ra-giaddr 0.0.0.0
|
|
set ipv6-pools "SSLVPN_TUNNEL_IPv6_ADDR1"
|
|
set ipv6-split-tunneling enable
|
|
set ipv6-split-tunneling-routing-negate disable
|
|
set ipv6-dns-server1 ::
|
|
set ipv6-dns-server2 ::
|
|
set ipv6-wins-server1 ::
|
|
set ipv6-wins-server2 ::
|
|
set dhcp6-ra-linkaddr ::
|
|
set client-src-range disable
|
|
set display-bookmark enable
|
|
set user-bookmark enable
|
|
set user-group-bookmark enable
|
|
set display-connection-tools enable
|
|
set display-history enable
|
|
set display-status enable
|
|
set rewrite-ip-uri-ui disable
|
|
set heading "SSL-VPN Portal"
|
|
set redir-url ''
|
|
set theme neutrino
|
|
set smb-ntlmv1-auth disable
|
|
set smb-min-version smbv2
|
|
set smb-max-version smbv3
|
|
set use-sdwan disable
|
|
set clipboard enable
|
|
set default-window-width 1024
|
|
set default-window-height 768
|
|
set host-check none
|
|
set mac-addr-check disable
|
|
set os-check disable
|
|
set forticlient-download-method direct
|
|
set customize-forticlient-download-url disable
|
|
set hide-sso-credential enable
|
|
next
|
|
edit "web-access"
|
|
set tunnel-mode disable
|
|
set ipv6-tunnel-mode disable
|
|
set web-mode enable
|
|
set allow-user-access web ftp smb sftp telnet ssh vnc rdp ping
|
|
set limit-user-logins disable
|
|
set forticlient-download enable
|
|
set dns-suffix ''
|
|
set display-bookmark enable
|
|
set user-bookmark enable
|
|
set user-group-bookmark enable
|
|
set display-connection-tools enable
|
|
set display-history enable
|
|
set display-status enable
|
|
set rewrite-ip-uri-ui disable
|
|
set heading "SSL-VPN Portal"
|
|
set redir-url ''
|
|
set theme neutrino
|
|
set smb-ntlmv1-auth disable
|
|
set smb-min-version smbv2
|
|
set smb-max-version smbv3
|
|
set use-sdwan disable
|
|
set clipboard enable
|
|
set default-window-width 1024
|
|
set default-window-height 768
|
|
set forticlient-download-method direct
|
|
set customize-forticlient-download-url disable
|
|
set hide-sso-credential enable
|
|
next
|
|
edit "tunnel-access"
|
|
set tunnel-mode enable
|
|
set ipv6-tunnel-mode enable
|
|
set web-mode disable
|
|
set allow-user-access web ftp smb sftp telnet ssh vnc rdp ping
|
|
set limit-user-logins disable
|
|
set forticlient-download enable
|
|
set ip-mode range
|
|
set auto-connect disable
|
|
set keep-alive disable
|
|
set save-password disable
|
|
set ip-pools "SSLVPN_TUNNEL_ADDR1"
|
|
set split-tunneling enable
|
|
set split-tunneling-routing-negate disable
|
|
set dns-server1 0.0.0.0
|
|
set dns-server2 0.0.0.0
|
|
set dns-suffix ''
|
|
set wins-server1 0.0.0.0
|
|
set wins-server2 0.0.0.0
|
|
set dhcp-ra-giaddr 0.0.0.0
|
|
set ipv6-pools "SSLVPN_TUNNEL_IPv6_ADDR1"
|
|
set ipv6-split-tunneling enable
|
|
set ipv6-split-tunneling-routing-negate disable
|
|
set ipv6-dns-server1 ::
|
|
set ipv6-dns-server2 ::
|
|
set ipv6-wins-server1 ::
|
|
set ipv6-wins-server2 ::
|
|
set dhcp6-ra-linkaddr ::
|
|
set client-src-range disable
|
|
set host-check none
|
|
set mac-addr-check disable
|
|
set os-check disable
|
|
set forticlient-download-method direct
|
|
set customize-forticlient-download-url disable
|
|
next
|
|
end
|
|
config vpn ssl settings
|
|
set status enable
|
|
set reqclientcert disable
|
|
set ssl-max-proto-ver tls1-3
|
|
set ssl-min-proto-ver tls1-1
|
|
unset banned-cipher
|
|
set ciphersuite TLS-AES-128-GCM-SHA256 TLS-AES-256-GCM-SHA384 TLS-CHACHA20-POLY1305-SHA256
|
|
set ssl-insert-empty-fragment enable
|
|
set https-redirect disable
|
|
set x-content-type-options enable
|
|
set ssl-client-renegotiation disable
|
|
set force-two-factor-auth disable
|
|
set servercert "Fortinet_Factory"
|
|
set algorithm high
|
|
set idle-timeout 600
|
|
set auth-timeout 28800
|
|
set login-attempt-limit 2
|
|
set login-block-time 60
|
|
set login-timeout 30
|
|
set dtls-hello-timeout 10
|
|
set tunnel-ip-pools "SSLVPN_TUNNEL_ADDR1"
|
|
set dns-suffix ''
|
|
set dns-server1 0.0.0.0
|
|
set dns-server2 0.0.0.0
|
|
set wins-server1 0.0.0.0
|
|
set wins-server2 0.0.0.0
|
|
set ipv6-dns-server1 ::
|
|
set ipv6-dns-server2 ::
|
|
set ipv6-wins-server1 ::
|
|
set ipv6-wins-server2 ::
|
|
set url-obscuration disable
|
|
set http-compression disable
|
|
set http-only-cookie enable
|
|
set port 10443
|
|
set port-precedence enable
|
|
set auto-tunnel-static-route enable
|
|
set header-x-forwarded-for add
|
|
set source-interface "WAN-1.1826" "WAN-2.834"
|
|
set source-address "all"
|
|
set source-address-negate disable
|
|
set source-address6 "all"
|
|
set source-address6-negate disable
|
|
set default-portal "web-access"
|
|
config authentication-rule
|
|
edit 1
|
|
set users "brilliant"
|
|
set portal "full-access"
|
|
set realm ''
|
|
set client-cert disable
|
|
set cipher high
|
|
set auth any
|
|
next
|
|
end
|
|
set browser-language-detection enable
|
|
set dtls-tunnel enable
|
|
set check-referer disable
|
|
set http-request-header-timeout 20
|
|
set http-request-body-timeout 30
|
|
set auth-session-check-source-ip enable
|
|
set tunnel-connect-without-reauth disable
|
|
set hsts-include-subdomains disable
|
|
set transform-backward-slashes disable
|
|
set encode-2f-sequence disable
|
|
set encrypt-and-store-password disable
|
|
set client-sigalgs all
|
|
set dual-stack-mode disable
|
|
set tunnel-addr-assigned-method first-available
|
|
set saml-redirect-port 8020
|
|
set ztna-trusted-client disable
|
|
set server-hostname ''
|
|
set dtls-max-proto-ver dtls1-2
|
|
set dtls-min-proto-ver dtls1-0
|
|
end
|
|
config vpn ssl web user-group-bookmark
|
|
end
|
|
config vpn ssl web user-bookmark
|
|
edit "brilliant#"
|
|
set custom-lang ''
|
|
next
|
|
end
|
|
config vpn ssl client
|
|
end
|
|
config voip profile
|
|
edit "default"
|
|
set comment "Default VoIP profile."
|
|
config sip
|
|
set status enable
|
|
set rtp enable
|
|
set nat-port-range 5117-65533
|
|
set open-register-pinhole enable
|
|
set open-contact-pinhole enable
|
|
set strict-register enable
|
|
set register-rate 0
|
|
set invite-rate 0
|
|
set max-dialogs 0
|
|
set max-line-length 998
|
|
set block-long-lines enable
|
|
set block-unknown enable
|
|
set call-keepalive 0
|
|
set block-ack disable
|
|
set block-bye disable
|
|
set block-cancel disable
|
|
set block-info disable
|
|
set block-invite disable
|
|
set block-message disable
|
|
set block-notify disable
|
|
set block-options disable
|
|
set block-prack disable
|
|
set block-publish disable
|
|
set block-refer disable
|
|
set block-register disable
|
|
set block-subscribe disable
|
|
set block-update disable
|
|
set register-contact-trace disable
|
|
set open-via-pinhole disable
|
|
set open-record-route-pinhole enable
|
|
set rfc2543-branch disable
|
|
set log-violations disable
|
|
set log-call-summary enable
|
|
set nat-trace enable
|
|
set subscribe-rate 0
|
|
set message-rate 0
|
|
set notify-rate 0
|
|
set refer-rate 0
|
|
set update-rate 0
|
|
set options-rate 0
|
|
set ack-rate 0
|
|
set prack-rate 0
|
|
set info-rate 0
|
|
set publish-rate 0
|
|
set bye-rate 0
|
|
set cancel-rate 0
|
|
set preserve-override disable
|
|
set no-sdp-fixup disable
|
|
set contact-fixup enable
|
|
set max-idle-dialogs 0
|
|
set block-geo-red-options disable
|
|
set hosted-nat-traversal disable
|
|
set hnt-restrict-source-ip disable
|
|
set max-body-length 0
|
|
set unknown-header pass
|
|
set malformed-request-line pass
|
|
set malformed-header-via pass
|
|
set malformed-header-from pass
|
|
set malformed-header-to pass
|
|
set malformed-header-call-id pass
|
|
set malformed-header-cseq pass
|
|
set malformed-header-rack pass
|
|
set malformed-header-rseq pass
|
|
set malformed-header-contact pass
|
|
set malformed-header-record-route pass
|
|
set malformed-header-route pass
|
|
set malformed-header-expires pass
|
|
set malformed-header-content-type pass
|
|
set malformed-header-content-length pass
|
|
set malformed-header-max-forwards pass
|
|
set malformed-header-allow pass
|
|
set malformed-header-p-asserted-identity pass
|
|
set malformed-header-sdp-v pass
|
|
set malformed-header-sdp-o pass
|
|
set malformed-header-sdp-s pass
|
|
set malformed-header-sdp-i pass
|
|
set malformed-header-sdp-c pass
|
|
set malformed-header-sdp-b pass
|
|
set malformed-header-sdp-z pass
|
|
set malformed-header-sdp-k pass
|
|
set malformed-header-sdp-a pass
|
|
set malformed-header-sdp-t pass
|
|
set malformed-header-sdp-r pass
|
|
set malformed-header-sdp-m pass
|
|
set provisional-invite-expiry-time 210
|
|
set ips-rtp enable
|
|
set ssl-mode off
|
|
end
|
|
config sccp
|
|
set status enable
|
|
set block-mcast disable
|
|
set verify-header disable
|
|
set log-call-summary disable
|
|
set log-violations disable
|
|
set max-calls 0
|
|
end
|
|
next
|
|
edit "strict"
|
|
set feature-set voipd
|
|
set comment ''
|
|
config sip
|
|
set status enable
|
|
set rtp enable
|
|
set nat-port-range 5117-65533
|
|
set open-register-pinhole enable
|
|
set open-contact-pinhole enable
|
|
set strict-register enable
|
|
set register-rate 0
|
|
set invite-rate 0
|
|
set max-dialogs 0
|
|
set max-line-length 998
|
|
set block-long-lines enable
|
|
set block-unknown enable
|
|
set call-keepalive 0
|
|
set block-ack disable
|
|
set block-bye disable
|
|
set block-cancel disable
|
|
set block-info disable
|
|
set block-invite disable
|
|
set block-message disable
|
|
set block-notify disable
|
|
set block-options disable
|
|
set block-prack disable
|
|
set block-publish disable
|
|
set block-refer disable
|
|
set block-register disable
|
|
set block-subscribe disable
|
|
set block-update disable
|
|
set register-contact-trace disable
|
|
set open-via-pinhole disable
|
|
set open-record-route-pinhole enable
|
|
set rfc2543-branch disable
|
|
set log-violations disable
|
|
set log-call-summary enable
|
|
set nat-trace enable
|
|
set subscribe-rate 0
|
|
set message-rate 0
|
|
set notify-rate 0
|
|
set refer-rate 0
|
|
set update-rate 0
|
|
set options-rate 0
|
|
set ack-rate 0
|
|
set prack-rate 0
|
|
set info-rate 0
|
|
set publish-rate 0
|
|
set bye-rate 0
|
|
set cancel-rate 0
|
|
set preserve-override disable
|
|
set no-sdp-fixup disable
|
|
set contact-fixup enable
|
|
set max-idle-dialogs 0
|
|
set block-geo-red-options disable
|
|
set hosted-nat-traversal disable
|
|
set hnt-restrict-source-ip disable
|
|
set max-body-length 0
|
|
set unknown-header pass
|
|
set malformed-request-line discard
|
|
set malformed-header-via discard
|
|
set malformed-header-from discard
|
|
set malformed-header-to discard
|
|
set malformed-header-call-id discard
|
|
set malformed-header-cseq discard
|
|
set malformed-header-rack discard
|
|
set malformed-header-rseq discard
|
|
set malformed-header-contact discard
|
|
set malformed-header-record-route discard
|
|
set malformed-header-route discard
|
|
set malformed-header-expires discard
|
|
set malformed-header-content-type discard
|
|
set malformed-header-content-length discard
|
|
set malformed-header-max-forwards discard
|
|
set malformed-header-allow discard
|
|
set malformed-header-p-asserted-identity discard
|
|
set malformed-header-sdp-v discard
|
|
set malformed-header-sdp-o discard
|
|
set malformed-header-sdp-s discard
|
|
set malformed-header-sdp-i discard
|
|
set malformed-header-sdp-c discard
|
|
set malformed-header-sdp-b discard
|
|
set malformed-header-sdp-z discard
|
|
set malformed-header-sdp-k discard
|
|
set malformed-header-sdp-a discard
|
|
set malformed-header-sdp-t discard
|
|
set malformed-header-sdp-r discard
|
|
set malformed-header-sdp-m discard
|
|
set provisional-invite-expiry-time 210
|
|
set ips-rtp enable
|
|
set ssl-mode off
|
|
end
|
|
config sccp
|
|
set status enable
|
|
set block-mcast disable
|
|
set verify-header disable
|
|
set log-call-summary disable
|
|
set log-violations disable
|
|
set max-calls 0
|
|
end
|
|
next
|
|
end
|
|
config system sdwan
|
|
set status disable
|
|
set load-balance-mode source-ip-based
|
|
set speedtest-bypass-routing disable
|
|
set duplication-max-num 2
|
|
set neighbor-hold-down disable
|
|
set neighbor-hold-down-time 0
|
|
set neighbor-hold-boot-time 0
|
|
set fail-detect disable
|
|
config zone
|
|
edit "virtual-wan-link"
|
|
set service-sla-tie-break cfg-order
|
|
next
|
|
end
|
|
end
|
|
config vpn ipsec phase1
|
|
end
|
|
config vpn ipsec phase2
|
|
end
|
|
config vpn ipsec manualkey
|
|
end
|
|
config vpn ipsec concentrator
|
|
end
|
|
config vpn ipsec fec
|
|
end
|
|
config vpn ipsec phase1-interface
|
|
end
|
|
config vpn ipsec phase2-interface
|
|
end
|
|
config vpn ipsec manualkey-interface
|
|
end
|
|
config vpn pptp
|
|
set status disable
|
|
end
|
|
config vpn l2tp
|
|
set status disable
|
|
set lcp-max-echo-fails 3
|
|
set hello-interval 60
|
|
end
|
|
config vpn ipsec forticlient
|
|
end
|
|
config dnsfilter domain-filter
|
|
end
|
|
config dnsfilter profile
|
|
edit "default"
|
|
set comment "Default dns filtering."
|
|
config domain-filter
|
|
unset domain-filter-table
|
|
end
|
|
config ftgd-dns
|
|
unset options
|
|
config filters
|
|
edit 1
|
|
set category 2
|
|
set action monitor
|
|
next
|
|
edit 2
|
|
set category 7
|
|
set action monitor
|
|
next
|
|
edit 3
|
|
set category 8
|
|
set action monitor
|
|
next
|
|
edit 4
|
|
set category 9
|
|
set action monitor
|
|
next
|
|
edit 5
|
|
set category 11
|
|
set action monitor
|
|
next
|
|
edit 6
|
|
set category 12
|
|
set action monitor
|
|
next
|
|
edit 7
|
|
set category 13
|
|
set action monitor
|
|
next
|
|
edit 8
|
|
set category 14
|
|
set action monitor
|
|
next
|
|
edit 9
|
|
set category 15
|
|
set action monitor
|
|
next
|
|
edit 10
|
|
set category 16
|
|
set action monitor
|
|
next
|
|
edit 11
|
|
set category 0
|
|
set action monitor
|
|
next
|
|
edit 12
|
|
set category 57
|
|
set action monitor
|
|
next
|
|
edit 13
|
|
set category 63
|
|
set action monitor
|
|
next
|
|
edit 14
|
|
set category 64
|
|
set action monitor
|
|
next
|
|
edit 15
|
|
set category 65
|
|
set action monitor
|
|
next
|
|
edit 16
|
|
set category 66
|
|
set action monitor
|
|
next
|
|
edit 17
|
|
set category 67
|
|
set action monitor
|
|
next
|
|
edit 18
|
|
set category 26
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 61
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 86
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 88
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 90
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 91
|
|
set action block
|
|
set log enable
|
|
next
|
|
end
|
|
end
|
|
set log-all-domain disable
|
|
set sdns-ftgd-err-log enable
|
|
set sdns-domain-log enable
|
|
set block-action redirect
|
|
set block-botnet enable
|
|
set safe-search disable
|
|
set redirect-portal 0.0.0.0
|
|
set redirect-portal6 ::
|
|
next
|
|
end
|
|
config system gre-tunnel
|
|
end
|
|
config system ipsec-aggregate
|
|
end
|
|
config system ipip-tunnel
|
|
end
|
|
config system mobile-tunnel
|
|
end
|
|
config system pppoe-interface
|
|
end
|
|
config system vxlan
|
|
end
|
|
config system geneve
|
|
end
|
|
config system virtual-wire-pair
|
|
end
|
|
config system dns-database
|
|
end
|
|
config system dns-server
|
|
end
|
|
config log custom-field
|
|
end
|
|
config antivirus settings
|
|
set machine-learning-detection enable
|
|
set use-extreme-db disable
|
|
set grayware disable
|
|
set override-timeout 0
|
|
set cache-infected-result enable
|
|
end
|
|
config antivirus quarantine
|
|
set agelimit 0
|
|
set maxfilesize 0
|
|
set quarantine-quota 0
|
|
unset drop-infected
|
|
set store-infected imap smtp pop3 http ftp nntp imaps smtps pop3s https ftps mapi cifs ssh
|
|
unset drop-blocked
|
|
set store-blocked imap smtp pop3 http ftp nntp imaps smtps pop3s ftps mapi cifs ssh
|
|
unset drop-machine-learning
|
|
set store-machine-learning imap smtp pop3 http ftp nntp imaps smtps pop3s https ftps mapi cifs ssh
|
|
set lowspace ovrw-old
|
|
set destination disk
|
|
end
|
|
config antivirus exempt-list
|
|
end
|
|
config ssh-filter profile
|
|
end
|
|
config antivirus profile
|
|
edit "g-default"
|
|
set comment "Scan files and block viruses."
|
|
set replacemsg-group ''
|
|
set feature-set flow
|
|
set mobile-malware-db enable
|
|
config http
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config ftp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config imap
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config pop3
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config smtp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config nntp
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config cifs
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config nac-quar
|
|
set infected none
|
|
set log disable
|
|
end
|
|
set outbreak-prevention-archive-scan disable
|
|
set external-blocklist-enable-all enable
|
|
set ems-threat-feed disable
|
|
set av-virus-log enable
|
|
set av-block-log enable
|
|
set extended-log disable
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Scan files and monitor viruses."
|
|
set replacemsg-group ''
|
|
set feature-set flow
|
|
set mobile-malware-db enable
|
|
config http
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config ftp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config imap
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config pop3
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config smtp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config nntp
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config cifs
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config nac-quar
|
|
set infected none
|
|
set log disable
|
|
end
|
|
set outbreak-prevention-archive-scan disable
|
|
set external-blocklist-enable-all enable
|
|
set ems-threat-feed disable
|
|
set av-virus-log enable
|
|
set av-block-log enable
|
|
set extended-log disable
|
|
next
|
|
edit "g-wifi-default"
|
|
set comment "Default configuration for offloading WiFi traffic."
|
|
set replacemsg-group ''
|
|
set feature-set flow
|
|
set mobile-malware-db enable
|
|
config http
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config ftp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config imap
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config pop3
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config smtp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config nntp
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config cifs
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config nac-quar
|
|
set infected none
|
|
set log disable
|
|
end
|
|
set outbreak-prevention-archive-scan disable
|
|
set external-blocklist-enable-all enable
|
|
set ems-threat-feed disable
|
|
set av-virus-log enable
|
|
set av-block-log enable
|
|
set extended-log disable
|
|
next
|
|
edit "AV-IC-CLOUD"
|
|
set comment ''
|
|
set replacemsg-group ''
|
|
set feature-set proxy
|
|
set mobile-malware-db enable
|
|
config http
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set content-disarm disable
|
|
end
|
|
config ftp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config imap
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
set content-disarm disable
|
|
end
|
|
config pop3
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
set content-disarm disable
|
|
end
|
|
config smtp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
set content-disarm disable
|
|
end
|
|
config mapi
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config nntp
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config cifs
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config ssh
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config nac-quar
|
|
set infected none
|
|
set log disable
|
|
end
|
|
config content-disarm
|
|
set original-file-destination discard
|
|
set error-action log-only
|
|
set office-macro enable
|
|
set office-hylink enable
|
|
set office-linked enable
|
|
set office-embed enable
|
|
set office-dde enable
|
|
set office-action enable
|
|
set pdf-javacode enable
|
|
set pdf-embedfile enable
|
|
set pdf-hyperlink enable
|
|
set pdf-act-gotor enable
|
|
set pdf-act-launch enable
|
|
set pdf-act-sound enable
|
|
set pdf-act-movie enable
|
|
set pdf-act-java enable
|
|
set pdf-act-form enable
|
|
set cover-page enable
|
|
set detect-only disable
|
|
end
|
|
set outbreak-prevention-archive-scan disable
|
|
set external-blocklist-enable-all enable
|
|
set ems-threat-feed disable
|
|
set av-virus-log enable
|
|
set av-block-log enable
|
|
set extended-log disable
|
|
set scan-mode default
|
|
next
|
|
edit "Specify-AV-IC-Cloud"
|
|
set comment ''
|
|
set replacemsg-group ''
|
|
set feature-set proxy
|
|
set mobile-malware-db enable
|
|
config http
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set content-disarm disable
|
|
end
|
|
config ftp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config imap
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
set content-disarm disable
|
|
end
|
|
config pop3
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
set content-disarm disable
|
|
end
|
|
config smtp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
set content-disarm disable
|
|
end
|
|
config mapi
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config nntp
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config cifs
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config ssh
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config nac-quar
|
|
set infected none
|
|
set log disable
|
|
end
|
|
config content-disarm
|
|
set original-file-destination discard
|
|
set error-action log-only
|
|
set office-macro enable
|
|
set office-hylink enable
|
|
set office-linked enable
|
|
set office-embed enable
|
|
set office-dde enable
|
|
set office-action enable
|
|
set pdf-javacode enable
|
|
set pdf-embedfile enable
|
|
set pdf-hyperlink enable
|
|
set pdf-act-gotor enable
|
|
set pdf-act-launch enable
|
|
set pdf-act-sound enable
|
|
set pdf-act-movie enable
|
|
set pdf-act-java enable
|
|
set pdf-act-form enable
|
|
set cover-page enable
|
|
set detect-only disable
|
|
end
|
|
set outbreak-prevention-archive-scan disable
|
|
set external-blocklist-enable-all enable
|
|
set ems-threat-feed disable
|
|
set av-virus-log enable
|
|
set av-block-log enable
|
|
set extended-log disable
|
|
set scan-mode legacy
|
|
next
|
|
edit "default"
|
|
set comment "Scan files and block viruses."
|
|
set replacemsg-group ''
|
|
set feature-set proxy
|
|
set mobile-malware-db enable
|
|
config http
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set content-disarm disable
|
|
end
|
|
config ftp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config imap
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
set content-disarm disable
|
|
end
|
|
config pop3
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
set content-disarm disable
|
|
end
|
|
config smtp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
set content-disarm disable
|
|
end
|
|
config mapi
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config nntp
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config cifs
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config ssh
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config nac-quar
|
|
set infected none
|
|
set log disable
|
|
end
|
|
config content-disarm
|
|
set original-file-destination discard
|
|
set error-action log-only
|
|
set office-macro enable
|
|
set office-hylink enable
|
|
set office-linked enable
|
|
set office-embed enable
|
|
set office-dde enable
|
|
set office-action enable
|
|
set pdf-javacode enable
|
|
set pdf-embedfile enable
|
|
set pdf-hyperlink enable
|
|
set pdf-act-gotor enable
|
|
set pdf-act-launch enable
|
|
set pdf-act-sound enable
|
|
set pdf-act-movie enable
|
|
set pdf-act-java enable
|
|
set pdf-act-form enable
|
|
set cover-page enable
|
|
set detect-only disable
|
|
end
|
|
set outbreak-prevention-archive-scan disable
|
|
set external-blocklist-enable-all enable
|
|
set ems-threat-feed disable
|
|
set av-virus-log enable
|
|
set av-block-log enable
|
|
set extended-log disable
|
|
set scan-mode legacy
|
|
next
|
|
end
|
|
config file-filter profile
|
|
edit "g-default"
|
|
set comment "File type inspection."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set log enable
|
|
set extended-log disable
|
|
set scan-archive-contents enable
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "File type inspection."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set log enable
|
|
set extended-log disable
|
|
set scan-archive-contents enable
|
|
next
|
|
end
|
|
config webfilter profile
|
|
edit "g-default"
|
|
set comment "Default web filtering."
|
|
set feature-set proxy
|
|
set replacemsg-group ''
|
|
unset options
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
unset safe-search
|
|
set log-search disable
|
|
end
|
|
config ftgd-wf
|
|
unset options
|
|
set exempt-quota 17
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 0
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 2
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 7
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 8
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 9
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 11
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 12
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 13
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 14
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 15
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 16
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 26
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 57
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 61
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 63
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 64
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 65
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 66
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 67
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 86
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 88
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 90
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 91
|
|
set action block
|
|
set log enable
|
|
next
|
|
end
|
|
set max-quota-timeout 300
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
config antiphish
|
|
set status disable
|
|
set check-uri disable
|
|
set check-basic-auth disable
|
|
set check-username-only disable
|
|
set max-body-len 1024
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-activex-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-filter-applet-log enable
|
|
set web-filter-jscript-log enable
|
|
set web-filter-js-log enable
|
|
set web-filter-vbs-log enable
|
|
set web-filter-unknown-log enable
|
|
set web-filter-referer-log enable
|
|
set web-filter-cookie-removal-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set web-ftgd-quota-usage enable
|
|
set extended-log disable
|
|
set web-antiphishing-log enable
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Monitor web traffic."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
unset options
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
end
|
|
config ftgd-wf
|
|
set options ftgd-disable
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 0
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 1
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 2
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 3
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 4
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 5
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 6
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 7
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 8
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 9
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 11
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 12
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 13
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 14
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 15
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 16
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 17
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 18
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 19
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 20
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 23
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 24
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 25
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 24
|
|
set category 26
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 25
|
|
set category 28
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 26
|
|
set category 29
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 27
|
|
set category 30
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 28
|
|
set category 31
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 29
|
|
set category 33
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 30
|
|
set category 34
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 31
|
|
set category 35
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 32
|
|
set category 36
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 33
|
|
set category 37
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 34
|
|
set category 38
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 35
|
|
set category 39
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 36
|
|
set category 40
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 37
|
|
set category 41
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 38
|
|
set category 42
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 39
|
|
set category 43
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 40
|
|
set category 44
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 41
|
|
set category 46
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 42
|
|
set category 47
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 43
|
|
set category 48
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 44
|
|
set category 49
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 45
|
|
set category 50
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 46
|
|
set category 51
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 47
|
|
set category 52
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 48
|
|
set category 53
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 49
|
|
set category 54
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 50
|
|
set category 55
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 51
|
|
set category 56
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 52
|
|
set category 57
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 53
|
|
set category 58
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 54
|
|
set category 59
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 55
|
|
set category 61
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 56
|
|
set category 62
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 57
|
|
set category 63
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 58
|
|
set category 64
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 59
|
|
set category 65
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 60
|
|
set category 66
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 61
|
|
set category 67
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 62
|
|
set category 68
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 63
|
|
set category 69
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 64
|
|
set category 70
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 65
|
|
set category 71
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 66
|
|
set category 72
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 67
|
|
set category 75
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 68
|
|
set category 76
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 69
|
|
set category 77
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 70
|
|
set category 78
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 71
|
|
set category 79
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 72
|
|
set category 80
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 73
|
|
set category 81
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 74
|
|
set category 82
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 75
|
|
set category 83
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 76
|
|
set category 84
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 77
|
|
set category 85
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 78
|
|
set category 86
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 79
|
|
set category 87
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 80
|
|
set category 88
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 81
|
|
set category 89
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 82
|
|
set category 90
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 83
|
|
set category 91
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 84
|
|
set category 92
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 85
|
|
set category 93
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 86
|
|
set category 94
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 87
|
|
set category 95
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
end
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set extended-log disable
|
|
next
|
|
edit "g-wifi-default"
|
|
set comment "Default configuration for offloading WiFi traffic."
|
|
set feature-set proxy
|
|
set replacemsg-group ''
|
|
set options block-invalid-url
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
unset safe-search
|
|
set log-search disable
|
|
end
|
|
config ftgd-wf
|
|
unset options
|
|
set exempt-quota 17
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 0
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 2
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 7
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 8
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 9
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 11
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 12
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 13
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 14
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 15
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 16
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 26
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 57
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 61
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 63
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 64
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 65
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 66
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 67
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 86
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 88
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 90
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 91
|
|
set action block
|
|
set log enable
|
|
next
|
|
end
|
|
set max-quota-timeout 300
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
config antiphish
|
|
set status disable
|
|
set check-uri disable
|
|
set check-basic-auth disable
|
|
set check-username-only disable
|
|
set max-body-len 1024
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-activex-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-filter-applet-log enable
|
|
set web-filter-jscript-log enable
|
|
set web-filter-js-log enable
|
|
set web-filter-vbs-log enable
|
|
set web-filter-unknown-log enable
|
|
set web-filter-referer-log enable
|
|
set web-filter-cookie-removal-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set web-ftgd-quota-usage enable
|
|
set extended-log disable
|
|
set web-antiphishing-log enable
|
|
next
|
|
edit "default"
|
|
set comment "Default web filtering."
|
|
set feature-set proxy
|
|
set replacemsg-group ''
|
|
unset options
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
unset safe-search
|
|
set log-search disable
|
|
end
|
|
config ftgd-wf
|
|
unset options
|
|
set exempt-quota 17
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 2
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 7
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 8
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 9
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 11
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 12
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 13
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 14
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 15
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 16
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 0
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 57
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 63
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 64
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 65
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 66
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 67
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 26
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 61
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 86
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 88
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 90
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 91
|
|
set action block
|
|
set log enable
|
|
next
|
|
end
|
|
set max-quota-timeout 300
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
config antiphish
|
|
set status disable
|
|
set check-uri disable
|
|
set check-basic-auth disable
|
|
set check-username-only disable
|
|
set max-body-len 1024
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-activex-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-filter-applet-log enable
|
|
set web-filter-jscript-log enable
|
|
set web-filter-js-log enable
|
|
set web-filter-vbs-log enable
|
|
set web-filter-unknown-log enable
|
|
set web-filter-referer-log enable
|
|
set web-filter-cookie-removal-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set web-ftgd-quota-usage enable
|
|
set extended-log disable
|
|
set web-antiphishing-log enable
|
|
next
|
|
edit "restricted-web-filter"
|
|
set comment ''
|
|
set feature-set proxy
|
|
set replacemsg-group ''
|
|
unset options
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
unset safe-search
|
|
set log-search disable
|
|
end
|
|
config ftgd-wf
|
|
unset options
|
|
set exempt-quota 17
|
|
unset ovrd
|
|
config filters
|
|
edit 6
|
|
set category 12
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 2
|
|
set category 7
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 4
|
|
set category 9
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 14
|
|
set category 64
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 1
|
|
set category 2
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 9
|
|
set category 15
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 5
|
|
set category 11
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 16
|
|
set category 66
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 12
|
|
set category 57
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 7
|
|
set category 13
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 3
|
|
set category 8
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 8
|
|
set category 14
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 13
|
|
set category 63
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 17
|
|
set category 67
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 15
|
|
set category 65
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 10
|
|
set category 16
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 21
|
|
set category 88
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 26
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 90
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 91
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 61
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 86
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 24
|
|
set category 0
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
end
|
|
set max-quota-timeout 300
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
config antiphish
|
|
set status disable
|
|
set check-uri disable
|
|
set check-basic-auth disable
|
|
set check-username-only disable
|
|
set max-body-len 1024
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-activex-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-filter-applet-log enable
|
|
set web-filter-jscript-log enable
|
|
set web-filter-js-log enable
|
|
set web-filter-vbs-log enable
|
|
set web-filter-unknown-log enable
|
|
set web-filter-referer-log enable
|
|
set web-filter-cookie-removal-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set web-ftgd-quota-usage enable
|
|
set extended-log disable
|
|
set web-antiphishing-log enable
|
|
next
|
|
edit "sniffer-profile"
|
|
set comment "Monitor web traffic."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
unset options
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
end
|
|
config ftgd-wf
|
|
set options ftgd-disable
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 0
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 1
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 2
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 3
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 4
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 5
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 6
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 7
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 8
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 9
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 11
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 12
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 13
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 14
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 15
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 16
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 17
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 18
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 19
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 20
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 23
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 24
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 25
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 24
|
|
set category 26
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 25
|
|
set category 28
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 26
|
|
set category 29
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 27
|
|
set category 30
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 28
|
|
set category 31
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 29
|
|
set category 33
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 30
|
|
set category 34
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 31
|
|
set category 35
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 32
|
|
set category 36
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 33
|
|
set category 37
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 34
|
|
set category 38
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 35
|
|
set category 39
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 36
|
|
set category 40
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 37
|
|
set category 41
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 38
|
|
set category 42
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 39
|
|
set category 43
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 40
|
|
set category 44
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 41
|
|
set category 46
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 42
|
|
set category 47
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 43
|
|
set category 48
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 44
|
|
set category 49
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 45
|
|
set category 50
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 46
|
|
set category 51
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 47
|
|
set category 52
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 48
|
|
set category 53
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 49
|
|
set category 54
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 50
|
|
set category 55
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 51
|
|
set category 56
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 52
|
|
set category 57
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 53
|
|
set category 58
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 54
|
|
set category 59
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 55
|
|
set category 61
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 56
|
|
set category 62
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 57
|
|
set category 63
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 58
|
|
set category 64
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 59
|
|
set category 65
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 60
|
|
set category 66
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 61
|
|
set category 67
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 62
|
|
set category 68
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 63
|
|
set category 69
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 64
|
|
set category 70
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 65
|
|
set category 71
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 66
|
|
set category 72
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 67
|
|
set category 75
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 68
|
|
set category 76
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 69
|
|
set category 77
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 70
|
|
set category 78
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 71
|
|
set category 79
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 72
|
|
set category 80
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 73
|
|
set category 81
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 74
|
|
set category 82
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 75
|
|
set category 83
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 76
|
|
set category 84
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 77
|
|
set category 85
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 78
|
|
set category 86
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 79
|
|
set category 87
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 80
|
|
set category 88
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 81
|
|
set category 89
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 82
|
|
set category 90
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 83
|
|
set category 91
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 84
|
|
set category 92
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 85
|
|
set category 93
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 86
|
|
set category 94
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 87
|
|
set category 95
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 88
|
|
set category 140
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 89
|
|
set category 141
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
end
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set extended-log disable
|
|
next
|
|
edit "standard_webfilter"
|
|
set comment ''
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
unset options
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
end
|
|
config ftgd-wf
|
|
unset options
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 1
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 3
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 4
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 5
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 6
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 12
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 59
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 62
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 83
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 96
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 98
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 99
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 2
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 14
|
|
set category 7
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 15
|
|
set category 8
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 16
|
|
set category 9
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 17
|
|
set category 11
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 13
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 19
|
|
set category 14
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 15
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 21
|
|
set category 16
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 22
|
|
set category 57
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 23
|
|
set category 63
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 24
|
|
set category 64
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 25
|
|
set category 65
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 26
|
|
set category 66
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 27
|
|
set category 67
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 28
|
|
set category 26
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 29
|
|
set category 61
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 30
|
|
set category 86
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 31
|
|
set category 88
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 32
|
|
set category 90
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 33
|
|
set category 91
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 34
|
|
set category 140
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 35
|
|
set category 141
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
end
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set extended-log disable
|
|
next
|
|
end
|
|
config webfilter override
|
|
end
|
|
config webfilter ftgd-local-rating
|
|
edit "Monero.Cryptocurrency.Miner"
|
|
set status enable
|
|
set comment ''
|
|
set rating 26
|
|
next
|
|
edit "email.novotel-bd.com"
|
|
set status enable
|
|
set comment ''
|
|
set rating 49
|
|
next
|
|
end
|
|
config webfilter search-engine
|
|
edit "g-baidu"
|
|
set hostname ".*\\.baidu\\.com"
|
|
set url "^\\/s?\\?"
|
|
set query "wd="
|
|
set safesearch disable
|
|
next
|
|
edit "g-baidu2"
|
|
set hostname ".*\\.baidu\\.com"
|
|
set url "^\\/(ns|q|m|i|v)\\?"
|
|
set query "word="
|
|
set safesearch disable
|
|
next
|
|
edit "g-baidu3"
|
|
set hostname "tieba\\.baidu\\.com"
|
|
set url "^\\/f\\?"
|
|
set query "kw="
|
|
set safesearch disable
|
|
next
|
|
edit "g-bing"
|
|
set hostname ".*\\.bing\\..*"
|
|
set url "^(\\/images|\\/videos)?(\\/search|\\/async|\\/asyncv2)\\?"
|
|
set query "q="
|
|
set safesearch header
|
|
next
|
|
edit "g-google"
|
|
set hostname ".*\\.google\\..*"
|
|
set url "^\\/((custom|search|images|videosearch|webhp)\\?)"
|
|
set query "q="
|
|
set safesearch url
|
|
set safesearch-str "&safe=active"
|
|
next
|
|
edit "g-google-translate-1"
|
|
set hostname "translate\\.google\\..*"
|
|
set url "^\\/translate"
|
|
set query "u="
|
|
set safesearch translate
|
|
set safesearch-str "regex::(?:\\?|&)u=([^&]+)::\\1"
|
|
next
|
|
edit "g-google-translate-2"
|
|
set hostname ".*\\.translate\\.goog"
|
|
set url "^\\/"
|
|
set query ''
|
|
set safesearch translate
|
|
set safesearch-str "case::google-translate"
|
|
next
|
|
edit "g-twitter"
|
|
set hostname "twitter\\.com"
|
|
set url "^\\/i\\/api\\/graphql\\/.*\\/UserByScreenName"
|
|
set query "variables="
|
|
set safesearch translate
|
|
set safesearch-str "regex::%22screen_name%22:%22([A-Za-z0-9_]{4,15})%22::twitter.com/\\1"
|
|
next
|
|
edit "g-vimeo"
|
|
set hostname ".*vimeo.*"
|
|
set url "^\\/search\\?"
|
|
set query "q="
|
|
set safesearch header
|
|
next
|
|
edit "g-yahoo"
|
|
set hostname ".*\\.yahoo\\..*"
|
|
set url "^\\/search(\\/video|\\/images){0,1}(\\?|;)"
|
|
set query "p="
|
|
set safesearch url
|
|
set safesearch-str "&vm=r"
|
|
next
|
|
edit "g-yandex"
|
|
set hostname "yandex\\..*"
|
|
set url "^\\/((yand|images\\/|video\\/)(search)|search\\/)\\?"
|
|
set query "text="
|
|
set safesearch url
|
|
set safesearch-str "&family=yes"
|
|
next
|
|
edit "g-youtube"
|
|
set hostname ".*youtube.*"
|
|
set url ''
|
|
set query ''
|
|
set safesearch header
|
|
next
|
|
edit "g-yt-channel"
|
|
set hostname ''
|
|
set url "www.youtube.com/channel"
|
|
set query ''
|
|
set safesearch yt-channel
|
|
next
|
|
edit "g-yt-pattern"
|
|
set hostname ''
|
|
set url "youtube.com/channel/"
|
|
set query ''
|
|
set safesearch yt-pattern
|
|
next
|
|
edit "g-yt-scan-1"
|
|
set hostname ''
|
|
set url "www.youtube.com/user/"
|
|
set query ''
|
|
set safesearch yt-scan
|
|
next
|
|
edit "g-yt-scan-2"
|
|
set hostname ''
|
|
set url "www.youtube.com/youtubei/v1/browse"
|
|
set query ''
|
|
set safesearch yt-scan
|
|
next
|
|
edit "g-yt-scan-3"
|
|
set hostname ''
|
|
set url "www.youtube.com/youtubei/v1/player"
|
|
set query ''
|
|
set safesearch yt-scan
|
|
next
|
|
edit "g-yt-scan-4"
|
|
set hostname ''
|
|
set url "www.youtube.com/youtubei/v1/navigator"
|
|
set query ''
|
|
set safesearch yt-scan
|
|
next
|
|
edit "yt-video"
|
|
set hostname ''
|
|
set url "www.youtube.com/watch"
|
|
set query ''
|
|
set safesearch yt-video
|
|
next
|
|
end
|
|
config emailfilter profile
|
|
edit "default"
|
|
set comment "Malware and phishing URL filtering."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set spam-log enable
|
|
set spam-filtering disable
|
|
unset options
|
|
config imap
|
|
set log-all disable
|
|
end
|
|
config pop3
|
|
set log-all disable
|
|
end
|
|
config smtp
|
|
set log-all disable
|
|
end
|
|
config msn-hotmail
|
|
set log-all disable
|
|
end
|
|
config gmail
|
|
set log-all disable
|
|
end
|
|
set spam-bword-threshold 10
|
|
unset spam-bword-table
|
|
unset spam-bal-table
|
|
unset spam-mheader-table
|
|
unset spam-iptrust-table
|
|
next
|
|
edit "sniffer-profile"
|
|
set comment "Malware and phishing URL monitoring."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set spam-log enable
|
|
set spam-filtering disable
|
|
unset options
|
|
config imap
|
|
set log-all disable
|
|
end
|
|
config pop3
|
|
set log-all disable
|
|
end
|
|
config smtp
|
|
set log-all disable
|
|
end
|
|
config msn-hotmail
|
|
set log-all disable
|
|
end
|
|
config gmail
|
|
set log-all disable
|
|
end
|
|
set spam-bword-threshold 10
|
|
unset spam-bword-table
|
|
unset spam-bal-table
|
|
unset spam-mheader-table
|
|
unset spam-iptrust-table
|
|
next
|
|
end
|
|
config report layout
|
|
edit "default"
|
|
set title "FortiGate System Analysis Report"
|
|
set subtitle ''
|
|
set description ''
|
|
set style-theme "default-report"
|
|
set options include-table-of-content view-chart-as-heading
|
|
set format pdf
|
|
set schedule-type daily
|
|
set time 00:00
|
|
set cutoff-option run-time
|
|
set email-send disable
|
|
set max-pdf-report 31
|
|
config page
|
|
set paper letter
|
|
unset column-break-before
|
|
set page-break-before heading1
|
|
unset options
|
|
config header
|
|
set style ''
|
|
config header-item
|
|
edit 1
|
|
set description ''
|
|
set type image
|
|
set style "header-image"
|
|
set img-src "fortinet_logo_small.png"
|
|
next
|
|
end
|
|
end
|
|
config footer
|
|
set style ''
|
|
config footer-item
|
|
edit 1
|
|
set description ''
|
|
set type text
|
|
set style "footer-text"
|
|
set content "FortiGate ${schedule_type} Security Report - Host Name: ${hostname}"
|
|
next
|
|
edit 2
|
|
set description ''
|
|
set type text
|
|
set style "footer-pageno"
|
|
set content ''
|
|
next
|
|
end
|
|
end
|
|
end
|
|
config body-item
|
|
edit 101
|
|
set description ''
|
|
set type image
|
|
set style "report-cover1"
|
|
set img-src "fortigate_log.png"
|
|
next
|
|
edit 103
|
|
set description ''
|
|
set type text
|
|
set style "report-cover2"
|
|
set text-component text
|
|
set content "FortiGate ${schedule_type} Security Report"
|
|
next
|
|
edit 105
|
|
set description ''
|
|
set type text
|
|
set style "report-cover3"
|
|
set text-component text
|
|
set content "Report Date: ${started_time}"
|
|
next
|
|
edit 107
|
|
set description ''
|
|
set type text
|
|
set style "report-cover3"
|
|
set text-component text
|
|
set content "Data Range: ${report_data_range} (${hostname})"
|
|
next
|
|
edit 109
|
|
set description ''
|
|
set type text
|
|
set style "report-cover3"
|
|
set text-component text
|
|
set content "${vdom}"
|
|
next
|
|
edit 111
|
|
set description ''
|
|
set type image
|
|
set style "report-cover4"
|
|
set img-src "fortinet_logo_small.png"
|
|
next
|
|
edit 121
|
|
set description ''
|
|
set type misc
|
|
set misc-component page-break
|
|
next
|
|
edit 301
|
|
set description ''
|
|
set type text
|
|
set style ''
|
|
set text-component heading1
|
|
set content "Bandwidth and Applications"
|
|
next
|
|
edit 311
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.bandwidth.history_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 321
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.sessions.history_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 331
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.statistics"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 411
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.bandwidth.apps_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 421
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.bandwidth.cats_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 511
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.bandwidth.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 521
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.users.history.hour_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 611
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.bandwidth.destinations_tab"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1001
|
|
set description ''
|
|
set type text
|
|
set style ''
|
|
set text-component heading1
|
|
set content "Web Usage"
|
|
next
|
|
edit 1011
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.allowed-request.sites_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1021
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.bandwidth.sites_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1031
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.blocked-request.sites_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1041
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.blocked-request.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1051
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.requests.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1061
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.bandwidth.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1071
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.bandwidth.stream-sites_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1301
|
|
set description ''
|
|
set type text
|
|
set style ''
|
|
set text-component heading1
|
|
set content "Emails"
|
|
next
|
|
edit 1311
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "email.request.senders_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1321
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "email.bandwidth.senders_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1331
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "email.request.recipients_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1341
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "email.bandwidth.recipients_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1501
|
|
set description ''
|
|
set type text
|
|
set style ''
|
|
set text-component heading1
|
|
set content "Threats"
|
|
next
|
|
edit 1511
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "virus.count.viruses_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1531
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "virus.count.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1541
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "virus.count.sources_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1551
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "virus.count.history_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1561
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "botnet.count_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1571
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "botnet.count.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1581
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "botnet.count.sources_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1591
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "botnet.count.history_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1601
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "attack.count.attacks_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1611
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "attack.count.victims_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1621
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "attack.count.source_bar_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1631
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "attack.count.blocked_attacks_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1641
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "attack.count.severity_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1651
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "attack.count.history_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1701
|
|
set description ''
|
|
set type text
|
|
set style ''
|
|
set text-component heading1
|
|
set content "VPN Usage"
|
|
next
|
|
edit 1711
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "vpn.bandwidth.static-tunnels_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1721
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "vpn.bandwidth.dynamic-tunnels_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1731
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "vpn.bandwidth.ssl-tunnel.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1741
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "vpn.bandwidth.ssl-web.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1901
|
|
set description ''
|
|
set type text
|
|
set style ''
|
|
set text-component heading1
|
|
set content "Admin Login and System Events"
|
|
next
|
|
edit 1911
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "event.login.summary_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1931
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "event.failed.login_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1961
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "event.system.group_events_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config report setting
|
|
set pdf-report disable
|
|
set fortiview disable
|
|
set report-source forward-traffic
|
|
set web-browsing-threshold 3
|
|
set top-n 1000
|
|
end
|
|
config wanopt settings
|
|
set host-id "default-id"
|
|
set tunnel-ssl-algorithm high
|
|
set auto-detect-algorithm simple
|
|
set tunnel-optimization balanced
|
|
end
|
|
config wanopt peer
|
|
end
|
|
config wanopt auth-group
|
|
end
|
|
config wanopt profile
|
|
edit "default"
|
|
set transparent enable
|
|
set comments "Default WANopt profile."
|
|
set auth-group ''
|
|
config http
|
|
set status disable
|
|
set secure-tunnel disable
|
|
set byte-caching enable
|
|
set ssl disable
|
|
set prefer-chunking fix
|
|
set protocol-opt protocol
|
|
set tunnel-sharing private
|
|
end
|
|
config cifs
|
|
set status disable
|
|
set secure-tunnel disable
|
|
set byte-caching enable
|
|
set prefer-chunking fix
|
|
set protocol-opt protocol
|
|
set tunnel-sharing private
|
|
end
|
|
config mapi
|
|
set status disable
|
|
set secure-tunnel disable
|
|
set byte-caching enable
|
|
set tunnel-sharing private
|
|
end
|
|
config ftp
|
|
set status disable
|
|
set secure-tunnel disable
|
|
set byte-caching enable
|
|
set prefer-chunking fix
|
|
set protocol-opt protocol
|
|
set tunnel-sharing private
|
|
end
|
|
config tcp
|
|
set status disable
|
|
end
|
|
next
|
|
end
|
|
config system speed-test-server
|
|
end
|
|
config log memory setting
|
|
set status disable
|
|
end
|
|
config log disk setting
|
|
set status enable
|
|
set ips-archive enable
|
|
set max-policy-packet-capture-size 100
|
|
set log-quota 0
|
|
set dlp-archive-quota 0
|
|
set report-quota 0
|
|
set maximum-log-age 7
|
|
set upload disable
|
|
set full-first-warning-threshold 75
|
|
set full-second-warning-threshold 90
|
|
set full-final-warning-threshold 95
|
|
set max-log-file-size 20
|
|
set roll-schedule daily
|
|
set roll-time 00:00
|
|
set diskfull overwrite
|
|
end
|
|
config log eventfilter
|
|
set event enable
|
|
set system enable
|
|
set vpn enable
|
|
set user enable
|
|
set router enable
|
|
set wireless-activity enable
|
|
set wan-opt enable
|
|
set endpoint enable
|
|
set ha enable
|
|
set security-rating enable
|
|
set fortiextender enable
|
|
set connector enable
|
|
set sdwan enable
|
|
set cifs enable
|
|
set switch-controller enable
|
|
set webproxy enable
|
|
end
|
|
config log memory filter
|
|
set severity information
|
|
set forward-traffic enable
|
|
set local-traffic enable
|
|
set multicast-traffic enable
|
|
set sniffer-traffic enable
|
|
set ztna-traffic enable
|
|
set anomaly enable
|
|
set voip enable
|
|
end
|
|
config log disk filter
|
|
set severity information
|
|
set forward-traffic enable
|
|
set local-traffic enable
|
|
set multicast-traffic enable
|
|
set sniffer-traffic enable
|
|
set ztna-traffic enable
|
|
set anomaly enable
|
|
set voip enable
|
|
set dlp-archive enable
|
|
end
|
|
config log fortiguard override-setting
|
|
set override disable
|
|
set access-config enable
|
|
end
|
|
config log tacacs+accounting setting
|
|
set status disable
|
|
set source-ip ''
|
|
set interface-select-method auto
|
|
end
|
|
config log tacacs+accounting2 setting
|
|
set status disable
|
|
set source-ip ''
|
|
set interface-select-method auto
|
|
end
|
|
config log tacacs+accounting3 setting
|
|
set status disable
|
|
set source-ip ''
|
|
set interface-select-method auto
|
|
end
|
|
config log tacacs+accounting filter
|
|
set login-audit enable
|
|
set config-change-audit enable
|
|
set cli-cmd-audit disable
|
|
end
|
|
config log tacacs+accounting2 filter
|
|
set login-audit enable
|
|
set config-change-audit enable
|
|
set cli-cmd-audit disable
|
|
end
|
|
config log tacacs+accounting3 filter
|
|
set login-audit enable
|
|
set config-change-audit enable
|
|
set cli-cmd-audit disable
|
|
end
|
|
config log null-device setting
|
|
set status disable
|
|
end
|
|
config log null-device filter
|
|
set severity information
|
|
set forward-traffic enable
|
|
set local-traffic enable
|
|
set multicast-traffic enable
|
|
set sniffer-traffic enable
|
|
set ztna-traffic enable
|
|
set anomaly enable
|
|
set voip enable
|
|
end
|
|
config log setting
|
|
set resolve-ip disable
|
|
set resolve-port enable
|
|
set log-user-in-upper disable
|
|
set fwpolicy-implicit-log disable
|
|
set fwpolicy6-implicit-log disable
|
|
set log-invalid-packet disable
|
|
set local-in-allow enable
|
|
set local-in-deny-unicast enable
|
|
set local-in-deny-broadcast enable
|
|
set local-out enable
|
|
set local-out-ioc-detection enable
|
|
set neighbor-event disable
|
|
set brief-traffic-format disable
|
|
set user-anonymize disable
|
|
set fortiview-weekly-data disable
|
|
set expolicy-implicit-log disable
|
|
set log-policy-comment disable
|
|
set faz-override disable
|
|
set syslog-override disable
|
|
set rest-api-set disable
|
|
set rest-api-get disable
|
|
end
|
|
config log gui-display
|
|
set resolve-hosts enable
|
|
set resolve-apps enable
|
|
set fortiview-unscanned-apps enable
|
|
end
|
|
config system lldp network-policy
|
|
end
|
|
config firewall schedule onetime
|
|
end
|
|
config firewall schedule recurring
|
|
edit "always"
|
|
set start 00:00
|
|
set end 00:00
|
|
set day sunday monday tuesday wednesday thursday friday saturday
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "none"
|
|
set start 00:00
|
|
set end 00:00
|
|
set day none
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "default-darrp-optimize"
|
|
set start 01:00
|
|
set end 01:30
|
|
set day sunday monday tuesday wednesday thursday friday saturday
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
end
|
|
config firewall schedule group
|
|
end
|
|
config firewall ippool
|
|
end
|
|
config firewall ippool6
|
|
end
|
|
config firewall ldb-monitor
|
|
end
|
|
config firewall vip
|
|
end
|
|
config firewall vip6
|
|
end
|
|
config firewall vipgrp
|
|
end
|
|
config firewall vipgrp6
|
|
end
|
|
config firewall ssh local-key
|
|
edit "g-Fortinet_SSH_DSA1024"
|
|
set password ENC QohQFbdJaNfZoh86gum50MFbIWpa4d4DX7BWMG8GYtd2Z4gPdQPT2eoqOjvJ9drApjaasWJr+vOjx3Qpi1rR28gN1c43Kl/C/hXJgXFKpVla1pKxZxfxxiC0sxAQsP1feBHTcNrBuIVmBPVdK87PXRQtdAA2SzTA0RYtGCASI5+JBv47d3HZ7oaHO16KUnh/852bag==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCCsc2D7A
|
|
O4qDYfXxVb5RSUAAAAEAAAAAEAAAGxAAAAB3NzaC1kc3MAAACBAMS+4XEri0vAnEcpawSE
|
|
aonawgM7jTatyBDkWZQkz5GApTwO5L1arpNUuOgZg115Or2doSVcxCtN/u79auu7Hy+1Oq
|
|
vVy1Vht4Tnj4teP45Pfqxb1T5ANhxlfG80SWi+hPAarZeNiMgQK9l+dZp4yfQQNTLULzyi
|
|
BpoeJnVSOSoLAAAAFQCWO4AICCOMPozW7SSviDrjcUEDfQAAAIABVmqI9Iz3TKUviuaEfx
|
|
kyw24WGR9kfBp4AXoCYjWf+21eh8M9+xGiOf6kayScyDvB2MkYhjB2Q+JCxClp/ckV3nrM
|
|
7svLU5wd3Cv7oyGm6mE/FVeZkdRgsiVkSwHVjnxsUsyKmxmLwcoQt5a+L56qy4DQ/T4QrQ
|
|
CUCIdlGsDy0AAAAIBy99SCy5/e6YcW0gThoPlGws0LpAjJniMZurMkX0UUcMDSsWrtcnJb
|
|
/HyafIWiNXW/4exOZk8V4Pd+THL1fLMnJgw9xyZeYjsyLufOyaSoldpqS2m1AOJk08EPrm
|
|
iRpUcoKh0tFuwUQU8dKx2Kx5M9UUp04/SnG1qYAamGVXaoLgAAAeDn2w4iToLUKtWXoH8U
|
|
dbWETBhfmNTD4pk60pXg4tijS1zGu2bzgTc5UlLqjB+EmAFhVrpXAfw9TCPXuoH8ZrwRJh
|
|
v9cmtWuMLBj6Tu4ovYTWag8Kh6LXbtbD/hSauZYZDJiJUl7nhfvjtK4oTQUUX7DXS3dtdH
|
|
hxP6WrsN3JOYnbSLQMEHmh/4ZubUM+PSP5ogGEphJO/hi4cA3GG4iD85etrUcyXA+bdGBR
|
|
g39U2TToZEHcuz7SIFfMBtLuG99SoT08wYQlzzR9ZJfhs99iYddtD7YWcxVh9VSesJ2i6R
|
|
PQtYTFBYTUY0/qnCviL1ZMm7URBcflWJnyOVyRdonZgR2CgR7jY4u+rgKVTnITHBe2WxvV
|
|
6TA3OC9uxmO2urtr3vTsOtLqJK3hdrxoCn1jYCbRqKeo4CSINB5i+9phriLQ83jMCp5NaZ
|
|
8yaWayteQXcIhBAKti+ndsvrj6UQx0ltkk17o/QYTy2oIpCGhM+0ubfz29msX/Fgf9vkrK
|
|
+FViZYMBJEUQ7Ntz2WwHOC/bcLr8RoHdWcusJ/7uKbXTWf5VMDC1Hg+dGbk6zmIZd8y0V0
|
|
8fttEP5Z9AnNi3T1pTUSEFxjpQofdXIL8y8Uut8WXMaoZJ8jqQYufvVtaBB3NMg=
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ssh-dss 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"
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_ECDSA256"
|
|
set password ENC P4kkzhEGKVYQDhF+pQ8/R4WBlVoG93WD19Z2DIusikMnYy2ONM4wlx8ooCvRG2jbDo3WF2Ne1QgwmPR3tGByOtgYX/3ldMj0JkLsrwUQjFJbC8z0JH0u2Tb083fGnT+OksooLQ8MGpOe9XMBWyVmFMIgTeJO010uwgLWJ5poJZew/OIG2tkNEJRYcXErk5aR+Ugg7A==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABA0Q3tLD+
|
|
dFrK1X0hDwEiEyAAAAEAAAAAEAAABoAAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlz
|
|
dHAyNTYAAABBBI7qFojD9363V6AtyoJU+yJQmp2hIdNAv0KAg+2iqJn6edGSkZeVuXa8ue
|
|
chXxhedXcaon1Bo2TlKH6ITmCAMFQAAACgKKWEsPw4CPtmUfVW7SpyDKpz68FPzs8xVcyb
|
|
ci86C5RuV5VOETT8t/hS0TRQm6OpHBGnUJ7oxx/gCcY40xlCOTUuatg4Kt3tN9z43gbnL9
|
|
DjACOSfBRQq18w2wDLDZsDPpf7mHL5ou2g5BZbKY9HslQh7N6mzhfR/1Hf+1PGrrdddDXM
|
|
Y/ta/1LrGriT/tjY6yJeuFzaxVU4ZUusEYting==
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBI7qFojD9363V6AtyoJU+yJQmp2hIdNAv0KAg+2iqJn6edGSkZeVuXa8uechXxhedXcaon1Bo2TlKH6ITmCAMFQ="
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_ECDSA384"
|
|
set password ENC wtNCb8AltEUSvz3olKverZ5DGr6W9LB/OoUDqN/HE6mZVyOz0W7JYYt3wYpNHC6BFUAOblnWA+MsHw40ZZUdoT7tQchi0ltSvAtLn4oW79I4z/sOYR6DX7W8wmaf/PthQ49Ylap5BsRxPz9t+0Su+nL7V6wZNGzmNYsga+9M7hGZjasiJqIL1j32+aWK24jJq24YnQ==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCIeQz+rx
|
|
cNkpJYPCumwIx5AAAAEAAAAAEAAACIAAAAE2VjZHNhLXNoYTItbmlzdHAzODQAAAAIbmlz
|
|
dHAzODQAAABhBNjiQRHQuK+ZAVLpqq28qHmXgFHSR2vMwZMBKGci4aEmXwJSLrorwTjR7+
|
|
rH570WB2hecq3RP+4z1FyBYoiyiLq7cpDBVmajs2icMfPJEbaCqzRUb/2nxYHiQsPKI34E
|
|
rgAAANAhHdU5FnUynwmWJGmcEpYwiH1FmLH3XcAPtEsv/f0sR1NrkDAy70nrSg0QIfgoOa
|
|
RlRG3JKEieyttxeTTyS3+WB+weEm4adefxWqLH+mzJg+TzbjMWC0hd8mK+GKKg6sTvxnVE
|
|
W7+VCY0qRY9vqUav4/I53jEoETsop9v7ibKECPK/3c1dYIcAKnX0J64h3fZvj4+3jmOzwx
|
|
WN6YhLvf2cze+ADz6w8DtoT2PmT+dW9yViPHx3kGwar7jmOBUggwkfV4XT+CnMEsVFx8Kj
|
|
MIgY
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ecdsa-sha2-nistp384 AAAAE2VjZHNhLXNoYTItbmlzdHAzODQAAAAIbmlzdHAzODQAAABhBNjiQRHQuK+ZAVLpqq28qHmXgFHSR2vMwZMBKGci4aEmXwJSLrorwTjR7+rH570WB2hecq3RP+4z1FyBYoiyiLq7cpDBVmajs2icMfPJEbaCqzRUb/2nxYHiQsPKI34Erg=="
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_ECDSA521"
|
|
set password ENC pJ884l3EdlFJVuuCAY8XRMPEYuALeF26Z4dIUIL5+6DKenZH2I7D585QHDclFsiSJgFL9kwMljUm4u3rvhSA5CvulgWp+afCVTWSbAALTeTM+xT0yGlGcbm/hwlgBOi2055NgKsxjBJ0e8XRp2NoEoI7ek2cEA7DQk2jm6ZN/bgIfLNkmlpBxS8e0L8dlYiHSPflOQ==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCIhQKfZq
|
|
WpMaANE2lH2Nx0AAAAEAAAAAEAAACsAAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlz
|
|
dHA1MjEAAACFBACqneEJaZZLCOJ4MwQIa21hDIeBc9FX/cX286PVg0GppfJWAPEoAWrZgw
|
|
MnNBAls1xRAayrSjAmcCFnnsMA0uqOHAFfmIkqNC0Krb/qyaSnrXZMO+u39VecyLkwlg/m
|
|
UGsU9VyC8ubGG6G+hf7R0IZ3LdPFRBoP69WPaMlRYZYUdI2WUQAAAQDr0O5sP85Nt4SA7z
|
|
k8g/MzqbvzCWFEeID8uhKALq/dxhKzUSuNzAWqFxE4kDxf+c5xFtE0ZyhhHLemh5gdBTTM
|
|
kLjUue/e98qGnqxCHkhrLWWQFaeWGtZFpXERAiU2ypJYs5FxSETnOHy4kfqyUYYYP+Oar2
|
|
V/q9/cwMiwdN10Z7n51XwrxjymjXys5Njl4gExdjkREvXF2MnuWYEOXVmUsdOqPgTj5YEd
|
|
Qk+4DzwKvc3BTRcwnS+rKHLvBBKXRefJSNM/4MgSWbEcR/Fs1zkbFz0AHurSGGtOXwnoIw
|
|
6a4phhJqZ+DeIPSl3stNCMr/4Pq/7+yooplplX9r7yAlJa
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBACqneEJaZZLCOJ4MwQIa21hDIeBc9FX/cX286PVg0GppfJWAPEoAWrZgwMnNBAls1xRAayrSjAmcCFnnsMA0uqOHAFfmIkqNC0Krb/qyaSnrXZMO+u39VecyLkwlg/mUGsU9VyC8ubGG6G+hf7R0IZ3LdPFRBoP69WPaMlRYZYUdI2WUQ=="
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_ED25519"
|
|
set password ENC tIKNuSNZG4oW2qtlha+TtEXutZ1js8T5qR9GJxQXIELg8WA2j6HQm7mibv7a846PsBKLQyttNNs42UETtM7tGrl+eVXDHtfh1r/ZdZyYH8Zor80EebW5hOjFjRdwd/yc0mtFlw6zETqZT6lw/b504vHHXRGuHxI2q3Lie1BjRdusHkEAzNxlEQr6wuSf/mD9nzNWUQ==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABANmtIKne
|
|
CI7yqyd3LwTmZhAAAAEAAAAAEAAAAzAAAAC3NzaC1lZDI1NTE5AAAAIBkU0tdoqAEA8Z+R
|
|
frW2pyHjnuyOFFAp4qBam1aDpO4wAAAAkEg5eRec4VKSVdmDS1J1vs2VY8uDSDJ6vulk4f
|
|
OLxJTy5cEsz+MzADfVt4H7malC/ol7Eax+FLctO9DAQWRxXsBBU2X5uAM5FnS4TYp7mHOY
|
|
U0RY8tU8VEY+8oClknnJ+NcJ7eJ3RhEhkX9qFsKLhVe/9MO8JVsqJO7Q/CcM70uoFhNgcf
|
|
u8TMSlBTOJnJ245w==
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBkU0tdoqAEA8Z+RfrW2pyHjnuyOFFAp4qBam1aDpO4w"
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_RSA2048"
|
|
set password ENC 24pvOWNE9utoVnoa+/UnfCgFlPoHI/LNoCQUD7iLu/XKzQStXGy2HfEkfxV7nCMZsXjWcr4fnZYpx7KjOzsW/9nV/hk/Vuk1DJqvakzR4gr6DfKdhUIzeME9ks1/a+7KM005H3aEHiRrXdhd6nsaGJ2GASegqbg2ZyyRpN4A2e2uTcK6ehOqkCgvm/c/5c/d0DkzVw==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCIxks//i
|
|
r/V0cczJOMcqwyAAAAEAAAAAEAAAEXAAAAB3NzaC1yc2EAAAADAQABAAABAQC7dywqSRiZ
|
|
KIHLNhfwQmGUnUJcp440VbLDXkL1A5EDXOc+ngDIMEaeAiq0Spbx/XkHx7wamsfCV8EMhz
|
|
7xZWYaJDicc/LWePPgAoAsHqfN7RXhsgZyTaqISUyvxOArLCUIFWwKga/no8ESfaXUhV0w
|
|
KjCc+iuc/y+28Cke27AMJKLMwyOuMSTdYTm9ipNhp/j+oPtooJaP/kpVZGUP7lMTIX0dnU
|
|
RknbgK/7rP7+D9oWqbHvwMBT5ncCh5B13N9q91nYRVkY1jdHdHkqnocdJ22Rl4DqjmHNaU
|
|
ZhT58y4HHWN8qfX1AA4sVO7/CkYPkTJE7mj1FwWlTm4w/uk0Qpt9AAADwCJbmKlqnqykt0
|
|
msxMzHLHO0v/MT6SfemhK9NlQsK2JDi7paYww98cDs1RUCtwV2EC3BtgoMYwryFRqCtLpS
|
|
RqqYe/gwPErpDW9cESKfVbbmTQsJqGivnlZtXfii9ugazC8jo6Y7PHFevkApINvbXRVWpD
|
|
I5k4UwkAcmj/gwaHjvxbaXtNSbVP5FqlZX8XkvAn+r/wQ7IN7UcO98smuAjYZuCo2r9vvM
|
|
vx189sKseQ5oeKkQ2EBLAtUoSovdsQ2irbx+eMUQYUf3h0OSo155q+l5Hf6cEAJx+0bPpB
|
|
XzJemgWuIl6okw1fBG0R8q6j5iJGyNnwCAMp86EWkeVe1e+fY7GTyXf2SepqsWYuGwkv0b
|
|
IEMxJkuJwhbgZKxEJMxYNlrjN5urraD4+3QGvViQkRunkm4Z8McHSnjw9b0Mjz/OrfynUr
|
|
c5cni1fbQHXaBpNI8obgKufvqSf2V9B2V+BhrPxVq1iFXw4COl6rxKVlCivilo/P0JU4xc
|
|
k/JnnlAl2uJvI4xuW6Ty/hQKXqHMU780QGa2xGMUlr64+g1XtaE/jUr8wmTkvd3crHDno9
|
|
lPKPnCkAwnfHVKm8S/fMq6IItdue+nlUMJ1gnOsQ1iBIqIBpm6Mu9EfkYSXLVLL4fcIqPQ
|
|
n49vPICLdkHXspC0Kph+xPT1kkaLJvH4/aRanuFYMmzAV8CEBhqU5yVptz9XMukCdn+mV1
|
|
/WhMjAClzHFlqUCIE1bLdKjjY+pjC+uVNctgAzxv8/08T4aeBGLh2ABfdyGwkeDMAD0vYr
|
|
/mtEo7tzC7nxQZG0h5AvSSF6vE/6wNtJ1HFfzXV/+700i3M00k5gUcK4ttzyYd8iCVvAXG
|
|
YcIa2uIMFdWpwcaDtca1lx7Z7g9TzWih+a53YuuUidEozBSPeLTc5rwLckUkrWLv1Z+F6Y
|
|
COh+wMqo4nYVRGTQpjqdkmHjNUTXh7B51rYlIOUoROak5oTmgbqsMCOqbdFqW9/N2h06To
|
|
c4CTFuUQTWDsIJ2whvsQAwznm9GCaQfjqT1xtgil9mRQiZKDBwfC1zQ+6RsWqviUOBPIbj
|
|
EzJyxOd7ZvIrtJXy2I3I1d1caH7FERMEHQeBFCa5n+S2KZ7J+Q9ZlN6beT/xFuOn00CaB8
|
|
Egx546ps6YDFHrcd0aIn0GW//NBZW2lu6mjYg45oR7L39bvoLu4x1TvmFeHWkVn/xVOr5O
|
|
nHkDZ2eKMkzqfus18aWNdPwStA45JuR9JWVFaJqTrrRLoKCKZ+jNbwJGH95pORW3Jt7DYa
|
|
156NdbMg==
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7dywqSRiZKIHLNhfwQmGUnUJcp440VbLDXkL1A5EDXOc+ngDIMEaeAiq0Spbx/XkHx7wamsfCV8EMhz7xZWYaJDicc/LWePPgAoAsHqfN7RXhsgZyTaqISUyvxOArLCUIFWwKga/no8ESfaXUhV0wKjCc+iuc/y+28Cke27AMJKLMwyOuMSTdYTm9ipNhp/j+oPtooJaP/kpVZGUP7lMTIX0dnURknbgK/7rP7+D9oWqbHvwMBT5ncCh5B13N9q91nYRVkY1jdHdHkqnocdJ22Rl4DqjmHNaUZhT58y4HHWN8qfX1AA4sVO7/CkYPkTJE7mj1FwWlTm4w/uk0Qpt9"
|
|
set source built-in
|
|
next
|
|
end
|
|
config firewall ssh local-ca
|
|
edit "g-Fortinet_SSH_CA"
|
|
set password ENC k7ItowjYrusVEYZZBKxSkVT7WMXg5ywOmtIwDdqiQF/FNbliXZAWKAC1AgfUYoTm6wONOYNHLfb6yLfOvIpxFU4rblx7Jd/ZSLpqheEIjTAxmoZ8uE7z5YdzhNiEckd2jBO6FIFS3dbLbZj4OhqcbqZhwg7kOrdUraSfVeq/i24zjf7ut9COWuy7RTtACUmhF/fPSA==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABDyuh3zpN
|
|
HXpKIKCT7FetnEAAAAEAAAAAEAAAEXAAAAB3NzaC1yc2EAAAADAQABAAABAQDWiV0aIqNb
|
|
iSdn5/C+GqDwBa1aPB3i3cNCHh7AgAWMo2xJOFVgqrBH6cWYfJ/eB86ySooWMRbOuhmpTc
|
|
pa5Zx9e5erEX7QT5eLf/f2i03aWvoYGl5dOHRpJlsSe7AuUyak0A0eaOMODpiGdeyb7Xqe
|
|
YQ/uhEewIs/BgZgh68CVCrdDLVgWmTMdVV9DSrk9Zup+AnO2fSc7789Nu2Hj5fkmXe29us
|
|
mdnjPC288+qzbc2ToYOHfmVCXT72ZhV0LeD9L+HQUsiRVDDV8ErKQWSGv3+T8aQ5mrnygG
|
|
QLoo6m1exPqvvkdmgfuOXOMMy3FS3GkRGBmsVVMCwQQk8cy4D9TnAAADwAhUTQWWd9MyyI
|
|
ztaTmETZf2/1RpsN6Z11GieyoWFGT6OYJODzWPIpzsliGQ+wj3WoMq+CzrO1frsgpbhtHg
|
|
B2mC1zUBrvDNLlfaZCcQr3o1WpNKnb9sswriZIrKwHU+94yt02+z8ynVxH2/zwJpB4ax/P
|
|
npTymjyPR53bfsII5PBAerjzon7OR4dTuXjJc7I1iBcHlFeKDItbazxG4IsaRu0dreW9gf
|
|
S08r1DYc8sGJGUWowT8mijPUkJZBIQNhBo8w0PD1s1SYGDN5XJzEL02o5OwzI2lbTt/asj
|
|
FNPT4NlIF6GPcr8g7aB0/FhVsFizEM6ZPjgRoZrj5vmYxwInSQ6ieGxrnTwR+i3VedfrVY
|
|
lvaEsn3V7RrFKqCXb2ZLgridblGMSv4gFcnAQfkcoJgFNsjcEg5EIRnEBrXH6Mxz0z0wcG
|
|
WswaXzvqejxoGkXXEhbPpdx76mAbvmZms+Ui0yytpWgaTPkg+wyrAr6l/uIeXoPDaeZbS3
|
|
WzQGKCkvFWpPPH1zlHK+Sf6kzGMXvyz/q9I23ZAHMFUzYH5vi8dsLG0mItxWwIIaJQ24V/
|
|
I7/z4v6MDS72p/OiKk7quU2rAiekZa1yMkiQ0Phoi6EKwXUpQGGK0hR7nlljYmX2I7aCbf
|
|
smL2YwplikCtKkTyouBUtqlMtrgDIvwRtgaW0NureDAGsrELdDMX+8aAvkILKb1eSxX2c/
|
|
Jev9kBvHLuMZN5qTxdONnRs75Hb+u1Yr1VJymwZET9uQsHOvEnDV61giCG4d4ENy8TmMx6
|
|
i2lVEdzQCLXB1wuW3fKZPAnPKj7ruCekqm4SX7frRyC0yad0VCsvlOSqsFdq6CN8SSShaF
|
|
Z/zTGAEp/kje49O/mrDUiG28yN/hCGoeHdHhNxgpq/UTIrf4ZUAC6xyesp3eKcVje/P8L7
|
|
219eRzyI+E/STBA0XCuESg0LXgEWRwnTA0W8YGUUgPyvxmh/thCtiJN/voFwJIzniIYUTx
|
|
HdAzfuhRRCGOm41ogMMvve+muMw2c/KFMDW+8mFK6RlOL0Sp+E/NQj/TYXM6xVGTbRz+BA
|
|
6tNUzFqorIRqOXC/4nGxx+iatAhdVqpMmW+pKKtMxeZ+ah5A6OwPUqhEuboHJVtLHvLYa4
|
|
u7mBZ5hOQjyZxOgW2ya4hrPbevbOGbuh+vNqsiowzvMsh9i+tjAq4mgg/pbWqe4C60R5Fi
|
|
7VXOj/P8aZLri7BuiPGXa2PdwS7pZOjTZZyaktwuxZT1WnrnVMgQdCm2WxdmTax3DChBh0
|
|
v0Cb0bDw==
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWiV0aIqNbiSdn5/C+GqDwBa1aPB3i3cNCHh7AgAWMo2xJOFVgqrBH6cWYfJ/eB86ySooWMRbOuhmpTcpa5Zx9e5erEX7QT5eLf/f2i03aWvoYGl5dOHRpJlsSe7AuUyak0A0eaOMODpiGdeyb7XqeYQ/uhEewIs/BgZgh68CVCrdDLVgWmTMdVV9DSrk9Zup+AnO2fSc7789Nu2Hj5fkmXe29usmdnjPC288+qzbc2ToYOHfmVCXT72ZhV0LeD9L+HQUsiRVDDV8ErKQWSGv3+T8aQ5mrnygGQLoo6m1exPqvvkdmgfuOXOMMy3FS3GkRGBmsVVMCwQQk8cy4D9Tn"
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_CA_Untrusted"
|
|
set password ENC 1eCNdK+xWhFBtq68fOKXDQCLwMGrZLUH80iOWdQbOmPeuWAyDGmPEv8EyZrHawkAzChLGTAzxOERpFN2RCrYKtckFTPajM4PPiEc8kwMn3+mTKU0klIee3/mWvlxQHus3Fp70JvrUK5Uw5CK62dIjv1/WmMLHNw4FGA1nH6HF4uv5W04u+Z2xEd9SHEkW3A+om9hHg==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABBQl4Zet4
|
|
cT1vY5gtR7Al7bAAAAEAAAAAEAAAEXAAAAB3NzaC1yc2EAAAADAQABAAABAQDYUFiCOzZ8
|
|
jkWReh8ohyBpy6ZHkccvy13tZdDl9QYc14NBf6PCr2AgfvKh34LBqvjkXG3dOt4Mf8viDy
|
|
FiHIsUhBOyUvVWGb5nYSYYGyH5a7jIQ6hHT3ycjsfpZKVCp9QOpdAQ3mSkbmSjCgvdLr1c
|
|
A5uKsqdo5yXDFMUqM7a30JMkS1OyUC6/wdkGkx5LfaBySqw7huTcHGGxnAq7EIkvdBpoAL
|
|
wOW8s/BBX1/MEorJ1dJULbBUz0myAWwHF7Nh1EP09w3bPGeJrJYzABJOJaSNvYTLzvw2p1
|
|
odmDu+Z/+0J494OV8CT0fsk8Z8O85dknUeQRulYBJesqeURy280zAAADwLuyDsegVHlUsH
|
|
h0bEoYb+d8lT6ntoUGgLX8ntGmEWgrGXX4Sw2k0L5yHGeLG+hUvBXY2fOfJUVjCkoqlwEf
|
|
0Y10tKUVDJl1tBTzYYyB6H1ZszMyiWWbr+ytDs11wJ86WhM2n4udyrMsjVQmURNN2nTlvF
|
|
Q4Z+rMAOC//1OtB1LDDMU4FWw1J50QUoYQ1lsNt2XLfMIECm4Adm9ucYbrXUyiceegnBDU
|
|
bCL73uQg3dBPkIUQvt4di28TUChDKsHO2TkyrYU2+9I+PIiphdsDmMc/Q0P0QnuYFomWI+
|
|
3vhNU9Ht0FoKD3dzAxDj81H2AzHAx3pU8uuhFgA8tIEPaT5bjgY6Xws0Ret771sjYLbM5F
|
|
7LHBFl+lkB2sEK3BWjd/Mj5VpLebwiZOUyLgrEESb+4vNlU82n15G08bxrOo/4vMKsrnCL
|
|
3JFIGKzCseZFd4VE8BZBp89H1Nr+TmDRArqUZ4B7FHGVPUjW+SAE7T2m3Ujz1A4J9l0KQ4
|
|
7OK4kaziRPkpaZb7XccP4lDalcxJRC+zjF/hlor/YlDIBpghYAw1JLMgPbG1uuEnKNuGIv
|
|
1gfGML2U/bQSRbygUVk6nos9i4SdBfWMSNkYYfXTJ6NYTbopMAZ0VK1X9IDgoN91ZNoRbB
|
|
M4BWCghcmm6eEF15tqDQ4nJ9caZMMeE4vUNKuF5T5It4LuBLafPWYZUeuKmiJecFqxjr8M
|
|
uhq0d91LSQwwH8tANq6Nt/Hj/lubSomjxGGRkhtz0fNpE5gM6LJNa5R7VIFu8PHXHOGypC
|
|
Z0PTTa2r+L8AnzwjMv1H5dISOm3zF1AYZ9HG6a8MJn8z3SpeAUM1iqeQ488/ppmYlX0d5T
|
|
JYHZoDFhBGvy3xtLZQ6j4/4IZga8HgHHxz7Ch2KdMzQiFUaMIOfixd5ljVVKiOi/VdvBFn
|
|
3e5piSYFyCfvHpjK+YOQ9nLXigLwUbDgS2BiZ+gMdydKQX42+JXU+/ICItdZl+wP7mkai+
|
|
xqTFDS4oOu637kfKI6ChT/Fsey5Ylip5IcfRg0Ubyow0omxW4o/J+S/bFIlGHSgb9PUs+T
|
|
x2c9IXXcclt31xkCz+JASa6LW+ldUUvEMiv3uW84Un5D6vFByX8lEV6FOc27QUCIYgWjqV
|
|
jAgZg4FmI+bj3/kRaLVjpxcjEGZjfxNn3gRAgeETWSLzAUyF8CN9vzV8+K64AuJNa5J2tx
|
|
+qezsx6kJTHdy3OoztCoFmgU29BBn0b7Ip4u9agaW53R7N4tjwPKg9IrDEqTIAmY+O2nk7
|
|
rM5cY3OQ==
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYUFiCOzZ8jkWReh8ohyBpy6ZHkccvy13tZdDl9QYc14NBf6PCr2AgfvKh34LBqvjkXG3dOt4Mf8viDyFiHIsUhBOyUvVWGb5nYSYYGyH5a7jIQ6hHT3ycjsfpZKVCp9QOpdAQ3mSkbmSjCgvdLr1cA5uKsqdo5yXDFMUqM7a30JMkS1OyUC6/wdkGkx5LfaBySqw7huTcHGGxnAq7EIkvdBpoALwOW8s/BBX1/MEorJ1dJULbBUz0myAWwHF7Nh1EP09w3bPGeJrJYzABJOJaSNvYTLzvw2p1odmDu+Z/+0J494OV8CT0fsk8Z8O85dknUeQRulYBJesqeURy280z"
|
|
set source built-in
|
|
next
|
|
end
|
|
config firewall ssh setting
|
|
set caname "g-Fortinet_SSH_CA"
|
|
set untrusted-caname "g-Fortinet_SSH_CA_Untrusted"
|
|
set hostkey-rsa2048 "g-Fortinet_SSH_RSA2048"
|
|
set hostkey-dsa1024 "g-Fortinet_SSH_DSA1024"
|
|
set hostkey-ecdsa256 "g-Fortinet_SSH_ECDSA256"
|
|
set hostkey-ecdsa384 "g-Fortinet_SSH_ECDSA384"
|
|
set hostkey-ecdsa521 "g-Fortinet_SSH_ECDSA521"
|
|
set hostkey-ed25519 "g-Fortinet_SSH_ED25519"
|
|
set host-trusted-checking enable
|
|
end
|
|
config firewall ssh host-key
|
|
end
|
|
config firewall decrypted-traffic-mirror
|
|
end
|
|
config firewall access-proxy-virtual-host
|
|
end
|
|
config firewall access-proxy-ssh-client-cert
|
|
end
|
|
config firewall access-proxy
|
|
end
|
|
config firewall access-proxy6
|
|
end
|
|
config firewall ipmacbinding setting
|
|
set bindthroughfw disable
|
|
set bindtofw disable
|
|
end
|
|
config firewall ipmacbinding table
|
|
end
|
|
config firewall profile-protocol-options
|
|
edit "default"
|
|
set comment "All services."
|
|
set replacemsg-group ''
|
|
set oversize-log disable
|
|
set switching-protocols-log disable
|
|
config http
|
|
set ports 80
|
|
set status enable
|
|
set inspect-all disable
|
|
set proxy-after-tcp-handshake disable
|
|
unset options
|
|
set comfort-interval 10
|
|
set comfort-amount 1
|
|
set range-block disable
|
|
set strip-x-forwarded-for disable
|
|
unset post-lang
|
|
set streaming-content-bypass enable
|
|
set switching-protocols bypass
|
|
set unknown-http-version reject
|
|
set tunnel-non-http enable
|
|
set h2c disable
|
|
set unknown-content-encoding block
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set stream-based-uncompressed-limit 0
|
|
set scan-bzip2 enable
|
|
set verify-dns-for-policy-matching enable
|
|
set block-page-status-code 403
|
|
set retry-count 0
|
|
set tcp-window-type auto-tuning
|
|
set ssl-offloaded no
|
|
set address-ip-rating enable
|
|
end
|
|
config ftp
|
|
set ports 21
|
|
set status enable
|
|
set inspect-all disable
|
|
set options splice
|
|
set comfort-interval 10
|
|
set comfort-amount 1
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set stream-based-uncompressed-limit 0
|
|
set scan-bzip2 enable
|
|
set tcp-window-type auto-tuning
|
|
set ssl-offloaded no
|
|
set explicit-ftp-tls disable
|
|
end
|
|
config imap
|
|
set ports 143
|
|
set status enable
|
|
set inspect-all disable
|
|
set proxy-after-tcp-handshake disable
|
|
set options fragmail
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
set ssl-offloaded no
|
|
end
|
|
config mapi
|
|
set ports 135
|
|
set status enable
|
|
set options fragmail
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
end
|
|
config pop3
|
|
set ports 110
|
|
set status enable
|
|
set inspect-all disable
|
|
set proxy-after-tcp-handshake disable
|
|
set options fragmail
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
set ssl-offloaded no
|
|
end
|
|
config smtp
|
|
set ports 25
|
|
set status enable
|
|
set inspect-all disable
|
|
set proxy-after-tcp-handshake disable
|
|
set options fragmail splice
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
set server-busy disable
|
|
set ssl-offloaded no
|
|
end
|
|
config nntp
|
|
set ports 119
|
|
set status enable
|
|
set inspect-all disable
|
|
set proxy-after-tcp-handshake disable
|
|
set options splice
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
end
|
|
config ssh
|
|
unset options
|
|
set comfort-interval 10
|
|
set comfort-amount 1
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set stream-based-uncompressed-limit 0
|
|
set scan-bzip2 enable
|
|
set tcp-window-type auto-tuning
|
|
set ssl-offloaded no
|
|
end
|
|
config dns
|
|
set ports 53
|
|
set status enable
|
|
end
|
|
config cifs
|
|
set ports 445
|
|
set status enable
|
|
unset options
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
set tcp-window-type auto-tuning
|
|
set server-credential-type none
|
|
end
|
|
config mail-signature
|
|
set status disable
|
|
set signature ''
|
|
end
|
|
set rpc-over-http disable
|
|
next
|
|
edit "IC-CLOUD"
|
|
set comment ''
|
|
set replacemsg-group ''
|
|
set oversize-log enable
|
|
set switching-protocols-log disable
|
|
config http
|
|
set ports 80
|
|
set status enable
|
|
set inspect-all disable
|
|
set proxy-after-tcp-handshake disable
|
|
unset options
|
|
set comfort-interval 10
|
|
set comfort-amount 1
|
|
set range-block disable
|
|
set strip-x-forwarded-for disable
|
|
unset post-lang
|
|
set streaming-content-bypass enable
|
|
set switching-protocols bypass
|
|
set unknown-http-version reject
|
|
set tunnel-non-http enable
|
|
set h2c disable
|
|
set unknown-content-encoding block
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set stream-based-uncompressed-limit 0
|
|
set scan-bzip2 enable
|
|
set verify-dns-for-policy-matching enable
|
|
set block-page-status-code 403
|
|
set retry-count 0
|
|
set tcp-window-type auto-tuning
|
|
set ssl-offloaded no
|
|
set address-ip-rating enable
|
|
end
|
|
config ftp
|
|
set ports 21
|
|
set status enable
|
|
set inspect-all disable
|
|
set options splice
|
|
set comfort-interval 10
|
|
set comfort-amount 1
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set stream-based-uncompressed-limit 0
|
|
set scan-bzip2 enable
|
|
set tcp-window-type auto-tuning
|
|
set ssl-offloaded no
|
|
set explicit-ftp-tls disable
|
|
end
|
|
config imap
|
|
set ports 143
|
|
set status enable
|
|
set inspect-all disable
|
|
set proxy-after-tcp-handshake disable
|
|
set options fragmail
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
set ssl-offloaded no
|
|
end
|
|
config mapi
|
|
set ports 135
|
|
set status enable
|
|
set options fragmail
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
end
|
|
config pop3
|
|
set ports 110
|
|
set status enable
|
|
set inspect-all disable
|
|
set proxy-after-tcp-handshake disable
|
|
set options fragmail
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
set ssl-offloaded no
|
|
end
|
|
config smtp
|
|
set status enable
|
|
set inspect-all enable
|
|
set options fragmail splice
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
set server-busy disable
|
|
set ssl-offloaded no
|
|
end
|
|
config nntp
|
|
set status enable
|
|
set inspect-all enable
|
|
set options splice
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
end
|
|
config ssh
|
|
unset options
|
|
set comfort-interval 10
|
|
set comfort-amount 1
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set stream-based-uncompressed-limit 0
|
|
set scan-bzip2 enable
|
|
set tcp-window-type auto-tuning
|
|
set ssl-offloaded no
|
|
end
|
|
config dns
|
|
set ports 53
|
|
set status enable
|
|
end
|
|
config cifs
|
|
set ports 445
|
|
set status enable
|
|
unset options
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
set tcp-window-type auto-tuning
|
|
set server-credential-type none
|
|
end
|
|
config mail-signature
|
|
set status disable
|
|
set signature ''
|
|
end
|
|
set rpc-over-http disable
|
|
next
|
|
end
|
|
config firewall ssl-ssh-profile
|
|
edit "no-inspection"
|
|
set comment "Read-only profile that does no inspection."
|
|
config ssl
|
|
set inspect-all disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config https
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set sni-server-cert-check enable
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config ftps
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config imaps
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config pop3s
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config smtps
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config ssh
|
|
set ports 22
|
|
set status disable
|
|
set inspect-all disable
|
|
set unsupported-version bypass
|
|
set ssh-tun-policy-check disable
|
|
set ssh-algorithm compatible
|
|
end
|
|
config dot
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
set block-blocklisted-certificates enable
|
|
set caname "Fortinet_CA_SSL"
|
|
set ssl-anomaly-log enable
|
|
set ssl-negotiation-log disable
|
|
set ssl-server-cert-log disable
|
|
set ssl-handshake-log disable
|
|
next
|
|
edit "custom-deep-inspection"
|
|
set comment "Customizable deep inspection profile."
|
|
config ssl
|
|
set inspect-all disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config https
|
|
set ports 443
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set sni-server-cert-check enable
|
|
set cert-probe-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config ftps
|
|
set ports 990
|
|
set status deep-inspection
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config imaps
|
|
set ports 993
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config pop3s
|
|
set ports 995
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config smtps
|
|
set ports 465
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config ssh
|
|
set ports 22
|
|
set status disable
|
|
set inspect-all disable
|
|
set unsupported-version bypass
|
|
set ssh-tun-policy-check disable
|
|
set ssh-algorithm compatible
|
|
end
|
|
config dot
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
set allowlist disable
|
|
set block-blocklisted-certificates enable
|
|
config ssl-exempt
|
|
edit 1
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-adobe"
|
|
next
|
|
edit 2
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-Adobe Login"
|
|
next
|
|
edit 3
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-android"
|
|
next
|
|
edit 4
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-apple"
|
|
next
|
|
edit 5
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-appstore"
|
|
next
|
|
edit 6
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-auth.gfx.ms"
|
|
next
|
|
edit 7
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-autoupdate.opera.com"
|
|
next
|
|
edit 8
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-citrix"
|
|
next
|
|
edit 9
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-dropbox.com"
|
|
next
|
|
edit 10
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-eease"
|
|
next
|
|
edit 11
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-firefox update server"
|
|
next
|
|
edit 12
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-fortinet"
|
|
next
|
|
edit 13
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-drive"
|
|
next
|
|
edit 14
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-play"
|
|
next
|
|
edit 15
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-play2"
|
|
next
|
|
edit 16
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-play3"
|
|
next
|
|
edit 17
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-googleapis.com"
|
|
next
|
|
edit 18
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-Gotomeeting"
|
|
next
|
|
edit 19
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-icloud"
|
|
next
|
|
edit 20
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-itunes"
|
|
next
|
|
edit 21
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-microsoft"
|
|
next
|
|
edit 22
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-skype"
|
|
next
|
|
edit 23
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-softwareupdate.vmware.com"
|
|
next
|
|
edit 24
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-swscan.apple.com"
|
|
next
|
|
edit 25
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-update.microsoft.com"
|
|
next
|
|
edit 26
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-verisign"
|
|
next
|
|
edit 27
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-Windows update 2"
|
|
next
|
|
edit 28
|
|
set type fortiguard-category
|
|
set fortiguard-category 31
|
|
next
|
|
edit 29
|
|
set type fortiguard-category
|
|
set fortiguard-category 33
|
|
next
|
|
edit 30
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-cdn-apple"
|
|
next
|
|
edit 31
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-mzstatic-apple"
|
|
next
|
|
end
|
|
set server-cert-mode re-sign
|
|
set caname "Fortinet_CA_SSL"
|
|
set untrusted-caname "Fortinet_CA_Untrusted"
|
|
set ssl-exemption-ip-rating enable
|
|
set ssl-exemption-log disable
|
|
set ssl-anomaly-log enable
|
|
set ssl-negotiation-log disable
|
|
set ssl-server-cert-log disable
|
|
set ssl-handshake-log disable
|
|
set rpc-over-https disable
|
|
set mapi-over-https disable
|
|
set supported-alpn all
|
|
set use-ssl-server disable
|
|
next
|
|
edit "certificate-inspection"
|
|
set comment "Read-only SSL handshake inspection profile."
|
|
config ssl
|
|
set inspect-all disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config https
|
|
set ports 443
|
|
set status certificate-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set sni-server-cert-check enable
|
|
set cert-probe-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config ftps
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config imaps
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config pop3s
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config smtps
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config ssh
|
|
set ports 22
|
|
set status disable
|
|
set inspect-all disable
|
|
set unsupported-version bypass
|
|
set ssh-tun-policy-check disable
|
|
set ssh-algorithm compatible
|
|
end
|
|
config dot
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
set block-blocklisted-certificates enable
|
|
set caname "Fortinet_CA_SSL"
|
|
set ssl-anomaly-log enable
|
|
set ssl-negotiation-log disable
|
|
set ssl-server-cert-log disable
|
|
set ssl-handshake-log disable
|
|
next
|
|
edit "deep-inspection"
|
|
set comment "Read-only deep inspection profile."
|
|
config ssl
|
|
set inspect-all disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config https
|
|
set ports 443
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set sni-server-cert-check enable
|
|
set cert-probe-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config ftps
|
|
set ports 990
|
|
set status deep-inspection
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config imaps
|
|
set ports 993
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config pop3s
|
|
set ports 995
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config smtps
|
|
set ports 465
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config ssh
|
|
set ports 22
|
|
set status disable
|
|
set inspect-all disable
|
|
set unsupported-version bypass
|
|
set ssh-tun-policy-check disable
|
|
set ssh-algorithm compatible
|
|
end
|
|
config dot
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
set allowlist disable
|
|
set block-blocklisted-certificates enable
|
|
config ssl-exempt
|
|
edit 1
|
|
set type fortiguard-category
|
|
set fortiguard-category 31
|
|
next
|
|
edit 2
|
|
set type fortiguard-category
|
|
set fortiguard-category 33
|
|
next
|
|
edit 3
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-adobe"
|
|
next
|
|
edit 4
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-Adobe Login"
|
|
next
|
|
edit 5
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-android"
|
|
next
|
|
edit 6
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-apple"
|
|
next
|
|
edit 7
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-appstore"
|
|
next
|
|
edit 8
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-auth.gfx.ms"
|
|
next
|
|
edit 9
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-citrix"
|
|
next
|
|
edit 10
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-dropbox.com"
|
|
next
|
|
edit 11
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-eease"
|
|
next
|
|
edit 12
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-firefox update server"
|
|
next
|
|
edit 13
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-fortinet"
|
|
next
|
|
edit 14
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-googleapis.com"
|
|
next
|
|
edit 15
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-drive"
|
|
next
|
|
edit 16
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-play2"
|
|
next
|
|
edit 17
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-play3"
|
|
next
|
|
edit 18
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-Gotomeeting"
|
|
next
|
|
edit 19
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-icloud"
|
|
next
|
|
edit 20
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-itunes"
|
|
next
|
|
edit 21
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-microsoft"
|
|
next
|
|
edit 22
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-skype"
|
|
next
|
|
edit 23
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-softwareupdate.vmware.com"
|
|
next
|
|
edit 24
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-verisign"
|
|
next
|
|
edit 25
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-Windows update 2"
|
|
next
|
|
edit 26
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-live.com"
|
|
next
|
|
edit 27
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-play"
|
|
next
|
|
edit 28
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-update.microsoft.com"
|
|
next
|
|
edit 29
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-swscan.apple.com"
|
|
next
|
|
edit 30
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-autoupdate.opera.com"
|
|
next
|
|
edit 31
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-cdn-apple"
|
|
next
|
|
edit 32
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-mzstatic-apple"
|
|
next
|
|
end
|
|
set server-cert-mode re-sign
|
|
set caname "Fortinet_CA_SSL"
|
|
set untrusted-caname "Fortinet_CA_Untrusted"
|
|
set ssl-exemption-ip-rating enable
|
|
set ssl-exemption-log disable
|
|
set ssl-anomaly-log enable
|
|
set ssl-negotiation-log disable
|
|
set ssl-server-cert-log disable
|
|
set ssl-handshake-log disable
|
|
set rpc-over-https disable
|
|
set mapi-over-https disable
|
|
set supported-alpn all
|
|
set use-ssl-server disable
|
|
next
|
|
edit "Certificate-Inspection-W/O-Expired-"
|
|
set comment "This is a security Profile for allowing Expired Inspection"
|
|
config ssl
|
|
set inspect-all disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config https
|
|
set ports 443
|
|
set status certificate-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert allow
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure allow
|
|
set sni-server-cert-check enable
|
|
set cert-probe-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config ftps
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert allow
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure allow
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config imaps
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert allow
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure allow
|
|
end
|
|
config pop3s
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert allow
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure allow
|
|
end
|
|
config smtps
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert allow
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure allow
|
|
end
|
|
config ssh
|
|
set ports 22
|
|
set status disable
|
|
set inspect-all disable
|
|
set unsupported-version bypass
|
|
set ssh-tun-policy-check disable
|
|
set ssh-algorithm compatible
|
|
end
|
|
config dot
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert allow
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure allow
|
|
end
|
|
set block-blocklisted-certificates disable
|
|
set caname "Fortinet_CA_SSL"
|
|
set ssl-anomaly-log enable
|
|
set ssl-negotiation-log disable
|
|
set ssl-server-cert-log disable
|
|
set ssl-handshake-log disable
|
|
next
|
|
edit "Bypass-SSL-Inspector-Novotel"
|
|
set comment "Bypass-SSL-Profile to bypass expired certificate"
|
|
config ssl
|
|
set inspect-all disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config https
|
|
set ports 443
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert allow
|
|
set revoked-server-cert allow
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure allow
|
|
set sni-server-cert-check disable
|
|
set cert-probe-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config ftps
|
|
set ports 990
|
|
set status deep-inspection
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert allow
|
|
set revoked-server-cert allow
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure allow
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config imaps
|
|
set ports 993
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert allow
|
|
set revoked-server-cert allow
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure allow
|
|
end
|
|
config pop3s
|
|
set ports 995
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert allow
|
|
set revoked-server-cert allow
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure allow
|
|
end
|
|
config smtps
|
|
set ports 465
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert allow
|
|
set revoked-server-cert allow
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure allow
|
|
end
|
|
config ssh
|
|
set ports 22
|
|
set status disable
|
|
set inspect-all disable
|
|
set unsupported-version bypass
|
|
set ssh-tun-policy-check disable
|
|
set ssh-algorithm compatible
|
|
end
|
|
config dot
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert allow
|
|
set revoked-server-cert allow
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure allow
|
|
end
|
|
set allowlist disable
|
|
set block-blocklisted-certificates disable
|
|
config ssl-exempt
|
|
edit 1
|
|
set type fortiguard-category
|
|
set fortiguard-category 31
|
|
next
|
|
edit 2
|
|
set type fortiguard-category
|
|
set fortiguard-category 33
|
|
next
|
|
edit 3
|
|
set type fortiguard-category
|
|
set fortiguard-category 87
|
|
next
|
|
end
|
|
set server-cert-mode re-sign
|
|
set caname "Fortinet_CA_SSL"
|
|
set untrusted-caname "Fortinet_CA_Untrusted"
|
|
set ssl-exemption-ip-rating enable
|
|
set ssl-exemption-log enable
|
|
set ssl-anomaly-log enable
|
|
set ssl-negotiation-log disable
|
|
set ssl-server-cert-log disable
|
|
set ssl-handshake-log disable
|
|
set rpc-over-https disable
|
|
set mapi-over-https disable
|
|
set supported-alpn all
|
|
set use-ssl-server disable
|
|
next
|
|
end
|
|
config waf profile
|
|
edit "default"
|
|
set external disable
|
|
set extended-log disable
|
|
config signature
|
|
config main-class 100000000
|
|
set status disable
|
|
set action block
|
|
set log disable
|
|
set severity high
|
|
end
|
|
config main-class 20000000
|
|
set status disable
|
|
set action allow
|
|
set log disable
|
|
set severity medium
|
|
end
|
|
config main-class 30000000
|
|
set status enable
|
|
set action block
|
|
set log disable
|
|
set severity high
|
|
end
|
|
config main-class 40000000
|
|
set status disable
|
|
set action allow
|
|
set log disable
|
|
set severity medium
|
|
end
|
|
config main-class 50000000
|
|
set status enable
|
|
set action block
|
|
set log disable
|
|
set severity high
|
|
end
|
|
config main-class 60000000
|
|
set status disable
|
|
set action allow
|
|
set log disable
|
|
set severity medium
|
|
end
|
|
config main-class 70000000
|
|
set status enable
|
|
set action block
|
|
set log disable
|
|
set severity high
|
|
end
|
|
config main-class 80000000
|
|
set status enable
|
|
set action allow
|
|
set log disable
|
|
set severity low
|
|
end
|
|
config main-class 110000000
|
|
set status enable
|
|
set action allow
|
|
set log disable
|
|
set severity high
|
|
end
|
|
config main-class 90000000
|
|
set status enable
|
|
set action block
|
|
set log disable
|
|
set severity high
|
|
end
|
|
set disabled-signature 80080005 80200001 60030001 60120001 80080003 90410001 90410002
|
|
set credit-card-detection-threshold 3
|
|
end
|
|
config constraint
|
|
config header-length
|
|
set status enable
|
|
set length 8192
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config content-length
|
|
set status enable
|
|
set length 67108864
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config param-length
|
|
set status enable
|
|
set length 8192
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config line-length
|
|
set status enable
|
|
set length 1024
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config url-param-length
|
|
set status enable
|
|
set length 8192
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config version
|
|
set status disable
|
|
set action allow
|
|
set log enable
|
|
set severity medium
|
|
end
|
|
config method
|
|
set status disable
|
|
set action block
|
|
set log enable
|
|
set severity medium
|
|
end
|
|
config hostname
|
|
set status disable
|
|
set action block
|
|
set log enable
|
|
set severity medium
|
|
end
|
|
config malformed
|
|
set status disable
|
|
set action allow
|
|
set log enable
|
|
set severity medium
|
|
end
|
|
config max-cookie
|
|
set status enable
|
|
set max-cookie 16
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config max-header-line
|
|
set status enable
|
|
set max-header-line 32
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config max-url-param
|
|
set status enable
|
|
set max-url-param 16
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config max-range-segment
|
|
set status enable
|
|
set max-range-segment 5
|
|
set action allow
|
|
set log enable
|
|
set severity high
|
|
end
|
|
end
|
|
config method
|
|
set status disable
|
|
set log disable
|
|
set severity medium
|
|
unset default-allowed-methods
|
|
end
|
|
config address-list
|
|
set status disable
|
|
set blocked-log disable
|
|
set severity medium
|
|
end
|
|
set comment ''
|
|
next
|
|
edit "IC-CLOUD-WAF"
|
|
set external disable
|
|
set extended-log disable
|
|
config signature
|
|
config main-class 10000000
|
|
set status enable
|
|
set action allow
|
|
set log enable
|
|
set severity medium
|
|
end
|
|
config main-class 20000000
|
|
set status enable
|
|
set action allow
|
|
set log enable
|
|
set severity medium
|
|
end
|
|
config main-class 30000000
|
|
set status enable
|
|
set action allow
|
|
set log enable
|
|
set severity high
|
|
end
|
|
config main-class 40000000
|
|
set status enable
|
|
set action allow
|
|
set log enable
|
|
set severity medium
|
|
end
|
|
config main-class 50000000
|
|
set status enable
|
|
set action allow
|
|
set log enable
|
|
set severity high
|
|
end
|
|
config main-class 60000000
|
|
set status enable
|
|
set action allow
|
|
set log enable
|
|
set severity medium
|
|
end
|
|
config main-class 70000000
|
|
set status enable
|
|
set action allow
|
|
set log enable
|
|
set severity high
|
|
end
|
|
config main-class 80000000
|
|
set status disable
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config main-class 90000000
|
|
set status enable
|
|
set action allow
|
|
set log enable
|
|
set severity high
|
|
end
|
|
config main-class 100000000
|
|
set status enable
|
|
set action allow
|
|
set log enable
|
|
set severity high
|
|
end
|
|
config main-class 110000000
|
|
set status enable
|
|
set action allow
|
|
set log enable
|
|
set severity high
|
|
end
|
|
set disabled-signature 80080005 80200001 60030001 60120001 80080003 90410001 90410002
|
|
set credit-card-detection-threshold 3
|
|
end
|
|
config constraint
|
|
config header-length
|
|
set status enable
|
|
set length 8192
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config content-length
|
|
set status enable
|
|
set length 67108864
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config param-length
|
|
set status enable
|
|
set length 8192
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config line-length
|
|
set status disable
|
|
set length 32
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config url-param-length
|
|
set status enable
|
|
set length 8192
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config version
|
|
set status enable
|
|
set action allow
|
|
set log enable
|
|
set severity medium
|
|
end
|
|
config method
|
|
set status enable
|
|
set action allow
|
|
set log enable
|
|
set severity medium
|
|
end
|
|
config hostname
|
|
set status enable
|
|
set action allow
|
|
set log enable
|
|
set severity medium
|
|
end
|
|
config malformed
|
|
set status enable
|
|
set action allow
|
|
set log enable
|
|
set severity medium
|
|
end
|
|
config max-cookie
|
|
set status enable
|
|
set max-cookie 16
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config max-header-line
|
|
set status enable
|
|
set max-header-line 32
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config max-url-param
|
|
set status enable
|
|
set max-url-param 16
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config max-range-segment
|
|
set status enable
|
|
set max-range-segment 5
|
|
set action allow
|
|
set log enable
|
|
set severity high
|
|
end
|
|
end
|
|
config method
|
|
set status disable
|
|
set log disable
|
|
set severity medium
|
|
unset default-allowed-methods
|
|
end
|
|
config address-list
|
|
set status disable
|
|
set blocked-log disable
|
|
set severity medium
|
|
end
|
|
set comment ''
|
|
next
|
|
end
|
|
config firewall profile-group
|
|
end
|
|
config firewall ssl-server
|
|
end
|
|
config firewall identity-based-route
|
|
end
|
|
config firewall auth-portal
|
|
set portal-addr ''
|
|
set portal-addr6 ''
|
|
set identity-based-route ''
|
|
set proxy-auth disable
|
|
end
|
|
config firewall policy
|
|
edit 254
|
|
set status disable
|
|
set name "Test"
|
|
set uuid f8619558-9dcd-51f0-1f9b-cdd1637376d5
|
|
set srcintf "port37" "port38" "WAN-1.1826" "WAN-2.834" "port3" "port26"
|
|
set dstintf "port37" "port38" "WAN-1.1826" "WAN-2.834" "port3" "port26"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Novotel-Exchange-IP"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 256
|
|
set status disable
|
|
set name "Test-Rev"
|
|
set uuid 77ece182-dbff-51f0-e9d4-eb474840fbb4
|
|
set srcintf "port37" "port38" "WAN-1.1826" "WAN-2.834" "port3"
|
|
set dstintf "port37" "port38" "WAN-1.1826" "WAN-2.834" "port3"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "hdvoip05"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments " (Copy of Test) (Reverse of Test)"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 252
|
|
set status enable
|
|
set name "Test-2-Toku"
|
|
set uuid aa54aaca-976b-51f0-e2b1-7e8a2dbf4e15
|
|
set srcintf "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Toku-VIP-36.255.69.100"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments " (Copy of Test)"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 251
|
|
set status enable
|
|
set name "Temporary-Rule-IPTSP-Push-3"
|
|
set uuid 52a7fb4c-976b-51f0-c924-f3b3b2af31aa
|
|
set srcintf "any"
|
|
set dstintf "any"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "hdstrm04"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 253
|
|
set status enable
|
|
set name "Temporary-Block-push-3"
|
|
set uuid 49c1e448-9928-51f0-c55f-dc18c3c6f4ce
|
|
set srcintf "any"
|
|
set dstintf "any"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "hdstrm04"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip enable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments " (Copy of Temporary-Rule-IPTSP-Push-3)"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 250
|
|
set status enable
|
|
set name "Novotel-203.208.207.37"
|
|
set uuid 6e0341c0-8ca4-51f0-d048-45bb3da81d0b
|
|
set srcintf "any"
|
|
set dstintf "any"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Novotel_office_IP_103.248.13.66"
|
|
set dstaddr "Brilliant-C3-SingTel-Rivate-IP-Block_203.208.207.32/29"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "For HTTPS Connectivity"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 249
|
|
set status enable
|
|
set name "Session Limit"
|
|
set uuid 181daee4-761f-51f0-b917-d64b0d748c97
|
|
set srcintf "any"
|
|
set dstintf "any"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "LAUGH-GAS-VM"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 247
|
|
set status enable
|
|
set name "NovoTel-CDR-PUSH"
|
|
set uuid d44457ae-684f-51f0-7d95-5792d40bf388
|
|
set srcintf "any"
|
|
set dstintf "any"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Catalyeya-VIOS-SBC-MGT-NovoTel" "Novotel CDR server_118.67.215.149" "Novotel_CDR_Server_203.208.207.16/29" "NVTEL_Q21_CDR_192.168.8.64" "Novotel_New_CDR_DB_118.67.215.173" "Admin-Access-7-PPTP" "Novotel_office_IP_103.248.13.66" "BICX-CDR" "Q21_Node_1_IP" "Q21_node_2-IP" "Q21_Node_Gateway_NV1SR3" "Kaplan-MNP-02-Brilliant" "Novotel-Exchange-IP"
|
|
set dstaddr "Catalyeya-VIOS-SBC-MGT-NovoTel" "Novotel CDR server_118.67.215.149" "Novotel_CDR_Server_203.208.207.16/29" "NVTEL_Q21_CDR_192.168.8.64" "Novotel_New_CDR_DB_118.67.215.173" "Admin-Access-7-PPTP" "Novotel_office_IP_103.248.13.66" "BICX-CDR" "Q21_Node_1_IP" "Q21_node_2-IP" "Q21_Node_Gateway_NV1SR3" "Kaplan-MNP-02-Brilliant" "Novotel-Exchange-IP"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 246
|
|
set status enable
|
|
set name "Controller IP Access"
|
|
set uuid d5580d46-65f4-51f0-bbe5-a1d24f84e6df
|
|
set srcintf "any"
|
|
set dstintf "any"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Admin-Access-7-PPTP"
|
|
set dstaddr "Controller_IP"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Custom-SSH-Port-58923"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments " (Copy of Controller SSH Access)"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 245
|
|
set status enable
|
|
set name "Controller SSH Block"
|
|
set uuid ce84e58a-65f3-51f0-f4b0-03abfd5c8744
|
|
set srcintf "any"
|
|
set dstintf "any"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Controller_IP"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Custom-SSH-Port-58923"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip enable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 241
|
|
set status enable
|
|
set name "Block-Blacklisted-IP-Destination"
|
|
set uuid 8a207c12-2b31-51f0-9c7e-0a039d9e41dd
|
|
set srcintf "any"
|
|
set dstintf "any"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Blacklisted IP"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip enable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 240
|
|
set status enable
|
|
set name "Block-Blacklisted-IP-Source"
|
|
set uuid 574fd3c8-2b31-51f0-4a18-670c7e484439
|
|
set srcintf "any"
|
|
set dstintf "any"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "Blacklisted IP"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip enable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 239
|
|
set status enable
|
|
set name "SNMP"
|
|
set uuid 5f49c71a-2969-51f0-77aa-e9d58039b2e7
|
|
set srcintf "port38" "port37" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Democracy1_36.255.70.84" "Democracy2_36.255.71.17" "Democracy3_36.255.68.233" "Quantic-Dynamics-103.209.40.157" "Quantic-Dynamics-103.209.40.162" "Quantic-Dynamics-103.209.40.166" "Quantic-Dynamics-103.209.40.177" "Quantic-Dynamics-103.209.40.180" "Quantic-Dynamics-103.209.40.212" "Quantic-Dynamics-103.209.40.217" "Quantic-Dynamics-103.209.40.234" "Quantic-Dynamics-103.209.40.250" "Quantic-Dynamics-103.209.41.15"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 238
|
|
set status enable
|
|
set name "GPU-Server"
|
|
set uuid 2c1ae6ba-25d8-51f0-4119-7036a6ec3ff2
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port37" "port38"
|
|
set dstintf "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "GPU-Commercial-Prefix"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic utm
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 234
|
|
set status enable
|
|
set name "Policy-For-New-Signalling-Server-1"
|
|
set uuid 6efef184-19e3-51f0-69b6-af03e0b5383b
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834" "port37" "port38"
|
|
set dstintf "port37" "port38" "port26" "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Signalling_Server_212.133.75.34" "Signalling_Server_212.133.75.35" "hdstrm01" "New-Signaling-Server-1" "Signaling-Server-1"
|
|
set dstaddr "Signaling-Server-1" "New-Signaling-Server-1" "hdstrm01" "Signalling_Server_212.133.75.34" "Signalling_Server_212.133.75.35"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments " (Copy of Brilliant-New-Signaling-Allow-Trust)"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 231
|
|
set status enable
|
|
set name "NovoTel-Policy-For-SMS-Expired-SSL"
|
|
set uuid 2613a8f2-07f0-51f0-4057-e54b44384e59
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Novotel-Desktop-VM-103.209.42.202" "Novotel-Desktop-VM-103.209.43.175" "Novotel-Desktop-VM-103.209.43.66" "Novotel-Desktop-VM-103.209.43.239" "Novotel-Desktop-VM-103.209.42.126"
|
|
set dstaddr "NovoCom_SBC_platform"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "Bypass-SSL-Inspector-Novotel"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set decrypted-traffic-mirror ''
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 228
|
|
set status enable
|
|
set name "Temp-Cpanel-New"
|
|
set uuid e7089dd2-f9c3-51ef-e626-42d97c05a7b4
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port21" "port23"
|
|
set dstintf "WAN-1.1826" "WAN-2.834" "port21" "port23" "port33"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "cPanel-2nd_IP_BLOCK"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 229
|
|
set status enable
|
|
set name "Temp-Cpanel-New-Reverse"
|
|
set uuid 10029dfa-f9c4-51ef-6e5e-6b14a970d1b7
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port21" "port23"
|
|
set dstintf "WAN-1.1826" "WAN-2.834" "port21" "port23"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "cPanel-2nd_IP_BLOCK"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments " (Copy of VPS-Temp) (Reverse of VPS-Temp)"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 226
|
|
set status disable
|
|
set name "B2M"
|
|
set uuid da5f852e-f9ae-51ef-a5cc-905cb0ed0a64
|
|
set srcintf "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "B2M"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic utm
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 227
|
|
set status disable
|
|
set name "B2M-REV"
|
|
set uuid 01ffff1e-f9af-51ef-55db-1f3527231567
|
|
set srcintf "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "B2M"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic utm
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments " (Copy of B2M) (Reverse of B2M)"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 230
|
|
set status enable
|
|
set name "Client-Policy-FriendShip-NGO"
|
|
set uuid 670dea16-02e1-51f0-f16f-2818f1598f04
|
|
set srcintf "port33" "WAN-1.1826" "WAN-2.834" "port37" "port38"
|
|
set dstintf "port33" "WAN-1.1826" "WAN-2.834" "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Friendshif-NGO-Address-Group"
|
|
set dstaddr "Friendshif-NGO-Address-Group"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "FriendShip-NGO-Service-Group"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode flow
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "certificate-inspection"
|
|
set av-profile "g-default"
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor "IPS-IC-CLOUD"
|
|
set application-list ''
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 225
|
|
set status enable
|
|
set name "CEO-Sir-IP-Cam-Flow"
|
|
set uuid 6336f222-f727-51ef-03b4-c1ab1357d9ca
|
|
set srcintf "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Novotel_office_IP_103.248.13.66" "IP_CAM_FTP_FOR_CEO_SIR" "CEO_SIR_IPCAM_103.23.40.46"
|
|
set dstaddr "IP_CAM_FTP_FOR_CEO_SIR" "Novotel_office_IP_103.248.13.66"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode flow
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "certificate-inspection"
|
|
set av-profile "g-default"
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor "IPS-IC-CLOUD"
|
|
set application-list ''
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 220
|
|
set status enable
|
|
set name "Autonemo-HTTPS-Test Policy"
|
|
set uuid 3d497cfa-ee9a-51ef-c6d4-651b00bb0a65
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Autonemo-VM-1"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "HTTPS"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode flow
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "certificate-inspection"
|
|
set av-profile "g-default"
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor "IPS-IC-CLOUD"
|
|
set application-list ''
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 219
|
|
set status disable
|
|
set name "Cpanel"
|
|
set uuid ac190a68-d263-51ef-d33d-b03c0e48e557
|
|
set srcintf "port21" "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port21" "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "cPanel-Clusture-and-DNS"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic utm
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 210
|
|
set status enable
|
|
set name "grafana_allow"
|
|
set uuid e486796a-16a4-51ef-0bc6-2587be2699cd
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set ztna-status disable
|
|
set srcaddr "idrac-public-IP"
|
|
set dstaddr "Monasca-HAProxy" "Monasca-Master-node"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic utm
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat enable
|
|
set permit-any-host disable
|
|
set permit-stun-host disable
|
|
set fixedport disable
|
|
set ippool disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 207
|
|
set status enable
|
|
set name "Green-Delta-Allow-List"
|
|
set uuid e5b1b518-0dd8-51ef-a752-9dec502b0b3b
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Green-Delta-IP-list" "green-delta-VM-9_36.255.68.173" "3s-software-VM-03-103.209.41.42" "Toku"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload disable
|
|
set np-acceleration disable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 115
|
|
set status disable
|
|
set name "Purple-Patch-Wizard-All-Allow-IN"
|
|
set uuid 01072998-2ee3-51eb-3d46-136c5a56c421
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "purple-patch-wizard-New-IP-GRP"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 126
|
|
set status disable
|
|
set name "Purple-patch-wizard-all-allow-out"
|
|
set uuid 25f4c152-2ee3-51eb-903b-91890923c438
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "purple-patch-wizard-New-IP-GRP"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 202
|
|
set status disable
|
|
set name "mahfuz_test_rule"
|
|
set uuid 5afaaba2-e767-51ed-2fd6-79a2778d23b4
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Admin-Access-6" "mahfuz_access_list" "Admin-Access-8-Cloud-MKT"
|
|
set dstaddr "mahfuz_ip"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SSH" "ALL_ICMP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic utm
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 206
|
|
set status disable
|
|
set name "mahfuz_test_rule-deny"
|
|
set uuid 345940ea-ce1f-51ee-9652-71391780f807
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "mahfuz_ip"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SSH" "ALL_ICMP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of mahfuz_test_rule"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 128
|
|
set status disable
|
|
set name "Purple-Patch-Wizard-All-Allow-HTTPS"
|
|
set uuid 2b11f0de-3eaf-51eb-ed00-ee53f130efa8
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "purple-patch-wizard-New-IP-GRP"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "HTTPS"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of Purple-Patch-Wizard-All-Allow-IN"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 3
|
|
set status enable
|
|
set name "ADMIN-ACCESS"
|
|
set uuid 95e95772-2511-51e8-5e24-543e7f5477cc
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port37" "port38"
|
|
set dstintf "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "ADMIN-ACCESS-GRP"
|
|
set dstaddr "CLOUD-IP-1" "BRILLIANT-ZIMBRA" "SaaS-BLOCK" "Openstack-Rocky-Infra-Block" "STAAS-Server-IP" "Openstack-Rocky-Infra-Block-2"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "FTP" "PORT-7493" "SSH" "TELNET" "openstack-rocky-SSH-Port" "RabbitMQ-Port" "custom-ssh-seafile" "openstack-vnc-6080"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 203
|
|
set status disable
|
|
set name "Novotel-FTP-allow"
|
|
set uuid 52bdcc1e-efb2-51ed-c05e-0570adee1d8d
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Novotel-NAT-IP" "novotel-pfsense"
|
|
set dstaddr "Novotel-end-IP-for-IPSEC" "Novotel-NAT-IP"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "FTP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of Media Soft FTP allow"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 194
|
|
set status enable
|
|
set name "FTP allow"
|
|
set uuid 524eadd8-7b91-51ed-0dc7-cef8cfdae360
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Media_Soft_Allowed_IP_123.136.26.210" "Toku-FTP-Remote" "Novotel CDR server_118.67.215.149"
|
|
set dstaddr "Media_Soft_IP_36.255.70.223" "Toku-FTP-IP" "Novotel_office_IP_103.248.13.66" "Intercloud SMS Server-118.67.222.107"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "FTP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of ADMIN-ACCESS"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 196
|
|
set status enable
|
|
set name "FTP-allow- reverse"
|
|
set uuid 7a896552-7b93-51ed-5811-94f899a38f09
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Media_Soft_IP_36.255.70.223" "Toku-FTP-IP" "Novotel CDR server_118.67.215.149"
|
|
set dstaddr "Media_Soft_Allowed_IP_123.136.26.210" "Toku-FTP-Remote" "Novotel_office_IP_103.248.13.66" "Intercloud SMS Server-118.67.222.107"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "FTP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of Media Soft FTP allow"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 74
|
|
set status enable
|
|
set name "Blacklist-malware-IP"
|
|
set uuid adfede48-55f9-51ea-e97c-c8d22d40c3b0
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "ENZUINC-US-Block" "HTTP-Attaker2-Subnet-block" "HTTP-Attaker3" "Attacker-IP-5" "Attacker-ip-7" "Attacker-IP-10" "Attacker-IP-6" "AttackerIP-4" "attacker12" "Attacker IP Group" "SMTP-attack" "RDP-Attacker" "SMTP_Attacker" "attacker-35" "Attacker-36" "Attacker-39" "Attacker-40" "Attacker-41" "Attacker-42" "Attacker-43" "Attacker-44" "attacker-45-ftp-htp" "Attacker-46-http-ftp" "Attacker_IP_46" "FTP_Attack-1" "attacker-ip-79.124.62.126"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 213
|
|
set status enable
|
|
set name "Blacklist-malware-IP-Dst"
|
|
set uuid 905ee49a-9b69-51ef-b5d2-ad7ef3977cad
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-1.1826" "WAN-2.834"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "network-worm-01" "network-worm-02" "network-worm-03" "network-worm-04" "network-worm-05" "network-worm-06" "network-worm-07" "network-worm-08" "network-worm-09"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 4
|
|
set status enable
|
|
set name "ADMIN-ACCESS-DENY"
|
|
set uuid 095be328-2512-51e8-3bc9-aa3ec1eba456
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "CLOUD-IP-1" "BRILLIANT-ZIMBRA" "SaaS-BLOCK" "Openstack-Rocky-Infra-Block" "STAAS-Server-IP" "Openstack-Rocky-Infra-Block-2"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "FTP" "PORT-7493" "SSH" "TELNET" "openstack-rocky-SSH-Port" "RabbitMQ-Port" "custom-ssh-seafile"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 65
|
|
set status enable
|
|
set name "RDP-For-Paragon"
|
|
set uuid 4f171f4c-fe30-51e9-62f5-6a6949c4aa88
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "paragon-source"
|
|
set dstaddr "paragon-destination"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 47
|
|
set status enable
|
|
set name "Red-Hat-Dashboard-Allow"
|
|
set uuid c70a9884-c4ac-51e9-18e2-80c06dad8410
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "ADMIN-ACCESS-GRP"
|
|
set dstaddr "Red-Hat-Cloud-Dashboard"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "HTTP" "HTTPS"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 48
|
|
set status enable
|
|
set name "Red-Hat-Dashboard-Deny"
|
|
set uuid e27b4640-c4ac-51e9-0c3d-74aa6c9eaf3b
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Red-Hat-Cloud-Dashboard"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "HTTP" "HTTPS"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 98
|
|
set status enable
|
|
set name "Openstack-VNC-publicly-Allow"
|
|
set uuid b7fd1514-5ea4-51ea-9c5e-0599fe9e0dea
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "openstack-haproxy-vip"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "openstack-vnc-6080"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 99
|
|
set status enable
|
|
set name "Openstack-Keystone-allow"
|
|
set uuid 3bd529ea-5ea9-51ea-e482-863f0975ffac
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Novotel-NAT-IP" "ic-mrtg" "Admin-Access-7-PPTP"
|
|
set dstaddr "openstack-haproxy-ip-group"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 95
|
|
set status enable
|
|
set name "Openstack-Public-IP-All-Allow"
|
|
set uuid 661bd0b0-57b4-51ea-02ba-6f21bd0df4ae
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "ADMIN-ACCESS-GRP"
|
|
set dstaddr "Openstack-New-Cloud-Nodes"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 96
|
|
set status enable
|
|
set name "Openstack-Public-IP-All-Deny"
|
|
set uuid d4dbece2-57b4-51ea-20d1-3a5f309dbd38
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Openstack-New-Cloud-Nodes" "openstack-haproxy-ip-group"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 19
|
|
set status enable
|
|
set name "Allow-SMTP-for-Brlliant-Mail"
|
|
set uuid 0d3836d0-f164-51e8-6fc2-f853afcde67b
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "MailBorder-v5" "Admin-Access-7-PPTP" "AirShip-RTR-IP"
|
|
set dstaddr "BRILLIANT-ZIMBRA-MTA-NEW" "smtp.brilliant.com.bd" "Novoair-mail-server1" "Novotel-Mail-server-2"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SMTP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 170
|
|
set status enable
|
|
set name "Mailborder to NovotelExchange_Allow"
|
|
set uuid eab35232-371c-51ec-bae8-0d3e9f941f15
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Mailborder-IP-IN-Cloud"
|
|
set dstaddr "NovoTel-Exchange-1" "NovoTel-Exchange-2"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SMTP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of Novotel-Exchange-444-Allow"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 168
|
|
set status enable
|
|
set name "OfcExchange-brilliantMail-PortAllow"
|
|
set uuid a27d7ca0-371b-51ec-6754-b556a5aa7769
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "NovoTel-Exchange-1" "NovoTel-Exchange-2" "BRILLIANT-ZIMBRA"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "HTTPS" "IMAPS" "POP3S" "SMTPS" "tcp-587" "ALL_ICMP" "Zimbra_AdminPort" "HTTP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 20
|
|
set status enable
|
|
set name "Deny-SMTP-for-BrilliantMail-Outside"
|
|
set uuid 7df252ca-f164-51e8-4948-fc4f3362aef8
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "BRILLIANT-ZIMBRA"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SMTP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 5
|
|
set status enable
|
|
set name "ZIMBRA-REVERSE-11211"
|
|
set uuid 3d2a1e62-2680-51e8-aaeb-77ca8cb2486d
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Memcached-11211"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 6
|
|
set status enable
|
|
set name "ZIMBRA-FW"
|
|
set uuid 5ab45dbc-2680-51e8-cdda-a0755999f4a7
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-1.1826" "WAN-2.834"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Memcached-11211"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of ZIMBRA-REVERSE-11211"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 44
|
|
set status enable
|
|
set name "Commvault-Access-From-New-Cloud"
|
|
set uuid 8df4bda8-98ac-51e9-2428-3f384c47ed39
|
|
set srcintf "port37"
|
|
set dstintf "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Cloud-Floating-Network-2"
|
|
set dstaddr "COMMVAULT-INFRA"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 45
|
|
set status enable
|
|
set name "Commvault-Access-From-New-Cloud-RV"
|
|
set uuid b86f7ecc-98ae-51e9-e823-8fb8a381d51a
|
|
set srcintf "port38"
|
|
set dstintf "port37"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "COMMVAULT-INFRA"
|
|
set dstaddr "Cloud-Floating-Network-2"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 11
|
|
set status enable
|
|
set name "COMMVAULT-REMOTE-ACCESS-ALLOW"
|
|
set uuid f08457f6-b4bb-51e8-7879-47f882290029
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "ADMIN-ACCESS-GRP"
|
|
set dstaddr "COMMVAULT-INFRA" "Novotel-Exchange-IP"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "RDP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 12
|
|
set status enable
|
|
set name "COMMVAULT-REMORE-ACCESS-(DENY)"
|
|
set uuid fde6c87a-b4bb-51e8-7fa6-50d52cb9f16d
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "COMMVAULT-INFRA" "Novotel-Exchange-IP"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "RDP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "COMVAULT-DENY"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 54
|
|
set status enable
|
|
set name "Brilliant-New-HTTP-Allow-Trust"
|
|
set uuid 8363a2e8-f732-51e9-d38a-31aeabe011e1
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port26"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Brilliant Trusted IP List"
|
|
set dstaddr "hdhttp01" "hdhttp02" "hdhttp03" "hdsapi01" "hdsapi02" "loadbalancer-1_iptsp_118.67.213.119" "loadbalancer-2_iptsp_118.67.213.155"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SNMP" "SSH" "SSH-2020-IPTSP" "TCP 8080" "ALL_ICMP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 79
|
|
set status enable
|
|
set name "Brilliant-New-HTTP-Allow-ALL"
|
|
set uuid 6ea6961e-56c6-51ea-d794-608f6903dc57
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "hdhttp01" "hdhttp02" "hdhttp03" "hdsapi01" "hdsapi02" "loadbalancer-1_iptsp_118.67.213.119" "loadbalancer-2_iptsp_118.67.213.155"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "HTTP" "HTTPS"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 55
|
|
set status enable
|
|
set name "Brilliant-New-HTTP-Deny-All"
|
|
set uuid bb3aefaa-f732-51e9-442f-c0d96caf7d7f
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port26"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "hdhttp01" "hdhttp02" "hdhttp03" "hdsapi01" "hdsapi02" "loadbalancer-1_iptsp_118.67.213.119" "loadbalancer-2_iptsp_118.67.213.155"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 56
|
|
set status enable
|
|
set name "Brilliant-New-Dashboard-Allow-Trust"
|
|
set uuid f60573f8-f732-51e9-df27-3e0452365272
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port26"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Brilliant Trusted IP List" "Brilliant-IPTSP-Source-37.252.90.168"
|
|
set dstaddr "hddash01"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SNMP" "SSH" "SSH-2020-IPTSP" "HTTPS" "TCP 8080" "Brilliant-3002" "brilliant-3001" "ALL_ICMP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 173
|
|
set status disable
|
|
set name "Brilliant-New-Dashboard-Allow-UCOM"
|
|
set uuid d5877666-7215-51ec-d9a8-f8377036381a
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Brilliant-IPTSP-UCOM-IP-ACL" "Brilliant-IPTSP-GNC-Alfa-IP"
|
|
set dstaddr "hddash01"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "brilliant-3001" "Brilliant-3002" "HTTPS" "SSH-2020-IPTSP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 109
|
|
set status disable
|
|
set name "Brilliant-New-Dashboard-Allow-all"
|
|
set uuid ad1d876a-6d08-51ea-c439-24c0bc5628c5
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "hddash01"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "HTTPS"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 57
|
|
set status enable
|
|
set name "Brilliant-New-Dashboard-Deny-all"
|
|
set uuid 18afa45a-f733-51e9-7594-74ca96720c02
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port26"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "hddash01"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 58
|
|
set status enable
|
|
set name "Brilliant-New-Media-Allow-Trust"
|
|
set uuid 406b2c58-f733-51e9-95bd-a750b5cc1da5
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port26"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Brilliant Trusted IP List"
|
|
set dstaddr "Brilliant-media-proxy-group"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SNMP" "SSH" "SSH-2020-IPTSP" "ALL_ICMP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 80
|
|
set status enable
|
|
set name "Brilliant-New-Media-Allow-ALL"
|
|
set uuid 0b30cc9c-56c8-51ea-d8ab-16e634ea3f31
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Brilliant-media-proxy-group"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Brilliant-tcp-5223" "Brilliant-UDP-10K-to-all" "HTTP" "HTTPS" "Brilliant-UDP-3478"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 59
|
|
set status enable
|
|
set name "Brilliant-New-Media-Proxy-Deny-all"
|
|
set uuid 6560d742-f733-51e9-3253-4be75649b7bb
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Brilliant-media-proxy-group"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 60
|
|
set status enable
|
|
set name "Brilliant-New-VOIP-Allow-Trust"
|
|
set uuid 89d8910a-f733-51e9-2d93-757f9119c132
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port26"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Brilliant Trusted IP List" "IPTSP-source-103.248.13.68"
|
|
set dstaddr "hdvoip01" "hdvoip02" "hdvoip03" "hdvoip05" "Voip-Proxy-Test-VM" "Voip-Plugin-Test-VM"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SNMP" "SSH" "SSH-2020-IPTSP" "ALL_ICMP" "Toku-161/162-UDP" "TRACEROUTE" "Brilliant-5201"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 81
|
|
set status enable
|
|
set name "Brilliant-New-VOIP-Allow-SIP"
|
|
set uuid f2e18490-56ce-51ea-9cb7-0c54cbfaf4f1
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Porta Public-1" "Porta Public-2" "Admin-Access-6"
|
|
set dstaddr "hdvoip03" "hdvoip01" "hdvoip02" "hdvoip05" "Voip-Proxy-Test-VM" "Voip-Plugin-Test-VM"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Brilliant-UDP-10K-to-all" "Brilliant-UDP-5065"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 171
|
|
set status enable
|
|
set name "Brilliant-New-VOIP-Allow-Any"
|
|
set uuid 68f1a07e-59b2-51ec-5f48-9bdb7c97d2a0
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "hdvoip01" "hdvoip05" "hdvoip02" "Voip-Plugin-Test-VM" "Voip-Proxy-Test-VM"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Brilliant-UDP-10K-to-all"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 70
|
|
set status enable
|
|
set name "Brilliant-New-VOIP-Deny-All"
|
|
set uuid 36cf75a6-5470-51ea-c61e-491c000be4ee
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port26"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "hdvoip01" "hdvoip02" "hdvoip03" "hdvoip05" "Voip-Proxy-Test-VM" "Voip-Plugin-Test-VM"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 52
|
|
set status disable
|
|
set name "Br-New-Vendor-test-Trusted-Allow"
|
|
set uuid 98c68546-f634-51e9-f7aa-304028194905
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port26"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Brilliant Trusted IP List"
|
|
set dstaddr "DB-1-snap"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SNMP" "SSH" "SSH-2020-IPTSP" "TCP 8080" "ALL_ICMP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 82
|
|
set status disable
|
|
set name "Br-Vendor-test-SIP-Allow"
|
|
set uuid d7bb1c4a-56d2-51ea-9538-709efe9dbd9f
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Porta Public-1" "Porta Public-2"
|
|
set dstaddr "DB-1-snap"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Brilliant-UDP-10K-to-all" "Brilliant-UDP-5065"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 83
|
|
set status disable
|
|
set name "Br-Vendor-test-all-allow"
|
|
set uuid 070c2a8e-56d3-51ea-75f7-ed9665ca6d82
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "DB-1-snap"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Brilliant-tcp-5223" "Brilliant-UDP-10K-to-all" "HTTP" "HTTPS" "TCP 8080"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 53
|
|
set status disable
|
|
set name "Brilliant-Vendor-test-All-deny"
|
|
set uuid d27c89c0-f634-51e9-348e-df1b4ab8f287
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "DB-1-snap"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 76
|
|
set status enable
|
|
set name "Brilliant-New-Signaling-Allow-Trust"
|
|
set uuid 344bac64-55fb-51ea-4a18-c2e6e52c066c
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Brilliant Trusted IP List" "Admin-Access-7-PPTP"
|
|
set dstaddr "Signaling-Server-1" "Signaling-Server-2" "Signaling-Server-3" "New-Signaling-Server-1" "New-Signaling-Server-2"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SNMP" "SSH" "SSH-2020-IPTSP" "ALL_ICMP" "9090-port" "IPTSP_UDP_63546"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 84
|
|
set status enable
|
|
set name "Br-New-Signaling-Allow-AWS"
|
|
set uuid fc26f3f4-56d9-51ea-d6dd-4070bac54f03
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "AWS-IP-3-for-Brilliant-IPTSP" "IPTSP-UK-Server-1" "IPTSP-UK-Server-2" "AWS-IP-1-for-Brilliant" "Signalling_Server_212.133.75.34" "Signalling_Server_212.133.75.35"
|
|
set dstaddr "Signaling-Server-1" "Signaling-Server-2" "Signaling-Server-3" "New-Signaling-Server-1" "New-Signaling-Server-2" "hdznos01"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 205
|
|
set status enable
|
|
set name "New Signaling_server_allow"
|
|
set uuid abc3d48a-3abb-51ee-efb5-d62732f05fae
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "New-Signaling-Server-1" "New-Signaling-Server-2"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Brilliant-tcp-5223" "Brilliant-UDP-3478" "HTTPS"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of Br-New-Signaling-Allow-AWS"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 77
|
|
set status enable
|
|
set name "Brilliant-New-Signaling-Deny-All"
|
|
set uuid 67589ec8-55fb-51ea-2e65-5c007c2455db
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Signaling-Server-1" "Signaling-Server-2" "Signaling-Server-3" "New-Signaling-Server-1" "New-Signaling-Server-2"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 85
|
|
set status enable
|
|
set name "Brilliant-New-hdntdn01-allow-trust"
|
|
set uuid b3cd1c8a-579e-51ea-fc4b-e4274083be7c
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Brilliant Trusted IP List"
|
|
set dstaddr "hdntdn01"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 86
|
|
set status enable
|
|
set name "Brilliant-New-hdntdn01-Allow-DNS"
|
|
set uuid 6127515c-579f-51ea-736c-2ec466853afd
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "IC-ISP-DNS1" "IC-ISP-DNS2" "Google-DNS"
|
|
set dstaddr "hdntdn01"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "DNS"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 89
|
|
set status enable
|
|
set name "Brilliant-New-hdntdn01-Allow-ALL"
|
|
set uuid d0203510-579f-51ea-1f40-5b334f65bc60
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "hdntdn01"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "NTP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 90
|
|
set status enable
|
|
set name "Brilliant-New-hdntdn01-Deny-ALL"
|
|
set uuid f56b7f46-579f-51ea-5795-76e064c79718
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "hdntdn01"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 91
|
|
set status enable
|
|
set name "Brilliant-hdznos01-Allow-trusted"
|
|
set uuid c4074b8c-57a0-51ea-c4c2-5cbaa2bb9be3
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Brilliant Trusted IP List"
|
|
set dstaddr "hdznos01" "IPTSP-Observium"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 92
|
|
set status enable
|
|
set name "Brilliant-hdznos01-Deny-ALL"
|
|
set uuid f66bb6f8-57a0-51ea-7e22-a9e38c20ccd7
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "hdznos01" "IPTSP-Observium"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 93
|
|
set status enable
|
|
set name "Brilliant-hdadtn01-allow-trusted"
|
|
set uuid 302baeac-57a1-51ea-9ca5-340a7b3f9004
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Brilliant Trusted IP List" "AWS-IP-3-for-Brilliant-IPTSP" "AWS-IP-4-for-Brilliant-IPTSP" "IPTSP-new source_163.53.150.254" "IPTSP_Physiacl_Srv_1"
|
|
set dstaddr "hdadtn01"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 179
|
|
set status enable
|
|
set name "Brilliant-hdadtn01-allow-ICMP"
|
|
set uuid 979cf5c4-aa87-51ec-7680-7a98d44b9188
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "hdadtn01"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL_ICMP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 94
|
|
set status enable
|
|
set name "Brilliant-hdadtn01-Deny-ALL"
|
|
set uuid 5614c6d0-57a1-51ea-73be-8272406370ac
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "hdadtn01"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 87
|
|
set status enable
|
|
set name "Br-Kaplan-MNP-Allow-Trusted"
|
|
set uuid 20db67b0-56e0-51ea-1357-f1300e7010a9
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Brilliant Trusted IP List"
|
|
set dstaddr "Kaplan-MNP-02-Brilliant" "Kaplan-MNP-Brilliant"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 107
|
|
set status enable
|
|
set name "Br-Kaplan-MNP-Allow-1433"
|
|
set uuid 847e41d0-68fa-51ea-01ae-ff8a3a888b75
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "kaplan-mnp-1433-allow-IP"
|
|
set dstaddr "Kaplan-MNP-02-Brilliant" "Kaplan-MNP-Brilliant"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "MS-SQL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 102
|
|
set status enable
|
|
set name "Br-Kaplan-MNP-Allow-Kaplan-vendor"
|
|
set uuid 862a32e4-6375-51ea-6611-1e16b3f83da7
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Brilliant-kaplan-vendor-IP"
|
|
set dstaddr "Kaplan-MNP-02-Brilliant" "Kaplan-MNP-Brilliant"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "RDP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 88
|
|
set status enable
|
|
set name "Br-Kaplan-MNP-Deny-ALL"
|
|
set uuid 6ab8b66c-56e0-51ea-096a-595feb4ce88f
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Kaplan-MNP-02-Brilliant" "Kaplan-MNP-Brilliant"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 112
|
|
set status enable
|
|
set name "Br-Autoprovision-allow-trusted"
|
|
set uuid 0d42fd48-7572-51ea-b6a4-d250749e615b
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Brilliant Trusted IP List"
|
|
set dstaddr "brilliant-autoprovision-server"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 113
|
|
set status enable
|
|
set name "Br-Autoprovision-allow-All"
|
|
set uuid 39f34b0e-7572-51ea-f468-da7451d57bc8
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "brilliant-autoprovision-server"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "HTTP" "HTTPS"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 114
|
|
set status enable
|
|
set name "Br-Autoprovision-deny-all"
|
|
set uuid 683f66d2-7572-51ea-5934-315c094d1933
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "brilliant-autoprovision-server"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 117
|
|
set status enable
|
|
set name "Brilliant-New-DB-Allow-Trusted"
|
|
set uuid 26cf5524-7c82-51ea-70dd-cb21f57004c0
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Brilliant Trusted IP List"
|
|
set dstaddr "DB-server-1" "DB-server-2" "DB-server-3" "DB-server-1-new" "nwdbsr03" "DB-1-snap" "DB-Server-118.67.215.72" "DB-Server-118.67.215.107"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SNMP" "SSH" "SSH-2020-IPTSP" "ALL_ICMP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 118
|
|
set status enable
|
|
set name "Brilliant-New-DB-Allow-12.241"
|
|
set uuid ac6c8288-7c82-51ea-78f6-5eb8d9758dca
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "IPTSP-source-for-DB" "IPTSP-source-103.248.13.68"
|
|
set dstaddr "DB-server-1" "DB-server-2" "DB-server-3" "DB-server-1-new" "nwdbsr03" "DB-1-snap" "DB-Server-118.67.215.72" "DB-Server-118.67.215.107"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL_ICMP" "SSH-2020-IPTSP" "TCP-5432"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 119
|
|
set status enable
|
|
set name "Brilliant-New-DB-Deny-all"
|
|
set uuid 6c09b692-7c83-51ea-2bdd-6baf44d265d3
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "DB-server-1" "DB-server-2" "DB-server-3" "DB-server-1-new" "nwdbsr03" "DB-1-snap" "DB-Server-118.67.215.72" "DB-Server-118.67.215.107"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 181
|
|
set status enable
|
|
set name "Brilliant-NewDB-Server-all-Allow"
|
|
set uuid 93664f3e-aea4-51ec-3f13-8f44631effb0
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "new-db-server-vendor-IP" "NovoTel-NAT-Public-IP"
|
|
set dstaddr "nwdbsr03"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 182
|
|
set status enable
|
|
set name "Brilliant-NewDB-Server-all-Deny"
|
|
set uuid c8ffcddc-aea4-51ec-c5b5-e1495c62ae85
|
|
set srcintf "port26" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "nwdbsr03"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 51
|
|
set status enable
|
|
set name "Windows-SMB-Allow"
|
|
set uuid 9c047adc-f3d8-51e9-8fef-86b7cd4240e1
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Novotel-NAT-IP"
|
|
set dstaddr "Cloud-Team-File-Server-IP" "Novotel-Finance-File-server-IP" "NovoAir-File-Server" "Mainberg_File_Server" "BMS-DB-Server_Primary"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SMB"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 163
|
|
set status enable
|
|
set name "NovoTel-Whitelist-ISAKMP"
|
|
set uuid 7402c4ce-062f-51ec-48dc-4f993dd91536
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "novotel-pfsense"
|
|
set dstaddr "Novotel-end-IP-for-IPSEC"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "IKE"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 204
|
|
set status disable
|
|
set name "Novotel-Whitelist_ISAKMP"
|
|
set uuid f79b94ea-efc2-51ed-8561-eb98c681c8f3
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Novotel-end-IP-for-IPSEC"
|
|
set dstaddr "novotel-pfsense"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "IKE"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of NovoTel-Whitelist-ISAKMP"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 68
|
|
set status enable
|
|
set name "Novotel-DB-only-From-NVTL-NAT"
|
|
set uuid 0f944eda-158c-51ea-ee55-5b7c4f361c5a
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Novotel-NAT-IP" "Porta Public-1" "Porta Public-2"
|
|
set dstaddr "Novotel-DB-pri" "Novotel-DB-Sec"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 69
|
|
set status enable
|
|
set name "Novotel-DB-deny-from-ALL"
|
|
set uuid 35cea64a-158c-51ea-d7ac-f2c455990c2b
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Novotel-DB-pri" "Novotel-DB-Sec"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 169
|
|
set status enable
|
|
set name "Ofc-Exchange-All-Deny"
|
|
set uuid c29eb2d8-371b-51ec-3fe5-295b85d804a2
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "NovoTel-Exchange-1" "NovoTel-Exchange-2"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 188
|
|
set status enable
|
|
set name "Zimbra-Mail-Server-All-Deny"
|
|
set uuid 3da647d8-28f8-51ed-c6ec-c397eecd9a68
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "NovoTel-Exchange-1" "NovoTel-Exchange-2" "Zimbra Mail"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of OfcExchange-brilliantMail-All-Deny"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 71
|
|
set status enable
|
|
set name "CPSD-HTTP-Allow"
|
|
set uuid 48253c70-4bf9-51ea-411f-057e602727f5
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "CPSD-HTTP-236"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "HTTP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 104
|
|
set status disable
|
|
set name "Route-Mobile-9000-Allow"
|
|
set uuid 6efb7b1a-68d8-51ea-c87d-f09b74237d21
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "route-mobile-ssh-allow" "route-mobile-ssh-allow2" "route-mobile-ssh-allow-3" "route-mobile-ssh-allow-4" "route-mobile-ssh-allow-5" "route-mobile-ssh-allow-6" "route-mobile-ssh-allow-7"
|
|
set dstaddr "route-mobile-app-1"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "route-mobile-9000-port"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 105
|
|
set status disable
|
|
set name "Route-Mobile-9000-All-deny"
|
|
set uuid ba84840a-68d8-51ea-e193-45f189a9a546
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "route-mobile-app-1"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "route-mobile-9000-port"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 106
|
|
set status disable
|
|
set name "Route-Mobile-SSH-allow"
|
|
set uuid aa44d52a-68f8-51ea-b644-99ec613001b7
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "route-mobile-new-source" "route-mobile-ssh-allow" "route-mobile-ssh-allow-3" "route-mobile-ssh-allow-4" "route-mobile-ssh-allow-5" "route-mobile-ssh-allow-6" "route-mobile-ssh-allow-7"
|
|
set dstaddr "route-mobile-app-1" "route-mobile-app-2" "route-mobile-bbox" "route-mobile-cdr" "route-mobile-dnd" "route-mobile-opensense" "route-mobile-user-db" "Route_Mobile_VM_9"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SSH"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 108
|
|
set status disable
|
|
set name "Route-Mobile-80-Allow"
|
|
set uuid b83fb8c4-6912-51ea-80ae-c0751a4ffb37
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "route-mobile-app-1"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "HTTP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 72
|
|
set status disable
|
|
set name "Route-Mobile-ssh-Allow"
|
|
set uuid 63f8f486-523a-51ea-a859-5ca3ca72a579
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "route-mobile-ssh-allow" "route-mobile-ssh-allow2" "Admin-Access-8-Cloud-MKT" "route-mobile-temporary-ip-testing-49.248.29.23" "idrac-public-IP" "route-mobile-ssh-allow-3" "route-mobile-ssh-allow-4" "route-mobile-ssh-allow-5" "route-mobile-ssh-allow-6" "route-mobile-ssh-allow-7"
|
|
set dstaddr "route-mobile-app-1" "route-mobile-app-2" "route-mobile-bbox" "route-mobile-cdr" "route-mobile-dnd" "route-mobile-opensense" "route-mobile-user-db" "Route_Mobile_VM_9"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 139
|
|
set status disable
|
|
set name "Route-Mobile-All-Allow"
|
|
set uuid 3dd9bafc-d308-51ea-3c86-fbc98062c1a0
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "route-mobile-app-1" "route-mobile-app-2" "route-mobile-bbox" "route-mobile-cdr" "route-mobile-dnd" "route-mobile-opensense" "route-mobile-user-db"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "HTTPS" "route-mobile-8443" "TCP 8080"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 157
|
|
set status disable
|
|
set name "Route-Mobile-2345-3345-allow"
|
|
set uuid 2ad21488-cdd3-51eb-69cf-ea0042c7d683
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "route-mobile-app-1" "route-mobile-app-2" "route-mobile-vm-8" "Route_Mobile_VM_9"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "route-mobile-2345" "route-mobile-3345" "HTTP" "HTTPS" "route-mobile-8443" "TCP 8080"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 73
|
|
set status disable
|
|
set name "Route-Mobile-all-deny"
|
|
set uuid a7b058c2-523a-51ea-7c2d-2ec9b9a62e38
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "route-mobile-app-1" "route-mobile-app-2" "route-mobile-bbox" "route-mobile-cdr" "route-mobile-dnd" "route-mobile-opensense" "route-mobile-user-db" "route-mobile-vm-8" "Route_Mobile_VM_9"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 75
|
|
set status enable
|
|
set name "ENZUINC-US-Malware-Block-RV"
|
|
set uuid e91e1b42-55f9-51ea-c88e-aa3f80ad47f3
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-1.1826" "WAN-2.834"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "ENZUINC-US-Block"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 22
|
|
set status enable
|
|
set name "Zangi-And-IPTSP-Commercial-Forward"
|
|
set uuid 6bafa8e6-fabb-51e8-ed07-569893880bee
|
|
set srcintf "port37" "port38"
|
|
set dstintf "port26"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 23
|
|
set status enable
|
|
set name "Zangi-And-IPTSP-Commercial-Reverse"
|
|
set uuid 939b693a-fabb-51e8-8e51-201dc2e1cc6c
|
|
set srcintf "port26"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 97
|
|
set status enable
|
|
set name "databiz-224-IP-All-allow"
|
|
set uuid 24db068c-5dfb-51ea-06de-4013d352e008
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "databiz-224-source-ip"
|
|
set dstaddr "databiz-224-ip"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 100
|
|
set status disable
|
|
set name "Momagic-ssh-allow"
|
|
set uuid d790a148-6368-51ea-2962-669d998e80d5
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Momagic-ssh-allow-ip-group"
|
|
set dstaddr "Momagic-VM-IP"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SSH"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 101
|
|
set status disable
|
|
set name "Momagic-ssh-deny-all"
|
|
set uuid fed0929a-6368-51ea-5500-0b858ad36907
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Momagic-VM-IP"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SSH"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 116
|
|
set status enable
|
|
set name "Billing-iptsp-sms-itc-iig-RDP-Block"
|
|
set uuid 4a292b50-77f3-51ea-3899-62b7dd2c9d5a
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Billing-iptsp-sms-itc-iig-isp"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "RDP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 120
|
|
set status enable
|
|
set name "IHI-infrastructure-whitelist"
|
|
set uuid 7795e22a-96a4-51ea-bdde-e3338ef2016e
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "IHI-infrustructure"
|
|
set dstaddr "IHI-infrustructure-VM"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 123
|
|
set status enable
|
|
set name "KA-Fortis-RDP-Allow"
|
|
set uuid 3a1ebfe0-b9de-51ea-778d-43d14c8c80ce
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "KA-Fortis-Source-for-RDP"
|
|
set dstaddr "KA-Fortis-VM"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 148
|
|
set status enable
|
|
set name "445-Allow"
|
|
set uuid e3dfade4-e9b0-51ea-a408-8842175de5bb
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "KA-Fortis-VM" "Cloud-Team-File-Server-IP" "BSSL-Public-IP" "BitopI_VM_IP" "CEO-sir-CCTV-storage" "Steel-Tech-VM" "TruGroup_file-Server" "tru-group-data-test" "Codes-and-Labels-VM-01_SMB_Allow" "asoft_VM_Smb_allow" "ECRL_SMB_Allow" "Bahon-VM"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SMB"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 147
|
|
set status enable
|
|
set name "SMB-445-ALL-Deny"
|
|
set uuid e3efa6a6-e81e-51ea-0e3e-a0f06e9feb26
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SMB"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 192
|
|
set status enable
|
|
set name "Deny-714-for- IP-36.255.70.88"
|
|
set uuid 0564c310-60a5-51ed-57de-1e6ed7af2646
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "IP-36.255.70.79" "IP-36.255.70.88"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Port_714"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 121
|
|
set status enable
|
|
set name "brilliant-app-web-svr-novotel-allow"
|
|
set uuid 7b3cb666-cfe2-51ea-9be3-aebfd98f6053
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port26"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "NovoTel-NAT-Public-IP"
|
|
set dstaddr "brilliant-app-web-server"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 137
|
|
set status enable
|
|
set name "brilliant-app-web-svr-All-allow"
|
|
set uuid 9c25b6b6-cfe2-51ea-c399-ee3dd3a50bdf
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "brilliant-app-web-server"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "HTTPS" "HTTP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 138
|
|
set status enable
|
|
set name "brilliant-app-web-svr-all-deny"
|
|
set uuid afaf41c0-cfe2-51ea-53bc-4c759b726312
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "brilliant-app-web-server"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 144
|
|
set status enable
|
|
set name "Brilliant-SMS-VM-All-Allow"
|
|
set uuid b00fefc6-e6a2-51ea-92bc-4fe24fa12aeb
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Admin-Access-6" "SMS-sourece-1" "SMS-sourece-2" "SMS-sourece-3" "SMS-sourece-4" "SMS-sourece-5" "SMS-sourece-6" "SMS-sourece-7" "SMS-Source-8"
|
|
set dstaddr "Brilliant-SMS-VM"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 145
|
|
set status enable
|
|
set name "Brilliant-SMS-VM-ALL-Allow-4432"
|
|
set uuid e9232dfa-e6a2-51ea-315f-14807ad1c24b
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Brilliant-SMS-VM"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SMS-VM-SVC-4432"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 146
|
|
set status enable
|
|
set name "Brilliant-SMS-VM-ALL-Deny"
|
|
set uuid 0548dcaa-e6a3-51ea-6694-285f99f4320f
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Brilliant-SMS-VM"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 149
|
|
set status enable
|
|
set name "Brilliant-OBD-VM-Trusted-Allow"
|
|
set uuid 1ac9c280-eeb7-51ea-b2e1-59ff57e11fca
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Brilliant-OBD-VM-Source-1" "Brilliant-OBD-VM-Source-10" "Brilliant-OBD-VM-Source-11" "Brilliant-OBD-VM-Source-2" "Brilliant-OBD-VM-Source-3" "Brilliant-OBD-VM-Source-4" "Brilliant-OBD-VM-Source-5" "Brilliant-OBD-VM-Source-6" "Brilliant-OBD-VM-Source-7" "Brilliant-OBD-VM-Source-8" "Brilliant-OBD-VM-Source-9" "NovoTel-NAT-Public-IP" "Porta Public-1" "BR-OBD-Source-8" "Brilliant-OBD-VM-Source-12"
|
|
set dstaddr "Brilliant-OBD-VM"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 150
|
|
set status enable
|
|
set name "Brilliant-OBD-VM-All-Allow"
|
|
set uuid 39e24f16-eeb7-51ea-0483-1fbfd3cbfe7e
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Brilliant-OBD-VM"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "HTTP" "Brilliant-OBD-100" "OBD-port-8082"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 151
|
|
set status enable
|
|
set name "Brilliant-OBD-VM-All-Deny"
|
|
set uuid 5a00d8d0-eeb7-51ea-8927-1a6577159fae
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Brilliant-OBD-VM"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 152
|
|
set status enable
|
|
set name "BTEB-VM-02-215.141-SSH-Block"
|
|
set uuid 899099d0-f319-51ea-5d50-126c4188c35b
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-1.1826" "WAN-2.834"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "BTEB-VM-02-215-141"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SSH"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 153
|
|
set status enable
|
|
set name "Monasca-Project-Admin-Access-Allow"
|
|
set uuid da5af48e-fb3c-51ea-8223-cebf3d1c6db5
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Admin-Access-6" "Admin-Access-8-Cloud-MKT" "Admin-Access-7-PPTP"
|
|
set dstaddr "Monasca-HAProxy" "Monasca-Master-node"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 209
|
|
set status enable
|
|
set name "Monasca Reverse"
|
|
set uuid e3fe0e52-16a1-51ef-c48e-2dfa62a3d0bb
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Monasca-HAProxy" "Monasca-Master-node"
|
|
set dstaddr "Admin-Access-6" "Admin-Access-7" "Admin-Access-7-PPTP" "Admin-Access-8-Cloud-MKT"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of Monasca-Project-Admin-Access-Allow"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 154
|
|
set status enable
|
|
set name "Monasca-Project-All-Deny"
|
|
set uuid 0e2339de-fb3d-51ea-6cbe-d994f8131d45
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Monasca-HAProxy" "Monasca-Master-node"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 155
|
|
set status enable
|
|
set name "Novoair-RDP-UDP-Deny"
|
|
set uuid ff4be6e6-fc8f-51ea-6ae0-e24666e9bcdc
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "NovoAir-VM-02"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "RDP_UDP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 134
|
|
set status enable
|
|
set name "Commvault-Media-Agent-SNMP-Block"
|
|
set uuid 494ad93c-9786-51eb-f523-5bf2c045b951
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "MEDIA-AGENT-1" "MEDIA-AGENT-2" "MEDIA-AGENT-3"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SNMP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 103
|
|
set status disable
|
|
set name "Whitelist-IP"
|
|
set uuid 9864e292-66a9-51ea-4fc1-646fa49eab24
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Novotel-NAT-IP"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 125
|
|
set status enable
|
|
set name "Blacklist-DST-IP"
|
|
set uuid b159a1b0-bde4-51ea-d752-11b89b697fc0
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-1.1826" "WAN-2.834"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Netherlands-IP-compromised-VM-communicate"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "HTTP" "HTTPS"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 161
|
|
set status disable
|
|
set name "china-based-IP"
|
|
set uuid 6cf753b6-19a4-51eb-e245-8d9ec2e7b864
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "china-based-IP"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set geoip-anycast disable
|
|
set geoip-match physical-location
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 132
|
|
set status enable
|
|
set name "Bangladeshi-IP-RDP-normal-rule"
|
|
set uuid fd95bc9c-45f4-51eb-bd29-1456a140243e
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Bangladeshi-IP"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "RDP" "RDP_UDP" "SSH" "MS-SQL" "SMB"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set geoip-anycast disable
|
|
set geoip-match physical-location
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode flow
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "certificate-inspection"
|
|
set av-profile ''
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor "For-BD-IP"
|
|
set application-list ''
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set logtraffic utm
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 130
|
|
set status enable
|
|
set name "webns-ip-7001-block"
|
|
set uuid c126e258-595a-51eb-0907-ebdc559b5608
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-1.1826" "WAN-2.834"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "webns-vm-1"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "7001-service"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 122
|
|
set status enable
|
|
set name "Dingi-VM-allow-for-Amazon"
|
|
set uuid bfaba5a6-7ff4-51eb-3481-5372017ee8fe
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Amazon-ip-for-Dingi"
|
|
set dstaddr "Dingi-VM-group-for-amazon"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 180
|
|
set status enable
|
|
set name "Core-team-Cacti"
|
|
set uuid 60c0a47a-ad8d-51ec-5673-dda87b7e55cf
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "core-network-cacti"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 140
|
|
set status disable
|
|
set name "IOTA-8081-allow-Rev"
|
|
set uuid 13b0bc92-aa73-51eb-ecba-c1644d109766
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "IOTA-vm-ip"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "port-8081"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 131
|
|
set status disable
|
|
set name "IOTA-8081-allow"
|
|
set uuid 95a62bd4-aa72-51eb-c39d-82c18e47920d
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "IOTA-vm-ip"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "port-8081"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 176
|
|
set status enable
|
|
set name "BAT-Encoders-Source-Allow"
|
|
set uuid 73c110bc-8355-51ec-acc3-cf21c864437e
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "BAT-encoders-source-allow" "BAT-encoders-source-allow_IP_Rang2" "BAT-encoders-source-allow_IP_Rang3"
|
|
set dstaddr "BAT-Encoders-VM-IP" "BAT-Encoders-VM2-IP"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 175
|
|
set status enable
|
|
set name "CEO-SIR-FTP-Allow"
|
|
set uuid 203598fe-7f46-51ec-49d3-1cb1fdcfe98d
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "ceo-sir-source" "ceo-sir-source-2"
|
|
set dstaddr "CEO-sir-CCTV-storage"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 212
|
|
set status disable
|
|
set name "Specify-PRIMARY-REV"
|
|
set uuid 914dcab2-ca83-51ef-1a4d-d390d360c0ab
|
|
set srcintf "WAN-1.1826"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "500 error VM List"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode proxy
|
|
set http-policy-redirect disable
|
|
set ssh-policy-redirect disable
|
|
set webproxy-profile ''
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "certificate-inspection"
|
|
set av-profile "Specify-AV-IC-Cloud"
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor "IPS-IC-CLOUD"
|
|
set application-list ''
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set icap-profile ''
|
|
set videofilter-profile ''
|
|
set waf-profile ''
|
|
set ssh-filter-profile ''
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set wanopt disable
|
|
set webcache disable
|
|
set webproxy-forward-server ''
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Test of PRIMARY-REV"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 218
|
|
set status disable
|
|
set name "Specify-Secondary-FW"
|
|
set uuid d2fb1ec2-ca85-51ef-f127-dee5e34c4d07
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "500 error VM List"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode proxy
|
|
set http-policy-redirect disable
|
|
set ssh-policy-redirect disable
|
|
set webproxy-profile ''
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "certificate-inspection"
|
|
set av-profile "Specify-AV-IC-Cloud"
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor ''
|
|
set application-list "Restricted"
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set icap-profile ''
|
|
set videofilter-profile ''
|
|
set waf-profile ''
|
|
set ssh-filter-profile ''
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set wanopt disable
|
|
set webcache disable
|
|
set webproxy-forward-server ''
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Test of Secondary-FW"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 232
|
|
set status disable
|
|
set name ''
|
|
set uuid 7f06fd2a-0ace-51f0-3bc4-57917c670628
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "IPTSP_PFSense" "NovoCom_SBC_platform"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode proxy
|
|
set http-policy-redirect disable
|
|
set ssh-policy-redirect disable
|
|
set webproxy-profile ''
|
|
set profile-type single
|
|
set profile-protocol-options "IC-CLOUD"
|
|
set ssl-ssh-profile "Certificate-Inspection-W/O-Expired-"
|
|
set av-profile "AV-IC-CLOUD"
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor "IPS-IC-CLOUD"
|
|
set application-list ''
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set icap-profile ''
|
|
set videofilter-profile ''
|
|
set waf-profile ''
|
|
set ssh-filter-profile ''
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set wanopt disable
|
|
set webcache disable
|
|
set webproxy-forward-server ''
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Forward Traffic for allowing Expired and Untrusted SSL Certficiate (Copy of Forward-C2I-For-Expired-SSl)"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 217
|
|
set status disable
|
|
set name "Specify-Primary-FW"
|
|
set uuid 8f6200f4-ca85-51ef-d76e-0ac824dfed7a
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-1.1826"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "500 error VM List"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode proxy
|
|
set http-policy-redirect disable
|
|
set ssh-policy-redirect disable
|
|
set webproxy-profile ''
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "certificate-inspection"
|
|
set av-profile "Specify-AV-IC-Cloud"
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor ''
|
|
set application-list "Restricted"
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set icap-profile ''
|
|
set videofilter-profile ''
|
|
set waf-profile ''
|
|
set ssh-filter-profile ''
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set wanopt disable
|
|
set webcache disable
|
|
set webproxy-forward-server ''
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Test of Primary-FW"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 242
|
|
set status enable
|
|
set name "Softify-110-Port-Allow"
|
|
set uuid 0440edc0-3d3d-51f0-b0d3-66fc19c86317
|
|
set srcintf "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "WAN-1.1826" "WAN-2.834" "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Softifybd-Limited-131" "Softifybd-Limited-VM_140" "Softifybd-Limited-VM_149"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "POP3"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 248
|
|
set status disable
|
|
set name "Reverse Softify-110-Port-Allow"
|
|
set uuid 05a8248e-6ad4-51f0-5e43-34243723c116
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Softifybd-Limited-131" "Softifybd-Limited-VM_140" "Softifybd-Limited-VM_149"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "POP3"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 224
|
|
set status enable
|
|
set name "DigitalLab-Temporary"
|
|
set uuid ec8338e8-f68b-51ef-f94b-6fa048527058
|
|
set srcintf "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Digilab4_36.255.70.91" "Test_For_DigitalLab"
|
|
set dstaddr "Digilab4_36.255.70.91" "Test_For_DigitalLab"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Test Rule"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 233
|
|
set status enable
|
|
set name "CERT-NO-INSPECT-FRD"
|
|
set uuid e75e0548-19ca-51f0-05e8-24db7e4e3fc7
|
|
set srcintf "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "WAN-1.1826" "WAN-2.834" "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Novotel_PFSense" "Mailborder-IP-IN-Cloud"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic utm
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 236
|
|
set status enable
|
|
set name "CERT-NO-INSPECT-REV"
|
|
set uuid d28fc944-1f2e-51f0-7eb2-7adc31f963be
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port37" "port38"
|
|
set dstintf "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Novotel_PFSense" "VM-Private-Service-Mosiur-Cloud" "Window_VM_1"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic utm
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 223
|
|
set status enable
|
|
set name "Forward-C2I-For-Expired-SSl"
|
|
set uuid ba9e3bdc-ef71-51ef-ea1c-40ffcd45f3cb
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "IPTSP_PFSense" "Admin-Access-4"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode proxy
|
|
set http-policy-redirect disable
|
|
set ssh-policy-redirect disable
|
|
set webproxy-profile ''
|
|
set profile-type single
|
|
set profile-protocol-options "IC-CLOUD"
|
|
set ssl-ssh-profile "Certificate-Inspection-W/O-Expired-"
|
|
set av-profile "AV-IC-CLOUD"
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor "IPS-IC-CLOUD"
|
|
set application-list ''
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set icap-profile ''
|
|
set videofilter-profile ''
|
|
set waf-profile ''
|
|
set ssh-filter-profile ''
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set wanopt disable
|
|
set webcache disable
|
|
set webproxy-forward-server ''
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Forward Traffic for allowing Expired and Untrusted SSL Certficiate"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 222
|
|
set status enable
|
|
set name "Celloscope-Logging-Policy-Temporary"
|
|
set uuid a5e88f3c-f4ec-51ef-20ad-52328f46ab58
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "CelloScope_Test_Bypass"
|
|
set dstaddr "CelloScope_1"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode flow
|
|
set profile-type single
|
|
set profile-protocol-options "IC-CLOUD"
|
|
set ssl-ssh-profile "certificate-inspection"
|
|
set av-profile "g-default"
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor "IPS-IC-CLOUD"
|
|
set application-list ''
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set logtraffic all
|
|
set logtraffic-start enable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 235
|
|
set status enable
|
|
set name "Sonido_AppControl_Pass_Google.Play"
|
|
set uuid 8bc9b7c2-1d99-51f0-2c73-7ebbd5561d30
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "NovoTel_Sonido_VM"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode flow
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "certificate-inspection"
|
|
set av-profile "g-default"
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor ''
|
|
set application-list ''
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 237
|
|
set status enable
|
|
set name "Toku-Allow-FW-For-36.255.70.240"
|
|
set uuid feb18b5a-24df-51f0-2941-e31fed76432a
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Toku_External_IP"
|
|
set dstaddr "toku_CLOUD_VM-03"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Toku-tcp-44300-44301" "Toku-TCP-9000-9001"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic utm
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 255
|
|
set status enable
|
|
set name "Test-IPTSP-Vendor"
|
|
set uuid b26edd6c-b4a2-51f0-a555-963304ae050b
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port37" "port38"
|
|
set dstintf "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "IPTSP_Vendor_IP_5.77.205.167"
|
|
set dstaddr "hdvoip02"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Brilliant-UDP-5065" "UDP 10000-65535"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 1
|
|
set status enable
|
|
set name "Primary-FW"
|
|
set uuid 2cb8e960-22bf-51e8-55db-64841b9b6ce3
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-1.1826"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode proxy
|
|
set http-policy-redirect disable
|
|
set ssh-policy-redirect disable
|
|
set webproxy-profile ''
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "certificate-inspection"
|
|
set av-profile "AV-IC-CLOUD"
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor ''
|
|
set application-list "Restricted"
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set icap-profile ''
|
|
set videofilter-profile ''
|
|
set waf-profile ''
|
|
set ssh-filter-profile ''
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set wanopt disable
|
|
set webcache disable
|
|
set webproxy-forward-server ''
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 221
|
|
set status enable
|
|
set name "Reverse-Traffic-I2C-For-Expired-SSL"
|
|
set uuid ca9dcba4-ef6e-51ef-90b1-86c7084958c4
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "IPTSP_PFSense"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode proxy
|
|
set http-policy-redirect disable
|
|
set ssh-policy-redirect disable
|
|
set webproxy-profile ''
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "Certificate-Inspection-W/O-Expired-"
|
|
set av-profile "AV-IC-CLOUD"
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor "IPS-IC-CLOUD"
|
|
set application-list ''
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set icap-profile ''
|
|
set videofilter-profile ''
|
|
set waf-profile ''
|
|
set ssh-filter-profile ''
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set wanopt disable
|
|
set webcache disable
|
|
set webproxy-forward-server ''
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of Primary Reverse Traffic, It allows Expired SSL"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 7
|
|
set status enable
|
|
set name "PRIMARY-REV"
|
|
set uuid e68ab4f4-2693-51e8-1089-200fbec700d4
|
|
set srcintf "WAN-1.1826"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode proxy
|
|
set http-policy-redirect disable
|
|
set ssh-policy-redirect disable
|
|
set webproxy-profile ''
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "certificate-inspection"
|
|
set av-profile "AV-IC-CLOUD"
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor "IPS-IC-CLOUD"
|
|
set application-list ''
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set icap-profile ''
|
|
set videofilter-profile ''
|
|
set waf-profile ''
|
|
set ssh-filter-profile ''
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set wanopt disable
|
|
set webcache disable
|
|
set webproxy-forward-server ''
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 2
|
|
set status enable
|
|
set name "Secondary-FW"
|
|
set uuid 46f9e072-22bf-51e8-737c-426bae85e0b1
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode proxy
|
|
set http-policy-redirect disable
|
|
set ssh-policy-redirect disable
|
|
set webproxy-profile ''
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "certificate-inspection"
|
|
set av-profile "AV-IC-CLOUD"
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor ''
|
|
set application-list "Restricted"
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set icap-profile ''
|
|
set videofilter-profile ''
|
|
set waf-profile ''
|
|
set ssh-filter-profile ''
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set wanopt disable
|
|
set webcache disable
|
|
set webproxy-forward-server ''
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 208
|
|
set status disable
|
|
set name "BUET_temp_all"
|
|
set uuid 183ec02a-1374-51ef-8684-e5bd8c5d4eee
|
|
set srcintf "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "BUET_SRC_103.94.135.141"
|
|
set dstaddr "BUET_dest_103.209.41.137"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of Secondary-REV"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst enable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 216
|
|
set status disable
|
|
set name "Specify-Secondary-REV"
|
|
set uuid 394e51fe-ca85-51ef-7d72-1c942dbc224b
|
|
set srcintf "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "500 error VM List"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode proxy
|
|
set http-policy-redirect disable
|
|
set ssh-policy-redirect disable
|
|
set webproxy-profile ''
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "certificate-inspection"
|
|
set av-profile "Specify-AV-IC-Cloud"
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor "IPS-IC-CLOUD"
|
|
set application-list ''
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set icap-profile ''
|
|
set videofilter-profile ''
|
|
set waf-profile ''
|
|
set ssh-filter-profile ''
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set wanopt disable
|
|
set webcache disable
|
|
set webproxy-forward-server ''
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Test of Secondary-REV"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 8
|
|
set status enable
|
|
set name "Secondary-REV"
|
|
set uuid 1a8cc6d4-2694-51e8-8814-88fc267b13cd
|
|
set srcintf "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode proxy
|
|
set http-policy-redirect disable
|
|
set ssh-policy-redirect disable
|
|
set webproxy-profile ''
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "certificate-inspection"
|
|
set av-profile "AV-IC-CLOUD"
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor "IPS-IC-CLOUD"
|
|
set application-list ''
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set icap-profile ''
|
|
set videofilter-profile ''
|
|
set waf-profile ''
|
|
set ssh-filter-profile ''
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set wanopt disable
|
|
set webcache disable
|
|
set webproxy-forward-server ''
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of Secondary-FW"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 243
|
|
set status enable
|
|
set name "RDP-Allow-Rule"
|
|
set uuid 3b2145cc-4749-51f0-d4fb-687243153657
|
|
set srcintf "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38" "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Bangladeshi-IP"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set geoip-anycast disable
|
|
set geoip-match physical-location
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 13
|
|
set status enable
|
|
set name "LAN-COMMUNICATON-COMMVAULT"
|
|
set uuid be82f0f0-b4de-51e8-0bef-3f81a7d6c058
|
|
set srcintf "port37"
|
|
set dstintf "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 14
|
|
set status enable
|
|
set name "LAN-COMMUNICATION-COMMVAULT-2"
|
|
set uuid c7547988-b4de-51e8-131a-dbef59ab452c
|
|
set srcintf "port38"
|
|
set dstintf "port37"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic utm
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of LAN-COMMUNICATON-COMMVAULT"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 211
|
|
set status enable
|
|
set name "cnMaestro-server-Incoming-allow"
|
|
set uuid 1ab16fa6-5df2-51ef-72ac-35c2da95c822
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port22"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "cnMaestro-server-ip"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode flow
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "certificate-inspection"
|
|
set av-profile ''
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor "IPS-IC-CLOUD"
|
|
set application-list ''
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set logtraffic utm
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of Cpanel New Rule from WAN"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 27
|
|
set status enable
|
|
set name "Cpanel New Rule from WAN"
|
|
set uuid 22470bdc-29e5-51e9-6570-39c7982613a6
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port21" "port23"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode flow
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "certificate-inspection"
|
|
set av-profile ''
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor "g-default"
|
|
set application-list ''
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set logtraffic utm
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 29
|
|
set status enable
|
|
set name "Cpanel New Rule to WAN"
|
|
set uuid 50459592-29ec-51e9-9c24-0b926352157f
|
|
set srcintf "port21" "port23"
|
|
set dstintf "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode flow
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "certificate-inspection"
|
|
set av-profile ''
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor "IPS-IC-CLOUD"
|
|
set application-list ''
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set logtraffic utm
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Remove on 07-Feb-19"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 28
|
|
set status enable
|
|
set name "Cpanel New Rule From Cloud"
|
|
set uuid ab179386-29eb-51e9-0d19-6143914fb0af
|
|
set srcintf "port37" "port38"
|
|
set dstintf "port21" "port23"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 1500
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 111
|
|
set status enable
|
|
set name "Cpanel New Rule To Cloud"
|
|
set uuid 08d62ef6-74b4-51ea-0612-c02e9c1b243d
|
|
set srcintf "port21" "port23"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 158
|
|
set status enable
|
|
set name "VPS-Out"
|
|
set uuid ab033948-d89b-51eb-c139-6afaa98b6c5b
|
|
set srcintf "port18" "port19" "VPS-Via-BDCOM"
|
|
set dstintf "WAN-1.1826" "WAN-2.834" "port26"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 159
|
|
set status enable
|
|
set name "VPS-Toku-IN"
|
|
set uuid c211d464-d89b-51eb-097f-7abef5580fc1
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port26"
|
|
set dstintf "port19" "port18" "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "toku-Source-49.213.20.4" "toku-Source-2-49.213.20.42"
|
|
set dstaddr "VPS-1-MGMT" "VPS-2-MGMT"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL_ICMP" "SSH"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 185
|
|
set status disable
|
|
set name "VPS-Traffic_IP-IN"
|
|
set uuid fb67e3d6-d023-51ec-76d7-1609dfaa0081
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port26"
|
|
set dstintf "port19" "port18" "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "VPS-Traffic-IP"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL_ICMP" "SSH"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode flow
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "certificate-inspection"
|
|
set av-profile ''
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor "IPS-IC-CLOUD"
|
|
set application-list ''
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of VPS-Toku-IN"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 141
|
|
set status enable
|
|
set name "VPS-Hypervisor-IN"
|
|
set uuid 0f796426-d89f-51eb-587c-eaa94e12417b
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port18" "port19" "BDCOM-MGT"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "ADMIN-ACCESS-GRP"
|
|
set dstaddr "VPS-1-Hypervisor" "VPS-2-Hypervisor" "VPS-BDCOM-MGT"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 162
|
|
set status enable
|
|
set name "Toku-Application-Server-allow-in"
|
|
set uuid 3d72c5a6-eaca-51eb-1f22-57510ecbbc6b
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port18" "VPS-Via-BDCOM" "port19"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Toku-Source-IP-3.0.196.232" "Toku-Source-IP-54.254.210.111" "toku-Source-49.213.20.4"
|
|
set dstaddr "Toku-VM-Application-Public-IP"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 127
|
|
set status enable
|
|
set name "Toku-database-Server-allow-in"
|
|
set uuid e5f1496e-1eaa-51ec-e633-f6097cc59e95
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port18" "port19" "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "toku-Source-49.213.20.4" "toku-Source-18.142.165.167" "Admin-Access-7-PPTP" "toku_source_13.251.201.165" "Admin-Access-8-Cloud-MKT"
|
|
set dstaddr "Toku-VM-Database-Public-IP"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Toku-161/162-UDP" "TOKU-3956" "Toku-4866" "ALL_ICMP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 186
|
|
set status enable
|
|
set name "Toku-VM-07-allow-in"
|
|
set uuid 512713dc-2786-51ed-e45c-57f15e491cb9
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port18" "port19" "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "toku-Source-49.213.20.4" "toku-source-jenkin_49.213.20.55/32" "toku_source-49.213.20.35" "Admin-Access-8-Cloud-MKT" "toku_temp_ip_202.133.192.140" "toku_temp_ip_49.205.105.212" "toku_tmp_IP_122.172.83.206" "toku_temp_IP_222.164.155.125"
|
|
set dstaddr "Toku-VM-07"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Toku-161/162-UDP" "TOKU-3956" "Toku-4866" "ALL_ICMP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of Toku-database-Server-allow-in"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 165
|
|
set status enable
|
|
set name "Toku-Database-Server-Public-IN"
|
|
set uuid 3051c1fa-2405-51ec-b4e4-ad0ac3add51a
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port26"
|
|
set dstintf "port18" "port19" "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Toku-VM-Database-Public-IP"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "HTTPS" "Toku-TCP-8000" "Toku-TCP-9000-9001" "Toku-tcp-44300-44301"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 187
|
|
set status enable
|
|
set name "Toku-VM-07-Public-IN"
|
|
set uuid c9af9306-2786-51ed-c14c-aad7f7936675
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port26"
|
|
set dstintf "port18" "port19" "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Toku-VM-07"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "HTTPS" "Toku-TCP-8000" "Toku-TCP-9000-9001" "Toku-tcp-44300-44301"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of Toku-Database-Server-Public-IN"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 135
|
|
set status enable
|
|
set name "Toku-Windows-Server2019-allow-in"
|
|
set uuid 55351238-1eab-51ec-ded5-5a9bf24b9c7f
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port18" "port19" "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "toku-Source-49.213.20.4" "Toku-Source-IP-3.0.196.232" "Toku-Source-IP-54.254.210.111"
|
|
set dstaddr "Toku-VM-Windows-Svr-2019"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "RDP" "Toku-135" "Toku-161/162-UDP" "ALL_ICMP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 136
|
|
set status enable
|
|
set name "TOKU-RDP-Service-Win2019-IN"
|
|
set uuid 27cba1de-1ead-51ec-c4d6-2928041b5b7d
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port18" "port19" "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Toku-Source-148.251.28.178/32" "Toku-Source-159.69.64.151/32"
|
|
set dstaddr "Toku-VM-Windows-Svr-2019"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "RDP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 156
|
|
set status enable
|
|
set name "TOKU-Public-Allow-WinSVR-2019"
|
|
set uuid 3f0f00fe-2112-51ec-c9d6-51051e32baac
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port26"
|
|
set dstintf "port18" "port19" "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Toku-VM-Windows-Svr-2019"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "HTTP" "HTTPS" "Toku-10080" "Toku-UDP-10000-20000" "Toku-udp-8090"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode flow
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "certificate-inspection"
|
|
set av-profile ''
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor "IPS-IC-CLOUD"
|
|
set application-list ''
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set logtraffic utm
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 160
|
|
set status enable
|
|
set name "Toku-VPS1-To-VPS2-Traffic"
|
|
set uuid f6eda982-2112-51ec-4328-515c61e76493
|
|
set srcintf "port18"
|
|
set dstintf "port19"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 164
|
|
set status enable
|
|
set name "Toku-VPS2-To-VPS1-Traffic"
|
|
set uuid 188a9ed8-2113-51ec-6f90-ead08dd0c27a
|
|
set srcintf "port19"
|
|
set dstintf "port18"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 167
|
|
set status enable
|
|
set name "Toku-VPS-Via-BDCOM-to-VPS1-2"
|
|
set uuid 96db6bb0-2428-51ec-dc18-3c531cf0a923
|
|
set srcintf "VPS-Via-BDCOM"
|
|
set dstintf "port18" "port19"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 166
|
|
set status enable
|
|
set name "Toku-VPS1-2-to-VPS-Via-BDCOM"
|
|
set uuid 76b8ade8-2428-51ec-45fc-f0c5710d862d
|
|
set srcintf "port18" "port19"
|
|
set dstintf "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 142
|
|
set status enable
|
|
set name "Cloud-to-VPS-allow"
|
|
set uuid 922e1ce4-d8cd-51eb-b67f-f96ad13e864f
|
|
set srcintf "port37" "port38"
|
|
set dstintf "port18" "port19" "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "cloud-nagios" "cloud-observium" "Toku-Backup-Server" "Admin-Access-6" "Admin-Access-7" "cacti-ip"
|
|
set dstaddr "VPS-1-Hypervisor" "VPS-1-MGMT" "VPS-1-Traffic-1" "VPS-1-Traffic-2" "VPS-2-Hypervisor" "VPS-2-MGMT" "VPS-2-VM-06" "VPS-2-Traffic2" "VPS-BDCOM-MGT" "VPS-Traffic-IP" "Toku-VM-Application-Public-IP" "Toku-VM-Database-Public-IP" "Toku-VM-Windows-Svr-2019"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL_ICMP" "SNMP" "RDP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 193
|
|
set status enable
|
|
set name "TOKU_CLOUD-to-VPS-1-2-ACCESS"
|
|
set uuid 4606778e-659f-51ed-e84a-19f8a26ffe0a
|
|
set srcintf "port37" "port38"
|
|
set dstintf "port18" "port19" "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "toku_CLOUD_VM-01" "toku_CLOUD_VM-02" "toku_CLOUD_VM-03" "tanvir_ip_36.255.70.98/32" "toku_CLOUD_VM-04" "toku_CLOUD_VM-05" "toku_CLOUD_VM-test" "toku_CLOUD_VM-06"
|
|
set dstaddr "VPS-1-Hypervisor" "toku_VPS-1_ALL_VM" "toku_VPS-2_ALL_VM" "VPS-Traffic-IP"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of Cloud-to-VPS-allow"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 200
|
|
set status enable
|
|
set name "VPS-1-2-to-TOKU_CLOUD-ACCESS"
|
|
set uuid d55de4e2-ad1d-51ed-0b50-d5d1393d703a
|
|
set srcintf "port18" "port19" "VPS-Via-BDCOM"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "toku_VPS-1_ALL_VM" "toku_VPS-2_ALL_VM" "VPS-1-Hypervisor" "VPS-Traffic-IP"
|
|
set dstaddr "tanvir_ip_36.255.70.98/32" "toku_CLOUD_VM-01" "toku_CLOUD_VM-02" "toku_CLOUD_VM-03" "toku_CLOUD_VM-04" "toku_CLOUD_VM-05" "toku_CLOUD_VM-test" "toku_CLOUD_VM-06" "Toku-BD-BLT-Quark-PROD-02"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of TOKU_CLOUD-to-VPS-1-2-ACCESS"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 191
|
|
set status enable
|
|
set name "Toku-118.67.218.116-Port-135-Allow"
|
|
set uuid bb92519a-5117-51ed-6f3b-b0b13a8c224c
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port18" "port19" "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Toku-Source-IP-3.0.196.232" "Toku-Source-IP-54.254.210.111"
|
|
set dstaddr "Toku-VM-Windows-Svr-2019"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Toku-135"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 183
|
|
set status enable
|
|
set name "Toku-VMS-UPD-allow-for-111-232"
|
|
set uuid c087645c-b64d-51ec-34e0-28411bb0a84a
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port18" "port19" "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Toku-Source-IP-3.0.196.232" "Toku-Source-IP-54.254.210.111"
|
|
set dstaddr "VPS-2-VM-06" "Toku-VM-07" "Toku-VM-Database-Public-IP" "Toku-VM-Windows-Svr-2019" "VPS-1-MGMT" "VPS-2-MGMT"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Toku-161-TCP" "Toku-161/162-UDP" "ALL_ICMP" "TRACEROUTE"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 190
|
|
set status enable
|
|
set name "Toku-4866Port-allow_for_Src-232-111"
|
|
set uuid 2474f216-4ead-51ed-6de4-b07fbc57ebbf
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port18" "port19" "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Toku-Source-IP-3.0.196.232" "Toku-Source-IP-54.254.210.111"
|
|
set dstaddr "Toku-VM-Database-Public-IP" "VPS-2-VM-06" "Toku-VM-07"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Toku-4866" "toku-123_UDP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of Toku-VMS-UPD-allow-for-111-232"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 201
|
|
set status enable
|
|
set name "Toku_UDP_123_Allow"
|
|
set uuid 8980073e-c17d-51ed-c589-64d792445558
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port18" "port19" "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Toku-VM-Database-Public-IP" "Toku-VM-07"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "toku-123_UDP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of Toku-4866Port-allow_for_Src-232-111"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 172
|
|
set status enable
|
|
set name "VPS-to-Cloud-allow"
|
|
set uuid 98f8f88e-5cce-51ec-06cb-05bb9a1a1014
|
|
set srcintf "port18" "port19"
|
|
set dstintf "port37" "port38" "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "VPS-1-Hypervisor" "VPS-2-Hypervisor"
|
|
set dstaddr "Toku-Backup-Server"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic utm
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 143
|
|
set status enable
|
|
set name "TOKU-Traffic-IP-allow"
|
|
set uuid c3f24a14-db09-51eb-e204-ab9d21892030
|
|
set srcintf "WAN-1.1826" "WAN-2.834" "port26"
|
|
set dstintf "VPS-Via-BDCOM" "port18" "port19"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Toku-VM-Application-Public-IP" "toku_CLOUD_VM-02" "toku_src_intercloud_103.248.12.227" "toku_src_ip_203.76.96.85" "Toku-BD-BLT-Quark-PROD-02"
|
|
set dstaddr "VPS-Traffic-IP"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "toku_udp_5060" "toku_udp_5080" "toku_udp_6000-65534"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode flow
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "certificate-inspection"
|
|
set av-profile ''
|
|
set webfilter-profile ''
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor "IPS-IC-CLOUD"
|
|
set application-list ''
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 174
|
|
set status disable
|
|
set name "TOKU-IP-ALLOW-118.67.218.118"
|
|
set uuid 07b8ec4c-7440-51ec-6f45-5a87abd8e1d9
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port18" "VPS-Via-BDCOM" "port19"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Admin-Access-6" "Admin-Access-7"
|
|
set dstaddr "Toku-VM-07"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "TOKU-3956"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic utm
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 178
|
|
set status enable
|
|
set name "Toku-VM-06-Srv-4866-port-allow_in"
|
|
set uuid 57909134-a375-51ec-bc3d-182491d3e2e0
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port18" "port19" "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Toku-source-103.178.39.151" "Toku-Source-3.1.47.248" "toku-Source-18.142.165.167"
|
|
set dstaddr "VPS-2-VM-06"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Toku-4866"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments "Clone of Toku-VM-06-Server-allow-in"
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 189
|
|
set status enable
|
|
set name "Toku-Source-118.67.218.189-allow"
|
|
set uuid 513549a4-37e7-51ed-eb66-68481f54942b
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port18" "port19" "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "Toku-VM-Application-Public-IP"
|
|
set dstaddr "VPS-2-VM-06" "Toku-VM-Database-Public-IP"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Toku-4866"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 184
|
|
set status enable
|
|
set name "Toku-VM-06-Srv_Source_49.213.20.4"
|
|
set uuid 571946d8-b64e-51ec-67ec-fb8ee2dc8610
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port18" "port19" "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "toku-Source-49.213.20.4"
|
|
set dstaddr "VPS-2-VM-06"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Toku-161-TCP" "Toku-161/162-UDP" "TOKU-3956" "Toku-4866" "ALL_ICMP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 177
|
|
set status enable
|
|
set name "Toku-VMs-TCP-UDP161-allow-in"
|
|
set uuid 3757bba4-a14a-51ec-60fa-f13bc3917bf7
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port18" "port19" "VPS-Via-BDCOM"
|
|
set action accept
|
|
set nat64 disable
|
|
set nat46 disable
|
|
set ztna-status disable
|
|
set srcaddr "toku-Source-49.213.20.4"
|
|
set dstaddr "VPS-1-MGMT" "VPS-2-MGMT"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "Toku-161-TCP" "Toku-161/162-UDP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic utm
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 195
|
|
set status enable
|
|
set name "NVTEL-XCHANGE-to-China-DEST"
|
|
set uuid 791f6b84-9ad4-51ed-bba7-df0de7d04462
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-1.1826" "WAN-2.834"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "Novotel-Xchange-118.67.215.237"
|
|
set dstaddr "Chinese-Dest-for-Novotel-Exchange"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic disable
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 197
|
|
set status enable
|
|
set name "SSH-to-118.67.212.69"
|
|
set uuid 9916170c-ab88-51ed-5af6-35c06fd19fc3
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set ztna-status disable
|
|
set srcaddr "Core-IC-VPN"
|
|
set dstaddr "core-network-cacti"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SSH-Authentication"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat enable
|
|
set permit-any-host disable
|
|
set permit-stun-host disable
|
|
set fixedport disable
|
|
set ippool disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 198
|
|
set status disable
|
|
set name "SSH-to-118.67.212.69-Deny-Others"
|
|
set uuid 2409cf3e-ac1a-51ed-4212-ba00978e9630
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action deny
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Core-Cacti-118.67.212.69"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SSH-Authentication"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set np-acceleration enable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set match-vip disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set send-deny-packet disable
|
|
next
|
|
edit 199
|
|
set status enable
|
|
set name "SSH-to-118.67.215.10"
|
|
set uuid e71ea7dc-ac1b-51ed-0401-262897fef89e
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "openstack-haproxy-vip"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "SSH" "ALL_ICMP"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat enable
|
|
set permit-any-host disable
|
|
set permit-stun-host disable
|
|
set fixedport disable
|
|
set ippool disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 214
|
|
set status enable
|
|
set name "Shadhin_Music_session_limit"
|
|
set uuid 67dc9f8e-9c23-51ef-c8ee-f1dd947d2011
|
|
set srcintf "port37" "port38"
|
|
set dstintf "WAN-1.1826" "WAN-2.834"
|
|
set action accept
|
|
set ztna-status disable
|
|
set srcaddr "Shadhin_Music _vm_02"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic utm
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat enable
|
|
set permit-any-host disable
|
|
set permit-stun-host disable
|
|
set fixedport disable
|
|
set ippool disable
|
|
set session-ttl 50000
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 215
|
|
set status enable
|
|
set name "Shadhin_Music_session_limit_reverse"
|
|
set uuid b14f215c-9c26-51ef-6b9b-0056d451e14b
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set ztna-status disable
|
|
set srcaddr "all"
|
|
set dstaddr "Shadhin_Music _vm_02"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "ALL"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status disable
|
|
set inspection-mode flow
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "no-inspection"
|
|
set logtraffic utm
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat enable
|
|
set permit-any-host disable
|
|
set permit-stun-host disable
|
|
set fixedport disable
|
|
set ippool disable
|
|
set session-ttl 50000
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
edit 244
|
|
set status enable
|
|
set name "HTTP_HTTPS_Policy"
|
|
set uuid 2e8603e8-5d60-51f0-9912-9a48d68e06c5
|
|
set srcintf "WAN-1.1826" "WAN-2.834"
|
|
set dstintf "port37" "port38"
|
|
set action accept
|
|
set ztna-status disable
|
|
set srcaddr "Link3" "Telnet_IP"
|
|
set dstaddr "all"
|
|
set internet-service disable
|
|
set internet-service-src disable
|
|
unset reputation-minimum
|
|
set internet-service6 disable
|
|
set internet-service6-src disable
|
|
unset reputation-minimum6
|
|
set rtp-nat disable
|
|
set schedule "always"
|
|
set schedule-timeout disable
|
|
set policy-expiry disable
|
|
set service "HTTP" "HTTPS"
|
|
set tos-mask 0x00
|
|
set anti-replay enable
|
|
set dynamic-shaping disable
|
|
set passive-wan-health-measurement disable
|
|
set utm-status enable
|
|
set inspection-mode flow
|
|
set profile-type single
|
|
set profile-protocol-options "default"
|
|
set ssl-ssh-profile "Certificate-Inspection-W/O-Expired-"
|
|
set av-profile "g-default"
|
|
set webfilter-profile "standard_webfilter"
|
|
set dnsfilter-profile ''
|
|
set emailfilter-profile ''
|
|
set dlp-profile ''
|
|
set file-filter-profile ''
|
|
set ips-sensor "g-default"
|
|
set application-list ''
|
|
set voip-profile ''
|
|
set ips-voip-filter ''
|
|
set sctp-filter-profile ''
|
|
set logtraffic all
|
|
set logtraffic-start disable
|
|
set capture-packet disable
|
|
set auto-asic-offload enable
|
|
set np-acceleration enable
|
|
set nat enable
|
|
set permit-any-host disable
|
|
set permit-stun-host disable
|
|
set fixedport disable
|
|
set ippool disable
|
|
set session-ttl 0
|
|
set vlan-cos-fwd 255
|
|
set vlan-cos-rev 255
|
|
set fec disable
|
|
set wccp disable
|
|
set disclaimer disable
|
|
set email-collect disable
|
|
set natip 0.0.0.0 0.0.0.0
|
|
set diffserv-copy disable
|
|
set diffserv-forward disable
|
|
set diffserv-reverse disable
|
|
set tcp-mss-sender 0
|
|
set tcp-mss-receiver 0
|
|
set comments ''
|
|
set block-notification disable
|
|
set replacemsg-override-group ''
|
|
set srcaddr-negate disable
|
|
set srcaddr6-negate disable
|
|
set dstaddr-negate disable
|
|
set dstaddr6-negate disable
|
|
set service-negate disable
|
|
set timeout-send-rst disable
|
|
set captive-portal-exempt disable
|
|
set dsri disable
|
|
set radius-mac-auth-bypass disable
|
|
set delay-tcp-npu-session disable
|
|
unset vlan-filter
|
|
set traffic-shaper ''
|
|
set traffic-shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
next
|
|
end
|
|
config firewall shaping-policy
|
|
end
|
|
config firewall shaping-profile
|
|
end
|
|
config firewall local-in-policy
|
|
edit 1
|
|
set uuid e6e91d52-d1e3-51ef-27c4-92f48fc2f0de
|
|
set intf "WAN-1.1826"
|
|
set srcaddr "Admin-Access-8-Cloud-MKT" "Admin-Access-6" "ic-mrtg" "idrac-public-IP"
|
|
set srcaddr-negate disable
|
|
set dstaddr "primary-ip-https-mgt"
|
|
set dstaddr-negate disable
|
|
set action accept
|
|
set service "HTTP" "HTTPS" "SNMP"
|
|
set service-negate disable
|
|
set schedule "always"
|
|
set status enable
|
|
set virtual-patch disable
|
|
set comments "mn-test"
|
|
next
|
|
edit 2
|
|
set uuid e6e96654-d1e3-51ef-58ce-9b1fcc343c7c
|
|
set intf "WAN-1.1826"
|
|
set srcaddr "all"
|
|
set srcaddr-negate disable
|
|
set dstaddr "primary-ip-https-mgt"
|
|
set dstaddr-negate disable
|
|
set action deny
|
|
set service "HTTP" "HTTPS"
|
|
set service-negate disable
|
|
set schedule "always"
|
|
set status enable
|
|
set comments ''
|
|
next
|
|
edit 3
|
|
set uuid e6e99e76-d1e3-51ef-b53c-54dbd418e713
|
|
set intf "port37"
|
|
set srcaddr "Admin-Access-8-Cloud-MKT" "Admin-Access-6" "ic-mrtg" "idrac-public-IP"
|
|
set srcaddr-negate disable
|
|
set dstaddr "firewall-to-nexus-1-lan1"
|
|
set dstaddr-negate disable
|
|
set action accept
|
|
set service "HTTP" "HTTPS" "SNMP"
|
|
set service-negate disable
|
|
set schedule "always"
|
|
set status enable
|
|
set virtual-patch disable
|
|
set comments ''
|
|
next
|
|
edit 4
|
|
set uuid e6e9e73c-d1e3-51ef-d74f-fb52cd02f3c6
|
|
set intf "port37"
|
|
set srcaddr "all"
|
|
set srcaddr-negate disable
|
|
set dstaddr "firewall-to-nexus-1-lan1"
|
|
set dstaddr-negate disable
|
|
set action deny
|
|
set service "HTTP" "HTTPS"
|
|
set service-negate disable
|
|
set schedule "always"
|
|
set status enable
|
|
set comments ''
|
|
next
|
|
end
|
|
config firewall local-in-policy6
|
|
end
|
|
config firewall ttl-policy
|
|
end
|
|
config firewall proxy-policy
|
|
end
|
|
config firewall dnstranslation
|
|
end
|
|
config firewall multicast-policy
|
|
end
|
|
config firewall multicast-policy6
|
|
end
|
|
config firewall interface-policy
|
|
end
|
|
config firewall interface-policy6
|
|
end
|
|
config firewall DoS-policy
|
|
edit 16
|
|
set status disable
|
|
set name "Forward-DoS-Policy-1"
|
|
set comments ''
|
|
set interface "port37"
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set service "HTTP" "kafka-9092" "SMTP" "RDP"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 200
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "tcp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "udp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 500
|
|
next
|
|
edit "udp_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "icmp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_sweep"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_flood"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 17
|
|
set status disable
|
|
set name "Forward-DoS-Policy-2"
|
|
set comments ''
|
|
set interface "port38"
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set service "HTTP" "kafka-9092" "SMTP" "RDP"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 200
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "tcp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "udp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 500
|
|
next
|
|
edit "udp_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "icmp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_sweep"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_flood"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 18
|
|
set status disable
|
|
set name "Reverse-DoS-Policy-1"
|
|
set comments ''
|
|
set interface "WAN-1.1826"
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set service "HTTP" "kafka-9092" "SMTP" "RDP"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 200
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "tcp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "udp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 500
|
|
next
|
|
edit "udp_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "icmp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_sweep"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_flood"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 19
|
|
set status disable
|
|
set name "Reverse-DoS-Policy-2"
|
|
set comments ''
|
|
set interface "WAN-2.834"
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set service "HTTP" "kafka-9092" "SMTP" "RDP"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 200
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "tcp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "udp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 500
|
|
next
|
|
edit "udp_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "icmp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_sweep"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_flood"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 20
|
|
set status disable
|
|
set name "Reverse-DoS-Policy-3"
|
|
set comments ''
|
|
set interface "WAN3.847"
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set service "HTTP" "kafka-9092" "SMTP" "SSH-Authentication" "RDP"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 200
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "tcp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "udp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 500
|
|
next
|
|
edit "udp_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "icmp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_sweep"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_flood"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 11
|
|
set status disable
|
|
set name "ShadhinMusic_Kafka_limit_nexus-1"
|
|
set comments ''
|
|
set interface "port37"
|
|
set srcaddr "all"
|
|
set dstaddr "Shadhin-Music-VM-2-103.209.41.131"
|
|
set service "kafka-9092"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "tcp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "udp_flood"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "icmp_flood"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "icmp_sweep"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "sctp_flood"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 12
|
|
set status disable
|
|
set name "ShadhinMusic_Kafka_limit_nexus-2"
|
|
set comments ''
|
|
set interface "port38"
|
|
set srcaddr "all"
|
|
set dstaddr "Shadhin-Music-VM-2-103.209.41.131"
|
|
set service "kafka-9092"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "tcp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "udp_flood"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "icmp_flood"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "icmp_sweep"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "sctp_flood"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 13
|
|
set status disable
|
|
set name "ShadhinMusic_Kafka_limit_BDCOM-pri"
|
|
set comments ''
|
|
set interface "WAN-2.834"
|
|
set srcaddr "all"
|
|
set dstaddr "Shadhin-Music-VM-2-103.209.41.131"
|
|
set service "kafka-9092"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "udp_flood"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "icmp_flood"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "icmp_sweep"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_flood"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 14
|
|
set status disable
|
|
set name "ShadhinMusic_Kafka_limit_BDCOM-Sec"
|
|
set comments ''
|
|
set interface "WAN-2.834"
|
|
set srcaddr "all"
|
|
set dstaddr "Shadhin-Music-VM-2-103.209.41.131"
|
|
set service "kafka-9092"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "udp_flood"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "icmp_flood"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "icmp_sweep"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_flood"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 15
|
|
set status disable
|
|
set name "ShadhinMusic_Kafka_limit_BDCOM-3"
|
|
set comments ''
|
|
set interface "WAN3.847"
|
|
set srcaddr "all"
|
|
set dstaddr "Shadhin-Music-VM-2-103.209.41.131"
|
|
set service "kafka-9092"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "udp_flood"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "icmp_flood"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "icmp_sweep"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_flood"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status disable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 9
|
|
set status disable
|
|
set name "Shadhin_Music -to-nexus-1"
|
|
set comments ''
|
|
set interface "port37"
|
|
set srcaddr "all"
|
|
set dstaddr "Shadhin-Music-VM-2-103.209.41.131"
|
|
set service "ALL"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "icmp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "icmp_sweep"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 10
|
|
set status disable
|
|
set name "Shadhin_Music -to-nexus-2"
|
|
set comments ''
|
|
set interface "port38"
|
|
set srcaddr "all"
|
|
set dstaddr "Shadhin-Music-VM-2-103.209.41.131"
|
|
set service "ALL"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "icmp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "icmp_sweep"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 3
|
|
set status enable
|
|
set name ''
|
|
set comments ''
|
|
set interface "WAN-1.1826"
|
|
set srcaddr "Bangladeshi-IP"
|
|
set dstaddr "all"
|
|
set service "ALL"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000000000
|
|
next
|
|
edit "udp_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 10000
|
|
next
|
|
edit "icmp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 550
|
|
next
|
|
edit "icmp_sweep"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 10000
|
|
next
|
|
edit "sctp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 4
|
|
set status enable
|
|
set name ''
|
|
set comments "Clone of 3"
|
|
set interface "WAN-2.834"
|
|
set srcaddr "Bangladeshi-IP"
|
|
set dstaddr "all"
|
|
set service "ALL"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000000000
|
|
next
|
|
edit "udp_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 10000
|
|
next
|
|
edit "icmp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 550
|
|
next
|
|
edit "icmp_sweep"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 10000
|
|
next
|
|
edit "sctp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 1
|
|
set status enable
|
|
set name ''
|
|
set comments ''
|
|
set interface "WAN-1.1826"
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set service "ALL"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 20000
|
|
next
|
|
edit "udp_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "icmp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "icmp_sweep"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 4000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 4000
|
|
next
|
|
edit "sctp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 2
|
|
set status enable
|
|
set name ''
|
|
set comments ''
|
|
set interface "WAN-2.834"
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set service "ALL"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "icmp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "icmp_sweep"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 4000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 4000
|
|
next
|
|
edit "sctp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 5
|
|
set status disable
|
|
set name ''
|
|
set comments ''
|
|
set interface "port37"
|
|
set srcaddr "Shadhin_Music _vm_02"
|
|
set dstaddr "all"
|
|
set service "Apache Kafka port-9092"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "icmp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "icmp_sweep"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 6
|
|
set status disable
|
|
set name ''
|
|
set comments ''
|
|
set interface "port38"
|
|
set srcaddr "Shadhin_Music _vm_02"
|
|
set dstaddr "all"
|
|
set service "Apache Kafka port-9092"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 200
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "tcp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 150
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 150
|
|
next
|
|
edit "udp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "icmp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "icmp_sweep"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 7
|
|
set status disable
|
|
set name ''
|
|
set comments ''
|
|
set interface "WAN-1.1826"
|
|
set srcaddr "dos_ip_1" "dos_ip_2"
|
|
set dstaddr "Shadhin_Music _vm_02"
|
|
set service "Apache Kafka port-9092"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "udp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "icmp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "icmp_sweep"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
end
|
|
next
|
|
edit 8
|
|
set status disable
|
|
set name ''
|
|
set comments ''
|
|
set interface "WAN-2.834"
|
|
set srcaddr "dos_ip_1" "dos_ip_2"
|
|
set dstaddr "Shadhin_Music _vm_02"
|
|
set service "Apache Kafka port-9092"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "udp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "icmp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "icmp_sweep"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
end
|
|
next
|
|
edit 21
|
|
set status enable
|
|
set name "Client_Session_Control"
|
|
set comments ''
|
|
set interface "port38"
|
|
set srcaddr "LAUGH-GAS-VM" "Client-MediaSoft"
|
|
set dstaddr "all"
|
|
set service "ALL"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "icmp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "icmp_sweep"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 22
|
|
set status enable
|
|
set name "DoS_Protection_Rule_Inbound"
|
|
set comments ''
|
|
set interface "WAN-2.834"
|
|
set srcaddr "Anomaly_IP"
|
|
set dstaddr "all"
|
|
set service "ALL"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "icmp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "icmp_sweep"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 23
|
|
set status enable
|
|
set name "cPanel"
|
|
set comments ''
|
|
set interface "port23"
|
|
set srcaddr "all"
|
|
set dstaddr "cPanel-2nd_IP_BLOCK"
|
|
set service "ALL"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "tcp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "udp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "udp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "icmp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "icmp_sweep"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "ip_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "sctp_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
edit 24
|
|
set status disable
|
|
set name "RDP"
|
|
set comments ''
|
|
set interface "WAN-1.1826"
|
|
set srcaddr "all"
|
|
set dstaddr "all"
|
|
set service "RDP"
|
|
config anomaly
|
|
edit "tcp_syn_flood"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 20
|
|
next
|
|
edit "tcp_port_scan"
|
|
set status enable
|
|
set log enable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 20
|
|
next
|
|
edit "tcp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "tcp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "udp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "udp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "icmp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 250
|
|
next
|
|
edit "icmp_sweep"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 100
|
|
next
|
|
edit "icmp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 300
|
|
next
|
|
edit "icmp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "ip_src_session"
|
|
set status disable
|
|
set log disable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "ip_dst_session"
|
|
set status disable
|
|
set log disable
|
|
set action pass
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_flood"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 2000
|
|
next
|
|
edit "sctp_scan"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 1000
|
|
next
|
|
edit "sctp_src_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
edit "sctp_dst_session"
|
|
set status enable
|
|
set log disable
|
|
set action block
|
|
set quarantine none
|
|
set threshold 5000
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config firewall DoS-policy6
|
|
end
|
|
config firewall sniffer
|
|
edit 1
|
|
set uuid 54354e7e-d1e6-51ef-b672-59b7c9e0f908
|
|
set status disable
|
|
set logtraffic disable
|
|
set ipv6 disable
|
|
set non-ip enable
|
|
set interface "WAN-1.1826"
|
|
set host "202.134.10.141"
|
|
set port ''
|
|
set protocol ''
|
|
set vlan ''
|
|
set dsri disable
|
|
next
|
|
edit 2
|
|
set uuid 54355eb4-d1e6-51ef-56a7-13da270da8dd
|
|
set status disable
|
|
set logtraffic disable
|
|
set ipv6 disable
|
|
set non-ip enable
|
|
set interface "port38"
|
|
set host "202.134.10.141"
|
|
set port ''
|
|
set protocol ''
|
|
set vlan ''
|
|
set dsri disable
|
|
next
|
|
edit 3
|
|
set uuid 54357462-d1e6-51ef-36a8-892aaf425e60
|
|
set status disable
|
|
set logtraffic disable
|
|
set ipv6 disable
|
|
set non-ip enable
|
|
set interface "port37"
|
|
set host "202.134.10.141"
|
|
set port ''
|
|
set protocol ''
|
|
set vlan ''
|
|
set dsri disable
|
|
next
|
|
end
|
|
config firewall acl
|
|
end
|
|
config firewall acl6
|
|
end
|
|
config firewall central-snat-map
|
|
end
|
|
config firewall ip-translation
|
|
end
|
|
config authentication scheme
|
|
end
|
|
config authentication rule
|
|
end
|
|
config authentication setting
|
|
set active-auth-scheme ''
|
|
set sso-auth-scheme ''
|
|
set update-time 0000-00-00 00:00:00
|
|
set persistent-cookie enable
|
|
set ip-auth-cookie disable
|
|
set cookie-max-age 480
|
|
set cookie-refresh-div 2
|
|
set captive-portal-type fqdn
|
|
set captive-portal ''
|
|
set captive-portal6 ''
|
|
set cert-auth disable
|
|
set captive-portal-port 7830
|
|
set auth-https enable
|
|
set captive-portal-ssl-port 7831
|
|
end
|
|
config system speed-test-schedule
|
|
end
|
|
config switch-controller switch-interface-tag
|
|
end
|
|
config switch-controller 802-1X-settings
|
|
set link-down-auth set-unauth
|
|
set reauth-period 60
|
|
set max-reauth-attempt 3
|
|
set tx-period 30
|
|
set mab-reauth disable
|
|
end
|
|
config switch-controller security-policy 802-1X
|
|
edit "802-1X-policy-default"
|
|
set security-mode 802.1X
|
|
set user-group "SSO_Guest_Users"
|
|
set mac-auth-bypass disable
|
|
set open-auth disable
|
|
set eap-passthru enable
|
|
set eap-auto-untagged-vlans enable
|
|
set guest-vlan disable
|
|
set guest-auth-delay 30
|
|
set auth-fail-vlan disable
|
|
set framevid-apply enable
|
|
set radius-timeout-overwrite disable
|
|
set policy-type 802.1X
|
|
set authserver-timeout-vlan disable
|
|
next
|
|
end
|
|
config switch-controller security-policy local-access
|
|
edit "default"
|
|
set mgmt-allowaccess https ping ssh
|
|
set internal-allowaccess https ping ssh
|
|
next
|
|
end
|
|
config switch-controller location
|
|
end
|
|
config switch-controller lldp-settings
|
|
set tx-hold 4
|
|
set tx-interval 30
|
|
set fast-start-interval 2
|
|
set management-interface internal
|
|
set device-detection enable
|
|
end
|
|
config switch-controller lldp-profile
|
|
edit "default"
|
|
set med-tlvs inventory-management network-policy
|
|
unset 802.1-tlvs
|
|
unset 802.3-tlvs
|
|
set auto-isl disable
|
|
config med-network-policy
|
|
edit "voice"
|
|
set status disable
|
|
next
|
|
edit "voice-signaling"
|
|
set status disable
|
|
next
|
|
edit "guest-voice"
|
|
set status disable
|
|
next
|
|
edit "guest-voice-signaling"
|
|
set status disable
|
|
next
|
|
edit "softphone-voice"
|
|
set status disable
|
|
next
|
|
edit "video-conferencing"
|
|
set status disable
|
|
next
|
|
edit "streaming-video"
|
|
set status disable
|
|
next
|
|
edit "video-signaling"
|
|
set status disable
|
|
next
|
|
end
|
|
next
|
|
edit "default-auto-isl"
|
|
unset med-tlvs
|
|
unset 802.1-tlvs
|
|
unset 802.3-tlvs
|
|
set auto-isl enable
|
|
set auto-isl-hello-timer 3
|
|
set auto-isl-receive-timeout 60
|
|
set auto-isl-port-group 0
|
|
set auto-mclag-icl disable
|
|
next
|
|
edit "default-auto-mclag-icl"
|
|
unset med-tlvs
|
|
unset 802.1-tlvs
|
|
unset 802.3-tlvs
|
|
set auto-isl enable
|
|
set auto-isl-hello-timer 3
|
|
set auto-isl-receive-timeout 60
|
|
set auto-isl-port-group 0
|
|
set auto-mclag-icl enable
|
|
next
|
|
end
|
|
config switch-controller qos dot1p-map
|
|
edit "voice-dot1p"
|
|
set description ''
|
|
set egress-pri-tagging disable
|
|
set priority-0 queue-4
|
|
set priority-1 queue-4
|
|
set priority-2 queue-3
|
|
set priority-3 queue-2
|
|
set priority-4 queue-3
|
|
set priority-5 queue-1
|
|
set priority-6 queue-2
|
|
set priority-7 queue-2
|
|
next
|
|
end
|
|
config switch-controller qos ip-dscp-map
|
|
edit "voice-dscp"
|
|
set description ''
|
|
config map
|
|
edit "1"
|
|
set cos-queue 1
|
|
set value 46
|
|
next
|
|
edit "2"
|
|
set cos-queue 2
|
|
set value 24,26,48,56
|
|
next
|
|
edit "5"
|
|
set cos-queue 3
|
|
set value 34
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config switch-controller qos queue-policy
|
|
edit "default"
|
|
set schedule round-robin
|
|
set rate-by kbps
|
|
config cos-queue
|
|
edit "queue-0"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-1"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-2"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-3"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-4"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-5"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-6"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-7"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
end
|
|
next
|
|
edit "voice-egress"
|
|
set schedule weighted
|
|
set rate-by kbps
|
|
config cos-queue
|
|
edit "queue-0"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-1"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 0
|
|
next
|
|
edit "queue-2"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 6
|
|
next
|
|
edit "queue-3"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 37
|
|
next
|
|
edit "queue-4"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 12
|
|
next
|
|
edit "queue-5"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-6"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-7"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config switch-controller qos qos-policy
|
|
edit "default"
|
|
set default-cos 0
|
|
set trust-dot1p-map ''
|
|
set trust-ip-dscp-map ''
|
|
set queue-policy "default"
|
|
next
|
|
edit "voice-qos"
|
|
set default-cos 0
|
|
set trust-dot1p-map "voice-dot1p"
|
|
set trust-ip-dscp-map "voice-dscp"
|
|
set queue-policy "voice-egress"
|
|
next
|
|
end
|
|
config switch-controller storm-control-policy
|
|
edit "default"
|
|
set description "default storm control on all port"
|
|
set storm-control-mode global
|
|
next
|
|
edit "auto-config"
|
|
set description "storm control policy for fortilink-isl-icl port"
|
|
set storm-control-mode disabled
|
|
next
|
|
end
|
|
config switch-controller auto-config policy
|
|
edit "pse"
|
|
set qos-policy "default"
|
|
set storm-control-policy "auto-config"
|
|
set poe-status enable
|
|
set igmp-flood-report disable
|
|
set igmp-flood-traffic disable
|
|
next
|
|
edit "default"
|
|
set qos-policy "default"
|
|
set storm-control-policy "auto-config"
|
|
set poe-status enable
|
|
set igmp-flood-report disable
|
|
set igmp-flood-traffic disable
|
|
next
|
|
edit "default-icl"
|
|
set qos-policy "default"
|
|
set storm-control-policy "auto-config"
|
|
set poe-status disable
|
|
set igmp-flood-report enable
|
|
set igmp-flood-traffic enable
|
|
next
|
|
end
|
|
config switch-controller auto-config default
|
|
set fgt-policy "default"
|
|
set isl-policy "default"
|
|
set icl-policy "default-icl"
|
|
end
|
|
config switch-controller auto-config custom
|
|
end
|
|
config switch-controller initial-config template
|
|
edit "_default"
|
|
set vlanid 1
|
|
unset allowaccess
|
|
set dhcp-server disable
|
|
next
|
|
edit "quarantine"
|
|
set vlanid 4093
|
|
unset allowaccess
|
|
set auto-ip enable
|
|
set dhcp-server enable
|
|
next
|
|
edit "rspan"
|
|
set vlanid 4092
|
|
unset allowaccess
|
|
set auto-ip enable
|
|
set dhcp-server enable
|
|
next
|
|
edit "voice"
|
|
set vlanid 4091
|
|
unset allowaccess
|
|
set dhcp-server disable
|
|
next
|
|
edit "video"
|
|
set vlanid 4090
|
|
unset allowaccess
|
|
set dhcp-server disable
|
|
next
|
|
edit "onboarding"
|
|
set vlanid 4089
|
|
unset allowaccess
|
|
set dhcp-server disable
|
|
next
|
|
edit "nac_segment"
|
|
set vlanid 4088
|
|
unset allowaccess
|
|
set auto-ip enable
|
|
set dhcp-server enable
|
|
next
|
|
end
|
|
config switch-controller initial-config vlans
|
|
set default-vlan "_default"
|
|
set quarantine "quarantine"
|
|
set rspan "rspan"
|
|
set voice "voice"
|
|
set video "video"
|
|
set nac "onboarding"
|
|
set nac-segment "nac_segment"
|
|
end
|
|
config switch-controller switch-profile
|
|
edit "default"
|
|
set login-passwd-override disable
|
|
set login enable
|
|
set revision-backup-on-logout disable
|
|
set revision-backup-on-upgrade disable
|
|
next
|
|
end
|
|
config switch-controller custom-command
|
|
end
|
|
config switch-controller virtual-port-pool
|
|
end
|
|
config switch-controller ptp settings
|
|
set mode disable
|
|
end
|
|
config switch-controller ptp policy
|
|
edit "default"
|
|
set status enable
|
|
next
|
|
end
|
|
config switch-controller vlan-policy
|
|
end
|
|
config switch-controller dynamic-port-policy
|
|
end
|
|
config switch-controller managed-switch
|
|
end
|
|
config switch-controller switch-group
|
|
end
|
|
config switch-controller stp-settings
|
|
set name ''
|
|
set revision 0
|
|
set hello-time 2
|
|
set forward-time 15
|
|
set max-age 20
|
|
set max-hops 20
|
|
end
|
|
config switch-controller stp-instance
|
|
end
|
|
config switch-controller storm-control
|
|
set rate 500
|
|
set unknown-unicast disable
|
|
set unknown-multicast disable
|
|
set broadcast disable
|
|
end
|
|
config switch-controller global
|
|
set mac-aging-interval 300
|
|
set https-image-push enable
|
|
set vlan-optimization enable
|
|
set vlan-identity name
|
|
set mac-retention-period 24
|
|
set default-virtual-switch-vlan ''
|
|
set dhcp-server-access-list disable
|
|
set log-mac-limit-violations disable
|
|
set sn-dns-resolution enable
|
|
set mac-event-logging disable
|
|
set bounce-quarantined-link disable
|
|
set quarantine-mode by-vlan
|
|
set update-user-device mac-cache lldp dhcp-snooping l2-db l3-db
|
|
set fips-enforce enable
|
|
set firmware-provision-on-authorization disable
|
|
end
|
|
config switch-controller switch-log
|
|
set status enable
|
|
set severity notification
|
|
end
|
|
config switch-controller igmp-snooping
|
|
set aging-time 300
|
|
set flood-unknown-multicast disable
|
|
set query-interval 125
|
|
end
|
|
config switch-controller sflow
|
|
set collector-ip 0.0.0.0
|
|
set collector-port 6343
|
|
end
|
|
config switch-controller network-monitor-settings
|
|
set network-monitoring disable
|
|
end
|
|
config switch-controller flow-tracking
|
|
set sample-mode perimeter
|
|
set sample-rate 512
|
|
set format netflow9
|
|
set level ip
|
|
set max-export-pkt-size 512
|
|
set template-export-period 5
|
|
set timeout-general 3600
|
|
set timeout-icmp 300
|
|
set timeout-max 604800
|
|
set timeout-tcp 3600
|
|
set timeout-tcp-fin 300
|
|
set timeout-tcp-rst 120
|
|
set timeout-udp 300
|
|
end
|
|
config switch-controller snmp-sysinfo
|
|
set status disable
|
|
set engine-id ''
|
|
set description ''
|
|
set contact-info ''
|
|
set location ''
|
|
end
|
|
config switch-controller snmp-trap-threshold
|
|
set trap-high-cpu-threshold 80
|
|
set trap-low-memory-threshold 80
|
|
set trap-log-full-threshold 90
|
|
end
|
|
config switch-controller snmp-community
|
|
end
|
|
config switch-controller snmp-user
|
|
end
|
|
config switch-controller traffic-sniffer
|
|
set mode erspan-auto
|
|
set erspan-ip 0.0.0.0
|
|
end
|
|
config switch-controller remote-log
|
|
edit "syslogd"
|
|
set status disable
|
|
next
|
|
edit "syslogd2"
|
|
set status disable
|
|
next
|
|
end
|
|
config switch-controller mac-policy
|
|
end
|
|
config wireless-controller setting
|
|
set account-id ''
|
|
set country US
|
|
set duplicate-ssid disable
|
|
set fapc-compatibility disable
|
|
set wfa-compatibility disable
|
|
set phishing-ssid-detect enable
|
|
set fake-ssid-action log
|
|
set device-weight 1
|
|
set device-holdoff 5
|
|
set device-idle 1440
|
|
set firmware-provision-on-authorization disable
|
|
set darrp-optimize 86400
|
|
set darrp-optimize-schedules "default-darrp-optimize"
|
|
end
|
|
config wireless-controller log
|
|
set status enable
|
|
set addrgrp-log notification
|
|
set ble-log notification
|
|
set clb-log notification
|
|
set dhcp-starv-log notification
|
|
set led-sched-log notification
|
|
set radio-event-log notification
|
|
set rogue-event-log notification
|
|
set sta-event-log notification
|
|
set sta-locate-log notification
|
|
set wids-log notification
|
|
set wtp-event-log notification
|
|
end
|
|
config wireless-controller apcfg-profile
|
|
end
|
|
config wireless-controller bonjour-profile
|
|
end
|
|
config wireless-controller arrp-profile
|
|
edit "arrp-default"
|
|
set comment ''
|
|
set selection-period 3600
|
|
set monitor-period 300
|
|
set weight-managed-ap 50
|
|
set weight-rogue-ap 10
|
|
set weight-noise-floor 40
|
|
set weight-channel-load 20
|
|
set weight-spectral-rssi 40
|
|
set weight-weather-channel 0
|
|
set weight-dfs-channel 0
|
|
set threshold-ap 250
|
|
set threshold-noise-floor "-85"
|
|
set threshold-channel-load 60
|
|
set threshold-spectral-rssi "-65"
|
|
set threshold-tx-retries 300
|
|
set threshold-rx-errors 50
|
|
set include-weather-channel enable
|
|
set include-dfs-channel enable
|
|
set override-darrp-optimize disable
|
|
next
|
|
end
|
|
config wireless-controller region
|
|
end
|
|
config wireless-controller vap-group
|
|
end
|
|
config wireless-controller wids-profile
|
|
edit "default"
|
|
set comment "Default WIDS profile."
|
|
set sensor-mode disable
|
|
set ap-scan enable
|
|
set ap-bgscan-period 600
|
|
set ap-bgscan-intv 1
|
|
set ap-bgscan-duration 20
|
|
set ap-bgscan-idle 0
|
|
set ap-bgscan-report-intv 30
|
|
set ap-fgscan-report-intv 15
|
|
set ap-scan-passive disable
|
|
set ap-scan-threshold "-90"
|
|
set wireless-bridge enable
|
|
set deauth-broadcast enable
|
|
set null-ssid-probe-resp enable
|
|
set long-duration-attack enable
|
|
set long-duration-thresh 8200
|
|
set invalid-mac-oui enable
|
|
set weak-wep-iv enable
|
|
set auth-frame-flood enable
|
|
set auth-flood-time 10
|
|
set auth-flood-thresh 30
|
|
set assoc-frame-flood enable
|
|
set assoc-flood-time 10
|
|
set assoc-flood-thresh 30
|
|
set spoofed-deauth enable
|
|
set asleap-attack enable
|
|
set eapol-start-flood enable
|
|
set eapol-start-thresh 10
|
|
set eapol-start-intv 1
|
|
set eapol-logoff-flood enable
|
|
set eapol-logoff-thresh 10
|
|
set eapol-logoff-intv 1
|
|
set eapol-succ-flood enable
|
|
set eapol-succ-thresh 10
|
|
set eapol-succ-intv 1
|
|
set eapol-fail-flood enable
|
|
set eapol-fail-thresh 10
|
|
set eapol-fail-intv 1
|
|
set eapol-pre-succ-flood enable
|
|
set eapol-pre-succ-thresh 10
|
|
set eapol-pre-succ-intv 1
|
|
set eapol-pre-fail-flood enable
|
|
set eapol-pre-fail-thresh 10
|
|
set eapol-pre-fail-intv 1
|
|
set deauth-unknown-src-thresh 10
|
|
next
|
|
edit "default-wids-apscan-enabled"
|
|
set comment ''
|
|
set sensor-mode disable
|
|
set ap-scan enable
|
|
set ap-bgscan-period 600
|
|
set ap-bgscan-intv 1
|
|
set ap-bgscan-duration 20
|
|
set ap-bgscan-idle 0
|
|
set ap-bgscan-report-intv 30
|
|
set ap-fgscan-report-intv 15
|
|
set ap-scan-passive disable
|
|
set ap-scan-threshold "-90"
|
|
set wireless-bridge disable
|
|
set deauth-broadcast disable
|
|
set null-ssid-probe-resp disable
|
|
set long-duration-attack disable
|
|
set long-duration-thresh 8200
|
|
set invalid-mac-oui disable
|
|
set weak-wep-iv disable
|
|
set auth-frame-flood disable
|
|
set assoc-frame-flood disable
|
|
set spoofed-deauth disable
|
|
set asleap-attack disable
|
|
set eapol-start-flood disable
|
|
set eapol-logoff-flood disable
|
|
set eapol-succ-flood disable
|
|
set eapol-fail-flood disable
|
|
set eapol-pre-succ-flood disable
|
|
set eapol-pre-fail-flood disable
|
|
set deauth-unknown-src-thresh 10
|
|
next
|
|
end
|
|
config wireless-controller ble-profile
|
|
edit "fortiap-discovery"
|
|
set comment ''
|
|
set advertising ibeacon eddystone-uid eddystone-url
|
|
set ibeacon-uuid "wtp-uuid"
|
|
set major-id 1000
|
|
set minor-id 2000
|
|
set eddystone-namespace "0102030405"
|
|
set eddystone-instance "abcdef"
|
|
set eddystone-url "http://www.fortinet.com"
|
|
set txpower 0
|
|
set beacon-interval 100
|
|
set ble-scanning disable
|
|
next
|
|
end
|
|
config wireless-controller syslog-profile
|
|
end
|
|
config wireless-controller wtp-profile
|
|
end
|
|
config wireless-controller wtp
|
|
end
|
|
config wireless-controller wtp-group
|
|
end
|
|
config wireless-controller qos-profile
|
|
end
|
|
config wireless-controller wag-profile
|
|
end
|
|
config wireless-controller snmp
|
|
set engine-id ''
|
|
set contact-info ''
|
|
set trap-high-cpu-threshold 80
|
|
set trap-high-mem-threshold 80
|
|
end
|
|
config wireless-controller mpsk-profile
|
|
end
|
|
config wireless-controller nac-profile
|
|
end
|
|
config wireless-controller ssid-policy
|
|
end
|
|
config wireless-controller access-control-list
|
|
end
|
|
config wireless-controller ap-status
|
|
end
|
|
config user nac-policy
|
|
end
|
|
config extension-controller dataplan
|
|
end
|
|
config extension-controller extender-profile
|
|
end
|
|
config extension-controller extender
|
|
end
|
|
config extension-controller fortigate-profile
|
|
end
|
|
config extension-controller fortigate
|
|
end
|
|
config system ips
|
|
set signature-hold-time 0h
|
|
end
|
|
config ips custom
|
|
edit "SMTP.Brute.Force.MN"
|
|
set signature "F-SBID(--attack_id 6688; --name \" SMTP.Brute.Force.MN\" ; --pattern \".\" ; --service DNS; --flow bi_direction; --no_case; --context header; --rate 100,60;)"
|
|
unset severity
|
|
unset location
|
|
unset os
|
|
unset application
|
|
unset protocol
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set action pass
|
|
set comment ''
|
|
next
|
|
edit "Custom.IPS.Sig.30120"
|
|
set signature "F-SBID( --attack_id 5247; --name \"Custom.IPS.Sig.30120\" ; --pattern \".\" ; --dst_port 30120 ; --flow from_client; --no_case; --context header; --rate 50,10; --track src_ip; )"
|
|
unset severity
|
|
unset location
|
|
unset os
|
|
unset application
|
|
unset protocol
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set action pass
|
|
set comment ''
|
|
next
|
|
end
|
|
config ips settings
|
|
set packet-log-history 1
|
|
set packet-log-post-attack 0
|
|
set ips-packet-quota 0
|
|
end
|
|
config alertemail setting
|
|
set username "soc@intercloud.com.bd"
|
|
set mailto1 "soc@intercloud.com.bd"
|
|
set mailto2 "cloud.operation@brilliant.com.bd"
|
|
set mailto3 ''
|
|
set filter-mode category
|
|
set email-interval 60
|
|
set IPS-logs disable
|
|
set firewall-authentication-failure-logs disable
|
|
set IPsec-errors-logs enable
|
|
set PPP-errors-logs enable
|
|
set sslvpn-authentication-errors-logs enable
|
|
set antivirus-logs disable
|
|
set webfilter-logs disable
|
|
set configuration-changes-logs enable
|
|
set violation-traffic-logs disable
|
|
set admin-login-logs enable
|
|
set log-disk-usage-warning enable
|
|
set FSSO-disconnect-logs disable
|
|
set ssh-logs disable
|
|
set local-disk-usage 85
|
|
end
|
|
config router access-list
|
|
end
|
|
config router access-list6
|
|
end
|
|
config router aspath-list
|
|
end
|
|
config router prefix-list
|
|
end
|
|
config router prefix-list6
|
|
end
|
|
config router key-chain
|
|
end
|
|
config router community-list
|
|
end
|
|
config router extcommunity-list
|
|
end
|
|
config router route-map
|
|
end
|
|
config router rip
|
|
set default-information-originate disable
|
|
set default-metric 1
|
|
set max-out-metric 0
|
|
config redistribute "connected"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "static"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "ospf"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "bgp"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "isis"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
set update-timer 30
|
|
set timeout-timer 180
|
|
set garbage-timer 120
|
|
set version 2
|
|
end
|
|
config router ripng
|
|
set default-information-originate disable
|
|
set default-metric 1
|
|
set max-out-metric 0
|
|
config redistribute "connected"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "static"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "ospf"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "bgp"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "isis"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
set update-timer 30
|
|
set timeout-timer 180
|
|
set garbage-timer 120
|
|
end
|
|
config router static
|
|
edit 1
|
|
set status enable
|
|
set dst 0.0.0.0 0.0.0.0
|
|
set gateway 118.67.210.45
|
|
set distance 10
|
|
set weight 0
|
|
set priority 11
|
|
set device "WAN-1.1826"
|
|
set comment ''
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set dstaddr ''
|
|
unset internet-service
|
|
set internet-service-custom ''
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 2
|
|
set status enable
|
|
set dst 0.0.0.0 0.0.0.0
|
|
set gateway 118.67.210.49
|
|
set distance 10
|
|
set weight 0
|
|
set priority 16
|
|
set device "WAN-2.834"
|
|
set comment ''
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set dstaddr ''
|
|
unset internet-service
|
|
set internet-service-custom ''
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 3
|
|
set status enable
|
|
set dst 118.67.212.0 255.255.255.0
|
|
set gateway 118.67.209.50
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port37"
|
|
set comment "Via-NEXUS-1"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 5
|
|
set status enable
|
|
set dst 118.67.212.0 255.255.255.0
|
|
set gateway 118.67.209.62
|
|
set distance 5
|
|
set weight 0
|
|
set priority 11
|
|
set device "port38"
|
|
set comment "Via-NEXUS-2"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 9
|
|
set status enable
|
|
set dst 118.67.213.0 255.255.255.0
|
|
set gateway 118.67.209.50
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port37"
|
|
set comment "Additional-IP-Via-NEXUS-1"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 10
|
|
set status enable
|
|
set dst 118.67.213.0 255.255.255.0
|
|
set gateway 118.67.209.62
|
|
set distance 5
|
|
set weight 0
|
|
set priority 11
|
|
set device "port38"
|
|
set comment "Additional-IP-Via-NEXUS-2"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 11
|
|
set status enable
|
|
set dst 192.168.12.0 255.255.255.0
|
|
set gateway 118.67.209.50
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port37"
|
|
set comment "SF-MGT-NEXUS-1"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 12
|
|
set status enable
|
|
set dst 192.168.12.0 255.255.255.0
|
|
set gateway 118.67.209.62
|
|
set distance 10
|
|
set weight 0
|
|
set priority 11
|
|
set device "port38"
|
|
set comment "SF-MGT-NEXUS-2"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 17
|
|
set status enable
|
|
set dst 118.67.216.96 255.255.255.252
|
|
set gateway 118.67.209.50
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port37"
|
|
set comment "CommVault-MA1"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 18
|
|
set status enable
|
|
set dst 118.67.216.100 255.255.255.252
|
|
set gateway 118.67.209.62
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port38"
|
|
set comment "CommVault-MA2"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 19
|
|
set status enable
|
|
set dst 118.67.216.104 255.255.255.252
|
|
set gateway 118.67.209.50
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port37"
|
|
set comment "CommVault-MA3"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 20
|
|
set status enable
|
|
set dst 118.67.219.40 255.255.255.248
|
|
set gateway 118.67.209.50
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port37"
|
|
set comment "CommVault-MA4"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 21
|
|
set status enable
|
|
set dst 118.67.219.40 255.255.255.248
|
|
set gateway 118.67.209.62
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port38"
|
|
set comment "CommVault-MA4"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 23
|
|
set status enable
|
|
set dst 172.21.1.100 255.255.255.255
|
|
set gateway 172.28.1.65
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port26"
|
|
set comment ''
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 24
|
|
set status enable
|
|
set dst 103.248.14.240 255.255.255.248
|
|
set gateway 172.28.1.65
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port26"
|
|
set comment "Zangi-Project"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 25
|
|
set status enable
|
|
set dst 103.248.12.224 255.255.255.224
|
|
set gateway 172.28.1.65
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port26"
|
|
set comment "Zangi-Project"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 26
|
|
set status enable
|
|
set dst 118.67.214.0 255.255.255.224
|
|
set gateway 172.28.1.65
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port26"
|
|
set comment "Zangi-Project"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 27
|
|
set status enable
|
|
set dst 118.67.215.0 255.255.255.0
|
|
set gateway 118.67.209.50
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port37"
|
|
set comment "Cloud-Enabled-Project"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 28
|
|
set status enable
|
|
set dst 118.67.215.0 255.255.255.0
|
|
set gateway 118.67.209.62
|
|
set distance 5
|
|
set weight 0
|
|
set priority 1
|
|
set device "port38"
|
|
set comment "Cloud-Enabled-Project"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 31
|
|
set status enable
|
|
set dst 203.208.207.32 255.255.255.252
|
|
set gateway 172.28.1.65
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port26"
|
|
set comment "Zangi To Brilliant-C3 MGT IP"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 32
|
|
set status enable
|
|
set dst 118.67.217.128 255.255.255.248
|
|
set gateway 172.28.1.65
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port26"
|
|
set comment ''
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 35
|
|
set status enable
|
|
set dst 36.255.68.0 255.255.252.0
|
|
set gateway 118.67.209.50
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port37"
|
|
set comment "To-NEXUS-1-Floting-Net-4"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 36
|
|
set status enable
|
|
set dst 36.255.68.0 255.255.252.0
|
|
set gateway 118.67.209.62
|
|
set distance 5
|
|
set weight 0
|
|
set priority 1
|
|
set device "port38"
|
|
set comment "To-NEXUS-2-Floting-Net-4"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 37
|
|
set status enable
|
|
set dst 10.10.20.0 255.255.255.0
|
|
set gateway 118.67.217.66
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port27"
|
|
set comment ''
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 38
|
|
set status enable
|
|
set dst 118.67.218.76 255.255.255.252
|
|
set gateway 118.67.209.50
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port37"
|
|
set comment "MA-temp-data-transfer"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 39
|
|
set status enable
|
|
set dst 118.67.211.32 255.255.255.224
|
|
set gateway 118.67.209.50
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port37"
|
|
set comment "Cloud-Enabled-Project"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 40
|
|
set status enable
|
|
set dst 118.67.211.32 255.255.255.224
|
|
set gateway 118.67.209.62
|
|
set distance 5
|
|
set weight 0
|
|
set priority 1
|
|
set device "port38"
|
|
set comment "Cloud-Enabled-Project"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 41
|
|
set status enable
|
|
set dst 103.209.40.0 255.255.254.0
|
|
set gateway 118.67.209.50
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port37"
|
|
set comment "To-NEXUS-1-Floting-Net-6"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 42
|
|
set status enable
|
|
set dst 103.209.40.0 255.255.254.0
|
|
set gateway 118.67.209.62
|
|
set distance 5
|
|
set weight 0
|
|
set priority 1
|
|
set device "port38"
|
|
set comment "To-NEXUS-2-Floting-Net-6"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 43
|
|
set status enable
|
|
set dst 103.209.42.0 255.255.254.0
|
|
set gateway 118.67.209.62
|
|
set distance 5
|
|
set weight 0
|
|
set priority 1
|
|
set device "port38"
|
|
set comment "To-NEXUS-2-Floting-Net-7"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 44
|
|
set status enable
|
|
set dst 103.209.42.0 255.255.254.0
|
|
set gateway 118.67.209.50
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port37"
|
|
set comment "To-NEXUS-1-Floting-Net-7"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 45
|
|
set status enable
|
|
set dst 10.246.20.8 255.255.255.255
|
|
set gateway 172.28.1.65
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port26"
|
|
set comment "Brilliant-c3-SIP-IP"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 46
|
|
set status enable
|
|
set dst 10.246.20.21 255.255.255.255
|
|
set gateway 172.28.1.65
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port26"
|
|
set comment "Brilliant-c3-RTP-IP"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 47
|
|
set status enable
|
|
set dst 10.246.20.1 255.255.255.255
|
|
set gateway 172.28.1.65
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port26"
|
|
set comment "Brilliant-Router-SIP-Gateway-IP"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 48
|
|
set status enable
|
|
set dst 10.246.20.17 255.255.255.255
|
|
set gateway 172.28.1.65
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port26"
|
|
set comment "Brilliant-Router-RTP-Gateway-IP"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 49
|
|
set status enable
|
|
set dst 172.16.184.8 255.255.255.255
|
|
set gateway 172.28.1.65
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port26"
|
|
set comment "BICX-CMX-Monitoring"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 50
|
|
set status enable
|
|
set dst 118.67.218.40 255.255.255.248
|
|
set gateway 118.67.209.50
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port37"
|
|
set comment "Cloud-Public-Floating-Network"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 51
|
|
set status enable
|
|
set dst 118.67.218.40 255.255.255.248
|
|
set gateway 118.67.209.62
|
|
set distance 5
|
|
set weight 0
|
|
set priority 1
|
|
set device "port38"
|
|
set comment "Cloud-Public-Floating-Network"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 52
|
|
set status enable
|
|
set dst 163.53.151.8 255.255.255.248
|
|
set gateway 118.67.209.50
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port37"
|
|
set comment "To-Brilliant-Floating-Network-9"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 53
|
|
set status enable
|
|
set dst 163.53.151.8 255.255.255.248
|
|
set gateway 118.67.209.62
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port38"
|
|
set comment "To-Brilliant-Floating-Network-9"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 54
|
|
set status enable
|
|
set dst 192.168.2.211 255.255.255.255
|
|
set gateway 192.168.6.54
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port3"
|
|
set comment "Static Route for Reaching CDR SRV"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 55
|
|
set status enable
|
|
set dst 202.45.159.16 255.255.255.248
|
|
set gateway 192.168.6.54
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port3"
|
|
set comment "This is the static route for pushing CDR from 118.67.215.149 port 6080 VM to 202.45.159.16 which is used for Cataleya VIOS SBC Management."
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 56
|
|
set status enable
|
|
set dst 118.67.219.88 255.255.255.248
|
|
set gateway 118.67.209.62
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port38"
|
|
set comment "To-Brilliant-Floating-Network-10"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 57
|
|
set status enable
|
|
set dst 118.67.219.88 255.255.255.248
|
|
set gateway 118.67.209.50
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port37"
|
|
set comment "To-Brilliant-Floating-Network-10"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 58
|
|
set status enable
|
|
set dst 192.168.8.64 255.255.255.224
|
|
set gateway 192.168.6.54
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port3"
|
|
set comment "This is the static route for CDR Push (From CATALEYA SBC) to a CDR Storage: Server IP: 118.67.215.173"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 59
|
|
set status enable
|
|
set dst 203.208.207.16 255.255.255.248
|
|
set gateway 192.168.6.54
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port3"
|
|
set comment "This is the static route for CDR Push (From CATALEYA SBC) to a CDR Storage: Server IP: 118.67.215.173"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 60
|
|
set status enable
|
|
set dst 172.16.1.248 255.255.255.252
|
|
set gateway 192.168.6.54
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port3"
|
|
set comment "Static Route for BICX CDR SRV"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 61
|
|
set status enable
|
|
set dst 172.19.1.133 255.255.255.255
|
|
set gateway 172.28.1.65
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port26"
|
|
set comment "Porta-Slave-DB"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 62
|
|
set status enable
|
|
set dst 172.31.255.0 255.255.255.224
|
|
set gateway 172.28.1.65
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port26"
|
|
set comment "Static-For Oracle SBC MGT IP Reachability from 118.67.215.149"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 63
|
|
set status enable
|
|
set dst 103.209.40.255 255.255.255.255
|
|
set gateway 118.67.209.62
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port38"
|
|
set comment ''
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 64
|
|
set status enable
|
|
set dst 172.16.16.3 255.255.255.255
|
|
set gateway 192.168.6.54
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port3"
|
|
set comment "Q21 Node 1 IP"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 65
|
|
set status enable
|
|
set dst 172.16.16.4 255.255.255.255
|
|
set gateway 192.168.6.54
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port3"
|
|
set comment "Q21 Node 2 IP"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
edit 66
|
|
set status enable
|
|
set dst 172.16.16.1 255.255.255.255
|
|
set gateway 192.168.6.54
|
|
set distance 10
|
|
set weight 0
|
|
set priority 1
|
|
set device "port3"
|
|
set comment "Q21 Node Gateway_NV1SR3"
|
|
set blackhole disable
|
|
set dynamic-gateway disable
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set bfd disable
|
|
next
|
|
end
|
|
config router policy
|
|
end
|
|
config router policy6
|
|
end
|
|
config router static6
|
|
end
|
|
config router ospf
|
|
set abr-type standard
|
|
set auto-cost-ref-bandwidth 1000
|
|
set distance-external 110
|
|
set distance-inter-area 110
|
|
set distance-intra-area 110
|
|
set database-overflow disable
|
|
set database-overflow-max-lsas 10000
|
|
set database-overflow-time-to-recover 300
|
|
set default-information-originate disable
|
|
set default-information-metric 10
|
|
set default-information-metric-type 2
|
|
set default-information-route-map ''
|
|
set default-metric 10
|
|
set distance 110
|
|
set rfc1583-compatible disable
|
|
set router-id 0.0.0.0
|
|
set spf-timers 5 10
|
|
set bfd disable
|
|
set log-neighbour-changes enable
|
|
set distribute-list-in ''
|
|
set distribute-route-map-in ''
|
|
set restart-mode none
|
|
config redistribute "connected"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
set tag 0
|
|
end
|
|
config redistribute "static"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
set tag 0
|
|
end
|
|
config redistribute "rip"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
set tag 0
|
|
end
|
|
config redistribute "bgp"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
set tag 0
|
|
end
|
|
config redistribute "isis"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
set tag 0
|
|
end
|
|
end
|
|
config router ospf6
|
|
set abr-type standard
|
|
set auto-cost-ref-bandwidth 1000
|
|
set default-information-originate disable
|
|
set log-neighbour-changes enable
|
|
set default-information-metric 10
|
|
set default-information-metric-type 2
|
|
set default-information-route-map ''
|
|
set default-metric 10
|
|
set router-id 0.0.0.0
|
|
set spf-timers 5 10
|
|
set bfd disable
|
|
set restart-mode none
|
|
config redistribute "connected"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
end
|
|
config redistribute "static"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
end
|
|
config redistribute "rip"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
end
|
|
config redistribute "bgp"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
end
|
|
config redistribute "isis"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
end
|
|
end
|
|
config router bgp
|
|
unset as
|
|
set keepalive-timer 60
|
|
set holdtime-timer 180
|
|
set always-compare-med disable
|
|
set bestpath-as-path-ignore disable
|
|
set bestpath-cmp-confed-aspath disable
|
|
set bestpath-cmp-routerid disable
|
|
set bestpath-med-confed disable
|
|
set bestpath-med-missing-as-worst disable
|
|
set client-to-client-reflection enable
|
|
set dampening disable
|
|
set deterministic-med disable
|
|
set ebgp-multipath disable
|
|
set ibgp-multipath disable
|
|
set enforce-first-as enable
|
|
set fast-external-failover enable
|
|
set log-neighbour-changes enable
|
|
set network-import-check enable
|
|
set ignore-optional-capability enable
|
|
set multipath-recursive-distance disable
|
|
set recursive-next-hop disable
|
|
set recursive-inherit-priority disable
|
|
set tag-resolve-mode disable
|
|
set cluster-id 0.0.0.0
|
|
set confederation-identifier 0
|
|
set default-local-preference 100
|
|
set scan-time 60
|
|
set distance-external 20
|
|
set distance-internal 200
|
|
set distance-local 200
|
|
set synchronization disable
|
|
set graceful-restart disable
|
|
config redistribute "connected"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute "rip"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute "ospf"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute "static"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute "isis"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute6 "connected"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute6 "rip"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute6 "ospf"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute6 "static"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute6 "isis"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
end
|
|
config router isis
|
|
set is-type level-1-2
|
|
set adv-passive-only disable
|
|
set adv-passive-only6 disable
|
|
set auth-mode-l1 password
|
|
set auth-mode-l2 password
|
|
set auth-password-l1 ENC iTzCW1g+NyUBP0tTjfnnbc/7SOzdRuSyYul4MgkonaMR62MeJaE04spZNgAhmWt/TnZelAvMx94UUI7fay37314B3pvX0jOhl1Xa65dJC84PKRujWOmwCr70Kh72g/JCltBu7/LwFlCPDOqAIXpSwmhdVYBVSWFwR1Fm3Kc7PcawId+ALKcnM4cxcQWcJ2Bh8cnIYw==
|
|
set auth-password-l2 ENC DwurbnOA/p1d5HDLlE8ZwfBsE6WThf/D+J9OSAcoGmo9dLDb/7+tN2JHzsouJ050ygC6L6KumsYrae6WNqovNzFNrkEZaewDPpPSNnEHRf5J6VPLsSgCF1Kx4hPPAtsKECh6MsSURAnYRpYFaaDlVF57dLng50Y9BZ6IqHBSdbliU0HRQAHJrtphkiBgKriKRWF0Cg==
|
|
set auth-sendonly-l1 disable
|
|
set auth-sendonly-l2 disable
|
|
set ignore-lsp-errors disable
|
|
set lsp-gen-interval-l1 30
|
|
set lsp-gen-interval-l2 30
|
|
set lsp-refresh-interval 900
|
|
set max-lsp-lifetime 1200
|
|
set spf-interval-exp-l1 500 50000
|
|
set spf-interval-exp-l2 500 50000
|
|
set dynamic-hostname disable
|
|
set adjacency-check disable
|
|
set adjacency-check6 disable
|
|
set overload-bit disable
|
|
unset overload-bit-suppress
|
|
set overload-bit-on-startup 0
|
|
set default-originate disable
|
|
set default-originate6 disable
|
|
set metric-style narrow
|
|
set redistribute-l1 disable
|
|
set redistribute-l2 disable
|
|
set redistribute6-l1 disable
|
|
set redistribute6-l2 disable
|
|
config redistribute "connected"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute "rip"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute "ospf"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute "bgp"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute "static"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute6 "connected"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute6 "rip"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute6 "ospf"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute6 "bgp"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute6 "static"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
end
|
|
config router multicast-flow
|
|
end
|
|
config router multicast
|
|
set route-limit 2147483647
|
|
set multicast-routing disable
|
|
config pim-sm-global
|
|
set message-interval 60
|
|
set join-prune-holdtime 210
|
|
set accept-register-list ''
|
|
set accept-source-list ''
|
|
set bsr-candidate disable
|
|
set bsr-allow-quick-refresh disable
|
|
set cisco-register-checksum disable
|
|
set cisco-crp-prefix disable
|
|
set cisco-ignore-rp-set-priority disable
|
|
set register-rp-reachability enable
|
|
set register-source disable
|
|
set register-supression 60
|
|
set null-register-retries 1
|
|
set rp-register-keepalive 185
|
|
set spt-threshold enable
|
|
set ssm disable
|
|
set register-rate-limit 0
|
|
set spt-threshold-group ''
|
|
end
|
|
end
|
|
config router multicast6
|
|
set multicast-routing disable
|
|
config pim-sm-global
|
|
end
|
|
end
|
|
config router auth-path
|
|
end
|
|
config router setting
|
|
set show-filter ''
|
|
set hostname ''
|
|
end
|
|
config router bfd
|
|
end
|
|
config router bfd6
|
|
end
|
|
config system proxy-arp
|
|
end
|
|
config system link-monitor
|
|
edit "WAN-1"
|
|
set addr-mode ipv4
|
|
set srcintf "WAN-1.1826"
|
|
set server-config default
|
|
set server-type static
|
|
set server "118.67.210.45"
|
|
set protocol ping
|
|
set gateway-ip 118.67.210.45
|
|
set source-ip 0.0.0.0
|
|
set interval 500
|
|
set probe-timeout 500
|
|
set failtime 5
|
|
set recoverytime 5
|
|
set probe-count 30
|
|
set ha-priority 1
|
|
set update-cascade-interface enable
|
|
set update-static-route enable
|
|
set update-policy-route enable
|
|
set status enable
|
|
set diffservcode 000000
|
|
unset class-id
|
|
set service-detection disable
|
|
next
|
|
edit "WAN-2"
|
|
set addr-mode ipv4
|
|
set srcintf "WAN-2.834"
|
|
set server-config default
|
|
set server-type static
|
|
set server "118.67.210.49"
|
|
set protocol ping
|
|
set gateway-ip 118.67.210.49
|
|
set source-ip 0.0.0.0
|
|
set interval 500
|
|
set probe-timeout 500
|
|
set failtime 5
|
|
set recoverytime 5
|
|
set probe-count 30
|
|
set ha-priority 1
|
|
set update-cascade-interface enable
|
|
set update-static-route enable
|
|
set update-policy-route enable
|
|
set status enable
|
|
set diffservcode 000000
|
|
unset class-id
|
|
set service-detection disable
|
|
next
|
|
end
|
|
config system wccp
|
|
end
|
|
config system dns64
|
|
set status disable
|
|
set dns64-prefix 64:ff9b::/96
|
|
set always-synthesize-aaaa-record enable
|
|
end
|
|
config system nd-proxy
|
|
set status disable
|
|
end
|
|
config system vne-tunnel
|
|
set status disable
|
|
end
|
|
end
|
|
|
|
config vdom
|
|
edit RnD
|
|
config wireless-controller hotspot20 anqp-venue-name
|
|
end
|
|
config wireless-controller hotspot20 anqp-venue-url
|
|
end
|
|
config wireless-controller hotspot20 anqp-network-auth-type
|
|
end
|
|
config wireless-controller hotspot20 anqp-roaming-consortium
|
|
end
|
|
config wireless-controller hotspot20 anqp-nai-realm
|
|
end
|
|
config wireless-controller hotspot20 anqp-3gpp-cellular
|
|
end
|
|
config wireless-controller hotspot20 anqp-ip-address-type
|
|
end
|
|
config wireless-controller hotspot20 h2qp-operator-name
|
|
end
|
|
config wireless-controller hotspot20 h2qp-wan-metric
|
|
end
|
|
config wireless-controller hotspot20 h2qp-conn-capability
|
|
end
|
|
config wireless-controller hotspot20 icon
|
|
end
|
|
config wireless-controller hotspot20 h2qp-osu-provider
|
|
end
|
|
config wireless-controller hotspot20 qos-map
|
|
end
|
|
config wireless-controller hotspot20 h2qp-advice-of-charge
|
|
end
|
|
config wireless-controller hotspot20 h2qp-osu-provider-nai
|
|
end
|
|
config wireless-controller hotspot20 h2qp-terms-and-conditions
|
|
end
|
|
config wireless-controller hotspot20 hs-profile
|
|
end
|
|
config wireless-controller vap
|
|
end
|
|
config system object-tagging
|
|
edit "default"
|
|
set address optional
|
|
set device optional
|
|
set interface optional
|
|
set multiple enable
|
|
set color 0
|
|
next
|
|
end
|
|
config switch-controller traffic-policy
|
|
edit "quarantine"
|
|
set description "Rate control for quarantined traffic"
|
|
set policer-status enable
|
|
set guaranteed-bandwidth 163840
|
|
set guaranteed-burst 8192
|
|
set maximum-burst 163840
|
|
set cos-queue 0
|
|
next
|
|
edit "sniffer"
|
|
set description "Rate control for sniffer mirrored traffic"
|
|
set policer-status enable
|
|
set guaranteed-bandwidth 50000
|
|
set guaranteed-burst 8192
|
|
set maximum-burst 163840
|
|
set cos-queue 0
|
|
next
|
|
end
|
|
config switch-controller fortilink-settings
|
|
end
|
|
config system settings
|
|
set comments ''
|
|
set vdom-type traffic
|
|
set opmode nat
|
|
set ngfw-mode profile-based
|
|
set http-external-dest fortiweb
|
|
set firewall-session-dirty check-all
|
|
set bfd disable
|
|
set utf8-spam-tagging enable
|
|
set wccp-cache-engine disable
|
|
set vpn-stats-log ipsec pptp l2tp ssl
|
|
set vpn-stats-period 600
|
|
set v4-ecmp-mode source-ip-based
|
|
set fw-session-hairpin disable
|
|
set prp-trailer-action disable
|
|
set snat-hairpin-traffic enable
|
|
set dhcp-proxy disable
|
|
set central-nat disable
|
|
set lldp-reception global
|
|
set lldp-transmission global
|
|
set link-down-access enable
|
|
set nat46-generate-ipv6-fragment-header disable
|
|
set nat46-force-ipv4-packet-forwarding disable
|
|
set nat64-force-ipv6-packet-forwarding enable
|
|
set detect-unknown-esp enable
|
|
set auxiliary-session disable
|
|
set asymroute disable
|
|
set asymroute-icmp disable
|
|
set tcp-session-without-syn disable
|
|
set ses-denied-traffic disable
|
|
set strict-src-check disable
|
|
set allow-linkdown-path disable
|
|
set asymroute6 disable
|
|
set asymroute6-icmp disable
|
|
set sctp-session-without-init disable
|
|
set sip-expectation enable
|
|
set sip-nat-trace enable
|
|
set h323-direct-model enable
|
|
set status enable
|
|
set sip-tcp-port 5060
|
|
set sip-udp-port 5060
|
|
set sip-ssl-port 5061
|
|
set sccp-port 2000
|
|
set multicast-forward enable
|
|
set multicast-ttl-notchange disable
|
|
set allow-subnet-overlap disable
|
|
set deny-tcp-with-icmp disable
|
|
set ecmp-max-paths 255
|
|
set discovered-device-timeout 28
|
|
set email-portal-check-dns enable
|
|
set default-voip-alg-mode proxy-based
|
|
set gui-proxy-inspection enable
|
|
set gui-icap disable
|
|
set gui-implicit-policy enable
|
|
set gui-dns-database disable
|
|
set gui-load-balance disable
|
|
set gui-multicast-policy enable
|
|
set gui-dos-policy enable
|
|
set gui-object-colors enable
|
|
set gui-voip-profile disable
|
|
set gui-ap-profile enable
|
|
set gui-security-profile-group disable
|
|
set gui-local-in-policy disable
|
|
set gui-wanopt-cache disable
|
|
set gui-explicit-proxy disable
|
|
set gui-dynamic-routing enable
|
|
set gui-sslvpn-personal-bookmarks disable
|
|
set gui-sslvpn-realms disable
|
|
set gui-policy-based-ipsec disable
|
|
set gui-threat-weight enable
|
|
set gui-spamfilter disable
|
|
set gui-file-filter enable
|
|
set gui-application-control enable
|
|
set gui-ips enable
|
|
set gui-dhcp-advanced enable
|
|
set gui-vpn enable
|
|
set gui-wireless-controller disable
|
|
set gui-advanced-wireless-features disable
|
|
set gui-switch-controller disable
|
|
set gui-fortiap-split-tunneling disable
|
|
set gui-webfilter-advanced disable
|
|
set gui-traffic-shaping enable
|
|
set gui-wan-load-balancing enable
|
|
set gui-antivirus enable
|
|
set gui-webfilter enable
|
|
set gui-videofilter enable
|
|
set gui-dnsfilter enable
|
|
set gui-waf-profile disable
|
|
set gui-dlp-profile disable
|
|
set gui-fortiextender-controller disable
|
|
set gui-advanced-policy disable
|
|
set gui-allow-unnamed-policy disable
|
|
set gui-email-collection disable
|
|
set gui-multiple-interface-policy enable
|
|
set gui-policy-disclaimer disable
|
|
set gui-ztna enable
|
|
set gui-ot disable
|
|
set location-id 0.0.0.0
|
|
set ike-session-resume disable
|
|
set ike-quick-crash-detect disable
|
|
set ike-dn-format with-space
|
|
set ike-port 500
|
|
set ike-policy-route disable
|
|
set block-land-attack disable
|
|
set application-bandwidth-tracking disable
|
|
set fqdn-session-check disable
|
|
set ext-resource-session-check disable
|
|
set dyn-addr-session-check disable
|
|
set default-policy-expiry-days 30
|
|
set gui-enforce-change-summary require
|
|
set internet-service-database-cache disable
|
|
end
|
|
config system sit-tunnel
|
|
end
|
|
config system arp-table
|
|
end
|
|
config system ipv6-neighbor-cache
|
|
end
|
|
config system vdom-sflow
|
|
set vdom-sflow disable
|
|
set interface-select-method auto
|
|
end
|
|
config system vdom-netflow
|
|
set vdom-netflow disable
|
|
end
|
|
config system vdom-dns
|
|
set vdom-dns disable
|
|
set alt-primary 0.0.0.0
|
|
set alt-secondary 0.0.0.0
|
|
end
|
|
config system replacemsg-group
|
|
edit "default"
|
|
set comment "Default replacement message group."
|
|
set group-type default
|
|
next
|
|
end
|
|
config system session-ttl
|
|
set default 3600
|
|
end
|
|
config system dhcp server
|
|
end
|
|
config system dhcp6 server
|
|
end
|
|
config system zone
|
|
end
|
|
config firewall address
|
|
edit "FABRIC_DEVICE"
|
|
set uuid 82636032-d1e2-51ef-d8a9-6f3d9077cace
|
|
set type ipmask
|
|
set comment "IPv4 addresses of Fabric Devices."
|
|
set associated-interface ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set subnet 0.0.0.0 0.0.0.0
|
|
next
|
|
edit "none"
|
|
set uuid e64aa126-1ad0-51e8-331e-26eb45465a6b
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 0.0.0.0 255.255.255.255
|
|
next
|
|
edit "SSLVPN_TUNNEL_ADDR1"
|
|
set uuid e6b13468-1ad0-51e8-2950-8015d1f45a2d
|
|
set type iprange
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set start-ip 10.212.134.200
|
|
set end-ip 10.212.134.210
|
|
next
|
|
edit "all"
|
|
set uuid e6b14f70-1ad0-51e8-e691-d2c0798cdf76
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 0.0.0.0 0.0.0.0
|
|
next
|
|
edit "FIREWALL_AUTH_PORTAL_ADDRESS"
|
|
set uuid e6b151f0-1ad0-51e8-bdb6-20fe0b08ee12
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 0.0.0.0 0.0.0.0
|
|
next
|
|
edit "VPN_range"
|
|
set uuid 1a38c9bc-7f7c-51e8-4c7e-eb94dfd690a2
|
|
set type iprange
|
|
set comment "VPN: VPN (Created by VPN wizard)"
|
|
set associated-interface ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set start-ip 10.10.10.2
|
|
set end-ip 10.10.10.10
|
|
next
|
|
edit "VPN"
|
|
set uuid 9f158006-7f7e-51e8-a9ae-6bf9c53677ba
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 10.20.30.0 255.255.255.0
|
|
next
|
|
edit "ssl-VPN_range"
|
|
set uuid b7bfbce8-7f7e-51e8-4ee7-33908815ca37
|
|
set type iprange
|
|
set comment "VPN: ssl-VPN (Created by VPN wizard)"
|
|
set associated-interface ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set start-ip 10.20.30.2
|
|
set end-ip 10.20.30.3
|
|
next
|
|
edit "LOCAL NETWORK"
|
|
set uuid 6df7d296-7f81-51e8-7c94-3c605d412c6f
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set subnet 10.10.11.0 255.255.255.0
|
|
next
|
|
edit "baas_local_subnet_1"
|
|
set uuid 52f3e728-ab11-51eb-3a08-be893984e9a6
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing enable
|
|
set fabric-object disable
|
|
set subnet 172.16.16.0 255.255.255.252
|
|
next
|
|
edit "baas_remote_subnet_1"
|
|
set uuid 52f861b8-ab11-51eb-a275-7ca8e08bcdc2
|
|
set type ipmask
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing enable
|
|
set fabric-object disable
|
|
set subnet 192.168.1.112 255.255.255.252
|
|
next
|
|
edit "login.microsoftonline.com"
|
|
set uuid 8b76b34a-d1e2-51ef-9e4b-605989724420
|
|
set type fqdn
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set fqdn "login.microsoftonline.com"
|
|
set cache-ttl 0
|
|
next
|
|
edit "login.microsoft.com"
|
|
set uuid 8b76b62e-d1e2-51ef-df85-d13f0cd5eceb
|
|
set type fqdn
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set fqdn "login.microsoft.com"
|
|
set cache-ttl 0
|
|
next
|
|
edit "login.windows.net"
|
|
set uuid 8b76b91c-d1e2-51ef-e2ba-c925400787b8
|
|
set type fqdn
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set fqdn "login.windows.net"
|
|
set cache-ttl 0
|
|
next
|
|
edit "gmail.com"
|
|
set uuid 8b76bbec-d1e2-51ef-c10d-fa9331321148
|
|
set type fqdn
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set fqdn "gmail.com"
|
|
set cache-ttl 0
|
|
next
|
|
edit "wildcard.google.com"
|
|
set uuid 8b76be80-d1e2-51ef-46a3-16fa73ffede2
|
|
set type fqdn
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set fqdn "*.google.com"
|
|
set cache-ttl 0
|
|
next
|
|
edit "wildcard.dropbox.com"
|
|
set uuid 8b76c20e-d1e2-51ef-6cbb-25cef680b5a0
|
|
set type fqdn
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set allow-routing disable
|
|
set fabric-object disable
|
|
set fqdn "*.dropbox.com"
|
|
set cache-ttl 0
|
|
next
|
|
edit "EMS_ALL_UNMANAGEABLE_CLIENTS"
|
|
set uuid 67837550-d1e6-51ef-7f3f-33d9b144ed0d
|
|
set type dynamic
|
|
set sub-type ems-tag
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set obj-tag ''
|
|
set obj-type ip
|
|
set tag-detection-level ''
|
|
set tag-type ''
|
|
next
|
|
edit "EMS_ALL_UNKNOWN_CLIENTS"
|
|
set uuid 67839954-d1e6-51ef-6985-2876b8f5413d
|
|
set type dynamic
|
|
set sub-type ems-tag
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set obj-tag ''
|
|
set obj-type ip
|
|
set tag-detection-level ''
|
|
set tag-type ''
|
|
next
|
|
edit "FCTEMS_ALL_FORTICLOUD_SERVERS"
|
|
set uuid e123c946-d1e6-51ef-69d3-d03e6b0505c9
|
|
set type dynamic
|
|
set sub-type ems-tag
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set obj-tag ''
|
|
set obj-type ip
|
|
set tag-detection-level ''
|
|
set tag-type ''
|
|
next
|
|
end
|
|
config firewall multicast-address
|
|
edit "all_hosts"
|
|
set type multicastrange
|
|
set start-ip 224.0.0.1
|
|
set end-ip 224.0.0.1
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
next
|
|
edit "all_routers"
|
|
set type multicastrange
|
|
set start-ip 224.0.0.2
|
|
set end-ip 224.0.0.2
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
next
|
|
edit "Bonjour"
|
|
set type multicastrange
|
|
set start-ip 224.0.0.251
|
|
set end-ip 224.0.0.251
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
next
|
|
edit "EIGRP"
|
|
set type multicastrange
|
|
set start-ip 224.0.0.10
|
|
set end-ip 224.0.0.10
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
next
|
|
edit "OSPF"
|
|
set type multicastrange
|
|
set start-ip 224.0.0.5
|
|
set end-ip 224.0.0.6
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
next
|
|
edit "all"
|
|
set type multicastrange
|
|
set start-ip 224.0.0.0
|
|
set end-ip 239.255.255.255
|
|
set comment ''
|
|
set associated-interface ''
|
|
set color 0
|
|
next
|
|
end
|
|
config firewall address6-template
|
|
end
|
|
config firewall address6
|
|
edit "all"
|
|
set uuid e64c3428-1ad0-51e8-7bd1-ed0639f6c8b2
|
|
set type ipprefix
|
|
set ip6 ::/0
|
|
set color 0
|
|
set comment ''
|
|
set fabric-object disable
|
|
next
|
|
edit "none"
|
|
set uuid e64c3f18-1ad0-51e8-a337-3006ffcf9abe
|
|
set type ipprefix
|
|
set ip6 ::/128
|
|
set color 0
|
|
set comment ''
|
|
set fabric-object disable
|
|
next
|
|
edit "SSLVPN_TUNNEL_IPv6_ADDR1"
|
|
set uuid e6b138c8-1ad0-51e8-7df5-f135e16f47b4
|
|
set type ipprefix
|
|
set ip6 fdff:ffff::/120
|
|
set color 0
|
|
set comment ''
|
|
set fabric-object disable
|
|
next
|
|
end
|
|
config firewall multicast-address6
|
|
edit "all"
|
|
set ip6 ff00::/8
|
|
set comment ''
|
|
set color 0
|
|
next
|
|
end
|
|
config system ipv6-tunnel
|
|
end
|
|
config firewall addrgrp
|
|
edit "VPN_split"
|
|
set type default
|
|
set category default
|
|
set uuid 1a2c682a-7f7c-51e8-42e5-72c86eab9dbc
|
|
set member "all"
|
|
set comment "VPN: VPN (Created by VPN wizard)"
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "ssl-VPN_split"
|
|
set type default
|
|
set category default
|
|
set uuid b7b1e26c-7f7e-51e8-202e-1da9f080279c
|
|
set member "VPN"
|
|
set comment "VPN: ssl-VPN (Created by VPN wizard)"
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "baas_local"
|
|
set type default
|
|
set category default
|
|
set uuid 52f61d7c-ab11-51eb-27a9-80e69b7cb97d
|
|
set member "baas_local_subnet_1"
|
|
set comment "VPN: baas (Created by VPN wizard)"
|
|
set color 0
|
|
set allow-routing enable
|
|
set fabric-object disable
|
|
next
|
|
edit "baas_remote"
|
|
set type default
|
|
set category default
|
|
set uuid 52fa755c-ab11-51eb-2904-0019a96b1ed1
|
|
set member "baas_remote_subnet_1"
|
|
set comment "VPN: baas (Created by VPN wizard)"
|
|
set color 0
|
|
set allow-routing enable
|
|
set fabric-object disable
|
|
next
|
|
edit "Microsoft Office 365"
|
|
set type default
|
|
set category default
|
|
set uuid 8b76c4f2-d1e2-51ef-3c0a-29494ff0a4c8
|
|
set member "login.microsoftonline.com" "login.microsoft.com" "login.windows.net"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "G Suite"
|
|
set type default
|
|
set category default
|
|
set uuid 8b76c916-d1e2-51ef-a39b-32be490dd580
|
|
set member "gmail.com" "wildcard.google.com"
|
|
set comment ''
|
|
set exclude disable
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
end
|
|
config firewall addrgrp6
|
|
end
|
|
config firewall wildcard-fqdn custom
|
|
edit "g-Adobe Login"
|
|
set uuid 45a1370a-5626-51eb-48d2-02f82ddf8bb4
|
|
set wildcard-fqdn "*.adobelogin.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-Gotomeeting"
|
|
set uuid 45a14286-5626-51eb-a3ba-d0d8dacc1a38
|
|
set wildcard-fqdn "*.gotomeeting.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-Windows update 2"
|
|
set uuid 45a14a10-5626-51eb-b443-017c85c812aa
|
|
set wildcard-fqdn "*.windowsupdate.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-adobe"
|
|
set uuid 45a1361a-5626-51eb-6736-aa8a00428ef9
|
|
set wildcard-fqdn "*.adobe.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-android"
|
|
set uuid 45a137dc-5626-51eb-cf37-a4b5e8b1cee0
|
|
set wildcard-fqdn "*.android.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-apple"
|
|
set uuid 45a138a4-5626-51eb-9605-a30d9276dc87
|
|
set wildcard-fqdn "*.apple.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-appstore"
|
|
set uuid 45a1396c-5626-51eb-a324-5453959153d7
|
|
set wildcard-fqdn "*.appstore.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-auth.gfx.ms"
|
|
set uuid 45a13a52-5626-51eb-fd10-4326504354ff
|
|
set wildcard-fqdn "*.auth.gfx.ms"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-autoupdate.opera.com"
|
|
set uuid 45a14e5c-5626-51eb-f8ac-5ee802453388
|
|
set wildcard-fqdn "*autoupdate.opera.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-cdn-apple"
|
|
set uuid b56aac36-d1e4-51ef-eff4-b8a920746d4f
|
|
set wildcard-fqdn "*.cdn-apple.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-citrix"
|
|
set uuid 45a13b1a-5626-51eb-6ab8-28a0f6b48412
|
|
set wildcard-fqdn "*.citrixonline.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-dropbox.com"
|
|
set uuid 45a13bec-5626-51eb-7584-7bd101c811cf
|
|
set wildcard-fqdn "*.dropbox.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-eease"
|
|
set uuid 45a13cb4-5626-51eb-953a-f9abede8bf24
|
|
set wildcard-fqdn "*.eease.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-firefox update server"
|
|
set uuid 45a13d86-5626-51eb-448c-d907ac122bf1
|
|
set wildcard-fqdn "aus*.mozilla.org"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-fortinet"
|
|
set uuid 45a13e4e-5626-51eb-0fd5-bf5be8c7ba63
|
|
set wildcard-fqdn "*.fortinet.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-google-drive"
|
|
set uuid 45a14006-5626-51eb-3060-78f71fe5e882
|
|
set wildcard-fqdn "*drive.google.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-google-play"
|
|
set uuid 45a14bb4-5626-51eb-dfae-8e0e0083e420
|
|
set wildcard-fqdn "*play.google.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-google-play2"
|
|
set uuid 45a140d8-5626-51eb-91dc-4c06db505e61
|
|
set wildcard-fqdn "*.ggpht.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-google-play3"
|
|
set uuid 45a141aa-5626-51eb-1c05-445beb99a892
|
|
set wildcard-fqdn "*.books.google.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-googleapis.com"
|
|
set uuid 45a13f34-5626-51eb-3659-1ea74e2ed87a
|
|
set wildcard-fqdn "*.googleapis.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-icloud"
|
|
set uuid 45a144de-5626-51eb-db4c-4f034a7bd727
|
|
set wildcard-fqdn "*.icloud.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-itunes"
|
|
set uuid 45a145d8-5626-51eb-6c3e-f5b30ff1682b
|
|
set wildcard-fqdn "*itunes.apple.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-live.com"
|
|
set uuid 45a14ae2-5626-51eb-f528-341943507dd9
|
|
set wildcard-fqdn "*.live.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-microsoft"
|
|
set uuid 45a146be-5626-51eb-d120-df8cf68e1e8e
|
|
set wildcard-fqdn "*.microsoft.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-mzstatic-apple"
|
|
set uuid b56aad4e-d1e4-51ef-7eca-79d68c7b28d8
|
|
set wildcard-fqdn "*.mzstatic.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-skype"
|
|
set uuid 45a14790-5626-51eb-d759-0b0d0cba8267
|
|
set wildcard-fqdn "*.messenger.live.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-softwareupdate.vmware.com"
|
|
set uuid 45a14862-5626-51eb-d564-48386edea9f7
|
|
set wildcard-fqdn "*.softwareupdate.vmware.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-swscan.apple.com"
|
|
set uuid 45a14d8a-5626-51eb-723e-8c6e26b98fb0
|
|
set wildcard-fqdn "*swscan.apple.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-update.microsoft.com"
|
|
set uuid 45a14c90-5626-51eb-cf31-6d26a1ee4593
|
|
set wildcard-fqdn "*update.microsoft.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "g-verisign"
|
|
set uuid 45a1493e-5626-51eb-b831-9457577c78c2
|
|
set wildcard-fqdn "*.verisign.com"
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
end
|
|
config firewall wildcard-fqdn group
|
|
end
|
|
config firewall traffic-class
|
|
end
|
|
config firewall service category
|
|
edit "General"
|
|
set comment "General services."
|
|
set fabric-object disable
|
|
next
|
|
edit "Web Access"
|
|
set comment "Web access."
|
|
set fabric-object disable
|
|
next
|
|
edit "File Access"
|
|
set comment "File access."
|
|
set fabric-object disable
|
|
next
|
|
edit "Email"
|
|
set comment "Email services."
|
|
set fabric-object disable
|
|
next
|
|
edit "Network Services"
|
|
set comment "Network services."
|
|
set fabric-object disable
|
|
next
|
|
edit "Authentication"
|
|
set comment "Authentication service."
|
|
set fabric-object disable
|
|
next
|
|
edit "Remote Access"
|
|
set comment "Remote access."
|
|
set fabric-object disable
|
|
next
|
|
edit "Tunneling"
|
|
set comment "Tunneling service."
|
|
set fabric-object disable
|
|
next
|
|
edit "VoIP, Messaging & Other Applications"
|
|
set comment "VoIP, messaging, and other applications."
|
|
set fabric-object disable
|
|
next
|
|
edit "Web Proxy"
|
|
set comment "Explicit web proxy."
|
|
set fabric-object disable
|
|
next
|
|
end
|
|
config firewall service custom
|
|
edit "DNS"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 53
|
|
set udp-portrange 53
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "HTTP"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 80
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "HTTPS"
|
|
set proxy disable
|
|
set category "Web Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 443
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "IMAP"
|
|
set proxy disable
|
|
set category "Email"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 143
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "IMAPS"
|
|
set proxy disable
|
|
set category "Email"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 993
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "LDAP"
|
|
set proxy disable
|
|
set category "Authentication"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 389
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "DCE-RPC"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 135
|
|
set udp-portrange 135
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "POP3"
|
|
set proxy disable
|
|
set category "Email"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 110
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "POP3S"
|
|
set proxy disable
|
|
set category "Email"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 995
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SAMBA"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 139
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SMTP"
|
|
set proxy disable
|
|
set category "Email"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 25
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SMTPS"
|
|
set proxy disable
|
|
set category "Email"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 465
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "KERBEROS"
|
|
set proxy disable
|
|
set category "Authentication"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 88 464
|
|
set udp-portrange 88 464
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "LDAP_UDP"
|
|
set proxy disable
|
|
set category "Authentication"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 389
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SMB"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 445
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "FTP"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 21
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "FTP_GET"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 21
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "FTP_PUT"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 21
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "ALL"
|
|
set proxy disable
|
|
set category "General"
|
|
set protocol IP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set protocol-number 0
|
|
next
|
|
edit "ALL_TCP"
|
|
set proxy disable
|
|
set category "General"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1-65535
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "ALL_UDP"
|
|
set proxy disable
|
|
set category "General"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 1-65535
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "ALL_ICMP"
|
|
set proxy disable
|
|
set category "General"
|
|
set protocol ICMP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
unset icmptype
|
|
next
|
|
edit "ALL_ICMP6"
|
|
set proxy disable
|
|
set category "General"
|
|
set protocol ICMP6
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
unset icmptype
|
|
next
|
|
edit "GRE"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol IP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set protocol-number 47
|
|
next
|
|
edit "AH"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol IP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set protocol-number 51
|
|
next
|
|
edit "ESP"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol IP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set protocol-number 50
|
|
next
|
|
edit "AOL"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 5190-5194
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "BGP"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 179
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "DHCP"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 67-68
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "FINGER"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 79
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "GOPHER"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 70
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "H323"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1720 1503
|
|
set udp-portrange 1719
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "IKE"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 500 4500
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "Internet-Locator-Service"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 389
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "IRC"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 6660-6669
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "L2TP"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1701
|
|
set udp-portrange 1701
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "NetMeeting"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1720
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "NFS"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 111 2049
|
|
set udp-portrange 111 2049
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "NNTP"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 119
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "NTP"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 123
|
|
set udp-portrange 123
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "OSPF"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol IP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set protocol-number 89
|
|
next
|
|
edit "PC-Anywhere"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 5631
|
|
set udp-portrange 5632
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "PING"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol ICMP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set icmptype 8
|
|
unset icmpcode
|
|
next
|
|
edit "TIMESTAMP"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol ICMP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set icmptype 13
|
|
unset icmpcode
|
|
next
|
|
edit "INFO_REQUEST"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol ICMP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set icmptype 15
|
|
unset icmpcode
|
|
next
|
|
edit "INFO_ADDRESS"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol ICMP
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set icmptype 17
|
|
unset icmpcode
|
|
next
|
|
edit "ONC-RPC"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 111
|
|
set udp-portrange 111
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "PPTP"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1723
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "QUAKE"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 26000 27000 27910 27960
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RAUDIO"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 7070
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "REXEC"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 512
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RIP"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 520
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RLOGIN"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 513:512-1023
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RSH"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 514:512-1023
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SCCP"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 2000
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SIP"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 5060
|
|
set udp-portrange 5060
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SIP-MSNmessenger"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1863
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SNMP"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 161-162
|
|
set udp-portrange 161-162
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SSH"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 22
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SYSLOG"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 514
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "TALK"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 517-518
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "TELNET"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 23
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "TFTP"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 69
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "MGCP"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 2427 2727
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "UUCP"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 540
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "VDOLIVE"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 7000-7010
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "WAIS"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 210
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "WINFRAME"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1494 2598
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "X-WINDOWS"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 6000-6063
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "PING6"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol ICMP6
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set icmptype 128
|
|
unset icmpcode
|
|
next
|
|
edit "MS-SQL"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1433 1434
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "MYSQL"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 3306
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RDP"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 3389
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "VNC"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 5900
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "DHCP6"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 546 547
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SQUID"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 3128
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "SOCKS"
|
|
set proxy disable
|
|
set category "Tunneling"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1080
|
|
set udp-portrange 1080
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "WINS"
|
|
set proxy disable
|
|
set category "Remote Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1512
|
|
set udp-portrange 1512
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RADIUS"
|
|
set proxy disable
|
|
set category "Authentication"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 1812 1813
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RADIUS-OLD"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 1645 1646
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "CVSPSERVER"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 2401
|
|
set udp-portrange 2401
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "AFS3"
|
|
set proxy disable
|
|
set category "File Access"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 7000-7009
|
|
set udp-portrange 7000-7009
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "TRACEROUTE"
|
|
set proxy disable
|
|
set category "Network Services"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
unset tcp-portrange
|
|
set udp-portrange 33434-33535
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "RTSP"
|
|
set proxy disable
|
|
set category "VoIP, Messaging & Other Applications"
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 554 7070 8554
|
|
set udp-portrange 554
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "MMS"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 1755
|
|
set udp-portrange 1024-5000
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "NONE"
|
|
set proxy disable
|
|
set category ''
|
|
set protocol TCP/UDP/SCTP
|
|
set helper auto
|
|
set check-reset-range default
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 0
|
|
unset udp-portrange
|
|
unset sctp-portrange
|
|
set tcp-halfclose-timer 0
|
|
set tcp-halfopen-timer 0
|
|
set tcp-timewait-timer 0
|
|
set tcp-rst-timer 0
|
|
set udp-idle-timer 0
|
|
set session-ttl 0
|
|
next
|
|
edit "webproxy"
|
|
set proxy enable
|
|
set category "Web Proxy"
|
|
set protocol ALL
|
|
set helper auto
|
|
set comment ''
|
|
set color 0
|
|
set app-service-type disable
|
|
set fabric-object disable
|
|
set iprange 0.0.0.0
|
|
set fqdn ''
|
|
set tcp-portrange 0-65535:0-65535
|
|
next
|
|
end
|
|
config firewall service group
|
|
edit "Email Access"
|
|
set proxy disable
|
|
set member "DNS" "IMAP" "IMAPS" "POP3" "POP3S" "SMTP" "SMTPS"
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Web Access"
|
|
set proxy disable
|
|
set member "DNS" "HTTP" "HTTPS"
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Windows AD"
|
|
set proxy disable
|
|
set member "DCE-RPC" "DNS" "KERBEROS" "LDAP" "LDAP_UDP" "SAMBA" "SMB"
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "Exchange Server"
|
|
set proxy disable
|
|
set member "DCE-RPC" "DNS" "HTTPS"
|
|
set comment ''
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
end
|
|
config firewall internet-service-group
|
|
end
|
|
config firewall internet-service-extension
|
|
end
|
|
config firewall internet-service-custom
|
|
end
|
|
config firewall internet-service-custom-group
|
|
end
|
|
config firewall network-service-dynamic
|
|
end
|
|
config system external-resource
|
|
end
|
|
config vpn certificate ca
|
|
end
|
|
config vpn certificate remote
|
|
end
|
|
config vpn certificate local
|
|
edit "Fortinet_CA_SSL"
|
|
set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_CA_Untrusted"
|
|
set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_GUI_Server"
|
|
set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_RSA1024"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_RSA2048"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_RSA4096"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_DSA1024"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_DSA2048"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_ECDSA256"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_ECDSA384"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_ECDSA521"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_ED25519"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "Fortinet_SSL_ED448"
|
|
set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source factory
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "fw-brilliant2"
|
|
set comments ''
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source user
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
edit "brilliant com bd certificate"
|
|
set comments ''
|
|
unset private-key
|
|
unset certificate
|
|
set range global
|
|
set source user
|
|
set source-ip 0.0.0.0
|
|
set ike-localid-type asn1dn
|
|
set enroll-protocol none
|
|
next
|
|
end
|
|
config vpn certificate crl
|
|
end
|
|
config vpn certificate ocsp-server
|
|
end
|
|
config vpn certificate setting
|
|
set ocsp-status disable
|
|
set ocsp-option server
|
|
set proxy ''
|
|
set source-ip ''
|
|
set ocsp-default-server ''
|
|
set interface-select-method auto
|
|
set check-ca-cert enable
|
|
set check-ca-chain disable
|
|
set subject-match substring
|
|
set subject-set subset
|
|
set cn-match substring
|
|
set cn-allow-multi enable
|
|
config crl-verification
|
|
set expiry ignore
|
|
set leaf-crl-absence ignore
|
|
set chain-crl-absence ignore
|
|
end
|
|
set strict-ocsp-check disable
|
|
set ssl-min-proto-version default
|
|
set cmp-save-extra-certs disable
|
|
set cmp-key-usage-checking enable
|
|
set cert-expire-warning 14
|
|
set certname-rsa1024 "Fortinet_SSL_RSA1024"
|
|
set certname-rsa2048 "Fortinet_SSL_RSA2048"
|
|
set certname-rsa4096 "Fortinet_SSL_RSA4096"
|
|
set certname-dsa1024 "Fortinet_SSL_DSA1024"
|
|
set certname-dsa2048 "Fortinet_SSL_DSA2048"
|
|
set certname-ecdsa256 "Fortinet_SSL_ECDSA256"
|
|
set certname-ecdsa384 "Fortinet_SSL_ECDSA384"
|
|
set certname-ecdsa521 "Fortinet_SSL_ECDSA521"
|
|
set certname-ed25519 "Fortinet_SSL_ED25519"
|
|
set certname-ed448 "Fortinet_SSL_ED448"
|
|
end
|
|
config webfilter ftgd-local-cat
|
|
edit "custom1"
|
|
set status enable
|
|
set id 140
|
|
next
|
|
edit "custom2"
|
|
set status enable
|
|
set id 141
|
|
next
|
|
end
|
|
config ips sensor
|
|
edit "g-default"
|
|
set comment "Prevent critical attacks."
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location all
|
|
set severity medium high critical
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Monitor IPS attacks."
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location all
|
|
set severity medium high critical
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
edit "g-wifi-default"
|
|
set comment "Default configuration for offloading WiFi traffic."
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location all
|
|
set severity medium high critical
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
edit "R&D-IPS"
|
|
set comment ''
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 3
|
|
set rule 29519
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 1000
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 4
|
|
set rule 20940
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 60
|
|
set rate-duration 60
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 5
|
|
set rule 45166
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 4
|
|
set rate-duration 2
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 6
|
|
set rule 29856
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 200
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 7
|
|
set rule 35662
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 200
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 8
|
|
set rule 12090
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 500
|
|
set rate-duration 60
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 9
|
|
set rule 29515
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 200
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 10
|
|
set rule 29514
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 200
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 11
|
|
set rule 43171
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 100
|
|
set rate-duration 5
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 12
|
|
set rule 20945
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 200
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 13
|
|
set rule 29520
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 300
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 14
|
|
set rule 35350
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 60
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 15
|
|
set rule 29513
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 300
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 16
|
|
set rule 42016
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 35
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 17
|
|
set rule 41236
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 30
|
|
set rate-duration 60
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 18
|
|
set rule 18257
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 4
|
|
set rate-duration 2
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 19
|
|
set rule 42802
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 10
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 20
|
|
set rule 20954
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 60
|
|
set rate-duration 60
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 21
|
|
set rule 24072
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 5
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 22
|
|
set rule 42856
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 2000
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 23
|
|
set rule 42617
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 500
|
|
set rate-duration 5
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 24
|
|
set rule 30023
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 100
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 25
|
|
set rule 41842
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 100
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 26
|
|
set rule 32059
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 1000
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 27
|
|
set rule 28634
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 35
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 28
|
|
set rule 40130
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 5
|
|
set rate-duration 2
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 29
|
|
set rule 33106
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 200
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 30
|
|
set rule 39292
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 15
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 31
|
|
set rule 37047
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 100
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 32
|
|
set rule 29512
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 300
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 33
|
|
set rule 17554
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 1000
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 34
|
|
set rule 20946
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 60
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 35
|
|
set rule 29575
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 200
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 36
|
|
set rule 38623
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 10
|
|
set rate-duration 2
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 37
|
|
set rule 22909
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 200
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 38
|
|
set rule 24900
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 1000
|
|
set rate-duration 5
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 39
|
|
set rule 17991
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 275
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 40
|
|
set rule 38273
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 20
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 41
|
|
set rule 45359
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 100
|
|
set rate-duration 10
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 42
|
|
set rule 43461
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 300
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 44
|
|
set rule 30582
|
|
set status enable
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action block
|
|
set rate-count 200
|
|
set rate-duration 1
|
|
set rate-mode continuous
|
|
set rate-track none
|
|
set quarantine none
|
|
next
|
|
edit 1
|
|
set location all
|
|
set severity high critical
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status enable
|
|
set log enable
|
|
set log-packet enable
|
|
set log-attack-context disable
|
|
set action block
|
|
set quarantine none
|
|
next
|
|
edit 43
|
|
set location all
|
|
set severity low medium
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status enable
|
|
set log enable
|
|
set log-packet enable
|
|
set log-attack-context disable
|
|
set action pass
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
edit "sniffer-profile"
|
|
set comment "Monitor IPS attacks."
|
|
set replacemsg-group ''
|
|
set block-malicious-url disable
|
|
set scan-botnet-connections disable
|
|
set extended-log disable
|
|
config entries
|
|
edit 1
|
|
set location all
|
|
set severity high critical
|
|
set protocol all
|
|
set os all
|
|
set application all
|
|
set default-action all
|
|
set default-status all
|
|
unset last-modified
|
|
set status default
|
|
set log enable
|
|
set log-packet disable
|
|
set log-attack-context disable
|
|
set action default
|
|
set quarantine none
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config sctp-filter profile
|
|
end
|
|
config firewall shaper traffic-shaper
|
|
edit "high-priority"
|
|
set guaranteed-bandwidth 0
|
|
set maximum-bandwidth 1048576
|
|
set bandwidth-unit kbps
|
|
set priority high
|
|
set per-policy enable
|
|
set diffserv disable
|
|
set overhead 0
|
|
next
|
|
edit "medium-priority"
|
|
set guaranteed-bandwidth 0
|
|
set maximum-bandwidth 1048576
|
|
set bandwidth-unit kbps
|
|
set priority medium
|
|
set per-policy enable
|
|
set diffserv disable
|
|
set overhead 0
|
|
next
|
|
edit "low-priority"
|
|
set guaranteed-bandwidth 0
|
|
set maximum-bandwidth 1048576
|
|
set bandwidth-unit kbps
|
|
set priority low
|
|
set per-policy enable
|
|
set diffserv disable
|
|
set overhead 0
|
|
next
|
|
edit "guarantee-100kbps"
|
|
set guaranteed-bandwidth 100
|
|
set maximum-bandwidth 1048576
|
|
set bandwidth-unit kbps
|
|
set priority high
|
|
set per-policy enable
|
|
set diffserv disable
|
|
set overhead 0
|
|
next
|
|
edit "shared-1M-pipe"
|
|
set guaranteed-bandwidth 0
|
|
set maximum-bandwidth 1024
|
|
set bandwidth-unit kbps
|
|
set priority high
|
|
set per-policy disable
|
|
set diffserv disable
|
|
set overhead 0
|
|
next
|
|
end
|
|
config firewall shaper per-ip-shaper
|
|
end
|
|
config firewall proxy-address
|
|
edit "IPv4-address"
|
|
set uuid 49eb518e-d1e6-51ef-6e1f-ea9f9467bf58
|
|
set type host-regex
|
|
set host-regex "^([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}$"
|
|
set referrer disable
|
|
set case-sensitivity disable
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
edit "IPv6-address"
|
|
set uuid 49eb5396-d1e6-51ef-1794-fc0c9ff589ff
|
|
set type host-regex
|
|
set host-regex "^\\[(([0-9a-f]{0,4}:){1,7}[0-9a-f]{1,4})\\]$"
|
|
set referrer disable
|
|
set case-sensitivity disable
|
|
set color 0
|
|
set comment ''
|
|
next
|
|
end
|
|
config firewall proxy-addrgrp
|
|
end
|
|
config web-proxy profile
|
|
end
|
|
config web-proxy global
|
|
set ssl-cert "Fortinet_Factory"
|
|
set ssl-ca-cert "Fortinet_CA_SSL"
|
|
set fast-policy-match enable
|
|
set ldap-user-cache disable
|
|
set proxy-fqdn "default.fqdn"
|
|
set max-request-length 8
|
|
set max-message-length 32
|
|
set strict-web-check disable
|
|
set forward-proxy-auth disable
|
|
set forward-server-affinity-timeout 30
|
|
set max-waf-body-cache-length 1
|
|
set webproxy-profile ''
|
|
set learn-client-ip disable
|
|
set policy-category-deep-inspect enable
|
|
set log-policy-pending disable
|
|
end
|
|
config web-proxy explicit
|
|
set status disable
|
|
set http-connection-mode static
|
|
set ipv6-status disable
|
|
set strict-guest disable
|
|
set https-replacement-message enable
|
|
set ssl-algorithm low
|
|
end
|
|
config web-proxy forward-server
|
|
end
|
|
config web-proxy forward-server-group
|
|
end
|
|
config web-proxy debug-url
|
|
end
|
|
config web-proxy wisp
|
|
end
|
|
config wanopt webcache
|
|
set max-object-size 512000
|
|
set neg-resp-time 0
|
|
set fresh-factor 100
|
|
set max-ttl 7200
|
|
set min-ttl 5
|
|
set default-ttl 1440
|
|
set ignore-ims disable
|
|
set ignore-conditional disable
|
|
set ignore-pnc disable
|
|
set ignore-ie-reload enable
|
|
set cache-expired disable
|
|
set cache-cookie disable
|
|
set reval-pnc disable
|
|
set always-revalidate disable
|
|
set cache-by-default disable
|
|
set host-validate disable
|
|
set external disable
|
|
end
|
|
config ftp-proxy explicit
|
|
set status disable
|
|
set ssl disable
|
|
end
|
|
config web-proxy url-match
|
|
end
|
|
config application custom
|
|
end
|
|
config application list
|
|
edit "g-default"
|
|
set comment "Monitor all applications."
|
|
set replacemsg-group ''
|
|
set extended-log disable
|
|
set other-application-action pass
|
|
set app-replacemsg enable
|
|
set other-application-log disable
|
|
set enforce-default-app-port disable
|
|
set force-inclusion-ssl-di-sigs disable
|
|
set unknown-application-action pass
|
|
set unknown-application-log disable
|
|
unset p2p-block-list
|
|
set deep-app-inspection enable
|
|
set options allow-dns
|
|
config entries
|
|
edit 1
|
|
set application 50413
|
|
set action block
|
|
set log enable
|
|
set log-packet disable
|
|
set rate-count 0
|
|
set session-ttl 0
|
|
set quarantine none
|
|
next
|
|
edit 2
|
|
set protocols all
|
|
set vendor all
|
|
set technology all
|
|
set behavior all
|
|
set popularity 1 2 3 4 5
|
|
set action pass
|
|
set log enable
|
|
set log-packet disable
|
|
set session-ttl 0
|
|
set shaper ''
|
|
set shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
set quarantine none
|
|
next
|
|
end
|
|
set control-default-network-services disable
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Monitor all applications."
|
|
set replacemsg-group ''
|
|
set extended-log disable
|
|
set other-application-action pass
|
|
set app-replacemsg enable
|
|
set other-application-log disable
|
|
set enforce-default-app-port disable
|
|
set force-inclusion-ssl-di-sigs disable
|
|
set unknown-application-action pass
|
|
set unknown-application-log disable
|
|
unset p2p-block-list
|
|
set deep-app-inspection enable
|
|
unset options
|
|
config entries
|
|
edit 1
|
|
set protocols all
|
|
set vendor all
|
|
set technology all
|
|
set behavior all
|
|
set popularity 1 2 3 4 5
|
|
set action pass
|
|
set log enable
|
|
set log-packet disable
|
|
set session-ttl 0
|
|
set shaper ''
|
|
set shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
set quarantine none
|
|
next
|
|
end
|
|
set control-default-network-services disable
|
|
next
|
|
edit "g-wifi-default"
|
|
set comment "Default configuration for offloading WiFi traffic."
|
|
set replacemsg-group ''
|
|
set extended-log disable
|
|
set other-application-action pass
|
|
set app-replacemsg enable
|
|
set other-application-log disable
|
|
set enforce-default-app-port disable
|
|
set force-inclusion-ssl-di-sigs disable
|
|
set unknown-application-action pass
|
|
set unknown-application-log disable
|
|
unset p2p-block-list
|
|
set deep-app-inspection disable
|
|
set options allow-dns
|
|
config entries
|
|
edit 1
|
|
set protocols all
|
|
set vendor all
|
|
set technology all
|
|
set behavior all
|
|
set popularity 1 2 3 4 5
|
|
set action pass
|
|
set log disable
|
|
set log-packet disable
|
|
set session-ttl 0
|
|
set shaper ''
|
|
set shaper-reverse ''
|
|
set per-ip-shaper ''
|
|
set quarantine none
|
|
next
|
|
end
|
|
set control-default-network-services disable
|
|
next
|
|
edit "R&D-AC"
|
|
set comment ''
|
|
set replacemsg-group ''
|
|
set extended-log disable
|
|
set other-application-action pass
|
|
set app-replacemsg enable
|
|
set other-application-log enable
|
|
set enforce-default-app-port disable
|
|
set force-inclusion-ssl-di-sigs disable
|
|
set unknown-application-action pass
|
|
set unknown-application-log enable
|
|
unset p2p-block-list
|
|
set deep-app-inspection enable
|
|
set options allow-dns
|
|
config entries
|
|
edit 1
|
|
set application 6 30074 30147 30175 30233 31554 38683
|
|
set action block
|
|
set log enable
|
|
set log-packet disable
|
|
set rate-count 0
|
|
set session-ttl 0
|
|
set quarantine none
|
|
next
|
|
edit 2
|
|
set category 2 6
|
|
set protocols all
|
|
set vendor all
|
|
set technology all
|
|
set behavior all
|
|
set popularity 1 2 3 4 5
|
|
set action block
|
|
set log enable
|
|
set log-packet disable
|
|
set session-ttl 0
|
|
set quarantine none
|
|
next
|
|
end
|
|
set control-default-network-services disable
|
|
next
|
|
edit "TEST"
|
|
set comment ''
|
|
set replacemsg-group ''
|
|
set extended-log disable
|
|
set other-application-action pass
|
|
set app-replacemsg enable
|
|
set other-application-log enable
|
|
set enforce-default-app-port disable
|
|
set force-inclusion-ssl-di-sigs disable
|
|
set unknown-application-action pass
|
|
set unknown-application-log disable
|
|
unset p2p-block-list
|
|
set deep-app-inspection enable
|
|
set options allow-dns
|
|
config entries
|
|
edit 1
|
|
set category 2 6
|
|
set protocols all
|
|
set vendor all
|
|
set technology all
|
|
set behavior all
|
|
set popularity 1 2 3 4 5
|
|
set action block
|
|
set log enable
|
|
set log-packet disable
|
|
set session-ttl 0
|
|
set quarantine none
|
|
next
|
|
end
|
|
set control-default-network-services disable
|
|
next
|
|
end
|
|
config application group
|
|
end
|
|
config dlp data-type
|
|
edit "g-credit-card"
|
|
set pattern "\\b([2-6]{1}\\d{3})[- ]?(\\d{4})[- ]?(\\d{2})[- ]?(\\d{2})[- ]?(\\d{2,4})\\b"
|
|
set verify "built-in"
|
|
set look-back 20
|
|
set look-ahead 1
|
|
set transform "\\b\\1[- ]?\\2[- ]?\\3[- ]?\\4[- ]?\\5\\b"
|
|
set verify-transformed-pattern disable
|
|
set comment ''
|
|
next
|
|
edit "g-hex"
|
|
set pattern "built-in"
|
|
set verify ''
|
|
set transform ''
|
|
set comment ''
|
|
next
|
|
edit "g-keyword"
|
|
set pattern "built-in"
|
|
set verify ''
|
|
set transform ''
|
|
set comment ''
|
|
next
|
|
edit "g-mip-label"
|
|
set pattern "^[[:xdigit:]]{8}-[[:xdigit:]]{4}-[[:xdigit:]]{4}-[[:xdigit:]]{4}-[[:xdigit:]]{12}$"
|
|
set verify ''
|
|
set transform "built-in"
|
|
set comment ''
|
|
next
|
|
edit "g-regex"
|
|
set pattern "built-in"
|
|
set verify ''
|
|
set transform ''
|
|
set comment ''
|
|
next
|
|
edit "g-ssn-us"
|
|
set pattern "\\b(\\d{3})-(\\d{2})-(\\d{4})\\b"
|
|
set verify "(?<!-)\\b(?!666|000|9\\d{2})\\d{3}-(?!00)\\d{2}-(?!0{4})\\d{4}\\b(?!-)"
|
|
set look-back 12
|
|
set look-ahead 1
|
|
set transform "\\b\\1-\\2-\\3\\b"
|
|
set verify-transformed-pattern disable
|
|
set comment ''
|
|
next
|
|
end
|
|
config dlp dictionary
|
|
end
|
|
config dlp sensor
|
|
end
|
|
config dlp filepattern
|
|
edit 1
|
|
set name "builtin-patterns"
|
|
set comment ''
|
|
config entries
|
|
edit "*.bat"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.com"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.dll"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.doc"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.exe"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.gz"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.hta"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.ppt"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.rar"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.scr"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.tar"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.tgz"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.vb?"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.wps"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.xl?"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.zip"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.pif"
|
|
set filter-type pattern
|
|
next
|
|
edit "*.cpl"
|
|
set filter-type pattern
|
|
next
|
|
end
|
|
next
|
|
edit 2
|
|
set name "all_executables"
|
|
set comment ''
|
|
config entries
|
|
edit "bat"
|
|
set filter-type type
|
|
set file-type bat
|
|
next
|
|
edit "exe"
|
|
set filter-type type
|
|
set file-type exe
|
|
next
|
|
edit "elf"
|
|
set filter-type type
|
|
set file-type elf
|
|
next
|
|
edit "hta"
|
|
set filter-type type
|
|
set file-type hta
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config dlp sensitivity
|
|
edit "Private"
|
|
next
|
|
edit "Critical"
|
|
next
|
|
edit "Warning"
|
|
next
|
|
end
|
|
config dlp fp-doc-source
|
|
end
|
|
config dlp profile
|
|
edit "g-default"
|
|
set comment "Default profile."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set dlp-log enable
|
|
set extended-log disable
|
|
set nac-quar-log disable
|
|
unset full-archive-proto
|
|
unset summary-proto
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Log a summary of email and web traffic."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set dlp-log enable
|
|
set extended-log disable
|
|
set nac-quar-log disable
|
|
unset full-archive-proto
|
|
set summary-proto smtp pop3 imap http-get http-post
|
|
next
|
|
end
|
|
config webfilter content
|
|
end
|
|
config webfilter content-header
|
|
end
|
|
config webfilter urlfilter
|
|
edit 1
|
|
set name "R&D-WF"
|
|
set comment ''
|
|
set one-arm-ips-urlfilter disable
|
|
set ip-addr-block disable
|
|
set ip4-mapped-ip6 disable
|
|
config entries
|
|
edit 1
|
|
set url "*.bdjobs.com"
|
|
set type wildcard
|
|
set action block
|
|
set antiphish-action block
|
|
set status enable
|
|
set referrer-host ''
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config videofilter youtube-key
|
|
end
|
|
config videofilter youtube-channel-filter
|
|
end
|
|
config videofilter profile
|
|
end
|
|
config webfilter ips-urlfilter-setting
|
|
set device ''
|
|
set distance 1
|
|
set gateway 0.0.0.0
|
|
set geo-filter ''
|
|
end
|
|
config webfilter ips-urlfilter-setting6
|
|
set device ''
|
|
set distance 1
|
|
set gateway6 ::
|
|
set geo-filter ''
|
|
end
|
|
config emailfilter bword
|
|
end
|
|
config emailfilter block-allow-list
|
|
end
|
|
config emailfilter mheader
|
|
end
|
|
config emailfilter dnsbl
|
|
end
|
|
config emailfilter iptrust
|
|
end
|
|
config log threat-weight
|
|
set status enable
|
|
config level
|
|
set low 5
|
|
set medium 10
|
|
set high 30
|
|
set critical 50
|
|
end
|
|
set blocked-connection high
|
|
set failed-connection low
|
|
set url-block-detected high
|
|
set botnet-connection-detected critical
|
|
config malware
|
|
set virus-infected critical
|
|
set fortindr critical
|
|
set fortisandbox critical
|
|
set file-blocked low
|
|
set command-blocked disable
|
|
set oversized disable
|
|
set virus-scan-error high
|
|
set switch-proto disable
|
|
set mimefragmented disable
|
|
set virus-file-type-executable medium
|
|
set virus-outbreak-prevention critical
|
|
set content-disarm medium
|
|
set malware-list medium
|
|
set ems-threat-feed medium
|
|
set fsa-malicious critical
|
|
set fsa-high-risk high
|
|
set fsa-medium-risk medium
|
|
end
|
|
config ips
|
|
set info-severity disable
|
|
set low-severity low
|
|
set medium-severity medium
|
|
set high-severity high
|
|
set critical-severity critical
|
|
end
|
|
config web
|
|
edit 1
|
|
set category 26
|
|
set level high
|
|
next
|
|
edit 2
|
|
set category 61
|
|
set level high
|
|
next
|
|
edit 3
|
|
set category 86
|
|
set level high
|
|
next
|
|
edit 4
|
|
set category 1
|
|
set level medium
|
|
next
|
|
edit 5
|
|
set category 3
|
|
set level medium
|
|
next
|
|
edit 6
|
|
set category 4
|
|
set level medium
|
|
next
|
|
edit 7
|
|
set category 5
|
|
set level medium
|
|
next
|
|
edit 8
|
|
set category 6
|
|
set level medium
|
|
next
|
|
edit 9
|
|
set category 12
|
|
set level medium
|
|
next
|
|
edit 10
|
|
set category 59
|
|
set level medium
|
|
next
|
|
edit 11
|
|
set category 62
|
|
set level medium
|
|
next
|
|
edit 12
|
|
set category 83
|
|
set level medium
|
|
next
|
|
edit 13
|
|
set category 72
|
|
set level low
|
|
next
|
|
edit 14
|
|
set category 14
|
|
set level low
|
|
next
|
|
edit 15
|
|
set category 96
|
|
set level medium
|
|
next
|
|
end
|
|
config application
|
|
edit 1
|
|
set category 2
|
|
set level low
|
|
next
|
|
edit 2
|
|
set category 6
|
|
set level medium
|
|
next
|
|
end
|
|
end
|
|
config icap server
|
|
end
|
|
config icap server-group
|
|
end
|
|
config icap profile
|
|
edit "default"
|
|
set replacemsg-group ''
|
|
set comment ''
|
|
set request disable
|
|
set response disable
|
|
unset file-transfer
|
|
set streaming-content-bypass disable
|
|
set 204-response disable
|
|
set preview disable
|
|
set methods delete get head options post put trace connect other
|
|
set icap-block-log disable
|
|
set chunk-encap disable
|
|
unset extension-feature
|
|
set timeout 30
|
|
next
|
|
end
|
|
config system network-visibility
|
|
set destination-visibility enable
|
|
set source-location enable
|
|
set destination-hostname-visibility enable
|
|
set hostname-ttl 86400
|
|
set hostname-limit 5000
|
|
set destination-location enable
|
|
end
|
|
config user certificate
|
|
end
|
|
config user radius
|
|
end
|
|
config user tacacs+
|
|
end
|
|
config user exchange
|
|
end
|
|
config user ldap
|
|
end
|
|
config user krb-keytab
|
|
end
|
|
config user domain-controller
|
|
end
|
|
config user pop3
|
|
end
|
|
config user saml
|
|
end
|
|
config user external-identity-provider
|
|
end
|
|
config user fsso
|
|
end
|
|
config user adgrp
|
|
end
|
|
config user fsso-polling
|
|
end
|
|
config user fortitoken
|
|
end
|
|
config user password-policy
|
|
end
|
|
config user local
|
|
edit "SSL_VPN"
|
|
set status enable
|
|
set type password
|
|
set two-factor disable
|
|
set email-to ''
|
|
set sms-server fortiguard
|
|
set sms-phone ''
|
|
set passwd-policy ''
|
|
set passwd-time 2018-07-04 17:48:42
|
|
set authtimeout 0
|
|
set auth-concurrent-override disable
|
|
set ppk-secret ENC NyMmV6xyZmWgEEU25xyxW4g33YShRVus5Zft4c1eq10L4ZcYIWSvnk92BxtcHzCW36DvB01zgS/qbRAZHgbiFSHzy9fqByJJc/xhy55i6o5+HLnuARrrRq4rK41kyB3jEFPavAYQAXDdLbgG4OrzvjLTHwbVqDQVGiknJw42xgIgy82uVogOM+7lJFESGBfCLptDcg==
|
|
set ppk-identity ''
|
|
set passwd ENC 1DizqQen94N5/0fLWdf7BZj+xkOd2mypSOMEARHW7xq18WlrUHdMNM7LkeGhGZRmMrNXmug9nuZqQSz1GT7RuHL5gYVIspVq9Dj7QIe6cqYyplsOOP8igD5Lz6xtaggpyHKIj86qttMIh7/oWK5lj+oGXb3FgswCjRX+O3LZcNqxnN+42/0DCs3tQw6VYMRcl/ikLw==
|
|
next
|
|
end
|
|
config user setting
|
|
set auth-type http https ftp telnet
|
|
set auth-cert "Fortinet_Factory"
|
|
set auth-ca-cert ''
|
|
set auth-secure-http disable
|
|
set auth-http-basic disable
|
|
set auth-ssl-allow-renegotiation disable
|
|
set auth-src-mac enable
|
|
set auth-on-demand implicitly
|
|
set auth-timeout 5
|
|
set auth-timeout-type idle-timeout
|
|
set auth-portal-timeout 3
|
|
set radius-ses-timeout-act hard-timeout
|
|
set auth-blackout-time 0
|
|
set auth-invalid-max 5
|
|
set auth-lockout-threshold 3
|
|
set auth-lockout-duration 0
|
|
set per-policy-disclaimer disable
|
|
set auth-ssl-min-proto-version default
|
|
unset auth-ssl-max-proto-version
|
|
set auth-ssl-sigalgs all
|
|
end
|
|
config user peer
|
|
end
|
|
config user peergrp
|
|
end
|
|
config user quarantine
|
|
set quarantine disable
|
|
set traffic-policy ''
|
|
set firewall-groups ''
|
|
end
|
|
config user group
|
|
edit "SSO_Guest_Users"
|
|
set authtimeout 0
|
|
set http-digest-realm ''
|
|
next
|
|
edit "SSL_VPN"
|
|
set group-type firewall
|
|
set authtimeout 0
|
|
set auth-concurrent-override disable
|
|
set http-digest-realm ''
|
|
next
|
|
edit "SSL_VPN_USER"
|
|
set group-type firewall
|
|
set authtimeout 0
|
|
set auth-concurrent-override disable
|
|
set http-digest-realm ''
|
|
set member "SSL_VPN"
|
|
next
|
|
end
|
|
config user security-exempt-list
|
|
end
|
|
config vpn ssl web realm
|
|
end
|
|
config vpn ssl web host-check-software
|
|
edit "FortiClient-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "1A0271D5-3D4F-46DB-0C2C-AB37BA90D9F7"
|
|
next
|
|
edit "FortiClient-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "528CB157-D384-4593-AAAA-E42DFF111CED"
|
|
next
|
|
edit "FortiClient-AV-Vista"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "385618A6-2256-708E-3FB9-7E98B93F91F9"
|
|
next
|
|
edit "FortiClient-FW-Vista"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "006D9983-6839-71D6-14E6-D7AD47ECD682"
|
|
next
|
|
edit "FortiClient-AV-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "71629DC5-BE6F-CCD3-C5A5-014980643264"
|
|
next
|
|
edit "AVG-Internet-Security-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "17DDD097-36FF-435F-9E1B-52D74245D6BF"
|
|
next
|
|
edit "AVG-Internet-Security-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "8DECF618-9569-4340-B34A-D78D28969B66"
|
|
next
|
|
edit "AVG-Internet-Security-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "0C939084-9E57-CBDB-EA61-0B0C7F62AF82"
|
|
next
|
|
edit "AVG-Internet-Security-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "34A811A1-D438-CA83-C13E-A23981B1E8F9"
|
|
next
|
|
edit "CA-Anti-Virus"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "17CFD1EA-56CF-40B5-A06B-BD3A27397C93"
|
|
next
|
|
edit "CA-Internet-Security-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "6B98D35F-BB76-41C0-876B-A50645ED099A"
|
|
next
|
|
edit "CA-Internet-Security-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "38102F93-1B6E-4922-90E1-A35D8DC6DAA3"
|
|
next
|
|
edit "CA-Internet-Security-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "3EED0195-0A4B-4EF3-CC4F-4F401BDC245F"
|
|
next
|
|
edit "CA-Internet-Security-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "06D680B0-4024-4FAB-E710-E675E50F6324"
|
|
next
|
|
edit "CA-Personal-Firewall"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "14CB4B80-8E52-45EA-905E-67C1267B4160"
|
|
next
|
|
edit "F-Secure-Internet-Security-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "E7512ED5-4245-4B4D-AF3A-382D3F313F15"
|
|
next
|
|
edit "F-Secure-Internet-Security-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "D4747503-0346-49EB-9262-997542F79BF4"
|
|
next
|
|
edit "F-Secure-Internet-Security-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "15414183-282E-D62C-CA37-EF24860A2F17"
|
|
next
|
|
edit "F-Secure-Internet-Security-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "2D7AC0A6-6241-D774-E168-461178D9686C"
|
|
next
|
|
edit "Kaspersky-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "2C4D4BC6-0793-4956-A9F9-E252435469C0"
|
|
next
|
|
edit "Kaspersky-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "2C4D4BC6-0793-4956-A9F9-E252435469C0"
|
|
next
|
|
edit "Kaspersky-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "AE1D740B-8F0F-D137-211D-873D44B3F4AE"
|
|
next
|
|
edit "Kaspersky-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "9626F52E-C560-D06F-0A42-2E08BA60B3D5"
|
|
next
|
|
edit "McAfee-Internet-Security-Suite-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "84B5EE75-6421-4CDE-A33A-DD43BA9FAD83"
|
|
next
|
|
edit "McAfee-Internet-Security-Suite-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "94894B63-8C7F-4050-BDA4-813CA00DA3E8"
|
|
next
|
|
edit "McAfee-Internet-Security-Suite-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "86355677-4064-3EA7-ABB3-1B136EB04637"
|
|
next
|
|
edit "McAfee-Internet-Security-Suite-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "BE0ED752-0A0B-3FFF-80EC-B2269063014C"
|
|
next
|
|
edit "McAfee-Virus-Scan-Enterprise"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "918A2B0B-2C60-4016-A4AB-E868DEABF7F0"
|
|
next
|
|
edit "Norton-360-2.0-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "A5F1BC7C-EA33-4247-961C-0217208396C4"
|
|
next
|
|
edit "Norton-360-2.0-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "371C0A40-5A0C-4AD2-A6E5-69C02037FBF3"
|
|
next
|
|
edit "Norton-360-3.0-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "E10A9785-9598-4754-B552-92431C1C35F8"
|
|
next
|
|
edit "Norton-360-3.0-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "7C21A4C9-F61F-4AC4-B722-A6E19C16F220"
|
|
next
|
|
edit "Norton-Internet-Security-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "E10A9785-9598-4754-B552-92431C1C35F8"
|
|
next
|
|
edit "Norton-Internet-Security-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "7C21A4C9-F61F-4AC4-B722-A6E19C16F220"
|
|
next
|
|
edit "Norton-Internet-Security-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855"
|
|
next
|
|
edit "Norton-Internet-Security-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "B0F2DB13-C654-2E74-30D4-99C9310F0F2E"
|
|
next
|
|
edit "Symantec-Endpoint-Protection-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "FB06448E-52B8-493A-90F3-E43226D3305C"
|
|
next
|
|
edit "Symantec-Endpoint-Protection-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "BE898FE3-CD0B-4014-85A9-03DB9923DDB6"
|
|
next
|
|
edit "Symantec-Endpoint-Protection-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855"
|
|
next
|
|
edit "Symantec-Endpoint-Protection-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "B0F2DB13-C654-2E74-30D4-99C9310F0F2E"
|
|
next
|
|
edit "Panda-Antivirus+Firewall-2008-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "EEE2D94A-D4C1-421A-AB2C-2CE8FE51747A"
|
|
next
|
|
edit "Panda-Antivirus+Firewall-2008-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "7B090DC0-8905-4BAF-8040-FD98A41C8FB8"
|
|
next
|
|
edit "Panda-Internet-Security-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "4570FB70-5C9E-47E9-B16C-A3A6A06C4BF0"
|
|
next
|
|
edit "Panda-Internet-Security-2006~2007-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "4570FB70-5C9E-47E9-B16C-A3A6A06C4BF0"
|
|
next
|
|
edit "Panda-Internet-Security-2008~2009-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "7B090DC0-8905-4BAF-8040-FD98A41C8FB8"
|
|
next
|
|
edit "Sophos-Anti-Virus"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "3F13C776-3CBE-4DE9-8BF6-09E5183CA2BD"
|
|
next
|
|
edit "Sophos-Enpoint-Secuirty-and-Control-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "0786E95E-326A-4524-9691-41EF88FB52EA"
|
|
next
|
|
edit "Sophos-Enpoint-Secuirty-and-Control-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "479CCF92-4960-B3E0-7373-BF453B467D2C"
|
|
next
|
|
edit "Sophos-Enpoint-Secuirty-and-Control-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "7FA74EB7-030F-B2B8-582C-1670C5953A57"
|
|
next
|
|
edit "Trend-Micro-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "7D2296BC-32CC-4519-917E-52E652474AF5"
|
|
next
|
|
edit "Trend-Micro-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "3E790E9E-6A5D-4303-A7F9-185EC20F3EB6"
|
|
next
|
|
edit "Trend-Micro-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "48929DFC-7A52-A34F-8351-C4DBEDBD9C50"
|
|
next
|
|
edit "Trend-Micro-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "70A91CD9-303D-A217-A80E-6DEE136EDB2B"
|
|
next
|
|
edit "ZoneAlarm-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "5D467B10-818C-4CAB-9FF7-6893B5B8F3CF"
|
|
next
|
|
edit "ZoneAlarm-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "829BDA32-94B3-44F4-8446-F8FCFF809F8B"
|
|
next
|
|
edit "ZoneAlarm-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "D61596DF-D219-341C-49B3-AD30538CBC5B"
|
|
next
|
|
edit "ZoneAlarm-FW-Vista-Win7"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "EE2E17FA-9876-3544-62EC-0405AD5FFB20"
|
|
next
|
|
edit "ESET-Smart-Security-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "19259FAE-8396-A113-46DB-15B0E7DFA289"
|
|
next
|
|
edit "ESET-Smart-Security-FW"
|
|
set os-type windows
|
|
set type fw
|
|
set version ''
|
|
set guid "211E1E8B-C9F9-A04B-6D84-BC85190CE5F2"
|
|
next
|
|
edit "FortiClient-AV-Vista-Win7"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "385618A6-2256-708E-3FB9-7E98B93F91F9"
|
|
next
|
|
edit "FortiClient5-AV"
|
|
set os-type windows
|
|
set type av
|
|
set version ''
|
|
set guid "5EEDDB8C-C27A-6714-3657-DBD811D1F1B7"
|
|
next
|
|
end
|
|
config vpn ssl web portal
|
|
edit "full-access"
|
|
set tunnel-mode enable
|
|
set ipv6-tunnel-mode enable
|
|
set web-mode enable
|
|
set allow-user-access web ftp smb sftp telnet ssh vnc rdp ping
|
|
set limit-user-logins disable
|
|
set forticlient-download enable
|
|
set ip-mode range
|
|
set auto-connect disable
|
|
set keep-alive disable
|
|
set save-password disable
|
|
set ip-pools "SSLVPN_TUNNEL_ADDR1"
|
|
set exclusive-routing disable
|
|
set service-restriction disable
|
|
set split-tunneling disable
|
|
set dns-server1 0.0.0.0
|
|
set dns-server2 0.0.0.0
|
|
set dns-suffix ''
|
|
set wins-server1 0.0.0.0
|
|
set wins-server2 0.0.0.0
|
|
set dhcp-ra-giaddr 0.0.0.0
|
|
set ipv6-pools "SSLVPN_TUNNEL_IPv6_ADDR1"
|
|
set ipv6-split-tunneling enable
|
|
set ipv6-split-tunneling-routing-negate disable
|
|
set ipv6-dns-server1 ::
|
|
set ipv6-dns-server2 ::
|
|
set ipv6-wins-server1 ::
|
|
set ipv6-wins-server2 ::
|
|
set dhcp6-ra-linkaddr ::
|
|
set client-src-range disable
|
|
set display-bookmark enable
|
|
set user-bookmark enable
|
|
set user-group-bookmark enable
|
|
config bookmark-group
|
|
edit "gui-bookmarks"
|
|
config bookmarks
|
|
edit "Internal-Network"
|
|
set apptype web
|
|
set description ''
|
|
set url "10.10.10.1NET"
|
|
set sso disable
|
|
next
|
|
end
|
|
next
|
|
end
|
|
set display-connection-tools enable
|
|
set display-history enable
|
|
set display-status enable
|
|
set rewrite-ip-uri-ui disable
|
|
set heading "SSL-VPN Portal"
|
|
set redir-url ''
|
|
set theme neutrino
|
|
set smb-ntlmv1-auth disable
|
|
set smb-min-version smbv2
|
|
set smb-max-version smbv3
|
|
set use-sdwan disable
|
|
set clipboard enable
|
|
set default-window-width 1024
|
|
set default-window-height 768
|
|
set host-check none
|
|
set mac-addr-check disable
|
|
set os-check disable
|
|
set forticlient-download-method direct
|
|
set customize-forticlient-download-url disable
|
|
set hide-sso-credential enable
|
|
next
|
|
edit "web-access"
|
|
set tunnel-mode disable
|
|
set ipv6-tunnel-mode disable
|
|
set web-mode enable
|
|
set allow-user-access web ftp smb sftp telnet ssh vnc rdp ping
|
|
set limit-user-logins disable
|
|
set forticlient-download enable
|
|
set dns-suffix ''
|
|
set display-bookmark enable
|
|
set user-bookmark enable
|
|
set user-group-bookmark enable
|
|
set display-connection-tools enable
|
|
set display-history enable
|
|
set display-status enable
|
|
set rewrite-ip-uri-ui disable
|
|
set heading "SSL-VPN Portal"
|
|
set redir-url ''
|
|
set theme neutrino
|
|
set smb-ntlmv1-auth disable
|
|
set smb-min-version smbv2
|
|
set smb-max-version smbv3
|
|
set use-sdwan disable
|
|
set clipboard enable
|
|
set default-window-width 1024
|
|
set default-window-height 768
|
|
set forticlient-download-method direct
|
|
set customize-forticlient-download-url disable
|
|
set hide-sso-credential enable
|
|
next
|
|
edit "tunnel-access"
|
|
set tunnel-mode enable
|
|
set ipv6-tunnel-mode enable
|
|
set web-mode disable
|
|
set allow-user-access web ftp smb sftp telnet ssh vnc rdp ping
|
|
set limit-user-logins disable
|
|
set forticlient-download enable
|
|
set ip-mode range
|
|
set auto-connect disable
|
|
set keep-alive disable
|
|
set save-password disable
|
|
set ip-pools "SSLVPN_TUNNEL_ADDR1"
|
|
set split-tunneling enable
|
|
set split-tunneling-routing-negate disable
|
|
set dns-server1 0.0.0.0
|
|
set dns-server2 0.0.0.0
|
|
set dns-suffix ''
|
|
set wins-server1 0.0.0.0
|
|
set wins-server2 0.0.0.0
|
|
set dhcp-ra-giaddr 0.0.0.0
|
|
set ipv6-pools "SSLVPN_TUNNEL_IPv6_ADDR1"
|
|
set ipv6-split-tunneling enable
|
|
set ipv6-split-tunneling-routing-negate disable
|
|
set ipv6-dns-server1 ::
|
|
set ipv6-dns-server2 ::
|
|
set ipv6-wins-server1 ::
|
|
set ipv6-wins-server2 ::
|
|
set dhcp6-ra-linkaddr ::
|
|
set client-src-range disable
|
|
set host-check none
|
|
set mac-addr-check disable
|
|
set os-check disable
|
|
set forticlient-download-method direct
|
|
set customize-forticlient-download-url disable
|
|
next
|
|
end
|
|
config vpn ssl settings
|
|
set status enable
|
|
set reqclientcert disable
|
|
set ssl-max-proto-ver tls1-3
|
|
set ssl-min-proto-ver tls1-1
|
|
unset banned-cipher
|
|
set ciphersuite TLS-AES-128-GCM-SHA256 TLS-AES-256-GCM-SHA384 TLS-CHACHA20-POLY1305-SHA256
|
|
set ssl-insert-empty-fragment enable
|
|
set https-redirect disable
|
|
set x-content-type-options enable
|
|
set ssl-client-renegotiation disable
|
|
set force-two-factor-auth disable
|
|
set servercert "Fortinet_Factory"
|
|
set algorithm high
|
|
set idle-timeout 300
|
|
set auth-timeout 28800
|
|
set login-attempt-limit 2
|
|
set login-block-time 60
|
|
set login-timeout 30
|
|
set dtls-hello-timeout 10
|
|
set tunnel-ip-pools "SSLVPN_TUNNEL_ADDR1"
|
|
set dns-suffix ''
|
|
set dns-server1 0.0.0.0
|
|
set dns-server2 0.0.0.0
|
|
set wins-server1 0.0.0.0
|
|
set wins-server2 0.0.0.0
|
|
set ipv6-dns-server1 ::
|
|
set ipv6-dns-server2 ::
|
|
set ipv6-wins-server1 ::
|
|
set ipv6-wins-server2 ::
|
|
set url-obscuration disable
|
|
set http-compression disable
|
|
set http-only-cookie enable
|
|
set port 10443
|
|
set port-precedence enable
|
|
set auto-tunnel-static-route enable
|
|
set header-x-forwarded-for add
|
|
set source-interface "RnD-WAN"
|
|
set source-address "all"
|
|
set source-address-negate disable
|
|
set source-address6 "all"
|
|
set source-address6-negate disable
|
|
set default-portal "web-access"
|
|
config authentication-rule
|
|
edit 1
|
|
set groups "SSL_VPN_USER"
|
|
set portal "full-access"
|
|
set realm ''
|
|
set client-cert disable
|
|
set cipher high
|
|
set auth any
|
|
next
|
|
end
|
|
set browser-language-detection enable
|
|
set dtls-tunnel enable
|
|
set check-referer disable
|
|
set http-request-header-timeout 20
|
|
set http-request-body-timeout 30
|
|
set auth-session-check-source-ip enable
|
|
set tunnel-connect-without-reauth disable
|
|
set hsts-include-subdomains disable
|
|
set transform-backward-slashes disable
|
|
set encode-2f-sequence disable
|
|
set encrypt-and-store-password disable
|
|
set client-sigalgs all
|
|
set dual-stack-mode disable
|
|
set tunnel-addr-assigned-method first-available
|
|
set saml-redirect-port 8020
|
|
set ztna-trusted-client disable
|
|
set server-hostname ''
|
|
set dtls-max-proto-ver dtls1-2
|
|
set dtls-min-proto-ver dtls1-0
|
|
end
|
|
config vpn ssl web user-group-bookmark
|
|
end
|
|
config vpn ssl web user-bookmark
|
|
edit "SSL_VPN#SSL_VPN_USER"
|
|
set custom-lang ''
|
|
next
|
|
end
|
|
config vpn ssl client
|
|
end
|
|
config voip profile
|
|
edit "default"
|
|
set comment "Default VoIP profile."
|
|
config sip
|
|
set status enable
|
|
set rtp enable
|
|
set nat-port-range 5117-65533
|
|
set open-register-pinhole enable
|
|
set open-contact-pinhole enable
|
|
set strict-register enable
|
|
set register-rate 0
|
|
set invite-rate 0
|
|
set max-dialogs 0
|
|
set max-line-length 998
|
|
set block-long-lines enable
|
|
set block-unknown enable
|
|
set call-keepalive 0
|
|
set block-ack disable
|
|
set block-bye disable
|
|
set block-cancel disable
|
|
set block-info disable
|
|
set block-invite disable
|
|
set block-message disable
|
|
set block-notify disable
|
|
set block-options disable
|
|
set block-prack disable
|
|
set block-publish disable
|
|
set block-refer disable
|
|
set block-register disable
|
|
set block-subscribe disable
|
|
set block-update disable
|
|
set register-contact-trace disable
|
|
set open-via-pinhole disable
|
|
set open-record-route-pinhole enable
|
|
set rfc2543-branch disable
|
|
set log-violations disable
|
|
set log-call-summary enable
|
|
set nat-trace enable
|
|
set subscribe-rate 0
|
|
set message-rate 0
|
|
set notify-rate 0
|
|
set refer-rate 0
|
|
set update-rate 0
|
|
set options-rate 0
|
|
set ack-rate 0
|
|
set prack-rate 0
|
|
set info-rate 0
|
|
set publish-rate 0
|
|
set bye-rate 0
|
|
set cancel-rate 0
|
|
set preserve-override disable
|
|
set no-sdp-fixup disable
|
|
set contact-fixup enable
|
|
set max-idle-dialogs 0
|
|
set block-geo-red-options disable
|
|
set hosted-nat-traversal disable
|
|
set hnt-restrict-source-ip disable
|
|
set max-body-length 0
|
|
set unknown-header pass
|
|
set malformed-request-line pass
|
|
set malformed-header-via pass
|
|
set malformed-header-from pass
|
|
set malformed-header-to pass
|
|
set malformed-header-call-id pass
|
|
set malformed-header-cseq pass
|
|
set malformed-header-rack pass
|
|
set malformed-header-rseq pass
|
|
set malformed-header-contact pass
|
|
set malformed-header-record-route pass
|
|
set malformed-header-route pass
|
|
set malformed-header-expires pass
|
|
set malformed-header-content-type pass
|
|
set malformed-header-content-length pass
|
|
set malformed-header-max-forwards pass
|
|
set malformed-header-allow pass
|
|
set malformed-header-p-asserted-identity pass
|
|
set malformed-header-sdp-v pass
|
|
set malformed-header-sdp-o pass
|
|
set malformed-header-sdp-s pass
|
|
set malformed-header-sdp-i pass
|
|
set malformed-header-sdp-c pass
|
|
set malformed-header-sdp-b pass
|
|
set malformed-header-sdp-z pass
|
|
set malformed-header-sdp-k pass
|
|
set malformed-header-sdp-a pass
|
|
set malformed-header-sdp-t pass
|
|
set malformed-header-sdp-r pass
|
|
set malformed-header-sdp-m pass
|
|
set provisional-invite-expiry-time 210
|
|
set ips-rtp enable
|
|
set ssl-mode off
|
|
end
|
|
config sccp
|
|
set status enable
|
|
set block-mcast disable
|
|
set verify-header disable
|
|
set log-call-summary disable
|
|
set log-violations disable
|
|
set max-calls 0
|
|
end
|
|
next
|
|
edit "strict"
|
|
set feature-set voipd
|
|
set comment ''
|
|
config sip
|
|
set status enable
|
|
set rtp enable
|
|
set nat-port-range 5117-65533
|
|
set open-register-pinhole enable
|
|
set open-contact-pinhole enable
|
|
set strict-register enable
|
|
set register-rate 0
|
|
set invite-rate 0
|
|
set max-dialogs 0
|
|
set max-line-length 998
|
|
set block-long-lines enable
|
|
set block-unknown enable
|
|
set call-keepalive 0
|
|
set block-ack disable
|
|
set block-bye disable
|
|
set block-cancel disable
|
|
set block-info disable
|
|
set block-invite disable
|
|
set block-message disable
|
|
set block-notify disable
|
|
set block-options disable
|
|
set block-prack disable
|
|
set block-publish disable
|
|
set block-refer disable
|
|
set block-register disable
|
|
set block-subscribe disable
|
|
set block-update disable
|
|
set register-contact-trace disable
|
|
set open-via-pinhole disable
|
|
set open-record-route-pinhole enable
|
|
set rfc2543-branch disable
|
|
set log-violations disable
|
|
set log-call-summary enable
|
|
set nat-trace enable
|
|
set subscribe-rate 0
|
|
set message-rate 0
|
|
set notify-rate 0
|
|
set refer-rate 0
|
|
set update-rate 0
|
|
set options-rate 0
|
|
set ack-rate 0
|
|
set prack-rate 0
|
|
set info-rate 0
|
|
set publish-rate 0
|
|
set bye-rate 0
|
|
set cancel-rate 0
|
|
set preserve-override disable
|
|
set no-sdp-fixup disable
|
|
set contact-fixup enable
|
|
set max-idle-dialogs 0
|
|
set block-geo-red-options disable
|
|
set hosted-nat-traversal disable
|
|
set hnt-restrict-source-ip disable
|
|
set max-body-length 0
|
|
set unknown-header pass
|
|
set malformed-request-line discard
|
|
set malformed-header-via discard
|
|
set malformed-header-from discard
|
|
set malformed-header-to discard
|
|
set malformed-header-call-id discard
|
|
set malformed-header-cseq discard
|
|
set malformed-header-rack discard
|
|
set malformed-header-rseq discard
|
|
set malformed-header-contact discard
|
|
set malformed-header-record-route discard
|
|
set malformed-header-route discard
|
|
set malformed-header-expires discard
|
|
set malformed-header-content-type discard
|
|
set malformed-header-content-length discard
|
|
set malformed-header-max-forwards discard
|
|
set malformed-header-allow discard
|
|
set malformed-header-p-asserted-identity discard
|
|
set malformed-header-sdp-v discard
|
|
set malformed-header-sdp-o discard
|
|
set malformed-header-sdp-s discard
|
|
set malformed-header-sdp-i discard
|
|
set malformed-header-sdp-c discard
|
|
set malformed-header-sdp-b discard
|
|
set malformed-header-sdp-z discard
|
|
set malformed-header-sdp-k discard
|
|
set malformed-header-sdp-a discard
|
|
set malformed-header-sdp-t discard
|
|
set malformed-header-sdp-r discard
|
|
set malformed-header-sdp-m discard
|
|
set provisional-invite-expiry-time 210
|
|
set ips-rtp enable
|
|
set ssl-mode off
|
|
end
|
|
config sccp
|
|
set status enable
|
|
set block-mcast disable
|
|
set verify-header disable
|
|
set log-call-summary disable
|
|
set log-violations disable
|
|
set max-calls 0
|
|
end
|
|
next
|
|
end
|
|
config system sdwan
|
|
set status disable
|
|
set load-balance-mode source-ip-based
|
|
set speedtest-bypass-routing disable
|
|
set duplication-max-num 2
|
|
set neighbor-hold-down disable
|
|
set neighbor-hold-down-time 0
|
|
set neighbor-hold-boot-time 0
|
|
set fail-detect disable
|
|
config zone
|
|
edit "virtual-wan-link"
|
|
set service-sla-tie-break cfg-order
|
|
next
|
|
end
|
|
end
|
|
config vpn ipsec phase1
|
|
end
|
|
config vpn ipsec phase2
|
|
end
|
|
config vpn ipsec manualkey
|
|
end
|
|
config vpn ipsec concentrator
|
|
end
|
|
config vpn ipsec fec
|
|
end
|
|
config vpn ipsec phase1-interface
|
|
end
|
|
config vpn ipsec phase2-interface
|
|
end
|
|
config vpn ipsec manualkey-interface
|
|
end
|
|
config vpn pptp
|
|
set status disable
|
|
end
|
|
config vpn l2tp
|
|
set status disable
|
|
set lcp-max-echo-fails 3
|
|
set hello-interval 60
|
|
end
|
|
config vpn ipsec forticlient
|
|
end
|
|
config dnsfilter domain-filter
|
|
end
|
|
config dnsfilter profile
|
|
edit "default"
|
|
set comment "Default dns filtering."
|
|
config domain-filter
|
|
unset domain-filter-table
|
|
end
|
|
config ftgd-dns
|
|
set options error-allow
|
|
config filters
|
|
edit 1
|
|
set category 12
|
|
set action monitor
|
|
next
|
|
edit 2
|
|
set category 7
|
|
set action monitor
|
|
next
|
|
edit 3
|
|
set category 9
|
|
set action monitor
|
|
next
|
|
edit 4
|
|
set category 64
|
|
set action monitor
|
|
next
|
|
edit 5
|
|
set category 2
|
|
set action monitor
|
|
next
|
|
edit 6
|
|
set category 15
|
|
set action monitor
|
|
next
|
|
edit 7
|
|
set category 11
|
|
set action monitor
|
|
next
|
|
edit 8
|
|
set category 66
|
|
set action monitor
|
|
next
|
|
edit 9
|
|
set category 57
|
|
set action monitor
|
|
next
|
|
edit 10
|
|
set category 13
|
|
set action monitor
|
|
next
|
|
edit 11
|
|
set category 8
|
|
set action monitor
|
|
next
|
|
edit 12
|
|
set category 14
|
|
set action monitor
|
|
next
|
|
edit 13
|
|
set category 63
|
|
set action monitor
|
|
next
|
|
edit 14
|
|
set category 67
|
|
set action monitor
|
|
next
|
|
edit 15
|
|
set category 65
|
|
set action monitor
|
|
next
|
|
edit 16
|
|
set category 16
|
|
set action monitor
|
|
next
|
|
edit 17
|
|
set category 24
|
|
set action monitor
|
|
next
|
|
edit 18
|
|
set category 19
|
|
set action monitor
|
|
next
|
|
edit 19
|
|
set category 75
|
|
set action monitor
|
|
next
|
|
edit 20
|
|
set category 76
|
|
set action monitor
|
|
next
|
|
edit 21
|
|
set category 72
|
|
set action monitor
|
|
next
|
|
edit 22
|
|
set category 25
|
|
set action monitor
|
|
next
|
|
edit 23
|
|
set category 88
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 24
|
|
set category 26
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 25
|
|
set category 90
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 26
|
|
set category 91
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 27
|
|
set category 61
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 28
|
|
set category 86
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 29
|
|
set category 17
|
|
set action monitor
|
|
next
|
|
edit 30
|
|
set category 29
|
|
set action monitor
|
|
next
|
|
edit 31
|
|
set category 89
|
|
set action monitor
|
|
next
|
|
edit 32
|
|
set category 18
|
|
set action monitor
|
|
next
|
|
edit 33
|
|
set category 77
|
|
set action monitor
|
|
next
|
|
edit 34
|
|
set category 82
|
|
set action monitor
|
|
next
|
|
edit 35
|
|
set category 71
|
|
set action monitor
|
|
next
|
|
edit 36
|
|
set category 85
|
|
set action monitor
|
|
next
|
|
edit 37
|
|
set category 54
|
|
set action monitor
|
|
next
|
|
edit 38
|
|
set category 30
|
|
set action monitor
|
|
next
|
|
edit 39
|
|
set category 28
|
|
set action monitor
|
|
next
|
|
edit 40
|
|
set category 58
|
|
set action monitor
|
|
next
|
|
edit 41
|
|
set category 20
|
|
set action monitor
|
|
next
|
|
edit 42
|
|
set category 40
|
|
set action monitor
|
|
next
|
|
edit 43
|
|
set category 33
|
|
set action monitor
|
|
next
|
|
edit 44
|
|
set category 69
|
|
set action monitor
|
|
next
|
|
edit 45
|
|
set category 34
|
|
set action monitor
|
|
next
|
|
edit 46
|
|
set category 55
|
|
set action monitor
|
|
next
|
|
edit 47
|
|
set category 35
|
|
set action monitor
|
|
next
|
|
edit 48
|
|
set category 36
|
|
set action monitor
|
|
next
|
|
edit 49
|
|
set category 70
|
|
set action monitor
|
|
next
|
|
edit 50
|
|
set category 87
|
|
set action monitor
|
|
next
|
|
edit 51
|
|
set category 48
|
|
set action monitor
|
|
next
|
|
edit 52
|
|
set category 80
|
|
set action monitor
|
|
next
|
|
edit 53
|
|
set category 38
|
|
set action monitor
|
|
next
|
|
edit 54
|
|
set category 78
|
|
set action monitor
|
|
next
|
|
edit 55
|
|
set category 39
|
|
set action monitor
|
|
next
|
|
edit 56
|
|
set category 79
|
|
set action monitor
|
|
next
|
|
edit 57
|
|
set category 42
|
|
set action monitor
|
|
next
|
|
edit 58
|
|
set category 37
|
|
set action monitor
|
|
next
|
|
edit 59
|
|
set category 44
|
|
set action monitor
|
|
next
|
|
edit 60
|
|
set category 46
|
|
set action monitor
|
|
next
|
|
edit 61
|
|
set category 47
|
|
set action monitor
|
|
next
|
|
edit 62
|
|
set category 68
|
|
set action monitor
|
|
next
|
|
edit 63
|
|
set category 23
|
|
set action monitor
|
|
next
|
|
edit 64
|
|
set category 53
|
|
set action monitor
|
|
next
|
|
edit 65
|
|
set category 49
|
|
set action monitor
|
|
next
|
|
edit 66
|
|
set category 92
|
|
set action monitor
|
|
next
|
|
edit 67
|
|
set category 31
|
|
set action monitor
|
|
next
|
|
edit 68
|
|
set category 43
|
|
set action monitor
|
|
next
|
|
edit 69
|
|
set category 51
|
|
set action monitor
|
|
next
|
|
edit 70
|
|
set category 52
|
|
set action monitor
|
|
next
|
|
edit 71
|
|
set category 50
|
|
set action monitor
|
|
next
|
|
edit 72
|
|
set category 95
|
|
set action monitor
|
|
next
|
|
edit 73
|
|
set category 93
|
|
set action monitor
|
|
next
|
|
edit 74
|
|
set category 41
|
|
set action monitor
|
|
next
|
|
edit 75
|
|
set category 81
|
|
set action monitor
|
|
next
|
|
edit 76
|
|
set category 94
|
|
set action monitor
|
|
next
|
|
edit 77
|
|
set category 56
|
|
set action monitor
|
|
next
|
|
edit 78
|
|
set category 84
|
|
set action monitor
|
|
next
|
|
edit 79
|
|
set category 0
|
|
set action monitor
|
|
next
|
|
end
|
|
end
|
|
set log-all-domain enable
|
|
set sdns-ftgd-err-log enable
|
|
set sdns-domain-log enable
|
|
set block-action redirect
|
|
set block-botnet enable
|
|
set safe-search enable
|
|
set redirect-portal 0.0.0.0
|
|
set redirect-portal6 ::
|
|
set youtube-restrict strict
|
|
next
|
|
end
|
|
config system gre-tunnel
|
|
end
|
|
config system ipsec-aggregate
|
|
end
|
|
config system ipip-tunnel
|
|
end
|
|
config system mobile-tunnel
|
|
end
|
|
config system pppoe-interface
|
|
end
|
|
config system vxlan
|
|
end
|
|
config system geneve
|
|
end
|
|
config system virtual-wire-pair
|
|
end
|
|
config system dns-database
|
|
end
|
|
config system dns-server
|
|
end
|
|
config log custom-field
|
|
end
|
|
config antivirus settings
|
|
set machine-learning-detection enable
|
|
set use-extreme-db disable
|
|
set grayware disable
|
|
set override-timeout 0
|
|
set cache-infected-result enable
|
|
end
|
|
config antivirus quarantine
|
|
set agelimit 0
|
|
set maxfilesize 0
|
|
set quarantine-quota 0
|
|
unset drop-infected
|
|
set store-infected imap smtp pop3 http ftp nntp imaps smtps pop3s https ftps mapi cifs ssh
|
|
unset drop-blocked
|
|
set store-blocked imap smtp pop3 http ftp nntp imaps smtps pop3s ftps mapi cifs ssh
|
|
unset drop-machine-learning
|
|
set store-machine-learning imap smtp pop3 http ftp nntp imaps smtps pop3s https ftps mapi cifs ssh
|
|
set lowspace ovrw-old
|
|
set destination disk
|
|
end
|
|
config antivirus exempt-list
|
|
end
|
|
config ssh-filter profile
|
|
end
|
|
config antivirus profile
|
|
edit "g-default"
|
|
set comment "Scan files and block viruses."
|
|
set replacemsg-group ''
|
|
set feature-set flow
|
|
set mobile-malware-db enable
|
|
config http
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config ftp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config imap
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config pop3
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config smtp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config nntp
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config cifs
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config nac-quar
|
|
set infected none
|
|
set log disable
|
|
end
|
|
set outbreak-prevention-archive-scan disable
|
|
set external-blocklist-enable-all enable
|
|
set ems-threat-feed disable
|
|
set av-virus-log enable
|
|
set av-block-log enable
|
|
set extended-log disable
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Scan files and monitor viruses."
|
|
set replacemsg-group ''
|
|
set feature-set flow
|
|
set mobile-malware-db enable
|
|
config http
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config ftp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config imap
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config pop3
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config smtp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config nntp
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config cifs
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config nac-quar
|
|
set infected none
|
|
set log disable
|
|
end
|
|
set outbreak-prevention-archive-scan disable
|
|
set external-blocklist-enable-all enable
|
|
set ems-threat-feed disable
|
|
set av-virus-log enable
|
|
set av-block-log enable
|
|
set extended-log disable
|
|
next
|
|
edit "g-wifi-default"
|
|
set comment "Default configuration for offloading WiFi traffic."
|
|
set replacemsg-group ''
|
|
set feature-set flow
|
|
set mobile-malware-db enable
|
|
config http
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config ftp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config imap
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config pop3
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config smtp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config nntp
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config cifs
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config nac-quar
|
|
set infected none
|
|
set log disable
|
|
end
|
|
set outbreak-prevention-archive-scan disable
|
|
set external-blocklist-enable-all enable
|
|
set ems-threat-feed disable
|
|
set av-virus-log enable
|
|
set av-block-log enable
|
|
set extended-log disable
|
|
next
|
|
edit "default"
|
|
set comment "Scan files and block viruses."
|
|
set replacemsg-group ''
|
|
set feature-set proxy
|
|
set mobile-malware-db enable
|
|
config http
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set content-disarm disable
|
|
end
|
|
config ftp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config imap
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
set content-disarm disable
|
|
end
|
|
config pop3
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
set content-disarm disable
|
|
end
|
|
config smtp
|
|
set av-scan block
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
set content-disarm disable
|
|
end
|
|
config mapi
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
set executables virus
|
|
end
|
|
config nntp
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config cifs
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config ssh
|
|
set av-scan disable
|
|
set outbreak-prevention disable
|
|
set external-blocklist disable
|
|
set quarantine disable
|
|
unset archive-block
|
|
unset archive-log
|
|
set emulator enable
|
|
end
|
|
config nac-quar
|
|
set infected none
|
|
set log disable
|
|
end
|
|
config content-disarm
|
|
set original-file-destination discard
|
|
set error-action log-only
|
|
set office-macro enable
|
|
set office-hylink enable
|
|
set office-linked enable
|
|
set office-embed enable
|
|
set office-dde enable
|
|
set office-action enable
|
|
set pdf-javacode enable
|
|
set pdf-embedfile enable
|
|
set pdf-hyperlink enable
|
|
set pdf-act-gotor enable
|
|
set pdf-act-launch enable
|
|
set pdf-act-sound enable
|
|
set pdf-act-movie enable
|
|
set pdf-act-java enable
|
|
set pdf-act-form enable
|
|
set cover-page enable
|
|
set detect-only disable
|
|
end
|
|
set outbreak-prevention-archive-scan disable
|
|
set external-blocklist-enable-all enable
|
|
set ems-threat-feed disable
|
|
set av-virus-log enable
|
|
set av-block-log enable
|
|
set extended-log disable
|
|
set scan-mode legacy
|
|
next
|
|
end
|
|
config file-filter profile
|
|
edit "g-default"
|
|
set comment "File type inspection."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set log enable
|
|
set extended-log disable
|
|
set scan-archive-contents enable
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "File type inspection."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set log enable
|
|
set extended-log disable
|
|
set scan-archive-contents enable
|
|
next
|
|
end
|
|
config webfilter profile
|
|
edit "g-default"
|
|
set comment "Default web filtering."
|
|
set feature-set proxy
|
|
set replacemsg-group ''
|
|
unset options
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
unset safe-search
|
|
set log-search disable
|
|
end
|
|
config ftgd-wf
|
|
unset options
|
|
set exempt-quota 17
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 0
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 2
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 7
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 8
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 9
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 11
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 12
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 13
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 14
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 15
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 16
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 26
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 57
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 61
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 63
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 64
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 65
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 66
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 67
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 86
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 88
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 90
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 91
|
|
set action block
|
|
set log enable
|
|
next
|
|
end
|
|
set max-quota-timeout 300
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
config antiphish
|
|
set status disable
|
|
set check-uri disable
|
|
set check-basic-auth disable
|
|
set check-username-only disable
|
|
set max-body-len 1024
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-activex-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-filter-applet-log enable
|
|
set web-filter-jscript-log enable
|
|
set web-filter-js-log enable
|
|
set web-filter-vbs-log enable
|
|
set web-filter-unknown-log enable
|
|
set web-filter-referer-log enable
|
|
set web-filter-cookie-removal-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set web-ftgd-quota-usage enable
|
|
set extended-log disable
|
|
set web-antiphishing-log enable
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Monitor web traffic."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
unset options
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
end
|
|
config ftgd-wf
|
|
set options ftgd-disable
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 0
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 1
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 2
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 3
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 4
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 5
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 6
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 7
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 8
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 9
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 11
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 12
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 13
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 14
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 15
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 16
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 17
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 18
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 19
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 20
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 23
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 24
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 25
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 24
|
|
set category 26
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 25
|
|
set category 28
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 26
|
|
set category 29
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 27
|
|
set category 30
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 28
|
|
set category 31
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 29
|
|
set category 33
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 30
|
|
set category 34
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 31
|
|
set category 35
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 32
|
|
set category 36
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 33
|
|
set category 37
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 34
|
|
set category 38
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 35
|
|
set category 39
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 36
|
|
set category 40
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 37
|
|
set category 41
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 38
|
|
set category 42
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 39
|
|
set category 43
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 40
|
|
set category 44
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 41
|
|
set category 46
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 42
|
|
set category 47
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 43
|
|
set category 48
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 44
|
|
set category 49
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 45
|
|
set category 50
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 46
|
|
set category 51
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 47
|
|
set category 52
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 48
|
|
set category 53
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 49
|
|
set category 54
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 50
|
|
set category 55
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 51
|
|
set category 56
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 52
|
|
set category 57
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 53
|
|
set category 58
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 54
|
|
set category 59
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 55
|
|
set category 61
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 56
|
|
set category 62
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 57
|
|
set category 63
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 58
|
|
set category 64
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 59
|
|
set category 65
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 60
|
|
set category 66
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 61
|
|
set category 67
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 62
|
|
set category 68
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 63
|
|
set category 69
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 64
|
|
set category 70
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 65
|
|
set category 71
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 66
|
|
set category 72
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 67
|
|
set category 75
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 68
|
|
set category 76
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 69
|
|
set category 77
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 70
|
|
set category 78
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 71
|
|
set category 79
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 72
|
|
set category 80
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 73
|
|
set category 81
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 74
|
|
set category 82
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 75
|
|
set category 83
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 76
|
|
set category 84
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 77
|
|
set category 85
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 78
|
|
set category 86
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 79
|
|
set category 87
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 80
|
|
set category 88
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 81
|
|
set category 89
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 82
|
|
set category 90
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 83
|
|
set category 91
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 84
|
|
set category 92
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 85
|
|
set category 93
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 86
|
|
set category 94
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 87
|
|
set category 95
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
end
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set extended-log disable
|
|
next
|
|
edit "g-wifi-default"
|
|
set comment "Default configuration for offloading WiFi traffic."
|
|
set feature-set proxy
|
|
set replacemsg-group ''
|
|
set options block-invalid-url
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
unset safe-search
|
|
set log-search disable
|
|
end
|
|
config ftgd-wf
|
|
unset options
|
|
set exempt-quota 17
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 0
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 2
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 7
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 8
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 9
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 11
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 12
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 13
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 14
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 15
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 16
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 26
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 57
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 61
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 63
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 64
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 65
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 66
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 67
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 86
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 88
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 90
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 91
|
|
set action block
|
|
set log enable
|
|
next
|
|
end
|
|
set max-quota-timeout 300
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
config antiphish
|
|
set status disable
|
|
set check-uri disable
|
|
set check-basic-auth disable
|
|
set check-username-only disable
|
|
set max-body-len 1024
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-activex-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-filter-applet-log enable
|
|
set web-filter-jscript-log enable
|
|
set web-filter-js-log enable
|
|
set web-filter-vbs-log enable
|
|
set web-filter-unknown-log enable
|
|
set web-filter-referer-log enable
|
|
set web-filter-cookie-removal-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set web-ftgd-quota-usage enable
|
|
set extended-log disable
|
|
set web-antiphishing-log enable
|
|
next
|
|
edit "R&D-WF"
|
|
set comment ''
|
|
set feature-set proxy
|
|
set replacemsg-group ''
|
|
set options block-invalid-url
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
set urlfilter-table 1
|
|
unset content-header-list
|
|
set blocklist enable
|
|
unset allowlist
|
|
set safe-search url header
|
|
set youtube-restrict strict
|
|
set vimeo-restrict ''
|
|
set log-search enable
|
|
end
|
|
config ftgd-wf
|
|
set options error-allow rate-server-ip
|
|
set exempt-quota 17
|
|
unset ovrd
|
|
config filters
|
|
edit 6
|
|
set category 12
|
|
set action warning
|
|
set warn-duration 5m
|
|
set log enable
|
|
set warning-prompt per-category
|
|
next
|
|
edit 2
|
|
set category 7
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 9
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 64
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 1
|
|
set category 2
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 15
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 11
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 66
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 57
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 13
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 8
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 14
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 63
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 67
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 65
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 16
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 88
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 26
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 90
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 91
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 61
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 86
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 0
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 24
|
|
set category 24
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 25
|
|
set category 19
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 26
|
|
set category 75
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 27
|
|
set category 76
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 28
|
|
set category 72
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 29
|
|
set category 25
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 30
|
|
set category 17
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 31
|
|
set category 29
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 32
|
|
set category 89
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 33
|
|
set category 18
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 34
|
|
set category 77
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 35
|
|
set category 82
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 36
|
|
set category 71
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 37
|
|
set category 85
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 38
|
|
set category 54
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 39
|
|
set category 30
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 40
|
|
set category 28
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 41
|
|
set category 58
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 42
|
|
set category 20
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 43
|
|
set category 40
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 44
|
|
set category 33
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 45
|
|
set category 69
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 46
|
|
set category 34
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 47
|
|
set category 55
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 48
|
|
set category 35
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 49
|
|
set category 36
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 50
|
|
set category 70
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 51
|
|
set category 87
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 52
|
|
set category 48
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 53
|
|
set category 80
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 54
|
|
set category 38
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 55
|
|
set category 78
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 56
|
|
set category 39
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 57
|
|
set category 79
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 58
|
|
set category 42
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 59
|
|
set category 37
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 60
|
|
set category 44
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 61
|
|
set category 46
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 62
|
|
set category 47
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 63
|
|
set category 68
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 64
|
|
set category 23
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 65
|
|
set category 53
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 66
|
|
set category 49
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 67
|
|
set category 92
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 68
|
|
set category 31
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 69
|
|
set category 43
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 70
|
|
set category 51
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 71
|
|
set category 52
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 72
|
|
set category 50
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 73
|
|
set category 95
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 74
|
|
set category 93
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 75
|
|
set category 41
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 76
|
|
set category 81
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 77
|
|
set category 94
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 78
|
|
set category 56
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 79
|
|
set category 84
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
end
|
|
set max-quota-timeout 300
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
config antiphish
|
|
set status disable
|
|
set check-uri disable
|
|
set check-basic-auth disable
|
|
set check-username-only disable
|
|
set max-body-len 1024
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-activex-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-filter-applet-log enable
|
|
set web-filter-jscript-log enable
|
|
set web-filter-js-log enable
|
|
set web-filter-vbs-log enable
|
|
set web-filter-unknown-log enable
|
|
set web-filter-referer-log enable
|
|
set web-filter-cookie-removal-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set web-ftgd-quota-usage enable
|
|
set extended-log disable
|
|
set web-antiphishing-log enable
|
|
next
|
|
edit "default"
|
|
set comment "Default web filtering."
|
|
set feature-set proxy
|
|
set replacemsg-group ''
|
|
unset options
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
unset safe-search
|
|
set log-search disable
|
|
end
|
|
config ftgd-wf
|
|
unset options
|
|
set exempt-quota 17
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 2
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 7
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 8
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 9
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 11
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 12
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 13
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 14
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 15
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 16
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 0
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 57
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 63
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 64
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 65
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 66
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 67
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 26
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 61
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 86
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 88
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 90
|
|
set action block
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 91
|
|
set action block
|
|
set log enable
|
|
next
|
|
end
|
|
set max-quota-timeout 300
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
config antiphish
|
|
set status disable
|
|
set check-uri disable
|
|
set check-basic-auth disable
|
|
set check-username-only disable
|
|
set max-body-len 1024
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-activex-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-filter-applet-log enable
|
|
set web-filter-jscript-log enable
|
|
set web-filter-js-log enable
|
|
set web-filter-vbs-log enable
|
|
set web-filter-unknown-log enable
|
|
set web-filter-referer-log enable
|
|
set web-filter-cookie-removal-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set web-ftgd-quota-usage enable
|
|
set extended-log disable
|
|
set web-antiphishing-log enable
|
|
next
|
|
edit "sniffer-profile"
|
|
set comment "Monitor web traffic."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
unset options
|
|
set https-replacemsg enable
|
|
unset ovrd-perm
|
|
set post-action normal
|
|
config override
|
|
set ovrd-cookie deny
|
|
set ovrd-scope user
|
|
set profile-type list
|
|
set ovrd-dur-mode constant
|
|
set ovrd-dur 15m
|
|
end
|
|
config web
|
|
set bword-threshold 10
|
|
unset bword-table
|
|
unset urlfilter-table
|
|
unset content-header-list
|
|
set blocklist disable
|
|
unset allowlist
|
|
end
|
|
config ftgd-wf
|
|
set options ftgd-disable
|
|
unset ovrd
|
|
config filters
|
|
edit 1
|
|
set category 0
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 2
|
|
set category 1
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 3
|
|
set category 2
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 4
|
|
set category 3
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 5
|
|
set category 4
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 6
|
|
set category 5
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 7
|
|
set category 6
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 8
|
|
set category 7
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 9
|
|
set category 8
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 10
|
|
set category 9
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 11
|
|
set category 11
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 12
|
|
set category 12
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 13
|
|
set category 13
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 14
|
|
set category 14
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 15
|
|
set category 15
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 16
|
|
set category 16
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 17
|
|
set category 17
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 18
|
|
set category 18
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 19
|
|
set category 19
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 20
|
|
set category 20
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 21
|
|
set category 23
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 22
|
|
set category 24
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 23
|
|
set category 25
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 24
|
|
set category 26
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 25
|
|
set category 28
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 26
|
|
set category 29
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 27
|
|
set category 30
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 28
|
|
set category 31
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 29
|
|
set category 33
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 30
|
|
set category 34
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 31
|
|
set category 35
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 32
|
|
set category 36
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 33
|
|
set category 37
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 34
|
|
set category 38
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 35
|
|
set category 39
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 36
|
|
set category 40
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 37
|
|
set category 41
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 38
|
|
set category 42
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 39
|
|
set category 43
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 40
|
|
set category 44
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 41
|
|
set category 46
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 42
|
|
set category 47
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 43
|
|
set category 48
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 44
|
|
set category 49
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 45
|
|
set category 50
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 46
|
|
set category 51
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 47
|
|
set category 52
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 48
|
|
set category 53
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 49
|
|
set category 54
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 50
|
|
set category 55
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 51
|
|
set category 56
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 52
|
|
set category 57
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 53
|
|
set category 58
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 54
|
|
set category 59
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 55
|
|
set category 61
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 56
|
|
set category 62
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 57
|
|
set category 63
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 58
|
|
set category 64
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 59
|
|
set category 65
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 60
|
|
set category 66
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 61
|
|
set category 67
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 62
|
|
set category 68
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 63
|
|
set category 69
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 64
|
|
set category 70
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 65
|
|
set category 71
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 66
|
|
set category 72
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 67
|
|
set category 75
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 68
|
|
set category 76
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 69
|
|
set category 77
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 70
|
|
set category 78
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 71
|
|
set category 79
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 72
|
|
set category 80
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 73
|
|
set category 81
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 74
|
|
set category 82
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 75
|
|
set category 83
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 76
|
|
set category 84
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 77
|
|
set category 85
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 78
|
|
set category 86
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 79
|
|
set category 87
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 80
|
|
set category 88
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 81
|
|
set category 89
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 82
|
|
set category 90
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 83
|
|
set category 91
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 84
|
|
set category 92
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 85
|
|
set category 93
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 86
|
|
set category 94
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 87
|
|
set category 95
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 88
|
|
set category 140
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
edit 89
|
|
set category 141
|
|
set action monitor
|
|
set log enable
|
|
next
|
|
end
|
|
set rate-javascript-urls enable
|
|
set rate-css-urls enable
|
|
set rate-crl-urls enable
|
|
end
|
|
set wisp disable
|
|
set log-all-url disable
|
|
set web-content-log enable
|
|
set web-filter-command-block-log enable
|
|
set web-filter-cookie-log enable
|
|
set web-url-log enable
|
|
set web-invalid-domain-log enable
|
|
set web-ftgd-err-log enable
|
|
set extended-log disable
|
|
next
|
|
end
|
|
config webfilter override
|
|
end
|
|
config webfilter ftgd-local-rating
|
|
end
|
|
config webfilter search-engine
|
|
edit "g-baidu"
|
|
set hostname ".*\\.baidu\\.com"
|
|
set url "^\\/s?\\?"
|
|
set query "wd="
|
|
set safesearch disable
|
|
next
|
|
edit "g-baidu2"
|
|
set hostname ".*\\.baidu\\.com"
|
|
set url "^\\/(ns|q|m|i|v)\\?"
|
|
set query "word="
|
|
set safesearch disable
|
|
next
|
|
edit "g-baidu3"
|
|
set hostname "tieba\\.baidu\\.com"
|
|
set url "^\\/f\\?"
|
|
set query "kw="
|
|
set safesearch disable
|
|
next
|
|
edit "g-bing"
|
|
set hostname ".*\\.bing\\..*"
|
|
set url "^(\\/images|\\/videos)?(\\/search|\\/async|\\/asyncv2)\\?"
|
|
set query "q="
|
|
set safesearch header
|
|
next
|
|
edit "g-google"
|
|
set hostname ".*\\.google\\..*"
|
|
set url "^\\/((custom|search|images|videosearch|webhp)\\?)"
|
|
set query "q="
|
|
set safesearch url
|
|
set safesearch-str "&safe=active"
|
|
next
|
|
edit "g-google-translate-1"
|
|
set hostname "translate\\.google\\..*"
|
|
set url "^\\/translate"
|
|
set query "u="
|
|
set safesearch translate
|
|
set safesearch-str "regex::(?:\\?|&)u=([^&]+)::\\1"
|
|
next
|
|
edit "g-google-translate-2"
|
|
set hostname ".*\\.translate\\.goog"
|
|
set url "^\\/"
|
|
set query ''
|
|
set safesearch translate
|
|
set safesearch-str "case::google-translate"
|
|
next
|
|
edit "g-twitter"
|
|
set hostname "twitter\\.com"
|
|
set url "^\\/i\\/api\\/graphql\\/.*\\/UserByScreenName"
|
|
set query "variables="
|
|
set safesearch translate
|
|
set safesearch-str "regex::%22screen_name%22:%22([A-Za-z0-9_]{4,15})%22::twitter.com/\\1"
|
|
next
|
|
edit "g-vimeo"
|
|
set hostname ".*vimeo.*"
|
|
set url "^\\/search\\?"
|
|
set query "q="
|
|
set safesearch header
|
|
next
|
|
edit "g-yahoo"
|
|
set hostname ".*\\.yahoo\\..*"
|
|
set url "^\\/search(\\/video|\\/images){0,1}(\\?|;)"
|
|
set query "p="
|
|
set safesearch url
|
|
set safesearch-str "&vm=r"
|
|
next
|
|
edit "g-yandex"
|
|
set hostname "yandex\\..*"
|
|
set url "^\\/((yand|images\\/|video\\/)(search)|search\\/)\\?"
|
|
set query "text="
|
|
set safesearch url
|
|
set safesearch-str "&family=yes"
|
|
next
|
|
edit "g-youtube"
|
|
set hostname ".*youtube.*"
|
|
set url ''
|
|
set query ''
|
|
set safesearch header
|
|
next
|
|
edit "g-yt-channel"
|
|
set hostname ''
|
|
set url "www.youtube.com/channel"
|
|
set query ''
|
|
set safesearch yt-channel
|
|
next
|
|
edit "g-yt-pattern"
|
|
set hostname ''
|
|
set url "youtube.com/channel/"
|
|
set query ''
|
|
set safesearch yt-pattern
|
|
next
|
|
edit "g-yt-scan-1"
|
|
set hostname ''
|
|
set url "www.youtube.com/user/"
|
|
set query ''
|
|
set safesearch yt-scan
|
|
next
|
|
edit "g-yt-scan-2"
|
|
set hostname ''
|
|
set url "www.youtube.com/youtubei/v1/browse"
|
|
set query ''
|
|
set safesearch yt-scan
|
|
next
|
|
edit "g-yt-scan-3"
|
|
set hostname ''
|
|
set url "www.youtube.com/youtubei/v1/player"
|
|
set query ''
|
|
set safesearch yt-scan
|
|
next
|
|
edit "g-yt-scan-4"
|
|
set hostname ''
|
|
set url "www.youtube.com/youtubei/v1/navigator"
|
|
set query ''
|
|
set safesearch yt-scan
|
|
next
|
|
edit "yt-video"
|
|
set hostname ''
|
|
set url "www.youtube.com/watch"
|
|
set query ''
|
|
set safesearch yt-video
|
|
next
|
|
end
|
|
config emailfilter profile
|
|
edit "default"
|
|
set comment "Malware and phishing URL filtering."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set spam-log enable
|
|
set spam-filtering disable
|
|
unset options
|
|
config imap
|
|
set log-all disable
|
|
end
|
|
config pop3
|
|
set log-all disable
|
|
end
|
|
config smtp
|
|
set log-all disable
|
|
end
|
|
config msn-hotmail
|
|
set log-all disable
|
|
end
|
|
config gmail
|
|
set log-all disable
|
|
end
|
|
set spam-bword-threshold 10
|
|
unset spam-bword-table
|
|
unset spam-bal-table
|
|
unset spam-mheader-table
|
|
unset spam-iptrust-table
|
|
next
|
|
edit "sniffer-profile"
|
|
set comment "Malware and phishing URL monitoring."
|
|
set feature-set flow
|
|
set replacemsg-group ''
|
|
set spam-log enable
|
|
set spam-filtering disable
|
|
unset options
|
|
config imap
|
|
set log-all disable
|
|
end
|
|
config pop3
|
|
set log-all disable
|
|
end
|
|
config smtp
|
|
set log-all disable
|
|
end
|
|
config msn-hotmail
|
|
set log-all disable
|
|
end
|
|
config gmail
|
|
set log-all disable
|
|
end
|
|
set spam-bword-threshold 10
|
|
unset spam-bword-table
|
|
unset spam-bal-table
|
|
unset spam-mheader-table
|
|
unset spam-iptrust-table
|
|
next
|
|
end
|
|
config report layout
|
|
edit "default"
|
|
set title "FortiGate System Analysis Report"
|
|
set subtitle ''
|
|
set description ''
|
|
set style-theme "default-report"
|
|
set options include-table-of-content view-chart-as-heading
|
|
set format pdf
|
|
set schedule-type daily
|
|
set time 00:00
|
|
set cutoff-option run-time
|
|
set email-send disable
|
|
set max-pdf-report 31
|
|
config page
|
|
set paper letter
|
|
unset column-break-before
|
|
set page-break-before heading1
|
|
unset options
|
|
config header
|
|
set style ''
|
|
end
|
|
config footer
|
|
set style ''
|
|
end
|
|
end
|
|
config body-item
|
|
edit 101
|
|
set description ''
|
|
set type image
|
|
set style "report-cover1"
|
|
set img-src "fortigate_log.png"
|
|
next
|
|
edit 103
|
|
set description ''
|
|
set type text
|
|
set style "report-cover2"
|
|
set text-component text
|
|
set content "FortiGate ${schedule_type} Security Report"
|
|
next
|
|
edit 105
|
|
set description ''
|
|
set type text
|
|
set style "report-cover3"
|
|
set text-component text
|
|
set content "Report Date: ${started_time}"
|
|
next
|
|
edit 107
|
|
set description ''
|
|
set type text
|
|
set style "report-cover3"
|
|
set text-component text
|
|
set content "Data Range: ${report_data_range} (${hostname})"
|
|
next
|
|
edit 109
|
|
set description ''
|
|
set type text
|
|
set style "report-cover3"
|
|
set text-component text
|
|
set content "${vdom}"
|
|
next
|
|
edit 111
|
|
set description ''
|
|
set type image
|
|
set style "report-cover4"
|
|
set img-src "fortinet_logo_small.png"
|
|
next
|
|
edit 121
|
|
set description ''
|
|
set type misc
|
|
set misc-component page-break
|
|
next
|
|
edit 301
|
|
set description ''
|
|
set type text
|
|
set style ''
|
|
set text-component heading1
|
|
set content "Bandwidth and Applications"
|
|
next
|
|
edit 311
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.bandwidth.history_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 321
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.sessions.history_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 331
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.statistics"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 411
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.bandwidth.apps_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 421
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.bandwidth.cats_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 511
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.bandwidth.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 521
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.users.history.hour_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 611
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "traffic.bandwidth.destinations_tab"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1001
|
|
set description ''
|
|
set type text
|
|
set style ''
|
|
set text-component heading1
|
|
set content "Web Usage"
|
|
next
|
|
edit 1011
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.allowed-request.sites_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1021
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.bandwidth.sites_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1031
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.blocked-request.sites_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1041
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.blocked-request.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1051
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.requests.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1061
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.bandwidth.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1071
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "web.bandwidth.stream-sites_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1301
|
|
set description ''
|
|
set type text
|
|
set style ''
|
|
set text-component heading1
|
|
set content "Emails"
|
|
next
|
|
edit 1311
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "email.request.senders_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1321
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "email.bandwidth.senders_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1331
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "email.request.recipients_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1341
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "email.bandwidth.recipients_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1501
|
|
set description ''
|
|
set type text
|
|
set style ''
|
|
set text-component heading1
|
|
set content "Threats"
|
|
next
|
|
edit 1511
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "virus.count.viruses_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1531
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "virus.count.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1541
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "virus.count.sources_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1551
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "virus.count.history_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1561
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "botnet.count_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1571
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "botnet.count.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1581
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "botnet.count.sources_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1591
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "botnet.count.history_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1601
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "attack.count.attacks_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1611
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "attack.count.victims_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1621
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "attack.count.source_bar_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1631
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "attack.count.blocked_attacks_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1641
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "attack.count.severity_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1651
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 0
|
|
set chart "attack.count.history_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1701
|
|
set description ''
|
|
set type text
|
|
set style ''
|
|
set text-component heading1
|
|
set content "VPN Usage"
|
|
next
|
|
edit 1711
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "vpn.bandwidth.static-tunnels_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1721
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "vpn.bandwidth.dynamic-tunnels_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1731
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "vpn.bandwidth.ssl-tunnel.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1741
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "vpn.bandwidth.ssl-web.users_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1901
|
|
set description ''
|
|
set type text
|
|
set style ''
|
|
set text-component heading1
|
|
set content "Admin Login and System Events"
|
|
next
|
|
edit 1911
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "event.login.summary_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1931
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "event.failed.login_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
edit 1961
|
|
set description ''
|
|
set type chart
|
|
set style ''
|
|
set top-n 80
|
|
set chart "event.system.group_events_c"
|
|
set chart-options include-no-data hide-title show-caption
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config report setting
|
|
set pdf-report enable
|
|
set fortiview enable
|
|
set report-source forward-traffic
|
|
set web-browsing-threshold 3
|
|
set top-n 1000
|
|
end
|
|
config wanopt settings
|
|
set host-id "default-id"
|
|
set tunnel-ssl-algorithm high
|
|
set auto-detect-algorithm simple
|
|
set tunnel-optimization balanced
|
|
end
|
|
config wanopt peer
|
|
end
|
|
config wanopt auth-group
|
|
end
|
|
config wanopt profile
|
|
edit "default"
|
|
set transparent enable
|
|
set comments "Default WANopt profile."
|
|
set auth-group ''
|
|
config http
|
|
set status disable
|
|
set secure-tunnel disable
|
|
set byte-caching enable
|
|
set ssl disable
|
|
set prefer-chunking fix
|
|
set protocol-opt protocol
|
|
set tunnel-sharing private
|
|
end
|
|
config cifs
|
|
set status disable
|
|
set secure-tunnel disable
|
|
set byte-caching enable
|
|
set prefer-chunking fix
|
|
set protocol-opt protocol
|
|
set tunnel-sharing private
|
|
end
|
|
config mapi
|
|
set status disable
|
|
set secure-tunnel disable
|
|
set byte-caching enable
|
|
set tunnel-sharing private
|
|
end
|
|
config ftp
|
|
set status disable
|
|
set secure-tunnel disable
|
|
set byte-caching enable
|
|
set prefer-chunking fix
|
|
set protocol-opt protocol
|
|
set tunnel-sharing private
|
|
end
|
|
config tcp
|
|
set status disable
|
|
end
|
|
next
|
|
end
|
|
config system speed-test-server
|
|
end
|
|
config log memory setting
|
|
set status disable
|
|
end
|
|
config log disk setting
|
|
set status enable
|
|
set ips-archive enable
|
|
set max-policy-packet-capture-size 100
|
|
set log-quota 0
|
|
set dlp-archive-quota 0
|
|
set report-quota 0
|
|
set maximum-log-age 7
|
|
set upload disable
|
|
set full-first-warning-threshold 75
|
|
set full-second-warning-threshold 90
|
|
set full-final-warning-threshold 95
|
|
set max-log-file-size 20
|
|
set roll-schedule daily
|
|
set roll-time 00:00
|
|
set diskfull overwrite
|
|
end
|
|
config log eventfilter
|
|
set event enable
|
|
set system enable
|
|
set vpn enable
|
|
set user enable
|
|
set router enable
|
|
set wireless-activity enable
|
|
set wan-opt enable
|
|
set endpoint enable
|
|
set ha enable
|
|
set security-rating enable
|
|
set fortiextender enable
|
|
set connector enable
|
|
set sdwan enable
|
|
set cifs enable
|
|
set switch-controller enable
|
|
set webproxy enable
|
|
end
|
|
config log memory filter
|
|
set severity information
|
|
set forward-traffic enable
|
|
set local-traffic enable
|
|
set multicast-traffic enable
|
|
set sniffer-traffic enable
|
|
set ztna-traffic enable
|
|
set anomaly enable
|
|
set voip enable
|
|
end
|
|
config log disk filter
|
|
set severity information
|
|
set forward-traffic enable
|
|
set local-traffic enable
|
|
set multicast-traffic enable
|
|
set sniffer-traffic enable
|
|
set ztna-traffic enable
|
|
set anomaly enable
|
|
set voip enable
|
|
set dlp-archive enable
|
|
end
|
|
config log fortiguard override-setting
|
|
set override disable
|
|
set access-config enable
|
|
end
|
|
config log tacacs+accounting setting
|
|
set status disable
|
|
set source-ip ''
|
|
set interface-select-method auto
|
|
end
|
|
config log tacacs+accounting2 setting
|
|
set status disable
|
|
set source-ip ''
|
|
set interface-select-method auto
|
|
end
|
|
config log tacacs+accounting3 setting
|
|
set status disable
|
|
set source-ip ''
|
|
set interface-select-method auto
|
|
end
|
|
config log tacacs+accounting filter
|
|
set login-audit enable
|
|
set config-change-audit enable
|
|
set cli-cmd-audit disable
|
|
end
|
|
config log tacacs+accounting2 filter
|
|
set login-audit enable
|
|
set config-change-audit enable
|
|
set cli-cmd-audit disable
|
|
end
|
|
config log tacacs+accounting3 filter
|
|
set login-audit enable
|
|
set config-change-audit enable
|
|
set cli-cmd-audit disable
|
|
end
|
|
config log null-device setting
|
|
set status disable
|
|
end
|
|
config log null-device filter
|
|
set severity information
|
|
set forward-traffic enable
|
|
set local-traffic enable
|
|
set multicast-traffic enable
|
|
set sniffer-traffic enable
|
|
set ztna-traffic enable
|
|
set anomaly enable
|
|
set voip enable
|
|
end
|
|
config log setting
|
|
set resolve-ip disable
|
|
set resolve-port enable
|
|
set log-user-in-upper disable
|
|
set fwpolicy-implicit-log disable
|
|
set fwpolicy6-implicit-log disable
|
|
set log-invalid-packet disable
|
|
set local-in-allow enable
|
|
set local-in-deny-unicast enable
|
|
set local-in-deny-broadcast enable
|
|
set local-out enable
|
|
set local-out-ioc-detection enable
|
|
set neighbor-event disable
|
|
set brief-traffic-format disable
|
|
set user-anonymize disable
|
|
set fortiview-weekly-data disable
|
|
set expolicy-implicit-log disable
|
|
set log-policy-comment disable
|
|
set faz-override disable
|
|
set syslog-override disable
|
|
set rest-api-set disable
|
|
set rest-api-get disable
|
|
end
|
|
config log gui-display
|
|
set resolve-hosts enable
|
|
set resolve-apps enable
|
|
set fortiview-unscanned-apps disable
|
|
end
|
|
config system lldp network-policy
|
|
end
|
|
config firewall schedule onetime
|
|
end
|
|
config firewall schedule recurring
|
|
edit "always"
|
|
set start 00:00
|
|
set end 00:00
|
|
set day sunday monday tuesday wednesday thursday friday saturday
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "none"
|
|
set start 00:00
|
|
set end 00:00
|
|
set day none
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
edit "default-darrp-optimize"
|
|
set start 01:00
|
|
set end 01:30
|
|
set day sunday monday tuesday wednesday thursday friday saturday
|
|
set color 0
|
|
set fabric-object disable
|
|
next
|
|
end
|
|
config firewall schedule group
|
|
end
|
|
config firewall ippool
|
|
end
|
|
config firewall ippool6
|
|
end
|
|
config firewall ldb-monitor
|
|
end
|
|
config firewall vip
|
|
end
|
|
config firewall vip6
|
|
end
|
|
config firewall vipgrp
|
|
end
|
|
config firewall vipgrp6
|
|
end
|
|
config firewall ssh local-key
|
|
edit "g-Fortinet_SSH_DSA1024"
|
|
set password ENC H5d6whU/9M21J5s1J7VPmce0HeY3jN2RQZRXTq4khQEQyKJGO/RCYYv8kxWCZ609yk540PB3QGYgvmwq2481ycMebGxP+Helqtr6f5NcZau3F3LwrSlLeegb3YFz2aBcpYm3urBrSERDM0JODdrXYA3ujQCI8HC/YuRnvnFEjns+B84XGC8HJ3mJBARzt3shV9M+Wg==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCCsc2D7A
|
|
O4qDYfXxVb5RSUAAAAEAAAAAEAAAGxAAAAB3NzaC1kc3MAAACBAMS+4XEri0vAnEcpawSE
|
|
aonawgM7jTatyBDkWZQkz5GApTwO5L1arpNUuOgZg115Or2doSVcxCtN/u79auu7Hy+1Oq
|
|
vVy1Vht4Tnj4teP45Pfqxb1T5ANhxlfG80SWi+hPAarZeNiMgQK9l+dZp4yfQQNTLULzyi
|
|
BpoeJnVSOSoLAAAAFQCWO4AICCOMPozW7SSviDrjcUEDfQAAAIABVmqI9Iz3TKUviuaEfx
|
|
kyw24WGR9kfBp4AXoCYjWf+21eh8M9+xGiOf6kayScyDvB2MkYhjB2Q+JCxClp/ckV3nrM
|
|
7svLU5wd3Cv7oyGm6mE/FVeZkdRgsiVkSwHVjnxsUsyKmxmLwcoQt5a+L56qy4DQ/T4QrQ
|
|
CUCIdlGsDy0AAAAIBy99SCy5/e6YcW0gThoPlGws0LpAjJniMZurMkX0UUcMDSsWrtcnJb
|
|
/HyafIWiNXW/4exOZk8V4Pd+THL1fLMnJgw9xyZeYjsyLufOyaSoldpqS2m1AOJk08EPrm
|
|
iRpUcoKh0tFuwUQU8dKx2Kx5M9UUp04/SnG1qYAamGVXaoLgAAAeDn2w4iToLUKtWXoH8U
|
|
dbWETBhfmNTD4pk60pXg4tijS1zGu2bzgTc5UlLqjB+EmAFhVrpXAfw9TCPXuoH8ZrwRJh
|
|
v9cmtWuMLBj6Tu4ovYTWag8Kh6LXbtbD/hSauZYZDJiJUl7nhfvjtK4oTQUUX7DXS3dtdH
|
|
hxP6WrsN3JOYnbSLQMEHmh/4ZubUM+PSP5ogGEphJO/hi4cA3GG4iD85etrUcyXA+bdGBR
|
|
g39U2TToZEHcuz7SIFfMBtLuG99SoT08wYQlzzR9ZJfhs99iYddtD7YWcxVh9VSesJ2i6R
|
|
PQtYTFBYTUY0/qnCviL1ZMm7URBcflWJnyOVyRdonZgR2CgR7jY4u+rgKVTnITHBe2WxvV
|
|
6TA3OC9uxmO2urtr3vTsOtLqJK3hdrxoCn1jYCbRqKeo4CSINB5i+9phriLQ83jMCp5NaZ
|
|
8yaWayteQXcIhBAKti+ndsvrj6UQx0ltkk17o/QYTy2oIpCGhM+0ubfz29msX/Fgf9vkrK
|
|
+FViZYMBJEUQ7Ntz2WwHOC/bcLr8RoHdWcusJ/7uKbXTWf5VMDC1Hg+dGbk6zmIZd8y0V0
|
|
8fttEP5Z9AnNi3T1pTUSEFxjpQofdXIL8y8Uut8WXMaoZJ8jqQYufvVtaBB3NMg=
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ssh-dss 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"
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_ECDSA256"
|
|
set password ENC r1aWueO638c8KSDP9dXb5zNUc38Bzu5DAqYpm/MErMU2W39IrKKvpTpnBE6JgYIOlC7Gu8PQBWRxvSgjl2MUcX/JkwOguOjvd5pZVnF+LR72RdjUShdFqu8L0mLZd0b+381CKNoDnoUC2SBap3CoIqI4utO3OnPsO4J7o9WqA96iDkXXz/h7KgesflBN/9Svw+crUA==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABA0Q3tLD+
|
|
dFrK1X0hDwEiEyAAAAEAAAAAEAAABoAAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlz
|
|
dHAyNTYAAABBBI7qFojD9363V6AtyoJU+yJQmp2hIdNAv0KAg+2iqJn6edGSkZeVuXa8ue
|
|
chXxhedXcaon1Bo2TlKH6ITmCAMFQAAACgKKWEsPw4CPtmUfVW7SpyDKpz68FPzs8xVcyb
|
|
ci86C5RuV5VOETT8t/hS0TRQm6OpHBGnUJ7oxx/gCcY40xlCOTUuatg4Kt3tN9z43gbnL9
|
|
DjACOSfBRQq18w2wDLDZsDPpf7mHL5ou2g5BZbKY9HslQh7N6mzhfR/1Hf+1PGrrdddDXM
|
|
Y/ta/1LrGriT/tjY6yJeuFzaxVU4ZUusEYting==
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBI7qFojD9363V6AtyoJU+yJQmp2hIdNAv0KAg+2iqJn6edGSkZeVuXa8uechXxhedXcaon1Bo2TlKH6ITmCAMFQ="
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_ECDSA384"
|
|
set password ENC 0ytdIcqQrweWn2zAvD0kHw43b9huG97NINL2Xuxc9T1aNE9SIFV2EEYdvsLis8a9gFCuMPqcD9aFDxWQ8hvz+DKK/W7Ccdf27zn6reWX1EdjwOYjivdtx1xaVPOIyW1ut/Y+iEUoIllHLX336b9RwPAHbl9dvanSEM6OVGWn+/QBAPjjBjt8ka4moUOCv4tG1com9A==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCIeQz+rx
|
|
cNkpJYPCumwIx5AAAAEAAAAAEAAACIAAAAE2VjZHNhLXNoYTItbmlzdHAzODQAAAAIbmlz
|
|
dHAzODQAAABhBNjiQRHQuK+ZAVLpqq28qHmXgFHSR2vMwZMBKGci4aEmXwJSLrorwTjR7+
|
|
rH570WB2hecq3RP+4z1FyBYoiyiLq7cpDBVmajs2icMfPJEbaCqzRUb/2nxYHiQsPKI34E
|
|
rgAAANAhHdU5FnUynwmWJGmcEpYwiH1FmLH3XcAPtEsv/f0sR1NrkDAy70nrSg0QIfgoOa
|
|
RlRG3JKEieyttxeTTyS3+WB+weEm4adefxWqLH+mzJg+TzbjMWC0hd8mK+GKKg6sTvxnVE
|
|
W7+VCY0qRY9vqUav4/I53jEoETsop9v7ibKECPK/3c1dYIcAKnX0J64h3fZvj4+3jmOzwx
|
|
WN6YhLvf2cze+ADz6w8DtoT2PmT+dW9yViPHx3kGwar7jmOBUggwkfV4XT+CnMEsVFx8Kj
|
|
MIgY
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ecdsa-sha2-nistp384 AAAAE2VjZHNhLXNoYTItbmlzdHAzODQAAAAIbmlzdHAzODQAAABhBNjiQRHQuK+ZAVLpqq28qHmXgFHSR2vMwZMBKGci4aEmXwJSLrorwTjR7+rH570WB2hecq3RP+4z1FyBYoiyiLq7cpDBVmajs2icMfPJEbaCqzRUb/2nxYHiQsPKI34Erg=="
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_ECDSA521"
|
|
set password ENC dn+jr+dwvDbrCOJMO3MLEZkN+2hZPy/9ms3hYQK5xmMVKoWLocUDR7FQ0ZyosZ1tsSnA/QtEXlTt7XP/rZQbx+UDLt0scIpi/VdLeHotSWw7p79+oTulSnZB2jS+syPnwhiZL6DrNtOPTgFIQ8NCXbbjtsJz9TF9kFq9hXnwfPbu0v9/4H8632TD6x5DQ87KyGvQUg==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCIhQKfZq
|
|
WpMaANE2lH2Nx0AAAAEAAAAAEAAACsAAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlz
|
|
dHA1MjEAAACFBACqneEJaZZLCOJ4MwQIa21hDIeBc9FX/cX286PVg0GppfJWAPEoAWrZgw
|
|
MnNBAls1xRAayrSjAmcCFnnsMA0uqOHAFfmIkqNC0Krb/qyaSnrXZMO+u39VecyLkwlg/m
|
|
UGsU9VyC8ubGG6G+hf7R0IZ3LdPFRBoP69WPaMlRYZYUdI2WUQAAAQDr0O5sP85Nt4SA7z
|
|
k8g/MzqbvzCWFEeID8uhKALq/dxhKzUSuNzAWqFxE4kDxf+c5xFtE0ZyhhHLemh5gdBTTM
|
|
kLjUue/e98qGnqxCHkhrLWWQFaeWGtZFpXERAiU2ypJYs5FxSETnOHy4kfqyUYYYP+Oar2
|
|
V/q9/cwMiwdN10Z7n51XwrxjymjXys5Njl4gExdjkREvXF2MnuWYEOXVmUsdOqPgTj5YEd
|
|
Qk+4DzwKvc3BTRcwnS+rKHLvBBKXRefJSNM/4MgSWbEcR/Fs1zkbFz0AHurSGGtOXwnoIw
|
|
6a4phhJqZ+DeIPSl3stNCMr/4Pq/7+yooplplX9r7yAlJa
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBACqneEJaZZLCOJ4MwQIa21hDIeBc9FX/cX286PVg0GppfJWAPEoAWrZgwMnNBAls1xRAayrSjAmcCFnnsMA0uqOHAFfmIkqNC0Krb/qyaSnrXZMO+u39VecyLkwlg/mUGsU9VyC8ubGG6G+hf7R0IZ3LdPFRBoP69WPaMlRYZYUdI2WUQ=="
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_ED25519"
|
|
set password ENC gs4k8Pqm+GSy4Vu8asLEavG8xLiMIkTCdTt2T736Vbw4YIBZzzAsMGGhmpum2g4VJAXPvD/7ymjApEIHLdAk5pQ1cmtcK3TrPWf6d1IPYMPhESdSDG3p1o3zbDUs2TTnUVy3NmHwl99aN/YN86tFB3p0yXMBhXmz5y19pJ9taOzU9EGCEzsb8lQrxjgkfvjTpv+1ug==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABANmtIKne
|
|
CI7yqyd3LwTmZhAAAAEAAAAAEAAAAzAAAAC3NzaC1lZDI1NTE5AAAAIBkU0tdoqAEA8Z+R
|
|
frW2pyHjnuyOFFAp4qBam1aDpO4wAAAAkEg5eRec4VKSVdmDS1J1vs2VY8uDSDJ6vulk4f
|
|
OLxJTy5cEsz+MzADfVt4H7malC/ol7Eax+FLctO9DAQWRxXsBBU2X5uAM5FnS4TYp7mHOY
|
|
U0RY8tU8VEY+8oClknnJ+NcJ7eJ3RhEhkX9qFsKLhVe/9MO8JVsqJO7Q/CcM70uoFhNgcf
|
|
u8TMSlBTOJnJ245w==
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBkU0tdoqAEA8Z+RfrW2pyHjnuyOFFAp4qBam1aDpO4w"
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_RSA2048"
|
|
set password ENC nrzVJ7yaVUjaiXydJO9picm334aXFUESuUrqCACz5bGUHiQO4s5mPH+m70wVRBGbVVhrSkZusUsD/ZYQ309aatEDhvvDYxE3BfRIGGMUs2LMVANcXI9MHw5cr9DjZjy7WmpUSgXLuOgndgnZekh23ZZ82JrGjnDXbKpIehW7Zy9Yi0GOxQLfU1y0OWfnZsGir6rmdg==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCIxks//i
|
|
r/V0cczJOMcqwyAAAAEAAAAAEAAAEXAAAAB3NzaC1yc2EAAAADAQABAAABAQC7dywqSRiZ
|
|
KIHLNhfwQmGUnUJcp440VbLDXkL1A5EDXOc+ngDIMEaeAiq0Spbx/XkHx7wamsfCV8EMhz
|
|
7xZWYaJDicc/LWePPgAoAsHqfN7RXhsgZyTaqISUyvxOArLCUIFWwKga/no8ESfaXUhV0w
|
|
KjCc+iuc/y+28Cke27AMJKLMwyOuMSTdYTm9ipNhp/j+oPtooJaP/kpVZGUP7lMTIX0dnU
|
|
RknbgK/7rP7+D9oWqbHvwMBT5ncCh5B13N9q91nYRVkY1jdHdHkqnocdJ22Rl4DqjmHNaU
|
|
ZhT58y4HHWN8qfX1AA4sVO7/CkYPkTJE7mj1FwWlTm4w/uk0Qpt9AAADwCJbmKlqnqykt0
|
|
msxMzHLHO0v/MT6SfemhK9NlQsK2JDi7paYww98cDs1RUCtwV2EC3BtgoMYwryFRqCtLpS
|
|
RqqYe/gwPErpDW9cESKfVbbmTQsJqGivnlZtXfii9ugazC8jo6Y7PHFevkApINvbXRVWpD
|
|
I5k4UwkAcmj/gwaHjvxbaXtNSbVP5FqlZX8XkvAn+r/wQ7IN7UcO98smuAjYZuCo2r9vvM
|
|
vx189sKseQ5oeKkQ2EBLAtUoSovdsQ2irbx+eMUQYUf3h0OSo155q+l5Hf6cEAJx+0bPpB
|
|
XzJemgWuIl6okw1fBG0R8q6j5iJGyNnwCAMp86EWkeVe1e+fY7GTyXf2SepqsWYuGwkv0b
|
|
IEMxJkuJwhbgZKxEJMxYNlrjN5urraD4+3QGvViQkRunkm4Z8McHSnjw9b0Mjz/OrfynUr
|
|
c5cni1fbQHXaBpNI8obgKufvqSf2V9B2V+BhrPxVq1iFXw4COl6rxKVlCivilo/P0JU4xc
|
|
k/JnnlAl2uJvI4xuW6Ty/hQKXqHMU780QGa2xGMUlr64+g1XtaE/jUr8wmTkvd3crHDno9
|
|
lPKPnCkAwnfHVKm8S/fMq6IItdue+nlUMJ1gnOsQ1iBIqIBpm6Mu9EfkYSXLVLL4fcIqPQ
|
|
n49vPICLdkHXspC0Kph+xPT1kkaLJvH4/aRanuFYMmzAV8CEBhqU5yVptz9XMukCdn+mV1
|
|
/WhMjAClzHFlqUCIE1bLdKjjY+pjC+uVNctgAzxv8/08T4aeBGLh2ABfdyGwkeDMAD0vYr
|
|
/mtEo7tzC7nxQZG0h5AvSSF6vE/6wNtJ1HFfzXV/+700i3M00k5gUcK4ttzyYd8iCVvAXG
|
|
YcIa2uIMFdWpwcaDtca1lx7Z7g9TzWih+a53YuuUidEozBSPeLTc5rwLckUkrWLv1Z+F6Y
|
|
COh+wMqo4nYVRGTQpjqdkmHjNUTXh7B51rYlIOUoROak5oTmgbqsMCOqbdFqW9/N2h06To
|
|
c4CTFuUQTWDsIJ2whvsQAwznm9GCaQfjqT1xtgil9mRQiZKDBwfC1zQ+6RsWqviUOBPIbj
|
|
EzJyxOd7ZvIrtJXy2I3I1d1caH7FERMEHQeBFCa5n+S2KZ7J+Q9ZlN6beT/xFuOn00CaB8
|
|
Egx546ps6YDFHrcd0aIn0GW//NBZW2lu6mjYg45oR7L39bvoLu4x1TvmFeHWkVn/xVOr5O
|
|
nHkDZ2eKMkzqfus18aWNdPwStA45JuR9JWVFaJqTrrRLoKCKZ+jNbwJGH95pORW3Jt7DYa
|
|
156NdbMg==
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7dywqSRiZKIHLNhfwQmGUnUJcp440VbLDXkL1A5EDXOc+ngDIMEaeAiq0Spbx/XkHx7wamsfCV8EMhz7xZWYaJDicc/LWePPgAoAsHqfN7RXhsgZyTaqISUyvxOArLCUIFWwKga/no8ESfaXUhV0wKjCc+iuc/y+28Cke27AMJKLMwyOuMSTdYTm9ipNhp/j+oPtooJaP/kpVZGUP7lMTIX0dnURknbgK/7rP7+D9oWqbHvwMBT5ncCh5B13N9q91nYRVkY1jdHdHkqnocdJ22Rl4DqjmHNaUZhT58y4HHWN8qfX1AA4sVO7/CkYPkTJE7mj1FwWlTm4w/uk0Qpt9"
|
|
set source built-in
|
|
next
|
|
end
|
|
config firewall ssh local-ca
|
|
edit "g-Fortinet_SSH_CA"
|
|
set password ENC XcCBGyx6S4jxT9pm9hMkRHuYiJdoGQhiJkULYxGHFuJIyfYCTaP719jB5EoY9szfoEjK0d9eoldwpJ6OUJkT5Vw095XDcJUuasIi6z+1N3glu6pWlewxw48rdf2kP4xkGuCH7Q+2dxPl9PuquK+28uSmMNeuS0RoLOA5ST2xuuiPnqWeIGrWuLzOGdN8TxwUUr1D+A==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABDyuh3zpN
|
|
HXpKIKCT7FetnEAAAAEAAAAAEAAAEXAAAAB3NzaC1yc2EAAAADAQABAAABAQDWiV0aIqNb
|
|
iSdn5/C+GqDwBa1aPB3i3cNCHh7AgAWMo2xJOFVgqrBH6cWYfJ/eB86ySooWMRbOuhmpTc
|
|
pa5Zx9e5erEX7QT5eLf/f2i03aWvoYGl5dOHRpJlsSe7AuUyak0A0eaOMODpiGdeyb7Xqe
|
|
YQ/uhEewIs/BgZgh68CVCrdDLVgWmTMdVV9DSrk9Zup+AnO2fSc7789Nu2Hj5fkmXe29us
|
|
mdnjPC288+qzbc2ToYOHfmVCXT72ZhV0LeD9L+HQUsiRVDDV8ErKQWSGv3+T8aQ5mrnygG
|
|
QLoo6m1exPqvvkdmgfuOXOMMy3FS3GkRGBmsVVMCwQQk8cy4D9TnAAADwAhUTQWWd9MyyI
|
|
ztaTmETZf2/1RpsN6Z11GieyoWFGT6OYJODzWPIpzsliGQ+wj3WoMq+CzrO1frsgpbhtHg
|
|
B2mC1zUBrvDNLlfaZCcQr3o1WpNKnb9sswriZIrKwHU+94yt02+z8ynVxH2/zwJpB4ax/P
|
|
npTymjyPR53bfsII5PBAerjzon7OR4dTuXjJc7I1iBcHlFeKDItbazxG4IsaRu0dreW9gf
|
|
S08r1DYc8sGJGUWowT8mijPUkJZBIQNhBo8w0PD1s1SYGDN5XJzEL02o5OwzI2lbTt/asj
|
|
FNPT4NlIF6GPcr8g7aB0/FhVsFizEM6ZPjgRoZrj5vmYxwInSQ6ieGxrnTwR+i3VedfrVY
|
|
lvaEsn3V7RrFKqCXb2ZLgridblGMSv4gFcnAQfkcoJgFNsjcEg5EIRnEBrXH6Mxz0z0wcG
|
|
WswaXzvqejxoGkXXEhbPpdx76mAbvmZms+Ui0yytpWgaTPkg+wyrAr6l/uIeXoPDaeZbS3
|
|
WzQGKCkvFWpPPH1zlHK+Sf6kzGMXvyz/q9I23ZAHMFUzYH5vi8dsLG0mItxWwIIaJQ24V/
|
|
I7/z4v6MDS72p/OiKk7quU2rAiekZa1yMkiQ0Phoi6EKwXUpQGGK0hR7nlljYmX2I7aCbf
|
|
smL2YwplikCtKkTyouBUtqlMtrgDIvwRtgaW0NureDAGsrELdDMX+8aAvkILKb1eSxX2c/
|
|
Jev9kBvHLuMZN5qTxdONnRs75Hb+u1Yr1VJymwZET9uQsHOvEnDV61giCG4d4ENy8TmMx6
|
|
i2lVEdzQCLXB1wuW3fKZPAnPKj7ruCekqm4SX7frRyC0yad0VCsvlOSqsFdq6CN8SSShaF
|
|
Z/zTGAEp/kje49O/mrDUiG28yN/hCGoeHdHhNxgpq/UTIrf4ZUAC6xyesp3eKcVje/P8L7
|
|
219eRzyI+E/STBA0XCuESg0LXgEWRwnTA0W8YGUUgPyvxmh/thCtiJN/voFwJIzniIYUTx
|
|
HdAzfuhRRCGOm41ogMMvve+muMw2c/KFMDW+8mFK6RlOL0Sp+E/NQj/TYXM6xVGTbRz+BA
|
|
6tNUzFqorIRqOXC/4nGxx+iatAhdVqpMmW+pKKtMxeZ+ah5A6OwPUqhEuboHJVtLHvLYa4
|
|
u7mBZ5hOQjyZxOgW2ya4hrPbevbOGbuh+vNqsiowzvMsh9i+tjAq4mgg/pbWqe4C60R5Fi
|
|
7VXOj/P8aZLri7BuiPGXa2PdwS7pZOjTZZyaktwuxZT1WnrnVMgQdCm2WxdmTax3DChBh0
|
|
v0Cb0bDw==
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWiV0aIqNbiSdn5/C+GqDwBa1aPB3i3cNCHh7AgAWMo2xJOFVgqrBH6cWYfJ/eB86ySooWMRbOuhmpTcpa5Zx9e5erEX7QT5eLf/f2i03aWvoYGl5dOHRpJlsSe7AuUyak0A0eaOMODpiGdeyb7XqeYQ/uhEewIs/BgZgh68CVCrdDLVgWmTMdVV9DSrk9Zup+AnO2fSc7789Nu2Hj5fkmXe29usmdnjPC288+qzbc2ToYOHfmVCXT72ZhV0LeD9L+HQUsiRVDDV8ErKQWSGv3+T8aQ5mrnygGQLoo6m1exPqvvkdmgfuOXOMMy3FS3GkRGBmsVVMCwQQk8cy4D9Tn"
|
|
set source built-in
|
|
next
|
|
edit "g-Fortinet_SSH_CA_Untrusted"
|
|
set password ENC AR2G86/eW4HHbfftM32yHtf9+/a1SbRjCk6L+LWsNynmUtQVmxcNBxySZ7huZzWQncTtyTKjjyHqirRFLQmhBylRQM1jD+noJfzleB1PT52nbFW1aa64MK/402ciMqk+lWg4Gqo0vTz9RtJTPhfFnohs/GN2cBcYxpTFFcrHUJopse32ptN0YpCsv/rwQ+ZSUjdDog==
|
|
set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
|
|
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABBQl4Zet4
|
|
cT1vY5gtR7Al7bAAAAEAAAAAEAAAEXAAAAB3NzaC1yc2EAAAADAQABAAABAQDYUFiCOzZ8
|
|
jkWReh8ohyBpy6ZHkccvy13tZdDl9QYc14NBf6PCr2AgfvKh34LBqvjkXG3dOt4Mf8viDy
|
|
FiHIsUhBOyUvVWGb5nYSYYGyH5a7jIQ6hHT3ycjsfpZKVCp9QOpdAQ3mSkbmSjCgvdLr1c
|
|
A5uKsqdo5yXDFMUqM7a30JMkS1OyUC6/wdkGkx5LfaBySqw7huTcHGGxnAq7EIkvdBpoAL
|
|
wOW8s/BBX1/MEorJ1dJULbBUz0myAWwHF7Nh1EP09w3bPGeJrJYzABJOJaSNvYTLzvw2p1
|
|
odmDu+Z/+0J494OV8CT0fsk8Z8O85dknUeQRulYBJesqeURy280zAAADwLuyDsegVHlUsH
|
|
h0bEoYb+d8lT6ntoUGgLX8ntGmEWgrGXX4Sw2k0L5yHGeLG+hUvBXY2fOfJUVjCkoqlwEf
|
|
0Y10tKUVDJl1tBTzYYyB6H1ZszMyiWWbr+ytDs11wJ86WhM2n4udyrMsjVQmURNN2nTlvF
|
|
Q4Z+rMAOC//1OtB1LDDMU4FWw1J50QUoYQ1lsNt2XLfMIECm4Adm9ucYbrXUyiceegnBDU
|
|
bCL73uQg3dBPkIUQvt4di28TUChDKsHO2TkyrYU2+9I+PIiphdsDmMc/Q0P0QnuYFomWI+
|
|
3vhNU9Ht0FoKD3dzAxDj81H2AzHAx3pU8uuhFgA8tIEPaT5bjgY6Xws0Ret771sjYLbM5F
|
|
7LHBFl+lkB2sEK3BWjd/Mj5VpLebwiZOUyLgrEESb+4vNlU82n15G08bxrOo/4vMKsrnCL
|
|
3JFIGKzCseZFd4VE8BZBp89H1Nr+TmDRArqUZ4B7FHGVPUjW+SAE7T2m3Ujz1A4J9l0KQ4
|
|
7OK4kaziRPkpaZb7XccP4lDalcxJRC+zjF/hlor/YlDIBpghYAw1JLMgPbG1uuEnKNuGIv
|
|
1gfGML2U/bQSRbygUVk6nos9i4SdBfWMSNkYYfXTJ6NYTbopMAZ0VK1X9IDgoN91ZNoRbB
|
|
M4BWCghcmm6eEF15tqDQ4nJ9caZMMeE4vUNKuF5T5It4LuBLafPWYZUeuKmiJecFqxjr8M
|
|
uhq0d91LSQwwH8tANq6Nt/Hj/lubSomjxGGRkhtz0fNpE5gM6LJNa5R7VIFu8PHXHOGypC
|
|
Z0PTTa2r+L8AnzwjMv1H5dISOm3zF1AYZ9HG6a8MJn8z3SpeAUM1iqeQ488/ppmYlX0d5T
|
|
JYHZoDFhBGvy3xtLZQ6j4/4IZga8HgHHxz7Ch2KdMzQiFUaMIOfixd5ljVVKiOi/VdvBFn
|
|
3e5piSYFyCfvHpjK+YOQ9nLXigLwUbDgS2BiZ+gMdydKQX42+JXU+/ICItdZl+wP7mkai+
|
|
xqTFDS4oOu637kfKI6ChT/Fsey5Ylip5IcfRg0Ubyow0omxW4o/J+S/bFIlGHSgb9PUs+T
|
|
x2c9IXXcclt31xkCz+JASa6LW+ldUUvEMiv3uW84Un5D6vFByX8lEV6FOc27QUCIYgWjqV
|
|
jAgZg4FmI+bj3/kRaLVjpxcjEGZjfxNn3gRAgeETWSLzAUyF8CN9vzV8+K64AuJNa5J2tx
|
|
+qezsx6kJTHdy3OoztCoFmgU29BBn0b7Ip4u9agaW53R7N4tjwPKg9IrDEqTIAmY+O2nk7
|
|
rM5cY3OQ==
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
"
|
|
set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYUFiCOzZ8jkWReh8ohyBpy6ZHkccvy13tZdDl9QYc14NBf6PCr2AgfvKh34LBqvjkXG3dOt4Mf8viDyFiHIsUhBOyUvVWGb5nYSYYGyH5a7jIQ6hHT3ycjsfpZKVCp9QOpdAQ3mSkbmSjCgvdLr1cA5uKsqdo5yXDFMUqM7a30JMkS1OyUC6/wdkGkx5LfaBySqw7huTcHGGxnAq7EIkvdBpoALwOW8s/BBX1/MEorJ1dJULbBUz0myAWwHF7Nh1EP09w3bPGeJrJYzABJOJaSNvYTLzvw2p1odmDu+Z/+0J494OV8CT0fsk8Z8O85dknUeQRulYBJesqeURy280z"
|
|
set source built-in
|
|
next
|
|
end
|
|
config firewall ssh setting
|
|
set caname "g-Fortinet_SSH_CA"
|
|
set untrusted-caname "g-Fortinet_SSH_CA_Untrusted"
|
|
set hostkey-rsa2048 "g-Fortinet_SSH_RSA2048"
|
|
set hostkey-dsa1024 "g-Fortinet_SSH_DSA1024"
|
|
set hostkey-ecdsa256 "g-Fortinet_SSH_ECDSA256"
|
|
set hostkey-ecdsa384 "g-Fortinet_SSH_ECDSA384"
|
|
set hostkey-ecdsa521 "g-Fortinet_SSH_ECDSA521"
|
|
set hostkey-ed25519 "g-Fortinet_SSH_ED25519"
|
|
set host-trusted-checking enable
|
|
end
|
|
config firewall ssh host-key
|
|
end
|
|
config firewall decrypted-traffic-mirror
|
|
end
|
|
config firewall access-proxy-virtual-host
|
|
end
|
|
config firewall access-proxy-ssh-client-cert
|
|
end
|
|
config firewall access-proxy
|
|
end
|
|
config firewall access-proxy6
|
|
end
|
|
config firewall ipmacbinding setting
|
|
set bindthroughfw disable
|
|
set bindtofw disable
|
|
end
|
|
config firewall ipmacbinding table
|
|
end
|
|
config firewall profile-protocol-options
|
|
edit "default"
|
|
set comment "All services."
|
|
set replacemsg-group ''
|
|
set oversize-log disable
|
|
set switching-protocols-log disable
|
|
config http
|
|
set ports 80
|
|
set status enable
|
|
set inspect-all disable
|
|
set proxy-after-tcp-handshake disable
|
|
unset options
|
|
set comfort-interval 10
|
|
set comfort-amount 1
|
|
set range-block disable
|
|
set strip-x-forwarded-for disable
|
|
unset post-lang
|
|
set streaming-content-bypass enable
|
|
set switching-protocols bypass
|
|
set unknown-http-version reject
|
|
set tunnel-non-http enable
|
|
set h2c disable
|
|
set unknown-content-encoding block
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set stream-based-uncompressed-limit 0
|
|
set scan-bzip2 enable
|
|
set verify-dns-for-policy-matching enable
|
|
set block-page-status-code 403
|
|
set retry-count 0
|
|
set tcp-window-type auto-tuning
|
|
set ssl-offloaded no
|
|
set address-ip-rating enable
|
|
end
|
|
config ftp
|
|
set ports 21
|
|
set status enable
|
|
set inspect-all disable
|
|
set options splice
|
|
set comfort-interval 10
|
|
set comfort-amount 1
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set stream-based-uncompressed-limit 0
|
|
set scan-bzip2 enable
|
|
set tcp-window-type auto-tuning
|
|
set ssl-offloaded no
|
|
set explicit-ftp-tls disable
|
|
end
|
|
config imap
|
|
set ports 143
|
|
set status enable
|
|
set inspect-all disable
|
|
set proxy-after-tcp-handshake disable
|
|
set options fragmail
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
set ssl-offloaded no
|
|
end
|
|
config mapi
|
|
set ports 135
|
|
set status enable
|
|
set options fragmail
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
end
|
|
config pop3
|
|
set ports 110
|
|
set status enable
|
|
set inspect-all disable
|
|
set proxy-after-tcp-handshake disable
|
|
set options fragmail
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
set ssl-offloaded no
|
|
end
|
|
config smtp
|
|
set ports 25
|
|
set status enable
|
|
set inspect-all disable
|
|
set proxy-after-tcp-handshake disable
|
|
set options fragmail splice
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
set server-busy disable
|
|
set ssl-offloaded no
|
|
end
|
|
config nntp
|
|
set ports 119
|
|
set status enable
|
|
set inspect-all disable
|
|
set proxy-after-tcp-handshake disable
|
|
set options splice
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
end
|
|
config ssh
|
|
unset options
|
|
set comfort-interval 10
|
|
set comfort-amount 1
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set stream-based-uncompressed-limit 0
|
|
set scan-bzip2 enable
|
|
set tcp-window-type auto-tuning
|
|
set ssl-offloaded no
|
|
end
|
|
config dns
|
|
set ports 53
|
|
set status enable
|
|
end
|
|
config cifs
|
|
set ports 445
|
|
set status enable
|
|
unset options
|
|
set oversize-limit 10
|
|
set uncompressed-oversize-limit 10
|
|
set uncompressed-nest-limit 12
|
|
set scan-bzip2 enable
|
|
set tcp-window-type auto-tuning
|
|
set server-credential-type none
|
|
end
|
|
config mail-signature
|
|
set status disable
|
|
set signature ''
|
|
end
|
|
set rpc-over-http disable
|
|
next
|
|
end
|
|
config firewall ssl-ssh-profile
|
|
edit "no-inspection"
|
|
set comment "Read-only profile that does no inspection."
|
|
config ssl
|
|
set inspect-all disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config https
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set sni-server-cert-check enable
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config ftps
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config imaps
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config pop3s
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config smtps
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config ssh
|
|
set ports 22
|
|
set status disable
|
|
set inspect-all disable
|
|
set unsupported-version bypass
|
|
set ssh-tun-policy-check disable
|
|
set ssh-algorithm compatible
|
|
end
|
|
config dot
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
set block-blocklisted-certificates enable
|
|
set caname "Fortinet_CA_SSL"
|
|
set ssl-anomaly-log enable
|
|
set ssl-negotiation-log disable
|
|
set ssl-server-cert-log disable
|
|
set ssl-handshake-log disable
|
|
next
|
|
edit "custom-deep-inspection"
|
|
set comment "Customizable deep inspection profile."
|
|
config ssl
|
|
set inspect-all disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config https
|
|
set ports 443
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set sni-server-cert-check enable
|
|
set cert-probe-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config ftps
|
|
set ports 990
|
|
set status deep-inspection
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config imaps
|
|
set ports 993
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config pop3s
|
|
set ports 995
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config smtps
|
|
set ports 465
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config ssh
|
|
set ports 22
|
|
set status disable
|
|
set inspect-all disable
|
|
set unsupported-version bypass
|
|
set ssh-tun-policy-check disable
|
|
set ssh-algorithm compatible
|
|
end
|
|
config dot
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
set allowlist disable
|
|
set block-blocklisted-certificates enable
|
|
config ssl-exempt
|
|
edit 1
|
|
set type fortiguard-category
|
|
set fortiguard-category 31
|
|
next
|
|
edit 2
|
|
set type fortiguard-category
|
|
set fortiguard-category 33
|
|
next
|
|
edit 3
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-android"
|
|
next
|
|
edit 4
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-apple"
|
|
next
|
|
edit 5
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-appstore"
|
|
next
|
|
edit 6
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-citrix"
|
|
next
|
|
edit 7
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-eease"
|
|
next
|
|
edit 8
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-drive"
|
|
next
|
|
edit 9
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-play"
|
|
next
|
|
edit 10
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-play2"
|
|
next
|
|
edit 11
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-play3"
|
|
next
|
|
edit 12
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-Gotomeeting"
|
|
next
|
|
edit 13
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-microsoft"
|
|
next
|
|
edit 14
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-update.microsoft.com"
|
|
next
|
|
edit 15
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-adobe"
|
|
next
|
|
edit 16
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-Adobe Login"
|
|
next
|
|
edit 17
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-dropbox.com"
|
|
next
|
|
edit 18
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-fortinet"
|
|
next
|
|
edit 19
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-googleapis.com"
|
|
next
|
|
edit 20
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-icloud"
|
|
next
|
|
edit 21
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-itunes"
|
|
next
|
|
edit 22
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-skype"
|
|
next
|
|
edit 23
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-swscan.apple.com"
|
|
next
|
|
edit 24
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-verisign"
|
|
next
|
|
edit 25
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-Windows update 2"
|
|
next
|
|
edit 26
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-auth.gfx.ms"
|
|
next
|
|
edit 27
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-autoupdate.opera.com"
|
|
next
|
|
edit 28
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-softwareupdate.vmware.com"
|
|
next
|
|
edit 29
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-firefox update server"
|
|
next
|
|
edit 30
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-cdn-apple"
|
|
next
|
|
edit 31
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-mzstatic-apple"
|
|
next
|
|
end
|
|
set server-cert-mode re-sign
|
|
set caname "Fortinet_CA_SSL"
|
|
set untrusted-caname "Fortinet_CA_Untrusted"
|
|
set ssl-exemption-ip-rating enable
|
|
set ssl-exemption-log disable
|
|
set ssl-anomaly-log enable
|
|
set ssl-negotiation-log disable
|
|
set ssl-server-cert-log disable
|
|
set ssl-handshake-log disable
|
|
set rpc-over-https disable
|
|
set mapi-over-https disable
|
|
set supported-alpn all
|
|
set use-ssl-server disable
|
|
next
|
|
edit "certificate-inspection"
|
|
set comment "Read-only SSL handshake inspection profile."
|
|
config ssl
|
|
set inspect-all disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config https
|
|
set ports 443
|
|
set status certificate-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set sni-server-cert-check enable
|
|
set cert-probe-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config ftps
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config imaps
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config pop3s
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config smtps
|
|
set status disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config ssh
|
|
set ports 22
|
|
set status disable
|
|
set inspect-all disable
|
|
set unsupported-version bypass
|
|
set ssh-tun-policy-check disable
|
|
set ssh-algorithm compatible
|
|
end
|
|
config dot
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
set block-blocklisted-certificates enable
|
|
set caname "Fortinet_CA_SSL"
|
|
set ssl-anomaly-log enable
|
|
set ssl-negotiation-log disable
|
|
set ssl-server-cert-log disable
|
|
set ssl-handshake-log disable
|
|
next
|
|
edit "R&D-SSL-DEEP"
|
|
set comment ''
|
|
config ssl
|
|
set inspect-all deep-inspection
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set sni-server-cert-check enable
|
|
set cert-probe-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config https
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config ftps
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config imaps
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
end
|
|
config pop3s
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
end
|
|
config smtps
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
end
|
|
config ssh
|
|
set ports 22
|
|
set status disable
|
|
set inspect-all disable
|
|
set unsupported-version bypass
|
|
set ssh-tun-policy-check disable
|
|
set ssh-algorithm compatible
|
|
end
|
|
config dot
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
set allowlist disable
|
|
set block-blocklisted-certificates enable
|
|
set server-cert-mode re-sign
|
|
set caname "Fortinet_CA_SSL"
|
|
set untrusted-caname "Fortinet_CA_Untrusted"
|
|
set ssl-exemption-ip-rating enable
|
|
set ssl-exemption-log enable
|
|
set ssl-anomaly-log enable
|
|
set ssl-negotiation-log disable
|
|
set ssl-server-cert-log disable
|
|
set ssl-handshake-log disable
|
|
set rpc-over-https disable
|
|
set mapi-over-https disable
|
|
set supported-alpn all
|
|
set use-ssl-server disable
|
|
next
|
|
edit "deep-inspection"
|
|
set comment "Read-only deep inspection profile."
|
|
config ssl
|
|
set inspect-all disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config https
|
|
set ports 443
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set sni-server-cert-check enable
|
|
set cert-probe-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config ftps
|
|
set ports 990
|
|
set status deep-inspection
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
set min-allowed-ssl-version tls-1.1
|
|
end
|
|
config imaps
|
|
set ports 993
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config pop3s
|
|
set ports 995
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config smtps
|
|
set ports 465
|
|
set status deep-inspection
|
|
set proxy-after-tcp-handshake disable
|
|
set client-certificate inspect
|
|
set unsupported-ssl-version allow
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
config ssh
|
|
set ports 22
|
|
set status disable
|
|
set inspect-all disable
|
|
set unsupported-version bypass
|
|
set ssh-tun-policy-check disable
|
|
set ssh-algorithm compatible
|
|
end
|
|
config dot
|
|
set status disable
|
|
set client-certificate bypass
|
|
set unsupported-ssl-version block
|
|
set unsupported-ssl-cipher allow
|
|
set unsupported-ssl-negotiation allow
|
|
set expired-server-cert block
|
|
set revoked-server-cert block
|
|
set untrusted-server-cert allow
|
|
set cert-validation-timeout allow
|
|
set cert-validation-failure block
|
|
end
|
|
set allowlist disable
|
|
set block-blocklisted-certificates enable
|
|
config ssl-exempt
|
|
edit 1
|
|
set type fortiguard-category
|
|
set fortiguard-category 31
|
|
next
|
|
edit 2
|
|
set type fortiguard-category
|
|
set fortiguard-category 33
|
|
next
|
|
edit 3
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-adobe"
|
|
next
|
|
edit 4
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-Adobe Login"
|
|
next
|
|
edit 5
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-android"
|
|
next
|
|
edit 6
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-apple"
|
|
next
|
|
edit 7
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-appstore"
|
|
next
|
|
edit 8
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-auth.gfx.ms"
|
|
next
|
|
edit 9
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-citrix"
|
|
next
|
|
edit 10
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-dropbox.com"
|
|
next
|
|
edit 11
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-eease"
|
|
next
|
|
edit 12
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-firefox update server"
|
|
next
|
|
edit 13
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-fortinet"
|
|
next
|
|
edit 14
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-googleapis.com"
|
|
next
|
|
edit 15
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-drive"
|
|
next
|
|
edit 16
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-play2"
|
|
next
|
|
edit 17
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-play3"
|
|
next
|
|
edit 18
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-Gotomeeting"
|
|
next
|
|
edit 19
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-icloud"
|
|
next
|
|
edit 20
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-itunes"
|
|
next
|
|
edit 21
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-microsoft"
|
|
next
|
|
edit 22
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-skype"
|
|
next
|
|
edit 23
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-softwareupdate.vmware.com"
|
|
next
|
|
edit 24
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-verisign"
|
|
next
|
|
edit 25
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-Windows update 2"
|
|
next
|
|
edit 26
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-live.com"
|
|
next
|
|
edit 27
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-google-play"
|
|
next
|
|
edit 28
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-update.microsoft.com"
|
|
next
|
|
edit 29
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-swscan.apple.com"
|
|
next
|
|
edit 30
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-autoupdate.opera.com"
|
|
next
|
|
edit 31
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-cdn-apple"
|
|
next
|
|
edit 32
|
|
set type wildcard-fqdn
|
|
set wildcard-fqdn "g-mzstatic-apple"
|
|
next
|
|
end
|
|
set server-cert-mode re-sign
|
|
set caname "Fortinet_CA_SSL"
|
|
set untrusted-caname "Fortinet_CA_Untrusted"
|
|
set ssl-exemption-ip-rating enable
|
|
set ssl-exemption-log disable
|
|
set ssl-anomaly-log enable
|
|
set ssl-negotiation-log disable
|
|
set ssl-server-cert-log disable
|
|
set ssl-handshake-log disable
|
|
set rpc-over-https disable
|
|
set mapi-over-https disable
|
|
set supported-alpn all
|
|
set use-ssl-server disable
|
|
next
|
|
end
|
|
config waf profile
|
|
edit "default"
|
|
set external disable
|
|
set extended-log disable
|
|
config signature
|
|
config main-class 100000000
|
|
set status disable
|
|
set action block
|
|
set log disable
|
|
set severity high
|
|
end
|
|
config main-class 20000000
|
|
set status disable
|
|
set action allow
|
|
set log disable
|
|
set severity medium
|
|
end
|
|
config main-class 30000000
|
|
set status enable
|
|
set action block
|
|
set log disable
|
|
set severity high
|
|
end
|
|
config main-class 40000000
|
|
set status disable
|
|
set action allow
|
|
set log disable
|
|
set severity medium
|
|
end
|
|
config main-class 50000000
|
|
set status enable
|
|
set action block
|
|
set log disable
|
|
set severity high
|
|
end
|
|
config main-class 60000000
|
|
set status disable
|
|
set action allow
|
|
set log disable
|
|
set severity medium
|
|
end
|
|
config main-class 70000000
|
|
set status enable
|
|
set action block
|
|
set log disable
|
|
set severity high
|
|
end
|
|
config main-class 80000000
|
|
set status enable
|
|
set action allow
|
|
set log disable
|
|
set severity low
|
|
end
|
|
config main-class 110000000
|
|
set status enable
|
|
set action allow
|
|
set log disable
|
|
set severity high
|
|
end
|
|
config main-class 90000000
|
|
set status enable
|
|
set action block
|
|
set log disable
|
|
set severity high
|
|
end
|
|
set disabled-signature 80080005 80200001 60030001 60120001 80080003 90410001 90410002
|
|
set credit-card-detection-threshold 3
|
|
end
|
|
config constraint
|
|
config header-length
|
|
set status enable
|
|
set length 8192
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config content-length
|
|
set status enable
|
|
set length 67108864
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config param-length
|
|
set status enable
|
|
set length 8192
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config line-length
|
|
set status enable
|
|
set length 1024
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config url-param-length
|
|
set status enable
|
|
set length 8192
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config version
|
|
set status disable
|
|
set action allow
|
|
set log enable
|
|
set severity medium
|
|
end
|
|
config method
|
|
set status disable
|
|
set action block
|
|
set log enable
|
|
set severity medium
|
|
end
|
|
config hostname
|
|
set status disable
|
|
set action block
|
|
set log enable
|
|
set severity medium
|
|
end
|
|
config malformed
|
|
set status disable
|
|
set action allow
|
|
set log enable
|
|
set severity medium
|
|
end
|
|
config max-cookie
|
|
set status enable
|
|
set max-cookie 16
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config max-header-line
|
|
set status enable
|
|
set max-header-line 32
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config max-url-param
|
|
set status enable
|
|
set max-url-param 16
|
|
set action allow
|
|
set log enable
|
|
set severity low
|
|
end
|
|
config max-range-segment
|
|
set status enable
|
|
set max-range-segment 5
|
|
set action allow
|
|
set log enable
|
|
set severity high
|
|
end
|
|
end
|
|
config method
|
|
set status disable
|
|
set log disable
|
|
set severity medium
|
|
unset default-allowed-methods
|
|
end
|
|
config address-list
|
|
set status disable
|
|
set blocked-log disable
|
|
set severity medium
|
|
end
|
|
set comment ''
|
|
next
|
|
end
|
|
config firewall profile-group
|
|
end
|
|
config firewall ssl-server
|
|
end
|
|
config firewall identity-based-route
|
|
end
|
|
config firewall auth-portal
|
|
set portal-addr ''
|
|
set portal-addr6 ''
|
|
set identity-based-route ''
|
|
set proxy-auth disable
|
|
end
|
|
config firewall policy
|
|
end
|
|
config firewall shaping-policy
|
|
end
|
|
config firewall shaping-profile
|
|
end
|
|
config firewall local-in-policy
|
|
end
|
|
config firewall local-in-policy6
|
|
end
|
|
config firewall ttl-policy
|
|
end
|
|
config firewall proxy-policy
|
|
end
|
|
config firewall dnstranslation
|
|
end
|
|
config firewall multicast-policy
|
|
end
|
|
config firewall multicast-policy6
|
|
end
|
|
config firewall interface-policy
|
|
end
|
|
config firewall interface-policy6
|
|
end
|
|
config firewall DoS-policy
|
|
end
|
|
config firewall DoS-policy6
|
|
end
|
|
config firewall sniffer
|
|
end
|
|
config firewall acl
|
|
end
|
|
config firewall acl6
|
|
end
|
|
config firewall central-snat-map
|
|
end
|
|
config firewall ip-translation
|
|
end
|
|
config authentication scheme
|
|
end
|
|
config authentication rule
|
|
end
|
|
config authentication setting
|
|
set active-auth-scheme ''
|
|
set sso-auth-scheme ''
|
|
set update-time 0000-00-00 00:00:00
|
|
set persistent-cookie enable
|
|
set ip-auth-cookie disable
|
|
set cookie-max-age 480
|
|
set cookie-refresh-div 2
|
|
set captive-portal-type fqdn
|
|
set captive-portal ''
|
|
set captive-portal6 ''
|
|
set cert-auth disable
|
|
set captive-portal-port 7830
|
|
set auth-https enable
|
|
set captive-portal-ssl-port 7831
|
|
end
|
|
config system speed-test-schedule
|
|
end
|
|
config switch-controller switch-interface-tag
|
|
end
|
|
config switch-controller 802-1X-settings
|
|
set link-down-auth set-unauth
|
|
set reauth-period 60
|
|
set max-reauth-attempt 3
|
|
set tx-period 30
|
|
set mab-reauth disable
|
|
end
|
|
config switch-controller security-policy 802-1X
|
|
edit "802-1X-policy-default"
|
|
set security-mode 802.1X
|
|
set user-group "SSO_Guest_Users"
|
|
set mac-auth-bypass disable
|
|
set open-auth disable
|
|
set eap-passthru enable
|
|
set eap-auto-untagged-vlans enable
|
|
set guest-vlan disable
|
|
set guest-auth-delay 30
|
|
set auth-fail-vlan disable
|
|
set framevid-apply enable
|
|
set radius-timeout-overwrite disable
|
|
set policy-type 802.1X
|
|
set authserver-timeout-vlan disable
|
|
next
|
|
end
|
|
config switch-controller security-policy local-access
|
|
edit "default"
|
|
set mgmt-allowaccess https ping ssh
|
|
set internal-allowaccess https ping ssh
|
|
next
|
|
end
|
|
config switch-controller location
|
|
end
|
|
config switch-controller lldp-settings
|
|
set tx-hold 4
|
|
set tx-interval 30
|
|
set fast-start-interval 2
|
|
set management-interface internal
|
|
set device-detection enable
|
|
end
|
|
config switch-controller lldp-profile
|
|
edit "default"
|
|
set med-tlvs inventory-management network-policy
|
|
unset 802.1-tlvs
|
|
unset 802.3-tlvs
|
|
set auto-isl disable
|
|
config med-network-policy
|
|
edit "voice"
|
|
set status disable
|
|
next
|
|
edit "voice-signaling"
|
|
set status disable
|
|
next
|
|
edit "guest-voice"
|
|
set status disable
|
|
next
|
|
edit "guest-voice-signaling"
|
|
set status disable
|
|
next
|
|
edit "softphone-voice"
|
|
set status disable
|
|
next
|
|
edit "video-conferencing"
|
|
set status disable
|
|
next
|
|
edit "streaming-video"
|
|
set status disable
|
|
next
|
|
edit "video-signaling"
|
|
set status disable
|
|
next
|
|
end
|
|
next
|
|
edit "default-auto-isl"
|
|
unset med-tlvs
|
|
unset 802.1-tlvs
|
|
unset 802.3-tlvs
|
|
set auto-isl enable
|
|
set auto-isl-hello-timer 3
|
|
set auto-isl-receive-timeout 60
|
|
set auto-isl-port-group 0
|
|
set auto-mclag-icl disable
|
|
next
|
|
edit "default-auto-mclag-icl"
|
|
unset med-tlvs
|
|
unset 802.1-tlvs
|
|
unset 802.3-tlvs
|
|
set auto-isl enable
|
|
set auto-isl-hello-timer 3
|
|
set auto-isl-receive-timeout 60
|
|
set auto-isl-port-group 0
|
|
set auto-mclag-icl enable
|
|
next
|
|
end
|
|
config switch-controller qos dot1p-map
|
|
edit "voice-dot1p"
|
|
set description ''
|
|
set egress-pri-tagging disable
|
|
set priority-0 queue-4
|
|
set priority-1 queue-4
|
|
set priority-2 queue-3
|
|
set priority-3 queue-2
|
|
set priority-4 queue-3
|
|
set priority-5 queue-1
|
|
set priority-6 queue-2
|
|
set priority-7 queue-2
|
|
next
|
|
end
|
|
config switch-controller qos ip-dscp-map
|
|
edit "voice-dscp"
|
|
set description ''
|
|
config map
|
|
edit "1"
|
|
set cos-queue 1
|
|
set value 46
|
|
next
|
|
edit "2"
|
|
set cos-queue 2
|
|
set value 24,26,48,56
|
|
next
|
|
edit "5"
|
|
set cos-queue 3
|
|
set value 34
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config switch-controller qos queue-policy
|
|
edit "default"
|
|
set schedule round-robin
|
|
set rate-by kbps
|
|
config cos-queue
|
|
edit "queue-0"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-1"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-2"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-3"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-4"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-5"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-6"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-7"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
end
|
|
next
|
|
edit "voice-egress"
|
|
set schedule weighted
|
|
set rate-by kbps
|
|
config cos-queue
|
|
edit "queue-0"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-1"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 0
|
|
next
|
|
edit "queue-2"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 6
|
|
next
|
|
edit "queue-3"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 37
|
|
next
|
|
edit "queue-4"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 12
|
|
next
|
|
edit "queue-5"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-6"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
edit "queue-7"
|
|
set description ''
|
|
set min-rate 0
|
|
set max-rate 0
|
|
set drop-policy taildrop
|
|
set weight 1
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config switch-controller qos qos-policy
|
|
edit "default"
|
|
set default-cos 0
|
|
set trust-dot1p-map ''
|
|
set trust-ip-dscp-map ''
|
|
set queue-policy "default"
|
|
next
|
|
edit "voice-qos"
|
|
set default-cos 0
|
|
set trust-dot1p-map "voice-dot1p"
|
|
set trust-ip-dscp-map "voice-dscp"
|
|
set queue-policy "voice-egress"
|
|
next
|
|
end
|
|
config switch-controller storm-control-policy
|
|
edit "default"
|
|
set description "default storm control on all port"
|
|
set storm-control-mode global
|
|
next
|
|
edit "auto-config"
|
|
set description "storm control policy for fortilink-isl-icl port"
|
|
set storm-control-mode disabled
|
|
next
|
|
end
|
|
config switch-controller auto-config policy
|
|
edit "pse"
|
|
set qos-policy "default"
|
|
set storm-control-policy "auto-config"
|
|
set poe-status enable
|
|
set igmp-flood-report disable
|
|
set igmp-flood-traffic disable
|
|
next
|
|
edit "default"
|
|
set qos-policy "default"
|
|
set storm-control-policy "auto-config"
|
|
set poe-status enable
|
|
set igmp-flood-report disable
|
|
set igmp-flood-traffic disable
|
|
next
|
|
edit "default-icl"
|
|
set qos-policy "default"
|
|
set storm-control-policy "auto-config"
|
|
set poe-status disable
|
|
set igmp-flood-report enable
|
|
set igmp-flood-traffic enable
|
|
next
|
|
end
|
|
config switch-controller auto-config default
|
|
set fgt-policy "default"
|
|
set isl-policy "default"
|
|
set icl-policy "default-icl"
|
|
end
|
|
config switch-controller auto-config custom
|
|
end
|
|
config switch-controller initial-config template
|
|
edit "_default"
|
|
set vlanid 1
|
|
unset allowaccess
|
|
set dhcp-server disable
|
|
next
|
|
edit "quarantine"
|
|
set vlanid 4093
|
|
unset allowaccess
|
|
set auto-ip enable
|
|
set dhcp-server enable
|
|
next
|
|
edit "rspan"
|
|
set vlanid 4092
|
|
unset allowaccess
|
|
set auto-ip enable
|
|
set dhcp-server enable
|
|
next
|
|
edit "voice"
|
|
set vlanid 4091
|
|
unset allowaccess
|
|
set dhcp-server disable
|
|
next
|
|
edit "video"
|
|
set vlanid 4090
|
|
unset allowaccess
|
|
set dhcp-server disable
|
|
next
|
|
edit "onboarding"
|
|
set vlanid 4089
|
|
unset allowaccess
|
|
set dhcp-server disable
|
|
next
|
|
edit "nac_segment"
|
|
set vlanid 4088
|
|
unset allowaccess
|
|
set auto-ip enable
|
|
set dhcp-server enable
|
|
next
|
|
end
|
|
config switch-controller initial-config vlans
|
|
set default-vlan "_default"
|
|
set quarantine "quarantine"
|
|
set rspan "rspan"
|
|
set voice "voice"
|
|
set video "video"
|
|
set nac "onboarding"
|
|
set nac-segment "nac_segment"
|
|
end
|
|
config switch-controller switch-profile
|
|
edit "default"
|
|
set login-passwd-override disable
|
|
set login enable
|
|
set revision-backup-on-logout disable
|
|
set revision-backup-on-upgrade disable
|
|
next
|
|
end
|
|
config switch-controller custom-command
|
|
end
|
|
config switch-controller virtual-port-pool
|
|
end
|
|
config switch-controller ptp settings
|
|
set mode disable
|
|
end
|
|
config switch-controller ptp policy
|
|
edit "default"
|
|
set status enable
|
|
next
|
|
end
|
|
config switch-controller vlan-policy
|
|
end
|
|
config switch-controller dynamic-port-policy
|
|
end
|
|
config switch-controller managed-switch
|
|
end
|
|
config switch-controller switch-group
|
|
end
|
|
config switch-controller stp-settings
|
|
set name ''
|
|
set revision 0
|
|
set hello-time 2
|
|
set forward-time 15
|
|
set max-age 20
|
|
set max-hops 20
|
|
end
|
|
config switch-controller stp-instance
|
|
end
|
|
config switch-controller storm-control
|
|
set rate 500
|
|
set unknown-unicast disable
|
|
set unknown-multicast disable
|
|
set broadcast disable
|
|
end
|
|
config switch-controller global
|
|
set mac-aging-interval 300
|
|
set https-image-push enable
|
|
set vlan-optimization enable
|
|
set vlan-identity name
|
|
set mac-retention-period 24
|
|
set default-virtual-switch-vlan ''
|
|
set dhcp-server-access-list disable
|
|
set log-mac-limit-violations disable
|
|
set sn-dns-resolution enable
|
|
set mac-event-logging disable
|
|
set bounce-quarantined-link disable
|
|
set quarantine-mode by-vlan
|
|
set update-user-device mac-cache lldp dhcp-snooping l2-db l3-db
|
|
set fips-enforce enable
|
|
set firmware-provision-on-authorization disable
|
|
end
|
|
config switch-controller switch-log
|
|
set status enable
|
|
set severity notification
|
|
end
|
|
config switch-controller igmp-snooping
|
|
set aging-time 300
|
|
set flood-unknown-multicast disable
|
|
set query-interval 125
|
|
end
|
|
config switch-controller sflow
|
|
set collector-ip 0.0.0.0
|
|
set collector-port 6343
|
|
end
|
|
config switch-controller network-monitor-settings
|
|
set network-monitoring disable
|
|
end
|
|
config switch-controller flow-tracking
|
|
set sample-mode perimeter
|
|
set sample-rate 512
|
|
set format netflow9
|
|
set level ip
|
|
set max-export-pkt-size 512
|
|
set template-export-period 5
|
|
set timeout-general 3600
|
|
set timeout-icmp 300
|
|
set timeout-max 604800
|
|
set timeout-tcp 3600
|
|
set timeout-tcp-fin 300
|
|
set timeout-tcp-rst 120
|
|
set timeout-udp 300
|
|
end
|
|
config switch-controller snmp-sysinfo
|
|
set status disable
|
|
set engine-id ''
|
|
set description ''
|
|
set contact-info ''
|
|
set location ''
|
|
end
|
|
config switch-controller snmp-trap-threshold
|
|
set trap-high-cpu-threshold 80
|
|
set trap-low-memory-threshold 80
|
|
set trap-log-full-threshold 90
|
|
end
|
|
config switch-controller snmp-community
|
|
end
|
|
config switch-controller snmp-user
|
|
end
|
|
config switch-controller traffic-sniffer
|
|
set mode erspan-auto
|
|
set erspan-ip 0.0.0.0
|
|
end
|
|
config switch-controller remote-log
|
|
edit "syslogd"
|
|
set status disable
|
|
next
|
|
edit "syslogd2"
|
|
set status disable
|
|
next
|
|
end
|
|
config switch-controller mac-policy
|
|
end
|
|
config wireless-controller setting
|
|
set account-id ''
|
|
set country US
|
|
set duplicate-ssid disable
|
|
set fapc-compatibility disable
|
|
set wfa-compatibility disable
|
|
set phishing-ssid-detect enable
|
|
set fake-ssid-action log
|
|
set device-weight 1
|
|
set device-holdoff 5
|
|
set device-idle 1440
|
|
set firmware-provision-on-authorization disable
|
|
set darrp-optimize 86400
|
|
set darrp-optimize-schedules "default-darrp-optimize"
|
|
end
|
|
config wireless-controller log
|
|
set status enable
|
|
set addrgrp-log notification
|
|
set ble-log notification
|
|
set clb-log notification
|
|
set dhcp-starv-log notification
|
|
set led-sched-log notification
|
|
set radio-event-log notification
|
|
set rogue-event-log notification
|
|
set sta-event-log notification
|
|
set sta-locate-log notification
|
|
set wids-log notification
|
|
set wtp-event-log notification
|
|
end
|
|
config wireless-controller apcfg-profile
|
|
end
|
|
config wireless-controller bonjour-profile
|
|
end
|
|
config wireless-controller arrp-profile
|
|
edit "arrp-default"
|
|
set comment ''
|
|
set selection-period 3600
|
|
set monitor-period 300
|
|
set weight-managed-ap 50
|
|
set weight-rogue-ap 10
|
|
set weight-noise-floor 40
|
|
set weight-channel-load 20
|
|
set weight-spectral-rssi 40
|
|
set weight-weather-channel 0
|
|
set weight-dfs-channel 0
|
|
set threshold-ap 250
|
|
set threshold-noise-floor "-85"
|
|
set threshold-channel-load 60
|
|
set threshold-spectral-rssi "-65"
|
|
set threshold-tx-retries 300
|
|
set threshold-rx-errors 50
|
|
set include-weather-channel enable
|
|
set include-dfs-channel enable
|
|
set override-darrp-optimize disable
|
|
next
|
|
end
|
|
config wireless-controller region
|
|
end
|
|
config wireless-controller vap-group
|
|
end
|
|
config wireless-controller wids-profile
|
|
edit "default"
|
|
set comment "Default WIDS profile."
|
|
set sensor-mode disable
|
|
set ap-scan enable
|
|
set ap-bgscan-period 600
|
|
set ap-bgscan-intv 1
|
|
set ap-bgscan-duration 20
|
|
set ap-bgscan-idle 0
|
|
set ap-bgscan-report-intv 30
|
|
set ap-fgscan-report-intv 15
|
|
set ap-scan-passive disable
|
|
set ap-scan-threshold "-90"
|
|
set wireless-bridge enable
|
|
set deauth-broadcast enable
|
|
set null-ssid-probe-resp enable
|
|
set long-duration-attack enable
|
|
set long-duration-thresh 8200
|
|
set invalid-mac-oui enable
|
|
set weak-wep-iv enable
|
|
set auth-frame-flood enable
|
|
set auth-flood-time 10
|
|
set auth-flood-thresh 30
|
|
set assoc-frame-flood enable
|
|
set assoc-flood-time 10
|
|
set assoc-flood-thresh 30
|
|
set spoofed-deauth enable
|
|
set asleap-attack enable
|
|
set eapol-start-flood enable
|
|
set eapol-start-thresh 10
|
|
set eapol-start-intv 1
|
|
set eapol-logoff-flood enable
|
|
set eapol-logoff-thresh 10
|
|
set eapol-logoff-intv 1
|
|
set eapol-succ-flood enable
|
|
set eapol-succ-thresh 10
|
|
set eapol-succ-intv 1
|
|
set eapol-fail-flood enable
|
|
set eapol-fail-thresh 10
|
|
set eapol-fail-intv 1
|
|
set eapol-pre-succ-flood enable
|
|
set eapol-pre-succ-thresh 10
|
|
set eapol-pre-succ-intv 1
|
|
set eapol-pre-fail-flood enable
|
|
set eapol-pre-fail-thresh 10
|
|
set eapol-pre-fail-intv 1
|
|
set deauth-unknown-src-thresh 10
|
|
next
|
|
edit "default-wids-apscan-enabled"
|
|
set comment ''
|
|
set sensor-mode disable
|
|
set ap-scan enable
|
|
set ap-bgscan-period 600
|
|
set ap-bgscan-intv 1
|
|
set ap-bgscan-duration 20
|
|
set ap-bgscan-idle 0
|
|
set ap-bgscan-report-intv 30
|
|
set ap-fgscan-report-intv 15
|
|
set ap-scan-passive disable
|
|
set ap-scan-threshold "-90"
|
|
set wireless-bridge disable
|
|
set deauth-broadcast disable
|
|
set null-ssid-probe-resp disable
|
|
set long-duration-attack disable
|
|
set long-duration-thresh 8200
|
|
set invalid-mac-oui disable
|
|
set weak-wep-iv disable
|
|
set auth-frame-flood disable
|
|
set assoc-frame-flood disable
|
|
set spoofed-deauth disable
|
|
set asleap-attack disable
|
|
set eapol-start-flood disable
|
|
set eapol-logoff-flood disable
|
|
set eapol-succ-flood disable
|
|
set eapol-fail-flood disable
|
|
set eapol-pre-succ-flood disable
|
|
set eapol-pre-fail-flood disable
|
|
set deauth-unknown-src-thresh 10
|
|
next
|
|
end
|
|
config wireless-controller ble-profile
|
|
edit "fortiap-discovery"
|
|
set comment ''
|
|
set advertising ibeacon eddystone-uid eddystone-url
|
|
set ibeacon-uuid "wtp-uuid"
|
|
set major-id 1000
|
|
set minor-id 2000
|
|
set eddystone-namespace "0102030405"
|
|
set eddystone-instance "abcdef"
|
|
set eddystone-url "http://www.fortinet.com"
|
|
set txpower 0
|
|
set beacon-interval 100
|
|
set ble-scanning disable
|
|
next
|
|
end
|
|
config wireless-controller syslog-profile
|
|
end
|
|
config wireless-controller wtp-profile
|
|
end
|
|
config wireless-controller wtp
|
|
end
|
|
config wireless-controller wtp-group
|
|
end
|
|
config wireless-controller qos-profile
|
|
end
|
|
config wireless-controller wag-profile
|
|
end
|
|
config wireless-controller snmp
|
|
set engine-id ''
|
|
set contact-info ''
|
|
set trap-high-cpu-threshold 80
|
|
set trap-high-mem-threshold 80
|
|
end
|
|
config wireless-controller mpsk-profile
|
|
end
|
|
config wireless-controller nac-profile
|
|
end
|
|
config wireless-controller ssid-policy
|
|
end
|
|
config wireless-controller access-control-list
|
|
end
|
|
config wireless-controller ap-status
|
|
end
|
|
config user nac-policy
|
|
end
|
|
config extension-controller dataplan
|
|
end
|
|
config extension-controller extender-profile
|
|
end
|
|
config extension-controller extender
|
|
end
|
|
config extension-controller fortigate-profile
|
|
end
|
|
config extension-controller fortigate
|
|
end
|
|
config system ips
|
|
set signature-hold-time 0h
|
|
end
|
|
config ips custom
|
|
end
|
|
config ips settings
|
|
set packet-log-history 1
|
|
set packet-log-post-attack 0
|
|
set ips-packet-quota 0
|
|
end
|
|
config alertemail setting
|
|
set username ''
|
|
set mailto1 ''
|
|
set mailto2 ''
|
|
set mailto3 ''
|
|
set filter-mode category
|
|
set email-interval 5
|
|
set IPS-logs disable
|
|
set firewall-authentication-failure-logs disable
|
|
set IPsec-errors-logs disable
|
|
set PPP-errors-logs disable
|
|
set sslvpn-authentication-errors-logs disable
|
|
set antivirus-logs disable
|
|
set webfilter-logs disable
|
|
set configuration-changes-logs disable
|
|
set violation-traffic-logs disable
|
|
set admin-login-logs disable
|
|
set log-disk-usage-warning disable
|
|
set FSSO-disconnect-logs disable
|
|
set ssh-logs disable
|
|
set local-disk-usage 75
|
|
end
|
|
config router access-list
|
|
end
|
|
config router access-list6
|
|
end
|
|
config router aspath-list
|
|
end
|
|
config router prefix-list
|
|
end
|
|
config router prefix-list6
|
|
end
|
|
config router key-chain
|
|
end
|
|
config router community-list
|
|
end
|
|
config router extcommunity-list
|
|
end
|
|
config router route-map
|
|
end
|
|
config router rip
|
|
set default-information-originate disable
|
|
set default-metric 1
|
|
set max-out-metric 0
|
|
config redistribute "connected"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "static"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "ospf"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "bgp"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "isis"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
set update-timer 30
|
|
set timeout-timer 180
|
|
set garbage-timer 120
|
|
set version 2
|
|
end
|
|
config router ripng
|
|
set default-information-originate disable
|
|
set default-metric 1
|
|
set max-out-metric 0
|
|
config redistribute "connected"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "static"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "ospf"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "bgp"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
config redistribute "isis"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
end
|
|
set update-timer 30
|
|
set timeout-timer 180
|
|
set garbage-timer 120
|
|
end
|
|
config router static
|
|
edit 2
|
|
set status enable
|
|
set dst 0.0.0.0 0.0.0.0
|
|
set distance 254
|
|
set weight 0
|
|
set priority 1
|
|
set comment "VPN: baas (Created by VPN wizard)"
|
|
set blackhole enable
|
|
set dstaddr "baas_remote"
|
|
set link-monitor-exempt disable
|
|
set tag 0
|
|
set vrf 0
|
|
next
|
|
end
|
|
config router policy
|
|
end
|
|
config router policy6
|
|
end
|
|
config router static6
|
|
end
|
|
config router ospf
|
|
set abr-type standard
|
|
set auto-cost-ref-bandwidth 1000
|
|
set distance-external 110
|
|
set distance-inter-area 110
|
|
set distance-intra-area 110
|
|
set database-overflow disable
|
|
set database-overflow-max-lsas 10000
|
|
set database-overflow-time-to-recover 300
|
|
set default-information-originate disable
|
|
set default-information-metric 10
|
|
set default-information-metric-type 2
|
|
set default-information-route-map ''
|
|
set default-metric 10
|
|
set distance 110
|
|
set rfc1583-compatible disable
|
|
set router-id 0.0.0.0
|
|
set spf-timers 5 10
|
|
set bfd disable
|
|
set log-neighbour-changes enable
|
|
set distribute-list-in ''
|
|
set distribute-route-map-in ''
|
|
set restart-mode none
|
|
config redistribute "connected"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
set tag 0
|
|
end
|
|
config redistribute "static"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
set tag 0
|
|
end
|
|
config redistribute "rip"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
set tag 0
|
|
end
|
|
config redistribute "bgp"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
set tag 0
|
|
end
|
|
config redistribute "isis"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
set tag 0
|
|
end
|
|
end
|
|
config router ospf6
|
|
set abr-type standard
|
|
set auto-cost-ref-bandwidth 1000
|
|
set default-information-originate disable
|
|
set log-neighbour-changes enable
|
|
set default-information-metric 10
|
|
set default-information-metric-type 2
|
|
set default-information-route-map ''
|
|
set default-metric 10
|
|
set router-id 0.0.0.0
|
|
set spf-timers 5 10
|
|
set bfd disable
|
|
set restart-mode none
|
|
config redistribute "connected"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
end
|
|
config redistribute "static"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
end
|
|
config redistribute "rip"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
end
|
|
config redistribute "bgp"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
end
|
|
config redistribute "isis"
|
|
set status disable
|
|
set metric 0
|
|
set routemap ''
|
|
set metric-type 2
|
|
end
|
|
end
|
|
config router bgp
|
|
unset as
|
|
set keepalive-timer 60
|
|
set holdtime-timer 180
|
|
set always-compare-med disable
|
|
set bestpath-as-path-ignore disable
|
|
set bestpath-cmp-confed-aspath disable
|
|
set bestpath-cmp-routerid disable
|
|
set bestpath-med-confed disable
|
|
set bestpath-med-missing-as-worst disable
|
|
set client-to-client-reflection enable
|
|
set dampening disable
|
|
set deterministic-med disable
|
|
set ebgp-multipath disable
|
|
set ibgp-multipath disable
|
|
set enforce-first-as enable
|
|
set fast-external-failover enable
|
|
set log-neighbour-changes enable
|
|
set network-import-check enable
|
|
set ignore-optional-capability enable
|
|
set multipath-recursive-distance disable
|
|
set recursive-next-hop disable
|
|
set recursive-inherit-priority disable
|
|
set tag-resolve-mode disable
|
|
set cluster-id 0.0.0.0
|
|
set confederation-identifier 0
|
|
set default-local-preference 100
|
|
set scan-time 60
|
|
set distance-external 20
|
|
set distance-internal 200
|
|
set distance-local 200
|
|
set synchronization disable
|
|
set graceful-restart disable
|
|
config redistribute "connected"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute "rip"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute "ospf"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute "static"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute "isis"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute6 "connected"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute6 "rip"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute6 "ospf"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute6 "static"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
config redistribute6 "isis"
|
|
set status disable
|
|
set route-map ''
|
|
end
|
|
end
|
|
config router isis
|
|
set is-type level-1-2
|
|
set adv-passive-only disable
|
|
set adv-passive-only6 disable
|
|
set auth-mode-l1 password
|
|
set auth-mode-l2 password
|
|
set auth-password-l1 ENC FDbz33zrlEJSvjin7yU1jXLTX/p/kOBqEqpYa/rGz26sMjmKUNy6QZWJsspJ5fOk/G+Z8HDiqDRiCbU67LAFQw0ts4XaH8KRPyijOMUsjlMfFRgAN3L/6Wsob4GmOmGEXW9tTMyPXd8Z/VT3B+aRw0iLZITRLH4GAkKwrLGdWLKVXgLreE7CQq/Yns8JxG9UmZpNYg==
|
|
set auth-password-l2 ENC aUjmXaw7R1zg4lGcHzylTe2p77KURZFtrtJckroxqsYRlbTCzNkyc8ElEQIt33Jvn+GwoLfLqWTcq8L6NqrwK1f+MLxoY6wnvBiLLZ9gBTcw1xihAZFTcZwxbn/352NLY/dQJBMmKYWNk2v4d0nR5I6X7MRb99ZsQz5uWKOnPJMJp7OXhdq0Ql/PDjGXCFHBzE9EHQ==
|
|
set auth-sendonly-l1 disable
|
|
set auth-sendonly-l2 disable
|
|
set ignore-lsp-errors disable
|
|
set lsp-gen-interval-l1 30
|
|
set lsp-gen-interval-l2 30
|
|
set lsp-refresh-interval 900
|
|
set max-lsp-lifetime 1200
|
|
set spf-interval-exp-l1 500 50000
|
|
set spf-interval-exp-l2 500 50000
|
|
set dynamic-hostname disable
|
|
set adjacency-check disable
|
|
set adjacency-check6 disable
|
|
set overload-bit disable
|
|
unset overload-bit-suppress
|
|
set overload-bit-on-startup 0
|
|
set default-originate disable
|
|
set default-originate6 disable
|
|
set metric-style narrow
|
|
set redistribute-l1 disable
|
|
set redistribute-l2 disable
|
|
set redistribute6-l1 disable
|
|
set redistribute6-l2 disable
|
|
config redistribute "connected"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute "rip"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute "ospf"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute "bgp"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute "static"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute6 "connected"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute6 "rip"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute6 "ospf"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute6 "bgp"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
config redistribute6 "static"
|
|
set status disable
|
|
set metric 0
|
|
set metric-type internal
|
|
set level level-2
|
|
set routemap ''
|
|
end
|
|
end
|
|
config router multicast-flow
|
|
end
|
|
config router multicast
|
|
set route-limit 2147483647
|
|
set multicast-routing disable
|
|
config pim-sm-global
|
|
set message-interval 60
|
|
set join-prune-holdtime 210
|
|
set accept-register-list ''
|
|
set accept-source-list ''
|
|
set bsr-candidate disable
|
|
set bsr-allow-quick-refresh disable
|
|
set cisco-register-checksum disable
|
|
set cisco-crp-prefix disable
|
|
set cisco-ignore-rp-set-priority disable
|
|
set register-rp-reachability enable
|
|
set register-source disable
|
|
set register-supression 60
|
|
set null-register-retries 1
|
|
set rp-register-keepalive 185
|
|
set spt-threshold enable
|
|
set ssm disable
|
|
set register-rate-limit 0
|
|
set spt-threshold-group ''
|
|
end
|
|
end
|
|
config router multicast6
|
|
set multicast-routing disable
|
|
config pim-sm-global
|
|
end
|
|
end
|
|
config router auth-path
|
|
end
|
|
config router setting
|
|
set show-filter ''
|
|
set hostname ''
|
|
end
|
|
config router bfd
|
|
end
|
|
config router bfd6
|
|
end
|
|
config system proxy-arp
|
|
end
|
|
config system link-monitor
|
|
end
|
|
config system wccp
|
|
end
|
|
config system dns64
|
|
set status disable
|
|
set dns64-prefix 64:ff9b::/96
|
|
set always-synthesize-aaaa-record enable
|
|
end
|
|
config system nd-proxy
|
|
set status disable
|
|
end
|
|
config system vne-tunnel
|
|
set status disable
|
|
end
|
|
end
|
|
|
|
InterCloud-FWaaS # |