#config-version=FGT80F-7.4.3-FW-build2573-240201:opmode=0:vdom=0:user=admin
#conf_file_ver=474022655667873
#buildno=2573
#global_vdom=1
config system timezone "Canada/Central"
end
config system timezone "Canada/Newfoundland"
end
config system timezone "Canada/Saskatchewan"
end
config system timezone "Canada/Atlantic"
end
config system timezone "Canada/Mountain"
end
config system timezone "Canada/Eastern"
end
config system timezone "Canada/Pacific"
end
config system timezone "Brazil/East"
end
config system timezone "US/Hawaii"
end
config system timezone "US/Central"
end
config system timezone "US/Mountain"
end
config system timezone "US/East-Indiana"
end
config system timezone "US/Arizona"
end
config system timezone "US/Eastern"
end
config system timezone "US/Pacific"
end
config system timezone "US/Alaska"
end
config system timezone "Europe/Ljubljana"
end
config system timezone "Europe/Budapest"
end
config system timezone "Europe/Warsaw"
end
config system timezone "Europe/Riga"
end
config system timezone "Europe/Bucharest"
end
config system timezone "Europe/Dublin"
end
config system timezone "Europe/Belgrade"
end
config system timezone "Europe/London"
end
config system timezone "Europe/Tallinn"
end
config system timezone "Europe/Helsinki"
end
config system timezone "Europe/Stockholm"
end
config system timezone "Europe/Minsk"
end
config system timezone "Europe/Skopje"
end
config system timezone "Europe/Kyiv"
end
config system timezone "Europe/Vilnius"
end
config system timezone "Europe/Sofia"
end
config system timezone "Europe/Vienna"
end
config system timezone "Europe/Amsterdam"
end
config system timezone "Europe/Istanbul"
end
config system timezone "Europe/Moscow"
end
config system timezone "Europe/Prague"
end
config system timezone "Europe/Madrid"
end
config system timezone "Europe/Volgograd"
end
config system timezone "Europe/Sarajevo"
end
config system timezone "Europe/Athens"
end
config system timezone "Europe/Brussels"
end
config system timezone "Europe/Bratislava"
end
config system timezone "Europe/Paris"
end
config system timezone "Europe/Copenhagen"
end
config system timezone "Europe/Rome"
end
config system timezone "Europe/Zagreb"
end
config system timezone "Europe/Lisbon"
end
config system timezone "Europe/Berlin"
end
config system timezone "Mexico/BajaSur"
end
config system timezone "Australia/Canberra"
end
config system timezone "Australia/Adelaide"
end
config system timezone "Australia/Melbourne"
end
config system timezone "Australia/Perth"
end
config system timezone "Australia/Sydney"
end
config system timezone "Australia/Darwin"
end
config system timezone "Australia/Brisbane"
end
config system timezone "Australia/Hobart"
end
config system timezone "Asia/Muscat"
end
config system timezone "Asia/Irkutsk"
end
config system timezone "Asia/Ulaanbaatar"
end
config system timezone "Asia/Singapore"
end
config system timezone "Asia/Novosibirsk"
end
config system timezone "Asia/Jakarta"
end
config system timezone "Asia/Rangoon"
end
config system timezone "Asia/Bangkok"
end
config system timezone "Asia/Taipei"
end
config system timezone "Asia/Yakutsk"
end
config system timezone "Asia/Tehran"
end
config system timezone "Asia/Kabul"
end
config system timezone "Asia/Baghdad"
end
config system timezone "Asia/Tashkent"
end
config system timezone "Asia/Chongqing"
end
config system timezone "Asia/Dubai"
end
config system timezone "Asia/Kolkata"
end
config system timezone "Asia/Kuala_Lumpur"
end
config system timezone "Asia/Karachi"
end
config system timezone "Asia/Kamchatka"
end
config system timezone "Asia/Almaty"
end
config system timezone "Asia/Riyadh"
end
config system timezone "Asia/Vladivostok"
end
config system timezone "Asia/Seoul"
end
config system timezone "Asia/Jerusalem"
end
config system timezone "Asia/Kuwait"
end
config system timezone "Asia/Baku"
end
config system timezone "Asia/Magadan"
end
config system timezone "Asia/Tokyo"
end
config system timezone "Asia/Kathmandu"
end
config system timezone "Asia/Krasnoyarsk"
end
config system timezone "Asia/Dhaka"
end
config system timezone "Asia/Yekaterinburg"
end
config system timezone "Asia/Shanghai"
end
config system timezone "Atlantic/Canary"
end
config system timezone "Atlantic/Cape_Verde"
end
config system timezone "Atlantic/Azores"
end
config system timezone "America/Montevideo"
end
config system timezone "America/Lima"
end
config system timezone "America/Caracas"
end
config system timezone "America/El_Salvador"
end
config system timezone "America/Vancouver"
end
config system timezone "America/Argentina/Buenos_Aires"
end
config system timezone "America/Guyana"
end
config system timezone "America/Chihuahua"
end
config system timezone "America/La_Paz"
end
config system timezone "America/Santiago"
end
config system timezone "America/Los_Angeles"
end
config system timezone "America/Bogota"
end
config system timezone "America/Asuncion"
end
config system timezone "America/Nuuk"
end
config system timezone "America/Mexico_City"
end
config system timezone "Hongkong"
end
config system timezone "Etc/GMT+2"
end
config system timezone "Etc/GMT"
end
config system timezone "Africa/Nairobi"
end
config system timezone "Africa/Monrovia"
end
config system timezone "Africa/Cairo"
end
config system timezone "Africa/Windhoek"
end
config system timezone "Africa/Harare"
end
config system timezone "Africa/Lagos"
end
config system timezone "Africa/Casablanca"
end
config system timezone "Pacific/Tongatapu"
end
config system timezone "Pacific/Auckland"
end
config system timezone "Pacific/Fiji"
end
config system timezone "Pacific/Kwajalein"
end
config system timezone "Pacific/Kiritimati"
end
config system timezone "Pacific/Noumea"
end
config system timezone "Pacific/Midway"
end
config system timezone "Pacific/Apia"
end
config system timezone "Pacific/Chatham"
end
config system timezone "Pacific/Guam"
end
config system timezone "Pacific/Port_Moresby"
end
config system timezone "Pacific/Samoa"
end
config system global
    set admin-server-cert "self-sign"
    set admin-sport 8443
    set admintimeout 60
    set alias "FortiGate-80F"
    set gui-auto-upgrade-setup-warning disable
    set hostname "FGT-80F"
    set management-port-use-admin-sport disable
    set sslvpn-web-mode enable
    set switch-controller enable
    set timezone "Europe/Brussels"
end
config system accprofile
    edit "prof_admin"
        set secfabgrp read-write
        set ftviewgrp read-write
        set authgrp read-write
        set sysgrp read-write
        set netgrp read-write
        set loggrp read-write
        set fwgrp read-write
        set vpngrp read-write
        set utmgrp read-write
        set wifi read-write
        set cli-get enable
        set cli-show enable
        set cli-exec enable
        set cli-config enable
    next
end
config system np6xlite
    edit "np6xlite_0"
    next
end
config system switch-interface
    edit "wqt.root"
        set vdom "root"
        set member "wqtn.12.Wifi-Di" "wqtn.25.ayto"
    next
end
config system interface
    edit "wan1"
        set vdom "root"
        set mode dhcp
        set type physical
        set snmp-index 4
    next
    edit "wan2"
        set vdom "root"
        set type physical
        set alias "WAN"
        set snmp-index 3
    next
    edit "internal1"
        set vdom "root"
        set type physical
        set snmp-index 1
    next
    edit "internal2"
        set vdom "root"
        set type physical
        set alias "LAN"
        set snmp-index 16
    next
    edit "internal3"
        set vdom "root"
        set type physical
        set snmp-index 17
    next
    edit "internal4"
        set vdom "root"
        set type physical
        set snmp-index 18
    next
    edit "internal5"
        set vdom "root"
        set vlanforward enable
        set type physical
        set snmp-index 19
    next
    edit "internal6"
        set vdom "root"
        set vlanforward enable
        set type physical
        set snmp-index 2
    next
    edit "a"
        set vdom "root"
        set ip 192.168.251.1 255.255.255.0
        set allowaccess https fabric
        set type physical
        set alias "WIFI"
        set role lan
        set snmp-index 5
    next
    edit "b"
        set vdom "root"
        set type physical
        set snmp-index 20
    next
    edit "modem"
        set vdom "root"
        set mode pppoe
        set status down
        set type physical
        set snmp-index 6
    next
    edit "naf.root"
        set vdom "root"
        set type tunnel
        set src-check disable
        set snmp-index 7
    next
    edit "l2t.root"
        set vdom "root"
        set type tunnel
        set snmp-index 8
    next
    edit "ssl.root"
        set vdom "root"
        set type tunnel
        set alias "SSL VPN interface"
        set snmp-index 9
    next
    edit "wqt.root"
        set vdom "root"
        set ip 192.168.201.254 255.255.255.0
        set type switch
        set description "Quarantine Soft Switch"
        set security-mode captive-portal
        set device-identification enable
        set snmp-index 15
    next
    edit "lan"
        set vdom "root"
        set ip 192.168.22.1 255.255.255.0
        set allowaccess ping https ssh fabric
        set type hard-switch
        set stp enable
        set device-identification enable
        set lldp-transmission enable
        set role lan
        set snmp-index 10
    next
    edit "fortilink"
        set vdom "root"
        set fortilink enable
        set ip 10.255.1.1 255.255.255.0
        set allowaccess ping fabric
        set type aggregate
        set lldp-reception enable
        set lldp-transmission enable
        set snmp-index 11
    next
    edit "SPOKE-AYUN"
        set vdom "root"
        set ip 10.10.1.68 255.255.255.255
        set allowaccess ping
        set type tunnel
        set remote-ip 10.10.1.1 255.255.255.0
        set snmp-index 14
        set interface "VLAN20_WAN"
    next
    edit "Wifi-Diputacion"
        set vdom "root"
        set ip 192.168.250.1 255.255.255.0
        set allowaccess https
        set type vap-switch
        set role lan
        set snmp-index 12
    next
    edit "wqtn.12.Wifi-Di"
        set vdom "root"
        set description "Quarantine VLAN"
        set security-mode captive-portal
        set snmp-index 13
        set color 6
        set interface "Wifi-Diputacion"
        set vlanid 4093
    next
    edit "VLAN21_WAN"
        set vdom "root"
        set vlanforward enable
        set device-identification enable
        set snmp-index 21
        set interface "wan2"
        set vlanid 21
    next
    edit "VLAN21_LAN"
        set vdom "root"
        set vlanforward enable
        set device-identification enable
        set snmp-index 22
        set interface "internal2"
        set vlanid 21
    next
    edit "VLAN20_LAN"
        set vdom "root"
        set ip 192.168.1.2 255.255.255.0
        set allowaccess ping https http fgfm
        set device-identification enable
        set role lan
        set snmp-index 24
        set ip-managed-by-fortiipam disable
        set interface "internal2"
        set vlanid 20
    next
    edit "VLAN20_WAN"
        set vdom "root"
        set mode dhcp
        set device-identification enable
        set role lan
        set snmp-index 23
        set dns-server-override disable
        set interface "wan2"
        set vlanid 20
    next
    edit "ayto"
        set vdom "root"
        set ip 192.168.202.1 255.255.255.0
        set allowaccess ping https fgfm fabric
        set type vap-switch
        set device-identification enable
        set role lan
        set snmp-index 25
        set ip-managed-by-fortiipam disable
    next
    edit "wqtn.25.ayto"
        set vdom "root"
        set description "Quarantine VLAN"
        set security-mode captive-portal
        set snmp-index 26
        set color 6
        set interface "ayto"
        set vlanid 4093
    next
end
config system physical-switch
    edit "sw0"
        set age-val 0
    next
end
config system virtual-switch
    edit "lan"
        set physical-switch "sw0"
        config port
            edit "internal1"
            next
        end
    next
end
config system custom-language
    edit "en"
        set filename "en"
    next
    edit "fr"
        set filename "fr"
    next
    edit "sp"
        set filename "sp"
    next
    edit "pg"
        set filename "pg"
    next
    edit "x-sjis"
        set filename "x-sjis"
    next
    edit "big5"
        set filename "big5"
    next
    edit "GB2312"
        set filename "GB2312"
    next
    edit "euc-kr"
        set filename "euc-kr"
    next
end
config system admin
    edit "admin"
        set accprofile "super_admin"
        set vdom "root"
        config gui-dashboard
            edit 1
                set name "Status"
                set vdom "root"
                set permanent enable
                config widget
                    edit 1
                        set width 1
                        set height 1
                    next
                    edit 2
                        set type licinfo
                        set x-pos 1
                        set width 1
                        set height 1
                    next
                    edit 3
                        set type forticloud
                        set x-pos 2
                        set width 1
                        set height 1
                    next
                    edit 4
                        set type security-fabric
                        set x-pos 3
                        set width 1
                        set height 1
                    next
                    edit 5
                        set type admins
                        set x-pos 4
                        set width 1
                        set height 1
                    next
                    edit 6
                        set type cpu-usage
                        set x-pos 5
                        set width 2
                        set height 1
                    next
                    edit 7
                        set type memory-usage
                        set x-pos 6
                        set width 2
                        set height 1
                    next
                    edit 8
                        set type sessions
                        set x-pos 7
                        set width 2
                        set height 1
                    next
                end
            next
            edit 2
                set name "Security"
                set vdom "root"
                config widget
                    edit 1
                        set type fortiview
                        set width 2
                        set height 1
                        set fortiview-type "compromisedHosts"
                        set fortiview-sort-by "verdict"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 2
                        set type fortiview
                        set x-pos 1
                        set width 2
                        set height 1
                        set fortiview-type "threats"
                        set fortiview-sort-by "threatLevel"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 3
                        set type device-vulnerability
                        set x-pos 2
                        set width 2
                        set height 1
                    next
                end
            next
            edit 3
                set name "Network"
                set vdom "root"
                config widget
                    edit 1
                        set type routing
                        set width 2
                        set height 1
                        set router-view-type "staticdynamic"
                    next
                    edit 2
                        set type dhcp
                        set x-pos 1
                        set width 2
                        set height 1
                    next
                    edit 3
                        set type virtual-wan
                        set x-pos 2
                        set width 2
                        set height 1
                    next
                    edit 4
                        set type ipsec-vpn
                        set x-pos 3
                        set width 2
                        set height 1
                    next
                    edit 5
                        set type ssl-vpn
                        set x-pos 4
                        set width 1
                        set height 1
                    next
                end
            next
            edit 4
                set name "Assets & Identities"
                set vdom "root"
                config widget
                    edit 1
                        set type device-inventory
                        set width 2
                        set height 1
                    next
                    edit 2
                        set type identities
                        set x-pos 1
                        set width 2
                        set height 1
                    next
                    edit 3
                        set type firewall-user
                        set x-pos 2
                        set width 2
                        set height 1
                    next
                    edit 4
                        set type quarantine
                        set x-pos 3
                        set width 2
                        set height 1
                    next
                    edit 5
                        set type nac-vlans
                        set x-pos 4
                        set width 2
                        set height 1
                    next
                end
            next
            edit 5
                set name "WiFi"
                set vdom "root"
                config widget
                    edit 1
                        set type ap-status
                        set width 2
                        set height 1
                    next
                    edit 2
                        set type channel-utilization
                        set x-pos 1
                        set width 2
                        set height 1
                        set wifi-band "both"
                    next
                    edit 3
                        set type clients-by-ap
                        set x-pos 2
                        set width 2
                        set height 1
                        set wifi-band "both"
                    next
                    edit 4
                        set type client-signal-strength
                        set x-pos 3
                        set width 2
                        set height 1
                        set wifi-band "both"
                    next
                    edit 5
                        set type rogue-ap
                        set x-pos 4
                        set width 2
                        set height 1
                    next
                    edit 6
                        set type historical-clients
                        set x-pos 5
                        set width 2
                        set height 1
                        set wifi-band "both"
                    next
                    edit 7
                        set type interfering-ssids
                        set x-pos 6
                        set width 2
                        set height 1
                        set wifi-band "both"
                    next
                    edit 8
                        set type wifi-login-failures
                        set x-pos 7
                        set width 2
                        set height 1
                    next
                end
            next
            edit 6
                set name "FortiView Sources"
                set vdom "root"
                set layout-type standalone
                set csf disable
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "source"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 7
                set name "FortiView Destinations"
                set vdom "root"
                set layout-type standalone
                set csf disable
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "destination"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 8
                set name "FortiView Applications"
                set vdom "root"
                set layout-type standalone
                set csf disable
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "application"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 9
                set name "FortiView Web Sites"
                set vdom "root"
                set layout-type standalone
                set csf disable
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "website"
                        set fortiview-sort-by "sessions"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 10
                set name "FortiView Policies"
                set vdom "root"
                set layout-type standalone
                set csf disable
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "policy"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 11
                set name "FortiView Sessions"
                set vdom "root"
                set layout-type standalone
                set csf disable
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "realtimeSessions"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "realtime"
                        set fortiview-visualization "table"
                    next
                end
            next
        end
        set gui-default-dashboard-template "minimal"
        set gui-ignore-release-overview-version "7.4"
        set password ENC SH2Be2bfvpPEr6GgC2SgpMVZl2yiHJ3UkknqYAdAT989d4PbU8jsFJgdXh0tfg=
    next
end
config system sso-admin
end
config system ha
    set override disable
end
config system dns
    set primary 8.8.8.8
    set secondary 8.8.4.4
    set protocol cleartext dot
    set server-hostname "globalsdns.fortinet.net"
    set interface-select-method sdwan
end
config system replacemsg-image
    edit "logo_fnet"
    next
    edit "logo_fguard_wf"
    next
    edit "logo_v3_fguard_app"
    next
end
config system replacemsg mail "partial"
end
config system replacemsg http "url-block"
end
config system replacemsg http "urlfilter-err"
end
config system replacemsg http "infcache-block"
end
config system replacemsg http "http-contenttypeblock"
end
config system replacemsg http "https-invalid-cert-block"
end
config system replacemsg http "https-untrusted-cert-block"
end
config system replacemsg http "https-blocklisted-cert-block"
end
config system replacemsg http "switching-protocols-block"
end
config system replacemsg http "http-antiphish-block"
end
config system replacemsg http "videofilter-block"
end
config system replacemsg webproxy "deny"
end
config system replacemsg webproxy "user-limit"
end
config system replacemsg webproxy "auth-challenge"
end
config system replacemsg webproxy "auth-login-fail"
end
config system replacemsg webproxy "auth-group-info-fail"
end
config system replacemsg webproxy "http-err"
end
config system replacemsg webproxy "auth-ip-blackout"
end
config system replacemsg webproxy "ztna-invalid-cert"
end
config system replacemsg webproxy "ztna-empty-cert"
end
config system replacemsg webproxy "ztna-manageable-empty-cert"
end
config system replacemsg webproxy "ztna-no-api-gwy-matched"
end
config system replacemsg webproxy "ztna-cant-find-real-srv"
end
config system replacemsg webproxy "ztna-fqdn-dns-failed"
end
config system replacemsg webproxy "ztna-ssl-bookmark-failed"
end
config system replacemsg webproxy "ztna-no-policy-matched"
end
config system replacemsg webproxy "ztna-matched-deny-policy"
end
config system replacemsg webproxy "ztna-client-cert-revoked"
end
config system replacemsg webproxy "ztna-denied-by-matched-tags"
end
config system replacemsg webproxy "ztna-denied-no-matched-tags"
end
config system replacemsg webproxy "ztna-no-dev-info"
end
config system replacemsg webproxy "ztna-dev-is-offline"
end
config system replacemsg webproxy "ztna-dev-is-unmanageable"
end
config system replacemsg webproxy "ztna-auth-fail"
end
config system replacemsg webproxy "casb-block"
end
config system replacemsg ftp "ftp-explicit-banner"
end
config system replacemsg fortiguard-wf "ftgd-block"
end
config system replacemsg fortiguard-wf "ftgd-ovrd"
end
config system replacemsg fortiguard-wf "ftgd-quota"
end
config system replacemsg fortiguard-wf "ftgd-warning"
end
config system replacemsg spam "ipblocklist"
end
config system replacemsg spam "smtp-spam-dnsbl"
end
config system replacemsg spam "smtp-spam-feip"
end
config system replacemsg spam "smtp-spam-helo"
end
config system replacemsg spam "smtp-spam-emailblock-to"
end
config system replacemsg spam "smtp-spam-emailblock-from"
end
config system replacemsg spam "smtp-spam-emailblock-subject"
end
config system replacemsg spam "smtp-spam-mimeheader"
end
config system replacemsg spam "reversedns"
end
config system replacemsg spam "smtp-spam-ase"
end
config system replacemsg spam "submit"
end
config system replacemsg alertmail "alertmail-virus"
end
config system replacemsg alertmail "alertmail-block"
end
config system replacemsg alertmail "alertmail-nids-event"
end
config system replacemsg alertmail "alertmail-crit-event"
end
config system replacemsg alertmail "alertmail-disk-full"
end
config system replacemsg admin "pre_admin-disclaimer-text"
end
config system replacemsg admin "post_admin-disclaimer-text"
end
config system replacemsg auth "auth-disclaimer-page-1"
end
config system replacemsg auth "auth-disclaimer-page-2"
end
config system replacemsg auth "auth-disclaimer-page-3"
end
config system replacemsg auth "auth-proxy-reject-page"
end
config system replacemsg auth "auth-reject-page"
end
config system replacemsg auth "auth-login-page"
end
config system replacemsg auth "auth-login-failed-page"
end
config system replacemsg auth "auth-token-login-page"
end
config system replacemsg auth "auth-token-login-failed-page"
end
config system replacemsg auth "auth-success-msg"
end
config system replacemsg auth "auth-challenge-page"
end
config system replacemsg auth "auth-keepalive-page"
end
config system replacemsg auth "auth-portal-page"
end
config system replacemsg auth "auth-password-page"
end
config system replacemsg auth "auth-fortitoken-page"
end
config system replacemsg auth "auth-next-fortitoken-page"
end
config system replacemsg auth "auth-email-token-page"
end
config system replacemsg auth "auth-sms-token-page"
end
config system replacemsg auth "auth-email-harvesting-page"
end
config system replacemsg auth "auth-email-failed-page"
end
config system replacemsg auth "auth-cert-passwd-page"
end
config system replacemsg auth "auth-guest-print-page"
end
config system replacemsg auth "auth-guest-email-page"
end
config system replacemsg auth "auth-success-page"
end
config system replacemsg auth "auth-block-notification-page"
end
config system replacemsg auth "auth-quarantine-page"
end
config system replacemsg auth "auth-qtn-reject-page"
end
config system replacemsg auth "auth-saml-page"
end
config system replacemsg sslvpn "sslvpn-login"
end
config system replacemsg sslvpn "sslvpn-header"
end
config system replacemsg sslvpn "sslvpn-limit"
end
config system replacemsg sslvpn "hostcheck-error"
end
config system replacemsg sslvpn "sslvpn-provision-user"
end
config system replacemsg sslvpn "sslvpn-provision-user-sms"
end
config system replacemsg nac-quar "nac-quar-virus"
end
config system replacemsg nac-quar "nac-quar-dos"
end
config system replacemsg nac-quar "nac-quar-ips"
end
config system replacemsg nac-quar "nac-quar-dlp"
end
config system replacemsg nac-quar "nac-quar-admin"
end
config system replacemsg nac-quar "nac-quar-app"
end
config system replacemsg traffic-quota "per-ip-shaper-block"
end
config system replacemsg utm "virus-html"
end
config system replacemsg utm "client-virus-html"
end
config system replacemsg utm "virus-text"
end
config system replacemsg utm "dlp-html"
end
config system replacemsg utm "dlp-text"
end
config system replacemsg utm "appblk-html"
end
config system replacemsg utm "ipsblk-html"
end
config system replacemsg utm "virpatchblk-html"
end
config system replacemsg utm "ipsfail-html"
end
config system replacemsg utm "exe-text"
end
config system replacemsg utm "waf-html"
end
config system replacemsg utm "outbreak-prevention-html"
end
config system replacemsg utm "outbreak-prevention-text"
end
config system replacemsg utm "external-blocklist-html"
end
config system replacemsg utm "external-blocklist-text"
end
config system replacemsg utm "ems-threat-feed-html"
end
config system replacemsg utm "ems-threat-feed-text"
end
config system replacemsg utm "file-filter-html"
end
config system replacemsg utm "file-filter-text"
end
config system replacemsg utm "file-size-text"
end
config system replacemsg utm "transfer-size-text"
end
config system replacemsg utm "internal-error-text"
end
config system replacemsg utm "archive-block-html"
end
config system replacemsg utm "archive-block-text"
end
config system replacemsg utm "file-av-fail-text"
end
config system replacemsg utm "transfer-av-fail-text"
end
config system replacemsg utm "banned-word-html"
end
config system replacemsg utm "banned-word-text"
end
config system replacemsg utm "block-html"
end
config system replacemsg utm "block-text"
end
config system replacemsg utm "decompress-limit-text"
end
config system replacemsg utm "dlp-subject-text"
end
config system replacemsg utm "file-size-html"
end
config system replacemsg utm "client-file-size-html"
end
config system replacemsg utm "inline-scan-timeout-html"
end
config system replacemsg utm "inline-scan-timeout-text"
end
config system replacemsg utm "inline-scan-error-html"
end
config system replacemsg utm "inline-scan-error-text"
end
config system replacemsg utm "icap-block-text"
end
config system replacemsg utm "icap-error-text"
end
config system replacemsg utm "icap-http-error"
end
config system replacemsg icap "icap-req-resp"
end
config system replacemsg automation "automation-email"
end
config system snmp sysinfo
end
config system autoupdate schedule
    set frequency every
    set time 01:60
end
config system central-management
    set type fortimanager
    set serial-number "FMGVCLTM23001342"
    set fmg "fortimanager.forticloud.com"
end
config firewall internet-service-name
    edit "Google-Other"
        set internet-service-id 65536
    next
    edit "Google-Web"
        set internet-service-id 65537
    next
    edit "Google-ICMP"
        set internet-service-id 65538
    next
    edit "Google-DNS"
        set internet-service-id 65539
    next
    edit "Google-Outbound_Email"
        set internet-service-id 65540
    next
    edit "Google-SSH"
        set internet-service-id 65542
    next
    edit "Google-FTP"
        set internet-service-id 65543
    next
    edit "Google-NTP"
        set internet-service-id 65544
    next
    edit "Google-Inbound_Email"
        set internet-service-id 65545
    next
    edit "Google-LDAP"
        set internet-service-id 65550
    next
    edit "Google-NetBIOS.Session.Service"
        set internet-service-id 65551
    next
    edit "Google-RTMP"
        set internet-service-id 65552
    next
    edit "Google-NetBIOS.Name.Service"
        set internet-service-id 65560
    next
    edit "Google-Google.Cloud"
        set internet-service-id 65641
    next
    edit "Google-Google.Bot"
        set internet-service-id 65643
    next
    edit "Google-Gmail"
        set internet-service-id 65646
    next
    edit "Meta-Other"
        set internet-service-id 131072
    next
    edit "Meta-Web"
        set internet-service-id 131073
    next
    edit "Meta-ICMP"
        set internet-service-id 131074
    next
    edit "Meta-DNS"
        set internet-service-id 131075
    next
    edit "Meta-Outbound_Email"
        set internet-service-id 131076
    next
    edit "Meta-SSH"
        set internet-service-id 131078
    next
    edit "Meta-FTP"
        set internet-service-id 131079
    next
    edit "Meta-NTP"
        set internet-service-id 131080
    next
    edit "Meta-Inbound_Email"
        set internet-service-id 131081
    next
    edit "Meta-LDAP"
        set internet-service-id 131086
    next
    edit "Meta-NetBIOS.Session.Service"
        set internet-service-id 131087
    next
    edit "Meta-RTMP"
        set internet-service-id 131088
    next
    edit "Meta-NetBIOS.Name.Service"
        set internet-service-id 131096
    next
    edit "Meta-Whatsapp"
        set internet-service-id 131184
    next
    edit "Meta-Instagram"
        set internet-service-id 131189
    next
    edit "Apple-Other"
        set internet-service-id 196608
    next
    edit "Apple-Web"
        set internet-service-id 196609
    next
    edit "Apple-ICMP"
        set internet-service-id 196610
    next
    edit "Apple-DNS"
        set internet-service-id 196611
    next
    edit "Apple-Outbound_Email"
        set internet-service-id 196612
    next
    edit "Apple-SSH"
        set internet-service-id 196614
    next
    edit "Apple-FTP"
        set internet-service-id 196615
    next
    edit "Apple-NTP"
        set internet-service-id 196616
    next
    edit "Apple-Inbound_Email"
        set internet-service-id 196617
    next
    edit "Apple-LDAP"
        set internet-service-id 196622
    next
    edit "Apple-NetBIOS.Session.Service"
        set internet-service-id 196623
    next
    edit "Apple-RTMP"
        set internet-service-id 196624
    next
    edit "Apple-NetBIOS.Name.Service"
        set internet-service-id 196632
    next
    edit "Apple-App.Store"
        set internet-service-id 196723
    next
    edit "Apple-APNs"
        set internet-service-id 196747
    next
    edit "Yahoo-Other"
        set internet-service-id 262144
    next
    edit "Yahoo-Web"
        set internet-service-id 262145
    next
    edit "Yahoo-ICMP"
        set internet-service-id 262146
    next
    edit "Yahoo-DNS"
        set internet-service-id 262147
    next
    edit "Yahoo-Outbound_Email"
        set internet-service-id 262148
    next
    edit "Yahoo-SSH"
        set internet-service-id 262150
    next
    edit "Yahoo-FTP"
        set internet-service-id 262151
    next
    edit "Yahoo-NTP"
        set internet-service-id 262152
    next
    edit "Yahoo-Inbound_Email"
        set internet-service-id 262153
    next
    edit "Yahoo-LDAP"
        set internet-service-id 262158
    next
    edit "Yahoo-NetBIOS.Session.Service"
        set internet-service-id 262159
    next
    edit "Yahoo-RTMP"
        set internet-service-id 262160
    next
    edit "Yahoo-NetBIOS.Name.Service"
        set internet-service-id 262168
    next
    edit "Microsoft-Other"
        set internet-service-id 327680
    next
    edit "Microsoft-Web"
        set internet-service-id 327681
    next
    edit "Microsoft-ICMP"
        set internet-service-id 327682
    next
    edit "Microsoft-DNS"
        set internet-service-id 327683
    next
    edit "Microsoft-Outbound_Email"
        set internet-service-id 327684
    next
    edit "Microsoft-SSH"
        set internet-service-id 327686
    next
    edit "Microsoft-FTP"
        set internet-service-id 327687
    next
    edit "Microsoft-NTP"
        set internet-service-id 327688
    next
    edit "Microsoft-Inbound_Email"
        set internet-service-id 327689
    next
    edit "Microsoft-LDAP"
        set internet-service-id 327694
    next
    edit "Microsoft-NetBIOS.Session.Service"
        set internet-service-id 327695
    next
    edit "Microsoft-RTMP"
        set internet-service-id 327696
    next
    edit "Microsoft-NetBIOS.Name.Service"
        set internet-service-id 327704
    next
    edit "Microsoft-Skype_Teams"
        set internet-service-id 327781
    next
    edit "Microsoft-Office365"
        set internet-service-id 327782
    next
    edit "Microsoft-Azure"
        set internet-service-id 327786
    next
    edit "Microsoft-Bing.Bot"
        set internet-service-id 327788
    next
    edit "Microsoft-Outlook"
        set internet-service-id 327791
    next
    edit "Microsoft-Microsoft.Update"
        set internet-service-id 327793
    next
    edit "Microsoft-Dynamics"
        set internet-service-id 327837
    next
    edit "Microsoft-WNS"
        set internet-service-id 327839
    next
    edit "Microsoft-Office365.Published"
        set internet-service-id 327880
    next
    edit "Amazon-Other"
        set internet-service-id 393216
    next
    edit "Amazon-Web"
        set internet-service-id 393217
    next
    edit "Amazon-ICMP"
        set internet-service-id 393218
    next
    edit "Amazon-DNS"
        set internet-service-id 393219
    next
    edit "Amazon-Outbound_Email"
        set internet-service-id 393220
    next
    edit "Amazon-SSH"
        set internet-service-id 393222
    next
    edit "Amazon-FTP"
        set internet-service-id 393223
    next
    edit "Amazon-NTP"
        set internet-service-id 393224
    next
    edit "Amazon-Inbound_Email"
        set internet-service-id 393225
    next
    edit "Amazon-LDAP"
        set internet-service-id 393230
    next
    edit "Amazon-NetBIOS.Session.Service"
        set internet-service-id 393231
    next
    edit "Amazon-RTMP"
        set internet-service-id 393232
    next
    edit "Amazon-NetBIOS.Name.Service"
        set internet-service-id 393240
    next
    edit "Amazon-AWS"
        set internet-service-id 393320
    next
    edit "Amazon-AWS.WorkSpaces.Gateway"
        set internet-service-id 393403
    next
    edit "eBay-Other"
        set internet-service-id 458752
    next
    edit "eBay-Web"
        set internet-service-id 458753
    next
    edit "eBay-ICMP"
        set internet-service-id 458754
    next
    edit "eBay-DNS"
        set internet-service-id 458755
    next
    edit "eBay-Outbound_Email"
        set internet-service-id 458756
    next
    edit "eBay-SSH"
        set internet-service-id 458758
    next
    edit "eBay-FTP"
        set internet-service-id 458759
    next
    edit "eBay-NTP"
        set internet-service-id 458760
    next
    edit "eBay-Inbound_Email"
        set internet-service-id 458761
    next
    edit "eBay-LDAP"
        set internet-service-id 458766
    next
    edit "eBay-NetBIOS.Session.Service"
        set internet-service-id 458767
    next
    edit "eBay-RTMP"
        set internet-service-id 458768
    next
    edit "eBay-NetBIOS.Name.Service"
        set internet-service-id 458776
    next
    edit "PayPal-Other"
        set internet-service-id 524288
    next
    edit "PayPal-Web"
        set internet-service-id 524289
    next
    edit "PayPal-ICMP"
        set internet-service-id 524290
    next
    edit "PayPal-DNS"
        set internet-service-id 524291
    next
    edit "PayPal-Outbound_Email"
        set internet-service-id 524292
    next
    edit "PayPal-SSH"
        set internet-service-id 524294
    next
    edit "PayPal-FTP"
        set internet-service-id 524295
    next
    edit "PayPal-NTP"
        set internet-service-id 524296
    next
    edit "PayPal-Inbound_Email"
        set internet-service-id 524297
    next
    edit "PayPal-LDAP"
        set internet-service-id 524302
    next
    edit "PayPal-NetBIOS.Session.Service"
        set internet-service-id 524303
    next
    edit "PayPal-RTMP"
        set internet-service-id 524304
    next
    edit "PayPal-NetBIOS.Name.Service"
        set internet-service-id 524312
    next
    edit "Box-Other"
        set internet-service-id 589824
    next
    edit "Box-Web"
        set internet-service-id 589825
    next
    edit "Box-ICMP"
        set internet-service-id 589826
    next
    edit "Box-DNS"
        set internet-service-id 589827
    next
    edit "Box-Outbound_Email"
        set internet-service-id 589828
    next
    edit "Box-SSH"
        set internet-service-id 589830
    next
    edit "Box-FTP"
        set internet-service-id 589831
    next
    edit "Box-NTP"
        set internet-service-id 589832
    next
    edit "Box-Inbound_Email"
        set internet-service-id 589833
    next
    edit "Box-LDAP"
        set internet-service-id 589838
    next
    edit "Box-NetBIOS.Session.Service"
        set internet-service-id 589839
    next
    edit "Box-RTMP"
        set internet-service-id 589840
    next
    edit "Box-NetBIOS.Name.Service"
        set internet-service-id 589848
    next
    edit "Salesforce-Other"
        set internet-service-id 655360
    next
    edit "Salesforce-Web"
        set internet-service-id 655361
    next
    edit "Salesforce-ICMP"
        set internet-service-id 655362
    next
    edit "Salesforce-DNS"
        set internet-service-id 655363
    next
    edit "Salesforce-Outbound_Email"
        set internet-service-id 655364
    next
    edit "Salesforce-SSH"
        set internet-service-id 655366
    next
    edit "Salesforce-FTP"
        set internet-service-id 655367
    next
    edit "Salesforce-NTP"
        set internet-service-id 655368
    next
    edit "Salesforce-Inbound_Email"
        set internet-service-id 655369
    next
    edit "Salesforce-LDAP"
        set internet-service-id 655374
    next
    edit "Salesforce-NetBIOS.Session.Service"
        set internet-service-id 655375
    next
    edit "Salesforce-RTMP"
        set internet-service-id 655376
    next
    edit "Salesforce-NetBIOS.Name.Service"
        set internet-service-id 655384
    next
    edit "Salesforce-Email.Relay"
        set internet-service-id 655530
    next
    edit "Dropbox-Other"
        set internet-service-id 720896
    next
    edit "Dropbox-Web"
        set internet-service-id 720897
    next
    edit "Dropbox-ICMP"
        set internet-service-id 720898
    next
    edit "Dropbox-DNS"
        set internet-service-id 720899
    next
    edit "Dropbox-Outbound_Email"
        set internet-service-id 720900
    next
    edit "Dropbox-SSH"
        set internet-service-id 720902
    next
    edit "Dropbox-FTP"
        set internet-service-id 720903
    next
    edit "Dropbox-NTP"
        set internet-service-id 720904
    next
    edit "Dropbox-Inbound_Email"
        set internet-service-id 720905
    next
    edit "Dropbox-LDAP"
        set internet-service-id 720910
    next
    edit "Dropbox-NetBIOS.Session.Service"
        set internet-service-id 720911
    next
    edit "Dropbox-RTMP"
        set internet-service-id 720912
    next
    edit "Dropbox-NetBIOS.Name.Service"
        set internet-service-id 720920
    next
    edit "Netflix-Other"
        set internet-service-id 786432
    next
    edit "Netflix-Web"
        set internet-service-id 786433
    next
    edit "Netflix-ICMP"
        set internet-service-id 786434
    next
    edit "Netflix-DNS"
        set internet-service-id 786435
    next
    edit "Netflix-Outbound_Email"
        set internet-service-id 786436
    next
    edit "Netflix-SSH"
        set internet-service-id 786438
    next
    edit "Netflix-FTP"
        set internet-service-id 786439
    next
    edit "Netflix-NTP"
        set internet-service-id 786440
    next
    edit "Netflix-Inbound_Email"
        set internet-service-id 786441
    next
    edit "Netflix-LDAP"
        set internet-service-id 786446
    next
    edit "Netflix-NetBIOS.Session.Service"
        set internet-service-id 786447
    next
    edit "Netflix-RTMP"
        set internet-service-id 786448
    next
    edit "Netflix-NetBIOS.Name.Service"
        set internet-service-id 786456
    next
    edit "LinkedIn-Other"
        set internet-service-id 851968
    next
    edit "LinkedIn-Web"
        set internet-service-id 851969
    next
    edit "LinkedIn-ICMP"
        set internet-service-id 851970
    next
    edit "LinkedIn-DNS"
        set internet-service-id 851971
    next
    edit "LinkedIn-Outbound_Email"
        set internet-service-id 851972
    next
    edit "LinkedIn-SSH"
        set internet-service-id 851974
    next
    edit "LinkedIn-FTP"
        set internet-service-id 851975
    next
    edit "LinkedIn-NTP"
        set internet-service-id 851976
    next
    edit "LinkedIn-Inbound_Email"
        set internet-service-id 851977
    next
    edit "LinkedIn-LDAP"
        set internet-service-id 851982
    next
    edit "LinkedIn-NetBIOS.Session.Service"
        set internet-service-id 851983
    next
    edit "LinkedIn-RTMP"
        set internet-service-id 851984
    next
    edit "LinkedIn-NetBIOS.Name.Service"
        set internet-service-id 851992
    next
    edit "Adobe-Other"
        set internet-service-id 917504
    next
    edit "Adobe-Web"
        set internet-service-id 917505
    next
    edit "Adobe-ICMP"
        set internet-service-id 917506
    next
    edit "Adobe-DNS"
        set internet-service-id 917507
    next
    edit "Adobe-Outbound_Email"
        set internet-service-id 917508
    next
    edit "Adobe-SSH"
        set internet-service-id 917510
    next
    edit "Adobe-FTP"
        set internet-service-id 917511
    next
    edit "Adobe-NTP"
        set internet-service-id 917512
    next
    edit "Adobe-Inbound_Email"
        set internet-service-id 917513
    next
    edit "Adobe-LDAP"
        set internet-service-id 917518
    next
    edit "Adobe-NetBIOS.Session.Service"
        set internet-service-id 917519
    next
    edit "Adobe-RTMP"
        set internet-service-id 917520
    next
    edit "Adobe-NetBIOS.Name.Service"
        set internet-service-id 917528
    next
    edit "Adobe-Adobe.Experience.Cloud"
        set internet-service-id 917640
    next
    edit "Oracle-Other"
        set internet-service-id 983040
    next
    edit "Oracle-Web"
        set internet-service-id 983041
    next
    edit "Oracle-ICMP"
        set internet-service-id 983042
    next
    edit "Oracle-DNS"
        set internet-service-id 983043
    next
    edit "Oracle-Outbound_Email"
        set internet-service-id 983044
    next
    edit "Oracle-SSH"
        set internet-service-id 983046
    next
    edit "Oracle-FTP"
        set internet-service-id 983047
    next
    edit "Oracle-NTP"
        set internet-service-id 983048
    next
    edit "Oracle-Inbound_Email"
        set internet-service-id 983049
    next
    edit "Oracle-LDAP"
        set internet-service-id 983054
    next
    edit "Oracle-NetBIOS.Session.Service"
        set internet-service-id 983055
    next
    edit "Oracle-RTMP"
        set internet-service-id 983056
    next
    edit "Oracle-NetBIOS.Name.Service"
        set internet-service-id 983064
    next
    edit "Oracle-Oracle.Cloud"
        set internet-service-id 983171
    next
    edit "Hulu-Other"
        set internet-service-id 1048576
    next
    edit "Hulu-Web"
        set internet-service-id 1048577
    next
    edit "Hulu-ICMP"
        set internet-service-id 1048578
    next
    edit "Hulu-DNS"
        set internet-service-id 1048579
    next
    edit "Hulu-Outbound_Email"
        set internet-service-id 1048580
    next
    edit "Hulu-SSH"
        set internet-service-id 1048582
    next
    edit "Hulu-FTP"
        set internet-service-id 1048583
    next
    edit "Hulu-NTP"
        set internet-service-id 1048584
    next
    edit "Hulu-Inbound_Email"
        set internet-service-id 1048585
    next
    edit "Hulu-LDAP"
        set internet-service-id 1048590
    next
    edit "Hulu-NetBIOS.Session.Service"
        set internet-service-id 1048591
    next
    edit "Hulu-RTMP"
        set internet-service-id 1048592
    next
    edit "Hulu-NetBIOS.Name.Service"
        set internet-service-id 1048600
    next
    edit "Pinterest-Other"
        set internet-service-id 1114112
    next
    edit "Pinterest-Web"
        set internet-service-id 1114113
    next
    edit "Pinterest-ICMP"
        set internet-service-id 1114114
    next
    edit "Pinterest-DNS"
        set internet-service-id 1114115
    next
    edit "Pinterest-Outbound_Email"
        set internet-service-id 1114116
    next
    edit "Pinterest-SSH"
        set internet-service-id 1114118
    next
    edit "Pinterest-FTP"
        set internet-service-id 1114119
    next
    edit "Pinterest-NTP"
        set internet-service-id 1114120
    next
    edit "Pinterest-Inbound_Email"
        set internet-service-id 1114121
    next
    edit "Pinterest-LDAP"
        set internet-service-id 1114126
    next
    edit "Pinterest-NetBIOS.Session.Service"
        set internet-service-id 1114127
    next
    edit "Pinterest-RTMP"
        set internet-service-id 1114128
    next
    edit "Pinterest-NetBIOS.Name.Service"
        set internet-service-id 1114136
    next
    edit "LogMeIn-Other"
        set internet-service-id 1179648
    next
    edit "LogMeIn-Web"
        set internet-service-id 1179649
    next
    edit "LogMeIn-ICMP"
        set internet-service-id 1179650
    next
    edit "LogMeIn-DNS"
        set internet-service-id 1179651
    next
    edit "LogMeIn-Outbound_Email"
        set internet-service-id 1179652
    next
    edit "LogMeIn-SSH"
        set internet-service-id 1179654
    next
    edit "LogMeIn-FTP"
        set internet-service-id 1179655
    next
    edit "LogMeIn-NTP"
        set internet-service-id 1179656
    next
    edit "LogMeIn-Inbound_Email"
        set internet-service-id 1179657
    next
    edit "LogMeIn-LDAP"
        set internet-service-id 1179662
    next
    edit "LogMeIn-NetBIOS.Session.Service"
        set internet-service-id 1179663
    next
    edit "LogMeIn-RTMP"
        set internet-service-id 1179664
    next
    edit "LogMeIn-NetBIOS.Name.Service"
        set internet-service-id 1179672
    next
    edit "LogMeIn-GoTo.Suite"
        set internet-service-id 1179767
    next
    edit "Fortinet-Other"
        set internet-service-id 1245184
    next
    edit "Fortinet-Web"
        set internet-service-id 1245185
    next
    edit "Fortinet-ICMP"
        set internet-service-id 1245186
    next
    edit "Fortinet-DNS"
        set internet-service-id 1245187
    next
    edit "Fortinet-Outbound_Email"
        set internet-service-id 1245188
    next
    edit "Fortinet-SSH"
        set internet-service-id 1245190
    next
    edit "Fortinet-FTP"
        set internet-service-id 1245191
    next
    edit "Fortinet-NTP"
        set internet-service-id 1245192
    next
    edit "Fortinet-Inbound_Email"
        set internet-service-id 1245193
    next
    edit "Fortinet-LDAP"
        set internet-service-id 1245198
    next
    edit "Fortinet-NetBIOS.Session.Service"
        set internet-service-id 1245199
    next
    edit "Fortinet-RTMP"
        set internet-service-id 1245200
    next
    edit "Fortinet-NetBIOS.Name.Service"
        set internet-service-id 1245208
    next
    edit "Fortinet-FortiGuard"
        set internet-service-id 1245324
    next
    edit "Fortinet-FortiMail.Cloud"
        set internet-service-id 1245325
    next
    edit "Fortinet-FortiCloud"
        set internet-service-id 1245326
    next
    edit "Kaspersky-Other"
        set internet-service-id 1310720
    next
    edit "Kaspersky-Web"
        set internet-service-id 1310721
    next
    edit "Kaspersky-ICMP"
        set internet-service-id 1310722
    next
    edit "Kaspersky-DNS"
        set internet-service-id 1310723
    next
    edit "Kaspersky-Outbound_Email"
        set internet-service-id 1310724
    next
    edit "Kaspersky-SSH"
        set internet-service-id 1310726
    next
    edit "Kaspersky-FTP"
        set internet-service-id 1310727
    next
    edit "Kaspersky-NTP"
        set internet-service-id 1310728
    next
    edit "Kaspersky-Inbound_Email"
        set internet-service-id 1310729
    next
    edit "Kaspersky-LDAP"
        set internet-service-id 1310734
    next
    edit "Kaspersky-NetBIOS.Session.Service"
        set internet-service-id 1310735
    next
    edit "Kaspersky-RTMP"
        set internet-service-id 1310736
    next
    edit "Kaspersky-NetBIOS.Name.Service"
        set internet-service-id 1310744
    next
    edit "McAfee-Other"
        set internet-service-id 1376256
    next
    edit "McAfee-Web"
        set internet-service-id 1376257
    next
    edit "McAfee-ICMP"
        set internet-service-id 1376258
    next
    edit "McAfee-DNS"
        set internet-service-id 1376259
    next
    edit "McAfee-Outbound_Email"
        set internet-service-id 1376260
    next
    edit "McAfee-SSH"
        set internet-service-id 1376262
    next
    edit "McAfee-FTP"
        set internet-service-id 1376263
    next
    edit "McAfee-NTP"
        set internet-service-id 1376264
    next
    edit "McAfee-Inbound_Email"
        set internet-service-id 1376265
    next
    edit "McAfee-LDAP"
        set internet-service-id 1376270
    next
    edit "McAfee-NetBIOS.Session.Service"
        set internet-service-id 1376271
    next
    edit "McAfee-RTMP"
        set internet-service-id 1376272
    next
    edit "McAfee-NetBIOS.Name.Service"
        set internet-service-id 1376280
    next
    edit "Symantec-Other"
        set internet-service-id 1441792
    next
    edit "Symantec-Web"
        set internet-service-id 1441793
    next
    edit "Symantec-ICMP"
        set internet-service-id 1441794
    next
    edit "Symantec-DNS"
        set internet-service-id 1441795
    next
    edit "Symantec-Outbound_Email"
        set internet-service-id 1441796
    next
    edit "Symantec-SSH"
        set internet-service-id 1441798
    next
    edit "Symantec-FTP"
        set internet-service-id 1441799
    next
    edit "Symantec-NTP"
        set internet-service-id 1441800
    next
    edit "Symantec-Inbound_Email"
        set internet-service-id 1441801
    next
    edit "Symantec-LDAP"
        set internet-service-id 1441806
    next
    edit "Symantec-NetBIOS.Session.Service"
        set internet-service-id 1441807
    next
    edit "Symantec-RTMP"
        set internet-service-id 1441808
    next
    edit "Symantec-NetBIOS.Name.Service"
        set internet-service-id 1441816
    next
    edit "Symantec-Symantec.Cloud"
        set internet-service-id 1441922
    next
    edit "VMware-Other"
        set internet-service-id 1507328
    next
    edit "VMware-Web"
        set internet-service-id 1507329
    next
    edit "VMware-ICMP"
        set internet-service-id 1507330
    next
    edit "VMware-DNS"
        set internet-service-id 1507331
    next
    edit "VMware-Outbound_Email"
        set internet-service-id 1507332
    next
    edit "VMware-SSH"
        set internet-service-id 1507334
    next
    edit "VMware-FTP"
        set internet-service-id 1507335
    next
    edit "VMware-NTP"
        set internet-service-id 1507336
    next
    edit "VMware-Inbound_Email"
        set internet-service-id 1507337
    next
    edit "VMware-LDAP"
        set internet-service-id 1507342
    next
    edit "VMware-NetBIOS.Session.Service"
        set internet-service-id 1507343
    next
    edit "VMware-RTMP"
        set internet-service-id 1507344
    next
    edit "VMware-NetBIOS.Name.Service"
        set internet-service-id 1507352
    next
    edit "VMware-Workspace.ONE"
        set internet-service-id 1507461
    next
    edit "AOL-Other"
        set internet-service-id 1572864
    next
    edit "AOL-Web"
        set internet-service-id 1572865
    next
    edit "AOL-ICMP"
        set internet-service-id 1572866
    next
    edit "AOL-DNS"
        set internet-service-id 1572867
    next
    edit "AOL-Outbound_Email"
        set internet-service-id 1572868
    next
    edit "AOL-SSH"
        set internet-service-id 1572870
    next
    edit "AOL-FTP"
        set internet-service-id 1572871
    next
    edit "AOL-NTP"
        set internet-service-id 1572872
    next
    edit "AOL-Inbound_Email"
        set internet-service-id 1572873
    next
    edit "AOL-LDAP"
        set internet-service-id 1572878
    next
    edit "AOL-NetBIOS.Session.Service"
        set internet-service-id 1572879
    next
    edit "AOL-RTMP"
        set internet-service-id 1572880
    next
    edit "AOL-NetBIOS.Name.Service"
        set internet-service-id 1572888
    next
    edit "RealNetworks-Other"
        set internet-service-id 1638400
    next
    edit "RealNetworks-Web"
        set internet-service-id 1638401
    next
    edit "RealNetworks-ICMP"
        set internet-service-id 1638402
    next
    edit "RealNetworks-DNS"
        set internet-service-id 1638403
    next
    edit "RealNetworks-Outbound_Email"
        set internet-service-id 1638404
    next
    edit "RealNetworks-SSH"
        set internet-service-id 1638406
    next
    edit "RealNetworks-FTP"
        set internet-service-id 1638407
    next
    edit "RealNetworks-NTP"
        set internet-service-id 1638408
    next
    edit "RealNetworks-Inbound_Email"
        set internet-service-id 1638409
    next
    edit "RealNetworks-LDAP"
        set internet-service-id 1638414
    next
    edit "RealNetworks-NetBIOS.Session.Service"
        set internet-service-id 1638415
    next
    edit "RealNetworks-RTMP"
        set internet-service-id 1638416
    next
    edit "RealNetworks-NetBIOS.Name.Service"
        set internet-service-id 1638424
    next
    edit "Zoho-Other"
        set internet-service-id 1703936
    next
    edit "Zoho-Web"
        set internet-service-id 1703937
    next
    edit "Zoho-ICMP"
        set internet-service-id 1703938
    next
    edit "Zoho-DNS"
        set internet-service-id 1703939
    next
    edit "Zoho-Outbound_Email"
        set internet-service-id 1703940
    next
    edit "Zoho-SSH"
        set internet-service-id 1703942
    next
    edit "Zoho-FTP"
        set internet-service-id 1703943
    next
    edit "Zoho-NTP"
        set internet-service-id 1703944
    next
    edit "Zoho-Inbound_Email"
        set internet-service-id 1703945
    next
    edit "Zoho-LDAP"
        set internet-service-id 1703950
    next
    edit "Zoho-NetBIOS.Session.Service"
        set internet-service-id 1703951
    next
    edit "Zoho-RTMP"
        set internet-service-id 1703952
    next
    edit "Zoho-NetBIOS.Name.Service"
        set internet-service-id 1703960
    next
    edit "Mozilla-Other"
        set internet-service-id 1769472
    next
    edit "Mozilla-Web"
        set internet-service-id 1769473
    next
    edit "Mozilla-ICMP"
        set internet-service-id 1769474
    next
    edit "Mozilla-DNS"
        set internet-service-id 1769475
    next
    edit "Mozilla-Outbound_Email"
        set internet-service-id 1769476
    next
    edit "Mozilla-SSH"
        set internet-service-id 1769478
    next
    edit "Mozilla-FTP"
        set internet-service-id 1769479
    next
    edit "Mozilla-NTP"
        set internet-service-id 1769480
    next
    edit "Mozilla-Inbound_Email"
        set internet-service-id 1769481
    next
    edit "Mozilla-LDAP"
        set internet-service-id 1769486
    next
    edit "Mozilla-NetBIOS.Session.Service"
        set internet-service-id 1769487
    next
    edit "Mozilla-RTMP"
        set internet-service-id 1769488
    next
    edit "Mozilla-NetBIOS.Name.Service"
        set internet-service-id 1769496
    next
    edit "TeamViewer-Other"
        set internet-service-id 1835008
    next
    edit "TeamViewer-Web"
        set internet-service-id 1835009
    next
    edit "TeamViewer-ICMP"
        set internet-service-id 1835010
    next
    edit "TeamViewer-DNS"
        set internet-service-id 1835011
    next
    edit "TeamViewer-Outbound_Email"
        set internet-service-id 1835012
    next
    edit "TeamViewer-SSH"
        set internet-service-id 1835014
    next
    edit "TeamViewer-FTP"
        set internet-service-id 1835015
    next
    edit "TeamViewer-NTP"
        set internet-service-id 1835016
    next
    edit "TeamViewer-Inbound_Email"
        set internet-service-id 1835017
    next
    edit "TeamViewer-LDAP"
        set internet-service-id 1835022
    next
    edit "TeamViewer-NetBIOS.Session.Service"
        set internet-service-id 1835023
    next
    edit "TeamViewer-RTMP"
        set internet-service-id 1835024
    next
    edit "TeamViewer-NetBIOS.Name.Service"
        set internet-service-id 1835032
    next
    edit "TeamViewer-TeamViewer"
        set internet-service-id 1835117
    next
    edit "HP-Other"
        set internet-service-id 1900544
    next
    edit "HP-Web"
        set internet-service-id 1900545
    next
    edit "HP-ICMP"
        set internet-service-id 1900546
    next
    edit "HP-DNS"
        set internet-service-id 1900547
    next
    edit "HP-Outbound_Email"
        set internet-service-id 1900548
    next
    edit "HP-SSH"
        set internet-service-id 1900550
    next
    edit "HP-FTP"
        set internet-service-id 1900551
    next
    edit "HP-NTP"
        set internet-service-id 1900552
    next
    edit "HP-Inbound_Email"
        set internet-service-id 1900553
    next
    edit "HP-LDAP"
        set internet-service-id 1900558
    next
    edit "HP-NetBIOS.Session.Service"
        set internet-service-id 1900559
    next
    edit "HP-RTMP"
        set internet-service-id 1900560
    next
    edit "HP-NetBIOS.Name.Service"
        set internet-service-id 1900568
    next
    edit "HP-Aruba"
        set internet-service-id 1900726
    next
    edit "Cisco-Other"
        set internet-service-id 1966080
    next
    edit "Cisco-Web"
        set internet-service-id 1966081
    next
    edit "Cisco-ICMP"
        set internet-service-id 1966082
    next
    edit "Cisco-DNS"
        set internet-service-id 1966083
    next
    edit "Cisco-Outbound_Email"
        set internet-service-id 1966084
    next
    edit "Cisco-SSH"
        set internet-service-id 1966086
    next
    edit "Cisco-FTP"
        set internet-service-id 1966087
    next
    edit "Cisco-NTP"
        set internet-service-id 1966088
    next
    edit "Cisco-Inbound_Email"
        set internet-service-id 1966089
    next
    edit "Cisco-LDAP"
        set internet-service-id 1966094
    next
    edit "Cisco-NetBIOS.Session.Service"
        set internet-service-id 1966095
    next
    edit "Cisco-RTMP"
        set internet-service-id 1966096
    next
    edit "Cisco-NetBIOS.Name.Service"
        set internet-service-id 1966104
    next
    edit "Cisco-Webex"
        set internet-service-id 1966183
    next
    edit "Cisco-Meraki.Cloud"
        set internet-service-id 1966218
    next
    edit "Cisco-Duo.Security"
        set internet-service-id 1966225
    next
    edit "Cisco-AppDynamic"
        set internet-service-id 1966260
    next
    edit "IBM-Other"
        set internet-service-id 2031616
    next
    edit "IBM-Web"
        set internet-service-id 2031617
    next
    edit "IBM-ICMP"
        set internet-service-id 2031618
    next
    edit "IBM-DNS"
        set internet-service-id 2031619
    next
    edit "IBM-Outbound_Email"
        set internet-service-id 2031620
    next
    edit "IBM-SSH"
        set internet-service-id 2031622
    next
    edit "IBM-FTP"
        set internet-service-id 2031623
    next
    edit "IBM-NTP"
        set internet-service-id 2031624
    next
    edit "IBM-Inbound_Email"
        set internet-service-id 2031625
    next
    edit "IBM-LDAP"
        set internet-service-id 2031630
    next
    edit "IBM-NetBIOS.Session.Service"
        set internet-service-id 2031631
    next
    edit "IBM-RTMP"
        set internet-service-id 2031632
    next
    edit "IBM-NetBIOS.Name.Service"
        set internet-service-id 2031640
    next
    edit "IBM-IBM.Cloud"
        set internet-service-id 2031748
    next
    edit "Citrix-Other"
        set internet-service-id 2097152
    next
    edit "Citrix-Web"
        set internet-service-id 2097153
    next
    edit "Citrix-ICMP"
        set internet-service-id 2097154
    next
    edit "Citrix-DNS"
        set internet-service-id 2097155
    next
    edit "Citrix-Outbound_Email"
        set internet-service-id 2097156
    next
    edit "Citrix-SSH"
        set internet-service-id 2097158
    next
    edit "Citrix-FTP"
        set internet-service-id 2097159
    next
    edit "Citrix-NTP"
        set internet-service-id 2097160
    next
    edit "Citrix-Inbound_Email"
        set internet-service-id 2097161
    next
    edit "Citrix-LDAP"
        set internet-service-id 2097166
    next
    edit "Citrix-NetBIOS.Session.Service"
        set internet-service-id 2097167
    next
    edit "Citrix-RTMP"
        set internet-service-id 2097168
    next
    edit "Citrix-NetBIOS.Name.Service"
        set internet-service-id 2097176
    next
    edit "Twitter-Other"
        set internet-service-id 2162688
    next
    edit "Twitter-Web"
        set internet-service-id 2162689
    next
    edit "Twitter-ICMP"
        set internet-service-id 2162690
    next
    edit "Twitter-DNS"
        set internet-service-id 2162691
    next
    edit "Twitter-Outbound_Email"
        set internet-service-id 2162692
    next
    edit "Twitter-SSH"
        set internet-service-id 2162694
    next
    edit "Twitter-FTP"
        set internet-service-id 2162695
    next
    edit "Twitter-NTP"
        set internet-service-id 2162696
    next
    edit "Twitter-Inbound_Email"
        set internet-service-id 2162697
    next
    edit "Twitter-LDAP"
        set internet-service-id 2162702
    next
    edit "Twitter-NetBIOS.Session.Service"
        set internet-service-id 2162703
    next
    edit "Twitter-RTMP"
        set internet-service-id 2162704
    next
    edit "Twitter-NetBIOS.Name.Service"
        set internet-service-id 2162712
    next
    edit "Dell-Other"
        set internet-service-id 2228224
    next
    edit "Dell-Web"
        set internet-service-id 2228225
    next
    edit "Dell-ICMP"
        set internet-service-id 2228226
    next
    edit "Dell-DNS"
        set internet-service-id 2228227
    next
    edit "Dell-Outbound_Email"
        set internet-service-id 2228228
    next
    edit "Dell-SSH"
        set internet-service-id 2228230
    next
    edit "Dell-FTP"
        set internet-service-id 2228231
    next
    edit "Dell-NTP"
        set internet-service-id 2228232
    next
    edit "Dell-Inbound_Email"
        set internet-service-id 2228233
    next
    edit "Dell-LDAP"
        set internet-service-id 2228238
    next
    edit "Dell-NetBIOS.Session.Service"
        set internet-service-id 2228239
    next
    edit "Dell-RTMP"
        set internet-service-id 2228240
    next
    edit "Dell-NetBIOS.Name.Service"
        set internet-service-id 2228248
    next
    edit "Vimeo-Other"
        set internet-service-id 2293760
    next
    edit "Vimeo-Web"
        set internet-service-id 2293761
    next
    edit "Vimeo-ICMP"
        set internet-service-id 2293762
    next
    edit "Vimeo-DNS"
        set internet-service-id 2293763
    next
    edit "Vimeo-Outbound_Email"
        set internet-service-id 2293764
    next
    edit "Vimeo-SSH"
        set internet-service-id 2293766
    next
    edit "Vimeo-FTP"
        set internet-service-id 2293767
    next
    edit "Vimeo-NTP"
        set internet-service-id 2293768
    next
    edit "Vimeo-Inbound_Email"
        set internet-service-id 2293769
    next
    edit "Vimeo-LDAP"
        set internet-service-id 2293774
    next
    edit "Vimeo-NetBIOS.Session.Service"
        set internet-service-id 2293775
    next
    edit "Vimeo-RTMP"
        set internet-service-id 2293776
    next
    edit "Vimeo-NetBIOS.Name.Service"
        set internet-service-id 2293784
    next
    edit "Redhat-Other"
        set internet-service-id 2359296
    next
    edit "Redhat-Web"
        set internet-service-id 2359297
    next
    edit "Redhat-ICMP"
        set internet-service-id 2359298
    next
    edit "Redhat-DNS"
        set internet-service-id 2359299
    next
    edit "Redhat-Outbound_Email"
        set internet-service-id 2359300
    next
    edit "Redhat-SSH"
        set internet-service-id 2359302
    next
    edit "Redhat-FTP"
        set internet-service-id 2359303
    next
    edit "Redhat-NTP"
        set internet-service-id 2359304
    next
    edit "Redhat-Inbound_Email"
        set internet-service-id 2359305
    next
    edit "Redhat-LDAP"
        set internet-service-id 2359310
    next
    edit "Redhat-NetBIOS.Session.Service"
        set internet-service-id 2359311
    next
    edit "Redhat-RTMP"
        set internet-service-id 2359312
    next
    edit "Redhat-NetBIOS.Name.Service"
        set internet-service-id 2359320
    next
    edit "VK-Other"
        set internet-service-id 2424832
    next
    edit "VK-Web"
        set internet-service-id 2424833
    next
    edit "VK-ICMP"
        set internet-service-id 2424834
    next
    edit "VK-DNS"
        set internet-service-id 2424835
    next
    edit "VK-Outbound_Email"
        set internet-service-id 2424836
    next
    edit "VK-SSH"
        set internet-service-id 2424838
    next
    edit "VK-FTP"
        set internet-service-id 2424839
    next
    edit "VK-NTP"
        set internet-service-id 2424840
    next
    edit "VK-Inbound_Email"
        set internet-service-id 2424841
    next
    edit "VK-LDAP"
        set internet-service-id 2424846
    next
    edit "VK-NetBIOS.Session.Service"
        set internet-service-id 2424847
    next
    edit "VK-RTMP"
        set internet-service-id 2424848
    next
    edit "VK-NetBIOS.Name.Service"
        set internet-service-id 2424856
    next
    edit "TrendMicro-Other"
        set internet-service-id 2490368
    next
    edit "TrendMicro-Web"
        set internet-service-id 2490369
    next
    edit "TrendMicro-ICMP"
        set internet-service-id 2490370
    next
    edit "TrendMicro-DNS"
        set internet-service-id 2490371
    next
    edit "TrendMicro-Outbound_Email"
        set internet-service-id 2490372
    next
    edit "TrendMicro-SSH"
        set internet-service-id 2490374
    next
    edit "TrendMicro-FTP"
        set internet-service-id 2490375
    next
    edit "TrendMicro-NTP"
        set internet-service-id 2490376
    next
    edit "TrendMicro-Inbound_Email"
        set internet-service-id 2490377
    next
    edit "TrendMicro-LDAP"
        set internet-service-id 2490382
    next
    edit "TrendMicro-NetBIOS.Session.Service"
        set internet-service-id 2490383
    next
    edit "TrendMicro-RTMP"
        set internet-service-id 2490384
    next
    edit "TrendMicro-NetBIOS.Name.Service"
        set internet-service-id 2490392
    next
    edit "Tencent-Other"
        set internet-service-id 2555904
    next
    edit "Tencent-Web"
        set internet-service-id 2555905
    next
    edit "Tencent-ICMP"
        set internet-service-id 2555906
    next
    edit "Tencent-DNS"
        set internet-service-id 2555907
    next
    edit "Tencent-Outbound_Email"
        set internet-service-id 2555908
    next
    edit "Tencent-SSH"
        set internet-service-id 2555910
    next
    edit "Tencent-FTP"
        set internet-service-id 2555911
    next
    edit "Tencent-NTP"
        set internet-service-id 2555912
    next
    edit "Tencent-Inbound_Email"
        set internet-service-id 2555913
    next
    edit "Tencent-LDAP"
        set internet-service-id 2555918
    next
    edit "Tencent-NetBIOS.Session.Service"
        set internet-service-id 2555919
    next
    edit "Tencent-RTMP"
        set internet-service-id 2555920
    next
    edit "Tencent-NetBIOS.Name.Service"
        set internet-service-id 2555928
    next
    edit "Ask-Other"
        set internet-service-id 2621440
    next
    edit "Ask-Web"
        set internet-service-id 2621441
    next
    edit "Ask-ICMP"
        set internet-service-id 2621442
    next
    edit "Ask-DNS"
        set internet-service-id 2621443
    next
    edit "Ask-Outbound_Email"
        set internet-service-id 2621444
    next
    edit "Ask-SSH"
        set internet-service-id 2621446
    next
    edit "Ask-FTP"
        set internet-service-id 2621447
    next
    edit "Ask-NTP"
        set internet-service-id 2621448
    next
    edit "Ask-Inbound_Email"
        set internet-service-id 2621449
    next
    edit "Ask-LDAP"
        set internet-service-id 2621454
    next
    edit "Ask-NetBIOS.Session.Service"
        set internet-service-id 2621455
    next
    edit "Ask-RTMP"
        set internet-service-id 2621456
    next
    edit "Ask-NetBIOS.Name.Service"
        set internet-service-id 2621464
    next
    edit "CNN-Other"
        set internet-service-id 2686976
    next
    edit "CNN-Web"
        set internet-service-id 2686977
    next
    edit "CNN-ICMP"
        set internet-service-id 2686978
    next
    edit "CNN-DNS"
        set internet-service-id 2686979
    next
    edit "CNN-Outbound_Email"
        set internet-service-id 2686980
    next
    edit "CNN-SSH"
        set internet-service-id 2686982
    next
    edit "CNN-FTP"
        set internet-service-id 2686983
    next
    edit "CNN-NTP"
        set internet-service-id 2686984
    next
    edit "CNN-Inbound_Email"
        set internet-service-id 2686985
    next
    edit "CNN-LDAP"
        set internet-service-id 2686990
    next
    edit "CNN-NetBIOS.Session.Service"
        set internet-service-id 2686991
    next
    edit "CNN-RTMP"
        set internet-service-id 2686992
    next
    edit "CNN-NetBIOS.Name.Service"
        set internet-service-id 2687000
    next
    edit "Myspace-Other"
        set internet-service-id 2752512
    next
    edit "Myspace-Web"
        set internet-service-id 2752513
    next
    edit "Myspace-ICMP"
        set internet-service-id 2752514
    next
    edit "Myspace-DNS"
        set internet-service-id 2752515
    next
    edit "Myspace-Outbound_Email"
        set internet-service-id 2752516
    next
    edit "Myspace-SSH"
        set internet-service-id 2752518
    next
    edit "Myspace-FTP"
        set internet-service-id 2752519
    next
    edit "Myspace-NTP"
        set internet-service-id 2752520
    next
    edit "Myspace-Inbound_Email"
        set internet-service-id 2752521
    next
    edit "Myspace-LDAP"
        set internet-service-id 2752526
    next
    edit "Myspace-NetBIOS.Session.Service"
        set internet-service-id 2752527
    next
    edit "Myspace-RTMP"
        set internet-service-id 2752528
    next
    edit "Myspace-NetBIOS.Name.Service"
        set internet-service-id 2752536
    next
    edit "Tor-Relay.Node"
        set internet-service-id 2818238
    next
    edit "Tor-Exit.Node"
        set internet-service-id 2818243
    next
    edit "Baidu-Other"
        set internet-service-id 2883584
    next
    edit "Baidu-Web"
        set internet-service-id 2883585
    next
    edit "Baidu-ICMP"
        set internet-service-id 2883586
    next
    edit "Baidu-DNS"
        set internet-service-id 2883587
    next
    edit "Baidu-Outbound_Email"
        set internet-service-id 2883588
    next
    edit "Baidu-SSH"
        set internet-service-id 2883590
    next
    edit "Baidu-FTP"
        set internet-service-id 2883591
    next
    edit "Baidu-NTP"
        set internet-service-id 2883592
    next
    edit "Baidu-Inbound_Email"
        set internet-service-id 2883593
    next
    edit "Baidu-LDAP"
        set internet-service-id 2883598
    next
    edit "Baidu-NetBIOS.Session.Service"
        set internet-service-id 2883599
    next
    edit "Baidu-RTMP"
        set internet-service-id 2883600
    next
    edit "Baidu-NetBIOS.Name.Service"
        set internet-service-id 2883608
    next
    edit "ntp.org-Other"
        set internet-service-id 2949120
    next
    edit "ntp.org-Web"
        set internet-service-id 2949121
    next
    edit "ntp.org-ICMP"
        set internet-service-id 2949122
    next
    edit "ntp.org-DNS"
        set internet-service-id 2949123
    next
    edit "ntp.org-Outbound_Email"
        set internet-service-id 2949124
    next
    edit "ntp.org-SSH"
        set internet-service-id 2949126
    next
    edit "ntp.org-FTP"
        set internet-service-id 2949127
    next
    edit "ntp.org-NTP"
        set internet-service-id 2949128
    next
    edit "ntp.org-Inbound_Email"
        set internet-service-id 2949129
    next
    edit "ntp.org-LDAP"
        set internet-service-id 2949134
    next
    edit "ntp.org-NetBIOS.Session.Service"
        set internet-service-id 2949135
    next
    edit "ntp.org-RTMP"
        set internet-service-id 2949136
    next
    edit "ntp.org-NetBIOS.Name.Service"
        set internet-service-id 2949144
    next
    edit "Proxy-Proxy.Server"
        set internet-service-id 3014850
    next
    edit "Botnet-C&C.Server"
        set internet-service-id 3080383
    next
    edit "Spam-Spamming.Server"
        set internet-service-id 3145920
    next
    edit "Phishing-Phishing.Server"
        set internet-service-id 3211457
    next
    edit "Zendesk-Other"
        set internet-service-id 3407872
    next
    edit "Zendesk-Web"
        set internet-service-id 3407873
    next
    edit "Zendesk-ICMP"
        set internet-service-id 3407874
    next
    edit "Zendesk-DNS"
        set internet-service-id 3407875
    next
    edit "Zendesk-Outbound_Email"
        set internet-service-id 3407876
    next
    edit "Zendesk-SSH"
        set internet-service-id 3407878
    next
    edit "Zendesk-FTP"
        set internet-service-id 3407879
    next
    edit "Zendesk-NTP"
        set internet-service-id 3407880
    next
    edit "Zendesk-Inbound_Email"
        set internet-service-id 3407881
    next
    edit "Zendesk-LDAP"
        set internet-service-id 3407886
    next
    edit "Zendesk-NetBIOS.Session.Service"
        set internet-service-id 3407887
    next
    edit "Zendesk-RTMP"
        set internet-service-id 3407888
    next
    edit "Zendesk-NetBIOS.Name.Service"
        set internet-service-id 3407896
    next
    edit "Zendesk-Zendesk.Suite"
        set internet-service-id 3408047
    next
    edit "DocuSign-Other"
        set internet-service-id 3473408
    next
    edit "DocuSign-Web"
        set internet-service-id 3473409
    next
    edit "DocuSign-ICMP"
        set internet-service-id 3473410
    next
    edit "DocuSign-DNS"
        set internet-service-id 3473411
    next
    edit "DocuSign-Outbound_Email"
        set internet-service-id 3473412
    next
    edit "DocuSign-SSH"
        set internet-service-id 3473414
    next
    edit "DocuSign-FTP"
        set internet-service-id 3473415
    next
    edit "DocuSign-NTP"
        set internet-service-id 3473416
    next
    edit "DocuSign-Inbound_Email"
        set internet-service-id 3473417
    next
    edit "DocuSign-LDAP"
        set internet-service-id 3473422
    next
    edit "DocuSign-NetBIOS.Session.Service"
        set internet-service-id 3473423
    next
    edit "DocuSign-RTMP"
        set internet-service-id 3473424
    next
    edit "DocuSign-NetBIOS.Name.Service"
        set internet-service-id 3473432
    next
    edit "ServiceNow-Other"
        set internet-service-id 3538944
    next
    edit "ServiceNow-Web"
        set internet-service-id 3538945
    next
    edit "ServiceNow-ICMP"
        set internet-service-id 3538946
    next
    edit "ServiceNow-DNS"
        set internet-service-id 3538947
    next
    edit "ServiceNow-Outbound_Email"
        set internet-service-id 3538948
    next
    edit "ServiceNow-SSH"
        set internet-service-id 3538950
    next
    edit "ServiceNow-FTP"
        set internet-service-id 3538951
    next
    edit "ServiceNow-NTP"
        set internet-service-id 3538952
    next
    edit "ServiceNow-Inbound_Email"
        set internet-service-id 3538953
    next
    edit "ServiceNow-LDAP"
        set internet-service-id 3538958
    next
    edit "ServiceNow-NetBIOS.Session.Service"
        set internet-service-id 3538959
    next
    edit "ServiceNow-RTMP"
        set internet-service-id 3538960
    next
    edit "ServiceNow-NetBIOS.Name.Service"
        set internet-service-id 3538968
    next
    edit "GitHub-GitHub"
        set internet-service-id 3604638
    next
    edit "Workday-Other"
        set internet-service-id 3670016
    next
    edit "Workday-Web"
        set internet-service-id 3670017
    next
    edit "Workday-ICMP"
        set internet-service-id 3670018
    next
    edit "Workday-DNS"
        set internet-service-id 3670019
    next
    edit "Workday-Outbound_Email"
        set internet-service-id 3670020
    next
    edit "Workday-SSH"
        set internet-service-id 3670022
    next
    edit "Workday-FTP"
        set internet-service-id 3670023
    next
    edit "Workday-NTP"
        set internet-service-id 3670024
    next
    edit "Workday-Inbound_Email"
        set internet-service-id 3670025
    next
    edit "Workday-LDAP"
        set internet-service-id 3670030
    next
    edit "Workday-NetBIOS.Session.Service"
        set internet-service-id 3670031
    next
    edit "Workday-RTMP"
        set internet-service-id 3670032
    next
    edit "Workday-NetBIOS.Name.Service"
        set internet-service-id 3670040
    next
    edit "HubSpot-Other"
        set internet-service-id 3735552
    next
    edit "HubSpot-Web"
        set internet-service-id 3735553
    next
    edit "HubSpot-ICMP"
        set internet-service-id 3735554
    next
    edit "HubSpot-DNS"
        set internet-service-id 3735555
    next
    edit "HubSpot-Outbound_Email"
        set internet-service-id 3735556
    next
    edit "HubSpot-SSH"
        set internet-service-id 3735558
    next
    edit "HubSpot-FTP"
        set internet-service-id 3735559
    next
    edit "HubSpot-NTP"
        set internet-service-id 3735560
    next
    edit "HubSpot-Inbound_Email"
        set internet-service-id 3735561
    next
    edit "HubSpot-LDAP"
        set internet-service-id 3735566
    next
    edit "HubSpot-NetBIOS.Session.Service"
        set internet-service-id 3735567
    next
    edit "HubSpot-RTMP"
        set internet-service-id 3735568
    next
    edit "HubSpot-NetBIOS.Name.Service"
        set internet-service-id 3735576
    next
    edit "Twilio-Other"
        set internet-service-id 3801088
    next
    edit "Twilio-Web"
        set internet-service-id 3801089
    next
    edit "Twilio-ICMP"
        set internet-service-id 3801090
    next
    edit "Twilio-DNS"
        set internet-service-id 3801091
    next
    edit "Twilio-Outbound_Email"
        set internet-service-id 3801092
    next
    edit "Twilio-SSH"
        set internet-service-id 3801094
    next
    edit "Twilio-FTP"
        set internet-service-id 3801095
    next
    edit "Twilio-NTP"
        set internet-service-id 3801096
    next
    edit "Twilio-Inbound_Email"
        set internet-service-id 3801097
    next
    edit "Twilio-LDAP"
        set internet-service-id 3801102
    next
    edit "Twilio-NetBIOS.Session.Service"
        set internet-service-id 3801103
    next
    edit "Twilio-RTMP"
        set internet-service-id 3801104
    next
    edit "Twilio-NetBIOS.Name.Service"
        set internet-service-id 3801112
    next
    edit "Twilio-Elastic.SIP.Trunking"
        set internet-service-id 3801277
    next
    edit "Coupa-Other"
        set internet-service-id 3866624
    next
    edit "Coupa-Web"
        set internet-service-id 3866625
    next
    edit "Coupa-ICMP"
        set internet-service-id 3866626
    next
    edit "Coupa-DNS"
        set internet-service-id 3866627
    next
    edit "Coupa-Outbound_Email"
        set internet-service-id 3866628
    next
    edit "Coupa-SSH"
        set internet-service-id 3866630
    next
    edit "Coupa-FTP"
        set internet-service-id 3866631
    next
    edit "Coupa-NTP"
        set internet-service-id 3866632
    next
    edit "Coupa-Inbound_Email"
        set internet-service-id 3866633
    next
    edit "Coupa-LDAP"
        set internet-service-id 3866638
    next
    edit "Coupa-NetBIOS.Session.Service"
        set internet-service-id 3866639
    next
    edit "Coupa-RTMP"
        set internet-service-id 3866640
    next
    edit "Coupa-NetBIOS.Name.Service"
        set internet-service-id 3866648
    next
    edit "Atlassian-Other"
        set internet-service-id 3932160
    next
    edit "Atlassian-Web"
        set internet-service-id 3932161
    next
    edit "Atlassian-ICMP"
        set internet-service-id 3932162
    next
    edit "Atlassian-DNS"
        set internet-service-id 3932163
    next
    edit "Atlassian-Outbound_Email"
        set internet-service-id 3932164
    next
    edit "Atlassian-SSH"
        set internet-service-id 3932166
    next
    edit "Atlassian-FTP"
        set internet-service-id 3932167
    next
    edit "Atlassian-NTP"
        set internet-service-id 3932168
    next
    edit "Atlassian-Inbound_Email"
        set internet-service-id 3932169
    next
    edit "Atlassian-LDAP"
        set internet-service-id 3932174
    next
    edit "Atlassian-NetBIOS.Session.Service"
        set internet-service-id 3932175
    next
    edit "Atlassian-RTMP"
        set internet-service-id 3932176
    next
    edit "Atlassian-NetBIOS.Name.Service"
        set internet-service-id 3932184
    next
    edit "Xero-Other"
        set internet-service-id 3997696
    next
    edit "Xero-Web"
        set internet-service-id 3997697
    next
    edit "Xero-ICMP"
        set internet-service-id 3997698
    next
    edit "Xero-DNS"
        set internet-service-id 3997699
    next
    edit "Xero-Outbound_Email"
        set internet-service-id 3997700
    next
    edit "Xero-SSH"
        set internet-service-id 3997702
    next
    edit "Xero-FTP"
        set internet-service-id 3997703
    next
    edit "Xero-NTP"
        set internet-service-id 3997704
    next
    edit "Xero-Inbound_Email"
        set internet-service-id 3997705
    next
    edit "Xero-LDAP"
        set internet-service-id 3997710
    next
    edit "Xero-NetBIOS.Session.Service"
        set internet-service-id 3997711
    next
    edit "Xero-RTMP"
        set internet-service-id 3997712
    next
    edit "Xero-NetBIOS.Name.Service"
        set internet-service-id 3997720
    next
    edit "Zuora-Other"
        set internet-service-id 4063232
    next
    edit "Zuora-Web"
        set internet-service-id 4063233
    next
    edit "Zuora-ICMP"
        set internet-service-id 4063234
    next
    edit "Zuora-DNS"
        set internet-service-id 4063235
    next
    edit "Zuora-Outbound_Email"
        set internet-service-id 4063236
    next
    edit "Zuora-SSH"
        set internet-service-id 4063238
    next
    edit "Zuora-FTP"
        set internet-service-id 4063239
    next
    edit "Zuora-NTP"
        set internet-service-id 4063240
    next
    edit "Zuora-Inbound_Email"
        set internet-service-id 4063241
    next
    edit "Zuora-LDAP"
        set internet-service-id 4063246
    next
    edit "Zuora-NetBIOS.Session.Service"
        set internet-service-id 4063247
    next
    edit "Zuora-RTMP"
        set internet-service-id 4063248
    next
    edit "Zuora-NetBIOS.Name.Service"
        set internet-service-id 4063256
    next
    edit "AdRoll-Other"
        set internet-service-id 4128768
    next
    edit "AdRoll-Web"
        set internet-service-id 4128769
    next
    edit "AdRoll-ICMP"
        set internet-service-id 4128770
    next
    edit "AdRoll-DNS"
        set internet-service-id 4128771
    next
    edit "AdRoll-Outbound_Email"
        set internet-service-id 4128772
    next
    edit "AdRoll-SSH"
        set internet-service-id 4128774
    next
    edit "AdRoll-FTP"
        set internet-service-id 4128775
    next
    edit "AdRoll-NTP"
        set internet-service-id 4128776
    next
    edit "AdRoll-Inbound_Email"
        set internet-service-id 4128777
    next
    edit "AdRoll-LDAP"
        set internet-service-id 4128782
    next
    edit "AdRoll-NetBIOS.Session.Service"
        set internet-service-id 4128783
    next
    edit "AdRoll-RTMP"
        set internet-service-id 4128784
    next
    edit "AdRoll-NetBIOS.Name.Service"
        set internet-service-id 4128792
    next
    edit "Xactly-Other"
        set internet-service-id 4194304
    next
    edit "Xactly-Web"
        set internet-service-id 4194305
    next
    edit "Xactly-ICMP"
        set internet-service-id 4194306
    next
    edit "Xactly-DNS"
        set internet-service-id 4194307
    next
    edit "Xactly-Outbound_Email"
        set internet-service-id 4194308
    next
    edit "Xactly-SSH"
        set internet-service-id 4194310
    next
    edit "Xactly-FTP"
        set internet-service-id 4194311
    next
    edit "Xactly-NTP"
        set internet-service-id 4194312
    next
    edit "Xactly-Inbound_Email"
        set internet-service-id 4194313
    next
    edit "Xactly-LDAP"
        set internet-service-id 4194318
    next
    edit "Xactly-NetBIOS.Session.Service"
        set internet-service-id 4194319
    next
    edit "Xactly-RTMP"
        set internet-service-id 4194320
    next
    edit "Xactly-NetBIOS.Name.Service"
        set internet-service-id 4194328
    next
    edit "Intuit-Other"
        set internet-service-id 4259840
    next
    edit "Intuit-Web"
        set internet-service-id 4259841
    next
    edit "Intuit-ICMP"
        set internet-service-id 4259842
    next
    edit "Intuit-DNS"
        set internet-service-id 4259843
    next
    edit "Intuit-Outbound_Email"
        set internet-service-id 4259844
    next
    edit "Intuit-SSH"
        set internet-service-id 4259846
    next
    edit "Intuit-FTP"
        set internet-service-id 4259847
    next
    edit "Intuit-NTP"
        set internet-service-id 4259848
    next
    edit "Intuit-Inbound_Email"
        set internet-service-id 4259849
    next
    edit "Intuit-LDAP"
        set internet-service-id 4259854
    next
    edit "Intuit-NetBIOS.Session.Service"
        set internet-service-id 4259855
    next
    edit "Intuit-RTMP"
        set internet-service-id 4259856
    next
    edit "Intuit-NetBIOS.Name.Service"
        set internet-service-id 4259864
    next
    edit "Marketo-Other"
        set internet-service-id 4325376
    next
    edit "Marketo-Web"
        set internet-service-id 4325377
    next
    edit "Marketo-ICMP"
        set internet-service-id 4325378
    next
    edit "Marketo-DNS"
        set internet-service-id 4325379
    next
    edit "Marketo-Outbound_Email"
        set internet-service-id 4325380
    next
    edit "Marketo-SSH"
        set internet-service-id 4325382
    next
    edit "Marketo-FTP"
        set internet-service-id 4325383
    next
    edit "Marketo-NTP"
        set internet-service-id 4325384
    next
    edit "Marketo-Inbound_Email"
        set internet-service-id 4325385
    next
    edit "Marketo-LDAP"
        set internet-service-id 4325390
    next
    edit "Marketo-NetBIOS.Session.Service"
        set internet-service-id 4325391
    next
    edit "Marketo-RTMP"
        set internet-service-id 4325392
    next
    edit "Marketo-NetBIOS.Name.Service"
        set internet-service-id 4325400
    next
    edit "Bill-Other"
        set internet-service-id 4456448
    next
    edit "Bill-Web"
        set internet-service-id 4456449
    next
    edit "Bill-ICMP"
        set internet-service-id 4456450
    next
    edit "Bill-DNS"
        set internet-service-id 4456451
    next
    edit "Bill-Outbound_Email"
        set internet-service-id 4456452
    next
    edit "Bill-SSH"
        set internet-service-id 4456454
    next
    edit "Bill-FTP"
        set internet-service-id 4456455
    next
    edit "Bill-NTP"
        set internet-service-id 4456456
    next
    edit "Bill-Inbound_Email"
        set internet-service-id 4456457
    next
    edit "Bill-LDAP"
        set internet-service-id 4456462
    next
    edit "Bill-NetBIOS.Session.Service"
        set internet-service-id 4456463
    next
    edit "Bill-RTMP"
        set internet-service-id 4456464
    next
    edit "Bill-NetBIOS.Name.Service"
        set internet-service-id 4456472
    next
    edit "Shopify-Other"
        set internet-service-id 4521984
    next
    edit "Shopify-Web"
        set internet-service-id 4521985
    next
    edit "Shopify-ICMP"
        set internet-service-id 4521986
    next
    edit "Shopify-DNS"
        set internet-service-id 4521987
    next
    edit "Shopify-Outbound_Email"
        set internet-service-id 4521988
    next
    edit "Shopify-SSH"
        set internet-service-id 4521990
    next
    edit "Shopify-FTP"
        set internet-service-id 4521991
    next
    edit "Shopify-NTP"
        set internet-service-id 4521992
    next
    edit "Shopify-Inbound_Email"
        set internet-service-id 4521993
    next
    edit "Shopify-LDAP"
        set internet-service-id 4521998
    next
    edit "Shopify-NetBIOS.Session.Service"
        set internet-service-id 4521999
    next
    edit "Shopify-RTMP"
        set internet-service-id 4522000
    next
    edit "Shopify-NetBIOS.Name.Service"
        set internet-service-id 4522008
    next
    edit "Shopify-Shopify"
        set internet-service-id 4522162
    next
    edit "MuleSoft-Other"
        set internet-service-id 4587520
    next
    edit "MuleSoft-Web"
        set internet-service-id 4587521
    next
    edit "MuleSoft-ICMP"
        set internet-service-id 4587522
    next
    edit "MuleSoft-DNS"
        set internet-service-id 4587523
    next
    edit "MuleSoft-Outbound_Email"
        set internet-service-id 4587524
    next
    edit "MuleSoft-SSH"
        set internet-service-id 4587526
    next
    edit "MuleSoft-FTP"
        set internet-service-id 4587527
    next
    edit "MuleSoft-NTP"
        set internet-service-id 4587528
    next
    edit "MuleSoft-Inbound_Email"
        set internet-service-id 4587529
    next
    edit "MuleSoft-LDAP"
        set internet-service-id 4587534
    next
    edit "MuleSoft-NetBIOS.Session.Service"
        set internet-service-id 4587535
    next
    edit "MuleSoft-RTMP"
        set internet-service-id 4587536
    next
    edit "MuleSoft-NetBIOS.Name.Service"
        set internet-service-id 4587544
    next
    edit "Cornerstone-Other"
        set internet-service-id 4653056
    next
    edit "Cornerstone-Web"
        set internet-service-id 4653057
    next
    edit "Cornerstone-ICMP"
        set internet-service-id 4653058
    next
    edit "Cornerstone-DNS"
        set internet-service-id 4653059
    next
    edit "Cornerstone-Outbound_Email"
        set internet-service-id 4653060
    next
    edit "Cornerstone-SSH"
        set internet-service-id 4653062
    next
    edit "Cornerstone-FTP"
        set internet-service-id 4653063
    next
    edit "Cornerstone-NTP"
        set internet-service-id 4653064
    next
    edit "Cornerstone-Inbound_Email"
        set internet-service-id 4653065
    next
    edit "Cornerstone-LDAP"
        set internet-service-id 4653070
    next
    edit "Cornerstone-NetBIOS.Session.Service"
        set internet-service-id 4653071
    next
    edit "Cornerstone-RTMP"
        set internet-service-id 4653072
    next
    edit "Cornerstone-NetBIOS.Name.Service"
        set internet-service-id 4653080
    next
    edit "Eventbrite-Other"
        set internet-service-id 4718592
    next
    edit "Eventbrite-Web"
        set internet-service-id 4718593
    next
    edit "Eventbrite-ICMP"
        set internet-service-id 4718594
    next
    edit "Eventbrite-DNS"
        set internet-service-id 4718595
    next
    edit "Eventbrite-Outbound_Email"
        set internet-service-id 4718596
    next
    edit "Eventbrite-SSH"
        set internet-service-id 4718598
    next
    edit "Eventbrite-FTP"
        set internet-service-id 4718599
    next
    edit "Eventbrite-NTP"
        set internet-service-id 4718600
    next
    edit "Eventbrite-Inbound_Email"
        set internet-service-id 4718601
    next
    edit "Eventbrite-LDAP"
        set internet-service-id 4718606
    next
    edit "Eventbrite-NetBIOS.Session.Service"
        set internet-service-id 4718607
    next
    edit "Eventbrite-RTMP"
        set internet-service-id 4718608
    next
    edit "Eventbrite-NetBIOS.Name.Service"
        set internet-service-id 4718616
    next
    edit "Paychex-Other"
        set internet-service-id 4784128
    next
    edit "Paychex-Web"
        set internet-service-id 4784129
    next
    edit "Paychex-ICMP"
        set internet-service-id 4784130
    next
    edit "Paychex-DNS"
        set internet-service-id 4784131
    next
    edit "Paychex-Outbound_Email"
        set internet-service-id 4784132
    next
    edit "Paychex-SSH"
        set internet-service-id 4784134
    next
    edit "Paychex-FTP"
        set internet-service-id 4784135
    next
    edit "Paychex-NTP"
        set internet-service-id 4784136
    next
    edit "Paychex-Inbound_Email"
        set internet-service-id 4784137
    next
    edit "Paychex-LDAP"
        set internet-service-id 4784142
    next
    edit "Paychex-NetBIOS.Session.Service"
        set internet-service-id 4784143
    next
    edit "Paychex-RTMP"
        set internet-service-id 4784144
    next
    edit "Paychex-NetBIOS.Name.Service"
        set internet-service-id 4784152
    next
    edit "NewRelic-Other"
        set internet-service-id 4849664
    next
    edit "NewRelic-Web"
        set internet-service-id 4849665
    next
    edit "NewRelic-ICMP"
        set internet-service-id 4849666
    next
    edit "NewRelic-DNS"
        set internet-service-id 4849667
    next
    edit "NewRelic-Outbound_Email"
        set internet-service-id 4849668
    next
    edit "NewRelic-SSH"
        set internet-service-id 4849670
    next
    edit "NewRelic-FTP"
        set internet-service-id 4849671
    next
    edit "NewRelic-NTP"
        set internet-service-id 4849672
    next
    edit "NewRelic-Inbound_Email"
        set internet-service-id 4849673
    next
    edit "NewRelic-LDAP"
        set internet-service-id 4849678
    next
    edit "NewRelic-NetBIOS.Session.Service"
        set internet-service-id 4849679
    next
    edit "NewRelic-RTMP"
        set internet-service-id 4849680
    next
    edit "NewRelic-NetBIOS.Name.Service"
        set internet-service-id 4849688
    next
    edit "Splunk-Other"
        set internet-service-id 4915200
    next
    edit "Splunk-Web"
        set internet-service-id 4915201
    next
    edit "Splunk-ICMP"
        set internet-service-id 4915202
    next
    edit "Splunk-DNS"
        set internet-service-id 4915203
    next
    edit "Splunk-Outbound_Email"
        set internet-service-id 4915204
    next
    edit "Splunk-SSH"
        set internet-service-id 4915206
    next
    edit "Splunk-FTP"
        set internet-service-id 4915207
    next
    edit "Splunk-NTP"
        set internet-service-id 4915208
    next
    edit "Splunk-Inbound_Email"
        set internet-service-id 4915209
    next
    edit "Splunk-LDAP"
        set internet-service-id 4915214
    next
    edit "Splunk-NetBIOS.Session.Service"
        set internet-service-id 4915215
    next
    edit "Splunk-RTMP"
        set internet-service-id 4915216
    next
    edit "Splunk-NetBIOS.Name.Service"
        set internet-service-id 4915224
    next
    edit "Domo-Other"
        set internet-service-id 4980736
    next
    edit "Domo-Web"
        set internet-service-id 4980737
    next
    edit "Domo-ICMP"
        set internet-service-id 4980738
    next
    edit "Domo-DNS"
        set internet-service-id 4980739
    next
    edit "Domo-Outbound_Email"
        set internet-service-id 4980740
    next
    edit "Domo-SSH"
        set internet-service-id 4980742
    next
    edit "Domo-FTP"
        set internet-service-id 4980743
    next
    edit "Domo-NTP"
        set internet-service-id 4980744
    next
    edit "Domo-Inbound_Email"
        set internet-service-id 4980745
    next
    edit "Domo-LDAP"
        set internet-service-id 4980750
    next
    edit "Domo-NetBIOS.Session.Service"
        set internet-service-id 4980751
    next
    edit "Domo-RTMP"
        set internet-service-id 4980752
    next
    edit "Domo-NetBIOS.Name.Service"
        set internet-service-id 4980760
    next
    edit "FreshBooks-Other"
        set internet-service-id 5046272
    next
    edit "FreshBooks-Web"
        set internet-service-id 5046273
    next
    edit "FreshBooks-ICMP"
        set internet-service-id 5046274
    next
    edit "FreshBooks-DNS"
        set internet-service-id 5046275
    next
    edit "FreshBooks-Outbound_Email"
        set internet-service-id 5046276
    next
    edit "FreshBooks-SSH"
        set internet-service-id 5046278
    next
    edit "FreshBooks-FTP"
        set internet-service-id 5046279
    next
    edit "FreshBooks-NTP"
        set internet-service-id 5046280
    next
    edit "FreshBooks-Inbound_Email"
        set internet-service-id 5046281
    next
    edit "FreshBooks-LDAP"
        set internet-service-id 5046286
    next
    edit "FreshBooks-NetBIOS.Session.Service"
        set internet-service-id 5046287
    next
    edit "FreshBooks-RTMP"
        set internet-service-id 5046288
    next
    edit "FreshBooks-NetBIOS.Name.Service"
        set internet-service-id 5046296
    next
    edit "Tableau-Other"
        set internet-service-id 5111808
    next
    edit "Tableau-Web"
        set internet-service-id 5111809
    next
    edit "Tableau-ICMP"
        set internet-service-id 5111810
    next
    edit "Tableau-DNS"
        set internet-service-id 5111811
    next
    edit "Tableau-Outbound_Email"
        set internet-service-id 5111812
    next
    edit "Tableau-SSH"
        set internet-service-id 5111814
    next
    edit "Tableau-FTP"
        set internet-service-id 5111815
    next
    edit "Tableau-NTP"
        set internet-service-id 5111816
    next
    edit "Tableau-Inbound_Email"
        set internet-service-id 5111817
    next
    edit "Tableau-LDAP"
        set internet-service-id 5111822
    next
    edit "Tableau-NetBIOS.Session.Service"
        set internet-service-id 5111823
    next
    edit "Tableau-RTMP"
        set internet-service-id 5111824
    next
    edit "Tableau-NetBIOS.Name.Service"
        set internet-service-id 5111832
    next
    edit "Druva-Other"
        set internet-service-id 5177344
    next
    edit "Druva-Web"
        set internet-service-id 5177345
    next
    edit "Druva-ICMP"
        set internet-service-id 5177346
    next
    edit "Druva-DNS"
        set internet-service-id 5177347
    next
    edit "Druva-Outbound_Email"
        set internet-service-id 5177348
    next
    edit "Druva-SSH"
        set internet-service-id 5177350
    next
    edit "Druva-FTP"
        set internet-service-id 5177351
    next
    edit "Druva-NTP"
        set internet-service-id 5177352
    next
    edit "Druva-Inbound_Email"
        set internet-service-id 5177353
    next
    edit "Druva-LDAP"
        set internet-service-id 5177358
    next
    edit "Druva-NetBIOS.Session.Service"
        set internet-service-id 5177359
    next
    edit "Druva-RTMP"
        set internet-service-id 5177360
    next
    edit "Druva-NetBIOS.Name.Service"
        set internet-service-id 5177368
    next
    edit "Act-on-Other"
        set internet-service-id 5242880
    next
    edit "Act-on-Web"
        set internet-service-id 5242881
    next
    edit "Act-on-ICMP"
        set internet-service-id 5242882
    next
    edit "Act-on-DNS"
        set internet-service-id 5242883
    next
    edit "Act-on-Outbound_Email"
        set internet-service-id 5242884
    next
    edit "Act-on-SSH"
        set internet-service-id 5242886
    next
    edit "Act-on-FTP"
        set internet-service-id 5242887
    next
    edit "Act-on-NTP"
        set internet-service-id 5242888
    next
    edit "Act-on-Inbound_Email"
        set internet-service-id 5242889
    next
    edit "Act-on-LDAP"
        set internet-service-id 5242894
    next
    edit "Act-on-NetBIOS.Session.Service"
        set internet-service-id 5242895
    next
    edit "Act-on-RTMP"
        set internet-service-id 5242896
    next
    edit "Act-on-NetBIOS.Name.Service"
        set internet-service-id 5242904
    next
    edit "GoodData-Other"
        set internet-service-id 5308416
    next
    edit "GoodData-Web"
        set internet-service-id 5308417
    next
    edit "GoodData-ICMP"
        set internet-service-id 5308418
    next
    edit "GoodData-DNS"
        set internet-service-id 5308419
    next
    edit "GoodData-Outbound_Email"
        set internet-service-id 5308420
    next
    edit "GoodData-SSH"
        set internet-service-id 5308422
    next
    edit "GoodData-FTP"
        set internet-service-id 5308423
    next
    edit "GoodData-NTP"
        set internet-service-id 5308424
    next
    edit "GoodData-Inbound_Email"
        set internet-service-id 5308425
    next
    edit "GoodData-LDAP"
        set internet-service-id 5308430
    next
    edit "GoodData-NetBIOS.Session.Service"
        set internet-service-id 5308431
    next
    edit "GoodData-RTMP"
        set internet-service-id 5308432
    next
    edit "GoodData-NetBIOS.Name.Service"
        set internet-service-id 5308440
    next
    edit "SurveyMonkey-Other"
        set internet-service-id 5373952
    next
    edit "SurveyMonkey-Web"
        set internet-service-id 5373953
    next
    edit "SurveyMonkey-ICMP"
        set internet-service-id 5373954
    next
    edit "SurveyMonkey-DNS"
        set internet-service-id 5373955
    next
    edit "SurveyMonkey-Outbound_Email"
        set internet-service-id 5373956
    next
    edit "SurveyMonkey-SSH"
        set internet-service-id 5373958
    next
    edit "SurveyMonkey-FTP"
        set internet-service-id 5373959
    next
    edit "SurveyMonkey-NTP"
        set internet-service-id 5373960
    next
    edit "SurveyMonkey-Inbound_Email"
        set internet-service-id 5373961
    next
    edit "SurveyMonkey-LDAP"
        set internet-service-id 5373966
    next
    edit "SurveyMonkey-NetBIOS.Session.Service"
        set internet-service-id 5373967
    next
    edit "SurveyMonkey-RTMP"
        set internet-service-id 5373968
    next
    edit "SurveyMonkey-NetBIOS.Name.Service"
        set internet-service-id 5373976
    next
    edit "Cvent-Other"
        set internet-service-id 5439488
    next
    edit "Cvent-Web"
        set internet-service-id 5439489
    next
    edit "Cvent-ICMP"
        set internet-service-id 5439490
    next
    edit "Cvent-DNS"
        set internet-service-id 5439491
    next
    edit "Cvent-Outbound_Email"
        set internet-service-id 5439492
    next
    edit "Cvent-SSH"
        set internet-service-id 5439494
    next
    edit "Cvent-FTP"
        set internet-service-id 5439495
    next
    edit "Cvent-NTP"
        set internet-service-id 5439496
    next
    edit "Cvent-Inbound_Email"
        set internet-service-id 5439497
    next
    edit "Cvent-LDAP"
        set internet-service-id 5439502
    next
    edit "Cvent-NetBIOS.Session.Service"
        set internet-service-id 5439503
    next
    edit "Cvent-RTMP"
        set internet-service-id 5439504
    next
    edit "Cvent-NetBIOS.Name.Service"
        set internet-service-id 5439512
    next
    edit "Blackbaud-Other"
        set internet-service-id 5505024
    next
    edit "Blackbaud-Web"
        set internet-service-id 5505025
    next
    edit "Blackbaud-ICMP"
        set internet-service-id 5505026
    next
    edit "Blackbaud-DNS"
        set internet-service-id 5505027
    next
    edit "Blackbaud-Outbound_Email"
        set internet-service-id 5505028
    next
    edit "Blackbaud-SSH"
        set internet-service-id 5505030
    next
    edit "Blackbaud-FTP"
        set internet-service-id 5505031
    next
    edit "Blackbaud-NTP"
        set internet-service-id 5505032
    next
    edit "Blackbaud-Inbound_Email"
        set internet-service-id 5505033
    next
    edit "Blackbaud-LDAP"
        set internet-service-id 5505038
    next
    edit "Blackbaud-NetBIOS.Session.Service"
        set internet-service-id 5505039
    next
    edit "Blackbaud-RTMP"
        set internet-service-id 5505040
    next
    edit "Blackbaud-NetBIOS.Name.Service"
        set internet-service-id 5505048
    next
    edit "InsideSales-Other"
        set internet-service-id 5570560
    next
    edit "InsideSales-Web"
        set internet-service-id 5570561
    next
    edit "InsideSales-ICMP"
        set internet-service-id 5570562
    next
    edit "InsideSales-DNS"
        set internet-service-id 5570563
    next
    edit "InsideSales-Outbound_Email"
        set internet-service-id 5570564
    next
    edit "InsideSales-SSH"
        set internet-service-id 5570566
    next
    edit "InsideSales-FTP"
        set internet-service-id 5570567
    next
    edit "InsideSales-NTP"
        set internet-service-id 5570568
    next
    edit "InsideSales-Inbound_Email"
        set internet-service-id 5570569
    next
    edit "InsideSales-LDAP"
        set internet-service-id 5570574
    next
    edit "InsideSales-NetBIOS.Session.Service"
        set internet-service-id 5570575
    next
    edit "InsideSales-RTMP"
        set internet-service-id 5570576
    next
    edit "InsideSales-NetBIOS.Name.Service"
        set internet-service-id 5570584
    next
    edit "ServiceMax-Other"
        set internet-service-id 5636096
    next
    edit "ServiceMax-Web"
        set internet-service-id 5636097
    next
    edit "ServiceMax-ICMP"
        set internet-service-id 5636098
    next
    edit "ServiceMax-DNS"
        set internet-service-id 5636099
    next
    edit "ServiceMax-Outbound_Email"
        set internet-service-id 5636100
    next
    edit "ServiceMax-SSH"
        set internet-service-id 5636102
    next
    edit "ServiceMax-FTP"
        set internet-service-id 5636103
    next
    edit "ServiceMax-NTP"
        set internet-service-id 5636104
    next
    edit "ServiceMax-Inbound_Email"
        set internet-service-id 5636105
    next
    edit "ServiceMax-LDAP"
        set internet-service-id 5636110
    next
    edit "ServiceMax-NetBIOS.Session.Service"
        set internet-service-id 5636111
    next
    edit "ServiceMax-RTMP"
        set internet-service-id 5636112
    next
    edit "ServiceMax-NetBIOS.Name.Service"
        set internet-service-id 5636120
    next
    edit "Apptio-Other"
        set internet-service-id 5701632
    next
    edit "Apptio-Web"
        set internet-service-id 5701633
    next
    edit "Apptio-ICMP"
        set internet-service-id 5701634
    next
    edit "Apptio-DNS"
        set internet-service-id 5701635
    next
    edit "Apptio-Outbound_Email"
        set internet-service-id 5701636
    next
    edit "Apptio-SSH"
        set internet-service-id 5701638
    next
    edit "Apptio-FTP"
        set internet-service-id 5701639
    next
    edit "Apptio-NTP"
        set internet-service-id 5701640
    next
    edit "Apptio-Inbound_Email"
        set internet-service-id 5701641
    next
    edit "Apptio-LDAP"
        set internet-service-id 5701646
    next
    edit "Apptio-NetBIOS.Session.Service"
        set internet-service-id 5701647
    next
    edit "Apptio-RTMP"
        set internet-service-id 5701648
    next
    edit "Apptio-NetBIOS.Name.Service"
        set internet-service-id 5701656
    next
    edit "Veracode-Other"
        set internet-service-id 5767168
    next
    edit "Veracode-Web"
        set internet-service-id 5767169
    next
    edit "Veracode-ICMP"
        set internet-service-id 5767170
    next
    edit "Veracode-DNS"
        set internet-service-id 5767171
    next
    edit "Veracode-Outbound_Email"
        set internet-service-id 5767172
    next
    edit "Veracode-SSH"
        set internet-service-id 5767174
    next
    edit "Veracode-FTP"
        set internet-service-id 5767175
    next
    edit "Veracode-NTP"
        set internet-service-id 5767176
    next
    edit "Veracode-Inbound_Email"
        set internet-service-id 5767177
    next
    edit "Veracode-LDAP"
        set internet-service-id 5767182
    next
    edit "Veracode-NetBIOS.Session.Service"
        set internet-service-id 5767183
    next
    edit "Veracode-RTMP"
        set internet-service-id 5767184
    next
    edit "Veracode-NetBIOS.Name.Service"
        set internet-service-id 5767192
    next
    edit "Anaplan-Other"
        set internet-service-id 5832704
    next
    edit "Anaplan-Web"
        set internet-service-id 5832705
    next
    edit "Anaplan-ICMP"
        set internet-service-id 5832706
    next
    edit "Anaplan-DNS"
        set internet-service-id 5832707
    next
    edit "Anaplan-Outbound_Email"
        set internet-service-id 5832708
    next
    edit "Anaplan-SSH"
        set internet-service-id 5832710
    next
    edit "Anaplan-FTP"
        set internet-service-id 5832711
    next
    edit "Anaplan-NTP"
        set internet-service-id 5832712
    next
    edit "Anaplan-Inbound_Email"
        set internet-service-id 5832713
    next
    edit "Anaplan-LDAP"
        set internet-service-id 5832718
    next
    edit "Anaplan-NetBIOS.Session.Service"
        set internet-service-id 5832719
    next
    edit "Anaplan-RTMP"
        set internet-service-id 5832720
    next
    edit "Anaplan-NetBIOS.Name.Service"
        set internet-service-id 5832728
    next
    edit "Rapid7-Other"
        set internet-service-id 5898240
    next
    edit "Rapid7-Web"
        set internet-service-id 5898241
    next
    edit "Rapid7-ICMP"
        set internet-service-id 5898242
    next
    edit "Rapid7-DNS"
        set internet-service-id 5898243
    next
    edit "Rapid7-Outbound_Email"
        set internet-service-id 5898244
    next
    edit "Rapid7-SSH"
        set internet-service-id 5898246
    next
    edit "Rapid7-FTP"
        set internet-service-id 5898247
    next
    edit "Rapid7-NTP"
        set internet-service-id 5898248
    next
    edit "Rapid7-Inbound_Email"
        set internet-service-id 5898249
    next
    edit "Rapid7-LDAP"
        set internet-service-id 5898254
    next
    edit "Rapid7-NetBIOS.Session.Service"
        set internet-service-id 5898255
    next
    edit "Rapid7-RTMP"
        set internet-service-id 5898256
    next
    edit "Rapid7-NetBIOS.Name.Service"
        set internet-service-id 5898264
    next
    edit "AnyDesk-AnyDesk"
        set internet-service-id 5963927
    next
    edit "ESET-Eset.Service"
        set internet-service-id 6029426
    next
    edit "Slack-Other"
        set internet-service-id 6094848
    next
    edit "Slack-Web"
        set internet-service-id 6094849
    next
    edit "Slack-ICMP"
        set internet-service-id 6094850
    next
    edit "Slack-DNS"
        set internet-service-id 6094851
    next
    edit "Slack-Outbound_Email"
        set internet-service-id 6094852
    next
    edit "Slack-SSH"
        set internet-service-id 6094854
    next
    edit "Slack-FTP"
        set internet-service-id 6094855
    next
    edit "Slack-NTP"
        set internet-service-id 6094856
    next
    edit "Slack-Inbound_Email"
        set internet-service-id 6094857
    next
    edit "Slack-LDAP"
        set internet-service-id 6094862
    next
    edit "Slack-NetBIOS.Session.Service"
        set internet-service-id 6094863
    next
    edit "Slack-RTMP"
        set internet-service-id 6094864
    next
    edit "Slack-NetBIOS.Name.Service"
        set internet-service-id 6094872
    next
    edit "Slack-Slack"
        set internet-service-id 6095024
    next
    edit "ADP-Other"
        set internet-service-id 6160384
    next
    edit "ADP-Web"
        set internet-service-id 6160385
    next
    edit "ADP-ICMP"
        set internet-service-id 6160386
    next
    edit "ADP-DNS"
        set internet-service-id 6160387
    next
    edit "ADP-Outbound_Email"
        set internet-service-id 6160388
    next
    edit "ADP-SSH"
        set internet-service-id 6160390
    next
    edit "ADP-FTP"
        set internet-service-id 6160391
    next
    edit "ADP-NTP"
        set internet-service-id 6160392
    next
    edit "ADP-Inbound_Email"
        set internet-service-id 6160393
    next
    edit "ADP-LDAP"
        set internet-service-id 6160398
    next
    edit "ADP-NetBIOS.Session.Service"
        set internet-service-id 6160399
    next
    edit "ADP-RTMP"
        set internet-service-id 6160400
    next
    edit "ADP-NetBIOS.Name.Service"
        set internet-service-id 6160408
    next
    edit "Blackboard-Other"
        set internet-service-id 6225920
    next
    edit "Blackboard-Web"
        set internet-service-id 6225921
    next
    edit "Blackboard-ICMP"
        set internet-service-id 6225922
    next
    edit "Blackboard-DNS"
        set internet-service-id 6225923
    next
    edit "Blackboard-Outbound_Email"
        set internet-service-id 6225924
    next
    edit "Blackboard-SSH"
        set internet-service-id 6225926
    next
    edit "Blackboard-FTP"
        set internet-service-id 6225927
    next
    edit "Blackboard-NTP"
        set internet-service-id 6225928
    next
    edit "Blackboard-Inbound_Email"
        set internet-service-id 6225929
    next
    edit "Blackboard-LDAP"
        set internet-service-id 6225934
    next
    edit "Blackboard-NetBIOS.Session.Service"
        set internet-service-id 6225935
    next
    edit "Blackboard-RTMP"
        set internet-service-id 6225936
    next
    edit "Blackboard-NetBIOS.Name.Service"
        set internet-service-id 6225944
    next
    edit "SAP-Other"
        set internet-service-id 6291456
    next
    edit "SAP-Web"
        set internet-service-id 6291457
    next
    edit "SAP-ICMP"
        set internet-service-id 6291458
    next
    edit "SAP-DNS"
        set internet-service-id 6291459
    next
    edit "SAP-Outbound_Email"
        set internet-service-id 6291460
    next
    edit "SAP-SSH"
        set internet-service-id 6291462
    next
    edit "SAP-FTP"
        set internet-service-id 6291463
    next
    edit "SAP-NTP"
        set internet-service-id 6291464
    next
    edit "SAP-Inbound_Email"
        set internet-service-id 6291465
    next
    edit "SAP-LDAP"
        set internet-service-id 6291470
    next
    edit "SAP-NetBIOS.Session.Service"
        set internet-service-id 6291471
    next
    edit "SAP-RTMP"
        set internet-service-id 6291472
    next
    edit "SAP-NetBIOS.Name.Service"
        set internet-service-id 6291480
    next
    edit "SAP-HANA"
        set internet-service-id 6291612
    next
    edit "SAP-SuccessFactors"
        set internet-service-id 6291618
    next
    edit "Snap-Snapchat"
        set internet-service-id 6357108
    next
    edit "Zoom.us-Zoom.Meeting"
        set internet-service-id 6422646
    next
    edit "Sophos-Other"
        set internet-service-id 6488064
    next
    edit "Sophos-Web"
        set internet-service-id 6488065
    next
    edit "Sophos-ICMP"
        set internet-service-id 6488066
    next
    edit "Sophos-DNS"
        set internet-service-id 6488067
    next
    edit "Sophos-Outbound_Email"
        set internet-service-id 6488068
    next
    edit "Sophos-SSH"
        set internet-service-id 6488070
    next
    edit "Sophos-FTP"
        set internet-service-id 6488071
    next
    edit "Sophos-NTP"
        set internet-service-id 6488072
    next
    edit "Sophos-Inbound_Email"
        set internet-service-id 6488073
    next
    edit "Sophos-LDAP"
        set internet-service-id 6488078
    next
    edit "Sophos-NetBIOS.Session.Service"
        set internet-service-id 6488079
    next
    edit "Sophos-RTMP"
        set internet-service-id 6488080
    next
    edit "Sophos-NetBIOS.Name.Service"
        set internet-service-id 6488088
    next
    edit "Cloudflare-Other"
        set internet-service-id 6553600
    next
    edit "Cloudflare-Web"
        set internet-service-id 6553601
    next
    edit "Cloudflare-ICMP"
        set internet-service-id 6553602
    next
    edit "Cloudflare-DNS"
        set internet-service-id 6553603
    next
    edit "Cloudflare-Outbound_Email"
        set internet-service-id 6553604
    next
    edit "Cloudflare-SSH"
        set internet-service-id 6553606
    next
    edit "Cloudflare-FTP"
        set internet-service-id 6553607
    next
    edit "Cloudflare-NTP"
        set internet-service-id 6553608
    next
    edit "Cloudflare-Inbound_Email"
        set internet-service-id 6553609
    next
    edit "Cloudflare-LDAP"
        set internet-service-id 6553614
    next
    edit "Cloudflare-NetBIOS.Session.Service"
        set internet-service-id 6553615
    next
    edit "Cloudflare-RTMP"
        set internet-service-id 6553616
    next
    edit "Cloudflare-NetBIOS.Name.Service"
        set internet-service-id 6553624
    next
    edit "Cloudflare-CDN"
        set internet-service-id 6553737
    next
    edit "Pexip-Pexip.Meeting"
        set internet-service-id 6619256
    next
    edit "Zscaler-Other"
        set internet-service-id 6684672
    next
    edit "Zscaler-Web"
        set internet-service-id 6684673
    next
    edit "Zscaler-ICMP"
        set internet-service-id 6684674
    next
    edit "Zscaler-DNS"
        set internet-service-id 6684675
    next
    edit "Zscaler-Outbound_Email"
        set internet-service-id 6684676
    next
    edit "Zscaler-SSH"
        set internet-service-id 6684678
    next
    edit "Zscaler-FTP"
        set internet-service-id 6684679
    next
    edit "Zscaler-NTP"
        set internet-service-id 6684680
    next
    edit "Zscaler-Inbound_Email"
        set internet-service-id 6684681
    next
    edit "Zscaler-LDAP"
        set internet-service-id 6684686
    next
    edit "Zscaler-NetBIOS.Session.Service"
        set internet-service-id 6684687
    next
    edit "Zscaler-RTMP"
        set internet-service-id 6684688
    next
    edit "Zscaler-NetBIOS.Name.Service"
        set internet-service-id 6684696
    next
    edit "Zscaler-Zscaler.Cloud"
        set internet-service-id 6684793
    next
    edit "Yandex-Other"
        set internet-service-id 6750208
    next
    edit "Yandex-Web"
        set internet-service-id 6750209
    next
    edit "Yandex-ICMP"
        set internet-service-id 6750210
    next
    edit "Yandex-DNS"
        set internet-service-id 6750211
    next
    edit "Yandex-Outbound_Email"
        set internet-service-id 6750212
    next
    edit "Yandex-SSH"
        set internet-service-id 6750214
    next
    edit "Yandex-FTP"
        set internet-service-id 6750215
    next
    edit "Yandex-NTP"
        set internet-service-id 6750216
    next
    edit "Yandex-Inbound_Email"
        set internet-service-id 6750217
    next
    edit "Yandex-LDAP"
        set internet-service-id 6750222
    next
    edit "Yandex-NetBIOS.Session.Service"
        set internet-service-id 6750223
    next
    edit "Yandex-RTMP"
        set internet-service-id 6750224
    next
    edit "Yandex-NetBIOS.Name.Service"
        set internet-service-id 6750232
    next
    edit "mail.ru-Other"
        set internet-service-id 6815744
    next
    edit "mail.ru-Web"
        set internet-service-id 6815745
    next
    edit "mail.ru-ICMP"
        set internet-service-id 6815746
    next
    edit "mail.ru-DNS"
        set internet-service-id 6815747
    next
    edit "mail.ru-Outbound_Email"
        set internet-service-id 6815748
    next
    edit "mail.ru-SSH"
        set internet-service-id 6815750
    next
    edit "mail.ru-FTP"
        set internet-service-id 6815751
    next
    edit "mail.ru-NTP"
        set internet-service-id 6815752
    next
    edit "mail.ru-Inbound_Email"
        set internet-service-id 6815753
    next
    edit "mail.ru-LDAP"
        set internet-service-id 6815758
    next
    edit "mail.ru-NetBIOS.Session.Service"
        set internet-service-id 6815759
    next
    edit "mail.ru-RTMP"
        set internet-service-id 6815760
    next
    edit "mail.ru-NetBIOS.Name.Service"
        set internet-service-id 6815768
    next
    edit "Alibaba-Other"
        set internet-service-id 6881280
    next
    edit "Alibaba-Web"
        set internet-service-id 6881281
    next
    edit "Alibaba-ICMP"
        set internet-service-id 6881282
    next
    edit "Alibaba-DNS"
        set internet-service-id 6881283
    next
    edit "Alibaba-Outbound_Email"
        set internet-service-id 6881284
    next
    edit "Alibaba-SSH"
        set internet-service-id 6881286
    next
    edit "Alibaba-FTP"
        set internet-service-id 6881287
    next
    edit "Alibaba-NTP"
        set internet-service-id 6881288
    next
    edit "Alibaba-Inbound_Email"
        set internet-service-id 6881289
    next
    edit "Alibaba-LDAP"
        set internet-service-id 6881294
    next
    edit "Alibaba-NetBIOS.Session.Service"
        set internet-service-id 6881295
    next
    edit "Alibaba-RTMP"
        set internet-service-id 6881296
    next
    edit "Alibaba-NetBIOS.Name.Service"
        set internet-service-id 6881304
    next
    edit "Alibaba-Alibaba.Cloud"
        set internet-service-id 6881402
    next
    edit "GoDaddy-Other"
        set internet-service-id 6946816
    next
    edit "GoDaddy-Web"
        set internet-service-id 6946817
    next
    edit "GoDaddy-ICMP"
        set internet-service-id 6946818
    next
    edit "GoDaddy-DNS"
        set internet-service-id 6946819
    next
    edit "GoDaddy-Outbound_Email"
        set internet-service-id 6946820
    next
    edit "GoDaddy-SSH"
        set internet-service-id 6946822
    next
    edit "GoDaddy-FTP"
        set internet-service-id 6946823
    next
    edit "GoDaddy-NTP"
        set internet-service-id 6946824
    next
    edit "GoDaddy-Inbound_Email"
        set internet-service-id 6946825
    next
    edit "GoDaddy-LDAP"
        set internet-service-id 6946830
    next
    edit "GoDaddy-NetBIOS.Session.Service"
        set internet-service-id 6946831
    next
    edit "GoDaddy-RTMP"
        set internet-service-id 6946832
    next
    edit "GoDaddy-NetBIOS.Name.Service"
        set internet-service-id 6946840
    next
    edit "GoDaddy-GoDaddy.Email"
        set internet-service-id 6946939
    next
    edit "Bluejeans-Other"
        set internet-service-id 7012352
    next
    edit "Bluejeans-Web"
        set internet-service-id 7012353
    next
    edit "Bluejeans-ICMP"
        set internet-service-id 7012354
    next
    edit "Bluejeans-DNS"
        set internet-service-id 7012355
    next
    edit "Bluejeans-Outbound_Email"
        set internet-service-id 7012356
    next
    edit "Bluejeans-SSH"
        set internet-service-id 7012358
    next
    edit "Bluejeans-FTP"
        set internet-service-id 7012359
    next
    edit "Bluejeans-NTP"
        set internet-service-id 7012360
    next
    edit "Bluejeans-Inbound_Email"
        set internet-service-id 7012361
    next
    edit "Bluejeans-LDAP"
        set internet-service-id 7012366
    next
    edit "Bluejeans-NetBIOS.Session.Service"
        set internet-service-id 7012367
    next
    edit "Bluejeans-RTMP"
        set internet-service-id 7012368
    next
    edit "Bluejeans-NetBIOS.Name.Service"
        set internet-service-id 7012376
    next
    edit "Bluejeans-Bluejeans.Meeting"
        set internet-service-id 7012476
    next
    edit "Webroot-Webroot.SecureAnywhere"
        set internet-service-id 7078013
    next
    edit "Avast-Other"
        set internet-service-id 7143424
    next
    edit "Avast-Web"
        set internet-service-id 7143425
    next
    edit "Avast-ICMP"
        set internet-service-id 7143426
    next
    edit "Avast-DNS"
        set internet-service-id 7143427
    next
    edit "Avast-Outbound_Email"
        set internet-service-id 7143428
    next
    edit "Avast-SSH"
        set internet-service-id 7143430
    next
    edit "Avast-FTP"
        set internet-service-id 7143431
    next
    edit "Avast-NTP"
        set internet-service-id 7143432
    next
    edit "Avast-Inbound_Email"
        set internet-service-id 7143433
    next
    edit "Avast-LDAP"
        set internet-service-id 7143438
    next
    edit "Avast-NetBIOS.Session.Service"
        set internet-service-id 7143439
    next
    edit "Avast-RTMP"
        set internet-service-id 7143440
    next
    edit "Avast-NetBIOS.Name.Service"
        set internet-service-id 7143448
    next
    edit "Avast-Avast.Security"
        set internet-service-id 7143550
    next
    edit "Wetransfer-Other"
        set internet-service-id 7208960
    next
    edit "Wetransfer-Web"
        set internet-service-id 7208961
    next
    edit "Wetransfer-ICMP"
        set internet-service-id 7208962
    next
    edit "Wetransfer-DNS"
        set internet-service-id 7208963
    next
    edit "Wetransfer-Outbound_Email"
        set internet-service-id 7208964
    next
    edit "Wetransfer-SSH"
        set internet-service-id 7208966
    next
    edit "Wetransfer-FTP"
        set internet-service-id 7208967
    next
    edit "Wetransfer-NTP"
        set internet-service-id 7208968
    next
    edit "Wetransfer-Inbound_Email"
        set internet-service-id 7208969
    next
    edit "Wetransfer-LDAP"
        set internet-service-id 7208974
    next
    edit "Wetransfer-NetBIOS.Session.Service"
        set internet-service-id 7208975
    next
    edit "Wetransfer-RTMP"
        set internet-service-id 7208976
    next
    edit "Wetransfer-NetBIOS.Name.Service"
        set internet-service-id 7208984
    next
    edit "Sendgrid-Sendgrid.Email"
        set internet-service-id 7274623
    next
    edit "Ubiquiti-UniFi"
        set internet-service-id 7340160
    next
    edit "Lifesize-Lifesize.Cloud"
        set internet-service-id 7405697
    next
    edit "Okta-Other"
        set internet-service-id 7471104
    next
    edit "Okta-Web"
        set internet-service-id 7471105
    next
    edit "Okta-ICMP"
        set internet-service-id 7471106
    next
    edit "Okta-DNS"
        set internet-service-id 7471107
    next
    edit "Okta-Outbound_Email"
        set internet-service-id 7471108
    next
    edit "Okta-SSH"
        set internet-service-id 7471110
    next
    edit "Okta-FTP"
        set internet-service-id 7471111
    next
    edit "Okta-NTP"
        set internet-service-id 7471112
    next
    edit "Okta-Inbound_Email"
        set internet-service-id 7471113
    next
    edit "Okta-LDAP"
        set internet-service-id 7471118
    next
    edit "Okta-NetBIOS.Session.Service"
        set internet-service-id 7471119
    next
    edit "Okta-RTMP"
        set internet-service-id 7471120
    next
    edit "Okta-NetBIOS.Name.Service"
        set internet-service-id 7471128
    next
    edit "Okta-Okta"
        set internet-service-id 7471307
    next
    edit "Cybozu-Other"
        set internet-service-id 7536640
    next
    edit "Cybozu-Web"
        set internet-service-id 7536641
    next
    edit "Cybozu-ICMP"
        set internet-service-id 7536642
    next
    edit "Cybozu-DNS"
        set internet-service-id 7536643
    next
    edit "Cybozu-Outbound_Email"
        set internet-service-id 7536644
    next
    edit "Cybozu-SSH"
        set internet-service-id 7536646
    next
    edit "Cybozu-FTP"
        set internet-service-id 7536647
    next
    edit "Cybozu-NTP"
        set internet-service-id 7536648
    next
    edit "Cybozu-Inbound_Email"
        set internet-service-id 7536649
    next
    edit "Cybozu-LDAP"
        set internet-service-id 7536654
    next
    edit "Cybozu-NetBIOS.Session.Service"
        set internet-service-id 7536655
    next
    edit "Cybozu-RTMP"
        set internet-service-id 7536656
    next
    edit "Cybozu-NetBIOS.Name.Service"
        set internet-service-id 7536664
    next
    edit "VNC-Other"
        set internet-service-id 7602176
    next
    edit "VNC-Web"
        set internet-service-id 7602177
    next
    edit "VNC-ICMP"
        set internet-service-id 7602178
    next
    edit "VNC-DNS"
        set internet-service-id 7602179
    next
    edit "VNC-Outbound_Email"
        set internet-service-id 7602180
    next
    edit "VNC-SSH"
        set internet-service-id 7602182
    next
    edit "VNC-FTP"
        set internet-service-id 7602183
    next
    edit "VNC-NTP"
        set internet-service-id 7602184
    next
    edit "VNC-Inbound_Email"
        set internet-service-id 7602185
    next
    edit "VNC-LDAP"
        set internet-service-id 7602190
    next
    edit "VNC-NetBIOS.Session.Service"
        set internet-service-id 7602191
    next
    edit "VNC-RTMP"
        set internet-service-id 7602192
    next
    edit "VNC-NetBIOS.Name.Service"
        set internet-service-id 7602200
    next
    edit "Egnyte-Egnyte"
        set internet-service-id 7667846
    next
    edit "CrowdStrike-CrowdStrike.Falcon.Cloud"
        set internet-service-id 7733383
    next
    edit "Aruba.it-Other"
        set internet-service-id 7798784
    next
    edit "Aruba.it-Web"
        set internet-service-id 7798785
    next
    edit "Aruba.it-ICMP"
        set internet-service-id 7798786
    next
    edit "Aruba.it-DNS"
        set internet-service-id 7798787
    next
    edit "Aruba.it-Outbound_Email"
        set internet-service-id 7798788
    next
    edit "Aruba.it-SSH"
        set internet-service-id 7798790
    next
    edit "Aruba.it-FTP"
        set internet-service-id 7798791
    next
    edit "Aruba.it-NTP"
        set internet-service-id 7798792
    next
    edit "Aruba.it-Inbound_Email"
        set internet-service-id 7798793
    next
    edit "Aruba.it-LDAP"
        set internet-service-id 7798798
    next
    edit "Aruba.it-NetBIOS.Session.Service"
        set internet-service-id 7798799
    next
    edit "Aruba.it-RTMP"
        set internet-service-id 7798800
    next
    edit "Aruba.it-NetBIOS.Name.Service"
        set internet-service-id 7798808
    next
    edit "ISLOnline-Other"
        set internet-service-id 7864320
    next
    edit "ISLOnline-Web"
        set internet-service-id 7864321
    next
    edit "ISLOnline-ICMP"
        set internet-service-id 7864322
    next
    edit "ISLOnline-DNS"
        set internet-service-id 7864323
    next
    edit "ISLOnline-Outbound_Email"
        set internet-service-id 7864324
    next
    edit "ISLOnline-SSH"
        set internet-service-id 7864326
    next
    edit "ISLOnline-FTP"
        set internet-service-id 7864327
    next
    edit "ISLOnline-NTP"
        set internet-service-id 7864328
    next
    edit "ISLOnline-Inbound_Email"
        set internet-service-id 7864329
    next
    edit "ISLOnline-LDAP"
        set internet-service-id 7864334
    next
    edit "ISLOnline-NetBIOS.Session.Service"
        set internet-service-id 7864335
    next
    edit "ISLOnline-RTMP"
        set internet-service-id 7864336
    next
    edit "ISLOnline-NetBIOS.Name.Service"
        set internet-service-id 7864344
    next
    edit "Akamai-CDN"
        set internet-service-id 7929993
    next
    edit "Rackspace-CDN"
        set internet-service-id 7995529
    next
    edit "Instart-CDN"
        set internet-service-id 8061065
    next
    edit "Bitdefender-Other"
        set internet-service-id 8126464
    next
    edit "Bitdefender-Web"
        set internet-service-id 8126465
    next
    edit "Bitdefender-ICMP"
        set internet-service-id 8126466
    next
    edit "Bitdefender-DNS"
        set internet-service-id 8126467
    next
    edit "Bitdefender-Outbound_Email"
        set internet-service-id 8126468
    next
    edit "Bitdefender-SSH"
        set internet-service-id 8126470
    next
    edit "Bitdefender-FTP"
        set internet-service-id 8126471
    next
    edit "Bitdefender-NTP"
        set internet-service-id 8126472
    next
    edit "Bitdefender-Inbound_Email"
        set internet-service-id 8126473
    next
    edit "Bitdefender-LDAP"
        set internet-service-id 8126478
    next
    edit "Bitdefender-NetBIOS.Session.Service"
        set internet-service-id 8126479
    next
    edit "Bitdefender-RTMP"
        set internet-service-id 8126480
    next
    edit "Bitdefender-NetBIOS.Name.Service"
        set internet-service-id 8126488
    next
    edit "Pingdom-Other"
        set internet-service-id 8192000
    next
    edit "Pingdom-Web"
        set internet-service-id 8192001
    next
    edit "Pingdom-ICMP"
        set internet-service-id 8192002
    next
    edit "Pingdom-DNS"
        set internet-service-id 8192003
    next
    edit "Pingdom-Outbound_Email"
        set internet-service-id 8192004
    next
    edit "Pingdom-SSH"
        set internet-service-id 8192006
    next
    edit "Pingdom-FTP"
        set internet-service-id 8192007
    next
    edit "Pingdom-NTP"
        set internet-service-id 8192008
    next
    edit "Pingdom-Inbound_Email"
        set internet-service-id 8192009
    next
    edit "Pingdom-LDAP"
        set internet-service-id 8192014
    next
    edit "Pingdom-NetBIOS.Session.Service"
        set internet-service-id 8192015
    next
    edit "Pingdom-RTMP"
        set internet-service-id 8192016
    next
    edit "Pingdom-NetBIOS.Name.Service"
        set internet-service-id 8192024
    next
    edit "UptimeRobot-Other"
        set internet-service-id 8257536
    next
    edit "UptimeRobot-Web"
        set internet-service-id 8257537
    next
    edit "UptimeRobot-ICMP"
        set internet-service-id 8257538
    next
    edit "UptimeRobot-DNS"
        set internet-service-id 8257539
    next
    edit "UptimeRobot-Outbound_Email"
        set internet-service-id 8257540
    next
    edit "UptimeRobot-SSH"
        set internet-service-id 8257542
    next
    edit "UptimeRobot-FTP"
        set internet-service-id 8257543
    next
    edit "UptimeRobot-NTP"
        set internet-service-id 8257544
    next
    edit "UptimeRobot-Inbound_Email"
        set internet-service-id 8257545
    next
    edit "UptimeRobot-LDAP"
        set internet-service-id 8257550
    next
    edit "UptimeRobot-NetBIOS.Session.Service"
        set internet-service-id 8257551
    next
    edit "UptimeRobot-RTMP"
        set internet-service-id 8257552
    next
    edit "UptimeRobot-NetBIOS.Name.Service"
        set internet-service-id 8257560
    next
    edit "UptimeRobot-UptimeRobot.Monitor"
        set internet-service-id 8257709
    next
    edit "Quovadisglobal-Other"
        set internet-service-id 8323072
    next
    edit "Quovadisglobal-Web"
        set internet-service-id 8323073
    next
    edit "Quovadisglobal-ICMP"
        set internet-service-id 8323074
    next
    edit "Quovadisglobal-DNS"
        set internet-service-id 8323075
    next
    edit "Quovadisglobal-Outbound_Email"
        set internet-service-id 8323076
    next
    edit "Quovadisglobal-SSH"
        set internet-service-id 8323078
    next
    edit "Quovadisglobal-FTP"
        set internet-service-id 8323079
    next
    edit "Quovadisglobal-NTP"
        set internet-service-id 8323080
    next
    edit "Quovadisglobal-Inbound_Email"
        set internet-service-id 8323081
    next
    edit "Quovadisglobal-LDAP"
        set internet-service-id 8323086
    next
    edit "Quovadisglobal-NetBIOS.Session.Service"
        set internet-service-id 8323087
    next
    edit "Quovadisglobal-RTMP"
        set internet-service-id 8323088
    next
    edit "Quovadisglobal-NetBIOS.Name.Service"
        set internet-service-id 8323096
    next
    edit "Splashtop-Splashtop"
        set internet-service-id 8388751
    next
    edit "Zoox-Other"
        set internet-service-id 8454144
    next
    edit "Zoox-Web"
        set internet-service-id 8454145
    next
    edit "Zoox-ICMP"
        set internet-service-id 8454146
    next
    edit "Zoox-DNS"
        set internet-service-id 8454147
    next
    edit "Zoox-Outbound_Email"
        set internet-service-id 8454148
    next
    edit "Zoox-SSH"
        set internet-service-id 8454150
    next
    edit "Zoox-FTP"
        set internet-service-id 8454151
    next
    edit "Zoox-NTP"
        set internet-service-id 8454152
    next
    edit "Zoox-Inbound_Email"
        set internet-service-id 8454153
    next
    edit "Zoox-LDAP"
        set internet-service-id 8454158
    next
    edit "Zoox-NetBIOS.Session.Service"
        set internet-service-id 8454159
    next
    edit "Zoox-RTMP"
        set internet-service-id 8454160
    next
    edit "Zoox-NetBIOS.Name.Service"
        set internet-service-id 8454168
    next
    edit "Skyfii-Other"
        set internet-service-id 8519680
    next
    edit "Skyfii-Web"
        set internet-service-id 8519681
    next
    edit "Skyfii-ICMP"
        set internet-service-id 8519682
    next
    edit "Skyfii-DNS"
        set internet-service-id 8519683
    next
    edit "Skyfii-Outbound_Email"
        set internet-service-id 8519684
    next
    edit "Skyfii-SSH"
        set internet-service-id 8519686
    next
    edit "Skyfii-FTP"
        set internet-service-id 8519687
    next
    edit "Skyfii-NTP"
        set internet-service-id 8519688
    next
    edit "Skyfii-Inbound_Email"
        set internet-service-id 8519689
    next
    edit "Skyfii-LDAP"
        set internet-service-id 8519694
    next
    edit "Skyfii-NetBIOS.Session.Service"
        set internet-service-id 8519695
    next
    edit "Skyfii-RTMP"
        set internet-service-id 8519696
    next
    edit "Skyfii-NetBIOS.Name.Service"
        set internet-service-id 8519704
    next
    edit "CoffeeBean-Other"
        set internet-service-id 8585216
    next
    edit "CoffeeBean-Web"
        set internet-service-id 8585217
    next
    edit "CoffeeBean-ICMP"
        set internet-service-id 8585218
    next
    edit "CoffeeBean-DNS"
        set internet-service-id 8585219
    next
    edit "CoffeeBean-Outbound_Email"
        set internet-service-id 8585220
    next
    edit "CoffeeBean-SSH"
        set internet-service-id 8585222
    next
    edit "CoffeeBean-FTP"
        set internet-service-id 8585223
    next
    edit "CoffeeBean-NTP"
        set internet-service-id 8585224
    next
    edit "CoffeeBean-Inbound_Email"
        set internet-service-id 8585225
    next
    edit "CoffeeBean-LDAP"
        set internet-service-id 8585230
    next
    edit "CoffeeBean-NetBIOS.Session.Service"
        set internet-service-id 8585231
    next
    edit "CoffeeBean-RTMP"
        set internet-service-id 8585232
    next
    edit "CoffeeBean-NetBIOS.Name.Service"
        set internet-service-id 8585240
    next
    edit "Cloud4Wi-Other"
        set internet-service-id 8650752
    next
    edit "Cloud4Wi-Web"
        set internet-service-id 8650753
    next
    edit "Cloud4Wi-ICMP"
        set internet-service-id 8650754
    next
    edit "Cloud4Wi-DNS"
        set internet-service-id 8650755
    next
    edit "Cloud4Wi-Outbound_Email"
        set internet-service-id 8650756
    next
    edit "Cloud4Wi-SSH"
        set internet-service-id 8650758
    next
    edit "Cloud4Wi-FTP"
        set internet-service-id 8650759
    next
    edit "Cloud4Wi-NTP"
        set internet-service-id 8650760
    next
    edit "Cloud4Wi-Inbound_Email"
        set internet-service-id 8650761
    next
    edit "Cloud4Wi-LDAP"
        set internet-service-id 8650766
    next
    edit "Cloud4Wi-NetBIOS.Session.Service"
        set internet-service-id 8650767
    next
    edit "Cloud4Wi-RTMP"
        set internet-service-id 8650768
    next
    edit "Cloud4Wi-NetBIOS.Name.Service"
        set internet-service-id 8650776
    next
    edit "Panda-Panda.Security"
        set internet-service-id 8716432
    next
    edit "Ewon-Talk2M"
        set internet-service-id 8781970
    next
    edit "Nutanix-Nutanix.Cloud"
        set internet-service-id 8847507
    next
    edit "Backblaze-Other"
        set internet-service-id 8912896
    next
    edit "Backblaze-Web"
        set internet-service-id 8912897
    next
    edit "Backblaze-ICMP"
        set internet-service-id 8912898
    next
    edit "Backblaze-DNS"
        set internet-service-id 8912899
    next
    edit "Backblaze-Outbound_Email"
        set internet-service-id 8912900
    next
    edit "Backblaze-SSH"
        set internet-service-id 8912902
    next
    edit "Backblaze-FTP"
        set internet-service-id 8912903
    next
    edit "Backblaze-NTP"
        set internet-service-id 8912904
    next
    edit "Backblaze-Inbound_Email"
        set internet-service-id 8912905
    next
    edit "Backblaze-LDAP"
        set internet-service-id 8912910
    next
    edit "Backblaze-NetBIOS.Session.Service"
        set internet-service-id 8912911
    next
    edit "Backblaze-RTMP"
        set internet-service-id 8912912
    next
    edit "Backblaze-NetBIOS.Name.Service"
        set internet-service-id 8912920
    next
    edit "Extreme-Extreme.Cloud"
        set internet-service-id 8978580
    next
    edit "XING-Other"
        set internet-service-id 9043968
    next
    edit "XING-Web"
        set internet-service-id 9043969
    next
    edit "XING-ICMP"
        set internet-service-id 9043970
    next
    edit "XING-DNS"
        set internet-service-id 9043971
    next
    edit "XING-Outbound_Email"
        set internet-service-id 9043972
    next
    edit "XING-SSH"
        set internet-service-id 9043974
    next
    edit "XING-FTP"
        set internet-service-id 9043975
    next
    edit "XING-NTP"
        set internet-service-id 9043976
    next
    edit "XING-Inbound_Email"
        set internet-service-id 9043977
    next
    edit "XING-LDAP"
        set internet-service-id 9043982
    next
    edit "XING-NetBIOS.Session.Service"
        set internet-service-id 9043983
    next
    edit "XING-RTMP"
        set internet-service-id 9043984
    next
    edit "XING-NetBIOS.Name.Service"
        set internet-service-id 9043992
    next
    edit "Genesys-PureCloud"
        set internet-service-id 9109653
    next
    edit "BlackBerry-Cylance"
        set internet-service-id 9175190
    next
    edit "DigiCert-OCSP"
        set internet-service-id 9240728
    next
    edit "Infomaniak-SwissTransfer"
        set internet-service-id 9306265
    next
    edit "Fuze-Fuze"
        set internet-service-id 9371802
    next
    edit "Truecaller-Truecaller"
        set internet-service-id 9437339
    next
    edit "GlobalSign-OCSP"
        set internet-service-id 9502872
    next
    edit "VeriSign-OCSP"
        set internet-service-id 9568408
    next
    edit "Sony-PlayStation.Network"
        set internet-service-id 9633952
    next
    edit "Acronis-Cyber.Cloud"
        set internet-service-id 9699489
    next
    edit "RingCentral-RingCentral"
        set internet-service-id 9765027
    next
    edit "FSecure-FSecure"
        set internet-service-id 9830564
    next
    edit "Kaseya-Kaseya.Cloud"
        set internet-service-id 9896101
    next
    edit "Shodan-Scanner"
        set internet-service-id 9961638
    next
    edit "Censys-Scanner"
        set internet-service-id 10027174
    next
    edit "Valve-Steam"
        set internet-service-id 10092711
    next
    edit "YouSeeU-Bongo"
        set internet-service-id 10158248
    next
    edit "Cato-Cato.Cloud"
        set internet-service-id 10223785
    next
    edit "SolarWinds-SpamExperts"
        set internet-service-id 10289323
    next
    edit "SolarWinds-Pingdom.Probe"
        set internet-service-id 10289326
    next
    edit "8X8-8X8.Cloud"
        set internet-service-id 10354860
    next
    edit "Zattoo-Zattoo.TV"
        set internet-service-id 10420401
    next
    edit "Datto-Datto.RMM"
        set internet-service-id 10485939
    next
    edit "Barracuda-Barracuda.Cloud"
        set internet-service-id 10551477
    next
    edit "Naver-Line"
        set internet-service-id 10617015
    next
    edit "Disney-Disney+"
        set internet-service-id 10682552
    next
    edit "DNS-DoH_DoT"
        set internet-service-id 10748089
    next
    edit "Quad9-Quad9.Standard.DNS"
        set internet-service-id 10813626
    next
    edit "Stretchoid-Scanner"
        set internet-service-id 10879142
    next
    edit "Poly-RealConnect.Service"
        set internet-service-id 10944700
    next
    edit "Telegram-Telegram"
        set internet-service-id 11010249
    next
    edit "Spotify-Spotify"
        set internet-service-id 11075786
    next
    edit "NextDNS-NextDNS"
        set internet-service-id 11141324
    next
    edit "Fastly-CDN"
        set internet-service-id 11206793
    next
    edit "Neustar-UltraDNS.Probes"
        set internet-service-id 11272397
    next
    edit "Microsoft-Intune"
        set internet-service-id 327886
    next
    edit "Microsoft-Office365.Published.Optimize"
        set internet-service-id 327902
    next
    edit "Microsoft-Office365.Published.Allow"
        set internet-service-id 327903
    next
    edit "Microsoft-Office365.Published.USGOV"
        set internet-service-id 327917
    next
    edit "Microsoft-Azure.Monitor"
        set internet-service-id 327958
    next
    edit "Microsoft-Azure.SQL"
        set internet-service-id 327959
    next
    edit "Microsoft-Azure.AD"
        set internet-service-id 327960
    next
    edit "Microsoft-Azure.Data.Factory"
        set internet-service-id 327961
    next
    edit "Microsoft-Azure.Virtual.Desktop"
        set internet-service-id 327962
    next
    edit "Microsoft-Azure.Power.BI"
        set internet-service-id 327963
    next
    edit "Amazon-Twitch"
        set internet-service-id 393446
    next
    edit "Amazon-AWS.GovCloud.US"
        set internet-service-id 393452
    next
    edit "Amazon-Amazon.SES"
        set internet-service-id 393493
    next
    edit "Adobe-Adobe.Sign"
        set internet-service-id 917776
    next
    edit "Fortinet-FortiVoice.Cloud"
        set internet-service-id 1245432
    next
    edit "Fortinet-FortiGuard.Secure.DNS"
        set internet-service-id 1245454
    next
    edit "Fortinet-FortiEDR"
        set internet-service-id 1245475
    next
    edit "Zoho-Site24x7.Monitor"
        set internet-service-id 1704153
    next
    edit "Cisco-Webex.FedRAMP"
        set internet-service-id 1966315
    next
    edit "Cisco-Secure.Endpoint"
        set internet-service-id 1966324
    next
    edit "Atlassian-Atlassian.Cloud"
        set internet-service-id 3932388
    next
    edit "Atlassian-Atlassian.Notification"
        set internet-service-id 3932436
    next
    edit "Akamai-Linode.Cloud"
        set internet-service-id 7930148
    next
    edit "SolarWinds-SolarWinds.RMM"
        set internet-service-id 10289379
    next
    edit "DNS-Root.Name.Servers"
        set internet-service-id 10748156
    next
    edit "Malicious-Malicious.Server"
        set internet-service-id 11337935
    next
    edit "NIST-ITS"
        set internet-service-id 11403472
    next
    edit "Jamf-Jamf.Cloud"
        set internet-service-id 11469009
    next
    edit "Alcatel.Lucent-Rainbow"
        set internet-service-id 11534546
    next
    edit "Forcepoint-Forcepoint.Cloud"
        set internet-service-id 11600083
    next
    edit "Datadog-Datadog"
        set internet-service-id 11665620
    next
    edit "Mimecast-Mimecast"
        set internet-service-id 11731157
    next
    edit "MediaFire-Other"
        set internet-service-id 11796480
    next
    edit "MediaFire-Web"
        set internet-service-id 11796481
    next
    edit "MediaFire-ICMP"
        set internet-service-id 11796482
    next
    edit "MediaFire-DNS"
        set internet-service-id 11796483
    next
    edit "MediaFire-Outbound_Email"
        set internet-service-id 11796484
    next
    edit "MediaFire-SSH"
        set internet-service-id 11796486
    next
    edit "MediaFire-FTP"
        set internet-service-id 11796487
    next
    edit "MediaFire-NTP"
        set internet-service-id 11796488
    next
    edit "MediaFire-Inbound_Email"
        set internet-service-id 11796489
    next
    edit "MediaFire-LDAP"
        set internet-service-id 11796494
    next
    edit "MediaFire-NetBIOS.Session.Service"
        set internet-service-id 11796495
    next
    edit "MediaFire-RTMP"
        set internet-service-id 11796496
    next
    edit "MediaFire-NetBIOS.Name.Service"
        set internet-service-id 11796504
    next
    edit "Pandora-Pandora"
        set internet-service-id 11862230
    next
    edit "SiriusXM-SiriusXM"
        set internet-service-id 11927767
    next
    edit "Hopin-Hopin"
        set internet-service-id 11993304
    next
    edit "RedShield-RedShield.Cloud"
        set internet-service-id 12058842
    next
    edit "InterneTTL-Scanner"
        set internet-service-id 12124326
    next
    edit "VadeSecure-VadeSecure.Cloud"
        set internet-service-id 12189915
    next
    edit "Netskope-Netskope.Cloud"
        set internet-service-id 12255452
    next
    edit "ClickMeeting-ClickMeeting"
        set internet-service-id 12320989
    next
    edit "Tenable-Tenable.io.Cloud.Scanner"
        set internet-service-id 12386528
    next
    edit "Vidyo-VidyoCloud"
        set internet-service-id 12452065
    next
    edit "OpenNIC-OpenNIC.DNS"
        set internet-service-id 12517602
    next
    edit "Sectigo-Sectigo"
        set internet-service-id 12583141
    next
    edit "DigitalOcean-DigitalOcean.Platform"
        set internet-service-id 12648679
    next
    edit "Pitney.Bowes-Pitney.Bowes.Data.Center"
        set internet-service-id 12714216
    next
    edit "VPN-Anonymous.VPN"
        set internet-service-id 12779753
    next
    edit "Blockchain-Crypto.Mining.Pool"
        set internet-service-id 12845290
    next
    edit "FactSet-FactSet"
        set internet-service-id 12910830
    next
    edit "Bloomberg-Bloomberg"
        set internet-service-id 12976367
    next
    edit "Five9-Five9"
        set internet-service-id 13041904
    next
    edit "Gigas-Gigas.Cloud"
        set internet-service-id 13107441
    next
    edit "Imperva-Imperva.Cloud.WAF"
        set internet-service-id 13172978
    next
    edit "INAP-INAP"
        set internet-service-id 13238515
    next
    edit "Azion-Azion.Platform"
        set internet-service-id 13304053
    next
    edit "Hurricane.Electric-Hurricane.Electric.Internet.Services"
        set internet-service-id 13369590
    next
    edit "NodePing-NodePing.Probe"
        set internet-service-id 13435127
    next
    edit "Frontline-Frontline"
        set internet-service-id 13500665
    next
    edit "Tally-Tally.ERP"
        set internet-service-id 13566202
    next
    edit "Hosting-Bulletproof.Hosting"
        set internet-service-id 13631739
    next
    edit "Okko-Okko.TV"
        set internet-service-id 13697277
    next
    edit "Voximplant-Voximplant.Platform"
        set internet-service-id 13762829
    next
    edit "OVHcloud-OVHcloud"
        set internet-service-id 13828367
    next
    edit "SentinelOne-SentinelOne.Cloud"
        set internet-service-id 13893905
    next
    edit "Kakao-Kakao.Services"
        set internet-service-id 13959442
    next
    edit "Stripe-Stripe"
        set internet-service-id 14024979
    next
    edit "NetScout-Scanner"
        set internet-service-id 14090406
    next
    edit "Recyber-Scanner"
        set internet-service-id 14155942
    next
    edit "Cyber.Casa-Scanner"
        set internet-service-id 14221478
    next
    edit "GTHost-Dedicated.Instant.Servers"
        set internet-service-id 14287132
    next
    edit "ivi-ivi.Streaming"
        set internet-service-id 14352669
    next
    edit "BinaryEdge-Scanner"
        set internet-service-id 14418086
    next
    edit "Fintech-MarketMap.Terminal"
        set internet-service-id 14483742
    next
    edit "xMatters-xMatters.Platform"
        set internet-service-id 14549279
    next
    edit "Blizzard-Battle.Net"
        set internet-service-id 14614816
    next
    edit "Axon-Evidence"
        set internet-service-id 14680353
    next
    edit "CDN77-CDN"
        set internet-service-id 14745737
    next
    edit "GCore.Labs-CDN"
        set internet-service-id 14811273
    next
    edit "Matrix42-FastViewer"
        set internet-service-id 14876962
    next
    edit "Bunny.net-CDN"
        set internet-service-id 14942345
    next
    edit "StackPath-CDN"
        set internet-service-id 15007881
    next
    edit "Edgio-CDN"
        set internet-service-id 15073417
    next
    edit "CacheFly-CDN"
        set internet-service-id 15138953
    next
    edit "Amazon-AWS.EBS"
        set internet-service-id 393470
    next
    edit "Amazon-AWS.Cloud9"
        set internet-service-id 393471
    next
    edit "Amazon-AWS.DynamoDB"
        set internet-service-id 393472
    next
    edit "Amazon-AWS.Route53"
        set internet-service-id 393473
    next
    edit "Amazon-AWS.S3"
        set internet-service-id 393474
    next
    edit "Amazon-AWS.Kinesis.Video.Streams"
        set internet-service-id 393475
    next
    edit "Amazon-AWS.Global.Accelerator"
        set internet-service-id 393476
    next
    edit "Amazon-AWS.EC2"
        set internet-service-id 393477
    next
    edit "Amazon-AWS.API.Gateway"
        set internet-service-id 393478
    next
    edit "Amazon-AWS.Chime.Voice.Connector"
        set internet-service-id 393479
    next
    edit "Amazon-AWS.Connect"
        set internet-service-id 393480
    next
    edit "Amazon-AWS.CloudFront"
        set internet-service-id 393481
    next
    edit "Amazon-AWS.CodeBuild"
        set internet-service-id 393482
    next
    edit "Amazon-AWS.Chime.Meetings"
        set internet-service-id 393483
    next
    edit "Amazon-AWS.AppFlow"
        set internet-service-id 393484
    next
    edit "Microsoft-Azure.Connectors"
        set internet-service-id 327980
    next
    edit "Microsoft-Teams.Published.Worldwide.Optimize"
        set internet-service-id 327991
    next
    edit "Microsoft-Teams.Published.Worldwide.Allow"
        set internet-service-id 327992
    next
    edit "Microsoft-Azure.Front.Door"
        set internet-service-id 327993
    next
    edit "Microsoft-Azure.Service.Bus"
        set internet-service-id 328007
    next
    edit "Microsoft-Azure.Microsoft.Defender"
        set internet-service-id 328009
    next
    edit "Fortinet-FortiClient.EMS"
        set internet-service-id 1245477
    next
    edit "Fortinet-FortiWeb.Cloud"
        set internet-service-id 1245480
    next
    edit "Fortinet-FortiSASE"
        set internet-service-id 1245481
    next
    edit "Tencent-VooV.Meeting"
        set internet-service-id 2556219
    next
    edit "NewRelic-Synthetic.Monitor"
        set internet-service-id 4849970
    next
    edit "SAP-SAP.Ariba"
        set internet-service-id 6291766
    next
    edit "Datto-Datto.BCDR"
        set internet-service-id 10486083
    next
    edit "DNS-ARPA.Name.Servers"
        set internet-service-id 10748206
    next
    edit "Paylocity-Paylocity"
        set internet-service-id 15204646
    next
    edit "Qualys-Qualys.Cloud.Platform"
        set internet-service-id 15270183
    next
    edit "Dailymotion-Other"
        set internet-service-id 15335424
    next
    edit "Dailymotion-Web"
        set internet-service-id 15335425
    next
    edit "Dailymotion-ICMP"
        set internet-service-id 15335426
    next
    edit "Dailymotion-DNS"
        set internet-service-id 15335427
    next
    edit "Dailymotion-Outbound_Email"
        set internet-service-id 15335428
    next
    edit "Dailymotion-SSH"
        set internet-service-id 15335430
    next
    edit "Dailymotion-FTP"
        set internet-service-id 15335431
    next
    edit "Dailymotion-NTP"
        set internet-service-id 15335432
    next
    edit "Dailymotion-Inbound_Email"
        set internet-service-id 15335433
    next
    edit "Dailymotion-LDAP"
        set internet-service-id 15335438
    next
    edit "Dailymotion-NetBIOS.Session.Service"
        set internet-service-id 15335439
    next
    edit "Dailymotion-RTMP"
        set internet-service-id 15335440
    next
    edit "Dailymotion-NetBIOS.Name.Service"
        set internet-service-id 15335448
    next
    edit "LaunchDarkly-LaunchDarkly.Platform"
        set internet-service-id 15401258
    next
    edit "Medianova-CDN"
        set internet-service-id 15466633
    next
    edit "NetDocuments-NetDocuments.Platform"
        set internet-service-id 15532331
    next
    edit "Vonage-Vonage.Contact.Center"
        set internet-service-id 15597869
    next
    edit "Vonage-Vonage.Video.API"
        set internet-service-id 15597872
    next
    edit "Veritas-Enterprise.Vault.Cloud"
        set internet-service-id 15663407
    next
    edit "UK.NCSC-Scanner"
        set internet-service-id 15728806
    next
    edit "Restream-Restream.Platform"
        set internet-service-id 15794481
    next
    edit "ArcticWolf-ArcticWolf.Cloud"
        set internet-service-id 15860019
    next
    edit "CounterPath-Bria"
        set internet-service-id 15925556
    next
    edit "CriminalIP-Scanner"
        set internet-service-id 15990950
    next
    edit "IPFS-IPFS.Gateway"
        set internet-service-id 16056629
    next
    edit "Internet.Census.Group-Scanner"
        set internet-service-id 16122022
    next
    edit "Performive-Performive.Cloud"
        set internet-service-id 16187706
    next
    edit "OneLogin-OneLogin"
        set internet-service-id 16253244
    next
    edit "Shadowserver-Scanner"
        set internet-service-id 16318630
    next
    edit "Turkcell-Suit.Conference"
        set internet-service-id 16384317
    next
    edit "LeakIX-Scanner"
        set internet-service-id 16449702
    next
    edit "Infoblox-BloxOne"
        set internet-service-id 16515390
    next
    edit "Nice-CXone"
        set internet-service-id 16580927
    next
    edit "Hetzner-Hetzner.Hosting.Service"
        set internet-service-id 16646464
    next
    edit "ThreatLocker-ThreatLocker"
        set internet-service-id 16712001
    next
    edit "ZPE-ZPE.Cloud"
        set internet-service-id 16777538
    next
    edit "ColoCrossing-ColoCrossing.Hosting.Service"
        set internet-service-id 16843076
    next
    edit "Sinch-Mailgun"
        set internet-service-id 16908613
    next
    edit "SpaceX-Starlink"
        set internet-service-id 16974150
    next
    edit "Ingenuity-Ingenuity.Cloud.Service"
        set internet-service-id 17039688
    next
    edit "Microsoft-Azure.Resource.Manager"
        set internet-service-id 328013
    next
    edit "Microsoft-Azure.Arc.Infrastructure"
        set internet-service-id 328014
    next
    edit "Microsoft-Azure.Storage"
        set internet-service-id 328015
    next
    edit "Microsoft-Azure.ATP"
        set internet-service-id 328016
    next
    edit "Microsoft-Azure.Traffic.Manager"
        set internet-service-id 328017
    next
    edit "Microsoft-Azure.Windows.Admin.Center"
        set internet-service-id 328018
    next
    edit "Fortinet-FortiGuard.SOCaaS"
        set internet-service-id 1245514
    next
    edit "Skyhigh.Security-Secure.Web.Gateway"
        set internet-service-id 17105227
    next
    edit "Stark.Industries-Stark.Industries.Hosting.Service"
        set internet-service-id 17170764
    next
    edit "StatusCake-StatusCake.Monitor"
        set internet-service-id 17236307
    next
end
config firewall internet-service-definition
end
config system standalone-cluster
    config cluster-peer
    end
end
config system fortiguard
    set interface-select-method sdwan
end
config endpoint-control fctems
    edit 1
    next
    edit 2
    next
    edit 3
    next
    edit 4
    next
    edit 5
    next
    edit 6
    next
    edit 7
    next
end
config system email-server
    set server "notification.fortinet.net"
    set port 465
    set security smtps
end
config system session-helper
    edit 1
        set name pptp
        set protocol 6
        set port 1723
    next
    edit 2
        set name h323
        set protocol 6
        set port 1720
    next
    edit 3
        set name ras
        set protocol 17
        set port 1719
    next
    edit 4
        set name tns
        set protocol 6
        set port 1521
    next
    edit 5
        set name tftp
        set protocol 17
        set port 69
    next
    edit 6
        set name rtsp
        set protocol 6
        set port 554
    next
    edit 7
        set name rtsp
        set protocol 6
        set port 7070
    next
    edit 8
        set name rtsp
        set protocol 6
        set port 8554
    next
    edit 9
        set name ftp
        set protocol 6
        set port 21
    next
    edit 10
        set name mms
        set protocol 6
        set port 1863
    next
    edit 11
        set name pmap
        set protocol 6
        set port 111
    next
    edit 12
        set name pmap
        set protocol 17
        set port 111
    next
    edit 13
        set name sip
        set protocol 17
        set port 5060
    next
    edit 14
        set name dns-udp
        set protocol 17
        set port 53
    next
    edit 15
        set name rsh
        set protocol 6
        set port 514
    next
    edit 16
        set name rsh
        set protocol 6
        set port 512
    next
    edit 17
        set name dcerpc
        set protocol 6
        set port 135
    next
    edit 18
        set name dcerpc
        set protocol 17
        set port 135
    next
    edit 19
        set name mgcp
        set protocol 17
        set port 2427
    next
    edit 20
        set name mgcp
        set protocol 17
        set port 2727
    next
end
config system auto-install
    set auto-install-config enable
    set auto-install-image enable
end
config system console
end
config system ntp
    set ntpsync enable
    set server-mode enable
    set interface "lan"
end
config system ftm-push
    set server-cert "Fortinet_Factory"
end
config system automation-trigger
    edit "Network Down"
        set description "Default automation trigger configuration for when a network connection goes down."
        set event-type event-log
        set logid 20099
        config fields
            edit 1
                set name "status"
                set value "DOWN"
            next
        end
    next
    edit "HA Failover"
        set description "Default automation trigger configuration for when an HA failover occurs."
        set event-type ha-failover
    next
    edit "Reboot"
        set description "Default automation trigger configuration for when a FortiGate is rebooted."
        set event-type reboot
    next
    edit "FortiAnalyzer Connection Down"
        set description "Default automation trigger configuration for when the FortiAnalyzer connection is lost."
        set event-type event-log
        set logid 22902
    next
    edit "License Expired Notification"
        set description "Default automation trigger configuration for when a license is near expiration."
        set event-type license-near-expiry
        set license-type any
    next
    edit "Incoming Webhook Call"
        set description "Default automation trigger configuration for an incoming webhook."
        set event-type incoming-webhook
    next
    edit "Security Rating Notification"
        set description "Default automation trigger configuration for when a new Security Rating report is available."
        set event-type security-rating-summary
        set report-type any
    next
    edit "Compromised Host - High"
        set description "Default automation trigger configuration for when a high severity compromised host is detected."
    next
    edit "Local Cert Expired Notification"
        set description "Default automation trigger configuration for when a local certificate is near expiration."
        set event-type local-cert-near-expiry
    next
    edit "Compromised Host Quarantine"
    next
    edit "Compromised Host"
        set description "An incident of compromise has been detected on a host endpoint."
    next
    edit "Any Security Rating Notification"
        set description "A security rating summary report has been generated."
        set event-type security-rating-summary
    next
    edit "AV & IPS DB update"
        set description "The antivirus and IPS database has been updated."
        set event-type virus-ips-db-updated
    next
    edit "Configuration Change"
        set description "An administrator\'s session that changed a FortiGate\'s configuration has ended."
        set event-type config-change
    next
    edit "Conserve Mode"
        set description "A FortiGate has entered conserve mode due to low memory."
        set event-type low-memory
    next
    edit "High CPU"
        set description "A FortiGate has high CPU usage."
        set event-type high-cpu
    next
    edit "License Expiry"
        set description "A FortiGate license is near expiration."
        set event-type license-near-expiry
        set license-type any
    next
    edit "Anomaly Logs"
        set description "An anomalous event has occurred."
        set event-type anomaly-logs
    next
    edit "IPS Logs"
        set description "An IPS event has occurred."
        set event-type ips-logs
    next
    edit "SSH Logs"
        set description "A SSH event has occurred."
        set event-type ssh-logs
    next
    edit "Traffic Violation"
        set description "A traffic policy has been violated."
        set event-type traffic-violation
    next
    edit "Virus Logs"
        set description "A virus event has occurred."
        set event-type virus-logs
    next
    edit "Webfilter Violation"
        set description "A webfilter policy has been violated."
        set event-type webfilter-violation
    next
    edit "Admin Login"
        set description "A FortiOS event with specified log ID has occurred."
        set event-type event-log
        set logid 32001
    next
    edit "Local Certificate Expiry"
        set description "A local certificate is near expiration."
        set event-type local-cert-near-expiry
    next
    edit "Auto Firmware upgrade"
        set description "Automatic firmware upgrade."
        set event-type event-log
        set logid 22094 22095 32263
    next
end
config system automation-action
    edit "Backup Config Disk"
        set description "Default automation action configuration for backing up the configuration on disk."
        set action-type system-actions
        set system-action backup-config
    next
    edit "Default Email"
        set description "Default automation action configuration for sending an email with basic information on the log event."
        set action-type email
        set email-subject "%%log.logdesc%%"
    next
    edit "FortiExplorer Notification"
        set description "Default automation action configuration for sending a notification to any FortiExplorer mobile application."
        set action-type fortiexplorer-notification
    next
    edit "Quarantine FortiClient EMS Endpoint"
        set description "Default automation action configuration for quarantining a FortiClient EMS endpoing device."
        set action-type quarantine-forticlient
    next
    edit "Quarantine on FortiSwitch + FortiAP"
        set description "Default automation action configuration for quarantining a MAC address on FortiSwitches and FortiAPs."
        set action-type quarantine
    next
    edit "Reboot FortiGate"
        set description "Default automation action configuration for rebooting this FortiGate unit."
        set action-type system-actions
        set system-action reboot
        set minimum-interval 300
    next
    edit "Shutdown FortiGate"
        set description "Default automation action configuration for shuting down this FortiGate unit."
        set action-type system-actions
        set system-action shutdown
    next
    edit "FortiAnalyzer Connection Down_ios-notification"
        set action-type fortiexplorer-notification
    next
    edit "License Expired Notification_ios-notification"
        set action-type fortiexplorer-notification
    next
    edit "Security Rating Notification_ios-notification"
        set action-type fortiexplorer-notification
    next
    edit "Network Down_email"
        set action-type email
        set email-subject "Network Down"
    next
    edit "HA Failover_email"
        set action-type email
        set email-subject "HA Failover"
    next
    edit "Reboot_email"
        set action-type email
        set email-subject "Reboot"
    next
    edit "Compromised Host Quarantine_quarantine"
        set action-type quarantine
    next
    edit "Compromised Host Quarantine_quarantine-forticlient"
        set action-type quarantine-forticlient
    next
    edit "Access Layer Quarantine"
        set description "Quarantine the MAC address on access layer devices (FortiSwitch and FortiAP)."
        set action-type quarantine
    next
    edit "FortiClient Quarantine"
        set description "Use FortiClient EMS to quarantine the endpoint device."
        set action-type quarantine-forticlient
    next
    edit "FortiNAC Quarantine"
        set description "Use FortiNAC to quarantine the endpoint device."
        set action-type quarantine-fortinac
    next
    edit "IP Ban"
        set description "Ban the IP address specified in the automation trigger event."
        set action-type ban-ip
    next
    edit "Email Notification"
        set description "Send a custom email notification to the FortiCare email address registered on this device."
        set action-type email
        set email-subject "%%log.logdesc%%"
    next
    edit "CLI Script - System Status"
        set description "Execute a CLI script to return the system status."
        set action-type cli-script
        set script "get system status"
        set accprofile "super_admin_readonly"
    next
end
config system automation-stitch
    edit "Network Down"
        set description "Default automation stitch to send an email when a network goes down."
        set status disable
        set trigger "Network Down"
        config actions
            edit 1
                set action "Default Email"
            next
        end
    next
    edit "HA Failover"
        set description "Default automation stitch to send an email when a HA failover is detected."
        set status disable
        set trigger "HA Failover"
        config actions
            edit 1
                set action "Default Email"
            next
        end
    next
    edit "Reboot"
        set description "Default automation stitch to send an email when a FortiGate is rebooted."
        set status disable
        set trigger "Reboot"
        config actions
            edit 1
                set action "Default Email"
            next
        end
    next
    edit "FortiAnalyzer Connection Down"
        set description "Default automation stitch to send a FortiExplorer notification when the connection to FortiAnalyzer is lost."
        set trigger "FortiAnalyzer Connection Down"
        config actions
            edit 1
                set action "FortiExplorer Notification"
            next
        end
    next
    edit "License Expired Notification"
        set description "Default automation stitch to send a FortiExplorer notification when a license is near expiration."
        set trigger "License Expired Notification"
        config actions
            edit 1
                set action "FortiExplorer Notification"
            next
        end
    next
    edit "Compromised Host Quarantine"
        set description "Default automation stitch to quarantine a high severity compromised host on FortiAPs, FortiSwitches, and FortiClient EMS."
        set status disable
        set trigger "Compromised Host - High"
        config actions
            edit 1
                set action "Quarantine on FortiSwitch + FortiAP"
            next
            edit 2
                set action "Quarantine FortiClient EMS Endpoint"
            next
        end
    next
    edit "Incoming Webhook Quarantine"
        set description "Default automation stitch to quarantine a provided MAC address on FortiAPs, FortiSwitches, and FortiClient EMS using an Incoming Webhook."
        set status disable
        set trigger "Incoming Webhook Call"
        config actions
            edit 1
                set action "Quarantine on FortiSwitch + FortiAP"
            next
            edit 2
                set action "Quarantine FortiClient EMS Endpoint"
            next
        end
    next
    edit "Security Rating Notification"
        set description "Default automation stitch to send a FortiExplorer notification when a new Security Rating report is available."
        set trigger "Security Rating Notification"
        config actions
            edit 1
                set action "FortiExplorer Notification"
            next
        end
    next
    edit "Firmware upgrade notification"
        set description "Automatic firmware upgrade notification."
        set trigger "Auto Firmware upgrade"
        config actions
            edit 1
                set action "Email Notification"
            next
        end
    next
end
config system federated-upgrade
    set status disabled
end
config system ike
    set dh-multiprocess disable
end
config system ipam
    config pools
        edit "default-pool"
            set subnet 172.31.0.0 255.255.0.0
        next
        edit "lan-pool"
            set subnet 192.168.0.0 255.255.0.0
        next
    end
    config rules
        edit "role-lan"
            set device "*"
            set interface "*"
            set role lan
            set pool "lan-pool"
            set dhcp enable
        next
    end
end
config wireless-controller vap
    edit "Wifi-Diputacion"
        set ssid "Ayuntamiento"
        set 80211k disable
        set 80211v disable
        set passphrase ENC ZV44G5n7FNqiIzGZk8HWeNmMGKQtd0/eD//lFTb9K9ANEy9AQ5oohisxULPQx3bsa2iKmkfx265qY1DsYaMe7gk5D2BZuIB6nb5JOCzKZSFFCgE6P+3hvMtVZ/FKAUapRJ427c/c/iWYIRIhrgtr2zKsGWuJsCJGpU4wt2UU/blK5HNVnJYBXBTGjS52n8o5EdiReQ==
        set schedule "always"
    next
    edit "ayto"
        set ssid "ayto"
        set broadcast-ssid disable
        set passphrase ENC c573Fxl/MerqRS5/ZnuCWu5GyOeYS2xvg7HYCHtGtKEzkAPHx2e3L73SBkwxuXoWrOr16WbPjDC5cSqJhgtNWs1jAzeq+UNO6f0AmMUmk5yuLvLxtRiOqwFfH9tpDlN1LM3PeDhSisezroODr4ZqIR52yOwgKr3YwW9zAAbftMi2rqmSfaHJEyHdbwW4Xgm8+okLJw==
        set schedule "always"
    next
end
config system object-tagging
    edit "default"
    next
end
config switch-controller traffic-policy
    edit "quarantine"
        set description "Rate control for quarantined traffic"
        set guaranteed-bandwidth 163840
        set guaranteed-burst 8192
        set maximum-burst 163840
        set cos-queue 0
        set id 1
    next
    edit "sniffer"
        set description "Rate control for sniffer mirrored traffic"
        set guaranteed-bandwidth 50000
        set guaranteed-burst 8192
        set maximum-burst 163840
        set cos-queue 0
        set id 2
    next
end
config system settings
    set h323-direct-model enable
    set gui-dynamic-routing enable
    set gui-sslvpn-realms enable
    set gui-sslvpn enable
    set gui-multiple-interface-policy enable
end
config system replacemsg-group
    edit "auth-intf-wqt.root"
        set comment "This is quarantine notification replacement message for quarantine VLAN interface"
        set group-type auth
        config auth
            edit "auth-disclaimer-page-1"
                set buffer "<!DOCTYPE html>
<html lang=\"en\">
    <head>
        <meta charset=\"UTF-8\">
        <meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
        <style type=\"text/css\">
            body {
                height: 100%;
                font-family: Helvetica, Arial, sans-serif;
                color: #6a6a6a;
                margin: 0;
                display: flex;
                align-items: center;
                justify-content: center;
            }
            input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
                color: #262626;
                vertical-align: baseline;
                margin: .2em;
                border-style: solid;
                border-width: 1px;
                border-color: #a9a9a9;
                background-color: #fff;
                box-sizing: border-box;
                padding: 2px .5em;
                appearance: none;
                border-radius: 0;
            }
            input:focus {
                border-color: #646464;
                box-shadow: 0 0 1px 0 #a2a2a2;
                outline: 0;
            }
            button {
                padding: .5em 1em;
                border: 1px solid;
                border-radius: 3px;
                min-width: 6em;
                font-weight: 400;
                font-size: .8em;
                cursor: pointer;
            }
            button.primary {
                color: #fff;
                background-color: rgb(47, 113, 178);
                border-color: rgb(34, 103, 173);
            }
            .message-container {
                height: 500px;
                width: 600px;
                padding: 0;
                margin: 10px;
            }
            .logo {
                background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
                height: 267px;
                object-fit: contain;
            }
            table {
                background-color: #fff;
                border-spacing: 0;
                margin: 1em;
            }
            table > tbody > tr > td:first-of-type:not([colspan]) {
                white-space: nowrap;
                color: rgba(0,0,0,.5);
            }
            table > tbody > tr > td:first-of-type {
                vertical-align: top;
            }
            table > tbody > tr > td {
                padding: .3em .3em;
            }
            .field {
                display: table-row;
            }
            .field > :first-child {
                display: table-cell;
                width: 20%;
            }
            .field.single > :first-child {
                display: inline;
            }
            .field > :not(:first-child) {
                width: auto;
                max-width: 100%;
                display: inline-flex;
                align-items: baseline;
                virtical-align: top;
                box-sizing: border-box;
                margin: .3em;
            }
            .field > :not(:first-child) > input {
                width: 230px;
            }
            .form-footer {
                display: inline-flex;
                justify-content: flex-start;
            }
            .form-footer > * {
                margin: 1em;
            }
            .text-scrollable {
                overflow: auto;
                height: 150px;
                border: 1px solid rgb(200, 200, 200);
                padding: 5px;
                font-size: 1em;
            }
            .text-centered {
                text-align: center;
            }
            .text-container {
                margin: 1em 1.5em;
            }
            .flex-container {
                display: flex;
            }
            .flex-container.column {
                flex-direction: column;
            }
        </style>
        <title>Firewall Quarantine Notification</title>
    </head>
    <body><div class=\"message-container\">
    <div class=\"logo\"></div>
    <h1>Quarantine Notification</h1>
    <form action=\"%%DISCLAIMER_ACT%%\" method=\"%%DISCLAIMER_METHOD%%\">
        <input type=\"hidden\" name=\"%%REDIRID%%\" value=\"%%PROTURI%%\">
        <input type=\"hidden\" name=\"%%MAGICID%%\" value=\"%%MAGICVAL%%\">
        <input type=\"hidden\" name=\"%%ANSWERID%%\" value=\"%%DECLINEVAL%%\">
        <p>Your network access has been restricted due to the detection of potentially malicious traffic. Please contact your network administrator for further information.</p>
        <p><b>Acknowledge your quarantine for limited network access.</b></p>
        <div class=\"form-footer\">
            <button class=\"primary\" type=\"submit\" onclick=\"sb(\'%%AGREEVAL%%\')\">Accept</button>
            <button type=\"button\" onclick=\"sb(\'%%DECLINEVAL%%\')\">Decline</button>
        </div>
    </form>
    <script>function sb(val) { document.forms[0].%%ANSWERID%%.value = val; document.forms[0].submit(); }</script>
</div></body>
</html>
"
                set header http
                set format html
            next
            edit "auth-disclaimer-page-2"
                set buffer ''
                set header http
                set format html
            next
            edit "auth-disclaimer-page-3"
                set buffer ''
                set header http
                set format html
            next
            edit "auth-reject-page"
                set buffer "<!DOCTYPE html>
<html lang=\"en\">
    <head>
        <meta charset=\"UTF-8\">
        <meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">
        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">
        <style type=\"text/css\">
            body {
                height: 100%;
                font-family: Helvetica, Arial, sans-serif;
                color: #6a6a6a;
                margin: 0;
                display: flex;
                align-items: center;
                justify-content: center;
            }
            input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
                color: #262626;
                vertical-align: baseline;
                margin: .2em;
                border-style: solid;
                border-width: 1px;
                border-color: #a9a9a9;
                background-color: #fff;
                box-sizing: border-box;
                padding: 2px .5em;
                appearance: none;
                border-radius: 0;
            }
            input:focus {
                border-color: #646464;
                box-shadow: 0 0 1px 0 #a2a2a2;
                outline: 0;
            }
            button {
                padding: .5em 1em;
                border: 1px solid;
                border-radius: 3px;
                min-width: 6em;
                font-weight: 400;
                font-size: .8em;
                cursor: pointer;
            }
            button.primary {
                color: #fff;
                background-color: rgb(47, 113, 178);
                border-color: rgb(34, 103, 173);
            }
            .message-container {
                height: 500px;
                width: 600px;
                padding: 0;
                margin: 10px;
            }
            .logo {
                background: url(%%IMAGE:logo_v3_fguard_app%%) no-repeat left center;
                height: 267px;
                object-fit: contain;
            }
            table {
                background-color: #fff;
                border-spacing: 0;
                margin: 1em;
            }
            table > tbody > tr > td:first-of-type:not([colspan]) {
                white-space: nowrap;
                color: rgba(0,0,0,.5);
            }
            table > tbody > tr > td:first-of-type {
                vertical-align: top;
            }
            table > tbody > tr > td {
                padding: .3em .3em;
            }
            .field {
                display: table-row;
            }
            .field > :first-child {
                display: table-cell;
                width: 20%;
            }
            .field.single > :first-child {
                display: inline;
            }
            .field > :not(:first-child) {
                width: auto;
                max-width: 100%;
                display: inline-flex;
                align-items: baseline;
                virtical-align: top;
                box-sizing: border-box;
                margin: .3em;
            }
            .field > :not(:first-child) > input {
                width: 230px;
            }
            .form-footer {
                display: inline-flex;
                justify-content: flex-start;
            }
            .form-footer > * {
                margin: 1em;
            }
            .text-scrollable {
                overflow: auto;
                height: 150px;
                border: 1px solid rgb(200, 200, 200);
                padding: 5px;
                font-size: 1em;
            }
            .text-centered {
                text-align: center;
            }
            .text-container {
                margin: 1em 1.5em;
            }
            .flex-container {
                display: flex;
            }
            .flex-container.column {
                flex-direction: column;
            }
        </style>
        <title>Firewall Quarantine Declined</title>
    </head>
    <body><div class=\"message-container\">
    <div class=\"logo\"></div>
    <h1>Quarantine Terms Not Acknowledged</h1>
    <form action=\"/\" method=\"post\">
        <input type=\"hidden\" name=\"%%REDIRID%%\" value=\"%%PROTURI%%\">
        <input type=\"hidden\" name=\"%%MAGICID%%\" value=\"%%MAGICVAL%%\">
        <p>By failing to acknowledge the Terms of Quarantine, your access may be more severely restricted.</p>
        <div>
            <button class=\"primary\" type=\"submit\">Return to Quarantine Terms</button>
        </div>
    </form>
</div></body>
</html>
"
                set header http
                set format html
            next
        end
    next
end
config system dhcp server
    edit 1
        set lease-time 86400
        set default-gateway 192.168.22.1
        set netmask 255.255.255.0
        set interface "lan"
        config ip-range
            edit 1
                set start-ip 192.168.22.2
                set end-ip 192.168.22.254
            next
        end
        set dns-server1 172.19.20.86
        set dns-server2 172.19.19.104
    next
    edit 2
        set ntp-service local
        set default-gateway 10.255.1.1
        set netmask 255.255.255.0
        set interface "fortilink"
        config ip-range
            edit 1
                set start-ip 10.255.1.2
                set end-ip 10.255.1.254
            next
        end
        set vci-match enable
        set vci-string "FortiSwitch" "FortiExtender"
    next
    edit 4
        set dns-service default
        set default-gateway 192.168.201.254
        set netmask 255.255.255.0
        set interface "wqt.root"
        config ip-range
            edit 1
                set start-ip 192.168.201.1
                set end-ip 192.168.201.253
            next
        end
        set timezone-option default
    next
    edit 5
        set lease-time 86400
        set dns-service default
        set default-gateway 192.168.250.1
        set netmask 255.255.255.0
        set interface "Wifi-Diputacion"
        config ip-range
            edit 1
                set start-ip 192.168.250.2
                set end-ip 192.168.250.254
            next
        end
    next
    edit 7
        set default-gateway 172.24.51.1
        set netmask 255.255.255.0
        set interface "lan"
        config ip-range
            edit 1
                set start-ip 172.24.51.3
                set end-ip 172.24.51.254
            next
        end
        set dns-server1 172.19.20.86
        set dns-server2 172.19.19.104
    next
    edit 6
        set dns-service default
        set default-gateway 192.168.251.1
        set netmask 255.255.255.0
        set interface "a"
        config ip-range
            edit 1
                set start-ip 192.168.251.2
                set end-ip 192.168.251.254
            next
        end
    next
    edit 8
        set lease-time 86400
        set default-gateway 192.168.1.2
        set netmask 255.255.255.0
        set interface "VLAN20_LAN"
        config ip-range
            edit 1
                set start-ip 192.168.1.51
                set end-ip 192.168.1.200
            next
        end
        set dns-server1 172.19.20.86
        set dns-server2 172.19.19.104
    next
    edit 9
        set lease-time 86400
        set default-gateway 192.168.202.1
        set netmask 255.255.255.0
        set interface "ayto"
        config ip-range
            edit 1
                set start-ip 192.168.202.2
                set end-ip 192.168.202.200
            next
        end
        set dns-server1 172.19.20.86
        set dns-server2 172.19.19.104
    next
end
config firewall address
    edit "EMS_ALL_UNMANAGEABLE_CLIENTS"
        set uuid 685d2a48-4187-51ee-e0df-480b7e1a4a4b
        set type dynamic
        set sub-type ems-tag
        set dirty clean
    next
    edit "all"
        set uuid 6c36d12c-2bb7-51ee-9824-dcffe9d06275
    next
    edit "FIREWALL_AUTH_PORTAL_ADDRESS"
        set uuid 6c36db40-2bb7-51ee-238b-30715f56fe93
    next
    edit "FABRIC_DEVICE"
        set uuid 6c36e39c-2bb7-51ee-abd3-b2d5e89c67ac
        set comment "IPv4 addresses of Fabric Devices."
    next
    edit "SSLVPN_TUNNEL_ADDR1"
        set uuid 6c3920ee-2bb7-51ee-0b06-b27e63ec58f5
        set type iprange
        set start-ip 10.212.134.200
        set end-ip 10.212.134.210
    next
    edit "lan"
        set uuid 6db943a4-2bb7-51ee-fb9d-987fef545345
        set type interface-subnet
        set subnet 192.168.22.0 255.255.255.0
        set interface "lan"
    next
    edit "FCTEMS_ALL_FORTICLOUD_SERVERS"
        set uuid 8e1e94f0-2bb7-51ee-9be7-92507aa8aa7a
        set type dynamic
        set sub-type ems-tag
        set dirty clean
    next
    edit "EMS_ALL_UNKNOWN_CLIENTS"
        set uuid 685dafae-4187-51ee-6382-d5a8ede16430
        set type dynamic
        set sub-type ems-tag
        set dirty clean
    next
    edit "gmail.com"
        set uuid 6985221c-2bb7-51ee-4106-b7bdcbe763c9
        set type fqdn
        set fqdn "gmail.com"
    next
    edit "login.microsoft.com"
        set uuid 6984f864-2bb7-51ee-9cc0-3a3632c684b5
        set type fqdn
        set fqdn "login.microsoft.com"
    next
    edit "login.microsoftonline.com"
        set uuid 6984e1ee-2bb7-51ee-b7ec-492b41447702
        set type fqdn
        set fqdn "login.microsoftonline.com"
    next
    edit "login.windows.net"
        set uuid 69850d0e-2bb7-51ee-cad1-9d71f798253d
        set type fqdn
        set fqdn "login.windows.net"
    next
    edit "none"
        set uuid 6984c6c8-2bb7-51ee-8389-9b8a4af10c4c
        set subnet 0.0.0.0 255.255.255.255
    next
    edit "wildcard.dropbox.com"
        set uuid 69854b2a-2bb7-51ee-0f7e-a63dcaf12809
        set type fqdn
        set fqdn "*.dropbox.com"
    next
    edit "wildcard.google.com"
        set uuid 69853694-2bb7-51ee-5d6b-eadbdff3b903
        set type fqdn
        set fqdn "*.google.com"
    next
    edit "a address"
        set uuid d7943e74-4187-51ee-0633-ec40f68bd88e
        set type interface-subnet
        set subnet 192.168.251.0 255.255.255.0
        set interface "a"
    next
    edit "Wifi-Diputacion address"
        set uuid f1c6c81e-2ca3-51ee-dd0d-c0febc262186
        set type interface-subnet
        set subnet 192.168.250.0 255.255.255.0
        set interface "Wifi-Diputacion"
    next
    edit "RED SARA"
        set uuid 25e09b90-47eb-51ee-1528-35d3f93161e7
        set subnet 10.0.0.0 255.0.0.0
    next
    edit "Net_Diputacion"
        set uuid 97ba08f6-4bdc-51ee-574e-031f966c2cc7
        set subnet 172.19.0.0 255.255.0.0
    next
    edit "SPOKE-AYUN_local_subnet_1"
        set uuid f79c0afe-4e33-51ee-a4d8-9a39018a3d63
        set allow-routing enable
        set subnet 192.168.1.0 255.255.255.0
    next
    edit "VLAN20_LAN address"
        set uuid 0911e668-da21-51ee-b5c8-11e7f0adffd2
        set type interface-subnet
        set subnet 192.168.1.0 255.255.255.0
        set interface "VLAN20_LAN"
    next
    edit "ayto address"
        set uuid 7c86d0f2-da28-51ee-b5a4-625972f6030d
        set type interface-subnet
        set subnet 192.168.202.0 255.255.255.0
        set interface "ayto"
    next
end
config firewall multicast-address
    edit "all"
        set start-ip 224.0.0.0
        set end-ip 239.255.255.255
    next
    edit "Bonjour"
        set start-ip 224.0.0.251
        set end-ip 224.0.0.251
    next
    edit "EIGRP"
        set start-ip 224.0.0.10
        set end-ip 224.0.0.10
    next
    edit "OSPF"
        set start-ip 224.0.0.5
        set end-ip 224.0.0.6
    next
    edit "all_hosts"
        set start-ip 224.0.0.1
        set end-ip 224.0.0.1
    next
    edit "all_routers"
        set start-ip 224.0.0.2
        set end-ip 224.0.0.2
    next
end
config firewall address6
    edit "SSLVPN_TUNNEL_IPv6_ADDR1"
        set uuid 6c392d5a-2bb7-51ee-b4af-99f78adee494
        set ip6 fdff:ffff::/120
    next
    edit "all"
        set uuid 69859f3a-2bb7-51ee-61c7-a23ba7522d0e
    next
    edit "none"
        set uuid 6985afe8-2bb7-51ee-69f5-a8f099a9d3ae
        set ip6 ::/128
    next
end
config firewall multicast-address6
    edit "all"
        set ip6 ff00::/8
    next
end
config firewall addrgrp
    edit "G Suite"
        set uuid 69856272-2bb7-51ee-4196-71e8edab059a
        set member "gmail.com" "wildcard.google.com"
    next
    edit "Microsoft Office 365"
        set uuid 69857de8-2bb7-51ee-c2da-b0ca08b462ae
        set member "login.microsoftonline.com" "login.microsoft.com" "login.windows.net"
    next
    edit "SPOKE-AYUN_local"
        set uuid f7a26566-4e33-51ee-6b9b-9d40a4759bdc
        set allow-routing enable
        set member "SPOKE-AYUN_local_subnet_1"
        set comment "VPN: SPOKE-AYUN (Created by VPN wizard)"
    next
end
config firewall wildcard-fqdn custom
    edit "adobe"
        set uuid 6993db54-2bb7-51ee-c9f2-e7aa7f5d1866
        set wildcard-fqdn "*.adobe.com"
    next
    edit "Adobe Login"
        set uuid 6993e0f4-2bb7-51ee-777a-34be2a15a493
        set wildcard-fqdn "*.adobelogin.com"
    next
    edit "android"
        set uuid 6993e66c-2bb7-51ee-e2a7-1a072556a549
        set wildcard-fqdn "*.android.com"
    next
    edit "apple"
        set uuid 6993eb9e-2bb7-51ee-e82b-676d0b9bbf42
        set wildcard-fqdn "*.apple.com"
    next
    edit "appstore"
        set uuid 6993f12a-2bb7-51ee-3e4e-7e3c8d78f84a
        set wildcard-fqdn "*.appstore.com"
    next
    edit "auth.gfx.ms"
        set uuid 6993f666-2bb7-51ee-8bb3-65bc101a7c4c
        set wildcard-fqdn "*.auth.gfx.ms"
    next
    edit "citrix"
        set uuid 6993fbac-2bb7-51ee-82d4-8f5f5b5fcc37
        set wildcard-fqdn "*.citrixonline.com"
    next
    edit "dropbox.com"
        set uuid 699400f2-2bb7-51ee-3b8a-7afe4e61b96c
        set wildcard-fqdn "*.dropbox.com"
    next
    edit "eease"
        set uuid 69940638-2bb7-51ee-6efd-fccef05f9f5d
        set wildcard-fqdn "*.eease.com"
    next
    edit "firefox update server"
        set uuid 69940bce-2bb7-51ee-752b-ec59ff187ac0
        set wildcard-fqdn "aus*.mozilla.org"
    next
    edit "fortinet"
        set uuid 6994113c-2bb7-51ee-1810-1f025a9eff90
        set wildcard-fqdn "*.fortinet.com"
    next
    edit "googleapis.com"
        set uuid 699416b4-2bb7-51ee-5419-1ce4ece4aa3a
        set wildcard-fqdn "*.googleapis.com"
    next
    edit "google-drive"
        set uuid 69941c0e-2bb7-51ee-5f76-b057709a8d4a
        set wildcard-fqdn "*drive.google.com"
    next
    edit "google-play2"
        set uuid 699421f4-2bb7-51ee-18b2-472ec378d386
        set wildcard-fqdn "*.ggpht.com"
    next
    edit "google-play3"
        set uuid 69942758-2bb7-51ee-228f-178a5e413d5e
        set wildcard-fqdn "*.books.google.com"
    next
    edit "Gotomeeting"
        set uuid 69942cb2-2bb7-51ee-d156-fe49485a7a2b
        set wildcard-fqdn "*.gotomeeting.com"
    next
    edit "icloud"
        set uuid 699435d6-2bb7-51ee-78aa-2491f86eda6a
        set wildcard-fqdn "*.icloud.com"
    next
    edit "itunes"
        set uuid 69943b80-2bb7-51ee-1e16-76d550b70252
        set wildcard-fqdn "*itunes.apple.com"
    next
    edit "microsoft"
        set uuid 699440da-2bb7-51ee-d31e-bb21b63561bd
        set wildcard-fqdn "*.microsoft.com"
    next
    edit "skype"
        set uuid 6994462a-2bb7-51ee-fc88-90cffb75ecef
        set wildcard-fqdn "*.messenger.live.com"
    next
    edit "softwareupdate.vmware.com"
        set uuid 69944b84-2bb7-51ee-9f1a-dbb68ecf997a
        set wildcard-fqdn "*.softwareupdate.vmware.com"
    next
    edit "verisign"
        set uuid 69945124-2bb7-51ee-0f48-69001ccbbaf2
        set wildcard-fqdn "*.verisign.com"
    next
    edit "Windows update 2"
        set uuid 6994567e-2bb7-51ee-c65a-d2e045a7d5e3
        set wildcard-fqdn "*.windowsupdate.com"
    next
    edit "live.com"
        set uuid 69945bf6-2bb7-51ee-cbf7-e368c587ca1e
        set wildcard-fqdn "*.live.com"
    next
    edit "google-play"
        set uuid 6994615a-2bb7-51ee-a491-027c173bd924
        set wildcard-fqdn "*play.google.com"
    next
    edit "update.microsoft.com"
        set uuid 69946704-2bb7-51ee-eaa3-8424bcc6ccac
        set wildcard-fqdn "*update.microsoft.com"
    next
    edit "swscan.apple.com"
        set uuid 69946c72-2bb7-51ee-c25a-aaccdad4fee2
        set wildcard-fqdn "*swscan.apple.com"
    next
    edit "autoupdate.opera.com"
        set uuid 699471d6-2bb7-51ee-fa43-a19ea81caa2c
        set wildcard-fqdn "*autoupdate.opera.com"
    next
    edit "cdn-apple"
        set uuid 6994773a-2bb7-51ee-a503-3a74d41c358a
        set wildcard-fqdn "*.cdn-apple.com"
    next
    edit "mzstatic-apple"
        set uuid 69947d02-2bb7-51ee-3199-9e265af7fbda
        set wildcard-fqdn "*.mzstatic.com"
    next
end
config firewall service category
    edit "General"
        set comment "General services."
    next
    edit "Web Access"
        set comment "Web access."
    next
    edit "File Access"
        set comment "File access."
    next
    edit "Email"
        set comment "Email services."
    next
    edit "Network Services"
        set comment "Network services."
    next
    edit "Authentication"
        set comment "Authentication service."
    next
    edit "Remote Access"
        set comment "Remote access."
    next
    edit "Tunneling"
        set comment "Tunneling service."
    next
    edit "VoIP, Messaging & Other Applications"
        set comment "VoIP, messaging, and other applications."
    next
    edit "Web Proxy"
        set comment "Explicit web proxy."
    next
end
config firewall service custom
    edit "ALL"
        set uuid dcb76972-da1a-51ee-d726-ca63ec044874
        set category "General"
        set protocol IP
    next
    edit "FTP"
        set uuid dcb77160-da1a-51ee-f5a4-86fd6e3362ff
        set category "File Access"
        set tcp-portrange 21
    next
    edit "FTP_GET"
        set uuid dcb77778-da1a-51ee-cf8b-1181c7b8e047
        set category "File Access"
        set tcp-portrange 21
    next
    edit "FTP_PUT"
        set uuid dcb77d86-da1a-51ee-915f-00f396754aee
        set category "File Access"
        set tcp-portrange 21
    next
    edit "DNS"
        set uuid e0e68262-da1a-51ee-f57a-ff5328223fb0
        set category "Network Services"
        set tcp-portrange 53
        set udp-portrange 53
    next
    edit "HTTP"
        set uuid e0e69c3e-da1a-51ee-ca56-e9cd13253aac
        set category "Web Access"
        set tcp-portrange 80
    next
    edit "HTTPS"
        set uuid e0e6b264-da1a-51ee-27ed-48b3fce6de97
        set category "Web Access"
        set tcp-portrange 443
    next
    edit "IMAP"
        set uuid e0e6c844-da1a-51ee-5e39-7720abb7c93e
        set category "Email"
        set tcp-portrange 143
    next
    edit "IMAPS"
        set uuid e0e6de2e-da1a-51ee-e160-095ec3753411
        set category "Email"
        set tcp-portrange 993
    next
    edit "LDAP"
        set uuid e0e6f418-da1a-51ee-1ef5-d39c2fa00637
        set category "Authentication"
        set tcp-portrange 389
    next
    edit "DCE-RPC"
        set uuid e0e70a02-da1a-51ee-d832-79585955100b
        set category "Remote Access"
        set tcp-portrange 135
        set udp-portrange 135
    next
    edit "POP3"
        set uuid e0e721fe-da1a-51ee-9ef5-0084f0048af8
        set category "Email"
        set tcp-portrange 110
    next
    edit "POP3S"
        set uuid e0e737fc-da1a-51ee-dfa9-95c5973a97f6
        set category "Email"
        set tcp-portrange 995
    next
    edit "SAMBA"
        set uuid e0e74de6-da1a-51ee-cc8c-e545e8dee365
        set category "File Access"
        set tcp-portrange 139
    next
    edit "SMTP"
        set uuid e0e763ee-da1a-51ee-0e13-0b0ec93574df
        set category "Email"
        set tcp-portrange 25
    next
    edit "SMTPS"
        set uuid e0e78374-da1a-51ee-94fe-dffd6461614b
        set category "Email"
        set tcp-portrange 465
    next
    edit "KERBEROS"
        set uuid e0e799cc-da1a-51ee-40f4-d52389e4e39c
        set category "Authentication"
        set tcp-portrange 88 464
        set udp-portrange 88 464
    next
    edit "LDAP_UDP"
        set uuid e0e7b236-da1a-51ee-07b2-4a814cf9dd69
        set category "Authentication"
        set udp-portrange 389
    next
    edit "SMB"
        set uuid e0e7c816-da1a-51ee-fb6d-d7dcad0b2b0b
        set category "File Access"
        set tcp-portrange 445
    next
    edit "ALL_TCP"
        set uuid e0e83256-da1a-51ee-39b9-b909e18caaf9
        set category "General"
        set tcp-portrange 1-65535
    next
    edit "ALL_UDP"
        set uuid e0e8487c-da1a-51ee-e70b-51a4ee2f7bcf
        set category "General"
        set udp-portrange 1-65535
    next
    edit "ALL_ICMP"
        set uuid e0e85ec0-da1a-51ee-a823-233a2c59111f
        set category "General"
        set protocol ICMP
        unset icmptype
    next
    edit "ALL_ICMP6"
        set uuid e0e87662-da1a-51ee-909a-19c31f5ac953
        set category "General"
        set protocol ICMP6
        unset icmptype
    next
    edit "GRE"
        set uuid e0e88db4-da1a-51ee-1773-d0810d07ef45
        set category "Tunneling"
        set protocol IP
        set protocol-number 47
    next
    edit "AH"
        set uuid e0e8a51a-da1a-51ee-8039-cbce65114887
        set category "Tunneling"
        set protocol IP
        set protocol-number 51
    next
    edit "ESP"
        set uuid e0e8bc94-da1a-51ee-42ea-da1712c0bfd8
        set category "Tunneling"
        set protocol IP
        set protocol-number 50
    next
    edit "AOL"
        set uuid e0e8d3dc-da1a-51ee-d096-a3100e38c9c1
        set tcp-portrange 5190-5194
    next
    edit "BGP"
        set uuid e0e8e6b0-da1a-51ee-fd9f-b9b54d4c4a85
        set category "Network Services"
        set tcp-portrange 179
    next
    edit "DHCP"
        set uuid e0e8fc9a-da1a-51ee-9bd8-e14918f8fa3c
        set category "Network Services"
        set udp-portrange 67-68
    next
    edit "FINGER"
        set uuid e0e912b6-da1a-51ee-3c59-7602035aae80
        set tcp-portrange 79
    next
    edit "GOPHER"
        set uuid e0e9258a-da1a-51ee-2ae8-a8480c50527a
        set tcp-portrange 70
    next
    edit "H323"
        set uuid e0e93d7c-da1a-51ee-1de7-bc9b7fa6059f
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 1720 1503
        set udp-portrange 1719
    next
    edit "IKE"
        set uuid e0e957d0-da1a-51ee-8244-2e6181cf56f7
        set category "Tunneling"
        set udp-portrange 500 4500
    next
    edit "Internet-Locator-Service"
        set uuid e0e96e32-da1a-51ee-985a-b33b183eecf7
        set tcp-portrange 389
    next
    edit "IRC"
        set uuid e0e98110-da1a-51ee-ad52-e4b7863208ae
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 6660-6669
    next
    edit "L2TP"
        set uuid e0e99786-da1a-51ee-8796-a2793b66caca
        set category "Tunneling"
        set tcp-portrange 1701
        set udp-portrange 1701
    next
    edit "NetMeeting"
        set uuid e0e9afd2-da1a-51ee-b519-5a3144b27dfd
        set tcp-portrange 1720
    next
    edit "NFS"
        set uuid e0e9c594-da1a-51ee-5036-3ad4e2bcc919
        set category "File Access"
        set tcp-portrange 111 2049
        set udp-portrange 111 2049
    next
    edit "NNTP"
        set uuid e0e9de1c-da1a-51ee-19d0-ebf5906e8472
        set tcp-portrange 119
    next
    edit "NTP"
        set uuid e0e9f0e6-da1a-51ee-b944-6d53c4852fc5
        set category "Network Services"
        set tcp-portrange 123
        set udp-portrange 123
    next
    edit "OSPF"
        set uuid e0ea090a-da1a-51ee-f4a9-ec9a01098292
        set category "Network Services"
        set protocol IP
        set protocol-number 89
    next
    edit "PC-Anywhere"
        set uuid e0ea20ac-da1a-51ee-6b79-4e86d49a3402
        set category "Remote Access"
        set tcp-portrange 5631
        set udp-portrange 5632
    next
    edit "PING"
        set uuid e0ea38d0-da1a-51ee-0395-e0e925808975
        set category "Network Services"
        set protocol ICMP
        set icmptype 8
        unset icmpcode
    next
    edit "TIMESTAMP"
        set uuid e0ea5252-da1a-51ee-979e-23169358b7b6
        set protocol ICMP
        set icmptype 13
        unset icmpcode
    next
    edit "INFO_REQUEST"
        set uuid e0ea6896-da1a-51ee-4683-0c391dd2bed3
        set protocol ICMP
        set icmptype 15
        unset icmpcode
    next
    edit "INFO_ADDRESS"
        set uuid e0ea7ee4-da1a-51ee-690b-64a70658674d
        set protocol ICMP
        set icmptype 17
        unset icmpcode
    next
    edit "ONC-RPC"
        set uuid e0ea9550-da1a-51ee-c2ec-98ed637a1226
        set category "Remote Access"
        set tcp-portrange 111
        set udp-portrange 111
    next
    edit "PPTP"
        set uuid e0eab198-da1a-51ee-6aff-2c5540e77577
        set category "Tunneling"
        set tcp-portrange 1723
    next
    edit "QUAKE"
        set uuid e0eac9c6-da1a-51ee-8047-c1ec43c1668e
        set udp-portrange 26000 27000 27910 27960
    next
    edit "RAUDIO"
        set uuid e0eadd76-da1a-51ee-d2b9-15eb1f311a0f
        set udp-portrange 7070
    next
    edit "REXEC"
        set uuid e0eaf040-da1a-51ee-624c-7ef44393ff3e
        set tcp-portrange 512
    next
    edit "RIP"
        set uuid e0eb0332-da1a-51ee-1965-2391c1177932
        set category "Network Services"
        set udp-portrange 520
    next
    edit "RLOGIN"
        set uuid e0eb196c-da1a-51ee-5803-3dcee955affb
        set tcp-portrange 513:512-1023
    next
    edit "RSH"
        set uuid e0eb2ce0-da1a-51ee-6098-707c798b0e8f
        set tcp-portrange 514:512-1023
    next
    edit "SCCP"
        set uuid e0eb4306-da1a-51ee-3b2c-47df93e72512
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 2000
    next
    edit "SIP"
        set uuid e0eb594a-da1a-51ee-fbae-2e9266496150
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 5060
        set udp-portrange 5060
    next
    edit "SIP-MSNmessenger"
        set uuid e0eb71dc-da1a-51ee-ab1a-1c22386b6859
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 1863
    next
    edit "SNMP"
        set uuid e0eb8820-da1a-51ee-c3c5-1a46d9119898
        set category "Network Services"
        set tcp-portrange 161-162
        set udp-portrange 161-162
    next
    edit "SSH"
        set uuid e0eba0d0-da1a-51ee-5dac-1e9785d929d6
        set category "Remote Access"
        set tcp-portrange 22
    next
    edit "SYSLOG"
        set uuid e0ebb71e-da1a-51ee-bcc1-15932fa16493
        set category "Network Services"
        set udp-portrange 514
    next
    edit "TALK"
        set uuid e0ebcd76-da1a-51ee-f44d-a461ea435279
        set udp-portrange 517-518
    next
    edit "TELNET"
        set uuid e0ebe0c2-da1a-51ee-f3ec-5843cde3cb44
        set category "Remote Access"
        set tcp-portrange 23
    next
    edit "TFTP"
        set uuid e0ebf72e-da1a-51ee-6e71-a6c6fe045edc
        set category "File Access"
        set udp-portrange 69
    next
    edit "MGCP"
        set uuid e0ec113c-da1a-51ee-3985-7d4ad2eb7e04
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 2428
        set udp-portrange 2427 2727
    next
    edit "UUCP"
        set uuid e0ec2be0-da1a-51ee-afb3-6a1b6d629f2f
        set tcp-portrange 540
    next
    edit "VDOLIVE"
        set uuid e0ec3f0e-da1a-51ee-2e5f-587c8412ee8b
        set tcp-portrange 7000-7010
    next
    edit "WAIS"
        set uuid e0ec5278-da1a-51ee-6631-cff7ab6a2b3d
        set tcp-portrange 210
    next
    edit "WINFRAME"
        set uuid e0ec65a6-da1a-51ee-8607-85fefc089be8
        set tcp-portrange 1494 2598
    next
    edit "X-WINDOWS"
        set uuid e0ec7c1c-da1a-51ee-2700-cb13d76baa07
        set category "Remote Access"
        set tcp-portrange 6000-6063
    next
    edit "PING6"
        set uuid e0ec92d8-da1a-51ee-7ed9-54578246d0a7
        set protocol ICMP6
        set icmptype 128
        unset icmpcode
    next
    edit "MS-SQL"
        set uuid e0eca9b2-da1a-51ee-7310-33fee1321191
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 1433 1434
    next
    edit "MYSQL"
        set uuid e0ecc050-da1a-51ee-11c5-da74f7170f84
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 3306
    next
    edit "RDP"
        set uuid e0ecd72a-da1a-51ee-0d7c-283ed718d2bf
        set category "Remote Access"
        set tcp-portrange 3389
    next
    edit "VNC"
        set uuid e0eced82-da1a-51ee-79b9-b3f53969983f
        set category "Remote Access"
        set tcp-portrange 5900
    next
    edit "DHCP6"
        set uuid e0ed040c-da1a-51ee-78d0-c24588f7eb11
        set category "Network Services"
        set udp-portrange 546 547
    next
    edit "SQUID"
        set uuid e0ed1ab4-da1a-51ee-8404-e9e325d34c35
        set category "Tunneling"
        set tcp-portrange 3128
    next
    edit "SOCKS"
        set uuid e0ed312a-da1a-51ee-a0be-e3023c5da999
        set category "Tunneling"
        set tcp-portrange 1080
        set udp-portrange 1080
    next
    edit "WINS"
        set uuid e0ed49da-da1a-51ee-4136-c1cc78eca0e1
        set category "Remote Access"
        set tcp-portrange 1512
        set udp-portrange 1512
    next
    edit "RADIUS"
        set uuid e0ed6258-da1a-51ee-01f2-98600e88459c
        set category "Authentication"
        set udp-portrange 1812 1813
    next
    edit "RADIUS-OLD"
        set uuid e0ed7c7a-da1a-51ee-5a9b-5bad759f013d
        set udp-portrange 1645 1646
    next
    edit "CVSPSERVER"
        set uuid e0ed9200-da1a-51ee-aacd-339b74b89845
        set tcp-portrange 2401
        set udp-portrange 2401
    next
    edit "AFS3"
        set uuid e0eda7a4-da1a-51ee-15f3-3346f9a0ec83
        set category "File Access"
        set tcp-portrange 7000-7009
        set udp-portrange 7000-7009
    next
    edit "TRACEROUTE"
        set uuid e0edc108-da1a-51ee-03f5-605b9b2a2df8
        set category "Network Services"
        set udp-portrange 33434-33535
    next
    edit "RTSP"
        set uuid e0edd7c4-da1a-51ee-d50f-364f85f7ee0a
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 554 7070 8554
        set udp-portrange 554
    next
    edit "MMS"
        set uuid e0edf10a-da1a-51ee-bbb0-f9b52878e2ac
        set tcp-portrange 1755
        set udp-portrange 1024-5000
    next
    edit "NONE"
        set uuid e0ee069a-da1a-51ee-a374-5fbf1bfe94ab
        set tcp-portrange 0
    next
    edit "webproxy"
        set uuid dcb72c00-da1a-51ee-9ce2-f90165dd8604
        set proxy enable
        set category "Web Proxy"
        set protocol ALL
        set tcp-portrange 0-65535:0-65535
    next
end
config firewall service group
    edit "Email Access"
        set uuid dcb78420-da1a-51ee-dbe0-3f26af60dca4
        set member "DNS" "IMAP" "IMAPS" "POP3" "POP3S" "SMTP" "SMTPS"
    next
    edit "Web Access"
        set uuid dcb798ca-da1a-51ee-83a4-3b1dabba1802
        set member "DNS" "HTTP" "HTTPS"
    next
    edit "Windows AD"
        set uuid dcb7ab30-da1a-51ee-f8f3-bce1d0639311
        set member "DCE-RPC" "DNS" "KERBEROS" "LDAP" "LDAP_UDP" "SAMBA" "SMB"
    next
    edit "Exchange Server"
        set uuid dcb7bec2-da1a-51ee-3122-08405c6d951a
        set member "DCE-RPC" "DNS" "HTTPS"
    next
end
config vpn certificate ca
end
config vpn certificate local
    edit "Fortinet_CA_SSL"
        set password ENC pHWLwBS/ge2jib2Exh+v0h+puJAMwquL7515twGlr9autta/MccrFNslBqBy81xjaYQPJfxLQwLLVxRYkwVTQGldTPTjM39B4GCW8jtXM2SYGJHzQwjYKutJnNEoJH+9Njy+TCQQ+9h6gd7UvEQW1GJ6hDCbHAz/w80aj4ean4G16xW1m1bGGkEhSwWtRwTTFnYbDg==
        set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1700136634
    next
    edit "Fortinet_CA_Untrusted"
        set password ENC USyXDUQKSlqyjh/x3KjZGYt/PVHDoRfgiQdU74guN+DMPJH6FL71UKvZ9bVgLF+8vz3qCK7CzatKIoUv5DNLg5odQXOl6NPyyUrYN3rP+7PLT7xDZrCpVIL18bXWDzgHT7l1DTnHvjLgzrazmfhTEpFShb2iI+MnN8xKDnMapR5JQ9HZ95kowfP8ZIYe9HYIPktKWQ==
        set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1690377724
    next
    edit "Fortinet_SSL"
        set password ENC QxqXAbAKNXcy76L3vAslR2OMeqbhIrgKAf9Mqqs5UDiIp5jgeqvLtt0oJX278QhumrFLivN69Z4yx8Ah+CT4aSQDu+qhcAfmSzTw1KWKBg5mpcXwWZJ/yg3kd2l6RFn4eJLAGLXCyzpC2FJtIfO7AJhxGjBrvftm6fbjSNn75OfocO03K4g6u/QndUYdnyRw8ZFEIw==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1700136634
    next
    edit "Fortinet_GUI_Server"
        set password ENC oZAz5zUjPB/vYfQcLBQPv6UQHjukzGE4ulvTJo1DsGgosuiR+G8B9dYMUNPwUufmgDzSXSrcssfw/5K3pGaACuNJHemkuP28X4+ajRKFd3WsVsK6rnjCrvFQXtGrycz07Jg1X0i00a/r3iIAjTgPnpTIEuYWia7CpcsKeqUtY1NuIZW9a3qbaRgam2UL+HisqWGPsw==
        set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1694174388
    next
    edit "Fortinet_SSL_RSA1024"
        set password ENC 0RfX0z5jlCUppqnCntGmaqYFeXrTisNczJGvTKujNK+Co+byjLoOt4Moo+yVxXvUV9vl4n4+1YB3W+Bro1Azfs7AufS5MCTCNnZ1fv+P+qSU5/4zegL110ABPJxBrNcx9EHy3tbn4oHhQA+QE7t+oMNMwksiffHJG16C1/XUp8G+2G1GV1s/UWdKkKC3HHFkt41H4w==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1700136634
    next
    edit "Fortinet_SSL_RSA2048"
        set password ENC vVGMlcPc2wcExNtt63/e1O2GcsEPU7kSrkL7apf7c/RFKgReY7zzzBK1m6YmJgNeZ/oSKD/6KJJ7Hf+BdIsjvFDphWQ9oWSiPhaMxLC+urBb232COU9uKDodK1XGty0tKKibnYeaj58RBw16EbGtvPfVPLQisiCIUaoiYWR2UWoHKAXdIiTgyB+jcFmdoWcy7SYq7Q==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1700136634
    next
    edit "Fortinet_SSL_RSA4096"
        set password ENC Ld8eLwLMJVDFH7fKWIOM17zlU1GyEOn1Lek2QyyoH7WyIqnS49w1v/KLcge3rAnjho9yyvke51itWXrFjPjA0bSG/0JeFb/nQH+zNn0IEtULVDlqc6y6YkK1zyAgVmZhmSY0Jqzi4+G0lhIOWvZhZgSWGlT1Odw8QAphGspBbKbpPsvkQfJlpb/OyYflTBnDhE9zJQ==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----
MIIF4DCCA8igAwIBAgIIG6SQ56q8DwYwDQYJKoZIhvcNAQELBQAwgZ0xCzAJBgNV
BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx
ETAPBgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMM
EEZHVDgwRlRLMjMwMTY4MTgxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGlu
ZXQuY29tMB4XDTIzMTExNjEyMDEwMloXDTI2MDIxODEyMDEwMlowgZ0xCzAJBgNV
BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx
ETAPBgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMM
EEZHVDgwRlRLMjMwMTY4MTgxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGlu
ZXQuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArOmFbPxA8o4U
aZV2gdd+y1DuomlhE0HwxAQayNLYJLOQkc9aHLAAi7wI3OKXElc9Y94r7FWfQQnj
R9tvwO3IiPpgbkHsOEjv3CBHmuNEbEwmViGw0W39ISY91Ji2gqjNlns4lAoQ52Fl
UWFxtr81TP41CCpALz52fCMm51f2HdzLL/gHiu82B9p8PnZukdYzKAXVFcrduvhS
BwcGltDBTlZXF50i+wT1QdHd2qjM0YlkIwxqTZ1G7aUsHXIk05aF5pyBJslx0KcH
CU5UKgEHrV2KYh5LWyis1l9zbTkkx3Y0Xl4qWvXIy3S/qtdfNZKQJmFxPNWsFSjS
ImdXYhB7vBSWjCwcMiDA3CZ+10ikUTxkhpmCKXnb5xyHQn2PaeW1halsXBLfA9RD
xbH6lQInTxv4MHxJTBoGsNA+AhtzuFNHadxBHDBPG3x7LfycsH646t0dNunozbTa
xWUhO+vUrFT+CVtswa7cDwikzGSz4foaSJRL5YUawlV0RzE8lhTEy7HG1gH5+ZQg
jkmE8DEo01jraWrlDqHgzCNs5kDszOJTm0TqKdWwx5Kgl0b6J1tNDQug+0LThQwv
efITYQYi0m2e/QJe2zjfjCAzmLAj6/nX/aycmF3BGKIlcB8GwyolZtgbJdPPmXmv
nQiJtmvKpCYGIGIirbGPnVL4JIoGeFcCAwEAAaMiMCAwCQYDVR0TBAIwADATBgNV
HSUEDDAKBggrBgEFBQcDATANBgkqhkiG9w0BAQsFAAOCAgEAb06XmkRAZggj3k5c
qcqFassxE4qIbBVB1E4HzZ0fsJ5Reatk+eConasIZ6be9kc7Wq8Gi4SZhRqyyTk2
hL7JsMtDLXUsh8fosKep1QgSTBJ2cAfUdm4rO5ZJV8eux4E6Q/t6U4qPvWeCKYa6
hNKlQ7j1Aav0StenKoForU3l8wPKE++G9+JY2484XZtKoQ8h5YNTcqaNmoFmvVix
f0j8b2jV0fjA4FkAuz9cNLg1VYv5Ih5z2w8NsVOlHzh0RX1DJ1GQ683H4sUIzIyS
cflxggT181Xy9cPHJegsZTUEaPl4MTgRHh0frSOLH6EtkSTNOwHESquCQK/JOfvq
2buN65ZT2gu8tdLPszxUV1MannaddZ7JaRp6q4Yze10G1Qq+I3LK00CT6zmZoN4v
KPsoyfG3d0PHFiPgTlZSStvrd7PNlyxCfxiUxuEknzbO0jZKOkDbCXY9Aa/M6ba6
b80j2v7CYShzxZrty6FHYGo+cJHUKl/TCJaSywC8cPudhe87qYF4nwAOASuPA9bx
Hl9/mfWB/o1JtsM3V39Zl8kgPVTd8zEld4wllfNWESaTLhrO3XvT/UyuBEfWjNfd
HwV8usm/nlcYtkDKdNfpHNIIz4jYPhp7jBVEMKbFLfunNOtBtYE1J1wHWvFyQcYE
Q7gnUZbN71AqhUDUwKw/MZl+A+g=
-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1700136634
    next
    edit "Fortinet_SSL_DSA1024"
        set password ENC Bqs2Aem3RSUG3qLOa/2xsgq4+B9af5jaA3tv2OaiQru76t4339ihTUiP48XEtKOfveHXN0viCdgVjmJaIRn1rDUci6KCqerdNRNHJbuVYuvMBiHORcsPPHM3WmbtixsPATXTTJ6Ep5Oql+LagH2vweJgKktzcBTpjIZYlyUr/H52QgHGbzQ4kMEbv2isIswaciuEPA==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1700136634
    next
    edit "Fortinet_SSL_DSA2048"
        set password ENC 12yHYr+SPgcNN1M69JrOxcJpJWrrOfzIKgdrWfUGiyFjHOopGFmknnYZvIr24IF4GLwRIOvtaTTaN+cS1nYRXnUdQxCJiWspYTR0EamDuNwd5FZacqDMf3LKrmgPCzq81MFb5gHAeyWJNxnx5yT07Qwc3sB8s6HBCnngsE0DN6p7WHH8oCILODReO7gtDJ3ZxZSKSA==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1700136634
    next
    edit "Fortinet_SSL_ECDSA256"
        set password ENC zLGm026Eczy/eZJRAOVocia8KV9icycWV/Hj/oLqsfEfD2SF0eFFs4tGYt9fJgv5Q26+paDxKNxgmiMfQ+wshWB5ueuN4LbEnJFS/hlh/Nt9IUjeta5o/pwjKmzGfnpdUTW61ornTR52VHcBoke4nPgqa2Md1QPSqow9HdHrBphlUrURoaw2MNQx3bUFCDSJK9dW0w==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIHjME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAhDUbxEaiWB4AICCAAw
DAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQInZilSGKgPRsEgZBf/Of1FVVjgn7D
bo4mmm5dC8EGYiCoWVz4cClk9n0fi6Bif2GcrSnYjSX1n92DEICY1K/lhkNBhMLR
2e3DQurw6OJD5agwNLGWwtIV/8yW/AElMw5/ba5xcXjlbQkqTfM4kcOuHgFolGUr
rOxxP4iVWgNVe8EMlJ5BnEH+7xcZPMWepB0UYoKcsnJUIRcrLpM=
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1700136634
    next
    edit "Fortinet_SSL_ECDSA384"
        set password ENC VsXKBVm42p32MD9ptz1kOMsc9ffSQpMCznT+Ax/ha1FX/zH6rVHayB5KV4s7chQtbgvfKu+jnTyS8kdKK08GkZCzx76cZZw4Epf/inGoMMCLLifG5fHNL36OrW/jet7B++KjDmgnnqfdPCxNi6/EKgyxF+lUMgRyHe4Fqtqts6jjHAOtiz0X5IR6V/rubSz1LW+Xjw==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIBEzBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIN3o+I+iqe6ECAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECNcipFS75TXHBIHAZMXRyoucGUlh
zhy1IMNRHi4xT/yqCoOnoGPDZ8MrSGIsN8ozyXbZU459gSaawdhwvqRKBlix7bAC
QbfySyFRdiLqBIjfw7KGHPYJgRFVIhDuiI2q/lhgUWkWaPyIn733wgERU/R3UmhY
kvGTEI9VPW/P9TX++qhqogCp0Z3vC2GCTUBP/TaPwdKYNGobl9sFyw7ghT9pIe2L
zVd1t3tufxKzYBKcp+VAJYBVyw8dDbYCiepaPP+BMWXV06w3mij0
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1700136634
    next
    edit "Fortinet_SSL_ECDSA521"
        set password ENC eWeMKGOZcSTfTrlZN0a+mXYnlu08zwIWhUGLmadQAU0yJCktyxmlPXIJHQRWLIiFoa2AaNtmxWgZtAN+nMa2r4bGyUDTBNyFibahoswjmqdSde0sKDyW0iVCYEtFsI8QzEPnFPNUpQ01UdzxzSrXxdxgLIdjDG5xgIXKKwqFvNJyj9W/jGozWQm05AgXaFJDneo7rg==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIBSzBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIPcpCatkwie8CAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECAdM6nzvABpABIH4+ARnzVhtcpfO
zZa1JOSbquGaKXmqCd9ESVMbnVeQMQzQittDeVhk5iIJcfC7hgYtOBtzkkYQ2YZk
ePcebyKHi/bi2iL2+pHYnT2uAwEOraZzZfXBVcj8gzEW1D6t2OGAyzfjGnVu8AMV
hHguwRzBVCggdLd2NlLQD+NHhBF5KjbLJ2A8Bu/jCx+XV9HoY2DgiMjkD+rw/lnj
FYQjmynGIv6GcXLSEJhMDPcHR4z1lP/U3WntBdR3Ys6fuLRNqHQbgjEKyqXyPy7Y
ETdVZwtzeJFrxH8CLa8Sw96eHe8B6OsmWjJWSLxxAKoFpBbOb+5+pEaKUrIdJy8=
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1700136634
    next
    edit "Fortinet_SSL_ED25519"
        set password ENC w7lPmH9M3zYm4BfEs6ip/4qiWJdCaCjG5+P24eLkrQCkSKMoGwMXFHEvDfE9USs/jbD1kjS+i/ezTNhKPkVxbbx0RFCfePG9qWdb230v+Bf6htO79VkYzAEqiq4Nw+2nsmQ9lU97EIgd+TRHwXdA9hvbSzcfGKvbeKeGDUQ8OjCpsIzxn2JbrVdYqz6z6CqbLJpz6A==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIGKME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAisDlB06uLD2AICCAAw
DAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIeB//2Z6fhL4EOGTxBEXs7p803g3n
HQVjPoUQFcnGSqIZ/ByydfYyFcVkV7ycOJSn+YoxZUZspOu2ZOPh7tuPSf9v
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1700136634
    next
    edit "Fortinet_SSL_ED448"
        set password ENC QijhyDhBwCSrLzyHkMoBREFCCRSW6ciFx68eKp9qJkbmt9veyw2ydcT/hX45LIVk9uf8sCCTFGtCB0YTxfaVppeP5oaQBqVdDoHM+odGHGLSpoaH6rtRgvdGWf8UR8otZDacTP296z8MNQ8fAPvPNEQo+ZiIq+NxDNsBP+hRP/HZSR9FAfwooj+gZUuz7SlPPweomw==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIGiME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAjejGEdSPV9eAICCAAw
DAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIirCGr7bctd0EUA+qeqgD1qT9/Wsj
abeu04gm0d5WHw/IbdUQvyy9DIvU3Br2c3hUe6sCBglxNdlksIDO4/fWjhd4IHI3
kInTg4+O9wv2yfO1ur65kJJOuJFE
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1700136634
    next
end
config webfilter ftgd-local-cat
    edit "custom1"
        set id 140
    next
    edit "custom2"
        set id 141
    next
end
config ips sensor
    edit "default"
        set comment "Prevent critical attacks."
        config entries
            edit 1
                set severity medium high critical 
            next
        end
    next
    edit "sniffer-profile"
        set comment "Monitor IPS attacks."
        config entries
            edit 1
                set severity medium high critical 
            next
        end
    next
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        config entries
            edit 1
                set severity medium high critical 
            next
        end
    next
    edit "all_default"
        set comment "All predefined signatures with default setting."
        config entries
            edit 1
            next
        end
    next
    edit "all_default_pass"
        set comment "All predefined signatures with PASS action."
        config entries
            edit 1
                set action pass
            next
        end
    next
    edit "high_security"
        set comment "Blocks all Critical/High/Medium and some Low severity vulnerabilities"
        set block-malicious-url enable
        config entries
            edit 1
                set severity medium high critical 
                set status enable
                set action block
            next
            edit 2
                set severity low 
            next
        end
    next
    edit "protect_client"
        set comment "Protect against client-side vulnerabilities."
        config entries
            edit 1
                set location client 
            next
        end
    next
    edit "protect_email_server"
        set comment "Protect against email server-side vulnerabilities."
        config entries
            edit 1
                set location server 
                set protocol SMTP POP3 IMAP 
            next
        end
    next
    edit "protect_http_server"
        set comment "Protect against HTTP server-side vulnerabilities."
        config entries
            edit 1
                set location server 
                set protocol HTTP 
            next
        end
    next
end
config firewall shaper traffic-shaper
    edit "guarantee-100kbps"
        set guaranteed-bandwidth 100
        set maximum-bandwidth 1048576
        set per-policy enable
    next
    edit "high-priority"
        set maximum-bandwidth 1048576
        set per-policy enable
    next
    edit "low-priority"
        set maximum-bandwidth 1048576
        set priority low
        set per-policy enable
    next
    edit "medium-priority"
        set maximum-bandwidth 1048576
        set priority medium
        set per-policy enable
    next
    edit "shared-1M-pipe"
        set maximum-bandwidth 1024
    next
end
config firewall proxy-address
    edit "IPv6-address"
        set uuid 3907a232-4187-51ee-8ce2-ca664dc640d8
        set type host-regex
        set host-regex "^\\[(([0-9a-f]{0,4}:){1,7}[0-9a-f]{1,4})\\]$"
    next
    edit "IPv4-address"
        set uuid 39079c10-4187-51ee-d1cc-79d5504d01b7
        set type host-regex
        set host-regex "^([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}$"
    next
end
config web-proxy global
    set proxy-fqdn "default.fqdn"
end
config application list
    edit "default"
        set comment "Monitor all applications."
        config entries
            edit 1
                set action pass
            next
        end
    next
    edit "sniffer-profile"
        set comment "Monitor all applications."
        unset options
        config entries
            edit 1
                set action pass
            next
        end
    next
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        set deep-app-inspection disable
        config entries
            edit 1
                set action pass
                set log disable
            next
        end
    next
    edit "block-high-risk"
        config entries
            edit 1
                set category 2 6
            next
            edit 2
                set action pass
            next
        end
    next
end
config dlp data-type
    edit "edm-keyword"
        set pattern ".+"
        set transform "/\\b\\0\\b/i"
    next
    edit "keyword"
        set pattern "built-in"
    next
    edit "regex"
        set pattern "built-in"
    next
    edit "hex"
        set pattern "built-in"
    next
    edit "mip-label"
        set pattern "^[[:xdigit:]]{8}-[[:xdigit:]]{4}-[[:xdigit:]]{4}-[[:xdigit:]]{4}-[[:xdigit:]]{12}$"
        set transform "built-in"
    next
    edit "credit-card"
        set pattern "\\b([2-6]{1}\\d{3})[- ]?(\\d{4})[- ]?(\\d{2})[- ]?(\\d{2})[- ]?(\\d{2,4})\\b"
        set verify "builtin)credit-card"
        set look-back 20
        set transform "\\b\\1[- ]?\\2[- ]?\\3[- ]?\\4[- ]?\\5\\b"
    next
    edit "ssn-us"
        set pattern "\\b(\\d{3})-(\\d{2})-(\\d{4})\\b"
        set verify "(?<!-)\\b(?!666|000|9\\d{2})\\d{3}-(?!00)\\d{2}-(?!0{4})\\d{4}\\b(?!-)"
        set look-back 12
        set transform "\\b\\1-\\2-\\3\\b"
    next
end
config dlp dictionary
    edit "def-cc-dict"
        set uuid 42c1b3f8-4187-51ee-38af-0dd413ec1c0b
        config entries
            edit 1
                set type "credit-card"
            next
        end
    next
    edit "SSN-Sensor-r1d"
        set uuid 42c22dce-4187-51ee-60c0-3bfcb9d9aaec
        config entries
            edit 1
                set type "regex"
                set pattern "WebEx"
            next
        end
    next
    edit "def-ssn-dict"
        set uuid 42c2f6a0-4187-51ee-4767-a26207b9dd49
        config entries
            edit 1
                set type "ssn-us"
            next
        end
    next
end
config dlp sensor
    edit "default"
        set comment "Default sensor."
    next
    edit "sniffer-profile"
        set comment "Log a summary of email and web traffic."
    next
    edit "def-cc-sensor"
        config entries
            edit 1
                set dictionary "def-cc-dict"
            next
        end
    next
    edit "SSN-Sensor-r1s"
        config entries
            edit 1
                set dictionary "SSN-Sensor-r1d"
            next
        end
    next
    edit "def-ssn-sensor"
        config entries
            edit 1
                set dictionary "def-ssn-dict"
            next
        end
    next
    edit "Content_Summary"
    next
    edit "Content_Archive"
    next
    edit "Large-File"
    next
    edit "Credit-Card"
    next
    edit "SSN-Sensor"
        set comment "Match SSN numbers but NOT WebEx invite emails."
    next
end
config dlp filepattern
    edit 1
        set name "builtin-patterns"
        config entries
            edit "*.bat"
            next
            edit "*.com"
            next
            edit "*.dll"
            next
            edit "*.doc"
            next
            edit "*.exe"
            next
            edit "*.gz"
            next
            edit "*.hta"
            next
            edit "*.ppt"
            next
            edit "*.rar"
            next
            edit "*.scr"
            next
            edit "*.tar"
            next
            edit "*.tgz"
            next
            edit "*.vb?"
            next
            edit "*.wps"
            next
            edit "*.xl?"
            next
            edit "*.zip"
            next
            edit "*.pif"
            next
            edit "*.cpl"
            next
        end
    next
    edit 2
        set name "all_executables"
        config entries
            edit "bat"
                set filter-type type
                set file-type bat
            next
            edit "exe"
                set filter-type type
                set file-type exe
            next
            edit "elf"
                set filter-type type
                set file-type elf
            next
            edit "hta"
                set filter-type type
                set file-type hta
            next
        end
    next
end
config dlp profile
    edit "default"
        set comment "Default profile."
    next
    edit "sniffer-profile"
        set comment "Log a summary of email and web traffic."
        set summary-proto smtp pop3 imap http-get http-post
    next
    edit "Content_Archive"
        set full-archive-proto smtp pop3 imap http-get http-post ftp nntp
        set summary-proto smtp pop3 imap http-get http-post ftp nntp
    next
    edit "Content_Summary"
        set summary-proto smtp pop3 imap http-get http-post ftp nntp
    next
    edit "Large-File"
        config rule
            edit 1
                set name "Large-File-Filter"
                set proto smtp pop3 imap http-get http-post
                set file-size 5120
                set action log-only
            next
        end
    next
    edit "def-cc-sensor"
    next
    edit "SSN-Sensor-r1s"
    next
    edit "def-ssn-sensor"
    next
    edit "Credit-Card"
        config rule
            edit 1
                set name "Credit-Card-Filter"
                set severity high
                set proto smtp pop3 imap http-get http-post
                set filter-by sensor
                set sensor "def-cc-sensor"
                set action log-only
            next
            edit 2
                set name "Credit-Card-Filter"
                set severity high
                set type message
                set proto smtp pop3 imap http-post
                set filter-by sensor
                set sensor "def-cc-sensor"
                set action log-only
            next
        end
    next
    edit "SSN-Sensor"
        set comment "Match SSN numbers but NOT WebEx invite emails."
        config rule
            edit 1
                set name "SSN-Sensor-Filter"
                set severity high
                set type message
                set proto smtp pop3 imap
                set filter-by sensor
                set sensor "SSN-Sensor-r1s"
            next
            edit 2
                set name "SSN-Sensor-Filter"
                set severity high
                set type message
                set proto smtp pop3 imap
                set filter-by sensor
                set sensor "def-ssn-sensor"
                set action log-only
            next
            edit 3
                set name "SSN-Sensor-Filter"
                set severity high
                set proto smtp pop3 imap http-get http-post ftp
                set filter-by sensor
                set sensor "def-ssn-sensor"
                set action log-only
            next
        end
    next
end
config webfilter ips-urlfilter-setting
end
config webfilter ips-urlfilter-setting6
end
config log threat-weight
    config web
        edit 1
            set category 26
            set level high
        next
        edit 2
            set category 61
            set level high
        next
        edit 3
            set category 86
            set level high
        next
        edit 4
            set category 1
            set level medium
        next
        edit 5
            set category 3
            set level medium
        next
        edit 6
            set category 4
            set level medium
        next
        edit 7
            set category 5
            set level medium
        next
        edit 8
            set category 6
            set level medium
        next
        edit 9
            set category 12
            set level medium
        next
        edit 10
            set category 59
            set level medium
        next
        edit 11
            set category 62
            set level medium
        next
        edit 12
            set category 83
            set level medium
        next
        edit 13
            set category 72
        next
        edit 14
            set category 14
        next
        edit 15
            set category 0
            set level medium
        next
        edit 16
            set category 96
            set level medium
        next
    end
    config application
        edit 1
            set category 2
        next
        edit 2
            set category 6
            set level medium
        next
    end
end
config icap profile
    edit "default"
        config icap-headers
            edit 1
                set name "X-Authenticated-User"
                set content "$user"
                set base64-encoding enable
            next
            edit 2
                set name "X-Authenticated-Groups"
                set content "$local_grp"
                set base64-encoding enable
            next
        end
    next
end
config user fortitoken
    edit "FTKMOB398E4E5048"
        set license "FTMTRIAL0A715604"
    next
    edit "FTKMOB3993F2FE5C"
        set license "FTMTRIAL0A715604"
    next
    edit "FTKMOB3855A39612"
        set license "FTMTRIAL03B30B32"
    next
    edit "FTKMOB38A616E12B"
        set license "FTMTRIAL03B30B32"
    next
end
config user local
    edit "guest"
        set type password
        set passwd-time 2023-09-08 03:58:50
        set passwd ENC /NzB/nQ9rxbpjp2+UPudGzj/6scgywuIRtQVh9jISx59b2Q2+fbe2P+Es5JK/lQBMca1zfVXl1FR8G2Kx/aYEDkLbkf6LKP9DfDJqaO8zYASGyhRMnF7YKECiidosxU5EsBHCXe5igjRVCeSc5gokQNdn72fPWUWZIEHAAUZ8YqVDNhI6XMpshGY1W3weQ+KDdvs7Q==
    next
    edit "david"
        set type password
        set two-factor email
        set email-to "david.alfonso@grupoica.com"
        set passwd-time 2023-09-08 03:59:49
    next
    edit "snoc"
        set type password
        set two-factor email
        set email-to "snoc@grupoica.com"
        set passwd-time 2023-09-08 03:59:49
    next
end
config user setting
    set auth-cert "Fortinet_Factory"
end
config user group
    edit "SSO_Guest_Users"
    next
    edit "Guest-group"
        set member "guest"
    next
end
config vpn ssl web realm
    edit "ayuntamiento"
    next
end
config vpn ssl web host-check-software
    edit "AVG-Internet-Security-AV"
        set guid "17DDD097-36FF-435F-9E1B-52D74245D6BF"
    next
    edit "AVG-Internet-Security-AV-Vista-Win7"
        set guid "0C939084-9E57-CBDB-EA61-0B0C7F62AF82"
    next
    edit "AVG-Internet-Security-FW"
        set type fw
        set guid "8DECF618-9569-4340-B34A-D78D28969B66"
    next
    edit "AVG-Internet-Security-FW-Vista-Win7"
        set type fw
        set guid "34A811A1-D438-CA83-C13E-A23981B1E8F9"
    next
    edit "CA-Anti-Virus"
        set guid "17CFD1EA-56CF-40B5-A06B-BD3A27397C93"
    next
    edit "CA-Internet-Security-AV"
        set guid "6B98D35F-BB76-41C0-876B-A50645ED099A"
    next
    edit "CA-Internet-Security-AV-Vista-Win7"
        set guid "3EED0195-0A4B-4EF3-CC4F-4F401BDC245F"
    next
    edit "CA-Internet-Security-FW"
        set type fw
        set guid "38102F93-1B6E-4922-90E1-A35D8DC6DAA3"
    next
    edit "CA-Internet-Security-FW-Vista-Win7"
        set type fw
        set guid "06D680B0-4024-4FAB-E710-E675E50F6324"
    next
    edit "CA-Personal-Firewall"
        set type fw
        set guid "14CB4B80-8E52-45EA-905E-67C1267B4160"
    next
    edit "ESET-Smart-Security-AV"
        set guid "19259FAE-8396-A113-46DB-15B0E7DFA289"
    next
    edit "ESET-Smart-Security-FW"
        set type fw
        set guid "211E1E8B-C9F9-A04B-6D84-BC85190CE5F2"
    next
    edit "F-Secure-Internet-Security-AV"
        set guid "E7512ED5-4245-4B4D-AF3A-382D3F313F15"
    next
    edit "F-Secure-Internet-Security-AV-Vista-Win7"
        set guid "15414183-282E-D62C-CA37-EF24860A2F17"
    next
    edit "F-Secure-Internet-Security-FW"
        set type fw
        set guid "D4747503-0346-49EB-9262-997542F79BF4"
    next
    edit "F-Secure-Internet-Security-FW-Vista-Win7"
        set type fw
        set guid "2D7AC0A6-6241-D774-E168-461178D9686C"
    next
    edit "FortiClient-AV"
        set guid "1A0271D5-3D4F-46DB-0C2C-AB37BA90D9F7"
    next
    edit "FortiClient-AV-Vista"
        set guid "385618A6-2256-708E-3FB9-7E98B93F91F9"
    next
    edit "FortiClient-FW"
        set type fw
        set guid "528CB157-D384-4593-AAAA-E42DFF111CED"
    next
    edit "FortiClient-FW-Vista"
        set type fw
        set guid "006D9983-6839-71D6-14E6-D7AD47ECD682"
    next
    edit "FortiClient5-AV"
        set guid "5EEDDB8C-C27A-6714-3657-DBD811D1F1B7"
    next
    edit "Kaspersky-AV"
        set guid "2C4D4BC6-0793-4956-A9F9-E252435469C0"
    next
    edit "Kaspersky-AV-Vista-Win7"
        set guid "AE1D740B-8F0F-D137-211D-873D44B3F4AE"
    next
    edit "Kaspersky-FW"
        set type fw
        set guid "2C4D4BC6-0793-4956-A9F9-E252435469C0"
    next
    edit "Kaspersky-FW-Vista-Win7"
        set type fw
        set guid "9626F52E-C560-D06F-0A42-2E08BA60B3D5"
    next
    edit "McAfee-Internet-Security-Suite-AV"
        set guid "84B5EE75-6421-4CDE-A33A-DD43BA9FAD83"
    next
    edit "McAfee-Internet-Security-Suite-AV-Vista-Win7"
        set guid "86355677-4064-3EA7-ABB3-1B136EB04637"
    next
    edit "McAfee-Internet-Security-Suite-FW"
        set type fw
        set guid "94894B63-8C7F-4050-BDA4-813CA00DA3E8"
    next
    edit "McAfee-Internet-Security-Suite-FW-Vista-Win7"
        set type fw
        set guid "BE0ED752-0A0B-3FFF-80EC-B2269063014C"
    next
    edit "McAfee-Virus-Scan-Enterprise"
        set guid "918A2B0B-2C60-4016-A4AB-E868DEABF7F0"
    next
    edit "Norton-360-2.0-AV"
        set guid "A5F1BC7C-EA33-4247-961C-0217208396C4"
    next
    edit "Norton-360-2.0-FW"
        set type fw
        set guid "371C0A40-5A0C-4AD2-A6E5-69C02037FBF3"
    next
    edit "Norton-360-3.0-AV"
        set guid "E10A9785-9598-4754-B552-92431C1C35F8"
    next
    edit "Norton-360-3.0-FW"
        set type fw
        set guid "7C21A4C9-F61F-4AC4-B722-A6E19C16F220"
    next
    edit "Norton-Internet-Security-AV"
        set guid "E10A9785-9598-4754-B552-92431C1C35F8"
    next
    edit "Norton-Internet-Security-AV-Vista-Win7"
        set guid "88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855"
    next
    edit "Norton-Internet-Security-FW"
        set type fw
        set guid "7C21A4C9-F61F-4AC4-B722-A6E19C16F220"
    next
    edit "Norton-Internet-Security-FW-Vista-Win7"
        set type fw
        set guid "B0F2DB13-C654-2E74-30D4-99C9310F0F2E"
    next
    edit "Panda-Antivirus+Firewall-2008-AV"
        set guid "EEE2D94A-D4C1-421A-AB2C-2CE8FE51747A"
    next
    edit "Panda-Antivirus+Firewall-2008-FW"
        set type fw
        set guid "7B090DC0-8905-4BAF-8040-FD98A41C8FB8"
    next
    edit "Panda-Internet-Security-2006~2007-FW"
        set type fw
        set guid "4570FB70-5C9E-47E9-B16C-A3A6A06C4BF0"
    next
    edit "Panda-Internet-Security-2008~2009-FW"
        set type fw
        set guid "7B090DC0-8905-4BAF-8040-FD98A41C8FB8"
    next
    edit "Panda-Internet-Security-AV"
        set guid "4570FB70-5C9E-47E9-B16C-A3A6A06C4BF0"
    next
    edit "Sophos-Anti-Virus"
        set guid "3F13C776-3CBE-4DE9-8BF6-09E5183CA2BD"
    next
    edit "Sophos-Enpoint-Secuirty-and-Control-AV-Vista-Win7"
        set guid "479CCF92-4960-B3E0-7373-BF453B467D2C"
    next
    edit "Sophos-Enpoint-Secuirty-and-Control-FW"
        set type fw
        set guid "0786E95E-326A-4524-9691-41EF88FB52EA"
    next
    edit "Sophos-Enpoint-Secuirty-and-Control-FW-Vista-Win7"
        set type fw
        set guid "7FA74EB7-030F-B2B8-582C-1670C5953A57"
    next
    edit "Symantec-Endpoint-Protection-AV"
        set guid "FB06448E-52B8-493A-90F3-E43226D3305C"
    next
    edit "Symantec-Endpoint-Protection-AV-Vista-Win7"
        set guid "88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855"
    next
    edit "Symantec-Endpoint-Protection-FW"
        set type fw
        set guid "BE898FE3-CD0B-4014-85A9-03DB9923DDB6"
    next
    edit "Symantec-Endpoint-Protection-FW-Vista-Win7"
        set type fw
        set guid "B0F2DB13-C654-2E74-30D4-99C9310F0F2E"
    next
    edit "Trend-Micro-AV"
        set guid "7D2296BC-32CC-4519-917E-52E652474AF5"
    next
    edit "Trend-Micro-AV-Vista-Win7"
        set guid "48929DFC-7A52-A34F-8351-C4DBEDBD9C50"
    next
    edit "Trend-Micro-FW"
        set type fw
        set guid "3E790E9E-6A5D-4303-A7F9-185EC20F3EB6"
    next
    edit "Trend-Micro-FW-Vista-Win7"
        set type fw
        set guid "70A91CD9-303D-A217-A80E-6DEE136EDB2B"
    next
    edit "ZoneAlarm-AV"
        set guid "5D467B10-818C-4CAB-9FF7-6893B5B8F3CF"
    next
    edit "ZoneAlarm-AV-Vista-Win7"
        set guid "D61596DF-D219-341C-49B3-AD30538CBC5B"
    next
    edit "ZoneAlarm-FW"
        set type fw
        set guid "829BDA32-94B3-44F4-8446-F8FCFF809F8B"
    next
    edit "ZoneAlarm-FW-Vista-Win7"
        set type fw
        set guid "EE2E17FA-9876-3544-62EC-0405AD5FFB20"
    next
end
config vpn ssl web portal
    edit "full-access"
        set tunnel-mode enable
        set ipv6-tunnel-mode enable
        set web-mode enable
        set ip-pools "SSLVPN_TUNNEL_ADDR1"
        set ipv6-pools "SSLVPN_TUNNEL_IPv6_ADDR1"
    next
    edit "tunnel-access"
        set tunnel-mode enable
        set ipv6-tunnel-mode enable
        set ip-pools "SSLVPN_TUNNEL_ADDR1"
        set ipv6-pools "SSLVPN_TUNNEL_IPv6_ADDR1"
    next
    edit "web-access"
        set web-mode enable
    next
end
config vpn ssl settings
    set banned-cipher SHA1 SHA256 SHA384
    set servercert "Fortinet_Factory"
    set tunnel-ip-pools "SSLVPN_TUNNEL_ADDR1"
    set tunnel-ipv6-pools "SSLVPN_TUNNEL_IPv6_ADDR1"
    set port 443
    set source-interface "wan1"
    set source-address "all"
    set source-address6 "all"
    set default-portal "full-access"
    config authentication-rule
        edit 1
            set users "david" "snoc"
            set portal "full-access"
            set realm "ayuntamiento"
        next
    end
end
config voip profile
    edit "default"
        set comment "Default VoIP profile."
        config sip
        end
    next
    edit "strict"
        config sip
            set malformed-request-line discard
            set malformed-header-via discard
            set malformed-header-from discard
            set malformed-header-to discard
            set malformed-header-call-id discard
            set malformed-header-cseq discard
            set malformed-header-rack discard
            set malformed-header-rseq discard
            set malformed-header-contact discard
            set malformed-header-record-route discard
            set malformed-header-route discard
            set malformed-header-expires discard
            set malformed-header-content-type discard
            set malformed-header-content-length discard
            set malformed-header-max-forwards discard
            set malformed-header-allow discard
            set malformed-header-p-asserted-identity discard
            set malformed-header-sdp-v discard
            set malformed-header-sdp-o discard
            set malformed-header-sdp-s discard
            set malformed-header-sdp-i discard
            set malformed-header-sdp-c discard
            set malformed-header-sdp-b discard
            set malformed-header-sdp-z discard
            set malformed-header-sdp-k discard
            set malformed-header-sdp-a discard
            set malformed-header-sdp-t discard
            set malformed-header-sdp-r discard
            set malformed-header-sdp-m discard
        end
    next
end
config system sdwan
    set status enable
    config zone
        edit "virtual-wan-link"
        next
        edit "SD-WAN_Diputacion"
        next
        edit "SD-WAN_INTERNET"
        next
    end
    config members
        edit 4
            set interface "SPOKE-AYUN"
            set zone "SD-WAN_Diputacion"
        next
        edit 3
        next
        edit 5
            set interface "wan1"
            set zone "SD-WAN_INTERNET"
        next
        edit 6
            set interface "wan2"
        next
        edit 7
            set interface "VLAN20_WAN"
            set zone "SD-WAN_INTERNET"
            set gateway 192.168.200.1
        next
    end
    config health-check
        edit "ping_8.8.8.8"
            set server "8.8.8.8"
            set members 5 6
        next
        edit "ping_estado_tunel_diputacion"
            set server "10.10.1.1"
            set members 4
        next
        edit "PING 172.19.16.185"
            set server "172.19.16.185"
            set members 4
        next
        edit "PING_RED_SARA"
            set server "172.19.1.12"
            set members 4
        next
    end
    config service
        edit 6
            set name "RED_SARA"
            set mode priority
            set dst "RED SARA"
            set src "lan"
            set health-check "PING_RED_SARA"
            set priority-zone "SD-WAN_Diputacion"
        next
        edit 1
            set name "LAN-DIPUTACION"
            set mode priority
            set dst "Net_Diputacion"
            set src "lan"
            set health-check "ping_estado_tunel_diputacion"
            set priority-zone "SD-WAN_Diputacion"
        next
        edit 2
            set name "LAN-INTERNET_OUT"
            set mode priority
            set dst "all"
            set src "lan"
            set health-check "ping_8.8.8.8"
            set priority-zone "SD-WAN_INTERNET"
        next
        edit 4
            set name "WIFI-INTERNET"
            set mode priority
            set dst "all"
            set src "Wifi-Diputacion address"
            set health-check "ping_8.8.8.8"
            set priority-zone "SD-WAN_INTERNET"
        next
        edit 5
            set name "FORTIGUARD-SERVICES"
            set mode priority
            set src "all"
            set internet-service enable
            set internet-service-name "Fortinet-DNS" "Fortinet-FortiCloud" "Fortinet-FortiGuard" "Fortinet-NetBIOS.Name.Service" "Fortinet-NetBIOS.Session.Service" "Fortinet-Other" "Fortinet-Web"
            set health-check "ping_8.8.8.8"
            set priority-zone "SD-WAN_INTERNET"
        next
    end
end
config vpn ipsec phase1-interface
    edit "SPOKE-AYUN"
        set interface "VLAN20_WAN"
        set peertype any
        set net-device enable
        set proposal aes128-sha256 aes256-sha256 aes128-sha1 aes256-sha1
        set add-route disable
        set dpd on-idle
        set comments "VPN: SPOKE-AYUN (Created by VPN wizard)"
        set wizard-type spoke-fortigate-auto-discovery
        set auto-discovery-receiver enable
        set remote-gw 194.224.40.56
        set psksecret ENC ntXdpPoLhsayOvjk7y7v1DOyGmgAVoJYuJd5omXxOWj8WBSlQM/a9GairKRMdG3Nf2ya90jgMOx0xhvDYLt9Y5NqGNDrrQ6s03qIsR/7fb3M5Q3cB3GbXyv+6XOXatQu2cW1vLmY0Iaz+yixv5ZNbFwrGs7i42PcRfSqrXKYc41Yeeam8IXgmY5WlkIYiW4avVB/gQ==
    next
end
config vpn ipsec phase2-interface
    edit "SPOKE-AYUN"
        set phase1name "SPOKE-AYUN"
        set proposal aes128-sha1 aes256-sha1 aes128-sha256 aes256-sha256 aes128gcm aes256gcm chacha20poly1305
        set comments "VPN: SPOKE-AYUN (Created by VPN wizard)"
    next
end
config dnsfilter profile
    edit "default"
        set comment "Default dns filtering."
        config ftgd-dns
            config filters
                edit 1
                    set category 2
                next
                edit 2
                    set category 7
                next
                edit 3
                    set category 8
                next
                edit 4
                    set category 9
                next
                edit 5
                    set category 11
                next
                edit 6
                    set category 12
                next
                edit 7
                    set category 13
                next
                edit 8
                    set category 14
                next
                edit 9
                    set category 15
                next
                edit 10
                    set category 16
                next
                edit 11
                next
                edit 12
                    set category 57
                next
                edit 13
                    set category 63
                next
                edit 14
                    set category 64
                next
                edit 15
                    set category 65
                next
                edit 16
                    set category 66
                next
                edit 17
                    set category 67
                next
                edit 18
                    set category 26
                    set action block
                next
                edit 19
                    set category 61
                    set action block
                next
                edit 20
                    set category 86
                    set action block
                next
                edit 21
                    set category 88
                    set action block
                next
                edit 22
                    set category 90
                    set action block
                next
                edit 23
                    set category 91
                    set action block
                next
                edit 24
                    set category 96
                    set action block
                next
                edit 25
                    set category 98
                    set action block
                next
                edit 26
                    set category 99
                    set action block
                next
            end
        end
        set block-botnet enable
    next
end
config system virtual-wire-pair
    edit "VoIP"
        set member "VLAN21_LAN" "VLAN21_WAN"
        set wildcard-vlan enable
        set vlan-filter 21-21
    next
end
config antivirus settings
    set machine-learning-detection enable
    set grayware enable
end
config antivirus profile
    edit "default"
        set comment "Scan files and block viruses."
        config http
            set av-scan block
        end
        config ftp
            set av-scan block
        end
        config imap
            set av-scan block
            set executables virus
        end
        config pop3
            set av-scan block
            set executables virus
        end
        config smtp
            set av-scan block
            set executables virus
        end
        set outbreak-prevention-archive-scan disable
        set external-blocklist-enable-all enable
    next
    edit "sniffer-profile"
        set comment "Scan files and monitor viruses."
        config http
            set av-scan block
        end
        config ftp
            set av-scan block
        end
        config imap
            set av-scan block
            set executables virus
        end
        config pop3
            set av-scan block
            set executables virus
        end
        config smtp
            set av-scan block
            set executables virus
        end
        set outbreak-prevention-archive-scan disable
        set external-blocklist-enable-all enable
    next
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        config http
            set av-scan block
        end
        config ftp
            set av-scan block
        end
        config imap
            set av-scan block
            set executables virus
        end
        config pop3
            set av-scan block
            set executables virus
        end
        config smtp
            set av-scan block
            set executables virus
        end
        set outbreak-prevention-archive-scan disable
        set external-blocklist-enable-all enable
    next
end
config file-filter profile
    edit "default"
        set comment "File type inspection."
    next
    edit "sniffer-profile"
        set comment "File type inspection."
    next
end
config webfilter profile
    edit "default"
        set comment "Default web filtering."
        config ftgd-wf
            unset options
            config filters
                edit 1
                    set action block
                next
                edit 2
                    set category 2
                    set action block
                next
                edit 3
                    set category 7
                    set action block
                next
                edit 4
                    set category 8
                    set action block
                next
                edit 5
                    set category 9
                    set action block
                next
                edit 6
                    set category 11
                    set action block
                next
                edit 7
                    set category 13
                    set action block
                next
                edit 20
                    set category 86
                    set action block
                next
                edit 21
                    set category 88
                    set action block
                next
                edit 22
                    set category 90
                    set action block
                next
                edit 23
                    set category 91
                    set action block
                next
                edit 8
                    set category 14
                    set action block
                next
                edit 9
                    set category 15
                    set action block
                next
                edit 10
                    set category 16
                    set action block
                next
                edit 11
                    set category 26
                    set action block
                next
                edit 12
                    set category 57
                    set action block
                next
                edit 13
                    set category 61
                    set action block
                next
                edit 14
                    set category 63
                    set action block
                next
                edit 15
                    set category 64
                    set action block
                next
                edit 16
                    set category 65
                    set action block
                next
                edit 17
                    set category 66
                    set action block
                next
                edit 18
                    set category 67
                    set action block
                next
                edit 19
                    set category 83
                    set action block
                next
                edit 24
                    set category 96
                    set action block
                next
                edit 25
                    set category 98
                    set action block
                next
                edit 26
                    set category 99
                    set action block
                next
                edit 27
                    set category 1
                next
                edit 28
                    set category 3
                next
                edit 29
                    set category 4
                next
                edit 30
                    set category 5
                next
                edit 31
                    set category 6
                next
                edit 32
                    set category 12
                next
                edit 33
                    set category 59
                next
                edit 34
                    set category 62
                next
            end
        end
    next
    edit "sniffer-profile"
        set comment "Monitor web traffic."
        config ftgd-wf
            config filters
                edit 1
                next
                edit 2
                    set category 1
                next
                edit 3
                    set category 2
                next
                edit 4
                    set category 3
                next
                edit 5
                    set category 4
                next
                edit 6
                    set category 5
                next
                edit 7
                    set category 6
                next
                edit 8
                    set category 7
                next
                edit 9
                    set category 8
                next
                edit 10
                    set category 9
                next
                edit 11
                    set category 11
                next
                edit 12
                    set category 12
                next
                edit 13
                    set category 13
                next
                edit 14
                    set category 14
                next
                edit 15
                    set category 15
                next
                edit 16
                    set category 16
                next
                edit 17
                    set category 17
                next
                edit 18
                    set category 18
                next
                edit 19
                    set category 19
                next
                edit 20
                    set category 20
                next
                edit 21
                    set category 23
                next
                edit 22
                    set category 24
                next
                edit 23
                    set category 25
                next
                edit 24
                    set category 26
                next
                edit 25
                    set category 28
                next
                edit 26
                    set category 29
                next
                edit 27
                    set category 30
                next
                edit 28
                    set category 31
                next
                edit 29
                    set category 33
                next
                edit 30
                    set category 34
                next
                edit 31
                    set category 35
                next
                edit 32
                    set category 36
                next
                edit 33
                    set category 37
                next
                edit 34
                    set category 38
                next
                edit 35
                    set category 39
                next
                edit 36
                    set category 40
                next
                edit 37
                    set category 41
                next
                edit 38
                    set category 42
                next
                edit 39
                    set category 43
                next
                edit 40
                    set category 44
                next
                edit 41
                    set category 46
                next
                edit 42
                    set category 47
                next
                edit 43
                    set category 48
                next
                edit 44
                    set category 49
                next
                edit 45
                    set category 50
                next
                edit 46
                    set category 51
                next
                edit 47
                    set category 52
                next
                edit 48
                    set category 53
                next
                edit 49
                    set category 54
                next
                edit 50
                    set category 55
                next
                edit 51
                    set category 56
                next
                edit 52
                    set category 57
                next
                edit 53
                    set category 58
                next
                edit 54
                    set category 59
                next
                edit 55
                    set category 61
                next
                edit 56
                    set category 62
                next
                edit 57
                    set category 63
                next
                edit 58
                    set category 64
                next
                edit 59
                    set category 65
                next
                edit 60
                    set category 66
                next
                edit 61
                    set category 67
                next
                edit 62
                    set category 68
                next
                edit 63
                    set category 69
                next
                edit 64
                    set category 70
                next
                edit 65
                    set category 71
                next
                edit 66
                    set category 72
                next
                edit 67
                    set category 75
                next
                edit 68
                    set category 76
                next
                edit 69
                    set category 77
                next
                edit 70
                    set category 78
                next
                edit 71
                    set category 79
                next
                edit 72
                    set category 80
                next
                edit 73
                    set category 81
                next
                edit 74
                    set category 82
                next
                edit 75
                    set category 83
                next
                edit 76
                    set category 84
                next
                edit 77
                    set category 85
                next
                edit 78
                    set category 86
                next
                edit 79
                    set category 87
                next
                edit 80
                    set category 88
                next
                edit 81
                    set category 89
                next
                edit 82
                    set category 90
                next
                edit 83
                    set category 91
                next
                edit 84
                    set category 92
                next
                edit 85
                    set category 93
                next
                edit 86
                    set category 94
                next
                edit 87
                    set category 95
                next
                edit 88
                    set category 96
                next
                edit 89
                    set category 97
                next
                edit 90
                    set category 98
                next
                edit 91
                    set category 99
                next
            end
        end
    next
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        set options block-invalid-url
        config ftgd-wf
            unset options
            config filters
                edit 1
                    set action block
                next
                edit 2
                    set category 2
                    set action block
                next
                edit 3
                    set category 7
                    set action block
                next
                edit 4
                    set category 8
                    set action block
                next
                edit 5
                    set category 9
                    set action block
                next
                edit 6
                    set category 11
                    set action block
                next
                edit 7
                    set category 13
                    set action block
                next
                edit 20
                    set category 86
                    set action block
                next
                edit 21
                    set category 88
                    set action block
                next
                edit 22
                    set category 90
                    set action block
                next
                edit 23
                    set category 91
                    set action block
                next
                edit 8
                    set category 14
                    set action block
                next
                edit 9
                    set category 15
                    set action block
                next
                edit 10
                    set category 16
                    set action block
                next
                edit 11
                    set category 26
                    set action block
                next
                edit 12
                    set category 57
                    set action block
                next
                edit 13
                    set category 61
                    set action block
                next
                edit 14
                    set category 63
                    set action block
                next
                edit 15
                    set category 64
                    set action block
                next
                edit 16
                    set category 65
                    set action block
                next
                edit 17
                    set category 66
                    set action block
                next
                edit 18
                    set category 67
                    set action block
                next
                edit 19
                    set category 83
                    set action block
                next
                edit 24
                    set category 96
                    set action block
                next
                edit 25
                    set category 98
                    set action block
                next
                edit 26
                    set category 99
                    set action block
                next
                edit 27
                    set category 1
                next
                edit 28
                    set category 3
                next
                edit 29
                    set category 4
                next
                edit 30
                    set category 5
                next
                edit 31
                    set category 6
                next
                edit 32
                    set category 12
                next
                edit 33
                    set category 59
                next
                edit 34
                    set category 62
                next
            end
        end
    next
    edit "monitor-all"
        set comment "Monitor and log all visited URLs, flow-based."
        config ftgd-wf
            unset options
            config filters
                edit 1
                    set category 1
                next
                edit 2
                    set category 3
                next
                edit 3
                    set category 4
                next
                edit 4
                    set category 5
                next
                edit 5
                    set category 6
                next
                edit 6
                    set category 12
                next
                edit 7
                    set category 59
                next
                edit 8
                    set category 62
                next
                edit 9
                    set category 83
                next
                edit 10
                    set category 2
                next
                edit 11
                    set category 7
                next
                edit 12
                    set category 8
                next
                edit 13
                    set category 9
                next
                edit 14
                    set category 11
                next
                edit 15
                    set category 13
                next
                edit 16
                    set category 14
                next
                edit 17
                    set category 15
                next
                edit 18
                    set category 16
                next
                edit 19
                    set category 57
                next
                edit 20
                    set category 63
                next
                edit 21
                    set category 64
                next
                edit 22
                    set category 65
                next
                edit 23
                    set category 66
                next
                edit 24
                    set category 67
                next
                edit 25
                    set category 19
                next
                edit 26
                    set category 24
                next
                edit 27
                    set category 25
                next
                edit 28
                    set category 72
                next
                edit 29
                    set category 75
                next
                edit 30
                    set category 76
                next
                edit 31
                    set category 26
                next
                edit 32
                    set category 61
                next
                edit 33
                    set category 86
                next
                edit 34
                    set category 17
                next
                edit 35
                    set category 18
                next
                edit 36
                    set category 20
                next
                edit 37
                    set category 23
                next
                edit 38
                    set category 28
                next
                edit 39
                    set category 29
                next
                edit 40
                    set category 30
                next
                edit 41
                    set category 33
                next
                edit 42
                    set category 34
                next
                edit 43
                    set category 35
                next
                edit 44
                    set category 36
                next
                edit 45
                    set category 37
                next
                edit 46
                    set category 38
                next
                edit 47
                    set category 39
                next
                edit 48
                    set category 40
                next
                edit 49
                    set category 42
                next
                edit 50
                    set category 44
                next
                edit 51
                    set category 46
                next
                edit 52
                    set category 47
                next
                edit 53
                    set category 48
                next
                edit 54
                    set category 54
                next
                edit 55
                    set category 55
                next
                edit 56
                    set category 58
                next
                edit 57
                    set category 68
                next
                edit 58
                    set category 69
                next
                edit 59
                    set category 70
                next
                edit 60
                    set category 71
                next
                edit 61
                    set category 77
                next
                edit 62
                    set category 78
                next
                edit 63
                    set category 79
                next
                edit 64
                    set category 80
                next
                edit 65
                    set category 82
                next
                edit 66
                    set category 85
                next
                edit 67
                    set category 87
                next
                edit 68
                    set category 31
                next
                edit 69
                    set category 41
                next
                edit 70
                    set category 43
                next
                edit 71
                    set category 49
                next
                edit 72
                    set category 50
                next
                edit 73
                    set category 51
                next
                edit 74
                    set category 52
                next
                edit 75
                    set category 53
                next
                edit 76
                    set category 56
                next
                edit 77
                    set category 81
                next
                edit 78
                    set category 84
                next
                edit 79
                next
                edit 80
                    set category 88
                next
                edit 81
                    set category 89
                next
                edit 82
                    set category 90
                next
                edit 83
                    set category 91
                next
                edit 84
                    set category 92
                next
                edit 85
                    set category 93
                next
                edit 86
                    set category 94
                next
                edit 87
                    set category 95
                next
                edit 88
                    set category 96
                next
                edit 89
                    set category 97
                next
                edit 90
                    set category 98
                next
                edit 91
                    set category 99
                next
            end
        end
        set log-all-url enable
        set web-content-log disable
        set web-filter-command-block-log disable
        set web-filter-cookie-log disable
        set web-url-log disable
        set web-invalid-domain-log disable
        set web-ftgd-err-log disable
    next
end
config webfilter search-engine
    edit "google"
        set hostname ".*\\.google\\..*"
        set url "^\\/((custom|search|images|videosearch|webhp)\\?)"
        set query "q="
        set safesearch url
        set safesearch-str "&safe=active"
    next
    edit "yahoo"
        set hostname ".*\\.yahoo\\..*"
        set url "^\\/search(\\/video|\\/images){0,1}(\\?|;)"
        set query "p="
        set safesearch url
        set safesearch-str "&vm=r"
    next
    edit "bing"
        set hostname ".*\\.bing\\..*"
        set url "^(\\/images|\\/videos)?(\\/search|\\/async|\\/asyncv2)\\?"
        set query "q="
        set safesearch header
    next
    edit "yandex"
        set hostname "yandex\\..*"
        set url "^\\/((yand|images\\/|video\\/)(search)|search\\/)\\?"
        set query "text="
        set safesearch url
        set safesearch-str "&family=yes"
    next
    edit "youtube"
        set hostname ".*youtube.*"
        set safesearch header
    next
    edit "baidu"
        set hostname ".*\\.baidu\\.com"
        set url "^\\/s?\\?"
        set query "wd="
    next
    edit "baidu2"
        set hostname ".*\\.baidu\\.com"
        set url "^\\/(ns|q|m|i|v)\\?"
        set query "word="
    next
    edit "baidu3"
        set hostname "tieba\\.baidu\\.com"
        set url "^\\/f\\?"
        set query "kw="
    next
    edit "vimeo"
        set hostname ".*vimeo.*"
        set url "^\\/search\\?"
        set query "q="
        set safesearch header
    next
    edit "yt-scan-1"
        set url "www.youtube.com/user/"
        set safesearch yt-scan
    next
    edit "yt-scan-2"
        set url "www.youtube.com/youtubei/v1/browse"
        set safesearch yt-scan
    next
    edit "yt-scan-3"
        set url "www.youtube.com/youtubei/v1/player"
        set safesearch yt-scan
    next
    edit "yt-scan-4"
        set url "www.youtube.com/youtubei/v1/navigator"
        set safesearch yt-scan
    next
    edit "yt-channel"
        set url "www.youtube.com/channel"
        set safesearch yt-channel
    next
    edit "yt-pattern"
        set url "youtube.com/channel/"
        set safesearch yt-pattern
    next
    edit "twitter"
        set hostname "twitter\\.com"
        set url "^\\/i\\/api\\/graphql\\/.*\\/UserByScreenName"
        set query "variables="
        set safesearch translate
        set safesearch-str "regex::%22screen_name%22:%22([A-Za-z0-9_]{4,15})%22::twitter.com/\\1"
    next
    edit "google-translate-1"
        set hostname "translate\\.google\\..*"
        set url "^\\/translate"
        set query "u="
        set safesearch translate
        set safesearch-str "regex::(?:\\?|&)u=([^&]+)::\\1"
    next
    edit "google-translate-2"
        set hostname ".*\\.translate\\.goog"
        set url "^\\/"
        set safesearch translate
        set safesearch-str "case::google-translate"
    next
    edit "translate"
        set hostname "translate\\.google\\..*"
        set url "^\\/translate\\?"
        set query "u="
        set safesearch translate
    next
end
config emailfilter profile
    edit "sniffer-profile"
        set comment "Malware and phishing URL monitoring."
        config imap
        end
        config pop3
        end
        config smtp
        end
    next
    edit "default"
        set comment "Malware and phishing URL filtering."
        config imap
        end
        config pop3
        end
        config smtp
        end
    next
end
config virtual-patch profile
    edit "default"
    next
end
config log memory setting
    set status enable
end
config log null-device setting
    set status disable
end
config firewall schedule recurring
    edit "always"
        set day sunday monday tuesday wednesday thursday friday saturday
    next
    edit "default-darrp-optimize"
        set start 01:00
        set end 01:30
        set day sunday monday tuesday wednesday thursday friday saturday
    next
    edit "none"
    next
end
config firewall ippool
    edit "NAT"
        set type one-to-one
        set startip 10.22.21.1
        set endip 10.22.21.254
    next
end
config firewall vip
    edit "Nateo de entrada al ayuntamiento"
        set uuid 85e5dbb8-4be7-51ee-7f34-750a87a8e264
        set extip 10.22.21.0-10.22.21.254
        set mappedip "192.168.1.0-192.168.1.254"
        set extintf "SPOKE-AYUN"
        set color 13
    next
end
config firewall ssh local-key
    edit "Fortinet_SSH_RSA2048"
        set password ENC AAAA4PQh4EE1EJF0KMFMhJpLOTTwU1b8suFKTv9Tn0926PbvvdDyo9Q3/PVy+Q7pwNsjO9vvO6NdiBbF4ZpiGpDwts3oei0Detz2djlMnSVBamDs8be7IASBXf8JG7qxCpP4psLFalyBkDfprBbfvF4f4iRxV1c1taK1YHoj5dph8w3UjGtyoogsGbn2N+iUaFoPOw==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCOTLGUOE
tiS7JzIO9AGvbRAAAAEAAAAAEAAAEXAAAAB3NzaC1yc2EAAAADAQABAAABAQDEA4uWYCQ0
9pgsO9HtHI/4sexnhQ6xh79u/2wYyTm1IswelQDR8YDr/Q3fK1Lca2EDZs5wWW2fm7OVpg
QJRi3s4ArKHpEsagegZjHFOwOD+hAbvOctzLjKi86OOXqLoiuY+QyqovIbtZiGI52SfYUD
628KAt/AiXUWIxGiFZV1cyLk0Lu09aljvhdZ/4qU6IgJ8+rzCgCOwdWKnBBIPMkbJFyeIZ
M3yvNuQ/LijL/eiFQtG9/FFtc2yoTHlpaLGxpNCP2+YtqOcrOIpSyuSKGWluvoBsunDoyF
S5bxbh9hflDIT31kS2u4p0Bev8e/fgaj95se2CJd8nzML6TjhyItAAADwLJj1XuqofHCtt
Ckj4i25BwcWkJfcSenIrm7zydQ//lDgaZ+an3/4n7UY4r6epskrc2amFBMs9EV+cQ77Pxp
+GostnLhwsTnFbwBezrehnf/XxFswWLXjuaWX+SbFRpMMFo7/1dqA5PjqKt+2+LNFVsJjO
rWeL3AW55pAU3XFjYsV/2hknjd3qhdGJLl0LA6peIL75Ge9dZ+D3p1tGNXsNC1u/piog1z
6DwFa3Tml3RStjvCXgLSGJMbQtEtKCKNduUjItAdt+tY77RF8Xr9Ua63m+G9qT0zpeLmuC
8FOZJXQ5E6tAcWnINnJZTFH0Yx4X5wAPmf4ISKDDE+gfiTf782a7w4cFoYLljwAS31ilp5
GoupFVNYjdwFJXxUZBJzKsAVvCQcW3rTaSehYI+ibOa4iXP+nIISTgNmIA/ceC9LpdHlpo
ePUhjFi88hyJmD9KpZXFMptPEdfvm92T/+ZvdljG62s6zBo54Pn/G5gWhPnjSjqXhQ7Mk6
zHWC26wUfpOr3AEA3R5gfoqi8LZd3DPvTeFRv+W8CEKxy1B4ec6841MibNjiohoAxOj1mA
zXvbFmHbZgu461TXjD2ReJeIG5vayBB66XVoxOks/0yjiwbTzcEpDrX/GMOw5z3SARTm0v
WwO9yVrb3VG3aZ2Zj/nY33Eq8KzUYJFGm9OwwAG+FEFybZHEyUk0ILeiQ+ulqCw1T4KCHv
Lxlb6Jph4YuteoZq+W236ajYDa8LCTx97ekYcSsL9/IwWiKVrDarEhxHcvTbslfVRHs3rL
6Zr/Y1ZDApNoAe5uQXKEziWCponPuW5ut+vOQNJ31g5/rThx8QDoy9Fh/WrcER7jfZuooQ
3HPFWIjdU2QTy2wx7i6K/VZVviJdWKa4fdRjzKnuVOnDA0cz+RgQVpiM2MO4U/OdMfiIzL
2oxmY1rd/2BoIY8VR2ftH7cRjBRTvDlqNp9JcptmyMXpJKOsEHaCMYAMN9los/qMW249Ox
qYf22p5j8xF6YEOfMxsLVG10TK+WkDV/aOaWbP994YfndA38sYFU6s9e69ZHz/v/bQRexg
ub62Z5GOze9otUCKdmhqaUyPxkIlCD6i7hC99sPqfJ/2u8WH3uK6uDR/BNp0cCA5Xd3WZr
WOU8M+AZPONt9upnBMytCwxysmGjy22yMbSJjmCZnAAxF1EYFSDNmPZ7iLNOT5i6xq4boK
DWEQ6niECrvuOokM571LR30hsI+PFyIDmC+UNt0uyVVSYFXEOBeiZQugi+7wHZwEAURuty
VGEzE1pg==
-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEA4uWYCQ09pgsO9HtHI/4sexnhQ6xh79u/2wYyTm1IswelQDR8YDr/Q3fK1Lca2EDZs5wWW2fm7OVpgQJRi3s4ArKHpEsagegZjHFOwOD+hAbvOctzLjKi86OOXqLoiuY+QyqovIbtZiGI52SfYUD628KAt/AiXUWIxGiFZV1cyLk0Lu09aljvhdZ/4qU6IgJ8+rzCgCOwdWKnBBIPMkbJFyeIZM3yvNuQ/LijL/eiFQtG9/FFtc2yoTHlpaLGxpNCP2+YtqOcrOIpSyuSKGWluvoBsunDoyFS5bxbh9hflDIT31kS2u4p0Bev8e/fgaj95se2CJd8nzML6TjhyIt"
        set source built-in
    next
    edit "Fortinet_SSH_DSA1024"
        set password ENC AAAA4A3pSVVKz4iYNfM0UkoEKGAiabnP+2vMlPPfmZgUhm0u3HtUXt/P5ACWu+otcsl70SEUo9jeIDyl5S5mY2Lkdru70BT3VqEQ58EZWc5MftlDai+nyFL7nXhrbDvB9v4e4hRCXhrt/OM3tH62g7r9eDS5e+PwykfDj6Pd4DKIUvnxk8VpTKUFeddZllM5/aDp5w==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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==
-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-dss 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"
        set source built-in
    next
    edit "Fortinet_SSH_ECDSA256"
        set password ENC AAAA4Cg04xqdJQSSmE3OosMN90p9yg1xkEmqP0+XGlBeTLArW/YDbh9eP0HQ+qnHOgVZSPsGdSAbeLoC88G//0nW5k0oTNqdPsfDXm1yplf/sDS3e7PuHN8xsOuYsRpOwXGwtFy53jpyd6BtcSWY7NzPkHCDF4iqyJcjWfx66t/LGleJI9RmCc5S12gKAfNmbt2zvA==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABAaCSfhhh
PoWIDAqMjtqTwYAAAAEAAAAAEAAABoAAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlz
dHAyNTYAAABBBMXfgeZy5KvT5/XZzTEh5E+fRzalCKUTa0iKA6KRJk0I9iQVuUoq9767nu
fN803OPb1MxpqS4hnac45sgvJ6c9IAAACgGrGwH2X6ZEl96yhA5y9/A3JbBuh9o5bakV06
u8+FJeqx/RGC/jO2lFQubvWTK0NrQXu1IzedvJYmXhjhXScGOI6MWhWAY28O1QXLC3YCoH
4hn81ovfcO6ylmgoGgQ181TMSVjakxzyEVnCy6juvblFLviiwWkVytzmzao8Ge6J+Ap2Li
IHFmEWy7sSTkWs/rI0ipE/d/CkmDuBYWLyU5ow==
-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBMXfgeZy5KvT5/XZzTEh5E+fRzalCKUTa0iKA6KRJk0I9iQVuUoq9767nufN803OPb1MxpqS4hnac45sgvJ6c9I="
        set source built-in
    next
    edit "Fortinet_SSH_ECDSA384"
        set password ENC AAAA4MgtFsoCxz/5gXbyutwNeHwNo7tDA/KQcV8I0ud6RNxAX+K/46zOG547MTHC6lWPUKxTiV7cSO8McrvPH4YJXutXGB5bCMTC+orPuICeHnxhwgo4UcGFUHOmnluf/PLdlHTNkzSDaJfYNjXZnaSOOy6WSYINHc1HBDtu5i5qkfMz5OlpRyfZjYIKxXqW627aUA==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ecdsa-sha2-nistp384 AAAAE2VjZHNhLXNoYTItbmlzdHAzODQAAAAIbmlzdHAzODQAAABhBG+pgofg6PQLGa+nPfy11Q3rk5ZyTvr4UE2RD+1E/y6OCGqmXA7CN9M8rLdydgwIq1wcWtmLQGFIrEmVhDAFy56nhnpKsnAaXXOKTJ5Rq7Wnnn/3BIratwmf5UECEkyxNg=="
        set source built-in
    next
    edit "Fortinet_SSH_ECDSA521"
        set password ENC AAAA4Phde9ytRk6Puu9nK/LTsI5P9q9LwOqkj76XPsYAStNFotphKSGayaL/nDVe07oAsF/eZjOlaWlHIfLBDJGgKJfmViEwl6c+PJhvZWtlSg8IRO9pyomhg/s/DKt3atauW21OJuQOaAcWZ8ASJzbiKbq1/cq66i6QLr/L7kAD7OLprz0izfAlDUE1bpykHBbg1A==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAHLRiT7JAbr0t4pkmdwBtkmcJ5Ph4VM/zbWk8u1DH+KqQU41wbF98F21UyPJ5bu+HC9NNqWHsyRjBuWOQ1NVGLYBAH/HyHFz1opKe/neuh1N3B8EcCyvv6Yx/S/huJWjCEzwE2YhndYmNxxkf2T8qTfxgyZWkB1/2JoV5ytsOOrydw9HQ=="
        set source built-in
    next
    edit "Fortinet_SSH_ED25519"
        set password ENC hM7P4BJ8rd77Ybx34xddGr9hhyHOUH3B3z7oeqCUJ0PM1qlgKfRVrBteh8QcI0LhyVQjUofX3MLmUJniKP1KRa5X2NVnCppHQTDXer4TUD3M7NJK5O5kI4tV9+ZeOplf6W2lKTG6gAxG3o9zmvOKNW69CtWKvr7e69K6o8Xhf/uWGgMhtsnAEsAK8yNWX3aw7BKJLg==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCkH4uTmx
rAgE99sfvJi5hmAAAAEAAAAAEAAAAzAAAAC3NzaC1lZDI1NTE5AAAAILMPzfYBID9nsdnY
VUR+V4Vy96pQMQza9ZxfTcBf3G2AAAAAkOYL8eQD4XeCfJtZFp7eP06W/iPHm/NNG0c+sC
hCPB0jsCg1u61IKi9WXMxezCP2RM75pt2DB6p9XzNRAyPkE6qxbwJT9A70GJ7hpOrOVwq5
E2q6ugdymGfQNv2Q4AcTJv+ntszUCvkmZyLyCfhxsxroFQqiUcaQeKacgYRwFjwd/GA/BI
m0cc5tCwnomxqMeA==
-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILMPzfYBID9nsdnYVUR+V4Vy96pQMQza9ZxfTcBf3G2A"
        set source built-in
    next
end
config firewall ssh local-ca
    edit "Fortinet_SSH_CA"
        set password ENC AAAA4Ir1wTO//0vlankNGjEChVrMkXMpUpddy1pMYy5QVPz5HUSXsSlzWZCM5Ucn1doCZggP25M1d6RgDA9U4Aq1pW0Fe2z3J/FYbgWl/wizOkuhbT9JFytwjAyXlf5UGzBivLWhAv8ThOModgNYx5DgHGASnL7AduAYuvLn+kF6QhmoM8F4dGUf4Hu7N/npxKkAEA==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3XBCHuczOWFzjAIda1IHAoLk8cgonEEZGueJfm9C8MVx5KovwoocrXXCKMhaPHYWa40xOR+L8DBLueWDXHTmkzJZUhzyQ25gO+0gutorYEJ11fG1myCjwOQd1OSXabB0ekU/l/hiNlgR3FD8Sfso9qa8SRQAamehe1UTgNvcY+TJM15hzpVlUoEgOhYMBnOr5JIo1bqQIxehV34CUjHKhppown1sgT2bA7bMJyA37ct0uJbQ5qyr/f70DuVBOJn+V5sz5/T2eek3NEIAO6/u2KhFxM8xjMJgrzBzR9dVTf/xTiiPvSplfIcTys4AkRzVJXvEgidKrpIdLBnxPXGuf"
        set source built-in
    next
    edit "Fortinet_SSH_CA_Untrusted"
        set password ENC AAAA4CoA9nPyT7ILIY5mUPoG2gh4TxPwkSGFtZFSx0WNH2irW/JM17X2MCtCylIwO5uFerdJ6PBD5eJsLX6Ox4jz6Ic7gIJ5NGWSKN600LtC0o496F3Nr1L77ZDx7nuyHuv4ZCG9GgFwczaafrpTiNb/7wIZKhVBMHTv0md2w5GFFimc1nQ1dZmPPXISycy4C00uqA==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnN5DUpEXrI3UUvJnmUNMZLf5vfd8Bn4lSlfLfR8QromgnF+6LU+SYWRk+t5wsMMIhP3wKJQIhtt59IbHiLHFA28Jjwx3k/FA+041mq40rwNhWddGJBOY1umqchlfUqPKa8ghGAVs2mdNu719QBJyR4SzzevD79XqOlhcKrodgkt/YYHFFGXlSgkKBcm+UFS+MljRLynZ/6Er+L2u7QJubRk00x1dqzwPPLMcoPu5zkqWsNLrsRgHoK9b+huDuP5cW7qlwiYa7NntI1+yS02hfWHEsHEmPVAuWXJFZ0TewjfTDRgviQNpdoSLN6yE4xW1plYv6L6ASP84TgU1oMXEL"
        set source built-in
    next
end
config firewall ssh setting
    set caname "Fortinet_SSH_CA"
    set untrusted-caname "Fortinet_SSH_CA_Untrusted"
    set hostkey-rsa2048 "Fortinet_SSH_RSA2048"
    set hostkey-dsa1024 "Fortinet_SSH_DSA1024"
    set hostkey-ecdsa256 "Fortinet_SSH_ECDSA256"
    set hostkey-ecdsa384 "Fortinet_SSH_ECDSA384"
    set hostkey-ecdsa521 "Fortinet_SSH_ECDSA521"
    set hostkey-ed25519 "Fortinet_SSH_ED25519"
end
config firewall profile-protocol-options
    edit "default"
        set comment "All default services."
        config http
            set ports 80
            unset options
            unset post-lang
        end
        config ftp
            set ports 21
            set options splice
        end
        config imap
            set ports 143
            set options fragmail
        end
        config mapi
            set ports 135
            set options fragmail
        end
        config pop3
            set ports 110
            set options fragmail
        end
        config smtp
            set ports 25
            set options fragmail splice
        end
        config nntp
            set ports 119
            set options splice
        end
        config ssh
            unset options
        end
        config dns
            set ports 53
        end
        config cifs
            set ports 445
            unset options
        end
    next
end
config firewall ssl-ssh-profile
    edit "deep-inspection"
        set comment "Read-only deep inspection profile."
        config https
            set ports 443
            set status deep-inspection
            set quic inspect
            set unsupported-ssl-version allow
        end
        config ftps
            set ports 990
            set status deep-inspection
            set unsupported-ssl-version allow
        end
        config imaps
            set ports 993
            set status deep-inspection
            set unsupported-ssl-version allow
        end
        config pop3s
            set ports 995
            set status deep-inspection
            set unsupported-ssl-version allow
        end
        config smtps
            set ports 465
            set status deep-inspection
            set unsupported-ssl-version allow
        end
        config ssh
            set ports 22
            set status disable
        end
        config dot
            set status disable
            set quic inspect
        end
        config ssl-exempt
            edit 1
                set fortiguard-category 31
            next
            edit 2
                set fortiguard-category 33
            next
            edit 3
                set type wildcard-fqdn
                set wildcard-fqdn "adobe"
            next
            edit 4
                set type wildcard-fqdn
                set wildcard-fqdn "Adobe Login"
            next
            edit 5
                set type wildcard-fqdn
                set wildcard-fqdn "android"
            next
            edit 6
                set type wildcard-fqdn
                set wildcard-fqdn "apple"
            next
            edit 7
                set type wildcard-fqdn
                set wildcard-fqdn "appstore"
            next
            edit 8
                set type wildcard-fqdn
                set wildcard-fqdn "auth.gfx.ms"
            next
            edit 9
                set type wildcard-fqdn
                set wildcard-fqdn "citrix"
            next
            edit 10
                set type wildcard-fqdn
                set wildcard-fqdn "dropbox.com"
            next
            edit 11
                set type wildcard-fqdn
                set wildcard-fqdn "eease"
            next
            edit 12
                set type wildcard-fqdn
                set wildcard-fqdn "firefox update server"
            next
            edit 13
                set type wildcard-fqdn
                set wildcard-fqdn "fortinet"
            next
            edit 14
                set type wildcard-fqdn
                set wildcard-fqdn "googleapis.com"
            next
            edit 15
                set type wildcard-fqdn
                set wildcard-fqdn "google-drive"
            next
            edit 16
                set type wildcard-fqdn
                set wildcard-fqdn "google-play2"
            next
            edit 17
                set type wildcard-fqdn
                set wildcard-fqdn "google-play3"
            next
            edit 18
                set type wildcard-fqdn
                set wildcard-fqdn "Gotomeeting"
            next
            edit 19
                set type wildcard-fqdn
                set wildcard-fqdn "icloud"
            next
            edit 20
                set type wildcard-fqdn
                set wildcard-fqdn "itunes"
            next
            edit 21
                set type wildcard-fqdn
                set wildcard-fqdn "microsoft"
            next
            edit 22
                set type wildcard-fqdn
                set wildcard-fqdn "skype"
            next
            edit 23
                set type wildcard-fqdn
                set wildcard-fqdn "softwareupdate.vmware.com"
            next
            edit 24
                set type wildcard-fqdn
                set wildcard-fqdn "verisign"
            next
            edit 25
                set type wildcard-fqdn
                set wildcard-fqdn "Windows update 2"
            next
            edit 26
                set type wildcard-fqdn
                set wildcard-fqdn "live.com"
            next
            edit 27
                set type wildcard-fqdn
                set wildcard-fqdn "google-play"
            next
            edit 28
                set type wildcard-fqdn
                set wildcard-fqdn "update.microsoft.com"
            next
            edit 29
                set type wildcard-fqdn
                set wildcard-fqdn "swscan.apple.com"
            next
            edit 30
                set type wildcard-fqdn
                set wildcard-fqdn "autoupdate.opera.com"
            next
            edit 31
                set type wildcard-fqdn
                set wildcard-fqdn "cdn-apple"
            next
            edit 32
                set type wildcard-fqdn
                set wildcard-fqdn "mzstatic-apple"
            next
        end
    next
    edit "custom-deep-inspection"
        set comment "Customizable deep inspection profile."
        config https
            set ports 443
            set status deep-inspection
            set quic inspect
            set unsupported-ssl-version allow
        end
        config ftps
            set ports 990
            set status deep-inspection
            set unsupported-ssl-version allow
        end
        config imaps
            set ports 993
            set status deep-inspection
            set unsupported-ssl-version allow
        end
        config pop3s
            set ports 995
            set status deep-inspection
            set unsupported-ssl-version allow
        end
        config smtps
            set ports 465
            set status deep-inspection
            set unsupported-ssl-version allow
        end
        config ssh
            set ports 22
            set status disable
        end
        config dot
            set status disable
            set quic inspect
        end
        config ssl-exempt
            edit 1
                set fortiguard-category 31
            next
            edit 2
                set fortiguard-category 33
            next
            edit 3
                set type wildcard-fqdn
                set wildcard-fqdn "adobe"
            next
            edit 4
                set type wildcard-fqdn
                set wildcard-fqdn "Adobe Login"
            next
            edit 5
                set type wildcard-fqdn
                set wildcard-fqdn "android"
            next
            edit 6
                set type wildcard-fqdn
                set wildcard-fqdn "apple"
            next
            edit 7
                set type wildcard-fqdn
                set wildcard-fqdn "appstore"
            next
            edit 8
                set type wildcard-fqdn
                set wildcard-fqdn "auth.gfx.ms"
            next
            edit 9
                set type wildcard-fqdn
                set wildcard-fqdn "citrix"
            next
            edit 10
                set type wildcard-fqdn
                set wildcard-fqdn "dropbox.com"
            next
            edit 11
                set type wildcard-fqdn
                set wildcard-fqdn "eease"
            next
            edit 12
                set type wildcard-fqdn
                set wildcard-fqdn "firefox update server"
            next
            edit 13
                set type wildcard-fqdn
                set wildcard-fqdn "fortinet"
            next
            edit 14
                set type wildcard-fqdn
                set wildcard-fqdn "googleapis.com"
            next
            edit 15
                set type wildcard-fqdn
                set wildcard-fqdn "google-drive"
            next
            edit 16
                set type wildcard-fqdn
                set wildcard-fqdn "google-play2"
            next
            edit 17
                set type wildcard-fqdn
                set wildcard-fqdn "google-play3"
            next
            edit 18
                set type wildcard-fqdn
                set wildcard-fqdn "Gotomeeting"
            next
            edit 19
                set type wildcard-fqdn
                set wildcard-fqdn "icloud"
            next
            edit 20
                set type wildcard-fqdn
                set wildcard-fqdn "itunes"
            next
            edit 21
                set type wildcard-fqdn
                set wildcard-fqdn "microsoft"
            next
            edit 22
                set type wildcard-fqdn
                set wildcard-fqdn "skype"
            next
            edit 23
                set type wildcard-fqdn
                set wildcard-fqdn "softwareupdate.vmware.com"
            next
            edit 24
                set type wildcard-fqdn
                set wildcard-fqdn "verisign"
            next
            edit 25
                set type wildcard-fqdn
                set wildcard-fqdn "Windows update 2"
            next
            edit 26
                set type wildcard-fqdn
                set wildcard-fqdn "live.com"
            next
            edit 27
                set type wildcard-fqdn
                set wildcard-fqdn "google-play"
            next
            edit 28
                set type wildcard-fqdn
                set wildcard-fqdn "update.microsoft.com"
            next
            edit 29
                set type wildcard-fqdn
                set wildcard-fqdn "swscan.apple.com"
            next
            edit 30
                set type wildcard-fqdn
                set wildcard-fqdn "autoupdate.opera.com"
            next
            edit 31
                set type wildcard-fqdn
                set wildcard-fqdn "cdn-apple"
            next
            edit 32
                set type wildcard-fqdn
                set wildcard-fqdn "mzstatic-apple"
            next
        end
    next
    edit "no-inspection"
        set comment "Read-only profile that does no inspection."
        config https
            set ports 443
            set status disable
            set quic inspect
            set unsupported-ssl-version allow
        end
        config ftps
            set status disable
            set unsupported-ssl-version allow
        end
        config imaps
            set status disable
            set unsupported-ssl-version allow
        end
        config pop3s
            set status disable
            set unsupported-ssl-version allow
        end
        config smtps
            set status disable
            set unsupported-ssl-version allow
        end
        config ssh
            set ports 22
            set status disable
        end
        config dot
            set status disable
            set quic inspect
        end
    next
    edit "certificate-inspection"
        set comment "Read-only SSL handshake inspection profile."
        config https
            set ports 443
            set status certificate-inspection
            set quic inspect
            set unsupported-ssl-version allow
        end
        config ftps
            set status disable
            set unsupported-ssl-version allow
        end
        config imaps
            set status disable
            set unsupported-ssl-version allow
        end
        config pop3s
            set status disable
            set unsupported-ssl-version allow
        end
        config smtps
            set status disable
            set unsupported-ssl-version allow
        end
        config ssh
            set ports 22
            set status disable
        end
        config dot
            set status disable
            set quic inspect
        end
    next
end
config waf profile
    edit "default"
        config signature
            config main-class 100000000
                set action block
                set severity high
            end
            config main-class 20000000
            end
            config main-class 30000000
                set status enable
                set action block
                set severity high
            end
            config main-class 40000000
            end
            config main-class 50000000
                set status enable
                set action block
                set severity high
            end
            config main-class 60000000
            end
            config main-class 70000000
                set status enable
                set action block
                set severity high
            end
            config main-class 80000000
                set status enable
                set severity low
            end
            config main-class 110000000
                set status enable
                set severity high
            end
            config main-class 90000000
                set status enable
                set action block
                set severity high
            end
            set disabled-signature 80080005 80200001 60030001 60120001 80080003 90410001 90410002
        end
        config constraint
            config header-length
                set status enable
                set log enable
                set severity low
            end
            config content-length
                set status enable
                set log enable
                set severity low
            end
            config param-length
                set status enable
                set log enable
                set severity low
            end
            config line-length
                set status enable
                set log enable
                set severity low
            end
            config url-param-length
                set status enable
                set log enable
                set severity low
            end
            config version
                set log enable
            end
            config method
                set action block
                set log enable
            end
            config hostname
                set action block
                set log enable
            end
            config malformed
                set log enable
            end
            config max-cookie
                set status enable
                set log enable
                set severity low
            end
            config max-header-line
                set status enable
                set log enable
                set severity low
            end
            config max-url-param
                set status enable
                set log enable
                set severity low
            end
            config max-range-segment
                set status enable
                set log enable
                set severity high
            end
        end
    next
end
config casb saas-application
end
config casb user-activity
end
config casb profile
    edit "default"
    next
end
config firewall policy
    edit 3
        set name "WIFI-Internet"
        set uuid fbc80378-2cc6-51ee-41d6-4cad56983f2c
        set srcintf "Wifi-Diputacion"
        set dstintf "SD-WAN_INTERNET"
        set action accept
        set srcaddr "Wifi-Diputacion address"
        set dstaddr "all"
        set schedule "always"
        set service "ALL"
        set logtraffic all
        set nat enable
    next
    edit 11
        set name "wifi_ayto_lan"
        set uuid b97ed620-da29-51ee-f2d9-64f61b49a2b6
        set srcintf "ayto"
        set dstintf "lan" "VLAN20_LAN"
        set action accept
        set srcaddr "ayto address"
        set dstaddr "lan" "VLAN20_LAN address"
        set schedule "always"
        set service "ALL"
        set logtraffic all
        set nat enable
    next
    edit 12
        set name "wifi_ayto_dph_sara"
        set uuid ed969ee8-da29-51ee-639c-86524dc1adba
        set srcintf "ayto"
        set dstintf "SD-WAN_Diputacion"
        set action accept
        set srcaddr "ayto address"
        set dstaddr "RED SARA" "Net_Diputacion"
        set schedule "always"
        set service "ALL"
        set logtraffic all
        set nat enable
        set ippool enable
        set poolname "NAT"
    next
    edit 10
        set name "wifi_ayto_internet"
        set uuid 82e60a48-da29-51ee-dc8b-44be0166b56c
        set srcintf "ayto"
        set dstintf "SD-WAN_INTERNET"
        set action accept
        set srcaddr "ayto address"
        set dstaddr "all"
        set schedule "always"
        set service "ALL"
        set logtraffic all
        set nat enable
    next
    edit 2
        set name "LAN-INTERNET_OUT"
        set uuid e6a1d276-2cdf-51ee-1aed-3b3f9bcfa2f8
        set srcintf "lan" "VLAN20_LAN"
        set dstintf "SD-WAN_INTERNET"
        set action accept
        set srcaddr "lan" "VLAN20_LAN address"
        set dstaddr "all"
        set schedule "always"
        set service "ALL"
        set utm-status enable
        set ssl-ssh-profile "certificate-inspection"
        set av-profile "default"
        set logtraffic all
        set nat enable
    next
    edit 4
        set name "SSL VPN"
        set uuid fc411fc6-4317-51ee-5dee-c826d22ce467
        set srcintf "ssl.root"
        set dstintf "lan" "VLAN20_LAN"
        set action accept
        set srcaddr "SSLVPN_TUNNEL_ADDR1"
        set dstaddr "lan" "VLAN20_LAN address"
        set schedule "always"
        set service "ALL"
        set logtraffic all
        set nat enable
        set users "david" "snoc"
    next
    edit 6
        set name "vpn_SPOKE-ALCAL-OBISPO_local_0"
        set uuid 7502cc88-4580-51ee-a8c3-4ca2aebfe718
        set srcintf "lan" "VLAN20_LAN"
        set dstintf "SD-WAN_Diputacion"
        set action accept
        set srcaddr "lan" "VLAN20_LAN address"
        set dstaddr "Net_Diputacion"
        set schedule "always"
        set service "ALL"
        set logtraffic all
        set nat enable
        set ippool enable
        set poolname "NAT"
        set comments "VPN: SPOKE-TIERZ (Created by VPN wizard)"
    next
    edit 8
        set name "red sara"
        set uuid db929d0a-4c9e-51ee-784c-6eecb9b01df8
        set srcintf "lan" "VLAN20_LAN"
        set dstintf "SD-WAN_Diputacion"
        set action accept
        set srcaddr "lan" "VLAN20_LAN address"
        set dstaddr "RED SARA"
        set schedule "always"
        set service "ALL"
        set logtraffic all
        set nat enable
        set ippool enable
        set poolname "NAT"
    next
    edit 7
        set name "nateo de entrada"
        set uuid b8d0d00a-4be7-51ee-e1c8-8b4a2b7aec4f
        set srcintf "SD-WAN_Diputacion"
        set dstintf "lan" "VLAN20_LAN"
        set action accept
        set srcaddr "Net_Diputacion"
        set dstaddr "Nateo de entrada al ayuntamiento"
        set schedule "always"
        set service "ALL"
        set logtraffic all
    next
    edit 9
        set name "VoIP VLAN21"
        set uuid 2853ca08-da23-51ee-1560-d34498a35b45
        set srcintf "VLAN21_LAN" "VLAN21_WAN"
        set dstintf "VLAN21_LAN" "VLAN21_WAN"
        set action accept
        set srcaddr "all"
        set dstaddr "all"
        set schedule "always"
        set service "ALL"
        set logtraffic all
    next
end
config switch-controller security-policy 802-1X
    edit "802-1X-policy-default"
        set user-group "SSO_Guest_Users"
        set mac-auth-bypass disable
        set open-auth disable
        set eap-passthru enable
        set eap-auto-untagged-vlans enable
        set guest-vlan disable
        set auth-fail-vlan disable
        set framevid-apply enable
        set radius-timeout-overwrite disable
        set authserver-timeout-vlan disable
    next
end
config switch-controller security-policy local-access
    edit "default"
        set mgmt-allowaccess https ping ssh
        set internal-allowaccess https ping ssh
    next
end
config switch-controller lldp-profile
    edit "default"
        set med-tlvs inventory-management network-policy location-identification
        set auto-isl disable
        config med-network-policy
            edit "voice"
            next
            edit "voice-signaling"
            next
            edit "guest-voice"
            next
            edit "guest-voice-signaling"
            next
            edit "softphone-voice"
            next
            edit "video-conferencing"
            next
            edit "streaming-video"
            next
            edit "video-signaling"
            next
        end
        config med-location-service
            edit "coordinates"
            next
            edit "address-civic"
            next
            edit "elin-number"
            next
        end
    next
    edit "default-auto-isl"
    next
    edit "default-auto-mclag-icl"
        set auto-mclag-icl enable
    next
end
config switch-controller qos dot1p-map
    edit "voice-dot1p"
        set priority-0 queue-4
        set priority-1 queue-4
        set priority-2 queue-3
        set priority-3 queue-2
        set priority-4 queue-3
        set priority-5 queue-1
        set priority-6 queue-2
        set priority-7 queue-2
    next
end
config switch-controller qos ip-dscp-map
    edit "voice-dscp"
        config map
            edit "1"
                set cos-queue 1
                set value 46
            next
            edit "2"
                set cos-queue 2
                set value 24,26,48,56
            next
            edit "5"
                set cos-queue 3
                set value 34
            next
        end
    next
end
config switch-controller qos queue-policy
    edit "default"
        set schedule round-robin
        set rate-by kbps
        config cos-queue
            edit "queue-0"
            next
            edit "queue-1"
            next
            edit "queue-2"
            next
            edit "queue-3"
            next
            edit "queue-4"
            next
            edit "queue-5"
            next
            edit "queue-6"
            next
            edit "queue-7"
            next
        end
    next
    edit "voice-egress"
        set schedule weighted
        set rate-by kbps
        config cos-queue
            edit "queue-0"
            next
            edit "queue-1"
                set weight 0
            next
            edit "queue-2"
                set weight 6
            next
            edit "queue-3"
                set weight 37
            next
            edit "queue-4"
                set weight 12
            next
            edit "queue-5"
            next
            edit "queue-6"
            next
            edit "queue-7"
            next
        end
    next
end
config switch-controller qos qos-policy
    edit "default"
    next
    edit "voice-qos"
        set trust-dot1p-map "voice-dot1p"
        set trust-ip-dscp-map "voice-dscp"
        set queue-policy "voice-egress"
    next
end
config switch-controller storm-control-policy
    edit "default"
        set description "default storm control on all port"
    next
    edit "auto-config"
        set description "storm control policy for fortilink-isl-icl port"
        set storm-control-mode disabled
    next
end
config switch-controller auto-config policy
    edit "pse"
    next
    edit "default"
    next
    edit "default-icl"
        set poe-status disable
        set igmp-flood-report enable
        set igmp-flood-traffic enable
    next
end
config switch-controller initial-config template
    edit "_default"
        set vlanid 1
    next
    edit "quarantine"
        set vlanid 4093
        set dhcp-server enable
    next
    edit "rspan"
        set vlanid 4092
        set dhcp-server enable
    next
    edit "voice"
        set vlanid 4091
    next
    edit "video"
        set vlanid 4090
    next
    edit "onboarding"
        set vlanid 4089
    next
    edit "nac_segment"
        set vlanid 4088
        set dhcp-server enable
    next
end
config switch-controller switch-profile
    edit "default"
    next
end
config switch-controller ptp profile
    edit "default"
    next
end
config switch-controller ptp interface-policy
    edit "default"
    next
end
config switch-controller dsl policy
    edit "default"
        set type Proscend
        set us-bitswap enable
        set ds-bitswap enable
        set profile auto-30a
        set cs A43 B43 A43C
        set pause-frame enable
        set cpe-aele enable
        set cpe-aele-mode ELE_MIN
        set append_padding enable
    next
end
config switch-controller remote-log
    edit "syslogd"
    next
    edit "syslogd2"
    next
end
config wireless-controller setting
    set darrp-optimize-schedules "default-darrp-optimize"
end
config wireless-controller arrp-profile
    edit "arrp-default"
    next
end
config wireless-controller wids-profile
    edit "default-wids-apscan-enabled"
        set ap-scan enable
        set ap-bgscan-intv 1
        set ap-bgscan-duration 20
        set ap-bgscan-idle 0
    next
end
config wireless-controller ble-profile
    edit "fortiap-discovery"
        set advertising ibeacon eddystone-uid eddystone-url
        set ibeacon-uuid "wtp-uuid"
    next
end
config wireless-controller wtp-profile
    edit "FAP231F-default"
        config platform
            set type 231F
            set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
            set band 802.11ax,n,g-only
        end
        config radio-2
            set band 802.11ax-5G
            set vap1 "Wifi-Diputacion"
            set vap2 "ayto"
        end
        config radio-3
            set mode monitor
        end
    next
end
config wireless-controller wtp
    edit "FP231FTF23098833"
        set uuid 499b7fe4-8479-51ee-228b-33a4da621565
        set admin enable
        set wtp-profile "FAP231F-default"
        config radio-1
        end
        config radio-2
        end
    next
end
config ips settings
    set proxy-inline-ips disable
end
config router rip
    config redistribute "connected"
    end
    config redistribute "static"
    end
    config redistribute "ospf"
    end
    config redistribute "bgp"
    end
    config redistribute "isis"
    end
end
config router ripng
    config redistribute "connected"
    end
    config redistribute "static"
    end
    config redistribute "ospf"
    end
    config redistribute "bgp"
    end
    config redistribute "isis"
    end
end
config router static
    edit 2
        set dst 172.19.0.0 255.255.0.0
        set distance 1
        set sdwan-zone "SD-WAN_Diputacion"
    next
    edit 3
        set dst 10.0.0.0 255.0.0.0
        set distance 1
        set sdwan-zone "SD-WAN_Diputacion"
    next
    edit 4
        set distance 1
        set sdwan-zone "SD-WAN_INTERNET"
    next
end
config router ospf
    config redistribute "connected"
    end
    config redistribute "static"
    end
    config redistribute "rip"
    end
    config redistribute "bgp"
    end
    config redistribute "isis"
    end
end
config router ospf6
    config redistribute "connected"
    end
    config redistribute "static"
    end
    config redistribute "rip"
    end
    config redistribute "bgp"
    end
    config redistribute "isis"
    end
end
config router bgp
    set as 65400
    config neighbor
        edit "10.10.1.1"
            set remote-as 65400
        next
    end
    config network
        edit 1
            set prefix 172.24.51.0 255.255.255.0
        next
    end
    config network6
        edit 1
            set prefix6 ::/128
        next
    end
    config redistribute "connected"
    end
    config redistribute "rip"
    end
    config redistribute "ospf"
    end
    config redistribute "static"
    end
    config redistribute "isis"
    end
    config redistribute6 "connected"
    end
    config redistribute6 "rip"
    end
    config redistribute6 "ospf"
    end
    config redistribute6 "static"
    end
    config redistribute6 "isis"
    end
end
config router isis
    config redistribute "connected"
    end
    config redistribute "rip"
    end
    config redistribute "ospf"
    end
    config redistribute "bgp"
    end
    config redistribute "static"
    end
    config redistribute6 "connected"
    end
    config redistribute6 "rip"
    end
    config redistribute6 "ospf"
    end
    config redistribute6 "bgp"
    end
    config redistribute6 "static"
    end
end
config router multicast
end
