config system global
    set admin-server-cert "Fortinet_Factory"
    set admintimeout 59
    set alias "FortiGate-2601F"
    set gui-device-latitude "43.02974913459805"
    set gui-device-longitude "-76.14486694335938"
    set hostname "noc-fortigate-a"
    set management-port-use-admin-sport disable
    set remoteauthtimeout 120
    set revision-backup-on-logout enable
    set switch-controller enable
    set timezone 12
    set vdom-mode multi-vdom
end
config system accprofile
    edit "prof_admin"
        set secfabgrp read-write
        set ftviewgrp read-write
        set authgrp read-write
        set sysgrp read-write
        set netgrp read-write
        set loggrp read-write
        set fwgrp read-write
        set vpngrp read-write
        set utmgrp read-write
        set wanoptgrp read-write
        set wifi read-write
    next
    edit "NOC_Dashboard"
        set comments "For displaying info in Operations area"
        set secfabgrp read
        set ftviewgrp read
        set authgrp read
        set sysgrp read
        set netgrp read
        set loggrp read
        set fwgrp read
        set vpngrp read
        set utmgrp read
        set wanoptgrp read
        set wifi read
        set admintimeout-override enable
        set system-diagnostics disable
        set admintimeout 0
    next
    edit "Read_Only"
        set secfabgrp read
        set ftviewgrp read
        set authgrp read
        set sysgrp read
        set netgrp read
        set loggrp read
        set fwgrp read
        set vpngrp read
        set utmgrp read
        set wanoptgrp read
        set wifi read
    next
end
config system npu
    config np-queues
        config ethernet-type
            edit "ARP"
                set type 806
                set queue 9
            next
            edit "HA-SESSYNC"
                set type 8892
                set queue 11
            next
            edit "HA-DEF"
                set type 8890
                set queue 11
            next
            edit "HC-DEF"
                set type 8891
                set queue 11
            next
            edit "L2EP-DEF"
                set type 8893
                set queue 11
            next
            edit "LACP"
                set type 8809
                set queue 9
            next
        end
        config ip-protocol
            edit "OSPF"
                set protocol 89
                set queue 11
            next
            edit "IGMP"
                set protocol 2
                set queue 11
            next
            edit "ICMP"
                set protocol 1
                set queue 3
            next
        end
        config ip-service
            edit "IKE"
                set protocol 17
                set sport 500
                set dport 500
                set queue 11
            next
            edit "BGP"
                set protocol 6
                set sport 179
                set dport 179
                set queue 9
            next
            edit "BFD-single-hop"
                set protocol 17
                set sport 3784
                set dport 3784
                set queue 11
            next
            edit "BFD-multiple-hop"
                set protocol 17
                set sport 4784
                set dport 4784
                set queue 11
            next
            edit "SLBC-management"
                set protocol 17
                set dport 720
                set queue 11
            next
            edit "SLBC-1"
                set protocol 17
                set sport 11133
                set dport 11133
                set queue 11
            next
            edit "SLBC-2"
                set protocol 17
                set sport 65435
                set dport 65435
                set queue 11
            next
        end
    end
end
config system interface
    edit "port1"
        set vdom "root"
        set type physical
        set alias "HA Port 1"
        set snmp-index 1
        set speed 10000auto
    next
    edit "port2"
        set vdom "root"
        set type physical
        set alias "HA Port 2"
        set snmp-index 2
        set speed 10000auto
    next
    edit "port3"
        set vdom "root"
        set type physical
        set snmp-index 3
        set speed 10000auto
    next
    edit "port4"
        set vdom "root"
        set type physical
        set snmp-index 4
        set speed 10000auto
    next
    edit "port5"
        set vdom "scsd"
        set type physical
        set snmp-index 5
        set speed 10000auto
    next
    edit "port6"
        set vdom "scsd"
        set type physical
        set snmp-index 6
        set speed 10000auto
    next
    edit "port7"
        set vdom "root"
        set type physical
        set snmp-index 7
        set speed 10000auto
    next
    edit "port8"
        set vdom "root"
        set type physical
        set snmp-index 8
        set speed 10000auto
    next
    edit "port9"
        set vdom "TEST"
        set status down
        set type physical
        set alias "LAN_Test"
        set snmp-index 9
        set speed 10000auto
    next
    edit "port10"
        set vdom "TEST"
        set status down
        set type physical
        set alias "WAN_Test"
        set snmp-index 10
        set speed 10000auto
    next
    edit "port11"
        set vdom "root"
        set type physical
        set snmp-index 11
        set speed 10000auto
    next
    edit "port12"
        set vdom "root"
        set type physical
        set snmp-index 12
        set speed 10000auto
    next
    edit "port13"
        set vdom "root"
        set type physical
        set snmp-index 13
        set speed 10000auto
    next
    edit "port14"
        set vdom "root"
        set type physical
        set snmp-index 14
        set speed 10000auto
    next
    edit "port15"
        set vdom "root"
        set type physical
        set snmp-index 15
        set speed 10000auto
    next
    edit "port16"
        set vdom "root"
        set type physical
        set snmp-index 16
        set speed 10000auto
    next
    edit "port17"
        set vdom "scsd"
        set type physical
        set mediatype sr
        set snmp-index 17
        set speed 10000full
    next
    edit "port18"
        set vdom "scsd"
        set type physical
        set mediatype sr
        set snmp-index 18
        set speed 10000full
    next
    edit "port19"
        set vdom "scsd"
        set type physical
        set mediatype sr
        set snmp-index 19
        set speed 10000full
    next
    edit "port20"
        set vdom "scsd"
        set type physical
        set mediatype sr
        set snmp-index 20
        set speed 10000full
    next
    edit "port21"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 21
        set forward-error-correction disable
        set speed 25000full
    next
    edit "port22"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 22
        set forward-error-correction disable
        set speed 25000full
    next
    edit "port23"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 23
        set forward-error-correction disable
        set speed 25000full
    next
    edit "port24"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 24
        set forward-error-correction disable
        set speed 25000full
    next
    edit "port25"
        set vdom "scsd"
        set allowaccess ping
        set status down
        set type physical
        set mediatype sr
        set monitor-bandwidth enable
        set snmp-index 25
        set speed 10000full
    next
    edit "port26"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 26
        set speed 10000full
    next
    edit "port27"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 27
        set speed 10000full
    next
    edit "port28"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 28
        set speed 10000full
    next
    edit "port29"
        set vdom "scsd"
        set allowaccess ping
        set status down
        set type physical
        set mediatype sr
        set monitor-bandwidth enable
        set snmp-index 29
        set speed 10000full
    next
    edit "port30"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 30
        set speed 10000full
    next
    edit "port31"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 31
        set speed 10000full
    next
    edit "port32"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 32
        set speed 10000full
    next
    edit "port33"
        set vdom "root"
        set type physical
        set mediatype sr4
        set snmp-index 33
        set forward-error-correction disable
        set speed 100Gfull
    next
    edit "port34"
        set vdom "root"
        set type physical
        set mediatype sr4
        set snmp-index 34
        set forward-error-correction disable
        set speed 100Gfull
    next
    edit "port35"
        set vdom "root"
        set type physical
        set mediatype sr4
        set snmp-index 35
        set forward-error-correction disable
        set speed 100Gfull
    next
    edit "port36"
        set vdom "root"
        set type physical
        set mediatype sr4
        set snmp-index 36
        set forward-error-correction disable
        set speed 100Gfull
    next
    edit "mgmt1"
        set vdom "root"
        set ip 192.168.1.241 255.255.255.0
        set allowaccess ping https ssh http
        set type physical
        set dedicated-to management
        set role lan
        set snmp-index 37
    next
    edit "mgmt2"
        set vdom "root"
        set ip 192.168.200.1 255.255.255.0
        set allowaccess ping https ssh http
        set type physical
        set dedicated-to management
        set role lan
        set snmp-index 38
    next
    edit "ha1"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 39
        set speed 10000full
    next
    edit "ha2"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 40
        set speed 10000full
    next
    edit "modem"
        set vdom "root"
        set mode pppoe
        set status down
        set type physical
        set snmp-index 41
    next
    edit "naf.root"
        set vdom "root"
        set type tunnel
        set src-check disable
        set snmp-index 51
    next
    edit "l2t.root"
        set vdom "root"
        set type tunnel
        set snmp-index 52
    next
    edit "ssl.root"
        set vdom "root"
        set type tunnel
        set alias "SSL VPN interface"
        set snmp-index 42
    next
    edit "naf.scsd"
        set vdom "scsd"
        set type tunnel
        set src-check disable
        set snmp-index 57
    next
    edit "l2t.scsd"
        set vdom "scsd"
        set type tunnel
        set snmp-index 58
    next
    edit "ssl.scsd"
        set vdom "scsd"
        set type tunnel
        set alias "SSL VPN interface"
        set snmp-index 45
    next
    edit "naf.Policy"
        set vdom "Policy"
        set type tunnel
        set src-check disable
        set snmp-index 53
    next
    edit "l2t.Policy"
        set vdom "Policy"
        set type tunnel
        set snmp-index 54
    next
    edit "ssl.Policy"
        set vdom "Policy"
        set type tunnel
        set alias "SSL VPN interface"
        set snmp-index 50
    next
    edit "naf.TEST"
        set vdom "TEST"
        set type tunnel
        set src-check disable
        set snmp-index 55
    next
    edit "l2t.TEST"
        set vdom "TEST"
        set type tunnel
        set snmp-index 56
    next
    edit "ssl.TEST"
        set vdom "TEST"
        set type tunnel
        set alias "SSL VPN interface"
        set snmp-index 47
    next
    edit "npu0_vlink0"
        set vdom "root"
        set type physical
        set snmp-index 43
    next
    edit "npu0_vlink1"
        set vdom "root"
        set type physical
        set snmp-index 44
    next
    edit "SRIC_BOCES"
        set vdom "scsd"
        set type tunnel
        set snmp-index 46
        set interface "outside lag"
    next
    edit "vpn-042e9903"
        set vdom "scsd"
        set ip 169.254.69.218 255.255.255.255
        set allowaccess ping
        set type tunnel
        set tcp-mss 1379
        set remote-ip 169.254.69.217 255.255.255.252
        set snmp-index 48
        set mtu-override enable
        set mtu 1427
        set interface "outside lag"
    next
    edit "SCHC"
        set vdom "scsd"
        set type tunnel
        set snmp-index 49
        set interface "outside lag"
    next
    edit "vpn-0fc50345"
        set vdom "scsd"
        set ip 169.254.54.78 255.255.255.255
        set allowaccess ping
        set type tunnel
        set tcp-mss 1379
        set remote-ip 169.254.54.77 255.255.255.252
        set snmp-index 59
        set mtu-override enable
        set mtu 1427
        set interface "outside lag"
    next
    edit "inside lag"
        set vdom "scsd"
        set ip 10.251.1.5 255.255.255.0
        set allowaccess ping
        set type aggregate
        set member "port17" "port19"
        set alias "Inside"
        set lldp-transmission enable
        set monitor-bandwidth enable
        set snmp-index 60
    next
    edit "outside lag"
        set vdom "scsd"
        set ip 198.36.24.5 255.255.255.0
        set allowaccess ping
        set type aggregate
        set member "port18" "port20"
        set alias "Outside"
        set lldp-reception enable
        set lldp-transmission enable
        set monitor-bandwidth enable
        set snmp-index 61
    next
    edit "city_phones lag"
        set vdom "scsd"
        set ip 10.250.100.94 255.255.255.0
        set allowaccess ping
        set type aggregate
        set member "port6" "port5"
        set description "City Phones"
        set alias "City_Phones"
        set lldp-transmission enable
        set monitor-bandwidth enable
        set snmp-index 62
    next
    edit "vpn-0403e61"
        set vdom "scsd"
        set ip 169.254.242.194 255.255.255.255
        set allowaccess ping
        set type tunnel
        set tcp-mss 1379
        set remote-ip 169.254.242.193 255.255.255.252
        set snmp-index 63
        set mtu-override enable
        set mtu 1427
        set interface "outside lag"
    next
    edit "Highstreet"
        set vdom "scsd"
        set ip 169.254.117.222 255.255.255.255
        set allowaccess ping
        set type tunnel
        set tcp-mss 1379
        set remote-ip 169.254.117.221 255.255.255.252
        set snmp-index 65
        set mtu-override enable
        set mtu 1427
        set interface "outside lag"
    next
    edit "Highstreet_2"
        set vdom "scsd"
        set ip 169.254.13.86 255.255.255.255
        set allowaccess ping
        set status down
        set type tunnel
        set tcp-mss 1379
        set remote-ip 169.254.13.85 255.255.255.252
        set snmp-index 66
        set mtu-override enable
        set mtu 1427
        set interface "outside lag"
    next
    edit "DPS"
        set vdom "scsd"
        set ip 192.168.147.1 255.255.255.255
        set allowaccess ping https ssh http
        set type tunnel
        set remote-ip 192.168.147.2 255.255.255.255
        set snmp-index 67
        set interface "outside lag"
    next
    edit "RAP"
        set vdom "scsd"
        set type tunnel
        set snmp-index 68
        set interface "outside lag"
    next
end
config system physical-switch
    edit "sw0"
        set age-val 0
    next
end
config system custom-language
    edit "en"
        set filename "en"
    next
    edit "fr"
        set filename "fr"
    next
    edit "sp"
        set filename "sp"
    next
    edit "pg"
        set filename "pg"
    next
    edit "x-sjis"
        set filename "x-sjis"
    next
    edit "big5"
        set filename "big5"
    next
    edit "GB2312"
        set filename "GB2312"
    next
    edit "euc-kr"
        set filename "euc-kr"
    next
end
config system admin
    edit "admin"
        set trusthost1 10.1.6.20 255.255.255.255
        set trusthost2 10.1.6.32 255.255.255.255
        set accprofile "super_admin"
        set vdom "root"
        set password ENC *HIDDEN*
    next
    edit "tmarri81.admin"
        set trusthost1 10.1.6.34 255.255.255.255
        set trusthost2 10.1.6.20 255.255.255.255
        set accprofile "super_admin"
        set vdom "root" "scsd"
        set password ENC *HIDDEN*
    next
    edit "nocview"
        set trusthost1 10.1.6.0 255.255.255.0
        set accprofile "NOC_Dashboard"
        set vdom "root" "scsd"
        set password ENC *HIDDEN*
    next
    edit "josoto.admin"
        set trusthost1 10.1.6.126 255.255.255.255
        set accprofile "super_admin"
        set vdom "root" "scsd"
        set password ENC *HIDDEN*
    next
    edit "jpoland"
        set accprofile "super_admin"
        set vdom "root"
        set password ENC *HIDDEN*
    next
    edit "jkafta72.admin"
        set trusthost1 10.1.6.0 255.255.255.0
        set trusthost2 10.1.40.0 255.255.255.0
        set accprofile "super_admin"
        set vdom "root"
        set password ENC *HIDDEN*
    next
    edit "estein66.admin"
        set trusthost1 10.1.6.0 255.255.255.0
        set trusthost2 10.1.40.0 255.255.255.0
        set accprofile "super_admin"
        set vdom "Policy" "root" "scsd" "TEST"
        set password ENC *HIDDEN*
    next
end
config system sso-admin
end
config system sso-forticloud-admin
    edit "FortiGateCloud"
        set vdom "root"
    next
    edit "4fc9e93dd975@fortigatecloud.com"
        set vdom "root"
    next
end
config system ha
    set group-name "SCSD_Fortigate"
    set mode a-p
    set hbdev "port1" 50 "port2" 50 
    set override disable
    set priority 200
end
config system storage
    edit "SSD1"
        set status enable
        set media-status enable
        set order 1
        set partition "LOGUSEDX45501361"
        set device "/dev/nvme0n1p1"
        set size 937875
        set usage log
    next
    edit "SSD2"
        set status enable
        set media-status enable
        set order 2
        set partition "WANOPTXX808E4B55"
        set device "/dev/nvme1n1p1"
        set size 266562
        set usage wanopt
        set wanopt-mode mix
    next
end
config system dns
    set primary 10.1.40.10
    set secondary 96.45.45.45
end
config system replacemsg-image
    edit "logo_fnet"
        set image-type gif
        set image-base64 ''
    next
    edit "logo_fguard_wf"
        set image-type gif
        set image-base64 ''
    next
    edit "logo_v3_fguard_app"
        set image-base64 ''
    next
    edit "logo_fw_auth"
        set image-base64 "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"
    next
    edit "logo_v2_fnet"
        set image-base64 "[encoded data, 21404 characters]"
    next
    edit "logo_v2_fguard_wf"
        set image-base64 "[encoded data, 19112 characters]"
    next
    edit "logo_v2_fguard_app"
        set image-base64 "[encoded data, 21948 characters]"
    next
end
config system replacemsg mail "partial"
end
config system replacemsg http "url-block"
end
config system replacemsg http "urlfilter-err"
end
config system replacemsg http "infcache-block"
end
config system replacemsg http "http-contenttypeblock"
end
config system replacemsg http "https-invalid-cert-block"
end
config system replacemsg http "https-untrusted-cert-block"
end
config system replacemsg http "https-blocklisted-cert-block"
end
config system replacemsg http "switching-protocols-block"
end
config system replacemsg http "http-antiphish-block"
end
config system replacemsg http "videofilter-block"
end
config system replacemsg webproxy "deny"
end
config system replacemsg webproxy "user-limit"
end
config system replacemsg webproxy "auth-challenge"
end
config system replacemsg webproxy "auth-login-fail"
end
config system replacemsg webproxy "auth-group-info-fail"
end
config system replacemsg webproxy "http-err"
end
config system replacemsg webproxy "auth-ip-blackout"
end
config system replacemsg webproxy "ztna-block"
end
config system replacemsg ftp "ftp-explicit-banner"
end
config system replacemsg fortiguard-wf "ftgd-block"
end
config system replacemsg fortiguard-wf "ftgd-ovrd"
end
config system replacemsg fortiguard-wf "ftgd-quota"
end
config system replacemsg fortiguard-wf "ftgd-warning"
end
config system replacemsg spam "ipblocklist"
end
config system replacemsg spam "smtp-spam-dnsbl"
end
config system replacemsg spam "smtp-spam-feip"
end
config system replacemsg spam "smtp-spam-helo"
end
config system replacemsg spam "smtp-spam-emailblock"
end
config system replacemsg spam "smtp-spam-mimeheader"
end
config system replacemsg spam "reversedns"
end
config system replacemsg spam "smtp-spam-ase"
end
config system replacemsg spam "submit"
end
config system replacemsg alertmail "alertmail-virus"
end
config system replacemsg alertmail "alertmail-block"
end
config system replacemsg alertmail "alertmail-nids-event"
end
config system replacemsg alertmail "alertmail-crit-event"
end
config system replacemsg alertmail "alertmail-disk-full"
end
config system replacemsg admin "pre_admin-disclaimer-text"
end
config system replacemsg admin "post_admin-disclaimer-text"
end
config system replacemsg auth "auth-disclaimer-page-1"
end
config system replacemsg auth "auth-disclaimer-page-2"
end
config system replacemsg auth "auth-disclaimer-page-3"
end
config system replacemsg auth "auth-proxy-reject-page"
end
config system replacemsg auth "auth-reject-page"
end
config system replacemsg auth "auth-login-page"
end
config system replacemsg auth "auth-login-failed-page"
end
config system replacemsg auth "auth-token-login-page"
end
config system replacemsg auth "auth-token-login-failed-page"
end
config system replacemsg auth "auth-success-msg"
end
config system replacemsg auth "auth-challenge-page"
end
config system replacemsg auth "auth-keepalive-page"
end
config system replacemsg auth "auth-portal-page"
end
config system replacemsg auth "auth-password-page"
end
config system replacemsg auth "auth-fortitoken-page"
end
config system replacemsg auth "auth-next-fortitoken-page"
end
config system replacemsg auth "auth-email-token-page"
end
config system replacemsg auth "auth-sms-token-page"
end
config system replacemsg auth "auth-email-harvesting-page"
end
config system replacemsg auth "auth-email-failed-page"
end
config system replacemsg auth "auth-cert-passwd-page"
end
config system replacemsg auth "auth-guest-print-page"
end
config system replacemsg auth "auth-guest-email-page"
end
config system replacemsg auth "auth-success-page"
end
config system replacemsg auth "auth-block-notification-page"
end
config system replacemsg auth "auth-quarantine-page"
end
config system replacemsg auth "auth-qtn-reject-page"
end
config system replacemsg auth "auth-saml-page"
end
config system replacemsg sslvpn "sslvpn-login"
end
config system replacemsg sslvpn "sslvpn-header"
end
config system replacemsg sslvpn "sslvpn-limit"
end
config system replacemsg sslvpn "hostcheck-error"
end
config system replacemsg sslvpn "sslvpn-provision-user"
end
config system replacemsg sslvpn "sslvpn-provision-user-sms"
end
config system replacemsg nac-quar "nac-quar-virus"
end
config system replacemsg nac-quar "nac-quar-dos"
end
config system replacemsg nac-quar "nac-quar-ips"
end
config system replacemsg nac-quar "nac-quar-dlp"
end
config system replacemsg nac-quar "nac-quar-admin"
end
config system replacemsg nac-quar "nac-quar-app"
end
config system replacemsg traffic-quota "per-ip-shaper-block"
end
config system replacemsg utm "virus-html"
end
config system replacemsg utm "client-virus-html"
end
config system replacemsg utm "virus-text"
end
config system replacemsg utm "dlp-html"
end
config system replacemsg utm "dlp-text"
end
config system replacemsg utm "appblk-html"
end
config system replacemsg utm "ipsblk-html"
end
config system replacemsg utm "ipsfail-html"
end
config system replacemsg utm "exe-text"
end
config system replacemsg utm "waf-html"
end
config system replacemsg utm "outbreak-prevention-html"
end
config system replacemsg utm "outbreak-prevention-text"
end
config system replacemsg utm "external-blocklist-html"
end
config system replacemsg utm "external-blocklist-text"
end
config system replacemsg utm "ems-threat-feed-html"
end
config system replacemsg utm "ems-threat-feed-text"
end
config system replacemsg utm "file-filter-html"
end
config system replacemsg utm "file-filter-text"
end
config system replacemsg utm "file-size-text"
end
config system replacemsg utm "transfer-size-text"
end
config system replacemsg utm "internal-error-text"
end
config system replacemsg utm "archive-block-html"
end
config system replacemsg utm "archive-block-text"
end
config system replacemsg utm "file-av-fail-text"
end
config system replacemsg utm "transfer-av-fail-text"
end
config system replacemsg utm "banned-word-html"
end
config system replacemsg utm "banned-word-text"
end
config system replacemsg utm "block-html"
end
config system replacemsg utm "block-text"
end
config system replacemsg utm "decompress-limit-text"
end
config system replacemsg utm "dlp-subject-text"
end
config system replacemsg utm "file-size-html"
end
config system replacemsg utm "client-file-size-html"
end
config system replacemsg icap "icap-req-resp"
end
config system replacemsg automation "automation-email"
end
config system snmp sysinfo
end
config system central-management
    set type fortiguard
end
config system resource-limits
    set log-disk-quota 703406
end
config system vdom-property
    edit "root"
        set description "property limits for vdom root"
        set snmp-index 1
    next
    edit "scsd"
        set description "property limits for vdom scsd"
        set snmp-index 2
    next
    edit "Policy"
        set description "property limits for vdom Policy"
        set snmp-index 4
    next
    edit "TEST"
        set description "property limits for vdom TEST"
        set snmp-index 3
    next
end
config system cluster-sync
end
config system fortiguard
    set fortiguard-anycast disable
    set protocol udp
    set port 53
    set update-server-location usa
    set sdns-server-ip "208.91.112.220" "173.243.140.53" "210.7.96.53" 
end
config system email-server
    set server "notification.fortinet.net"
    set port 465
    set security smtps
end
config system session-helper
    edit 1
        set name pptp
        set protocol 6
        set port 1723
    next
    edit 2
        set name h323
        set protocol 6
        set port 1720
    next
    edit 3
        set name ras
        set protocol 17
        set port 1719
    next
    edit 4
        set name tns
        set protocol 6
        set port 1521
    next
    edit 5
        set name tftp
        set protocol 17
        set port 69
    next
    edit 6
        set name rtsp
        set protocol 6
        set port 554
    next
    edit 7
        set name rtsp
        set protocol 6
        set port 7070
    next
    edit 8
        set name rtsp
        set protocol 6
        set port 8554
    next
    edit 9
        set name ftp
        set protocol 6
        set port 21
    next
    edit 10
        set name mms
        set protocol 6
        set port 1863
    next
    edit 11
        set name pmap
        set protocol 6
        set port 111
    next
    edit 12
        set name pmap
        set protocol 17
        set port 111
    next
    edit 14
        set name dns-udp
        set protocol 17
        set port 53
    next
    edit 15
        set name rsh
        set protocol 6
        set port 514
    next
    edit 16
        set name rsh
        set protocol 6
        set port 512
    next
    edit 17
        set name dcerpc
        set protocol 6
        set port 135
    next
    edit 18
        set name dcerpc
        set protocol 17
        set port 135
    next
    edit 19
        set name mgcp
        set protocol 17
        set port 2427
    next
    edit 20
        set name mgcp
        set protocol 17
        set port 2727
    next
end
config system auto-install
    set auto-install-config enable
    set auto-install-image enable
end
config system console
    set output standard
end
config system ntp
    set ntpsync enable
    set type custom
    set syncinterval 5
    config ntpserver
        edit 1
            set server "10.1.1.2"
        next
        edit 2
            set server "10.1.1.3"
        next
    end
end
config system ftm-push
    set server-cert "Fortinet_Factory"
end
config system automation-trigger
    edit "Network Down"
        set event-type event-log
        set logid 20099
        config fields
            edit 1
                set name "status"
                set value "DOWN"
            next
        end
    next
    edit "HA Failover"
        set event-type ha-failover
    next
    edit "Reboot"
        set event-type reboot
    next
    edit "FortiAnalyzer Connection Down"
        set event-type event-log
        set logid 22902
    next
    edit "License Expired Notification"
        set event-type license-near-expiry
        set license-type any
    next
    edit "Compromised Host Quarantine"
    next
    edit "Incoming Webhook Call"
        set event-type incoming-webhook
    next
    edit "Security Rating Notification"
        set event-type security-rating-summary
    next
end
config system automation-action
    edit "Network Down_email"
        set action-type email
        set email-subject "Network Down"
    next
    edit "HA Failover_email"
        set action-type email
        set email-subject "HA Failover"
    next
    edit "Reboot_email"
        set action-type email
        set email-subject "Reboot"
    next
    edit "FortiAnalyzer Connection Down_ios-notification"
        set action-type fortiexplorer-notification
    next
    edit "License Expired Notification_ios-notification"
        set action-type fortiexplorer-notification
    next
    edit "Security Rating Notification_ios-notification"
        set action-type fortiexplorer-notification
    next
    edit "Compromised Host Quarantine_quarantine"
        set action-type quarantine
    next
    edit "Compromised Host Quarantine_quarantine-forticlient"
        set action-type quarantine-forticlient
    next
end
config system automation-stitch
    edit "Network Down"
        set status disable
        set trigger "Network Down"
        config actions
            edit 1
                set action "Network Down_email"
            next
        end
    next
    edit "HA Failover"
        set status disable
        set trigger "HA Failover"
        config actions
            edit 1
                set action "HA Failover_email"
            next
        end
    next
    edit "Reboot"
        set status disable
        set trigger "Reboot"
        config actions
            edit 1
                set action "Reboot_email"
            next
        end
    next
    edit "FortiAnalyzer Connection Down"
        set trigger "FortiAnalyzer Connection Down"
        config actions
            edit 1
                set action "FortiAnalyzer Connection Down_ios-notification"
            next
        end
    next
    edit "License Expired Notification"
        set trigger "License Expired Notification"
        config actions
            edit 1
                set action "License Expired Notification_ios-notification"
            next
        end
    next
    edit "Compromised Host Quarantine"
        set status disable
        set trigger "Compromised Host Quarantine"
        config actions
            edit 1
                set action "Compromised Host Quarantine_quarantine"
            next
            edit 2
                set action "Compromised Host Quarantine_quarantine-forticlient"
            next
        end
    next
    edit "Incoming Webhook Quarantine"
        set status disable
        set trigger "Incoming Webhook Call"
        config actions
            edit 1
                set action "Compromised Host Quarantine_quarantine"
            next
            edit 2
                set action "Compromised Host Quarantine_quarantine-forticlient"
            next
        end
    next
    edit "Security Rating Notification"
        set trigger "Security Rating Notification"
        config actions
            edit 1
                set action "Security Rating Notification_ios-notification"
            next
        end
    next
end
config system federated-upgrade
    set status disabled
end
config system ike
    set dh-multiprocess disable
end
end

