config system global
    set admin-server-cert "Fortinet_Factory"
    set admintimeout 59
    set alias "FortiGate-2601F"
    set gui-auto-upgrade-setup-warning disable
    set gui-device-latitude "43.02974913459805"
    set gui-device-longitude "-76.14486694335938"
    set hostname "noc-fortigate-a"
    set management-port-use-admin-sport disable
    set remoteauthtimeout 120
    set revision-backup-on-logout enable
    set sslvpn-web-mode enable
    set switch-controller enable
    set timezone "US/Eastern"
    set vdom-mode multi-vdom
end
config system accprofile
    edit "prof_admin"
        set secfabgrp read-write
        set ftviewgrp read-write
        set authgrp read-write
        set sysgrp read-write
        set netgrp read-write
        set loggrp read-write
        set fwgrp read-write
        set vpngrp read-write
        set utmgrp read-write
        set wanoptgrp read-write
        set wifi read-write
        set cli-get enable
        set cli-show enable
        set cli-exec enable
        set cli-config enable
    next
    edit "NOC_Dashboard"
        set comments "For displaying info in Operations area"
        set secfabgrp read
        set ftviewgrp read
        set authgrp read
        set sysgrp read
        set netgrp read
        set loggrp read
        set fwgrp read
        set vpngrp read
        set utmgrp read
        set wanoptgrp read
        set wifi read
        set admintimeout-override enable
        set cli-get enable
        set cli-show enable
        set cli-exec enable
        set cli-config enable
        set admintimeout 0
    next
    edit "Read_Only"
        set secfabgrp read
        set ftviewgrp read
        set authgrp read
        set sysgrp read
        set netgrp read
        set loggrp read
        set fwgrp read
        set vpngrp read
        set utmgrp read
        set wanoptgrp read
        set wifi read
        set cli-get enable
        set cli-show enable
        set cli-exec enable
        set cli-config enable
    next
end
config system npu
    config np-queues
        config ethernet-type
            edit "ARP"
                set type 806
                set queue 9
            next
            edit "HA-SESSYNC"
                set type 8892
                set queue 11
            next
            edit "HA-DEF"
                set type 8890
                set queue 11
            next
            edit "HC-DEF"
                set type 8891
                set queue 11
            next
            edit "L2EP-DEF"
                set type 8893
                set queue 11
            next
            edit "LACP"
                set type 8809
                set queue 9
            next
        end
        config ip-protocol
            edit "OSPF"
                set protocol 89
                set queue 11
            next
            edit "IGMP"
                set protocol 2
                set queue 11
            next
            edit "ICMP"
                set protocol 1
                set queue 3
            next
        end
        config ip-service
            edit "IKE"
                set protocol 17
                set sport 500
                set dport 500
                set queue 11
            next
            edit "BGP"
                set protocol 6
                set sport 179
                set dport 179
                set queue 9
            next
            edit "BFD-single-hop"
                set protocol 17
                set sport 3784
                set dport 3784
                set queue 11
            next
            edit "BFD-multiple-hop"
                set protocol 17
                set sport 4784
                set dport 4784
                set queue 11
            next
            edit "SLBC-management"
                set protocol 17
                set dport 720
                set queue 11
            next
            edit "SLBC-1"
                set protocol 17
                set sport 11133
                set dport 11133
                set queue 11
            next
            edit "SLBC-2"
                set protocol 17
                set sport 65435
                set dport 65435
                set queue 11
            next
        end
    end
end
config system interface
    edit "port1"
        set vdom "root"
        set type physical
        set alias "HA Port 1"
        set snmp-index 1
    next
    edit "port2"
        set vdom "root"
        set type physical
        set alias "HA Port 2"
        set snmp-index 2
    next
    edit "port3"
        set vdom "root"
        set type physical
        set snmp-index 3
    next
    edit "port4"
        set vdom "root"
        set type physical
        set snmp-index 4
    next
    edit "port5"
        set vdom "scsd"
        set type physical
        set snmp-index 5
        set speed 10000auto
    next
    edit "port6"
        set vdom "scsd"
        set type physical
        set snmp-index 6
        set speed 10000auto
    next
    edit "port7"
        set vdom "root"
        set type physical
        set snmp-index 7
    next
    edit "port8"
        set vdom "root"
        set type physical
        set snmp-index 8
    next
    edit "port9"
        set vdom "TEST"
        set status down
        set type physical
        set alias "LAN_Test"
        set snmp-index 9
    next
    edit "port10"
        set vdom "TEST"
        set status down
        set type physical
        set alias "WAN_Test"
        set snmp-index 10
    next
    edit "port11"
        set vdom "root"
        set type physical
        set snmp-index 11
    next
    edit "port12"
        set vdom "root"
        set type physical
        set snmp-index 12
    next
    edit "port13"
        set vdom "root"
        set type physical
        set snmp-index 13
    next
    edit "port14"
        set vdom "root"
        set type physical
        set snmp-index 14
    next
    edit "port15"
        set vdom "root"
        set type physical
        set snmp-index 15
    next
    edit "port16"
        set vdom "root"
        set type physical
        set snmp-index 16
    next
    edit "port17"
        set vdom "scsd"
        set type physical
        set mediatype sr
        set snmp-index 17
        set speed 10000full
    next
    edit "port18"
        set vdom "scsd"
        set type physical
        set mediatype sr
        set snmp-index 18
        set speed 10000full
    next
    edit "port19"
        set vdom "scsd"
        set type physical
        set mediatype sr
        set snmp-index 19
        set speed 10000full
    next
    edit "port20"
        set vdom "scsd"
        set type physical
        set mediatype sr
        set snmp-index 20
        set speed 10000full
    next
    edit "port21"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 21
        set forward-error-correction disable
        set speed 25000full
    next
    edit "port22"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 22
        set forward-error-correction disable
        set speed 25000full
    next
    edit "port23"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 23
        set forward-error-correction disable
        set speed 25000full
    next
    edit "port24"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 24
        set forward-error-correction disable
        set speed 25000full
    next
    edit "port25"
        set vdom "scsd"
        set allowaccess ping
        set status down
        set type physical
        set mediatype sr
        set monitor-bandwidth enable
        set snmp-index 25
        set speed 10000full
    next
    edit "port26"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 26
        set speed 10000full
    next
    edit "port27"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 27
        set speed 10000full
    next
    edit "port28"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 28
        set speed 10000full
    next
    edit "port29"
        set vdom "scsd"
        set allowaccess ping
        set status down
        set type physical
        set mediatype sr
        set monitor-bandwidth enable
        set snmp-index 29
        set speed 10000full
    next
    edit "port30"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 30
        set speed 10000full
    next
    edit "port31"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 31
        set speed 10000full
    next
    edit "port32"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 32
        set speed 10000full
    next
    edit "port33"
        set vdom "root"
        set type physical
        set mediatype sr4
        set snmp-index 33
        set forward-error-correction disable
        set speed 100Gfull
    next
    edit "port34"
        set vdom "root"
        set type physical
        set mediatype sr4
        set snmp-index 34
        set forward-error-correction disable
        set speed 100Gfull
    next
    edit "port35"
        set vdom "root"
        set type physical
        set mediatype sr4
        set snmp-index 35
        set forward-error-correction disable
        set speed 100Gfull
    next
    edit "port36"
        set vdom "root"
        set type physical
        set mediatype sr4
        set snmp-index 36
        set forward-error-correction disable
        set speed 100Gfull
    next
    edit "mgmt1"
        set vdom "root"
        set ip 192.168.1.241 255.255.255.0
        set allowaccess ping https ssh http
        set type physical
        set dedicated-to management
        set role lan
        set snmp-index 37
    next
    edit "mgmt2"
        set vdom "root"
        set ip 192.168.200.1 255.255.255.0
        set allowaccess ping https ssh http
        set type physical
        set dedicated-to management
        set role lan
        set snmp-index 38
    next
    edit "ha1"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 39
        set speed 10000full
    next
    edit "ha2"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 40
        set speed 10000full
    next
    edit "modem"
        set vdom "root"
        set mode pppoe
        set status down
        set type physical
        set snmp-index 41
    next
    edit "naf.root"
        set vdom "root"
        set type tunnel
        set src-check disable
        set snmp-index 51
    next
    edit "l2t.root"
        set vdom "root"
        set type tunnel
        set snmp-index 52
    next
    edit "ssl.root"
        set vdom "root"
        set type tunnel
        set alias "SSL VPN interface"
        set snmp-index 42
    next
    edit "naf.Policy"
        set vdom "Policy"
        set type tunnel
        set src-check disable
        set snmp-index 53
    next
    edit "l2t.Policy"
        set vdom "Policy"
        set type tunnel
        set snmp-index 54
    next
    edit "ssl.Policy"
        set vdom "Policy"
        set type tunnel
        set alias "SSL VPN interface"
        set snmp-index 50
    next
    edit "naf.TEST"
        set vdom "TEST"
        set type tunnel
        set src-check disable
        set snmp-index 55
    next
    edit "l2t.TEST"
        set vdom "TEST"
        set type tunnel
        set snmp-index 56
    next
    edit "ssl.TEST"
        set vdom "TEST"
        set type tunnel
        set alias "SSL VPN interface"
        set snmp-index 47
    next
    edit "naf.scsd"
        set vdom "scsd"
        set type tunnel
        set src-check disable
        set snmp-index 57
    next
    edit "l2t.scsd"
        set vdom "scsd"
        set type tunnel
        set snmp-index 58
    next
    edit "ssl.scsd"
        set vdom "scsd"
        set type tunnel
        set alias "SSL VPN interface"
        set snmp-index 45
    next
    edit "npu0_vlink0"
        set vdom "root"
        set type physical
        set snmp-index 43
    next
    edit "npu0_vlink1"
        set vdom "root"
        set type physical
        set snmp-index 44
    next
    edit "SRIC_BOCES"
        set vdom "scsd"
        set type tunnel
        set snmp-index 46
        set interface "outside lag"
    next
    edit "vpn-042e9903"
        set vdom "scsd"
        set ip 169.254.69.218 255.255.255.255
        set allowaccess ping
        set type tunnel
        set tcp-mss 1379
        set remote-ip 169.254.69.217 255.255.255.252
        set snmp-index 48
        set interface "outside lag"
        set mtu-override enable
        set mtu 1427
    next
    edit "SCHC"
        set vdom "scsd"
        set type tunnel
        set snmp-index 49
        set interface "outside lag"
    next
    edit "vpn-0fc50345"
        set vdom "scsd"
        set ip 169.254.54.78 255.255.255.255
        set allowaccess ping
        set type tunnel
        set tcp-mss 1379
        set remote-ip 169.254.54.77 255.255.255.252
        set snmp-index 59
        set interface "outside lag"
        set mtu-override enable
        set mtu 1427
    next
    edit "inside lag"
        set vdom "scsd"
        set ip 10.251.1.5 255.255.255.0
        set allowaccess ping
        set type aggregate
        set member "port17" "port19"
        set alias "Inside"
        set lldp-transmission enable
        set monitor-bandwidth enable
        set snmp-index 60
    next
    edit "outside lag"
        set vdom "scsd"
        set ip 198.36.24.5 255.255.255.0
        set allowaccess ping
        set type aggregate
        set member "port18" "port20"
        set alias "Outside"
        set lldp-reception enable
        set lldp-transmission enable
        set monitor-bandwidth enable
        set snmp-index 61
    next
    edit "city_phones lag"
        set vdom "scsd"
        set ip 10.250.100.94 255.255.255.0
        set allowaccess ping
        set type aggregate
        set member "port6" "port5"
        set description "City Phones"
        set alias "City_Phones"
        set lldp-transmission enable
        set monitor-bandwidth enable
        set snmp-index 62
    next
    edit "vpn-0403e61"
        set vdom "scsd"
        set ip 169.254.242.194 255.255.255.255
        set allowaccess ping
        set type tunnel
        set tcp-mss 1379
        set remote-ip 169.254.242.193 255.255.255.252
        set snmp-index 63
        set interface "outside lag"
        set mtu-override enable
        set mtu 1427
    next
    edit "Highstreet"
        set vdom "scsd"
        set ip 169.254.117.222 255.255.255.255
        set allowaccess ping
        set type tunnel
        set tcp-mss 1379
        set remote-ip 169.254.117.221 255.255.255.252
        set snmp-index 65
        set interface "outside lag"
        set mtu-override enable
        set mtu 1427
    next
    edit "Highstreet_2"
        set vdom "scsd"
        set ip 169.254.13.86 255.255.255.255
        set allowaccess ping
        set status down
        set type tunnel
        set tcp-mss 1379
        set remote-ip 169.254.13.85 255.255.255.252
        set snmp-index 66
        set interface "outside lag"
        set mtu-override enable
        set mtu 1427
    next
    edit "DPS"
        set vdom "scsd"
        set ip 192.168.147.1 255.255.255.255
        set allowaccess ping https ssh http
        set type tunnel
        set remote-ip 192.168.147.2 255.255.255.255
        set snmp-index 67
        set interface "outside lag"
    next
    edit "RAP"
        set vdom "scsd"
        set type tunnel
        set snmp-index 68
        set interface "outside lag"
    next
    edit "CNYWorks"
        set vdom "scsd"
        set type tunnel
        set snmp-index 64
        set interface "outside lag"
    next
end
config system physical-switch
    edit "sw0"
        set age-val 0
    next
end
config system custom-language
    edit "en"
        set filename "en"
    next
    edit "fr"
        set filename "fr"
    next
    edit "sp"
        set filename "sp"
    next
    edit "pg"
        set filename "pg"
    next
    edit "x-sjis"
        set filename "x-sjis"
    next
    edit "big5"
        set filename "big5"
    next
    edit "GB2312"
        set filename "GB2312"
    next
    edit "euc-kr"
        set filename "euc-kr"
    next
end
config system admin
    edit "admin"
        set trusthost1 10.1.6.0 255.255.255.255
        set trusthost2 10.1.40.0 255.255.255.0
        set trusthost3 10.1.48.55 255.255.255.255
        set accprofile "super_admin"
        set vdom "root"
        set password ENC *HIDDEN*
    next
    edit "tmarri81.admin"
        set trusthost1 10.1.6.0 255.255.255.0
        set trusthost2 10.1.40.0 255.255.255.0
        set trusthost3 10.1.48.0 255.255.255.0
        set trusthost4 10.14.50.140 255.255.255.255
        set accprofile "super_admin"
        set vdom "root" "scsd"
        set password ENC *HIDDEN*
    next
    edit "nocview"
        set trusthost1 10.1.6.0 255.255.255.0
        set accprofile "NOC_Dashboard"
        set vdom "root" "scsd"
        set password ENC *HIDDEN*
    next
    edit "josoto.admin"
        set trusthost1 10.1.6.126 255.255.255.255
        set trusthost2 10.1.40.0 255.255.255.0
        set accprofile "super_admin"
        set vdom "root" "scsd"
        set password ENC *HIDDEN*
    next
    edit "jpoland"
        set accprofile "super_admin"
        set vdom "root"
        set password ENC *HIDDEN*
    next
    edit "jkafta72.admin"
        set trusthost1 10.1.6.0 255.255.255.0
        set trusthost2 10.1.40.0 255.255.255.0
        set accprofile "super_admin"
        set vdom "root"
        set password ENC *HIDDEN*
    next
    edit "estein66.admin"
        set trusthost1 10.1.6.0 255.255.255.0
        set trusthost2 10.1.40.0 255.255.255.0
        set accprofile "super_admin"
        set vdom "Policy" "root" "scsd" "TEST"
        set password ENC *HIDDEN*
    next
    edit "acrame22.admin"
        set trusthost1 10.1.6.0 255.255.255.0
        set trusthost2 10.1.40.0 255.255.255.0
        set accprofile "super_admin"
        set vdom "Policy" "root" "scsd" "TEST"
        set password ENC *HIDDEN*
    next
end
config system sso-admin
end
config system sso-forticloud-admin
    edit "FortiGateCloud"
        set vdom "root"
    next
    edit "4fc9e93dd975@fortigatecloud.com"
        set vdom "root"
    next
end
config system ha
    set group-name "SCSD_Fortigate"
    set mode a-p
    set hbdev "port1" 50 "port2" 50 
    set override disable
    set priority 200
end
config system storage
    edit "SSD1"
        set status enable
        set media-status enable
        set order 1
        set partition "LOGUSEDX45501361"
        set device "/dev/nvme0n1p1"
        set size 937875
        set usage log
    next
    edit "SSD2"
        set status enable
        set media-status enable
        set order 2
        set partition "WANOPTXX808E4B55"
        set device "/dev/nvme1n1p1"
        set size 266562
        set usage wanopt
        set wanopt-mode mix
    next
end
config system dns
    set primary 10.1.40.10
    set secondary 96.45.45.45
end
config system replacemsg-image
    edit "logo_fnet"
        set image-base64 ''
    next
    edit "logo_fguard_wf"
        set image-base64 ''
    next
    edit "logo_v3_fguard_app"
        set image-base64 ''
    next
    edit "logo_fw_auth"
        set image-base64 "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"
    next
    edit "logo_v2_fnet"
        set image-base64 "[encoded data, 21404 characters]"
    next
    edit "logo_v2_fguard_wf"
        set image-base64 "[encoded data, 19112 characters]"
    next
    edit "logo_v2_fguard_app"
        set image-base64 "[encoded data, 21948 characters]"
    next
end
config system replacemsg mail "partial"
end
config system replacemsg http "url-block"
end
config system replacemsg http "urlfilter-err"
end
config system replacemsg http "infcache-block"
end
config system replacemsg http "http-contenttypeblock"
end
config system replacemsg http "https-invalid-cert-block"
end
config system replacemsg http "https-untrusted-cert-block"
end
config system replacemsg http "https-blocklisted-cert-block"
end
config system replacemsg http "https-ech-block"
end
config system replacemsg http "switching-protocols-block"
end
config system replacemsg http "http-antiphish-block"
end
config system replacemsg http "videofilter-block"
end
config system replacemsg webproxy "deny"
end
config system replacemsg webproxy "user-limit"
end
config system replacemsg webproxy "auth-challenge"
end
config system replacemsg webproxy "auth-login-fail"
end
config system replacemsg webproxy "auth-group-info-fail"
end
config system replacemsg webproxy "http-err"
end
config system replacemsg webproxy "auth-ip-blackout"
end
config system replacemsg webproxy "ztna-invalid-cert"
end
config system replacemsg webproxy "ztna-empty-cert"
end
config system replacemsg webproxy "ztna-manageable-empty-cert"
end
config system replacemsg webproxy "ztna-no-api-gwy-matched"
end
config system replacemsg webproxy "ztna-cant-find-real-srv"
end
config system replacemsg webproxy "ztna-fqdn-dns-failed"
end
config system replacemsg webproxy "ztna-ssl-bookmark-failed"
end
config system replacemsg webproxy "ztna-no-policy-matched"
end
config system replacemsg webproxy "ztna-matched-deny-policy"
end
config system replacemsg webproxy "ztna-client-cert-revoked"
end
config system replacemsg webproxy "ztna-denied-by-matched-tags"
end
config system replacemsg webproxy "ztna-denied-no-matched-tags"
end
config system replacemsg webproxy "ztna-no-dev-info"
end
config system replacemsg webproxy "ztna-dev-is-offline"
end
config system replacemsg webproxy "ztna-dev-is-unmanageable"
end
config system replacemsg webproxy "ztna-auth-fail"
end
config system replacemsg webproxy "casb-block"
end
config system replacemsg webproxy "swp-empty-cert"
end
config system replacemsg webproxy "swp-manageable-empty-cert"
end
config system replacemsg ftp "ftp-explicit-banner"
end
config system replacemsg fortiguard-wf "ftgd-block"
end
config system replacemsg fortiguard-wf "ftgd-ovrd"
end
config system replacemsg fortiguard-wf "ftgd-quota"
end
config system replacemsg fortiguard-wf "ftgd-warning"
end
config system replacemsg spam "ipblocklist"
end
config system replacemsg spam "smtp-spam-dnsbl"
end
config system replacemsg spam "smtp-spam-feip"
end
config system replacemsg spam "smtp-spam-helo"
end
config system replacemsg spam "smtp-spam-emailblock-to"
end
config system replacemsg spam "smtp-spam-emailblock-from"
end
config system replacemsg spam "smtp-spam-emailblock-subject"
end
config system replacemsg spam "smtp-spam-mimeheader"
end
config system replacemsg spam "reversedns"
end
config system replacemsg spam "smtp-spam-ase"
end
config system replacemsg spam "submit"
end
config system replacemsg alertmail "alertmail-virus"
end
config system replacemsg alertmail "alertmail-block"
end
config system replacemsg alertmail "alertmail-nids-event"
end
config system replacemsg alertmail "alertmail-crit-event"
end
config system replacemsg alertmail "alertmail-disk-full"
end
config system replacemsg admin "pre_admin-disclaimer-text"
end
config system replacemsg admin "post_admin-disclaimer-text"
end
config system replacemsg auth "auth-disclaimer-page-1"
end
config system replacemsg auth "auth-disclaimer-page-2"
end
config system replacemsg auth "auth-disclaimer-page-3"
end
config system replacemsg auth "auth-proxy-reject-page"
end
config system replacemsg auth "auth-reject-page"
end
config system replacemsg auth "auth-login-page"
end
config system replacemsg auth "auth-login-failed-page"
end
config system replacemsg auth "auth-token-login-page"
end
config system replacemsg auth "auth-token-login-failed-page"
end
config system replacemsg auth "auth-success-msg"
end
config system replacemsg auth "auth-challenge-page"
end
config system replacemsg auth "auth-keepalive-page"
end
config system replacemsg auth "auth-portal-page"
end
config system replacemsg auth "auth-password-page"
end
config system replacemsg auth "auth-fortitoken-page"
end
config system replacemsg auth "auth-next-fortitoken-page"
end
config system replacemsg auth "auth-email-token-page"
end
config system replacemsg auth "auth-sms-token-page"
end
config system replacemsg auth "auth-email-harvesting-page"
end
config system replacemsg auth "auth-email-failed-page"
end
config system replacemsg auth "auth-cert-passwd-page"
end
config system replacemsg auth "auth-guest-print-page"
end
config system replacemsg auth "auth-guest-email-page"
end
config system replacemsg auth "auth-success-page"
end
config system replacemsg auth "auth-block-notification-page"
end
config system replacemsg auth "auth-quarantine-page"
end
config system replacemsg auth "auth-qtn-reject-page"
end
config system replacemsg auth "auth-saml-page"
end
config system replacemsg sslvpn "sslvpn-login"
end
config system replacemsg sslvpn "sslvpn-header"
end
config system replacemsg sslvpn "sslvpn-limit"
end
config system replacemsg sslvpn "hostcheck-error"
end
config system replacemsg sslvpn "sslvpn-provision-user"
end
config system replacemsg sslvpn "sslvpn-provision-user-sms"
end
config system replacemsg nac-quar "nac-quar-virus"
end
config system replacemsg nac-quar "nac-quar-dos"
end
config system replacemsg nac-quar "nac-quar-ips"
end
config system replacemsg nac-quar "nac-quar-dlp"
end
config system replacemsg nac-quar "nac-quar-admin"
end
config system replacemsg nac-quar "nac-quar-app"
end
config system replacemsg traffic-quota "per-ip-shaper-block"
end
config system replacemsg utm "virus-html"
end
config system replacemsg utm "client-virus-html"
end
config system replacemsg utm "virus-text"
end
config system replacemsg utm "dlp-html"
end
config system replacemsg utm "dlp-text"
end
config system replacemsg utm "appblk-html"
end
config system replacemsg utm "ipsblk-html"
end
config system replacemsg utm "virpatchblk-html"
end
config system replacemsg utm "ipsfail-html"
end
config system replacemsg utm "exe-text"
end
config system replacemsg utm "waf-html"
end
config system replacemsg utm "outbreak-prevention-html"
end
config system replacemsg utm "outbreak-prevention-text"
end
config system replacemsg utm "external-blocklist-html"
end
config system replacemsg utm "external-blocklist-text"
end
config system replacemsg utm "ems-threat-feed-html"
end
config system replacemsg utm "ems-threat-feed-text"
end
config system replacemsg utm "file-filter-html"
end
config system replacemsg utm "file-filter-text"
end
config system replacemsg utm "file-size-text"
end
config system replacemsg utm "transfer-size-text"
end
config system replacemsg utm "internal-error-text"
end
config system replacemsg utm "archive-block-html"
end
config system replacemsg utm "archive-block-text"
end
config system replacemsg utm "file-av-fail-text"
end
config system replacemsg utm "transfer-av-fail-text"
end
config system replacemsg utm "banned-word-html"
end
config system replacemsg utm "banned-word-text"
end
config system replacemsg utm "block-html"
end
config system replacemsg utm "block-text"
end
config system replacemsg utm "decompress-limit-text"
end
config system replacemsg utm "dlp-subject-text"
end
config system replacemsg utm "file-size-html"
end
config system replacemsg utm "client-file-size-html"
end
config system replacemsg utm "inline-scan-timeout-html"
end
config system replacemsg utm "inline-scan-timeout-text"
end
config system replacemsg utm "inline-scan-error-html"
end
config system replacemsg utm "inline-scan-error-text"
end
config system replacemsg utm "icap-block-text"
end
config system replacemsg utm "icap-error-text"
end
config system replacemsg utm "icap-http-error"
end
config system replacemsg icap "icap-req-resp"
end
config system replacemsg automation "automation-email"
end
config system snmp sysinfo
    set append-index enable
end
config system autoupdate schedule
    set frequency automatic
end
config system central-management
    set type fortiguard
end
config system resource-limits
    set log-disk-quota 703406
end
config system vdom-property
    edit "root"
        set description "property limits for vdom root"
        set snmp-index 1
    next
    edit "Policy"
        set description "property limits for vdom Policy"
        set snmp-index 4
    next
    edit "TEST"
        set description "property limits for vdom TEST"
        set snmp-index 3
    next
    edit "scsd"
        set description "property limits for vdom scsd"
        set snmp-index 2
    next
end
config system standalone-cluster
    config cluster-peer
    end
end
config system fortiguard
    set fortiguard-anycast disable
    set protocol udp
    set port 53
    set update-server-location usa
    set auto-firmware-upgrade disable
    set sdns-server-ip "208.91.112.220" "173.243.140.53" "210.7.96.53" 
end
config system email-server
    set server "fortinet-notifications.com"
    set port 465
    set security smtps
end
config system session-helper
    edit 1
        set name pptp
        set protocol 6
        set port 1723
    next
    edit 2
        set name h323
        set protocol 6
        set port 1720
    next
    edit 3
        set name ras
        set protocol 17
        set port 1719
    next
    edit 4
        set name tns
        set protocol 6
        set port 1521
    next
    edit 5
        set name tftp
        set protocol 17
        set port 69
    next
    edit 6
        set name rtsp
        set protocol 6
        set port 554
    next
    edit 7
        set name rtsp
        set protocol 6
        set port 7070
    next
    edit 8
        set name rtsp
        set protocol 6
        set port 8554
    next
    edit 9
        set name ftp
        set protocol 6
        set port 21
    next
    edit 10
        set name mms
        set protocol 6
        set port 1863
    next
    edit 11
        set name pmap
        set protocol 6
        set port 111
    next
    edit 12
        set name pmap
        set protocol 17
        set port 111
    next
    edit 14
        set name dns-udp
        set protocol 17
        set port 53
    next
    edit 15
        set name rsh
        set protocol 6
        set port 514
    next
    edit 16
        set name rsh
        set protocol 6
        set port 512
    next
    edit 17
        set name dcerpc
        set protocol 6
        set port 135
    next
    edit 18
        set name dcerpc
        set protocol 17
        set port 135
    next
    edit 19
        set name mgcp
        set protocol 17
        set port 2427
    next
    edit 20
        set name mgcp
        set protocol 17
        set port 2727
    next
end
config system auto-install
    set auto-install-config enable
    set auto-install-image enable
end
config system console
    set output standard
end
config system ntp
    set ntpsync enable
    set type custom
    set syncinterval 5
    config ntpserver
        edit 1
            set server "10.1.1.2"
        next
        edit 2
            set server "10.1.1.3"
        next
    end
end
config system ftm-push
    set server-cert "Fortinet_GUI_Server"
end
config system automation-trigger
    edit "Network Down"
        set event-type event-log
        set logid 20099
        config fields
            edit 1
                set name "status"
                set value "DOWN"
            next
        end
    next
    edit "HA Failover"
        set event-type ha-failover
    next
    edit "Reboot"
        set event-type reboot
    next
    edit "FortiAnalyzer Connection Down"
        set event-type event-log
        set logid 22902
    next
    edit "License Expired Notification"
        set event-type license-near-expiry
        set license-type any
    next
    edit "Compromised Host Quarantine"
    next
    edit "Incoming Webhook Call"
        set event-type incoming-webhook
    next
    edit "Security Rating Notification"
        set event-type security-rating-summary
    next
    edit "Local Cert Expired Notification"
        set description "Default automation trigger configuration for when a local certificate is near expiration."
        set event-type local-cert-near-expiry
    next
    edit "Compromised Host"
        set description "An incident of compromise has been detected on a host endpoint."
    next
    edit "Any Security Rating Notification"
        set description "A security rating summary report has been generated."
        set event-type security-rating-summary
    next
    edit "AV & IPS DB update"
        set description "The antivirus and IPS database has been updated."
        set event-type virus-ips-db-updated
    next
    edit "Configuration Change"
        set description "An administrator\'s session that changed a FortiGate\'s configuration has ended."
        set event-type config-change
    next
    edit "Conserve Mode"
        set description "A FortiGate has entered conserve mode due to low memory."
        set event-type low-memory
    next
    edit "High CPU"
        set description "A FortiGate has high CPU usage."
        set event-type high-cpu
    next
    edit "License Expiry"
        set description "A FortiGate license is near expiration."
        set event-type license-near-expiry
        set license-type any
    next
    edit "Anomaly Logs"
        set description "An anomalous event has occurred."
        set event-type anomaly-logs
    next
    edit "IPS Logs"
        set description "An IPS event has occurred."
        set event-type ips-logs
    next
    edit "SSH Logs"
        set description "A SSH event has occurred."
        set event-type ssh-logs
    next
    edit "Traffic Violation"
        set description "A traffic policy has been violated."
        set event-type traffic-violation
    next
    edit "Virus Logs"
        set description "A virus event has occurred."
        set event-type virus-logs
    next
    edit "Webfilter Violation"
        set description "A webfilter policy has been violated."
        set event-type webfilter-violation
    next
    edit "Admin Login"
        set description "A FortiOS event with specified log ID has occurred."
        set event-type event-log
        set logid 32001
    next
    edit "Local Certificate Expiry"
        set description "A local certificate is near expiration."
        set event-type local-cert-near-expiry
    next
    edit "Auto Firmware upgrade"
        set description "Automatic firmware upgrade."
        set event-type event-log
        set logid 22094 22095 32263
    next
end
config system automation-action
    edit "Network Down_email"
        set action-type email
        set email-subject "Network Down"
    next
    edit "HA Failover_email"
        set action-type email
        set email-subject "HA Failover"
    next
    edit "Reboot_email"
        set action-type email
        set email-subject "Reboot"
    next
    edit "FortiAnalyzer Connection Down_ios-notification"
        set action-type fortiexplorer-notification
    next
    edit "License Expired Notification_ios-notification"
        set action-type fortiexplorer-notification
    next
    edit "Security Rating Notification_ios-notification"
        set action-type fortiexplorer-notification
    next
    edit "Compromised Host Quarantine_quarantine"
        set action-type quarantine
    next
    edit "Compromised Host Quarantine_quarantine-forticlient"
        set action-type quarantine-forticlient
    next
    edit "Reboot FortiGate"
        set description "Default automation action configuration for rebooting this FortiGate unit."
        set action-type system-actions
        set system-action reboot
        set minimum-interval 300
    next
    edit "Shutdown FortiGate"
        set description "Default automation action configuration for shuting down this FortiGate unit."
        set action-type system-actions
        set system-action shutdown
    next
    edit "Backup Config Disk"
        set description "Default automation action configuration for backing up the configuration on disk."
        set action-type system-actions
        set system-action backup-config
    next
    edit "Access Layer Quarantine"
        set description "Quarantine the MAC address on access layer devices (FortiSwitch and FortiAP)."
        set action-type quarantine
    next
    edit "FortiClient Quarantine"
        set description "Use FortiClient EMS to quarantine the endpoint device."
        set action-type quarantine-forticlient
    next
    edit "FortiNAC Quarantine"
        set description "Use FortiNAC to quarantine the endpoint device."
        set action-type quarantine-fortinac
    next
    edit "IP Ban"
        set description "Ban the IP address specified in the automation trigger event."
        set action-type ban-ip
    next
    edit "FortiExplorer Notification"
        set description "Send a notification to FortiExplorer mobile application."
        set action-type fortiexplorer-notification
    next
    edit "Email Notification"
        set description "Send a custom email notification to the FortiCare email address registered on this device."
        set action-type email
        set forticare-email enable
        set email-subject "%%log.logdesc%%"
    next
    edit "CLI Script - System Status"
        set description "Execute a CLI script to return the system status."
        set action-type cli-script
        set script "get system status"
        set accprofile "super_admin_readonly"
    next
end
config system automation-stitch
    edit "Network Down"
        set status disable
        set trigger "Network Down"
        config actions
            edit 1
                set action "Network Down_email"
            next
        end
    next
    edit "HA Failover"
        set status disable
        set trigger "HA Failover"
        config actions
            edit 1
                set action "HA Failover_email"
            next
        end
    next
    edit "Reboot"
        set status disable
        set trigger "Reboot"
        config actions
            edit 1
                set action "Reboot_email"
            next
        end
    next
    edit "FortiAnalyzer Connection Down"
        set trigger "FortiAnalyzer Connection Down"
        config actions
            edit 1
                set action "FortiAnalyzer Connection Down_ios-notification"
            next
        end
    next
    edit "License Expired Notification"
        set trigger "License Expired Notification"
        config actions
            edit 1
                set action "License Expired Notification_ios-notification"
            next
        end
    next
    edit "Compromised Host Quarantine"
        set status disable
        set trigger "Compromised Host Quarantine"
        config actions
            edit 1
                set action "Compromised Host Quarantine_quarantine"
            next
            edit 2
                set action "Compromised Host Quarantine_quarantine-forticlient"
            next
        end
    next
    edit "Incoming Webhook Quarantine"
        set status disable
        set trigger "Incoming Webhook Call"
        config actions
            edit 1
                set action "Compromised Host Quarantine_quarantine"
            next
            edit 2
                set action "Compromised Host Quarantine_quarantine-forticlient"
            next
        end
    next
    edit "Security Rating Notification"
        set trigger "Security Rating Notification"
        config actions
            edit 1
                set action "Security Rating Notification_ios-notification"
            next
        end
    next
    edit "Firmware upgrade notification"
        set description "Automatic firmware upgrade notification."
        set trigger "Auto Firmware upgrade"
        set condition-logic or
        config actions
            edit 1
                set action "Email Notification"
            next
        end
    next
end
config system federated-upgrade
    set status disabled
end
config system ike
    set dh-multiprocess disable
end
end

