#config-version=FGT30E-6.2.11-FW-build1303-220621:opmode=0:vdom=0:user=B10013
#conf_file_ver=1662276897990606
#buildno=1303
#global_vdom=1
config system global
    set admin-server-cert "wildcard.tahoho.com.tw"
    set admin-sport 8443
    set alias "FortiGate-30E"
    set gui-certificates enable
    set hostname "HBB-JiaYi-Firewall-E2C-IT"
    set language trach
    set switch-controller enable
    set timezone 59
    set wifi-ca-certificate "USERTrust_RSA_Certification_Authority"
    set wifi-certificate "wildcard.tahoho.com.tw"
end
config system accprofile
    edit "prof_admin"
        set secfabgrp read-write
        set ftviewgrp read-write
        set authgrp read-write
        set sysgrp read-write
        set netgrp read-write
        set loggrp read-write
        set fwgrp read-write
        set vpngrp read-write
        set utmgrp read-write
        set wifi read-write
    next
end
config system interface
    edit "wan"
        set vdom "root"
        set ip 61.216.60.230 255.255.255.0
        set allowaccess ping https http
        set type physical
        set role wan
        set snmp-index 1
    next
    edit "modem"
        set vdom "root"
        set mode pppoe
        set type physical
        set snmp-index 2
    next
    edit "ssl.root"
        set vdom "root"
        set type tunnel
        set alias "SSL VPN interface"
        set snmp-index 3
    next
    edit "lan"
        set vdom "root"
        set ip 192.167.3.99 255.255.255.0
        set allowaccess ping https ssh http fgfm fabric
        set type hard-switch
        set stp enable
        set device-identification enable
        set role lan
        set snmp-index 4
        set secondary-IP enable
    next
    edit "fortilink"
        set vdom "root"
        set fortilink enable
        set ip 169.254.1.1 255.255.255.0
        set allowaccess ping fabric
        set type hard-switch
        set lldp-reception enable
        set lldp-transmission enable
        set snmp-index 5
    next
end
config system physical-switch
    edit "sw0"
        set age-val 0
    next
end
config system virtual-switch
    edit "lan"
        set physical-switch "sw0"
        config port
            edit "lan1"
                set speed 1000full
            next
            edit "lan2"
                set speed 1000full
            next
            edit "lan3"
                set speed 1000full
            next
            edit "lan4"
                set speed 1000full
            next
        end
    next
    edit "fortilink"
        set physical-switch "sw0"
    next
end
config system custom-language
    edit "en"
        set filename "en"
    next
    edit "fr"
        set filename "fr"
    next
    edit "sp"
        set filename "sp"
    next
    edit "pg"
        set filename "pg"
    next
    edit "x-sjis"
        set filename "x-sjis"
    next
    edit "big5"
        set filename "big5"
    next
    edit "GB2312"
        set filename "GB2312"
    next
    edit "euc-kr"
        set filename "euc-kr"
    next
end
config system admin
    edit "admin"
        set accprofile "super_admin"
        set vdom "root"
        config gui-dashboard
            edit 1
                set name "Status"
                set vdom "root"
                set permanent enable
                config widget
                    edit 1
                        set width 1
                        set height 1
                    next
                    edit 2
                        set type licinfo
                        set x-pos 1
                        set width 1
                        set height 1
                    next
                    edit 3
                        set type forticloud
                        set x-pos 2
                        set width 1
                        set height 1
                    next
                    edit 4
                        set type security-fabric
                        set x-pos 3
                        set width 1
                        set height 1
                    next
                    edit 5
                        set type admins
                        set x-pos 4
                        set width 1
                        set height 1
                    next
                    edit 6
                        set type cpu-usage
                        set x-pos 5
                        set width 2
                        set height 1
                    next
                    edit 7
                        set type memory-usage
                        set x-pos 6
                        set width 2
                        set height 1
                    next
                    edit 8
                        set type sessions
                        set x-pos 7
                        set width 2
                        set height 1
                    next
                end
            next
            edit 3
                set name "Security"
                set vdom "root"
                set layout-type fixed
                set columns 12
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "compromisedHosts"
                        set fortiview-sort-by "verdict"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 2
                        set type fortiview
                        set x-pos 6
                        set width 6
                        set height 3
                        set fortiview-type "threats"
                        set fortiview-sort-by "threatLevel"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 3
                        set type vulnerability-summary
                        set y-pos 3
                        set width 3
                        set height 3
                    next
                    edit 4
                        set type host-scan-summary
                        set x-pos 3
                        set y-pos 3
                        set width 3
                        set height 3
                    next
                    edit 5
                        set type fortiview
                        set x-pos 6
                        set y-pos 3
                        set width 6
                        set height 3
                        set fortiview-type "endpointDevices"
                        set fortiview-sort-by "vulnerabilities"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 2
                set name "Top Usage LAN/DMZ"
                set vdom "root"
                set layout-type fixed
                set columns 12
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "source"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 2
                        set type fortiview
                        set x-pos 6
                        set width 6
                        set height 3
                        set fortiview-type "destination"
                        set fortiview-sort-by "sessions"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 3
                        set type fortiview
                        set y-pos 3
                        set width 6
                        set height 3
                        set fortiview-type "application"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 4
                        set type fortiview
                        set x-pos 6
                        set y-pos 3
                        set width 6
                        set height 3
                        set fortiview-type "website"
                        set fortiview-sort-by "sessions"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 4
                set name "System Events"
                set vdom "root"
                set layout-type fixed
                set columns 12
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "systemEvents"
                        set fortiview-sort-by "count"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 2
                        set type fortiview
                        set x-pos 6
                        set width 6
                        set height 3
                        set fortiview-type "systemEvents"
                        set fortiview-sort-by "eventLevel"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
        end
        set gui-vdom-menu-favorites "device_definition"
        set password ENC SH2X+yMzAd4Jwir1oxEYdVCx7R+NcZL23k4HAlT3pKKtuIGy8VW48QGt74aDKo=
    next
    edit "coleman"
        set remote-auth enable
        set accprofile "super_admin"
        set vdom "root"
        set remote-group "RemoteUserGroup"
        set password ENC SH2TUlsuXAvxmUlyZzHXobkvfDl3TtLpkihApjWEHpZQiI7rHiygtw/fXfkoak=
    next
    edit "renhua.gu"
        set remote-auth enable
        set accprofile "super_admin"
        set vdom "root"
        config gui-dashboard
            edit 1
                set name "Status"
                set vdom "root"
                set permanent enable
                config widget
                    edit 1
                        set width 1
                        set height 1
                    next
                    edit 2
                        set type licinfo
                        set x-pos 1
                        set width 1
                        set height 1
                    next
                    edit 3
                        set type forticloud
                        set x-pos 2
                        set width 1
                        set height 1
                    next
                    edit 4
                        set type security-fabric
                        set x-pos 3
                        set width 1
                        set height 1
                    next
                    edit 5
                        set type admins
                        set x-pos 4
                        set width 1
                        set height 1
                    next
                    edit 6
                        set type cpu-usage
                        set x-pos 5
                        set width 2
                        set height 1
                    next
                    edit 7
                        set type memory-usage
                        set x-pos 6
                        set width 2
                        set height 1
                    next
                    edit 8
                        set type sessions
                        set x-pos 7
                        set width 2
                        set height 1
                    next
                end
            next
            edit 2
                set name "Top Usage LAN/DMZ"
                set vdom "root"
                set layout-type fixed
                set columns 12
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "source"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 2
                        set type fortiview
                        set x-pos 1
                        set width 6
                        set height 3
                        set fortiview-type "destination"
                        set fortiview-sort-by "sessions"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 3
                        set type fortiview
                        set x-pos 2
                        set width 6
                        set height 3
                        set fortiview-type "application"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 4
                        set type fortiview
                        set x-pos 3
                        set width 6
                        set height 3
                        set fortiview-type "website"
                        set fortiview-sort-by "sessions"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 3
                set name "Security"
                set vdom "root"
                set layout-type fixed
                set columns 12
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "compromisedHosts"
                        set fortiview-sort-by "verdict"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 2
                        set type fortiview
                        set x-pos 1
                        set width 6
                        set height 3
                        set fortiview-type "threats"
                        set fortiview-sort-by "threatLevel"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 3
                        set type vulnerability-summary
                        set x-pos 2
                        set width 3
                        set height 3
                    next
                    edit 4
                        set type host-scan-summary
                        set x-pos 3
                        set width 3
                        set height 3
                    next
                    edit 5
                        set type fortiview
                        set x-pos 4
                        set width 6
                        set height 3
                        set fortiview-type "endpointDevices"
                        set fortiview-sort-by "vulnerabilities"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 4
                set name "System Events"
                set vdom "root"
                set layout-type fixed
                set columns 12
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "systemEvents"
                        set fortiview-sort-by "count"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 2
                        set type fortiview
                        set x-pos 1
                        set width 6
                        set height 3
                        set fortiview-type "systemEvents"
                        set fortiview-sort-by "eventLevel"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
        end
        set remote-group "RemoteUserGroup"
        set password ENC SH2eywD/vg4n4UnQAC8m1c6L7DhVDrFAU0Yg5Ioq2HLSbIHC2+VX4lUFwTHlUI=
    next
    edit "B10013"
        set remote-auth enable
        set accprofile "super_admin"
        set vdom "root"
        config gui-dashboard
            edit 1
                set name "Status"
                set vdom "root"
                set permanent enable
                config widget
                    edit 1
                        set width 1
                        set height 1
                    next
                    edit 2
                        set type licinfo
                        set x-pos 1
                        set width 1
                        set height 1
                    next
                    edit 3
                        set type forticloud
                        set x-pos 2
                        set width 1
                        set height 1
                    next
                    edit 4
                        set type security-fabric
                        set x-pos 3
                        set width 1
                        set height 1
                    next
                    edit 5
                        set type admins
                        set x-pos 4
                        set width 1
                        set height 1
                    next
                    edit 6
                        set type cpu-usage
                        set x-pos 5
                        set width 2
                        set height 1
                    next
                    edit 7
                        set type memory-usage
                        set x-pos 6
                        set width 2
                        set height 1
                    next
                    edit 8
                        set type sessions
                        set x-pos 7
                        set width 2
                        set height 1
                    next
                end
            next
            edit 2
                set name "Top Usage LAN/DMZ"
                set vdom "root"
                set layout-type fixed
                set columns 12
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "source"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 2
                        set type fortiview
                        set x-pos 1
                        set width 6
                        set height 3
                        set fortiview-type "destination"
                        set fortiview-sort-by "sessions"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 3
                        set type fortiview
                        set x-pos 2
                        set width 6
                        set height 3
                        set fortiview-type "application"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 4
                        set type fortiview
                        set x-pos 3
                        set width 6
                        set height 3
                        set fortiview-type "website"
                        set fortiview-sort-by "sessions"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 3
                set name "Security"
                set vdom "root"
                set layout-type fixed
                set columns 12
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "compromisedHosts"
                        set fortiview-sort-by "verdict"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 2
                        set type fortiview
                        set x-pos 1
                        set width 6
                        set height 3
                        set fortiview-type "threats"
                        set fortiview-sort-by "threatLevel"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 3
                        set type vulnerability-summary
                        set x-pos 2
                        set width 3
                        set height 3
                    next
                    edit 4
                        set type host-scan-summary
                        set x-pos 3
                        set width 3
                        set height 3
                    next
                    edit 5
                        set type fortiview
                        set x-pos 4
                        set width 6
                        set height 3
                        set fortiview-type "endpointDevices"
                        set fortiview-sort-by "vulnerabilities"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 4
                set name "System Events"
                set vdom "root"
                set layout-type fixed
                set columns 12
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "systemEvents"
                        set fortiview-sort-by "count"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 2
                        set type fortiview
                        set x-pos 1
                        set width 6
                        set height 3
                        set fortiview-type "systemEvents"
                        set fortiview-sort-by "eventLevel"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
        end
        set remote-group "RemoteUserGroup"
        set password ENC SH2mNJtHFr7er0GoXG0bKqyP2VtItdZ6Nz+Z2DkH5N0gy9JVYbX6sr+rPEC8VA=
    next
    edit "joy.va"
        set accprofile "super_admin"
        set vdom "root"
        set password ENC SH2Y91ScbcctsfTcM273jp8XLvp9zPkrLEqNen7Fv7f98y598vr33dZFbV+GP0=
    next
    edit "itservice"
        set accprofile "super_admin"
        set vdom "root"
        config gui-dashboard
            edit 1
                set name "狀態"
                set vdom "root"
                set permanent enable
                config widget
                    edit 1
                        set width 1
                        set height 1
                    next
                    edit 2
                        set type licinfo
                        set x-pos 1
                        set width 1
                        set height 1
                    next
                    edit 3
                        set type forticloud
                        set x-pos 2
                        set width 1
                        set height 1
                    next
                    edit 4
                        set type security-fabric
                        set x-pos 3
                        set width 1
                        set height 1
                    next
                    edit 5
                        set type admins
                        set x-pos 4
                        set width 1
                        set height 1
                    next
                    edit 6
                        set type cpu-usage
                        set x-pos 5
                        set width 2
                        set height 1
                    next
                    edit 7
                        set type memory-usage
                        set x-pos 6
                        set width 2
                        set height 1
                    next
                    edit 8
                        set type sessions
                        set x-pos 7
                        set width 2
                        set height 1
                    next
                end
            next
            edit 2
                set name "最高用量排行 LAN/DMZ"
                set vdom "root"
                set layout-type fixed
                set columns 12
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "source"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 2
                        set type fortiview
                        set x-pos 1
                        set width 6
                        set height 3
                        set fortiview-type "destination"
                        set fortiview-sort-by "sessions"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 3
                        set type fortiview
                        set x-pos 2
                        set width 6
                        set height 3
                        set fortiview-type "application"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 4
                        set type fortiview
                        set x-pos 3
                        set width 6
                        set height 3
                        set fortiview-type "website"
                        set fortiview-sort-by "sessions"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 3
                set name "安全"
                set vdom "root"
                set layout-type fixed
                set columns 12
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "compromisedHosts"
                        set fortiview-sort-by "verdict"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 2
                        set type fortiview
                        set x-pos 1
                        set width 6
                        set height 3
                        set fortiview-type "threats"
                        set fortiview-sort-by "threatLevel"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 3
                        set type vulnerability-summary
                        set x-pos 2
                        set width 3
                        set height 3
                    next
                    edit 4
                        set type host-scan-summary
                        set x-pos 3
                        set width 3
                        set height 3
                    next
                    edit 5
                        set type fortiview
                        set x-pos 4
                        set width 6
                        set height 3
                        set fortiview-type "endpointDevices"
                        set fortiview-sort-by "vulnerabilities"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 4
                set name "系統相關事件"
                set vdom "root"
                set layout-type fixed
                set columns 12
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "systemEvents"
                        set fortiview-sort-by "count"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 2
                        set type fortiview
                        set x-pos 1
                        set width 6
                        set height 3
                        set fortiview-type "systemEvents"
                        set fortiview-sort-by "eventLevel"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
        end
        set password ENC SH2/63HQ23RJ42QiHJqIP/2jqvvtd0c9zDPZ5Tw/3Qji54X8jeNEOIVDmZ1c9k=
    next
end
config system sso-admin
end
config system ha
    set override disable
end
config system dns
    set primary 168.95.1.1
    set secondary 8.8.8.8
end
config system replacemsg-image
    edit "logo_fnet"
        set image-type gif
    next
    edit "logo_fguard_wf"
        set image-type gif
    next
    edit "logo_fw_auth"
    next
    edit "logo_v2_fnet"
    next
    edit "logo_v2_fguard_wf"
    next
    edit "logo_v2_fguard_app"
    next
end
config system replacemsg mail "email-av-fail"
end
config system replacemsg mail "email-block"
end
config system replacemsg mail "email-dlp-subject"
end
config system replacemsg mail "email-dlp-ban"
end
config system replacemsg mail "email-filesize"
end
config system replacemsg mail "email-file-filter"
end
config system replacemsg mail "partial"
end
config system replacemsg mail "smtp-block"
end
config system replacemsg mail "smtp-filesize"
end
config system replacemsg mail "email-decompress-limit"
end
config system replacemsg mail "smtp-decompress-limit"
end
config system replacemsg http "bannedword"
end
config system replacemsg http "url-block"
end
config system replacemsg http "urlfilter-err"
end
config system replacemsg http "infcache-block"
end
config system replacemsg http "http-block"
end
config system replacemsg http "http-filesize"
end
config system replacemsg http "http-dlp-ban"
end
config system replacemsg http "http-archive-block"
end
config system replacemsg http "http-contenttypeblock"
end
config system replacemsg http "https-invalid-cert-block"
end
config system replacemsg http "https-untrusted-cert-block"
end
config system replacemsg http "https-blacklisted-cert-block"
end
config system replacemsg http "http-client-block"
end
config system replacemsg http "http-client-filesize"
end
config system replacemsg http "http-client-bannedword"
end
config system replacemsg http "http-post-block"
end
config system replacemsg http "http-client-archive-block"
end
config system replacemsg http "switching-protocols-block"
end
config system replacemsg webproxy "deny"
end
config system replacemsg webproxy "user-limit"
end
config system replacemsg webproxy "auth-challenge"
end
config system replacemsg webproxy "auth-login-fail"
end
config system replacemsg webproxy "auth-group-info-fail"
end
config system replacemsg webproxy "http-err"
end
config system replacemsg webproxy "auth-ip-blackout"
end
config system replacemsg ftp "ftp-av-fail"
end
config system replacemsg ftp "ftp-dl-blocked"
end
config system replacemsg ftp "ftp-dl-filesize"
end
config system replacemsg ftp "ftp-dl-dlp-ban"
end
config system replacemsg ftp "ftp-explicit-banner"
end
config system replacemsg ftp "ftp-dl-archive-block"
end
config system replacemsg ftp "ftp-file-filter-block"
end
config system replacemsg nntp "nntp-av-fail"
end
config system replacemsg nntp "nntp-dl-blocked"
end
config system replacemsg nntp "nntp-dl-filesize"
end
config system replacemsg nntp "nntp-dlp-subject"
end
config system replacemsg nntp "nntp-dlp-ban"
end
config system replacemsg nntp "email-decompress-limit"
end
config system replacemsg fortiguard-wf "ftgd-block"
end
config system replacemsg fortiguard-wf "http-err"
end
config system replacemsg fortiguard-wf "ftgd-ovrd"
end
config system replacemsg fortiguard-wf "ftgd-quota"
end
config system replacemsg fortiguard-wf "ftgd-warning"
end
config system replacemsg spam "ipblocklist"
end
config system replacemsg spam "smtp-spam-dnsbl"
end
config system replacemsg spam "smtp-spam-feip"
end
config system replacemsg spam "smtp-spam-helo"
end
config system replacemsg spam "smtp-spam-emailblack"
end
config system replacemsg spam "smtp-spam-mimeheader"
end
config system replacemsg spam "reversedns"
end
config system replacemsg spam "smtp-spam-bannedword"
end
config system replacemsg spam "smtp-spam-ase"
end
config system replacemsg spam "submit"
end
config system replacemsg alertmail "alertmail-virus"
end
config system replacemsg alertmail "alertmail-block"
end
config system replacemsg alertmail "alertmail-nids-event"
end
config system replacemsg alertmail "alertmail-crit-event"
end
config system replacemsg alertmail "alertmail-disk-full"
end
config system replacemsg admin "pre_admin-disclaimer-text"
end
config system replacemsg admin "post_admin-disclaimer-text"
end
config system replacemsg auth "auth-disclaimer-page-1"
end
config system replacemsg auth "auth-disclaimer-page-2"
end
config system replacemsg auth "auth-disclaimer-page-3"
end
config system replacemsg auth "auth-reject-page"
end
config system replacemsg auth "auth-login-page"
end
config system replacemsg auth "auth-login-failed-page"
end
config system replacemsg auth "auth-token-login-page"
end
config system replacemsg auth "auth-token-login-failed-page"
end
config system replacemsg auth "auth-success-msg"
end
config system replacemsg auth "auth-challenge-page"
end
config system replacemsg auth "auth-keepalive-page"
end
config system replacemsg auth "auth-portal-page"
end
config system replacemsg auth "auth-password-page"
end
config system replacemsg auth "auth-fortitoken-page"
end
config system replacemsg auth "auth-next-fortitoken-page"
end
config system replacemsg auth "auth-email-token-page"
end
config system replacemsg auth "auth-sms-token-page"
end
config system replacemsg auth "auth-email-harvesting-page"
end
config system replacemsg auth "auth-email-failed-page"
end
config system replacemsg auth "auth-cert-passwd-page"
end
config system replacemsg auth "auth-guest-print-page"
end
config system replacemsg auth "auth-guest-email-page"
end
config system replacemsg auth "auth-success-page"
end
config system replacemsg auth "auth-block-notification-page"
end
config system replacemsg auth "auth-quarantine-page"
end
config system replacemsg auth "auth-qtn-reject-page"
end
config system replacemsg auth "auth-saml-page"
end
config system replacemsg sslvpn "sslvpn-login"
end
config system replacemsg sslvpn "sslvpn-header"
end
config system replacemsg sslvpn "sslvpn-limit"
end
config system replacemsg sslvpn "hostcheck-error"
end
config system replacemsg device-detection-portal "device-detection-failure"
end
config system replacemsg nac-quar "nac-quar-virus"
end
config system replacemsg nac-quar "nac-quar-dos"
end
config system replacemsg nac-quar "nac-quar-ips"
end
config system replacemsg nac-quar "nac-quar-dlp"
end
config system replacemsg nac-quar "nac-quar-admin"
end
config system replacemsg nac-quar "nac-quar-app"
end
config system replacemsg traffic-quota "per-ip-shaper-block"
end
config system replacemsg utm "virus-html"
end
config system replacemsg utm "client-virus-html"
end
config system replacemsg utm "virus-text"
end
config system replacemsg utm "dlp-html"
end
config system replacemsg utm "dlp-text"
end
config system replacemsg utm "appblk-html"
end
config system replacemsg utm "ipsblk-html"
end
config system replacemsg utm "ipsfail-html"
end
config system replacemsg utm "exe-text"
end
config system replacemsg utm "waf-html"
end
config system replacemsg utm "outbreak-prevention-html"
end
config system replacemsg utm "outbreak-prevention-text"
end
config system replacemsg utm "file-filter-text"
end
config system replacemsg utm "file-size-text"
end
config system replacemsg utm "internal-error-text"
end
config system replacemsg icap "icap-req-resp"
end
config system snmp sysinfo
end
config system central-management
    set type fortiguard
end
config firewall internet-service-definition
end
config system cluster-sync
end
config system fortiguard
    set service-account-id "godelchen@tahoho.com.tw"
    set sdns-server-ip "208.91.112.220" 
end
config ips global
end
config log syslogd setting
    set status enable
    set server "hb.tahoho.com.tw"
end
config log fortiguard setting
    set status enable
    set upload-option 1-minute
end
config system email-server
    set server "notification.fortinet.net"
    set port 465
    set security smtps
end
config system session-helper
    edit 1
        set name pptp
        set protocol 6
        set port 1723
    next
    edit 2
        set name h323
        set protocol 6
        set port 1720
    next
    edit 3
        set name ras
        set protocol 17
        set port 1719
    next
    edit 4
        set name tns
        set protocol 6
        set port 1521
    next
    edit 5
        set name tftp
        set protocol 17
        set port 69
    next
    edit 6
        set name rtsp
        set protocol 6
        set port 554
    next
    edit 7
        set name rtsp
        set protocol 6
        set port 7070
    next
    edit 8
        set name rtsp
        set protocol 6
        set port 8554
    next
    edit 9
        set name ftp
        set protocol 6
        set port 21
    next
    edit 10
        set name mms
        set protocol 6
        set port 1863
    next
    edit 11
        set name pmap
        set protocol 6
        set port 111
    next
    edit 12
        set name pmap
        set protocol 17
        set port 111
    next
    edit 13
        set name sip
        set protocol 17
        set port 5060
    next
    edit 14
        set name dns-udp
        set protocol 17
        set port 53
    next
    edit 15
        set name rsh
        set protocol 6
        set port 514
    next
    edit 16
        set name rsh
        set protocol 6
        set port 512
    next
    edit 17
        set name dcerpc
        set protocol 6
        set port 135
    next
    edit 18
        set name dcerpc
        set protocol 17
        set port 135
    next
    edit 19
        set name mgcp
        set protocol 17
        set port 2427
    next
    edit 20
        set name mgcp
        set protocol 17
        set port 2727
    next
end
config system auto-install
    set auto-install-config enable
    set auto-install-image enable
end
config system ntp
    set ntpsync enable
    set server-mode enable
    set interface "fortilink"
end
config system object-tagging
    edit "default"
    next
end
config switch-controller traffic-policy
    edit "quarantine"
        set description "Rate control for quarantined traffic"
        set guaranteed-bandwidth 163840
        set guaranteed-burst 8192
        set maximum-burst 163840
        set cos-queue 0
        set id 1
    next
    edit "sniffer"
        set description "Rate control for sniffer mirrored traffic"
        set guaranteed-bandwidth 50000
        set guaranteed-burst 8192
        set maximum-burst 163840
        set cos-queue 0
        set id 2
    next
end
config system settings
end
config system dhcp server
    edit 2
        set ntp-service local
        set default-gateway 169.254.1.1
        set netmask 255.255.255.0
        set interface "fortilink"
        config ip-range
            edit 1
                set start-ip 169.254.1.2
                set end-ip 169.254.1.254
            next
        end
        set vci-match enable
        set vci-string "FortiSwitch" "FortiExtender"
    next
    edit 3
        set lease-time 300
        set dns-service default
        set default-gateway 192.167.3.99
        set netmask 255.255.255.0
        set interface "lan"
        config ip-range
            edit 1
                set start-ip 192.167.3.109
                set end-ip 192.167.3.149
            next
        end
    next
end
config firewall address
    edit "none"
        set uuid 9d07a54a-abf9-51ec-caad-f75e7de4b639
        set subnet 0.0.0.0 255.255.255.255
    next
    edit "login.microsoftonline.com"
        set uuid 9d07c50c-abf9-51ec-8dd8-df792cd4cfe9
        set type fqdn
        set fqdn "login.microsoftonline.com"
    next
    edit "login.microsoft.com"
        set uuid 9d07e3f2-abf9-51ec-a291-fd7f28ec5c36
        set type fqdn
        set fqdn "login.microsoft.com"
    next
    edit "login.windows.net"
        set uuid 9d07fdc4-abf9-51ec-9153-4663f5a6de18
        set type fqdn
        set fqdn "login.windows.net"
    next
    edit "gmail smtp"
        set uuid 9d0816d8-abf9-51ec-0694-7380a35b0a1b
        set type fqdn
        set fqdn "smtp.gmail.com"
    next
    edit "wildcard.google.com"
        set uuid 9d082f88-abf9-51ec-bd5c-ca362b006acc
        set type fqdn
        set fqdn "*.google.com"
    next
    edit "wildcard.dropbox.com"
        set uuid 9d08623c-abf9-51ec-d940-6ac3ce6eb434
        set type fqdn
        set fqdn "*.dropbox.com"
    next
    edit "all"
        set uuid 9d48383a-abf9-51ec-f02e-eadb8b852ac0
    next
    edit "FIREWALL_AUTH_PORTAL_ADDRESS"
        set uuid 9d484366-abf9-51ec-1031-8de750ffbade
        set visibility disable
    next
    edit "FABRIC_DEVICE"
        set uuid 9d484d52-abf9-51ec-b974-8800bf577db6
        set comment "IPv4 addresses of Fabric Devices."
    next
    edit "SSLVPN_TUNNEL_ADDR1"
        set uuid 9d4a7d5c-abf9-51ec-ad03-977671f54698
        set type iprange
        set associated-interface "ssl.root"
        set start-ip 192.167.3.200
        set end-ip 192.167.3.250
    next
    edit "lan"
        set uuid a57f0470-abf9-51ec-8a90-d85223852221
        set type interface-subnet
        set subnet 192.167.3.99 255.255.255.0
        set interface "lan"
    next
    edit "AzureS2SVPN_local_subnet"
        set uuid ee291f2a-b0aa-51ec-a30d-2b8339849a8b
        set subnet 192.168.1.0 255.255.255.0
    next
    edit "AzureS2SVPN_remote_subnet"
        set uuid 0514790a-b0ab-51ec-ad39-24094eb53d85
        set subnet 10.100.0.0 255.255.0.0
    next
    edit "LocalNetwork_192.168.1.0"
        set uuid 373e3036-b11b-51ec-1ec9-cd1b8be323c7
        set associated-interface "lan"
        set subnet 192.168.1.0 255.255.255.0
    next
    edit "advantech-machine"
        set uuid e5f3803c-b15b-51ec-d55d-b2eae187f4ee
        set type mac
        set start-mac c4:00:ad:8b:60:3a
        set end-mac c4:00:ad:8b:60:3a
        set comment "Created for DHCP Reservation"
        set associated-interface "lan"
    next
    edit "Anydesk"
        set uuid 67eb1f40-1d2d-51ed-adb6-296da629d022
        set type fqdn
        set fqdn "*.net.anydesk.com"
    next
    edit "GCP"
        set uuid 7f8e2dcc-1d2d-51ed-8e31-56c320c6f3ee
        set type fqdn
        set fqdn "*.googleapis.com"
    next
    edit "AWS"
        set uuid 8a743b96-1d2d-51ed-91a5-f7862fa13ae1
        set type fqdn
        set fqdn "aws.amazon.com"
    next
    edit "IT component"
        set uuid ccfdf286-1d2d-51ed-9657-a8d63ee8c4bf
        set subnet 192.167.3.110 255.255.255.255
    next
    edit "Git"
        set uuid 821e6ed4-245e-51ed-36cf-7b025f1ba89d
        set type fqdn
        set fqdn "raw.githubusercontent.com"
    next
    edit "AWS1"
        set uuid ca73b252-245e-51ed-4ab9-0786e46af67f
        set type fqdn
        set fqdn "amazon.com"
    next
    edit "AWS2"
        set uuid 81ce14fc-2869-51ed-2aa1-8e4befe91aff
        set type fqdn
        set fqdn "*.amazonaws.com"
    next
    edit "GLPI-Server"
        set uuid cce3026e-6c60-51ed-681a-97eb11321407
        set type fqdn
        set associated-interface "wan"
        set fqdn "glpi.tahoho.com.tw"
    next
    edit "Advantech-MQTT-Broker"
        set uuid d4b73d0e-8b12-51ed-24c2-6e8c30515320
        set subnet 20.187.120.82 255.255.255.255
    next
    edit "Advantech_MQTT Broker_DCCS Server"
        set uuid e7f905fa-8b12-51ed-fd6a-d7eacc9bc20b
        set subnet 20.205.0.212 255.255.255.255
    next
    edit "time.google.com"
        set uuid e9a21dac-3b10-51ee-1395-981db1177a2d
        set type fqdn
        set fqdn "time.google.com"
    next
    edit "time.windows.com"
        set uuid f64b817e-3b10-51ee-0bd2-5ad16352ba54
        set type fqdn
        set fqdn "time.windows.com"
    next
    edit "tw.ntp.org.cn"
        set uuid 013dd942-3b11-51ee-cb57-e3a24af234b5
        set type fqdn
        set fqdn "tw.ntp.org.cn"
    next
    edit "Cloud Scada"
        set uuid c13f83c0-b0fb-51ee-f216-2e3323a1b254
        set type fqdn
        set fqdn "scadabroker.myvecid.net"
    next
    edit "Cloud Scada2"
        set uuid d306de6e-b0fb-51ee-b3ee-5405d656abde
        set type fqdn
        set fqdn "cloudscada.myvecid.net"
    next
end
config firewall multicast-address
    edit "all"
        set start-ip 224.0.0.0
        set end-ip 239.255.255.255
    next
    edit "all_hosts"
        set start-ip 224.0.0.1
        set end-ip 224.0.0.1
    next
    edit "all_routers"
        set start-ip 224.0.0.2
        set end-ip 224.0.0.2
    next
    edit "Bonjour"
        set start-ip 224.0.0.251
        set end-ip 224.0.0.251
    next
    edit "EIGRP"
        set start-ip 224.0.0.10
        set end-ip 224.0.0.10
    next
    edit "OSPF"
        set start-ip 224.0.0.5
        set end-ip 224.0.0.6
    next
end
config firewall address6
    edit "SSLVPN_TUNNEL_IPv6_ADDR1"
        set uuid 9d4a8ffe-abf9-51ec-5bfb-9c6fb1cb2dca
        set ip6 fdff:ffff::/120
    next
    edit "all"
        set uuid 9d08da6e-abf9-51ec-6f76-196ec7635adf
    next
    edit "none"
        set uuid 9d08f1ca-abf9-51ec-e0ea-b27bb0863c37
        set ip6 ::/128
    next
end
config firewall multicast-address6
    edit "all"
        set ip6 ff00::/8
    next
end
config firewall addrgrp
    edit "G Suite"
        set uuid 9d088780-abf9-51ec-34a0-df6362185fae
        set member "gmail smtp" "wildcard.google.com"
    next
    edit "Microsoft Office 365"
        set uuid 9d08abde-abf9-51ec-f0a2-bb74e5f7edfc
        set member "login.microsoftonline.com" "login.microsoft.com" "login.windows.net"
    next
end
config firewall wildcard-fqdn custom
    edit "adobe"
        set uuid 9e4ff470-abf9-51ec-ea83-bda0c8f44e57
        set wildcard-fqdn "*.adobe.com"
    next
    edit "Adobe Login"
        set uuid 9e4ffc36-abf9-51ec-154a-115667d74de0
        set wildcard-fqdn "*.adobelogin.com"
    next
    edit "android"
        set uuid 9e500348-abf9-51ec-25c3-651446a4e92e
        set wildcard-fqdn "*.android.com"
    next
    edit "apple"
        set uuid 9e500a50-abf9-51ec-ba40-79995f217bef
        set wildcard-fqdn "*.apple.com"
    next
    edit "appstore"
        set uuid 9e501144-abf9-51ec-c872-d48566f2ad9b
        set wildcard-fqdn "*.appstore.com"
    next
    edit "auth.gfx.ms"
        set uuid 9e501856-abf9-51ec-4fe8-a1cb67a10ecb
        set wildcard-fqdn "*.auth.gfx.ms"
    next
    edit "citrix"
        set uuid 9e501f5e-abf9-51ec-7737-9dd8334679e6
        set wildcard-fqdn "*.citrixonline.com"
    next
    edit "dropbox.com"
        set uuid 9e502666-abf9-51ec-0f50-3c197d0d40b3
        set wildcard-fqdn "*.dropbox.com"
    next
    edit "eease"
        set uuid 9e502d6e-abf9-51ec-959d-4b4ef9ddc1a1
        set wildcard-fqdn "*.eease.com"
    next
    edit "firefox update server"
        set uuid 9e503476-abf9-51ec-430b-e773c93ad13b
        set wildcard-fqdn "aus*.mozilla.org"
    next
    edit "fortinet"
        set uuid 9e503b7e-abf9-51ec-92aa-a27340cfd046
        set wildcard-fqdn "*.fortinet.com"
    next
    edit "googleapis.com"
        set uuid 9e504290-abf9-51ec-4a61-55953f92b251
        set wildcard-fqdn "*.googleapis.com"
    next
    edit "google-drive"
        set uuid 9e504998-abf9-51ec-519f-2cb48caed35f
        set wildcard-fqdn "*drive.google.com"
    next
    edit "google-play2"
        set uuid 9e5050b4-abf9-51ec-c0c8-c28fba433b09
        set wildcard-fqdn "*.ggpht.com"
    next
    edit "google-play3"
        set uuid 9e5057d0-abf9-51ec-6b83-423ab85f08ba
        set wildcard-fqdn "*.books.google.com"
    next
    edit "Gotomeeting"
        set uuid 9e505ef6-abf9-51ec-7862-75778c818507
        set wildcard-fqdn "*.gotomeeting.com"
    next
    edit "icloud"
        set uuid 9e506b3a-abf9-51ec-d88f-74ab5e4c8a71
        set wildcard-fqdn "*.icloud.com"
    next
    edit "itunes"
        set uuid 9e5073dc-abf9-51ec-72a8-dbac61b7c2b0
        set wildcard-fqdn "*itunes.apple.com"
    next
    edit "microsoft"
        set uuid 9e507b2a-abf9-51ec-999b-42fa39e5e3bc
        set wildcard-fqdn "*.microsoft.com"
    next
    edit "skype"
        set uuid 9e50825a-abf9-51ec-0d6f-f25ecfc95d12
        set wildcard-fqdn "*.messenger.live.com"
    next
    edit "softwareupdate.vmware.com"
        set uuid 9e508980-abf9-51ec-a0b3-01ce49a1f30f
        set wildcard-fqdn "*.softwareupdate.vmware.com"
    next
    edit "verisign"
        set uuid 9e5090b0-abf9-51ec-065b-ba2a07341365
        set wildcard-fqdn "*.verisign.com"
    next
    edit "Windows update 2"
        set uuid 9e5097cc-abf9-51ec-036c-bafa6e6ffade
        set wildcard-fqdn "*.windowsupdate.com"
    next
    edit "live.com"
        set uuid 9e509efc-abf9-51ec-7d0b-c03c1915faa8
        set wildcard-fqdn "*.live.com"
    next
    edit "google-play"
        set uuid 9e50a780-abf9-51ec-f527-29b2a676e712
        set wildcard-fqdn "*play.google.com"
    next
    edit "update.microsoft.com"
        set uuid 9e50aee2-abf9-51ec-f336-c71675a5db25
        set wildcard-fqdn "*update.microsoft.com"
    next
    edit "swscan.apple.com"
        set uuid 9e50b626-abf9-51ec-d0e5-29ba1f82198f
        set wildcard-fqdn "*swscan.apple.com"
    next
    edit "autoupdate.opera.com"
        set uuid 9e50bd60-abf9-51ec-a821-45ed06030221
        set wildcard-fqdn "*autoupdate.opera.com"
    next
end
config firewall service category
    edit "General"
        set comment "General services."
    next
    edit "Web Access"
        set comment "Web access."
    next
    edit "File Access"
        set comment "File access."
    next
    edit "Email"
        set comment "Email services."
    next
    edit "Network Services"
        set comment "Network services."
    next
    edit "Authentication"
        set comment "Authentication service."
    next
    edit "Remote Access"
        set comment "Remote access."
    next
    edit "Tunneling"
        set comment "Tunneling service."
    next
    edit "VoIP, Messaging & Other Applications"
        set comment "VoIP, messaging, and other applications."
    next
    edit "Web Proxy"
        set comment "Explicit web proxy."
    next
end
config firewall service custom
    edit "DNS"
        set category "Network Services"
        set tcp-portrange 53
        set udp-portrange 53
    next
    edit "HTTP"
        set category "Web Access"
        set tcp-portrange 80
    next
    edit "HTTPS"
        set category "Web Access"
        set tcp-portrange 443
    next
    edit "IMAP"
        set category "Email"
        set tcp-portrange 143
    next
    edit "IMAPS"
        set category "Email"
        set tcp-portrange 993
    next
    edit "LDAP"
        set category "Authentication"
        set tcp-portrange 389
    next
    edit "DCE-RPC"
        set category "Remote Access"
        set tcp-portrange 135
        set udp-portrange 135
    next
    edit "POP3"
        set category "Email"
        set tcp-portrange 110
    next
    edit "POP3S"
        set category "Email"
        set tcp-portrange 995
    next
    edit "SAMBA"
        set category "File Access"
        set tcp-portrange 139
    next
    edit "SMTP"
        set category "Email"
        set tcp-portrange 25
    next
    edit "SMTPS"
        set category "Email"
        set tcp-portrange 465
    next
    edit "KERBEROS"
        set category "Authentication"
        set tcp-portrange 88 464
        set udp-portrange 88 464
    next
    edit "LDAP_UDP"
        set category "Authentication"
        set udp-portrange 389
    next
    edit "SMB"
        set category "File Access"
        set tcp-portrange 445
    next
    edit "ALL"
        set category "General"
        set protocol IP
    next
    edit "ALL_TCP"
        set category "General"
        set tcp-portrange 1-65535
    next
    edit "ALL_UDP"
        set category "General"
        set udp-portrange 1-65535
    next
    edit "ALL_ICMP"
        set category "General"
        set protocol ICMP
        unset icmptype
    next
    edit "ALL_ICMP6"
        set category "General"
        set protocol ICMP6
        unset icmptype
    next
    edit "GRE"
        set category "Tunneling"
        set protocol IP
        set protocol-number 47
    next
    edit "AH"
        set category "Tunneling"
        set protocol IP
        set protocol-number 51
    next
    edit "ESP"
        set category "Tunneling"
        set protocol IP
        set protocol-number 50
    next
    edit "AOL"
        set visibility disable
        set tcp-portrange 5190-5194
    next
    edit "BGP"
        set category "Network Services"
        set tcp-portrange 179
    next
    edit "DHCP"
        set category "Network Services"
        set udp-portrange 67-68
    next
    edit "FINGER"
        set visibility disable
        set tcp-portrange 79
    next
    edit "FTP"
        set category "File Access"
        set tcp-portrange 21
    next
    edit "FTP_GET"
        set category "File Access"
        set tcp-portrange 21
    next
    edit "FTP_PUT"
        set category "File Access"
        set tcp-portrange 21
    next
    edit "GOPHER"
        set visibility disable
        set tcp-portrange 70
    next
    edit "H323"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 1720 1503
        set udp-portrange 1719
    next
    edit "IKE"
        set category "Tunneling"
        set udp-portrange 500 4500
    next
    edit "Internet-Locator-Service"
        set visibility disable
        set tcp-portrange 389
    next
    edit "IRC"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 6660-6669
    next
    edit "L2TP"
        set category "Tunneling"
        set tcp-portrange 1701
        set udp-portrange 1701
    next
    edit "NetMeeting"
        set visibility disable
        set tcp-portrange 1720
    next
    edit "NFS"
        set category "File Access"
        set tcp-portrange 111 2049
        set udp-portrange 111 2049
    next
    edit "NNTP"
        set visibility disable
        set tcp-portrange 119
    next
    edit "NTP"
        set category "Network Services"
        set tcp-portrange 123
        set udp-portrange 123
    next
    edit "OSPF"
        set category "Network Services"
        set protocol IP
        set protocol-number 89
    next
    edit "PC-Anywhere"
        set category "Remote Access"
        set tcp-portrange 5631
        set udp-portrange 5632
    next
    edit "PING"
        set category "Network Services"
        set protocol ICMP
        set icmptype 8
        unset icmpcode
    next
    edit "TIMESTAMP"
        set protocol ICMP
        set visibility disable
        set icmptype 13
        unset icmpcode
    next
    edit "INFO_REQUEST"
        set protocol ICMP
        set visibility disable
        set icmptype 15
        unset icmpcode
    next
    edit "INFO_ADDRESS"
        set protocol ICMP
        set visibility disable
        set icmptype 17
        unset icmpcode
    next
    edit "ONC-RPC"
        set category "Remote Access"
        set tcp-portrange 111
        set udp-portrange 111
    next
    edit "PPTP"
        set category "Tunneling"
        set tcp-portrange 1723
    next
    edit "QUAKE"
        set visibility disable
        set udp-portrange 26000 27000 27910 27960
    next
    edit "RAUDIO"
        set visibility disable
        set udp-portrange 7070
    next
    edit "REXEC"
        set visibility disable
        set tcp-portrange 512
    next
    edit "RIP"
        set category "Network Services"
        set udp-portrange 520
    next
    edit "RLOGIN"
        set visibility disable
        set tcp-portrange 513:512-1023
    next
    edit "RSH"
        set visibility disable
        set tcp-portrange 514:512-1023
    next
    edit "SCCP"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 2000
    next
    edit "SIP"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 5060
        set udp-portrange 5060
    next
    edit "SIP-MSNmessenger"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 1863
    next
    edit "SNMP"
        set category "Network Services"
        set tcp-portrange 161-162
        set udp-portrange 161-162
    next
    edit "SSH"
        set category "Remote Access"
        set tcp-portrange 22
    next
    edit "SYSLOG"
        set category "Network Services"
        set udp-portrange 514
    next
    edit "TALK"
        set visibility disable
        set udp-portrange 517-518
    next
    edit "TELNET"
        set category "Remote Access"
        set tcp-portrange 23
    next
    edit "TFTP"
        set category "File Access"
        set udp-portrange 69
    next
    edit "MGCP"
        set visibility disable
        set udp-portrange 2427 2727
    next
    edit "UUCP"
        set visibility disable
        set tcp-portrange 540
    next
    edit "VDOLIVE"
        set visibility disable
        set tcp-portrange 7000-7010
    next
    edit "WAIS"
        set visibility disable
        set tcp-portrange 210
    next
    edit "WINFRAME"
        set visibility disable
        set tcp-portrange 1494 2598
    next
    edit "X-WINDOWS"
        set category "Remote Access"
        set tcp-portrange 6000-6063
    next
    edit "PING6"
        set protocol ICMP6
        set visibility disable
        set icmptype 128
        unset icmpcode
    next
    edit "MS-SQL"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 1433 1434
    next
    edit "MYSQL"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 3306
    next
    edit "RDP"
        set category "Remote Access"
        set tcp-portrange 3389
    next
    edit "VNC"
        set category "Remote Access"
        set tcp-portrange 5900
    next
    edit "DHCP6"
        set category "Network Services"
        set udp-portrange 546 547
    next
    edit "SQUID"
        set category "Tunneling"
        set tcp-portrange 3128
    next
    edit "SOCKS"
        set category "Tunneling"
        set tcp-portrange 1080
        set udp-portrange 1080
    next
    edit "WINS"
        set category "Remote Access"
        set tcp-portrange 1512
        set udp-portrange 1512
    next
    edit "RADIUS"
        set category "Authentication"
        set udp-portrange 1812 1813
    next
    edit "RADIUS-OLD"
        set visibility disable
        set udp-portrange 1645 1646
    next
    edit "CVSPSERVER"
        set visibility disable
        set tcp-portrange 2401
        set udp-portrange 2401
    next
    edit "AFS3"
        set category "File Access"
        set tcp-portrange 7000-7009
        set udp-portrange 7000-7009
    next
    edit "TRACEROUTE"
        set category "Network Services"
        set udp-portrange 33434-33535
    next
    edit "RTSP"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 554 7070 8554
        set udp-portrange 554
    next
    edit "MMS"
        set visibility disable
        set tcp-portrange 1755
        set udp-portrange 1024-5000
    next
    edit "NONE"
        set visibility disable
        set tcp-portrange 0
    next
    edit "webproxy"
        set proxy enable
        set category "Web Proxy"
        set protocol ALL
        set tcp-portrange 0-65535:0-65535
    next
    edit "OPC UA"
        set comment "for opc ua access"
        set tcp-portrange 49320
    next
    edit "UDP53"
        set category "Web Access"
        set udp-portrange 53
    next
    edit "MQTT"
        set tcp-portrange 1883 8883 443
    next
    edit "Advantech-Testing-MQTT-8883"
        set tcp-portrange 8883
    next
    edit "gmail"
        set tcp-portrange 465
    next
end
config firewall service group
    edit "Email Access"
        set member "DNS" "IMAP" "IMAPS" "POP3" "POP3S" "SMTP" "SMTPS"
    next
    edit "Web Access"
        set member "DNS" "HTTP" "HTTPS"
    next
    edit "Windows AD"
        set member "DCE-RPC" "DNS" "KERBEROS" "LDAP" "LDAP_UDP" "SAMBA" "SMB"
    next
    edit "Exchange Server"
        set member "DCE-RPC" "DNS" "HTTPS"
    next
end
config vpn certificate ca
end
config vpn certificate local
    edit "Fortinet_CA_SSL"
        set password ENC sVuxydH4EXq4h+Dr3MKZYU+r8k4KxxvxlDAeujeg35eLddIzANulEwGFeJevvE8sRwnjsgRmo0P781LUcWsF2ZnDN211hBUt6VbpGwDgwDNzuFFB9eAh/vXxQMDocI8ZraB7SGONlEFtO3jN9SiynWhLE2Mxe93Ki3kuczMM62bOi92MdFAtkmDJXxgdLVqEqFyVKw==
        set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIFHDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIVHGVTevfHuoCAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECAsuftPSaeyoBIIEyLwdrP3UTvDy
ISQ6xfm1Dd4kBd886en83dMXCpSQN1rmsNHmCbjXMw80S6YBsHb1+lG1Ol4okwFO
H5g6aeKnlqelQHSH2dpScf6LrTXeA1vi7/Ae/dKekMGEA/3lMt/gqMWRpQR2KJFm
AgQJ65nDrc5lanpsx4SAXmHwwPntYwU/OwZA2u7iNE4XTZqPpW3BXWvtXQhRlQuZ
oRB0++67PU06rcP6C/1ZZfIDzHaaWVJwg2OMgNBdrduwwWo9r9zfNwJ+PAKJkCpQ
tgHcG8UPeBqQWrZuxe8YSnbsrgDiikwxZoY0ptjPF1VkQetPd1UVCyyznjDDuek1
QVI+46p/DDduPl4BFfV6JTOr50HR3R0OZsTcYw9LIew11K3eSbkG3Y8JVswgye7D
M5ZRLeam99GhGHWZzXMf12mQrQz5yzrrP5OMXqACXsEIf7aDbA1qGzXYK//BfpuS
mEK+YM8tLH5l/DIqtHo97mi/vpa031InoYVUpIi9JHCWEXv8orTePKYQbmbGayL2
TGbZgHd3U6erfl2K0YtlyjMdT1SDHfWQ1vQtunuVeKh8wfiBpwvxPxH/4DwGnmfp
XsdeCuI8Y8IoWdZu/QhPMRnjMN6yLkjUYMTDTzENA5kDcA8/lI95VNvXiVwCB8iv
y4ftIemXgzJUts5Z6BuyNDsoJUN42rnyawdMEJTrJDQokN2OxYz5BVkHMLTeFNtZ
5KyKN6JCJ+OPyAtWgH6U/MtUjiukbkeUV8p8AiMFZBvmuIKTGjh0p0uJyftQS3aI
vQREBgpFq6Jye9wtsTq8ZbAay4U+MyhT5VY+6VbCwcd7ia70qLcc+W9s0nxZ6vrk
G8vQVi2/ZGoe1H2n2GlL96cSWISlswXulqFIfVvxcZQ2+6RVQIHEU6T0jybtNhEo
U03PqiH6UvFmo4/fYyDAzsMT4+jtrDELpP6SXOgWtHBP7wktiBw1nzEfkCttPNk9
Uk36pXmMvY6j6N8zXuqIflWEWFEb6trxTz842mcfZJ83mixoVJI8CBt6ZYXPwz2Y
LwH1zaiyM4ri17Qs09WyOm0rponrZShCXWmzSu6aJtAQujAtn5i6YC3lepxL4d/A
XHmIUj5iOJ6d3nOiZTvxHIiWO2KaAs+KbEBKzcHtTjr6kK31p2dmAu8txv4PoAYW
+1adJetw4Lw3+T1AIzkenkHxs7hkkOR2OVu8p4icYXYe0xlcBYgZqGaxsIw/dWiT
cjmvSgwN6SADwlfBL+VjYjQ1smTDSuxVeF4j5iBuo1ZW23lnIryk9bx/b+jfhfKN
KI9NLPvPUHaiY/WAAtZZc/l7JnBU4F2M2nrUxOlwR4Zc+J05RxlCLn5K8qaPTzmt
a7d8nIYY/A8zo1jumVfdv7+G6lDSnOSohfW7BQvD7eSxKzXMvdAWekskdZ1J3klP
YLuZJY6a8RgwALO8JO2wVoDEFsX5PHPBWdnwLmaEnCFiK1POBXbdQT0Ga3Y1g170
TliMkf7dj3aUkHpqZn7RjuQocI+UlEcTGk9XxwIJxfBQBkZbsG1A4iehOsdjjFeS
9ZkT9S264mb8fz00DxZ40IyuDlVuTwdBEbS4odnXEuGISG6VAiQIy/Ur3joVOOCL
SGoVaRcS+QBAsyy5XoT6Ow==
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----
MIID4jCCAsqgAwIBAgIEGe3NtjANBgkqhkiG9w0BAQsFADCBqTELMAkGA1UEBhMC
VVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCVN1bm55dmFsZTERMA8G
A1UECgwIRm9ydGluZXQxHjAcBgNVBAsMFUNlcnRpZmljYXRlIEF1dGhvcml0eTEZ
MBcGA1UEAwwQRkdUMzBFNTYyMDAxMDczMTEjMCEGCSqGSIb3DQEJARYUc3VwcG9y
dEBmb3J0aW5ldC5jb20wHhcNMjIwMzI1MDUwNzUwWhcNMzIwMzI1MDUwNzUwWjCB
qTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCVN1
bm55dmFsZTERMA8GA1UECgwIRm9ydGluZXQxHjAcBgNVBAsMFUNlcnRpZmljYXRl
IEF1dGhvcml0eTEZMBcGA1UEAwwQRkdUMzBFNTYyMDAxMDczMTEjMCEGCSqGSIb3
DQEJARYUc3VwcG9ydEBmb3J0aW5ldC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDl4RyNkBuLnDu9zEh5CFJKz9c9ykuqmjQ8+knHetWg7t3gnPrG
3PG5eReqpXCul4FzCLpFFl/IXPqqxp0OPHw1JchSZUjiAeceEPJawvfPUUCj6xr5
2xAMrOezywjn5OqpUEDiFJPoVwwkirL3ER42cZe3nhDtWC2KRZ16s3HZuKRJ/HUn
hZwzDXhDpSEfk04WYjc+/OFiQ1D1rslhinCHNcpVtcXQIRpMO3Z52GP+m6X8SQNb
YRnDI/c1tm7eoGN7AyQwIXWxDaTpyjwhLx52cB1lg5t+uTaXgVfZvvvLvRA3tNYm
2ZRdfDlL0kY0oDPYK9vWJsspmK0OL/oRI+SrAgMBAAGjEDAOMAwGA1UdEwQFMAMB
Af8wDQYJKoZIhvcNAQELBQADggEBANrUs/Cd1lH8Zdz1Rd42rYfpE3DLEVo/qGoN
hm6yiqxea5yyTRZkTjuSljPQ9Y+krXecMC7JX7CiIdOgMVq/SfYddsHMDzjnWKSe
imBDQARYwiMFQwogPfcdpIXQg1F+wzeu5da4Q3mai3PuhmKSPxZ+BNO+u2c9Tb7G
xMRwtnBqOYSbJCcAjaUkOUSAWs5wuFWCLH8nV0aSlc/9gZqhJ3u9GU19iuHDKh6v
3KPsfl4vsG5PbgZznCD4EYLi3/H1vDo/H/3o0l3Juc9UoC6UmvjgPAg4o3ck/J22
t4bF+9aA47Cq/LFW8vgPHzfpTBpqKONsuKxnkFBeZlK2KkghUjg=
-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1648184911
    next
    edit "Fortinet_CA_Untrusted"
        set password ENC WFC6K6kkRAxP9LmPEq5i/Lnrfivo0xvx0PILoCGpDAQ2zff3sJopq6wtMdwJ/IUO7L65HXN29U8jH11ElNeW4cijlOI+GBdrCKukpld2ZE/tSDECYcK2dmdRs7NAaKRub8WR07r0JB5hyQ6pHN78rHjA1LeV3r1+G/M8HLosdHZd50mHxgFWzVB5KdV4FkRVRDZvRg==
        set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1648184911
    next
    edit "Fortinet_SSL"
        set password ENC F0uN2+WLi4lSTqqTOJUXAuXvQGUn19iE7Yl2HkQR9gqPfJtWUhF5qYZAnBGhbnOHtbr5GsE7xWRmJB8C1yD5Z1CiJOVo2P8np23Osm9vGUjYfNraLFp3N9KKE5D/KFuu5wGbtbvQxROwpFUce8hgWL4n8AHqcsH+BzbAHGSx2jWQrT2VC6jMt/fH5uBfFHOm1ZGx+w==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----
MIIDxzCCAq+gAwIBAgIEKZvPbzANBgkqhkiG9w0BAQsFADCBnTELMAkGA1UEBhMC
VVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCVN1bm55dmFsZTERMA8G
A1UECgwIRm9ydGluZXQxEjAQBgNVBAsMCUZvcnRpR2F0ZTEZMBcGA1UEAwwQRkdU
MzBFNTYyMDAxMDczMTEjMCEGCSqGSIb3DQEJARYUc3VwcG9ydEBmb3J0aW5ldC5j
b20wHhcNMjIwMzI1MDUwNzU0WhcNMzIwMzI1MDUwNzU0WjCBnTELMAkGA1UEBhMC
VVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCVN1bm55dmFsZTERMA8G
A1UECgwIRm9ydGluZXQxEjAQBgNVBAsMCUZvcnRpR2F0ZTEZMBcGA1UEAwwQRkdU
MzBFNTYyMDAxMDczMTEjMCEGCSqGSIb3DQEJARYUc3VwcG9ydEBmb3J0aW5ldC5j
b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs5wbjR2ELYAX+6zyt
eddUxDSIQ+3brW3l3I9rQRJJdt693IpQ7moxJ0DDEGtfdzMt6hFkyZgR5FrcL3Qp
xKFF7CDckQYWpHX4IXAaFBwAA5ymMCb5ARSPocmttBZCWvYE1/n+phqRLJ51KcvU
MBSRsD/0OgVta1VLSi90W4Cro2VqCqOGpvpdC0cLnbZ+zFgkcjqWrvCN3IW0i8Au
qHEd7++Oyp8ZRpahmNk0vhAPI2A/6ns5/stj8yNDLt3Odmm0Ll5aH4rGtp09OPun
aKDpXw/2t9TJ6lesyURnxNFDj4vtOpB2xh4mfUZzJckj+zLgubZ9GYNTOY0FeQZy
QQaJAgMBAAGjDTALMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBAItCNy7E
S2syfaTaCNJyTzUJPo1VOl2xm/CO50DJmw0LOCRFBczZnh2xsT76iTQv9aja6VA+
+YOVyz15WTNF5BN4Rbv8bL8AdXy22VC981+nP9Kqo3MRVG0MKULVmUHevL5+wvZW
YHPvAT//pebibhp4qqwINbzqkxM9vR26d71cK4GoDVJc46dxYoxOOPDZG0VQGJcF
9ANAPygJGIYR/sRhm0CSF6hm2ZZFP4Lfvp2/X4sXFh2LV2Xw3w97K7Ht8H3Xic7F
dkTvTHhY1WBmf+gdfvSECBTFT3igdKpKwO6KIWXCYMkRx0SijnYv5uSz29VpYeed
nAX6sZkjQObaVRI=
-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1648184911
    next
    edit "Fortinet_SSL_RSA1024"
        set password ENC YpbiotPNemlqjNSpCMRRN09Nyk4lMndEICTp+RLpqOTfTsX2sA1Szp1ikfC4FTKiTC85VNO8gI14lquJuTBpPXn/T0mD21A5HyqNOD6GFv5ou0kibXfyIk1OvA0rroghLD1YPqA1HLicOZeABtLYz1q1XrrJtb32vdhJcj+mROgMO/SLaW76C3eyisJrbUNkNMhYGA==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1648184911
    next
    edit "Fortinet_SSL_RSA2048"
        set password ENC uzNbh2HOC8dxsgaQ2RPqkY5TDUH9h/mRbbcBxK4WD+zRzeEzrUaqT5s3kl8zfATM4+XHshKbRmhMfEF67QHLd6WOSfnQV3PeED6ejiZ4XWp+3qwKvvb5PCDhtu7pcwHuJKPff2peeuGlkqgRrg45XkVToPEc5heFtrW5l42wzfhRXPxyf1ZHiwY+v6w9CG7tfeZYtA==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1648184911
    next
    edit "Fortinet_SSL_RSA4096"
        set password ENC QJbYOpHZR3sC7V6Qr1grxpnqwu0VKhl6QLiI5m3oxbr4uJsq0Ffm9Hy+QJgMRzmEm2A3QJb4uf5SXw+sCu1BSOtY/5oMX45t2tWep+iz1N1BvygrNpQojctZmgDz8/aU0f/bP5nt4UgKKsMY23mm9i0ApU44LGmcVU/Slj3jqlqeF1BPTfv1kEn25LwqxZ8mAn2rNw==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1648184911
    next
    edit "Fortinet_SSL_DSA1024"
        set password ENC SfEI14XVlV9Bl1oddtRcGfOJX0klARC8NTjHgONR3OCEQv5eyRxkMfymzL2PzmokZGwI6o6IUh0Dl028WFQeT/vVCSZ0PdquGhIhakC95EgNiIbo+xhc16uw4v19ziGteheTX1tUU6bHTytKzKeqorkfplyBPjtuAu19boFhhGS9xgIbZLSdoWJnz614ljPJsib8Qw==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1648184911
    next
    edit "Fortinet_SSL_DSA2048"
        set password ENC w+BMfVv3vTRVPovpckBq+v0fFrP6rWsolhUaHaEb91r/zRUGlS5e4ol8FQaFZAy8BL1DwmcXh/51wSCsN/B2Z6jPHv7hoKn25LdpsupvHrm4q8l5INVI815fWBArYkYe0g60SI1L2GR0KQEZImmfQUNDlOisBXYK2qHjc/3VPOAaO0ZYgX0CBmxVTSxb5fib7Kv3yA==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1648184911
    next
    edit "Fortinet_SSL_ECDSA256"
        set password ENC W2nRz2UPXZgZdMfO0gGwhiTEWjN42KpF689ldeAyYBj6ZBxaRNFqljD/tHzlv/0xE+SlaXBCqtyjLtZvxYptEmrTuUO0hD099//z52lynYkQrKHjmW/mD04jff3VUD91Tz3ckxcZbMYjdvaSnVg/OkNi5o1unCiVXVII7V4VQib3qpBNml6TcrNvJpQECDIegsBoCA==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIHjME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAisnsuvGfQs0AICCAAw
DAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQILzBDJuHuAE0EgZCh4QpBYNGgrl6Y
N8gbjP343mnf7hRrFIuvKwFLU/nrHwxxHNSosLvjxoMyEuNgH9gbFB4HKjJ8fx/2
YLywoI412ylA/jQ0A/8J7XUtlA2axYazoz8bKmnaim6RoN5WpmRitRrpkMMAGvtv
1a+TZO2REXj8vdO9AVQc/kGuPJ10ixwROTkWP06Tb10D2JRJUCo=
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1648184911
    next
    edit "Fortinet_SSL_ECDSA384"
        set password ENC DtRVeNOHOJDVG/Bazm/2jxcuZzw1CFflaJq95GmhsoWGYnG3HUpCHjZ2LoWre386DoNVebwkrAOsDRtiJwxDZ3qejfIwJ0lOkN9v4WgC49jtjb2wf3l6ohoO8XeZnPHMDa+QG+FmWaN4AgYDRL5c4CwSMndagDy6BdXA/J+00xu+shrEmB18+RFB3HT/UGPeEOc4Ug==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIBEzBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIQ7A8MeE8LTgCAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECP8QWBJ9Nj/zBIHABlOnrWpUhfP5
saVRSqx9PjiRbd6makJL3SJpSfHVQktFba7w+cZjH+KiKjmcK23BMBVZKkhb0jRw
FkQgPopBajG2nAwF9XIl/ocflfjj+YniC+ZQ8D0fD8opSnT2TsPcBFKQkn69q9ym
CquitBrrWoFSOmK+/4hk97GQQdEbu+rc3PFC1zqXyEt5oK6SW5Sd0FDvTtnfBVcP
BKiag/67A6nDORNouCujlFdrPAHHKO4k4cLt9XglAuMhbGFntHmG
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1648184911
    next
    edit "Fortinet_SSL_ECDSA521"
        set password ENC yimxP1elDTy9Xq63AWJFs12NQUEjnrQYYKQeXGdcK0pdvaFawQ56qFCT276EHZ22M5J8cq6R3JUh9RTTnKZ2V+arMS0qUkUjVQWzcI97JAT2ZbYt6TOc7B0J5fnHaBWiXhQRCUntJgjpzPUOvxhl6peM6SfjHgVJQaw565ZwkPgC/8g1f+A/egMp7BvxyEzaowOlMw==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIBSzBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIaipQn9U38n8CAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECE1/5eoa+KOeBIH4e9d12GZWpeZv
KWDn5zLYXhkX124sm0/2YdR5v7IHT+Ou+Ecbk45TSm7qfZiMnWr3E8tHaOO0xlWv
UvOxd8mIAxCsTKbvW4VARco9V38uvG2C3dvY7ZjGWg/3PFZz2ErdZnbshh/4heui
+xw+NvDTb/ZfcvFNWFlAYgbtliam7nygpY+L7govEbc8IIgVvQ6PdPgTT8bYuF5R
yW/Q8Qnz+XLHWuzgPGYExACME3toLBqQvn51qpeRIZvFBiQt/KEe9vjkzVkj7kFx
G0gZ5Iir66T3wkcRq4IYK7RgSdL1Qm0y+rnk/phJRumzcjoeY4IWoyZzYRC8hjQ=
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----
MIICwjCCAiSgAwIBAgIEd/NYyDAKBggqhkjOPQQDAjCBnTELMAkGA1UEBhMCVVMx
EzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCVN1bm55dmFsZTERMA8GA1UE
CgwIRm9ydGluZXQxEjAQBgNVBAsMCUZvcnRpR2F0ZTEZMBcGA1UEAwwQRkdUMzBF
NTYyMDAxMDczMTEjMCEGCSqGSIb3DQEJARYUc3VwcG9ydEBmb3J0aW5ldC5jb20w
HhcNMjIwMzI1MDUwODI3WhcNMzIwMzI1MDUwODI3WjCBnTELMAkGA1UEBhMCVVMx
EzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCVN1bm55dmFsZTERMA8GA1UE
CgwIRm9ydGluZXQxEjAQBgNVBAsMCUZvcnRpR2F0ZTEZMBcGA1UEAwwQRkdUMzBF
NTYyMDAxMDczMTEjMCEGCSqGSIb3DQEJARYUc3VwcG9ydEBmb3J0aW5ldC5jb20w
gZswEAYHKoZIzj0CAQYFK4EEACMDgYYABACTvpjfSegFdtcqIL1LIXkA/tlyPUoF
TwJnXiMGWORXdq59OtyZ4vTBJVChFOU9xvg1hh1CKFnLGdadcknlAxXKywCF8xnf
Ikv7MDEv5bhyRDpLuhz/L6Jmp4qYPCJSHrL9DxOJXhqLpb7u8JQc6iBUnvwZogaE
U7Z94X7QN0zq2JaSEqMNMAswCQYDVR0TBAIwADAKBggqhkjOPQQDAgOBiwAwgYcC
QWKepPQtpd1Gq67b3k/NsWAlCY/xKMw099O1aPRVffAwl/vITcD08YgeFby96c9W
SyypjrqfmMfgKSJ/swbGo5TVAkIBB6PDhO68ClX9FxN10hFCuaBi/C/c1hS5ft6l
DAr+OjvDm30wlduyYBmHFTQprqa8zEs1CsPgZZ7IZUSO40CSh7k=
-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1648184911
    next
    edit "Fortinet_SSL_ED25519"
        set password ENC l4LsbBw5c+mse67PzqcXBfc2Y+hp+L8NPPm8xIV9pWX8IFgCYMi24V470g40JuMK9YPIiO7ZNknUw6IWiO1QSdnect9jWBOTxG91UUFpMUdNtuBZi2KuyO6wKLP8B2l9hI5Zvt66hWmdhJEK+Jp6ANf0HAUHzgipYj0yKpAUQv2kdrBIa7Nss2a1zq8wNM6mFCny8Q==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIGKME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAhJoKrOuT/vowICCAAw
DAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIrlzv2JJPPtwEOEtMd4Wo7yqzcCIx
cGQnfbZ0cm5UTvy1qhfthZ8NO9uwb7v6Onas0+AR6cd04oAfHI51P04LW6S9
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1648184911
    next
    edit "Fortinet_SSL_ED448"
        set password ENC m5fyujRf341X8XLM/0xClU8W2MLmLgnc+oYVi+EfWXlxOmHQbci8+BM1RKMa+lzbqj3S2+RnY0uoXAbtDriZkZZVgKpeWv3T8BgIjhXXLvR3W6Fghdnm8l6AZ033UiF6z9pvyfgMfqEa09Cftu43rOP+U6yPEK2gjLuFVFrp0E+BgBnPBNh2rv/sqzcaaeT2M4SKYA==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIGiME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAjaNI7hJp5AcgICCAAw
DAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIIMlQ6VUV3gMEUH6z0w6j3AszClQ/
nkg02r5R1wvwXT7wURTjRMcrpZXg3VpFW1A53GHV5l4+QOXztj/muU1w6Xh5Ws/M
S+smaZy16qsXkdWzClIoibLnC/TC
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----
MIICRjCCAcagAwIBAgIEM6RTFDAFBgMrZXEwgZ0xCzAJBgNVBAYTAlVTMRMwEQYD
VQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUxETAPBgNVBAoMCEZv
cnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMMEEZHVDMwRTU2MjAw
MTA3MzExIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQuY29tMB4XDTIy
MDMyNTA1MDgyN1oXDTMyMDMyNTA1MDgyN1owgZ0xCzAJBgNVBAYTAlVTMRMwEQYD
VQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUxETAPBgNVBAoMCEZv
cnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMMEEZHVDMwRTU2MjAw
MTA3MzExIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQuY29tMEMwBQYD
K2VxAzoA5Yt3DOoOM3lM8Hd9HS1mTVY4cz+rCTUs7M99ZdSazU/3xYic1LUpvOzh
S6PBZjdo4b8yIPniE+UAow0wCzAJBgNVHRMEAjAAMAUGAytlcQNzAChQTZOZ+YkO
kkbMzdsczGHL95O/p/AAUW3dnk9Ard1+ro6qgbYbTrRC+achgFiZBMr12DS+N46a
gHW/8ILEn6F+MBQdP+6C/qHxEaJqNhbgvUuXLbjRW3VoNSC5k3C0wPdPh+pn57xH
CD3iCsRFBZAPAA==
-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1648184911
    next
    edit "wildcard.tahoho.com.tw"
        set password ENC 8k752DlL8j9uSYrVvHY2Wn1P215O0HMoZDfPPFg/v7OK5fohn75T7u52VuzI3G9p9MK6/1uX0K8blVJX+p3h7AJGZM9UXluzACuoBz8Sf2j2oKImfpkcYg8eQY6OmHFrb9NLkMExUxLxzVgmdYFBot4Q8L5WKkJJ6zn47GC3aAB0Zv8Zbj8IdqxwtvdZDfdCGM4Oaw==
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set last-updated 1680052708
    next
end
config webfilter ftgd-local-cat
    edit "custom1"
        set id 140
    next
    edit "custom2"
        set id 141
    next
end
config ips sensor
    edit "default"
        set comment "Prevent critical attacks."
        config entries
            edit 1
                set severity medium high critical 
            next
        end
    next
    edit "sniffer-profile"
        set comment "Monitor IPS attacks."
        config entries
            edit 1
                set severity medium high critical 
            next
        end
    next
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        config entries
            edit 1
                set severity medium high critical 
            next
        end
    next
    edit "all_default"
        set comment "All predefined signatures with default setting."
        config entries
            edit 1
            next
        end
    next
    edit "all_default_pass"
        set comment "All predefined signatures with PASS action."
        config entries
            edit 1
                set action pass
            next
        end
    next
    edit "protect_http_server"
        set comment "Protect against HTTP server-side vulnerabilities."
        config entries
            edit 1
                set location server 
                set protocol HTTP 
            next
        end
    next
    edit "protect_email_server"
        set comment "Protect against email server-side vulnerabilities."
        config entries
            edit 1
                set location server 
                set protocol SMTP POP3 IMAP 
            next
        end
    next
    edit "protect_client"
        set comment "Protect against client-side vulnerabilities."
        config entries
            edit 1
                set location client 
            next
        end
    next
    edit "high_security"
        set comment "Blocks all Critical/High/Medium and some Low severity vulnerabilities"
        config entries
            edit 1
                set severity medium high critical 
                set status enable
                set action block
            next
            edit 2
                set severity low 
            next
        end
    next
end
config firewall shaper traffic-shaper
    edit "high-priority"
        set maximum-bandwidth 1048576
        set per-policy enable
    next
    edit "medium-priority"
        set maximum-bandwidth 1048576
        set priority medium
        set per-policy enable
    next
    edit "low-priority"
        set maximum-bandwidth 1048576
        set priority low
        set per-policy enable
    next
    edit "guarantee-100kbps"
        set guaranteed-bandwidth 100
        set maximum-bandwidth 1048576
        set per-policy enable
    next
    edit "shared-1M-pipe"
        set maximum-bandwidth 1024
    next
end
config web-proxy global
    set proxy-fqdn "default.fqdn"
end
config application list
    edit "default"
        set comment "Monitor all applications."
        config entries
            edit 1
                set action pass
            next
        end
    next
    edit "sniffer-profile"
        set comment "Monitor all applications."
        unset options
        config entries
            edit 1
                set action pass
            next
        end
    next
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        set deep-app-inspection disable
        config entries
            edit 1
                set action pass
                set log disable
            next
        end
    next
    edit "block-high-risk"
        config entries
            edit 1
                set category 2 6
            next
            edit 2
                set action pass
            next
        end
    next
end
config dlp filepattern
    edit 1
        set name "builtin-patterns"
        config entries
            edit "*.bat"
            next
            edit "*.com"
            next
            edit "*.dll"
            next
            edit "*.doc"
            next
            edit "*.exe"
            next
            edit "*.gz"
            next
            edit "*.hta"
            next
            edit "*.ppt"
            next
            edit "*.rar"
            next
            edit "*.scr"
            next
            edit "*.tar"
            next
            edit "*.tgz"
            next
            edit "*.vb?"
            next
            edit "*.wps"
            next
            edit "*.xl?"
            next
            edit "*.zip"
            next
            edit "*.pif"
            next
            edit "*.cpl"
            next
        end
    next
    edit 2
        set name "all_executables"
        config entries
            edit "bat"
                set filter-type type
                set file-type bat
            next
            edit "exe"
                set filter-type type
                set file-type exe
            next
            edit "elf"
                set filter-type type
                set file-type elf
            next
            edit "hta"
                set filter-type type
                set file-type hta
            next
        end
    next
end
config dlp sensitivity
    edit "Private"
    next
    edit "Critical"
    next
    edit "Warning"
    next
end
config dlp sensor
    edit "default"
        set comment "Default sensor."
    next
    edit "sniffer-profile"
        set comment "Log a summary of email and web traffic."
        set summary-proto smtp pop3 imap http-get http-post
    next
    edit "Content_Summary"
        set summary-proto smtp pop3 imap http-get http-post ftp nntp mapi
    next
    edit "Content_Archive"
        set summary-proto smtp pop3 imap http-get http-post ftp nntp mapi
    next
    edit "Large-File"
        config filter
            edit 1
                set name "Large-File-Filter"
                set proto smtp pop3 imap http-get http-post mapi
                set filter-by file-size
                set file-size 5120
                set action log-only
            next
        end
    next
    edit "Credit-Card"
        config filter
            edit 1
                set name "Credit-Card-Filter"
                set severity high
                set proto smtp pop3 imap http-get http-post mapi
                set action log-only
            next
            edit 2
                set name "Credit-Card-Filter"
                set severity high
                set type message
                set proto smtp pop3 imap http-post mapi
                set action log-only
            next
        end
    next
    edit "SSN-Sensor"
        set comment "Match SSN numbers but NOT WebEx invite emails."
        config filter
            edit 1
                set name "SSN-Sensor-Filter"
                set severity high
                set type message
                set proto smtp pop3 imap mapi
                set filter-by regexp
                set regexp "WebEx"
            next
            edit 2
                set name "SSN-Sensor-Filter"
                set severity high
                set type message
                set proto smtp pop3 imap mapi
                set filter-by ssn
                set action log-only
            next
            edit 3
                set name "SSN-Sensor-Filter"
                set severity high
                set proto smtp pop3 imap http-get http-post ftp mapi
                set filter-by ssn
                set action log-only
            next
        end
    next
end
config webfilter ips-urlfilter-setting
end
config webfilter ips-urlfilter-setting6
end
config log threat-weight
    config web
        edit 1
            set category 26
            set level high
        next
        edit 2
            set category 61
            set level high
        next
        edit 3
            set category 86
            set level high
        next
        edit 4
            set category 1
            set level medium
        next
        edit 5
            set category 3
            set level medium
        next
        edit 6
            set category 4
            set level medium
        next
        edit 7
            set category 5
            set level medium
        next
        edit 8
            set category 6
            set level medium
        next
        edit 9
            set category 12
            set level medium
        next
        edit 10
            set category 59
            set level medium
        next
        edit 11
            set category 62
            set level medium
        next
        edit 12
            set category 83
            set level medium
        next
        edit 13
            set category 72
        next
        edit 14
            set category 14
        next
    end
    config application
        edit 1
            set category 2
        next
        edit 2
            set category 6
            set level medium
        next
    end
end
config icap profile
    edit "default"
        config icap-headers
            edit 1
                set name "X-Authenticated-User"
                set content "$user"
            next
            edit 2
                set name "X-Authenticated-Groups"
                set content "$local_grp"
            next
        end
    next
end
config user ldap
    edit "Azure-LDAP-Secure-Server"
        set server "gsvr.tahoho.com.tw"
        set server-identity-check disable
        set cnid "sAMAccountName"
        set dn "dc=tahoho,dc=com,dc=tw"
        set type regular
        set username "tahoho\\tahotbhq.admin"
        set password ENC MTAwNFwmch2x1OqHP2qbECPV6E7jwwxFcExtnnwCHc1hhQtkLgQOYammG0/qmZ2JqP8HUpXdlhueR6iKI9KBLKzk/guTRBqVC0V/BtmFPecys4Nr5txe8VFGRr6nviY9oktOX1lF+j3QjmzTnVH2NiKG7ScYfqBP6QmPA9+8x+oYedvbedvgcvvqbzqdUv8AIjYp+g==
        set secure ldaps
        set port 636
    next
end
config user fortitoken
    edit "FTKMOB28D1874826"
        set license "FTMTRIAL027A1259"
    next
    edit "FTKMOB287EF58163"
        set license "FTMTRIAL027A1259"
    next
end
config user local
    edit "guest"
        set status disable
        set type password
        set passwd ENC /pVaYSDGJcsTEWrVIqE/szICW+SdHwHcxvI5Hb37eSpCAwWmuMC2kV/4sdstIcTuNtL9lAd5jJVE5fHlp5E+F7VSei9nZtJycvGKuilA7HmFeyQoPT1nl/dBhWnoKeRAcrGYY1sT3AYTQeGrFbFpXbeY+apoKhoLI7C8p1GZ8yhEIBGV9KxWMt2yGZojvWtlc0pXaQ==
    next
    edit "870559"
        set type ldap
        set ldap-server "Azure-LDAP-Secure-Server"
    next
    edit "870572"
        set type ldap
        set ldap-server "Azure-LDAP-Secure-Server"
    next
    edit "910787"
        set type ldap
        set ldap-server "Azure-LDAP-Secure-Server"
    next
    edit "930734"
        set type ldap
        set ldap-server "Azure-LDAP-Secure-Server"
    next
    edit "hwangchinchang"
        set type ldap
        set ldap-server "Azure-LDAP-Secure-Server"
    next
    edit "tsaichinfeng"
        set type ldap
        set ldap-server "Azure-LDAP-Secure-Server"
    next
    edit "890354"
        set type ldap
        set ldap-server "Azure-LDAP-Secure-Server"
    next
    edit "930001"
        set type ldap
        set ldap-server "Azure-LDAP-Secure-Server"
    next
    edit "A50016"
        set type ldap
        set ldap-server "Azure-LDAP-Secure-Server"
    next
    edit "A60025"
        set type ldap
        set ldap-server "Azure-LDAP-Secure-Server"
    next
    edit "chennanhsieh"
        set type ldap
        set ldap-server "Azure-LDAP-Secure-Server"
    next
    edit "pengyehhuang"
        set type ldap
        set ldap-server "Azure-LDAP-Secure-Server"
    next
    edit "samyslin"
        set type ldap
        set ldap-server "Azure-LDAP-Secure-Server"
    next
    edit "colemanchen"
        set type ldap
        set ldap-server "Azure-LDAP-Secure-Server"
    next
    edit "B10013"
        set type ldap
        set ldap-server "Azure-LDAP-Secure-Server"
    next
    edit "900976"
        set type ldap
        set ldap-server "Azure-LDAP-Secure-Server"
    next
    edit "880076"
        set type ldap
        set ldap-server "Azure-LDAP-Secure-Server"
    next
    edit "910776"
        set type ldap
        set ldap-server "Azure-LDAP-Secure-Server"
    next
    edit "930445"
        set type ldap
        set ldap-server "Azure-LDAP-Secure-Server"
    next
    edit "joy.liao"
        set type password
        set passwd-time 2023-07-05 14:59:48
        set passwd ENC xQ0iwFqC0wujTlkul05XomglH7lzKM53qFMJsdS4sz1urX2snIWzleO9t8D+6nVye+GlTYNWyPuMoF8fUfZNVU7dtOwxuGaO3mFFSDb4Xp1zw8cUlnZK9L5SU3Gam0Eu5LggEvUnkQ8BaCdRpkCxaAxM3lTUiCWSKe03uOHOuld5fLIXGeafUALLWDhhLw0ND61z9g==
    next
end
config user setting
    set auth-cert "wildcard.tahoho.com.tw"
end
config user group
    edit "SSO_Guest_Users"
    next
    edit "Guest-group"
        set member "guest"
    next
    edit "RemoteUserGroup"
        set member "Azure-LDAP-Secure-Server"
        config match
            edit 1
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Exchange Install Domain Servers,CN=Microsoft Exchange System Objects,DC=tahoho,DC=com,DC=tw"
            next
            edit 2
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Access Control Assistance Operators,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 3
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Account Operators,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 4
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Administrators,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 5
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ADSyncAdmins,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 6
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ADSyncBrowse,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 7
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ADSyncOperators,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 8
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ADSyncPasswordSet,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 9
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Allowed RODC Password Replication Group,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 10
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Backup Operators,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 11
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Business Dep_gbl,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 12
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Cert Publishers,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 13
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Certificate Service DCOM Access,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 14
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=CERTSVC_DCOM_ACCESS,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 15
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Cloneable Domain Controllers,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 16
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Cryptographic Operators,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 17
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Delegated Setup,OU=Microsoft Exchange Security Groups,DC=tahoho,DC=com,DC=tw"
            next
            edit 18
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Denied RODC Password Replication Group,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 19
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=DHCP Administrators,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 20
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=DHCP Users,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 21
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Discovery Management,OU=Microsoft Exchange Security Groups,DC=tahoho,DC=com,DC=tw"
            next
            edit 22
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Distributed COM Users,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 23
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=DnsAdmins,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 24
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=DnsUpdateProxy,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 25
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Domain Admins,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 26
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Domain Computers,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 27
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Domain Controllers,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 28
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Domain Guests,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 29
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Domain Users,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 30
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Enterprise Admins,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 31
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Enterprise Read-only Domain Controllers,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 32
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ERP_Buyer,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 33
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ERP_Buyer_BL,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 34
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ERP_Buyer_CY,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 35
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ERP_Buyer_LT,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 36
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ERP_Buyer_LZ,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 37
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ERP_Buyer_RW,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 38
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ERP_Buyer_SL,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 39
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ERP_Buyer_TC,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 40
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ERP_Buyer_WC,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 41
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ERP_Buyer_XD,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 42
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ERP_Buyer_YK,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 43
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ERP_GROUP,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 44
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ERP_GROUP_RW,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 45
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ERP_public,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 46
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ERP_TPE_Manager,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 47
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ERP_TPE_PAC,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 48
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Event Log Readers,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 49
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Exchange All Hosted Organizations,OU=Microsoft Exchange Security Groups,DC=tahoho,DC=com,DC=tw"
            next
            edit 50
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Exchange Domain Servers,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 51
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Exchange Enterprise Servers,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 52
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Exchange Servers,OU=Microsoft Exchange Security Groups,DC=tahoho,DC=com,DC=tw"
            next
            edit 53
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Exchange Trusted Subsystem,OU=Microsoft Exchange Security Groups,DC=tahoho,DC=com,DC=tw"
            next
            edit 54
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Exchange Windows Permissions,OU=Microsoft Exchange Security Groups,DC=tahoho,DC=com,DC=tw"
            next
            edit 55
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=ExchangeLegacyInterop,OU=Microsoft Exchange Security Groups,DC=tahoho,DC=com,DC=tw"
            next
            edit 56
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Google 雲端硬碟,DC=tahoho,DC=com,DC=tw"
            next
            edit 57
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Group Policy Creator Owners,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 58
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Guests,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 59
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Help Desk,OU=Microsoft Exchange Security Groups,DC=tahoho,DC=com,DC=tw"
            next
            edit 60
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=HelpServicesGroup,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 61
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=HubgradeTeam,DC=tahoho,DC=com,DC=tw"
            next
            edit 62
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=HubgradeUsers,DC=tahoho,DC=com,DC=tw"
            next
            edit 63
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Hygiene Management,OU=Microsoft Exchange Security Groups,DC=tahoho,DC=com,DC=tw"
            next
            edit 64
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Hyper-V Administrators,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 65
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=IIS_IUSRS,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 66
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=IIS_WPG,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 67
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Incoming Forest Trust Builders,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 68
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=MTS Impersonators,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 69
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Netmon Users,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 70
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Network Configuration Operators,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 71
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Organization Management,OU=Microsoft Exchange Security Groups,DC=tahoho,DC=com,DC=tw"
            next
            edit 72
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Performance Log Users,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 73
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Performance Monitor Users,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 74
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Pre-Windows 2000 Compatible Access,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 75
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Print Operators,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 76
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Protected Users,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 77
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Public Folder Management,OU=Microsoft Exchange Security Groups,DC=tahoho,DC=com,DC=tw"
            next
            edit 78
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=RAS and IAS Servers,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 79
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=RDS Endpoint Servers,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 80
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=RDS Management Servers,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 81
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=RDS Remote Access Servers,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 82
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Read-only Domain Controllers,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 83
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Recipient Management,OU=Microsoft Exchange Security Groups,DC=tahoho,DC=com,DC=tw"
            next
            edit 84
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Records Management,OU=Microsoft Exchange Security Groups,DC=tahoho,DC=com,DC=tw"
            next
            edit 85
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Remote Desktop Users,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 86
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Remote Management Users,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 87
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Replicator,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 88
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Schema Admins,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 89
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Server Management,OU=Microsoft Exchange Security Groups,DC=tahoho,DC=com,DC=tw"
            next
            edit 90
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Server Operators,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 91
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Smart Phone,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 92
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=SMEX Admin Group,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 93
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=SQLServer2005MSFTEUser$TAHOAD$MICROSOFT\\#\\#SSEE,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 94
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=SQLServer2005MSSQLUser$TAHOAD$MICROSOFT\\#\\#SSEE,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 95
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=SQLServer2005SQLBrowserUser$TAHOAD,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 96
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=SQLServerMSSQLServerADHelperUser$TAHOAD,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 97
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=TAHOAD $ Acronis ApiGateway Users,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 98
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=TAHOAD $ Acronis ASN Remote Users,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 99
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=TAHOAD $ Acronis Centralized Admins,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 100
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=TAHOAD $ Acronis Remote Users,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 101
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=TAHONT $ Acronis Remote Users,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 102
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Technical Dep_gbl,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 103
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Technical Dep_loc,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 104
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=TelnetClients,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 105
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Terminal Server License Servers,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 106
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=UM Management,OU=Microsoft Exchange Security Groups,DC=tahoho,DC=com,DC=tw"
            next
            edit 107
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Users,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 108
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=vendor_group,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 109
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Veolia Distribution Group,OU=Veolia,DC=tahoho,DC=com,DC=tw"
            next
            edit 110
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=VeoliaSecurityGroup,OU=Veolia,DC=tahoho,DC=com,DC=tw"
            next
            edit 111
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=View-Only Organization Management,OU=Microsoft Exchange Security Groups,DC=tahoho,DC=com,DC=tw"
            next
            edit 112
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=Windows Authorization Access Group,CN=Builtin,DC=tahoho,DC=com,DC=tw"
            next
            edit 113
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=WINS Users,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 114
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=WSUS Administrators,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
            edit 115
                set server-name "Azure-LDAP-Secure-Server"
                set group-name "CN=WSUS Reporters,CN=Users,DC=tahoho,DC=com,DC=tw"
            next
        end
    next
    edit "ssl_vpn_user"
        set member "870559" "870572" "880076" "890354" "900976" "910776" "910787" "930001" "930445" "930734" "A50016" "A60025" "B10013" "chennanhsieh" "colemanchen" "hwangchinchang" "pengyehhuang" "samyslin" "tsaichinfeng"
    next
end
config vpn ssl web host-check-software
    edit "FortiClient-AV"
        set guid "1A0271D5-3D4F-46DB-0C2C-AB37BA90D9F7"
    next
    edit "FortiClient-FW"
        set type fw
        set guid "528CB157-D384-4593-AAAA-E42DFF111CED"
    next
    edit "FortiClient-AV-Vista"
        set guid "385618A6-2256-708E-3FB9-7E98B93F91F9"
    next
    edit "FortiClient-FW-Vista"
        set type fw
        set guid "006D9983-6839-71D6-14E6-D7AD47ECD682"
    next
    edit "FortiClient5-AV"
        set guid "5EEDDB8C-C27A-6714-3657-DBD811D1F1B7"
    next
    edit "AVG-Internet-Security-AV"
        set guid "17DDD097-36FF-435F-9E1B-52D74245D6BF"
    next
    edit "AVG-Internet-Security-FW"
        set type fw
        set guid "8DECF618-9569-4340-B34A-D78D28969B66"
    next
    edit "AVG-Internet-Security-AV-Vista-Win7"
        set guid "0C939084-9E57-CBDB-EA61-0B0C7F62AF82"
    next
    edit "AVG-Internet-Security-FW-Vista-Win7"
        set type fw
        set guid "34A811A1-D438-CA83-C13E-A23981B1E8F9"
    next
    edit "CA-Anti-Virus"
        set guid "17CFD1EA-56CF-40B5-A06B-BD3A27397C93"
    next
    edit "CA-Internet-Security-AV"
        set guid "6B98D35F-BB76-41C0-876B-A50645ED099A"
    next
    edit "CA-Internet-Security-FW"
        set type fw
        set guid "38102F93-1B6E-4922-90E1-A35D8DC6DAA3"
    next
    edit "CA-Internet-Security-AV-Vista-Win7"
        set guid "3EED0195-0A4B-4EF3-CC4F-4F401BDC245F"
    next
    edit "CA-Internet-Security-FW-Vista-Win7"
        set type fw
        set guid "06D680B0-4024-4FAB-E710-E675E50F6324"
    next
    edit "CA-Personal-Firewall"
        set type fw
        set guid "14CB4B80-8E52-45EA-905E-67C1267B4160"
    next
    edit "F-Secure-Internet-Security-AV"
        set guid "E7512ED5-4245-4B4D-AF3A-382D3F313F15"
    next
    edit "F-Secure-Internet-Security-FW"
        set type fw
        set guid "D4747503-0346-49EB-9262-997542F79BF4"
    next
    edit "F-Secure-Internet-Security-AV-Vista-Win7"
        set guid "15414183-282E-D62C-CA37-EF24860A2F17"
    next
    edit "F-Secure-Internet-Security-FW-Vista-Win7"
        set type fw
        set guid "2D7AC0A6-6241-D774-E168-461178D9686C"
    next
    edit "Kaspersky-AV"
        set guid "2C4D4BC6-0793-4956-A9F9-E252435469C0"
    next
    edit "Kaspersky-FW"
        set type fw
        set guid "2C4D4BC6-0793-4956-A9F9-E252435469C0"
    next
    edit "Kaspersky-AV-Vista-Win7"
        set guid "AE1D740B-8F0F-D137-211D-873D44B3F4AE"
    next
    edit "Kaspersky-FW-Vista-Win7"
        set type fw
        set guid "9626F52E-C560-D06F-0A42-2E08BA60B3D5"
    next
    edit "McAfee-Internet-Security-Suite-AV"
        set guid "84B5EE75-6421-4CDE-A33A-DD43BA9FAD83"
    next
    edit "McAfee-Internet-Security-Suite-FW"
        set type fw
        set guid "94894B63-8C7F-4050-BDA4-813CA00DA3E8"
    next
    edit "McAfee-Internet-Security-Suite-AV-Vista-Win7"
        set guid "86355677-4064-3EA7-ABB3-1B136EB04637"
    next
    edit "McAfee-Internet-Security-Suite-FW-Vista-Win7"
        set type fw
        set guid "BE0ED752-0A0B-3FFF-80EC-B2269063014C"
    next
    edit "McAfee-Virus-Scan-Enterprise"
        set guid "918A2B0B-2C60-4016-A4AB-E868DEABF7F0"
    next
    edit "Norton-360-2.0-AV"
        set guid "A5F1BC7C-EA33-4247-961C-0217208396C4"
    next
    edit "Norton-360-2.0-FW"
        set type fw
        set guid "371C0A40-5A0C-4AD2-A6E5-69C02037FBF3"
    next
    edit "Norton-360-3.0-AV"
        set guid "E10A9785-9598-4754-B552-92431C1C35F8"
    next
    edit "Norton-360-3.0-FW"
        set type fw
        set guid "7C21A4C9-F61F-4AC4-B722-A6E19C16F220"
    next
    edit "Norton-Internet-Security-AV"
        set guid "E10A9785-9598-4754-B552-92431C1C35F8"
    next
    edit "Norton-Internet-Security-FW"
        set type fw
        set guid "7C21A4C9-F61F-4AC4-B722-A6E19C16F220"
    next
    edit "Norton-Internet-Security-AV-Vista-Win7"
        set guid "88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855"
    next
    edit "Norton-Internet-Security-FW-Vista-Win7"
        set type fw
        set guid "B0F2DB13-C654-2E74-30D4-99C9310F0F2E"
    next
    edit "Symantec-Endpoint-Protection-AV"
        set guid "FB06448E-52B8-493A-90F3-E43226D3305C"
    next
    edit "Symantec-Endpoint-Protection-FW"
        set type fw
        set guid "BE898FE3-CD0B-4014-85A9-03DB9923DDB6"
    next
    edit "Symantec-Endpoint-Protection-AV-Vista-Win7"
        set guid "88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855"
    next
    edit "Symantec-Endpoint-Protection-FW-Vista-Win7"
        set type fw
        set guid "B0F2DB13-C654-2E74-30D4-99C9310F0F2E"
    next
    edit "Panda-Antivirus+Firewall-2008-AV"
        set guid "EEE2D94A-D4C1-421A-AB2C-2CE8FE51747A"
    next
    edit "Panda-Antivirus+Firewall-2008-FW"
        set type fw
        set guid "7B090DC0-8905-4BAF-8040-FD98A41C8FB8"
    next
    edit "Panda-Internet-Security-AV"
        set guid "4570FB70-5C9E-47E9-B16C-A3A6A06C4BF0"
    next
    edit "Panda-Internet-Security-2006~2007-FW"
        set type fw
        set guid "4570FB70-5C9E-47E9-B16C-A3A6A06C4BF0"
    next
    edit "Panda-Internet-Security-2008~2009-FW"
        set type fw
        set guid "7B090DC0-8905-4BAF-8040-FD98A41C8FB8"
    next
    edit "Sophos-Anti-Virus"
        set guid "3F13C776-3CBE-4DE9-8BF6-09E5183CA2BD"
    next
    edit "Sophos-Enpoint-Secuirty-and-Control-FW"
        set type fw
        set guid "0786E95E-326A-4524-9691-41EF88FB52EA"
    next
    edit "Sophos-Enpoint-Secuirty-and-Control-AV-Vista-Win7"
        set guid "479CCF92-4960-B3E0-7373-BF453B467D2C"
    next
    edit "Sophos-Enpoint-Secuirty-and-Control-FW-Vista-Win7"
        set type fw
        set guid "7FA74EB7-030F-B2B8-582C-1670C5953A57"
    next
    edit "Trend-Micro-AV"
        set guid "7D2296BC-32CC-4519-917E-52E652474AF5"
    next
    edit "Trend-Micro-FW"
        set type fw
        set guid "3E790E9E-6A5D-4303-A7F9-185EC20F3EB6"
    next
    edit "Trend-Micro-AV-Vista-Win7"
        set guid "48929DFC-7A52-A34F-8351-C4DBEDBD9C50"
    next
    edit "Trend-Micro-FW-Vista-Win7"
        set type fw
        set guid "70A91CD9-303D-A217-A80E-6DEE136EDB2B"
    next
    edit "ZoneAlarm-AV"
        set guid "5D467B10-818C-4CAB-9FF7-6893B5B8F3CF"
    next
    edit "ZoneAlarm-FW"
        set type fw
        set guid "829BDA32-94B3-44F4-8446-F8FCFF809F8B"
    next
    edit "ZoneAlarm-AV-Vista-Win7"
        set guid "D61596DF-D219-341C-49B3-AD30538CBC5B"
    next
    edit "ZoneAlarm-FW-Vista-Win7"
        set type fw
        set guid "EE2E17FA-9876-3544-62EC-0405AD5FFB20"
    next
    edit "ESET-Smart-Security-AV"
        set guid "19259FAE-8396-A113-46DB-15B0E7DFA289"
    next
    edit "ESET-Smart-Security-FW"
        set type fw
        set guid "211E1E8B-C9F9-A04B-6D84-BC85190CE5F2"
    next
end
config vpn ssl web portal
    edit "E2C-Hubgrade-JiaYi-VPN-Portal"
        set tunnel-mode enable
        set ipv6-tunnel-mode enable
        set web-mode enable
        set ip-pools "SSLVPN_TUNNEL_ADDR1"
        set ipv6-pools "SSLVPN_TUNNEL_IPv6_ADDR1"
        config bookmark-group
            edit "gui-bookmarks"
                config bookmarks
                    edit "Firewall"
                        set url "https://192.168.32.1:8443"
                    next
                    edit "Hubgrade"
                        set url "https://twjy.tahoho.com.tw"
                    next
                end
            next
        end
        set heading "E2C-Hubgrade-JiaYi-VPN-Portal"
    next
end
config vpn ssl settings
    set servercert "wildcard.tahoho.com.tw"
    set tunnel-ip-pools "AzureS2SVPN_local_subnet"
    set source-interface "wan"
    set source-address "all"
    set source-address6 "all"
    set default-portal "E2C-Hubgrade-JiaYi-VPN-Portal"
    config authentication-rule
        edit 1
            set groups "RemoteUserGroup"
            set portal "E2C-Hubgrade-JiaYi-VPN-Portal"
        next
    end
end
config vpn ssl web user-bookmark
    edit "godelchen#RemoteUserGroup"
        config bookmarks
            edit "U2484"
                set apptype rdp
                set description "U2484"
                set host "192.167.3.110"
                set port 3389
                set logon-user "godelchen"
                set logon-password ENC ZvJcCYRlJUYX7KCPjhEAtvOyMB11n+v1KeYEz4/Nx0YuimNu8mXeI2LFJH2p9E0UFksP2bWf/OB7u42F/YHHuL4/dN4as045KWpkkojYWQEd+oLQsOZVW7DORFEWsos/ESblQGdh/4535IG3oUG+uUBuDS7BXNXI6X+Hmp5LfBbxYyVPlW9EBj1bU5ky8ZyWW6d10g==
            next
            edit "E2C Hubgrade FireWall"
                set description "E2C Hubgrade FireWall"
                set url "https://192.167.3.99"
            next
        end
    next
    edit "itservice#RemoteUserGroup"
    next
end
config voip profile
    edit "default"
        set comment "Default VoIP profile."
    next
    edit "strict"
        config sip
            set malformed-request-line discard
            set malformed-header-via discard
            set malformed-header-from discard
            set malformed-header-to discard
            set malformed-header-call-id discard
            set malformed-header-cseq discard
            set malformed-header-rack discard
            set malformed-header-rseq discard
            set malformed-header-contact discard
            set malformed-header-record-route discard
            set malformed-header-route discard
            set malformed-header-expires discard
            set malformed-header-content-type discard
            set malformed-header-content-length discard
            set malformed-header-max-forwards discard
            set malformed-header-allow discard
            set malformed-header-p-asserted-identity discard
            set malformed-header-sdp-v discard
            set malformed-header-sdp-o discard
            set malformed-header-sdp-s discard
            set malformed-header-sdp-i discard
            set malformed-header-sdp-c discard
            set malformed-header-sdp-b discard
            set malformed-header-sdp-z discard
            set malformed-header-sdp-k discard
            set malformed-header-sdp-a discard
            set malformed-header-sdp-t discard
            set malformed-header-sdp-r discard
            set malformed-header-sdp-m discard
        end
    next
end
config dnsfilter profile
    edit "default"
        set comment "Default dns filtering."
        config ftgd-dns
            config filters
                edit 1
                    set category 2
                next
                edit 2
                    set category 7
                next
                edit 3
                    set category 8
                next
                edit 4
                    set category 9
                next
                edit 5
                    set category 11
                next
                edit 6
                    set category 12
                next
                edit 7
                    set category 13
                next
                edit 8
                    set category 14
                next
                edit 9
                    set category 15
                next
                edit 10
                    set category 16
                next
                edit 11
                next
                edit 12
                    set category 57
                next
                edit 13
                    set category 63
                next
                edit 14
                    set category 64
                next
                edit 15
                    set category 65
                next
                edit 16
                    set category 66
                next
                edit 17
                    set category 67
                next
                edit 18
                    set category 26
                    set action block
                next
                edit 19
                    set category 61
                    set action block
                next
                edit 20
                    set category 86
                    set action block
                next
                edit 21
                    set category 88
                    set action block
                next
                edit 22
                    set category 90
                    set action block
                next
                edit 23
                    set category 91
                    set action block
                next
            end
        end
        set block-botnet enable
    next
end
config antivirus settings
    set grayware enable
end
config antivirus profile
    edit "default"
        set comment "Scan files and block viruses."
        config http
            set options scan
        end
        config ftp
            set options scan
        end
        config imap
            set options scan
            set executables virus
        end
        config pop3
            set options scan
            set executables virus
        end
        config smtp
            set options scan
            set executables virus
        end
    next
    edit "sniffer-profile"
        set comment "Scan files and monitor viruses."
        config http
            set options scan
        end
        config ftp
            set options scan
        end
        config imap
            set options scan
            set executables virus
        end
        config pop3
            set options scan
            set executables virus
        end
        config smtp
            set options scan
            set executables virus
        end
    next
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        config http
            set options scan
        end
        config ftp
            set options scan
        end
        config imap
            set options scan
            set executables virus
        end
        config pop3
            set options scan
            set executables virus
        end
        config smtp
            set options scan
            set executables virus
        end
    next
end
config webfilter profile
    edit "default"
        set comment "Default web filtering."
        config ftgd-wf
            unset options
            config filters
                edit 1
                    set action block
                next
                edit 2
                    set category 2
                    set action block
                next
                edit 3
                    set category 7
                    set action block
                next
                edit 4
                    set category 8
                    set action block
                next
                edit 5
                    set category 9
                    set action block
                next
                edit 6
                    set category 11
                    set action block
                next
                edit 7
                    set category 12
                    set action block
                next
                edit 8
                    set category 13
                    set action block
                next
                edit 9
                    set category 14
                    set action block
                next
                edit 10
                    set category 15
                    set action block
                next
                edit 11
                    set category 16
                    set action block
                next
                edit 12
                    set category 26
                    set action block
                next
                edit 13
                    set category 57
                    set action block
                next
                edit 14
                    set category 61
                    set action block
                next
                edit 15
                    set category 63
                    set action block
                next
                edit 16
                    set category 64
                    set action block
                next
                edit 17
                    set category 65
                    set action block
                next
                edit 18
                    set category 66
                    set action block
                next
                edit 19
                    set category 67
                    set action block
                next
                edit 20
                    set category 86
                    set action block
                next
                edit 21
                    set category 88
                    set action block
                next
                edit 22
                    set category 90
                    set action block
                next
                edit 23
                    set category 91
                    set action block
                next
            end
        end
    next
    edit "sniffer-profile"
        set comment "Monitor web traffic."
        config ftgd-wf
            config filters
                edit 1
                next
                edit 2
                    set category 1
                next
                edit 3
                    set category 2
                next
                edit 4
                    set category 3
                next
                edit 5
                    set category 4
                next
                edit 6
                    set category 5
                next
                edit 7
                    set category 6
                next
                edit 8
                    set category 7
                next
                edit 9
                    set category 8
                next
                edit 10
                    set category 9
                next
                edit 11
                    set category 11
                next
                edit 12
                    set category 12
                next
                edit 13
                    set category 13
                next
                edit 14
                    set category 14
                next
                edit 15
                    set category 15
                next
                edit 16
                    set category 16
                next
                edit 17
                    set category 17
                next
                edit 18
                    set category 18
                next
                edit 19
                    set category 19
                next
                edit 20
                    set category 20
                next
                edit 21
                    set category 23
                next
                edit 22
                    set category 24
                next
                edit 23
                    set category 25
                next
                edit 24
                    set category 26
                next
                edit 25
                    set category 28
                next
                edit 26
                    set category 29
                next
                edit 27
                    set category 30
                next
                edit 28
                    set category 31
                next
                edit 29
                    set category 33
                next
                edit 30
                    set category 34
                next
                edit 31
                    set category 35
                next
                edit 32
                    set category 36
                next
                edit 33
                    set category 37
                next
                edit 34
                    set category 38
                next
                edit 35
                    set category 39
                next
                edit 36
                    set category 40
                next
                edit 37
                    set category 41
                next
                edit 38
                    set category 42
                next
                edit 39
                    set category 43
                next
                edit 40
                    set category 44
                next
                edit 41
                    set category 46
                next
                edit 42
                    set category 47
                next
                edit 43
                    set category 48
                next
                edit 44
                    set category 49
                next
                edit 45
                    set category 50
                next
                edit 46
                    set category 51
                next
                edit 47
                    set category 52
                next
                edit 48
                    set category 53
                next
                edit 49
                    set category 54
                next
                edit 50
                    set category 55
                next
                edit 51
                    set category 56
                next
                edit 52
                    set category 57
                next
                edit 53
                    set category 58
                next
                edit 54
                    set category 59
                next
                edit 55
                    set category 61
                next
                edit 56
                    set category 62
                next
                edit 57
                    set category 63
                next
                edit 58
                    set category 64
                next
                edit 59
                    set category 65
                next
                edit 60
                    set category 66
                next
                edit 61
                    set category 67
                next
                edit 62
                    set category 68
                next
                edit 63
                    set category 69
                next
                edit 64
                    set category 70
                next
                edit 65
                    set category 71
                next
                edit 66
                    set category 72
                next
                edit 67
                    set category 75
                next
                edit 68
                    set category 76
                next
                edit 69
                    set category 77
                next
                edit 70
                    set category 78
                next
                edit 71
                    set category 79
                next
                edit 72
                    set category 80
                next
                edit 73
                    set category 81
                next
                edit 74
                    set category 82
                next
                edit 75
                    set category 83
                next
                edit 76
                    set category 84
                next
                edit 77
                    set category 85
                next
                edit 78
                    set category 86
                next
                edit 79
                    set category 87
                next
                edit 80
                    set category 88
                next
                edit 81
                    set category 89
                next
                edit 82
                    set category 90
                next
                edit 83
                    set category 91
                next
                edit 84
                    set category 92
                next
                edit 85
                    set category 93
                next
                edit 86
                    set category 94
                next
                edit 87
                    set category 95
                next
            end
        end
    next
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        set options block-invalid-url
        config ftgd-wf
            unset options
            config filters
                edit 1
                next
                edit 2
                    set category 2
                    set action block
                next
                edit 3
                    set category 7
                    set action block
                next
                edit 4
                    set category 8
                    set action block
                next
                edit 5
                    set category 9
                    set action block
                next
                edit 6
                    set category 11
                    set action block
                next
                edit 7
                    set category 12
                    set action block
                next
                edit 8
                    set category 13
                    set action block
                next
                edit 9
                    set category 14
                    set action block
                next
                edit 10
                    set category 15
                    set action block
                next
                edit 11
                    set category 16
                    set action block
                next
                edit 12
                    set category 26
                    set action block
                next
                edit 13
                    set category 57
                    set action block
                next
                edit 14
                    set category 61
                    set action block
                next
                edit 15
                    set category 63
                    set action block
                next
                edit 16
                    set category 64
                    set action block
                next
                edit 17
                    set category 65
                    set action block
                next
                edit 18
                    set category 66
                    set action block
                next
                edit 19
                    set category 67
                    set action block
                next
                edit 20
                    set category 86
                    set action block
                next
                edit 21
                    set category 88
                    set action block
                next
                edit 22
                    set category 90
                    set action block
                next
                edit 23
                    set category 91
                    set action block
                next
            end
        end
    next
    edit "monitor-all"
        set comment "Monitor and log all visited URLs, flow-based."
        config ftgd-wf
            unset options
            config filters
                edit 1
                    set category 1
                next
                edit 2
                    set category 3
                next
                edit 3
                    set category 4
                next
                edit 4
                    set category 5
                next
                edit 5
                    set category 6
                next
                edit 6
                    set category 12
                next
                edit 7
                    set category 59
                next
                edit 8
                    set category 62
                next
                edit 9
                    set category 83
                next
                edit 10
                    set category 2
                next
                edit 11
                    set category 7
                next
                edit 12
                    set category 8
                next
                edit 13
                    set category 9
                next
                edit 14
                    set category 11
                next
                edit 15
                    set category 13
                next
                edit 16
                    set category 14
                next
                edit 17
                    set category 15
                next
                edit 18
                    set category 16
                next
                edit 19
                    set category 57
                next
                edit 20
                    set category 63
                next
                edit 21
                    set category 64
                next
                edit 22
                    set category 65
                next
                edit 23
                    set category 66
                next
                edit 24
                    set category 67
                next
                edit 25
                    set category 19
                next
                edit 26
                    set category 24
                next
                edit 27
                    set category 25
                next
                edit 28
                    set category 72
                next
                edit 29
                    set category 75
                next
                edit 30
                    set category 76
                next
                edit 31
                    set category 26
                next
                edit 32
                    set category 61
                next
                edit 33
                    set category 86
                next
                edit 34
                    set category 17
                next
                edit 35
                    set category 18
                next
                edit 36
                    set category 20
                next
                edit 37
                    set category 23
                next
                edit 38
                    set category 28
                next
                edit 39
                    set category 29
                next
                edit 40
                    set category 30
                next
                edit 41
                    set category 33
                next
                edit 42
                    set category 34
                next
                edit 43
                    set category 35
                next
                edit 44
                    set category 36
                next
                edit 45
                    set category 37
                next
                edit 46
                    set category 38
                next
                edit 47
                    set category 39
                next
                edit 48
                    set category 40
                next
                edit 49
                    set category 42
                next
                edit 50
                    set category 44
                next
                edit 51
                    set category 46
                next
                edit 52
                    set category 47
                next
                edit 53
                    set category 48
                next
                edit 54
                    set category 54
                next
                edit 55
                    set category 55
                next
                edit 56
                    set category 58
                next
                edit 57
                    set category 68
                next
                edit 58
                    set category 69
                next
                edit 59
                    set category 70
                next
                edit 60
                    set category 71
                next
                edit 61
                    set category 77
                next
                edit 62
                    set category 78
                next
                edit 63
                    set category 79
                next
                edit 64
                    set category 80
                next
                edit 65
                    set category 82
                next
                edit 66
                    set category 85
                next
                edit 67
                    set category 87
                next
                edit 68
                    set category 31
                next
                edit 69
                    set category 41
                next
                edit 70
                    set category 43
                next
                edit 71
                    set category 49
                next
                edit 72
                    set category 50
                next
                edit 73
                    set category 51
                next
                edit 74
                    set category 52
                next
                edit 75
                    set category 53
                next
                edit 76
                    set category 56
                next
                edit 77
                    set category 81
                next
                edit 78
                    set category 84
                next
                edit 79
                next
                edit 80
                    set category 88
                next
                edit 81
                    set category 89
                next
                edit 82
                    set category 90
                next
                edit 83
                    set category 91
                next
                edit 84
                    set category 92
                next
                edit 85
                    set category 93
                next
                edit 86
                    set category 94
                next
                edit 87
                    set category 95
                next
            end
        end
        set log-all-url enable
        set web-content-log disable
        set web-filter-activex-log disable
        set web-filter-command-block-log disable
        set web-filter-cookie-log disable
        set web-filter-applet-log disable
        set web-filter-jscript-log disable
        set web-filter-js-log disable
        set web-filter-vbs-log disable
        set web-filter-unknown-log disable
        set web-filter-referer-log disable
        set web-filter-cookie-removal-log disable
        set web-url-log disable
        set web-invalid-domain-log disable
        set web-ftgd-err-log disable
        set web-ftgd-quota-usage disable
    next
end
config webfilter search-engine
    edit "google"
        set hostname ".*\\.google\\..*"
        set url "^\\/((custom|search|images|videosearch|webhp)\\?)"
        set query "q="
        set safesearch url
        set safesearch-str "&safe=active"
    next
    edit "yahoo"
        set hostname ".*\\.yahoo\\..*"
        set url "^\\/search(\\/video|\\/images){0,1}(\\?|;)"
        set query "p="
        set safesearch url
        set safesearch-str "&vm=r"
    next
    edit "bing"
        set hostname ".*\\.bing\\..*"
        set url "^(\\/images|\\/videos)?(\\/search|\\/async|\\/asyncv2)\\?"
        set query "q="
        set safesearch header
    next
    edit "yandex"
        set hostname "yandex\\..*"
        set url "^\\/((yand|images\\/|video\\/)(search)|search\\/)\\?"
        set query "text="
        set safesearch url
        set safesearch-str "&family=yes"
    next
    edit "youtube"
        set hostname ".*youtube.*"
        set safesearch header
    next
    edit "baidu"
        set hostname ".*\\.baidu\\.com"
        set url "^\\/s?\\?"
        set query "wd="
    next
    edit "baidu2"
        set hostname ".*\\.baidu\\.com"
        set url "^\\/(ns|q|m|i|v)\\?"
        set query "word="
    next
    edit "baidu3"
        set hostname "tieba\\.baidu\\.com"
        set url "^\\/f\\?"
        set query "kw="
    next
end
config emailfilter profile
    edit "sniffer-profile"
        set comment "Malware and phishing URL monitoring."
    next
    edit "default"
        set comment "Malware and phishing URL filtering."
    next
end
config system virtual-wan-link
    config health-check
        edit "Default_Office_365"
            set server "www.office.com"
            set protocol http
            set interval 1000
            set recoverytime 10
            config sla
                edit 1
                    set latency-threshold 250
                    set jitter-threshold 50
                    set packetloss-threshold 5
                next
            end
        next
        edit "Default_Gmail"
            set server "gmail.com"
            set interval 1000
            set recoverytime 10
            config sla
                edit 1
                    set latency-threshold 250
                    set jitter-threshold 50
                    set packetloss-threshold 2
                next
            end
        next
        edit "Default_AWS"
            set server "aws.amazon.com"
            set protocol http
            set interval 1000
            set recoverytime 10
            config sla
                edit 1
                    set latency-threshold 250
                    set jitter-threshold 50
                    set packetloss-threshold 5
                next
            end
        next
        edit "Default_Google Search"
            set server "www.google.com"
            set protocol http
            set interval 1000
            set recoverytime 10
            config sla
                edit 1
                    set latency-threshold 250
                    set jitter-threshold 50
                    set packetloss-threshold 5
                next
            end
        next
        edit "Default_FortiGuard"
            set server "fortiguard.com"
            set protocol http
            set interval 1000
            set recoverytime 10
            config sla
                edit 1
                    set latency-threshold 250
                    set jitter-threshold 50
                    set packetloss-threshold 5
                next
            end
        next
    end
end
config firewall schedule recurring
    edit "always"
        set day sunday monday tuesday wednesday thursday friday saturday
    next
    edit "none"
    next
    edit "default-darrp-optimize"
        set start 01:00
        set end 01:30
        set day sunday monday tuesday wednesday thursday friday saturday
    next
end
config firewall vip
    edit "Hubgrade-Port-49320"
        set uuid 2302020e-ac08-51ec-a763-dd644375d642
        set extip 61.216.60.230
        set extintf "any"
        set portforward enable
        set mappedip "192.167.3.110"
        set extport 49320
        set mappedport 49320
    next
    edit "Hubgrade-port-1883"
        set uuid e42c1b2e-4936-51ed-48d9-3c7359845c7b
        set extip 61.216.60.230
        set extintf "any"
        set portforward enable
        set mappedip "192.167.3.110"
        set extport 1883
        set mappedport 1883
    next
end
config firewall profile-protocol-options
    edit "default"
        set comment "All default services."
        config http
            set ports 80
            unset options
            unset post-lang
        end
        config ftp
            set ports 21
            set options splice
        end
        config imap
            set ports 143
            set options fragmail
        end
        config mapi
            set ports 135
            set options fragmail
        end
        config pop3
            set ports 110
            set options fragmail
        end
        config smtp
            set ports 25
            set options fragmail splice
        end
        config nntp
            set ports 119
            set options splice
        end
        config ssh
            unset options
        end
        config dns
            set ports 53
        end
        config cifs
            set ports 445
        end
    next
end
config firewall ssl-ssh-profile
    edit "deep-inspection"
        set comment "Read-only deep inspection profile."
        config https
            set ports 443
            set status deep-inspection
        end
        config ftps
            set ports 990
            set status deep-inspection
        end
        config imaps
            set ports 993
            set status deep-inspection
        end
        config pop3s
            set ports 995
            set status deep-inspection
        end
        config smtps
            set ports 465
            set status deep-inspection
        end
        config ssh
            set ports 22
            set status disable
        end
        config ssl-exempt
            edit 1
                set fortiguard-category 31
            next
            edit 2
                set fortiguard-category 33
            next
            edit 3
                set type wildcard-fqdn
                set wildcard-fqdn "adobe"
            next
            edit 4
                set type wildcard-fqdn
                set wildcard-fqdn "Adobe Login"
            next
            edit 5
                set type wildcard-fqdn
                set wildcard-fqdn "android"
            next
            edit 6
                set type wildcard-fqdn
                set wildcard-fqdn "apple"
            next
            edit 7
                set type wildcard-fqdn
                set wildcard-fqdn "appstore"
            next
            edit 8
                set type wildcard-fqdn
                set wildcard-fqdn "auth.gfx.ms"
            next
            edit 9
                set type wildcard-fqdn
                set wildcard-fqdn "citrix"
            next
            edit 10
                set type wildcard-fqdn
                set wildcard-fqdn "dropbox.com"
            next
            edit 11
                set type wildcard-fqdn
                set wildcard-fqdn "eease"
            next
            edit 12
                set type wildcard-fqdn
                set wildcard-fqdn "firefox update server"
            next
            edit 13
                set type wildcard-fqdn
                set wildcard-fqdn "fortinet"
            next
            edit 14
                set type wildcard-fqdn
                set wildcard-fqdn "googleapis.com"
            next
            edit 15
                set type wildcard-fqdn
                set wildcard-fqdn "google-drive"
            next
            edit 16
                set type wildcard-fqdn
                set wildcard-fqdn "google-play2"
            next
            edit 17
                set type wildcard-fqdn
                set wildcard-fqdn "google-play3"
            next
            edit 18
                set type wildcard-fqdn
                set wildcard-fqdn "Gotomeeting"
            next
            edit 19
                set type wildcard-fqdn
                set wildcard-fqdn "icloud"
            next
            edit 20
                set type wildcard-fqdn
                set wildcard-fqdn "itunes"
            next
            edit 21
                set type wildcard-fqdn
                set wildcard-fqdn "microsoft"
            next
            edit 22
                set type wildcard-fqdn
                set wildcard-fqdn "skype"
            next
            edit 23
                set type wildcard-fqdn
                set wildcard-fqdn "softwareupdate.vmware.com"
            next
            edit 24
                set type wildcard-fqdn
                set wildcard-fqdn "verisign"
            next
            edit 25
                set type wildcard-fqdn
                set wildcard-fqdn "Windows update 2"
            next
            edit 26
                set type wildcard-fqdn
                set wildcard-fqdn "live.com"
            next
            edit 27
                set type wildcard-fqdn
                set wildcard-fqdn "google-play"
            next
            edit 28
                set type wildcard-fqdn
                set wildcard-fqdn "update.microsoft.com"
            next
            edit 29
                set type wildcard-fqdn
                set wildcard-fqdn "swscan.apple.com"
            next
            edit 30
                set type wildcard-fqdn
                set wildcard-fqdn "autoupdate.opera.com"
            next
        end
    next
    edit "custom-deep-inspection"
        set comment "Customizable deep inspection profile."
        config https
            set ports 443
            set status deep-inspection
        end
        config ftps
            set ports 990
            set status deep-inspection
        end
        config imaps
            set ports 993
            set status deep-inspection
        end
        config pop3s
            set ports 995
            set status deep-inspection
        end
        config smtps
            set ports 465
            set status deep-inspection
        end
        config ssh
            set ports 22
            set status disable
        end
        config ssl-exempt
            edit 1
                set fortiguard-category 31
            next
            edit 2
                set fortiguard-category 33
            next
            edit 3
                set type wildcard-fqdn
                set wildcard-fqdn "adobe"
            next
            edit 4
                set type wildcard-fqdn
                set wildcard-fqdn "Adobe Login"
            next
            edit 5
                set type wildcard-fqdn
                set wildcard-fqdn "android"
            next
            edit 6
                set type wildcard-fqdn
                set wildcard-fqdn "apple"
            next
            edit 7
                set type wildcard-fqdn
                set wildcard-fqdn "appstore"
            next
            edit 8
                set type wildcard-fqdn
                set wildcard-fqdn "auth.gfx.ms"
            next
            edit 9
                set type wildcard-fqdn
                set wildcard-fqdn "citrix"
            next
            edit 10
                set type wildcard-fqdn
                set wildcard-fqdn "dropbox.com"
            next
            edit 11
                set type wildcard-fqdn
                set wildcard-fqdn "eease"
            next
            edit 12
                set type wildcard-fqdn
                set wildcard-fqdn "firefox update server"
            next
            edit 13
                set type wildcard-fqdn
                set wildcard-fqdn "fortinet"
            next
            edit 14
                set type wildcard-fqdn
                set wildcard-fqdn "googleapis.com"
            next
            edit 15
                set type wildcard-fqdn
                set wildcard-fqdn "google-drive"
            next
            edit 16
                set type wildcard-fqdn
                set wildcard-fqdn "google-play2"
            next
            edit 17
                set type wildcard-fqdn
                set wildcard-fqdn "google-play3"
            next
            edit 18
                set type wildcard-fqdn
                set wildcard-fqdn "Gotomeeting"
            next
            edit 19
                set type wildcard-fqdn
                set wildcard-fqdn "icloud"
            next
            edit 20
                set type wildcard-fqdn
                set wildcard-fqdn "itunes"
            next
            edit 21
                set type wildcard-fqdn
                set wildcard-fqdn "microsoft"
            next
            edit 22
                set type wildcard-fqdn
                set wildcard-fqdn "skype"
            next
            edit 23
                set type wildcard-fqdn
                set wildcard-fqdn "softwareupdate.vmware.com"
            next
            edit 24
                set type wildcard-fqdn
                set wildcard-fqdn "verisign"
            next
            edit 25
                set type wildcard-fqdn
                set wildcard-fqdn "Windows update 2"
            next
            edit 26
                set type wildcard-fqdn
                set wildcard-fqdn "live.com"
            next
            edit 27
                set type wildcard-fqdn
                set wildcard-fqdn "google-play"
            next
            edit 28
                set type wildcard-fqdn
                set wildcard-fqdn "update.microsoft.com"
            next
            edit 29
                set type wildcard-fqdn
                set wildcard-fqdn "swscan.apple.com"
            next
            edit 30
                set type wildcard-fqdn
                set wildcard-fqdn "autoupdate.opera.com"
            next
        end
    next
    edit "no-inspection"
        set comment "Read-only profile that does no inspection."
        config https
            set status disable
        end
        config ftps
            set status disable
        end
        config imaps
            set status disable
        end
        config pop3s
            set status disable
        end
        config smtps
            set status disable
        end
        config ssh
            set ports 22
            set status disable
        end
    next
    edit "certificate-inspection"
        set comment "Read-only SSL handshake inspection profile."
        config https
            set ports 443
            set status certificate-inspection
        end
        config ftps
            set status disable
        end
        config imaps
            set status disable
        end
        config pop3s
            set status disable
        end
        config smtps
            set status disable
        end
        config ssh
            set ports 22
            set status disable
        end
    next
end
config waf profile
    edit "default"
        config signature
            config main-class 100000000
                set action block
                set log disable
                set severity high
            end
            config main-class 20000000
                set log disable
            end
            config main-class 30000000
                set status enable
                set action block
                set log disable
                set severity high
            end
            config main-class 40000000
                set log disable
            end
            config main-class 50000000
                set status enable
                set action block
                set log disable
                set severity high
            end
            config main-class 60000000
                set log disable
            end
            config main-class 70000000
                set status enable
                set action block
                set log disable
                set severity high
            end
            config main-class 80000000
                set status enable
                set log disable
                set severity low
            end
            config main-class 110000000
                set status enable
                set log disable
                set severity high
            end
            config main-class 90000000
                set status enable
                set action block
                set log disable
                set severity high
            end
            set disabled-signature 80080005 80200001 60030001 60120001 80080003 90410001 90410002
        end
        config constraint
            config header-length
                set status enable
                set log enable
                set severity low
            end
            config content-length
                set status enable
                set log enable
                set severity low
            end
            config param-length
                set status enable
                set log enable
                set severity low
            end
            config line-length
                set status enable
                set log enable
                set severity low
            end
            config url-param-length
                set status enable
                set log enable
                set severity low
            end
            config version
                set log enable
            end
            config method
                set action block
                set log enable
            end
            config hostname
                set action block
                set log enable
            end
            config malformed
                set log enable
            end
            config max-cookie
                set status enable
                set log enable
                set severity low
            end
            config max-header-line
                set status enable
                set log enable
                set severity low
            end
            config max-url-param
                set status enable
                set log enable
                set severity low
            end
            config max-range-segment
                set status enable
                set log enable
                set severity high
            end
        end
    next
end
config firewall policy
    edit 2
        set name "UA access"
        set uuid ead8365c-ac14-51ec-a98b-97ea6d1d57f6
        set srcintf "wan"
        set dstintf "lan"
        set srcaddr "all"
        set dstaddr "Hubgrade-Port-49320"
        set action accept
        set schedule "always"
        set service "OPC UA"
        set utm-status enable
        set ssl-ssh-profile "certificate-inspection"
        set av-profile "default"
        set nat enable
    next
    edit 5
        set name "E2C"
        set uuid 216dc99a-1d2e-51ed-a5ca-c1dc2aea8dec
        set srcintf "lan"
        set dstintf "wan"
        set srcaddr "IT component"
        set dstaddr "AWS" "GCP" "Git" "AWS1" "AWS2"
        set action accept
        set schedule "always"
        set service "HTTP" "HTTPS"
        set utm-status enable
        set ssl-ssh-profile "certificate-inspection"
        set av-profile "default"
        set nat enable
    next
    edit 6
        set name "DNS"
        set uuid 613ff1dc-1d2f-51ed-8827-981d49d22e56
        set srcintf "lan"
        set dstintf "wan"
        set srcaddr "all"
        set dstaddr "all"
        set action accept
        set schedule "always"
        set service "DNS"
        set utm-status enable
        set ssl-ssh-profile "certificate-inspection"
        set av-profile "default"
        set nat enable
    next
    edit 7
        set name "Anydesk"
        set uuid a8b2d8cc-1d2f-51ed-5fbd-e24764b3ce05
        set srcintf "lan"
        set dstintf "wan"
        set srcaddr "IT component"
        set dstaddr "Anydesk"
        set action accept
        set schedule "always"
        set service "HTTPS"
        set ssl-ssh-profile "certificate-inspection"
        set nat enable
    next
    edit 8
        set name "MQTT"
        set uuid 5709ecec-327c-51ed-51c0-ac0064610f60
        set srcintf "lan"
        set dstintf "wan"
        set srcaddr "IT component"
        set dstaddr "all"
        set action accept
        set schedule "always"
        set service "OPC UA" "MQTT"
        set nat enable
    next
    edit 9
        set name "E2C-Hubgrde-Firewall-VPN-Policy"
        set uuid fc05c934-445e-51ed-61fc-cf2948db03aa
        set srcintf "ssl.root"
        set dstintf "lan"
        set srcaddr "all"
        set dstaddr "lan"
        set action accept
        set status disable
        set schedule "always"
        set service "ALL"
        set groups "RemoteUserGroup"
        set nat enable
    next
    edit 10
        set name "GLPI"
        set uuid b4773b3c-6c60-51ed-783a-dda3d686ce2b
        set srcintf "lan"
        set dstintf "wan"
        set srcaddr "IT component"
        set dstaddr "GLPI-Server"
        set action accept
        set schedule "always"
        set service "HTTP" "HTTPS"
        set utm-status enable
        set ssl-ssh-profile "certificate-inspection"
        set av-profile "default"
        set nat enable
    next
    edit 11
        set name "Advantech-Outward-To-DCCS-Server"
        set uuid 82359436-8b12-51ed-e38e-763c83ce9014
        set srcintf "lan"
        set dstintf "wan"
        set srcaddr "IT component"
        set dstaddr "Advantech_MQTT Broker_DCCS Server"
        set action accept
        set schedule "always"
        set service "HTTP" "HTTPS"
        set utm-status enable
        set ssl-ssh-profile "certificate-inspection"
        set av-profile "default"
        set nat enable
    next
    edit 13
        set name "Advantech-Outward-To-MQTT-Broker"
        set uuid 134198c6-8b13-51ed-acc7-6690303deb7c
        set srcintf "lan"
        set dstintf "wan"
        set srcaddr "IT component"
        set dstaddr "Advantech-MQTT-Broker"
        set action accept
        set schedule "always"
        set service "HTTP" "HTTPS" "Advantech-Testing-MQTT-8883"
        set utm-status enable
        set ssl-ssh-profile "certificate-inspection"
        set av-profile "default"
        set nat enable
    next
    edit 14
        set name "Advantech-Inward-To-DCCS-Server"
        set uuid 4861d12e-8b13-51ed-9c06-1cb14276fd19
        set srcintf "wan"
        set dstintf "lan"
        set srcaddr "Advantech_MQTT Broker_DCCS Server"
        set dstaddr "IT component"
        set action accept
        set schedule "always"
        set service "HTTP" "HTTPS"
        set utm-status enable
        set ssl-ssh-profile "certificate-inspection"
        set av-profile "default"
        set nat enable
    next
    edit 15
        set name "Advantech-Inward-To-MQTT-Broker"
        set uuid 77ed7c7c-8b13-51ed-1d5f-b7c08b501bc5
        set srcintf "wan"
        set dstintf "lan"
        set srcaddr "Advantech-MQTT-Broker"
        set dstaddr "IT component"
        set action accept
        set schedule "always"
        set service "HTTP" "HTTPS" "Advantech-Testing-MQTT-8883"
        set utm-status enable
        set ssl-ssh-profile "certificate-inspection"
        set av-profile "default"
        set nat enable
    next
    edit 12
        set name "E2C Gmail Alarm"
        set uuid d9bb4206-ed77-51ed-d396-1b4e46966c8d
        set srcintf "lan"
        set dstintf "wan"
        set srcaddr "IT component"
        set dstaddr "gmail smtp"
        set action accept
        set schedule "always"
        set service "gmail"
        set utm-status enable
        set ssl-ssh-profile "certificate-inspection"
        set av-profile "default"
        set nat enable
    next
    edit 16
        set name "E2C U2484 to NTP Server"
        set uuid 5a041b18-3b11-51ee-a55c-032a4f76b285
        set srcintf "lan"
        set dstintf "wan"
        set srcaddr "IT component"
        set dstaddr "time.google.com" "time.windows.com" "tw.ntp.org.cn"
        set action accept
        set schedule "always"
        set service "NTP"
        set utm-status enable
        set ssl-ssh-profile "certificate-inspection"
        set av-profile "default"
        set nat enable
    next
    edit 17
        set name "E2C MQTT"
        set uuid 056a1484-b0fc-51ee-5ac9-39366064e3bf
        set srcintf "lan"
        set dstintf "wan"
        set srcaddr "IT component"
        set dstaddr "Cloud Scada" "Cloud Scada2"
        set action accept
        set schedule "always"
        set service "MQTT"
        set utm-status enable
        set ssl-ssh-profile "certificate-inspection"
        set av-profile "default"
        set application-list "default"
        set nat enable
    next
end
config firewall ssh local-key
    edit "Fortinet_SSH_RSA2048"
        set password ENC k2ME4ORMTZCWmlQvab5uU+V8iSgQ5t9rPBzX46i5BZU6CnJi7ZKE3WKubSAdNZcfcXzjE8sWrJfYByC5E8lntPvbkY/kw9Zu7a5XCi/pUBXenfEWOPqR0vRiqb8AaLiM05+IkaClu2pNiOC0GP8ZuvgNsZw1O2nt+mL+xICXKA8oZXNiKax1yMUKSUvF5AuWQjoNmQ==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhhDji7ZZ82xSVKiKVGF6PVKkKrQI36RSkp7k9uP2LpYwZR20N5F0FOaH4CxUzbt8Swbmj/HoZX+qiSEDoxQUSu7bME1UAi11Lr72Ipcc22hHCT/itT1mrHiWSiLqGpmQrj9ymL+/9ozwzIoDMspZx6Vu+2RE358UUm46P23hbX6bkYkK1YrzZfapVVhwGwM/IwQFFWI1iavXsfbGhEpSf/DSpQ2wzJtazq08msJCHTniPNGiZWoVqyavm0FJF0Aa84G2Mo0AAH/PF5Uo5dak/P04YsV/pP0uRojZpcVn9uVjyReQHb/RWkanwNiNaX+YeoEetLD+LRvbdHiXYJfgb"
        set source built-in
    next
    edit "Fortinet_SSH_DSA1024"
        set password ENC k2ME4GK3Y226RxwPIB+s6rM5v51zm+nv51uzXrfJYrLqQiOXkC94ihfhYpX4IYgJwAJFT53Mc/QCCu15W48/vw/vWIMyj0jxw1qzUqTFi6CbDfDhh8jeoBHVXtertonQZ0qbUAoP/h0lKwdiIEH12fSpULgitWQ3fS5KrCxya4qmpTzUBYUEX77DQUxTJ/1BHXyQAA==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABDYTyT2eq
Txu/Je5cSpmWcoAAAAEAAAAAEAAAGyAAAAB3NzaC1kc3MAAACBAJJjbxnS2+MuAf5iQ2Ea
DHTuBketGLe4Y7/k5aQXEJw9d1SvndcTCy8nYA4gSVS3BMz0zGl3qHmgoNZtkFfSWSf3xw
3SsmK9BNP+kW4hdax00qKLt7SC7WCRDRTBCaZdCXucB9cq6VWhSb4U4vXEW/Z5weKgqJqs
QFghJduDkSu3AAAAFQC1OHEBctoh4j3qoF7OhMCzi8ZRywAAAIEAkEvKwAJWP+qvqx2dHD
2oROgDujKBrqYbdUlG3+Sl7Qp9UxYucrZBzps7Wbfc45y79duq/zVWKnkhNVrEUgwDSY0U
aUD4j0GYM0j0LUzBVRNebxScjWeizMy+6aFTwrG3SkBunrt2C7AoR/AYC+aTaNPCj3FyaY
N0XeXNDfnCsUwAAACARj9SQC9fd2Vlhn7lgrqpYI7k0trCmQHPlTAflgCiNOsh08uZRSOI
61i0PMKKvDEewz15vsm/1rVsayCUSRPwcQiYuBk2qrC1KJHhURnsft7feNZuvpnrWn5M44
jn8mbfLbPTBJpQDDk+CVuk+WxpjgI9H0cO5ohHY4IjJQe3TToAAAHgOpBslOQ3NflITsMY
OuqpBvH2obR5/w+FGSrQ3QYYUxvZXedXPsbvkn1hQ1IGfb1WIL6X41oxXkDrDavT1HqZLf
KQSj8pTXyOZ4acun5aN8R4DXPZ7rXDOsFQelSRvS9B0IvMn3+vjKeFdUjGEd4xPTneWXxl
6ci2Em1ed2bpg/X+cRzgZmNUy7bC9Caq0RoZsmrR6n15s5ji9ynjHD0EqDoPnYm3rifMgG
51cqtw+07Kmhl7AkEt+7CZzx+obAjMtmYk3f4MKjKyn93Y8++XlpX0jEp+0IesROG+kcYb
E3VGWAI5L+6/0VFDssK2nPEtIZHj71efvhPqMlGA6/ZXa12qNOyVcXE6/eEhTRR+4iJPx6
dtiYAs8VffS3Ez5EEjPaWoOoDNr9nlWGU78ul3OWvB5dEJb4e+G7p08K3EjMZPccny4JR7
u9DZvwCneEfCRjUxFCyEIWPmaU14Kse2n7Kn3YYgcoMZAV0rHZX4mhqdbM0deBdoI6J+Y6
EVaqm8plPWYHk8fjWRxcPKkDo78PxgGiH1PVRn5zdqyOVr9g3xsNOcZBQ+5LIkW4N5D0l3
T8E49Q18hfgpjTWT2L+c7qa/84UhvI7OV03U1gPxXURC8bp6yJyhKR+zgrfdFKDS
-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-dss 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"
        set source built-in
    next
    edit "Fortinet_SSH_ECDSA256"
        set password ENC k2ME4O1FuuLMsvcYdHtwdhCOrin2kR86eIVMa1DU+hO2UhlLUhHRGitKERFJ1xSylcGbOVAYGrs61W5d+B1iclwvPam74Z3tNsgmUPWr44dJocoiQLuLw71DB1DpYGzao0BNwvdyXAJCvS8aFOaoj2tAz+JvdYpUi6CdSAUbNP9oU6iKDKt8tFr5YBQx1Hl+Eo9yvw==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABAaRIYnwu
TWWPo0dt4pa8eHAAAAEAAAAAEAAABoAAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlz
dHAyNTYAAABBBIYE67MOaXGAVs3feRGqnMNfiDv9F/6VbZuM+4BJr6lEJo2T7cz/V8Iv+s
yRPo0phL2Twt1fDGvSWFF59gQ8iDwAAACg0y3xLv61P1yiCr7EwdH38QatL8n0+k0ccACE
fxWD5K0yH6szssah9NPU3sSS4hzXEmuoTmFEfIJvMqPBy2Xyk/PP1WQGsAZ7C9EX0qiElc
Wrs7eZCS18T4tMq0kTxQyt2tMfXtORtxCSCtDUr/QRz1bgAIucjP7gNgYnQj2cGjN+1Mmj
atXj1HMue5YhjRgoqAK70L2L9ttP3bL1bforHw==
-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBIYE67MOaXGAVs3feRGqnMNfiDv9F/6VbZuM+4BJr6lEJo2T7cz/V8Iv+syRPo0phL2Twt1fDGvSWFF59gQ8iDw="
        set source built-in
    next
    edit "Fortinet_SSH_ECDSA384"
        set password ENC k2ME4H9pQ9z5O09WZMaZrHLwZMJEcMsUviFOcm0LKhVRzar4ogbecvpZ8qx8KYaxYDlbMWk7vewZBqaka2mSvmapssmYuiDm6GbI7DGZdQZSrpmknVPVbqk86/QAJ3GzgHbXI1uT+O9mDI6azNe+6SdMyZ+cFiyg4VeF9bmJv8Js/V4r+dlen8Whf5x7tKeNy19+KA==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCBj/F2kS
oZru/9Px8S+weDAAAAEAAAAAEAAACIAAAAE2VjZHNhLXNoYTItbmlzdHAzODQAAAAIbmlz
dHAzODQAAABhBHxCnHB7p5OLX/NuxEV8GU8LnL3DqFs0jwYelPScNQd+d2F/6Ea7SsKhj4
4aYuMov9fqGwEaBdV/9q+ODwTYRSKqxtE89O5434eV7f2qSdZq5kRgMvQvxBje6RxFNGAA
UwAAANBWaSWpDxQOUkRvdD42VbPeYLF9SMf66osZYjzCbo6+eq1EiphOdcFBAcy8ajfjAY
ui3vf33kdVZYOh2inl0xZCu8iz2m8WX4Xk5O09JiMuOq4p2IIUq7MnAwpthAtyXzWz0Hpe
F7CCsDMmfbBFnv295ZPE0qY/+/OiLQYQK2bO3r6AZgeA6GopzwA2102WdAPj5/YzBDxMnu
jBzciVYB2oE0eSPdzIPMM0QhQAtX6rI92JTxNAL6j504j6YrO3s/jooRtnsRz9g0HtvSjQ
YxWn
-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ecdsa-sha2-nistp384 AAAAE2VjZHNhLXNoYTItbmlzdHAzODQAAAAIbmlzdHAzODQAAABhBHxCnHB7p5OLX/NuxEV8GU8LnL3DqFs0jwYelPScNQd+d2F/6Ea7SsKhj44aYuMov9fqGwEaBdV/9q+ODwTYRSKqxtE89O5434eV7f2qSdZq5kRgMvQvxBje6RxFNGAAUw=="
        set source built-in
    next
    edit "Fortinet_SSH_ECDSA521"
        set password ENC k2ME4PR8Nm/Bi61k9v/tT5/wQXmLzuzmojubPbGjlmUXHxCNny+HIUwVufob9hBc1KxnigWzT6M6eNl45pjXO2ATl+eU4GwDO6BFIoes+GU/3V34CTIYiBGFZ0Z4coVkpUR7dG1EUtWWIBjsrNHmQESdlq6kughi4Czo382Elhr20vccN0bShJnntY5OXnRcyFDhdQ==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABB51ngMYf
pT5HgVTRbff6XlAAAAEAAAAAEAAACsAAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlz
dHA1MjEAAACFBADfgrLSSIyJ37CbvCU+yCrrGG9tkkPcl5P6K6PKEQKp+4P7LodTYtkN2L
9GGdUsXsyva/JiTysaa4fJT2JCUowX+gA4MwFDB0A1IRS3nzhXpkD2lTCuKeZbII+CVZoo
CTkTErQU63ZkabNz+DhROBe1vSo2x1VkjkyNY1WWYi3MdNVIJQAAAQACN+qIbdvFefq0BS
GuYDSt1+8rAwVRzf0lkC+FCCCYkhhHRVmdv992lZ0XR6eR3SddB2pSK8ZC/qP0SCdY020f
b2RczP54nbr46Dqr/BNHoEJsfnX/l6E7ojX4b/Gps+RpJaU+YSfuUU94JLKBf4KgAkV7jk
Gr3+gk3Se/dgASO/thbZRCaWfA1IhI0L7364ioKTW9T/J+6Ltw/9j0YoTkqscm4TIpYOKK
wg1LxVcJA/wMExUU5QdKQ+bElYhvbtk7UExcOeUTOCUIBe6de/LW3I9rakQGkGlVdLmilB
DXTwSUZzKD63YFor9/0AZj25ctTczG3f+Rra1eI7o4HEe2
-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBADfgrLSSIyJ37CbvCU+yCrrGG9tkkPcl5P6K6PKEQKp+4P7LodTYtkN2L9GGdUsXsyva/JiTysaa4fJT2JCUowX+gA4MwFDB0A1IRS3nzhXpkD2lTCuKeZbII+CVZooCTkTErQU63ZkabNz+DhROBe1vSo2x1VkjkyNY1WWYi3MdNVIJQ=="
        set source built-in
    next
    edit "Fortinet_SSH_ED25519"
        set password ENC Bv/6AaWMymvm6vT43ojvk8nObsfopCAWDLIJsGr6XcgGExAsHs6+iqL6qHWQ6spox7HDm0+Na6+60xK4tDr+EZmbZ5TVo9+eAM89HmLZwUxSPj0/ykcq34h7P8Yu1ufj4o9m+ySes2ok3k8WPi5SOsFAYB1H0SQD2it3D2EFhVNNelPxlnmgLmF2KEk3LFYkNGjGGg==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCEyy+PDE
dZy4DJyO89p/GsAAAAEAAAAAEAAAAzAAAAC3NzaC1lZDI1NTE5AAAAIA63uERGvFz/lxba
lYDe/NGyoU7aYPxsErxR9745LdnKAAAAkFHNjg6JUFmoqZNJehSehukG6ybdWEjTDyeh7w
wxNXBzPUQYVurU1iAk/udItZq+S1eMWEi+BMgpEhlZgvlvlFTvW4lxSdUazOEC0HGWiiVW
P3ekMJW8pNOnTOc+tjaZRmZz03TjOd+8LRW+P5+kfx5OMm/EvfWpYFP2SzA+XZ26sFDnOe
GppuBDJh1X+x33PQ==
-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA63uERGvFz/lxbalYDe/NGyoU7aYPxsErxR9745LdnK"
        set source built-in
    next
end
config firewall ssh local-ca
    edit "Fortinet_SSH_CA"
        set password ENC oMcAAbqavKnf6eIuRNeFzI7zVT81lcd3+R7JkqhDbZ2B5IbU6m7S03UfRdFVfd4kKHR9Ay8AiOwqo5kWt2RbfvU1xSpiMz6wxLFN4lTKjdmVyTHLn2QIGUJJ0700PwN3M3M1L1baNh1whM/5kdS89ceUFYrYfAGhoYBxERizDm37Yjcl4x5cwe1Zp3G/ui5LxVmmgA==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtFHQsHk+Zen8jYXn505fTvT+ASpA8mnQcfg3h0BbnPxEZnBBAmmK7aLy4iAey9KGUJPQNsG7RtLUsYi4ftqmkoc6NpBzmIAmXBVruTQ9R2aRlBK4UVXP5WEck5dcBTF0UYZFn/lX/k+lFOgxo3fB/wsyeahviOWtdkBBt2IppwAoo3/p8rAwdI84z5iK8jrgXtpveKdNLRpFDhs+WSUhUdCcQYWYWv4c79oNbFLt2O8Q1j8i9dKaRloTrAJlYOX5OxLP+iC+0dcn/FssOEB404GdHOP3wRkaU+STte1Y7J2MwNLHETcowYmNC9duW+cJ1gHZmTEaZTWi/hLdhuNup"
        set source built-in
    next
    edit "Fortinet_SSH_CA_Untrusted"
        set password ENC oMcAAWg3AkvDTNuScDETHK+9pHd5tOZJ0YNpQibU6wyMGmSP/aSDpyuztzp93BbtrRsCY6n6RwpYyjm33x6neoLOkBtcJJvEyqeKEpGN5kE+kSqHeCa8x2Gr97/qNpMD+c+cPQk8wXWzIsGVRFWiGl8MekCpuVbF0t/DMAqkJes42Sw8FHnu0Z+hhGi++Sim/4u0Nw==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpt/xME0tAwAUBYUlCbSGs1yROQ+mHF2D4I7rJl+j4UIagNj8ftYRKOF6uQmr4If95S9zCD/FH4Rdjl4ZmFhAdrFCwz89RoFz2PT76cje5oshiW5ZJQyX5idmufnnmUWwtngu6gBltM83vFthzW+JsiO7mlD93T4b/M2Hs0pI2tHstsPL5EYS3Zce9J9gsp6TGj0784IUYynGFS0u0344E14WVxFwlvvMlIJSNRQF7SC88AsKRntTIacpfguFRcVxy08PoMaGeYflYnsWIcclnlZX91srP0LW+CN3i5J8Za7ZNNkHQb08ymiXF/Kats+zsdKj7uJK9QV2D52mztly/"
        set source built-in
    next
end
config firewall ssh setting
    set caname "Fortinet_SSH_CA"
    set untrusted-caname "Fortinet_SSH_CA_Untrusted"
    set hostkey-rsa2048 "Fortinet_SSH_RSA2048"
    set hostkey-dsa1024 "Fortinet_SSH_DSA1024"
    set hostkey-ecdsa256 "Fortinet_SSH_ECDSA256"
    set hostkey-ecdsa384 "Fortinet_SSH_ECDSA384"
    set hostkey-ecdsa521 "Fortinet_SSH_ECDSA521"
    set hostkey-ed25519 "Fortinet_SSH_ED25519"
end
config switch-controller security-policy 802-1X
    edit "802-1X-policy-default"
        set user-group "SSO_Guest_Users"
        set mac-auth-bypass disable
        set open-auth disable
        set eap-passthru enable
        set guest-vlan disable
        set auth-fail-vlan disable
        set framevid-apply enable
        set radius-timeout-overwrite disable
    next
end
config switch-controller security-policy local-access
    edit "default"
        set mgmt-allowaccess https ping ssh
        set internal-allowaccess https ping ssh
    next
end
config switch-controller lldp-profile
    edit "default"
        set med-tlvs inventory-management network-policy location-identification
        set auto-isl disable
        config med-network-policy
            edit "voice"
            next
            edit "voice-signaling"
            next
            edit "guest-voice"
            next
            edit "guest-voice-signaling"
            next
            edit "softphone-voice"
            next
            edit "video-conferencing"
            next
            edit "streaming-video"
            next
            edit "video-signaling"
            next
        end
        config med-location-service
            edit "coordinates"
            next
            edit "address-civic"
            next
            edit "elin-number"
            next
        end
    next
    edit "default-auto-isl"
    next
end
config switch-controller qos dot1p-map
    edit "voice-dot1p"
        set priority-0 queue-4
        set priority-1 queue-4
        set priority-2 queue-3
        set priority-3 queue-2
        set priority-4 queue-3
        set priority-5 queue-1
        set priority-6 queue-2
        set priority-7 queue-2
    next
end
config switch-controller qos ip-dscp-map
    edit "voice-dscp"
        config map
            edit "1"
                set cos-queue 1
                set value 46
            next
            edit "2"
                set cos-queue 2
                set value 24,26,48,56
            next
            edit "5"
                set cos-queue 3
                set value 34
            next
        end
    next
end
config switch-controller qos queue-policy
    edit "default"
        set schedule round-robin
        set rate-by kbps
        config cos-queue
            edit "queue-0"
            next
            edit "queue-1"
            next
            edit "queue-2"
            next
            edit "queue-3"
            next
            edit "queue-4"
            next
            edit "queue-5"
            next
            edit "queue-6"
            next
            edit "queue-7"
            next
        end
    next
    edit "voice-egress"
        set schedule weighted
        set rate-by kbps
        config cos-queue
            edit "queue-0"
            next
            edit "queue-1"
                set weight 0
            next
            edit "queue-2"
                set weight 6
            next
            edit "queue-3"
                set weight 37
            next
            edit "queue-4"
                set weight 12
            next
            edit "queue-5"
            next
            edit "queue-6"
            next
            edit "queue-7"
            next
        end
    next
end
config switch-controller qos qos-policy
    edit "default"
    next
    edit "voice-qos"
        set trust-dot1p-map "voice-dot1p"
        set trust-ip-dscp-map "voice-dscp"
        set queue-policy "voice-egress"
    next
end
config switch-controller storm-control-policy
    edit "default"
        set description "default storm control on all port"
    next
    edit "auto-config"
        set description "storm control policy for fortilink-isl-icl port"
        set storm-control-mode disabled
    next
end
config switch-controller auto-config policy
    edit "default"
    next
    edit "default-icl"
        set poe-status disable
        set igmp-flood-report enable
        set igmp-flood-traffic enable
    next
end
config switch-controller switch-profile
    edit "default"
    next
end
config switch-controller remote-log
    edit "syslogd"
    next
    edit "syslogd2"
    next
end
config wireless-controller setting
    set darrp-optimize-schedules "default-darrp-optimize"
end
config wireless-controller wids-profile
    edit "default"
        set comment "Default WIDS profile."
        set ap-scan enable
        set wireless-bridge enable
        set deauth-broadcast enable
        set null-ssid-probe-resp enable
        set long-duration-attack enable
        set invalid-mac-oui enable
        set weak-wep-iv enable
        set auth-frame-flood enable
        set assoc-frame-flood enable
        set spoofed-deauth enable
        set asleap-attack enable
        set eapol-start-flood enable
        set eapol-logoff-flood enable
        set eapol-succ-flood enable
        set eapol-fail-flood enable
        set eapol-pre-succ-flood enable
        set eapol-pre-fail-flood enable
    next
    edit "default-wids-apscan-enabled"
        set ap-scan enable
    next
end
config wireless-controller wtp-profile
    edit "FAP23JF-default"
        config platform
            set type 23JF
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11ax
        end
        config radio-2
            set band 802.11ax-5G
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAP234F-default"
        config platform
            set type 234F
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11ax
        end
        config radio-2
            set band 802.11ax-5G
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAP231F-default"
        config platform
            set type 231F
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11ax
        end
        config radio-2
            set band 802.11ax-5G
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAP433F-default"
        config platform
            set type 433F
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11ax
        end
        config radio-2
            set band 802.11ax-5G
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAP432F-default"
        config platform
            set type 432F
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11ax
        end
        config radio-2
            set band 802.11ax-5G
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAP431F-default"
        config platform
            set type 431F
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11ax
        end
        config radio-2
            set band 802.11ax-5G
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAP231E-default"
        config platform
            set type 231E
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
        config radio-3
            set mode monitor
        end
    next
    edit "FAPU433F-default"
        config platform
            set type U433F
            set mode dual-5G
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11ax-5G
            set band-5g-type 5g-low
        end
        config radio-2
            set band 802.11ax-5G
            set band-5g-type 5g-high
        end
        config radio-3
            set band 802.11n,g-only
        end
    next
    edit "FAPU431F-default"
        config platform
            set type U431F
            set mode dual-5G
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11ax-5G
            set band-5g-type 5g-low
        end
        config radio-2
            set band 802.11ax-5G
            set band-5g-type 5g-high
        end
        config radio-3
            set band 802.11n,g-only
        end
    next
    edit "FAPU323EV-default"
        config platform
            set type U323EV
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAPU321EV-default"
        config platform
            set type U321EV
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAPU24JEV-default"
        config platform
            set type U24JEV
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAPU223EV-default"
        config platform
            set type U223EV
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAPU221EV-default"
        config platform
            set type U221EV
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAPU423E-default"
        config platform
            set type U423E
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAPU422EV-default"
        config platform
            set type U422EV
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAPU421E-default"
        config platform
            set type U421E
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAP321E-default"
        config platform
            set type 321E
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAPS223E-default"
        config platform
            set type S223E
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAPS221E-default"
        config platform
            set type S221E
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAP224E-default"
        config platform
            set type 224E
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAP223E-default"
        config platform
            set type 223E
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAP222E-default"
        config platform
            set type 222E
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAP221E-default"
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAP423E-default"
        config platform
            set type 423E
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAP421E-default"
        config platform
            set type 421E
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAPS423E-default"
        config platform
            set type S423E
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAPS422E-default"
        config platform
            set type S422E
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAPS421E-default"
        config platform
            set type S421E
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAPS323CR-default"
        config platform
            set type S323CR
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAPS322CR-default"
        config platform
            set type S322CR
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAPS321CR-default"
        config platform
            set type S321CR
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAPS313C-default"
        config platform
            set type S313C
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11ac
        end
    next
    edit "FAPS311C-default"
        config platform
            set type S311C
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11ac
        end
    next
    edit "FAPS323C-default"
        config platform
            set type S323C
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAPS322C-default"
        config platform
            set type S322C
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAPS321C-default"
        config platform
            set type S321C
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAP321C-default"
        config platform
            set type 321C
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAP223C-default"
        config platform
            set type 223C
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAP112D-default"
        config platform
            set type 112D
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
    next
    edit "FAP24D-default"
        config platform
            set type 24D
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
    next
    edit "FAP21D-default"
        config platform
            set type 21D
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
    next
    edit "FK214B-default"
        config platform
            set type 214B
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
    next
    edit "FAP224D-default"
        config platform
            set type 224D
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n-5G
        end
        config radio-2
            set band 802.11n,g-only
        end
    next
    edit "FAP222C-default"
        config platform
            set type 222C
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAP25D-default"
        config platform
            set type 25D
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
    next
    edit "FAP221C-default"
        config platform
            set type 221C
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAP320C-default"
        config platform
            set type 320C
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11ac
        end
    next
    edit "FAP28C-default"
        config platform
            set type 28C
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
    next
    edit "FAP223B-default"
        config platform
            set type 223B
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n-5G
        end
        config radio-2
            set band 802.11n,g-only
        end
    next
    edit "FAP14C-default"
        config platform
            set type 14C
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
    next
    edit "FAP11C-default"
        config platform
            set type 11C
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
    next
    edit "FAP320B-default"
        config platform
            set type 320B
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n-5G
        end
        config radio-2
            set band 802.11n,g-only
        end
    next
    edit "FAP112B-default"
        config platform
            set type 112B
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
    next
    edit "FAP222B-default"
        config platform
            set type 222B
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
        config radio-2
            set band 802.11n-5G
        end
    next
    edit "FAP210B-default"
        config platform
            set type 210B
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
    next
    edit "FAP220B-default"
        config platform
            set type 220B
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n-5G
        end
        config radio-2
            set band 802.11n,g-only
        end
    next
    edit "AP-11N-default"
        config platform
            set type AP-11N
        end
        set handoff-sta-thresh 30
        config radio-1
            set band 802.11n,g-only
        end
    next
end
config wireless-controller utm-profile
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        set ips-sensor "wifi-default"
        set application-list "wifi-default"
        set antivirus-profile "wifi-default"
        set webfilter-profile "wifi-default"
    next
end
config log memory setting
    set status enable
end
config log null-device setting
    set status disable
end
config log setting
    set local-in-allow enable
    set local-in-deny-unicast enable
    set local-in-deny-broadcast enable
    set local-out enable
end
config router rip
    config redistribute "connected"
    end
    config redistribute "static"
    end
    config redistribute "ospf"
    end
    config redistribute "bgp"
    end
    config redistribute "isis"
    end
end
config router ripng
    config redistribute "connected"
    end
    config redistribute "static"
    end
    config redistribute "ospf"
    end
    config redistribute "bgp"
    end
    config redistribute "isis"
    end
end
config router static
    edit 1
        set gateway 61.216.60.254
        set device "wan"
    next
end
config router ospf
    config redistribute "connected"
    end
    config redistribute "static"
    end
    config redistribute "rip"
    end
    config redistribute "bgp"
    end
    config redistribute "isis"
    end
end
config router ospf6
    config redistribute "connected"
    end
    config redistribute "static"
    end
    config redistribute "rip"
    end
    config redistribute "bgp"
    end
    config redistribute "isis"
    end
end
config router bgp
    config redistribute "connected"
    end
    config redistribute "rip"
    end
    config redistribute "ospf"
    end
    config redistribute "static"
    end
    config redistribute "isis"
    end
    config redistribute6 "connected"
    end
    config redistribute6 "rip"
    end
    config redistribute6 "ospf"
    end
    config redistribute6 "static"
    end
    config redistribute6 "isis"
    end
end
config router isis
    config redistribute "connected"
    end
    config redistribute "rip"
    end
    config redistribute "ospf"
    end
    config redistribute "bgp"
    end
    config redistribute "static"
    end
    config redistribute6 "connected"
    end
    config redistribute6 "rip"
    end
    config redistribute6 "ospf"
    end
    config redistribute6 "bgp"
    end
    config redistribute6 "static"
    end
end
config router multicast
end