diff --git a/configs/fortigate/global/system.cfg b/configs/fortigate/global/system.cfg index 34b6858..59e9429 100644 --- a/configs/fortigate/global/system.cfg +++ b/configs/fortigate/global/system.cfg @@ -5,7 +5,7 @@ config system global set gui-auto-upgrade-setup-warning disable set gui-device-latitude "43.02974913459805" set gui-device-longitude "-76.14486694335938" - set hostname "noc-fortigate-a" + set hostname "noc-fortigate-b" set management-port-use-admin-sport disable set remoteauthtimeout 120 set revision-backup-on-logout enable @@ -733,14 +733,14 @@ config system ha set mode a-p set hbdev "port1" 50 "port2" 50 set override disable - set priority 200 + set priority 100 end config system storage edit "SSD1" set status enable set media-status enable set order 1 - set partition "LOGUSEDX45501361" + set partition "LOGUSEDX4300F88D" set device "/dev/nvme0n1p1" set size 937875 set usage log @@ -749,7 +749,7 @@ config system storage set status enable set media-status enable set order 2 - set partition "WANOPTXX808E4B55" + set partition "WANOPTXXFFCD85F8" set device "/dev/nvme1n1p1" set size 266562 set usage wanopt diff --git a/configs/fortigate/vdom_scsd/firewall.cfg b/configs/fortigate/vdom_scsd/firewall.cfg index edeef4e..e173339 100644 --- a/configs/fortigate/vdom_scsd/firewall.cfg +++ b/configs/fortigate/vdom_scsd/firewall.cfg @@ -843,6 +843,10 @@ config firewall address set color 6 set subnet 5.4.5.4 255.255.255.255 next + edit "Safeschools_02" + set comment "IP address for Safe Schools video training. Used to access LDAP authentication." + set subnet 18.219.244.165 255.255.255.255 + next edit "z_BlockIP_081" set comment "Malicious IP Address" set associated-interface "outside" @@ -2627,10 +2631,6 @@ config firewall address set color 18 set subnet 10.1.40.102 255.255.255.255 next - edit "Safeschools_02" - set comment "IP address for Safe Schools video training. Used to access LDAP authentication." - set subnet 18.219.244.165 255.255.255.255 - next edit "Server_40" set associated-interface "inside" set subnet 10.1.40.0 255.255.255.0 @@ -3811,6 +3811,9 @@ config firewall service custom edit "TCP-8443" set tcp-portrange 8443 next + edit "TCP-8013" + set tcp-portrange 8013 + next end config firewall service group edit "Email Access" @@ -6219,7 +6222,7 @@ config firewall policy set srcaddr "all" set dstaddr "vip-EMS" set schedule "always" - set service "HTTP" "HTTPS" "TCP-8443" + set service "HTTP" "HTTPS" "TCP-8443" "TCP-8013" set utm-status enable set ssl-ssh-profile "certificate-inspection" set ips-sensor "Incoming_IPS"