diff --git a/configs/fortigate/fortigate.conf b/configs/fortigate/fortigate.conf index 231193b..48bfd52 100644 --- a/configs/fortigate/fortigate.conf +++ b/configs/fortigate/fortigate.conf @@ -1,18 +1,18 @@ -#config-version=F2K61F-7.0.17-FW-build0682-250113:opmode=0:vdom=1:user=jpoland -#conf_file_ver=6251333490717899 -#buildno=0682 +#config-version=F2K61F-7.4.9-FW-build2829-250924:opmode=0:vdom=1:user=jpoland +#conf_file_ver=642393963644344 +#buildno=2829 #global_vdom=1 config vdom edit root next -edit scsd -next edit Policy next edit TEST next +edit scsd +next end config global @@ -21,7 +21,7 @@ config system global set admin-console-timeout 0 set admin-forticloud-sso-login disable set admin-host '' - set admin-hsts-max-age 15552000 + set admin-hsts-max-age 63072000 set admin-https-pki-required disable set admin-https-redirect enable unset admin-https-ssl-banned-ciphers @@ -30,7 +30,6 @@ config system global set admin-lockout-duration 60 set admin-lockout-threshold 3 set admin-login-max 100 - set admin-maintainer enable set admin-port 80 set admin-restrict-local disable set admin-scp disable @@ -50,6 +49,7 @@ config system global set auth-cert "Fortinet_Factory" set auth-http-port 1000 set auth-https-port 1003 + set auth-ike-saml-port 1001 set auth-keepalive disable set auth-session-limit block-new set auto-auth-extension-device enable @@ -58,6 +58,7 @@ config system global set av-failopen pass set av-failopen-session disable set batch-cmdb enable + set bfd-affinity "1" set block-session-timer 30 set br-fdb-max-entry 8192 set cert-chain-max 8 @@ -67,27 +68,38 @@ config system global set cli-audit-log disable set cloud-communication enable set clt-cert-req disable - set cmdbsvr-affinity "0" + set cmdbsvr-affinity "1" set cpu-use-threshold 90 set csr-ca-attribute enable set daily-restart disable set default-service-source-port 1-65535 + set delay-tcp-npu-session disable set device-idle-timeout 300 set dh-params 2048 + set dhcp-lease-backup-interval 60 set dnsproxy-worker-count 1 - set dst enable set early-tcp-npu-session disable set extender-controller-reserved-network 10.252.0.1 255.255.0.0 set faz-disk-buffer-size 0 set fds-statistics enable unset fgd-alert-subscription + set forticonverter-config-upload disable + set forticonverter-integration disable set fortiextender disable set fortiextender-data-port 25246 set fortiextender-discovery-lockdown disable + set fortiextender-provision-on-authorization disable set fortiextender-vlan-mode disable + set fortigslb-integration disable set fortiservice-port 8013 set fortitoken-cloud enable - set gui-allow-default-hostname disable + set fortitoken-cloud-push-status enable + set fortitoken-cloud-region '' + set fortitoken-cloud-sync-interval 24 + set geoip-full-db disable + set gtpu-dynamic-source-port disable + set gui-app-detection-sdwan disable + set gui-auto-upgrade-setup-warning disable set gui-cdn-usage disable set gui-certificates enable set gui-custom-language disable @@ -99,34 +111,36 @@ config system global set gui-firmware-upgrade-warning enable set gui-forticare-registration-setup-warning enable set gui-fortigate-cloud-sandbox disable - set gui-fortiguard-resource-fetch enable set gui-ipv6 disable set gui-local-out disable set gui-replacement-message-groups disable set gui-rest-api-cache enable set gui-theme jade set gui-wireless-opensecurity disable - set ha-affinity "0" + set gui-workflow-management disable + set ha-affinity "1" set honor-df enable set hostname "noc-fortigate-a" set hyper-scale-vdom-num 250 set igmp-state-limit 3200 + set interface-subnet-usage enable set internet-service-database full + set ip-conflict-detection disable set ip-fragment-mem-thresholds 32 set ip-src-port-range 1024-25000 set ipsec-asic-offload enable set ipsec-ha-seqjump-rate 10 set ipsec-hmac-offload enable - set ipsec-soft-dec-async disable set ipv6-accept-dad 1 set ipv6-allow-anycast-probe disable - set ipv6-allow-local-in-slient-drop enable + set ipv6-allow-local-in-silent-drop enable set ipv6-allow-multicast-probe disable set ipv6-allow-traffic-redirect enable set language english set ldapconntimeout 500 set lldp-reception disable set lldp-transmission disable + set log-single-cpu-high disable set log-ssl-connection disable set log-uuid-address disable set login-timestamp disable @@ -153,49 +167,54 @@ config system global set proxy-auth-timeout 10 set proxy-cert-use-mgmt-vdom disable set proxy-hardware-acceleration enable - set proxy-re-authentication-mode session + set proxy-keep-alive-mode session set proxy-resource-mode disable set proxy-worker-count 0 + set purdue-level 3 + set quic-ack-thresold 3 + set quic-congestion-control-algo cubic + set quic-max-datagram-size 1500 + set quic-pmtud enable + set quic-tls-handshake-timeout 5 + set quic-udp-payload-size-shaping-per-cid enable set radius-port 1812 set reboot-upon-config-restore enable set refresh 0 set remoteauthtimeout 120 set reset-sessionless-tcp disable + set rest-api-key-url-query disable set revision-backup-on-logout enable set revision-image-auto-backup disable set scanunit-count 0 - set security-rating-result-submission enable set security-rating-run-on-schedule enable set send-pmtu-icmp enable + set sflowd-max-children-num 6 set snat-route-change disable set special-file-23-support disable set speedtest-server disable + set speedtestd-ctrl-port 5200 + set speedtestd-server-port 5201 set split-port '' set ssd-trim-freq weekly set ssd-trim-hour 1 set ssd-trim-min 60 set ssd-trim-weekday sunday - set ssh-enc-algo chacha20-poly1305@openssh.com aes256-ctr aes256-gcm@openssh.com - set ssh-kex-algo diffie-hellman-group-exchange-sha256 curve25519-sha256@libssh.org ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521 - set ssh-mac-algo hmac-sha2-256 hmac-sha2-256-etm@openssh.com hmac-sha2-512 hmac-sha2-512-etm@openssh.com set ssl-min-proto-version TLSv1-2 set ssl-static-key-ciphers enable - set sslvpn-cipher-hardware-acceleration disable - set sslvpn-ems-sn-check disable - set sslvpn-kxp-hardware-acceleration disable set sslvpn-max-worker-count 0 - set sslvpn-plugin-version-check enable + set sslvpn-web-mode enable set strict-dirty-session-check enable set strong-crypto enable set switch-controller enable - set switch-controller-reserved-network 10.255.0.0 255.255.0.0 + set switch-controller-reserved-network 10.255.0.1 255.255.0.0 set sys-perf-log-interval 5 + set syslog-affinity "0" set tcp-halfclose-timer 120 set tcp-halfopen-timer 10 set tcp-option enable set tcp-rst-timer 5 set tcp-timewait-timer 1 - set timezone 12 + set timezone "US/Eastern" set traffic-priority tos set traffic-priority-level medium set two-factor-email-expiry 60 @@ -206,17 +225,19 @@ config system global set udp-idle-timer 180 set url-filter-affinity "0" set url-filter-count 1 + set user-device-store-max-device-mem 2 set user-device-store-max-devices 507278 - set user-device-store-max-unified-mem 2536393932 + set user-device-store-max-unified-mem 2536393318 set user-device-store-max-users 507278 - set user-server-cert "Fortinet_Factory" set vdom-mode multi-vdom set vip-arp-range restricted set virtual-switch-vlan disable + set vpn-ems-sn-check disable set wad-affinity "0" set wad-csvc-cs-count 1 set wad-csvc-db-count 0 set wad-memory-change-granularity 10 + set wad-restart-mode none set wad-source-affinity enable set wad-worker-count 0 set wifi-ca-certificate "Fortinet_Wifi_CA" @@ -244,7 +265,13 @@ config system accprofile set wanoptgrp read-write set wifi read-write set admintimeout-override disable - set system-diagnostics enable + set cli-diagnose disable + set cli-get enable + set cli-show enable + set cli-exec enable + set cli-config enable + set system-execute-ssh enable + set system-execute-telnet enable next edit "NOC_Dashboard" set scope vdom @@ -261,7 +288,13 @@ config system accprofile set wanoptgrp read set wifi read set admintimeout-override enable - set system-diagnostics disable + set cli-diagnose disable + set cli-get enable + set cli-show enable + set cli-exec enable + set cli-config enable + set system-execute-ssh enable + set system-execute-telnet enable set admintimeout 0 next edit "Read_Only" @@ -279,17 +312,24 @@ config system accprofile set wanoptgrp read set wifi read set admintimeout-override disable - set system-diagnostics enable + set cli-diagnose disable + set cli-get enable + set cli-show enable + set cli-exec enable + set cli-config enable + set system-execute-ssh enable + set system-execute-telnet enable next end +config system isf-queue-profile +end config system npu set dedicated-management-cpu disable - set ipsec-ob-np-sel rr + set dedicated-lacp-queue disable config dos-options set npu-dos-meter-mode global set npu-dos-tpe-mode enable end - set policy-offload-level disable set napi-break-interval 0 config hpe set all-protocol 400000 @@ -309,7 +349,9 @@ config system npu set enable-shaper disable end set capwap-offload enable - set default-qos-type shaping + set vxlan-offload enable + set default-qos-type policing + set shaping-stats disable set gtp-support disable set per-session-accounting traffic-log-only set session-acct-interval 5 @@ -339,6 +381,8 @@ config system npu set tcp-csum-err drop set udp-csum-err drop set icmp-csum-err drop + set gre-csum-err drop + set sctp-csum-err drop set ipv6-land trap-to-host set ipv6-proto-err trap-to-host set ipv6-unknopt trap-to-host @@ -464,9 +508,27 @@ config system npu set weight 13 next end + set custom-etype-lookup disable end + set qos-mode disable set double-level-mcast-offload disable set qtm-buf-mode 6ch + set ipsec-ob-np-sel rr + set max-receive-unit 10000 + config sw-eh-hash + set computation xor16 + set ip-protocol include + set source-ip-upper-16 include + set source-ip-lower-16 include + set destination-ip-upper-16 include + set destination-ip-lower-16 include + set source-port include + set destination-port include + set netmask-length 32 + end + config sw-tr-hash + set draco15 enable + end end config system npu-vlink end @@ -474,7 +536,8 @@ config system vdom-link end config wireless-controller inter-controller set inter-controller-mode disable - set inter-controller-key ENC eHQAZvmBSb+BVm46O44w3RrLvudhWg/ytjhRqbzNqlhgdjNSc098MMNm7i0IFeCtVmQJAm1WRETFtSDQFVTphqIesoMPi2XtF8AleVGD9Jdy0l/Z8H/vLJKCo16JSq28GTbf1mr8dG5n1RN5F6snNLdHPc4ThRK4eklyfmYePLDovtTlr3QmKlexcyQLgjPbx/9dBw== + set l3-roaming disable + set inter-controller-key ENC ZmlsZZn2w3be/mZLqfwOHw5UwBLtk9b92nHMkmAPjff0gGTc6T2ZAx9Gd9/+/op/MDAvixueGH6caXt2KS1RTyiLbp9GNitEQA9v1AQ4vlOjFSm96zLRti3u7yqpOlWoUmIHUOMDYg3ykU7CZQOplihrTha45OpKE9+hpFYkXhrxYMilhOCRJNwdu1qQ3bj/ARVp1FlmMjY3dkVA set inter-controller-pri primary set fast-failover-max 10 set fast-failover-wait 10 @@ -482,7 +545,11 @@ end config wireless-controller global set name '' set location '' + set acd-process-count 0 + set wpad-process-count 0 set image-download enable + set rolling-wtp-upgrade disable + set rolling-wtp-upgrade-threshold "-80" set max-retransmit 3 set control-message-offload ebp-frame aeroscout-tag ap-list sta-list sta-cap-list stats aeroscout-mu sta-health spectral-analysis set data-ethernet-II enable @@ -497,16 +564,15 @@ config wireless-controller global set tunnel-mode compatible set nac-interval 120 set ap-log-server disable + set max-sta-cap 0 + set max-sta-cap-wtp 8 + set max-rogue-ap 0 + set max-rogue-ap-wtp 16 + set max-rogue-sta 0 + set max-ble-device 0 end config system switch-interface end -config system lte-modem - set status disable - set extra-init '' - set authtype none - set apn '' - set modem-port 255 -end config system interface edit "port1" set vdom "root" @@ -551,7 +617,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -560,6 +625,7 @@ config system interface set description '' set alias "HA Port 1" set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -576,12 +642,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -601,7 +669,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -609,11 +678,12 @@ config system interface set padt-retry-timeout 1 set dns-server-override enable set dns-server-protocol cleartext - set speed 10000auto - set mtu-override disable + set speed auto set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port2" set vdom "root" @@ -658,7 +728,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -667,6 +736,7 @@ config system interface set description '' set alias "HA Port 2" set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -683,12 +753,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -708,7 +780,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -716,11 +789,12 @@ config system interface set padt-retry-timeout 1 set dns-server-override enable set dns-server-protocol cleartext - set speed 10000auto - set mtu-override disable + set speed auto set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port3" set vdom "root" @@ -765,7 +839,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -774,6 +847,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -790,12 +864,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -815,7 +891,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -823,11 +900,12 @@ config system interface set padt-retry-timeout 1 set dns-server-override enable set dns-server-protocol cleartext - set speed 10000auto - set mtu-override disable + set speed auto set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port4" set vdom "root" @@ -872,7 +950,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -881,6 +958,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -897,12 +975,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -922,7 +1002,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -930,11 +1011,12 @@ config system interface set padt-retry-timeout 1 set dns-server-override enable set dns-server-protocol cleartext - set speed 10000auto - set mtu-override disable + set speed auto set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port5" set vdom "scsd" @@ -945,10 +1027,10 @@ config system interface set status up set type physical set src-check enable - set disconnect-threshold 0 set trunk disable set description '' set alias '' + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -963,8 +1045,11 @@ config system interface set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 - set dhcp-relay-request-all-server disable + set port-mirroring disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set dns-server-override enable @@ -980,10 +1065,10 @@ config system interface set status up set type physical set src-check enable - set disconnect-threshold 0 set trunk disable set description '' set alias '' + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -998,8 +1083,11 @@ config system interface set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 - set dhcp-relay-request-all-server disable + set port-mirroring disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set dns-server-override enable @@ -1049,7 +1137,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -1058,6 +1145,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -1074,12 +1162,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -1099,7 +1189,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -1107,11 +1198,12 @@ config system interface set padt-retry-timeout 1 set dns-server-override enable set dns-server-protocol cleartext - set speed 10000auto - set mtu-override disable + set speed auto set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port8" set vdom "root" @@ -1156,7 +1248,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -1165,6 +1256,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -1181,12 +1273,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -1206,7 +1300,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -1214,11 +1309,12 @@ config system interface set padt-retry-timeout 1 set dns-server-override enable set dns-server-protocol cleartext - set speed 10000auto - set mtu-override disable + set speed auto set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port9" set vdom "TEST" @@ -1263,7 +1359,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -1272,6 +1367,7 @@ config system interface set description '' set alias "LAN_Test" set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -1288,12 +1384,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -1313,7 +1411,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -1321,11 +1420,12 @@ config system interface set padt-retry-timeout 1 set dns-server-override enable set dns-server-protocol cleartext - set speed 10000auto - set mtu-override disable + set speed auto set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port10" set vdom "TEST" @@ -1370,7 +1470,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -1379,6 +1478,7 @@ config system interface set description '' set alias "WAN_Test" set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -1395,12 +1495,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -1420,7 +1522,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -1428,11 +1531,12 @@ config system interface set padt-retry-timeout 1 set dns-server-override enable set dns-server-protocol cleartext - set speed 10000auto - set mtu-override disable + set speed auto set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port11" set vdom "root" @@ -1477,7 +1581,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -1486,6 +1589,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -1502,12 +1606,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -1527,7 +1633,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -1535,11 +1642,12 @@ config system interface set padt-retry-timeout 1 set dns-server-override enable set dns-server-protocol cleartext - set speed 10000auto - set mtu-override disable + set speed auto set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port12" set vdom "root" @@ -1584,7 +1692,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -1593,6 +1700,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -1609,12 +1717,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -1634,7 +1744,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -1642,11 +1753,12 @@ config system interface set padt-retry-timeout 1 set dns-server-override enable set dns-server-protocol cleartext - set speed 10000auto - set mtu-override disable + set speed auto set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port13" set vdom "root" @@ -1691,7 +1803,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -1700,6 +1811,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -1716,12 +1828,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -1741,7 +1855,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -1749,11 +1864,12 @@ config system interface set padt-retry-timeout 1 set dns-server-override enable set dns-server-protocol cleartext - set speed 10000auto - set mtu-override disable + set speed auto set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port14" set vdom "root" @@ -1798,7 +1914,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -1807,6 +1922,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -1823,12 +1939,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -1848,7 +1966,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -1856,11 +1975,12 @@ config system interface set padt-retry-timeout 1 set dns-server-override enable set dns-server-protocol cleartext - set speed 10000auto - set mtu-override disable + set speed auto set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port15" set vdom "root" @@ -1905,7 +2025,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -1914,6 +2033,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -1930,12 +2050,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -1955,7 +2077,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -1963,11 +2086,12 @@ config system interface set padt-retry-timeout 1 set dns-server-override enable set dns-server-protocol cleartext - set speed 10000auto - set mtu-override disable + set speed auto set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port16" set vdom "root" @@ -2012,7 +2136,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -2021,6 +2144,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -2037,12 +2161,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -2062,7 +2188,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -2070,11 +2197,12 @@ config system interface set padt-retry-timeout 1 set dns-server-override enable set dns-server-protocol cleartext - set speed 10000auto - set mtu-override disable + set speed auto set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port17" set vdom "scsd" @@ -2086,10 +2214,10 @@ config system interface set type physical set src-check enable set mediatype sr - set disconnect-threshold 0 set trunk disable set description '' set alias '' + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -2104,8 +2232,11 @@ config system interface set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 - set dhcp-relay-request-all-server disable + set port-mirroring disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set dns-server-override enable @@ -2122,10 +2253,10 @@ config system interface set type physical set src-check enable set mediatype sr - set disconnect-threshold 0 set trunk disable set description '' set alias '' + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -2140,8 +2271,11 @@ config system interface set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 - set dhcp-relay-request-all-server disable + set port-mirroring disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set dns-server-override enable @@ -2158,10 +2292,10 @@ config system interface set type physical set src-check enable set mediatype sr - set disconnect-threshold 0 set trunk disable set description '' set alias '' + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -2176,8 +2310,11 @@ config system interface set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 - set dhcp-relay-request-all-server disable + set port-mirroring disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set dns-server-override enable @@ -2194,10 +2331,10 @@ config system interface set type physical set src-check enable set mediatype sr - set disconnect-threshold 0 set trunk disable set description '' set alias '' + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -2212,8 +2349,11 @@ config system interface set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 - set dhcp-relay-request-all-server disable + set port-mirroring disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set dns-server-override enable @@ -2264,7 +2404,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -2273,6 +2412,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -2289,13 +2429,15 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 set forward-error-correction disable + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -2315,7 +2457,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -2324,10 +2467,11 @@ config system interface set dns-server-override enable set dns-server-protocol cleartext set speed 25000full - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port22" set vdom "root" @@ -2373,7 +2517,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -2382,6 +2525,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -2398,13 +2542,15 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 set forward-error-correction disable + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -2424,7 +2570,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -2433,10 +2580,11 @@ config system interface set dns-server-override enable set dns-server-protocol cleartext set speed 25000full - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port23" set vdom "root" @@ -2482,7 +2630,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -2491,6 +2638,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -2507,13 +2655,15 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 set forward-error-correction disable + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -2533,7 +2683,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -2542,10 +2693,11 @@ config system interface set dns-server-override enable set dns-server-protocol cleartext set speed 25000full - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port24" set vdom "root" @@ -2591,7 +2743,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -2600,6 +2751,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -2616,13 +2768,15 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 set forward-error-correction disable + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -2642,7 +2796,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -2651,10 +2806,11 @@ config system interface set dns-server-override enable set dns-server-protocol cleartext set speed 25000full - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port25" set vdom "scsd" @@ -2700,7 +2856,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -2709,6 +2864,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -2725,12 +2881,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -2750,7 +2908,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -2759,10 +2918,11 @@ config system interface set dns-server-override enable set dns-server-protocol cleartext set speed 10000full - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port26" set vdom "root" @@ -2808,7 +2968,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -2817,6 +2976,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -2833,12 +2993,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -2858,7 +3020,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -2867,10 +3030,11 @@ config system interface set dns-server-override enable set dns-server-protocol cleartext set speed 10000full - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port27" set vdom "root" @@ -2916,7 +3080,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -2925,6 +3088,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -2941,12 +3105,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -2966,7 +3132,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -2975,10 +3142,11 @@ config system interface set dns-server-override enable set dns-server-protocol cleartext set speed 10000full - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port28" set vdom "root" @@ -3024,7 +3192,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -3033,6 +3200,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -3049,12 +3217,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -3074,7 +3244,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -3083,10 +3254,11 @@ config system interface set dns-server-override enable set dns-server-protocol cleartext set speed 10000full - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port29" set vdom "scsd" @@ -3132,7 +3304,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -3141,6 +3312,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -3157,12 +3329,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -3182,7 +3356,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -3191,10 +3366,11 @@ config system interface set dns-server-override enable set dns-server-protocol cleartext set speed 10000full - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port30" set vdom "root" @@ -3240,7 +3416,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -3249,6 +3424,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -3265,12 +3441,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -3290,7 +3468,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -3299,10 +3478,11 @@ config system interface set dns-server-override enable set dns-server-protocol cleartext set speed 10000full - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port31" set vdom "root" @@ -3348,7 +3528,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -3357,6 +3536,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -3373,12 +3553,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -3398,7 +3580,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -3407,10 +3590,11 @@ config system interface set dns-server-override enable set dns-server-protocol cleartext set speed 10000full - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port32" set vdom "root" @@ -3456,7 +3640,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -3465,6 +3648,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -3481,12 +3665,14 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -3506,7 +3692,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -3515,10 +3702,11 @@ config system interface set dns-server-override enable set dns-server-protocol cleartext set speed 10000full - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port33" set vdom "root" @@ -3564,7 +3752,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -3573,6 +3760,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -3589,13 +3777,15 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 set forward-error-correction disable + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -3615,7 +3805,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -3624,10 +3815,11 @@ config system interface set dns-server-override enable set dns-server-protocol cleartext set speed 100Gfull - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port34" set vdom "root" @@ -3673,7 +3865,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -3682,6 +3873,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -3698,13 +3890,15 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 set forward-error-correction disable + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -3724,7 +3918,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -3733,10 +3928,11 @@ config system interface set dns-server-override enable set dns-server-protocol cleartext set speed 100Gfull - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port35" set vdom "root" @@ -3782,7 +3978,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -3791,6 +3986,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -3807,13 +4003,15 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 set forward-error-correction disable + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -3833,7 +4031,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -3842,10 +4041,11 @@ config system interface set dns-server-override enable set dns-server-protocol cleartext set speed 100Gfull - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "port36" set vdom "root" @@ -3891,7 +4091,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -3900,6 +4099,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -3916,13 +4116,15 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 set forward-error-correction disable + set eap-supplicant disable set np-qos-profile 0 + set port-mirroring disable config ipv6 set ip6-mode static set nd-mode basic @@ -3942,7 +4144,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -3951,10 +4154,11 @@ config system interface set dns-server-override enable set dns-server-protocol cleartext set speed 100Gfull - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable + set sw-algorithm default next edit "mgmt1" set vdom "root" @@ -4001,7 +4205,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -4009,6 +4212,7 @@ config system interface set trunk disable set description '' set alias '' + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -4027,6 +4231,14 @@ config system interface set ap-discover enable set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -4042,7 +4254,8 @@ config system interface set ip6-send-adv disable set autoconf disable end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set defaultgw enable set dns-server-override enable set dns-server-protocol cleartext @@ -4053,10 +4266,10 @@ config system interface set trust-ip6-1 ::/0 set trust-ip6-2 ::/0 set trust-ip6-3 ::/0 - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable next edit "mgmt2" set vdom "root" @@ -4103,7 +4316,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -4111,6 +4323,7 @@ config system interface set trunk disable set description '' set alias '' + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -4129,6 +4342,14 @@ config system interface set ap-discover enable set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -4144,7 +4365,8 @@ config system interface set ip6-send-adv disable set autoconf disable end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set defaultgw enable set dns-server-override enable set dns-server-protocol cleartext @@ -4155,10 +4377,10 @@ config system interface set trust-ip6-1 ::/0 set trust-ip6-2 ::/0 set trust-ip6-3 ::/0 - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable next edit "ha1" set vdom "root" @@ -4204,7 +4426,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -4213,6 +4434,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -4229,11 +4451,19 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -4253,7 +4483,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -4262,10 +4493,10 @@ config system interface set dns-server-override enable set dns-server-protocol cleartext set speed 10000full - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable next edit "ha2" set vdom "root" @@ -4311,7 +4542,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -4320,6 +4550,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -4336,11 +4567,19 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -4360,7 +4599,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -4369,10 +4609,10 @@ config system interface set dns-server-override enable set dns-server-protocol cleartext set speed 10000full - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable next edit "modem" set vdom "root" @@ -4414,7 +4654,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -4423,6 +4662,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -4442,6 +4682,14 @@ config system interface set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -4460,12 +4708,14 @@ config system interface set autoconf disable set dhcp6-relay-service disable end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set ipunnumbered 0.0.0.0 set username '' - set password ENC cgwHE6Tbk5nPSjNj7Mw8P92Pq1KXbiVRt9QX9lHYeCSwxO6siBvdbeVyToAj0g70uLWuxatLRq5BkGjaQluA1Ws9QOSdEpWyp3bzL2ex/vnKWTrkVLW+R3IR8tcDNkegClG0hhyUSTizoS61Eo2MTZMzjG7DF7qlPiZdYQWkhFiwWTpF2gZhRbOq0FxiPKMMbLTpdg== + set pppoe-egress-cos cos0 + set password ENC syQUyBMOAxT0qaZurFdBWXl79yyvmVlUBWeubQs9GPJkKOc1irAlICnlyihPocsDMYMzPKZColgEa2KKWeLE36/9W7Jt9sM20QGlnryjMPn7HryPmQVePd/72EtQcdLkffs7ggQowywwbZtJf9i+kfWV61N86L++ukd6qQKczyI5kjpMixcWjUZg96GUmcWdW5uNoVlmMjY3dkVA set idle-timeout 0 set disc-retry-timeout 1 set padt-retry-timeout 1 @@ -4478,10 +4728,10 @@ config system interface set dns-server-protocol cleartext set auth-type auto set speed auto - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable next edit "naf.root" set vdom "root" @@ -4526,6 +4776,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -4537,9 +4788,16 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set nd-mode basic set ip6-address ::/0 @@ -4549,11 +4807,11 @@ config system interface set ip6-retrans-time 0 set ip6-hop-limit 0 set ip6-prefix-mode dhcp6 - set ip6-delegated-prefix-iaid 0 set dhcp6-prefix-delegation disable set dhcp6-information-request disable end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dns-server-override enable set dns-server-protocol cleartext set wccp disable @@ -4599,9 +4857,11 @@ config system interface set weight 0 set external disable set trunk disable + set remote-ip 0.0.0.0 0.0.0.0 set description '' set alias '' set security-mode none + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -4613,9 +4873,16 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -4632,7 +4899,8 @@ config system interface set autoconf disable set dhcp6-relay-service disable end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dns-server-override enable set dns-server-protocol cleartext set wccp disable @@ -4649,8 +4917,6 @@ config system interface set arpforward enable set broadcast-forward disable set bfd global - set icmp-send-redirect enable - set icmp-accept-redirect enable set reachable-time 30000 set ips-sniffer-mode disable set ident-accept disable @@ -4681,6 +4947,7 @@ config system interface set description '' set alias "SSL VPN interface" set security-mode none + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -4692,15 +4959,21 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic set ip6-address ::/0 unset ip6-allowaccess - set icmp6-send-redirect enable set ra-send-mtu enable set ip6-reachable-time 0 set ip6-retrans-time 0 @@ -4711,240 +4984,8 @@ config system interface set autoconf disable set dhcp6-relay-service disable end - set dhcp-relay-request-all-server disable - set dns-server-override enable - set dns-server-protocol cleartext - set wccp disable - next - edit "naf.scsd" - set vdom "scsd" - set vrf 0 - set distance 5 - set priority 1 - set dhcp-relay-interface-select-method auto - set dhcp-relay-service disable - set ip 0.0.0.0 0.0.0.0 - set arpforward enable - set broadcast-forward disable - set bfd global - set icmp-send-redirect enable - set icmp-accept-redirect enable - set reachable-time 30000 - set ips-sniffer-mode disable - set ident-accept disable - set ipmac disable - set status up - set netbios-forward disable - set wins-ip 0.0.0.0 - set type tunnel - set netflow-sampler disable - set sflow-sampler disable - set src-check disable - set sample-rate 2000 - set polling-interval 20 - set sample-direction both - set explicit-web-proxy disable - set explicit-ftp-proxy disable - set proxy-captive-portal disable - set tcp-mss 0 - set inbandwidth 0 - set outbandwidth 0 - set egress-shaping-profile '' - set ingress-shaping-profile '' - set spillover-threshold 0 - set ingress-spillover-threshold 0 - set weight 0 - set external disable - set trunk disable - set description '' - set alias '' - set security-mode none - set estimated-upstream-bandwidth 0 - set estimated-downstream-bandwidth 0 - set measured-upstream-bandwidth 0 - set measured-downstream-bandwidth 0 - set bandwidth-measure-time 0 - set monitor-bandwidth disable - set role undefined - set snmp-index 57 - set preserve-session-route disable - set auto-auth-extension-device disable - set ap-discover enable - set ip-managed-by-fortiipam disable - set switch-controller-igmp-snooping-proxy disable - set switch-controller-igmp-snooping-fast-leave disable - config ipv6 - set nd-mode basic - set ip6-address ::/0 - set icmp6-send-redirect enable - set ra-send-mtu enable - set ip6-reachable-time 0 - set ip6-retrans-time 0 - set ip6-hop-limit 0 - set ip6-prefix-mode dhcp6 - set ip6-delegated-prefix-iaid 0 - set dhcp6-prefix-delegation disable - set dhcp6-information-request disable - end - set dhcp-relay-request-all-server disable - set dns-server-override enable - set dns-server-protocol cleartext - set wccp disable - next - edit "l2t.scsd" - set vdom "scsd" - set vrf 0 - set distance 5 - set priority 1 - set dhcp-relay-interface-select-method auto - set dhcp-relay-service disable - set ip 0.0.0.0 0.0.0.0 - unset allowaccess - set arpforward enable - set broadcast-forward disable - set bfd global - set icmp-send-redirect enable - set icmp-accept-redirect enable - set reachable-time 30000 - set ips-sniffer-mode disable - set ident-accept disable - set ipmac disable - set status up - set netbios-forward disable - set wins-ip 0.0.0.0 - set type tunnel - set netflow-sampler disable - set sflow-sampler disable - set src-check enable - set sample-rate 2000 - set polling-interval 20 - set sample-direction both - set explicit-web-proxy disable - set explicit-ftp-proxy disable - set proxy-captive-portal disable - set tcp-mss 0 - set inbandwidth 0 - set outbandwidth 0 - set egress-shaping-profile '' - set ingress-shaping-profile '' - set spillover-threshold 0 - set ingress-spillover-threshold 0 - set weight 0 - set external disable - set trunk disable - set description '' - set alias '' - set security-mode none - set estimated-upstream-bandwidth 0 - set estimated-downstream-bandwidth 0 - set measured-upstream-bandwidth 0 - set measured-downstream-bandwidth 0 - set bandwidth-measure-time 0 - set monitor-bandwidth disable - set role undefined - set snmp-index 58 - set preserve-session-route disable - set auto-auth-extension-device disable - set ap-discover enable - set ip-managed-by-fortiipam disable - set switch-controller-igmp-snooping-proxy disable - set switch-controller-igmp-snooping-fast-leave disable - config ipv6 - set ip6-mode static - set nd-mode basic - set ip6-address ::/0 - unset ip6-allowaccess - set icmp6-send-redirect enable - set ra-send-mtu enable - set ip6-reachable-time 0 - set ip6-retrans-time 0 - set ip6-hop-limit 0 - set dhcp6-prefix-delegation disable - set dhcp6-information-request disable - set ip6-send-adv disable - set autoconf disable - set dhcp6-relay-service disable - end - set dhcp-relay-request-all-server disable - set dns-server-override enable - set dns-server-protocol cleartext - set wccp disable - next - edit "ssl.scsd" - set vdom "scsd" - set vrf 0 - set distance 5 - set priority 1 - set dhcp-relay-interface-select-method auto - set dhcp-relay-service disable - set ip 0.0.0.0 0.0.0.0 - unset allowaccess - set arpforward enable - set broadcast-forward disable - set bfd global - set icmp-send-redirect enable - set icmp-accept-redirect enable - set reachable-time 30000 - set ips-sniffer-mode disable - set ident-accept disable - set ipmac disable - set status up - set netbios-forward disable - set wins-ip 0.0.0.0 - set type tunnel - set netflow-sampler disable - set sflow-sampler disable - set src-check enable - set sample-rate 2000 - set polling-interval 20 - set sample-direction both - set explicit-web-proxy disable - set explicit-ftp-proxy disable - set proxy-captive-portal disable - set tcp-mss 0 - set inbandwidth 0 - set outbandwidth 0 - set egress-shaping-profile '' - set ingress-shaping-profile '' - set spillover-threshold 0 - set ingress-spillover-threshold 0 - set weight 0 - set external disable - set trunk disable - set description '' - set alias "SSL VPN interface" - set security-mode none - set estimated-upstream-bandwidth 0 - set estimated-downstream-bandwidth 0 - set measured-upstream-bandwidth 0 - set measured-downstream-bandwidth 0 - set bandwidth-measure-time 0 - set monitor-bandwidth disable - set role undefined - set snmp-index 45 - set preserve-session-route disable - set auto-auth-extension-device disable - set ap-discover enable - set ip-managed-by-fortiipam disable - set switch-controller-igmp-snooping-proxy disable - set switch-controller-igmp-snooping-fast-leave disable - config ipv6 - set ip6-mode static - set nd-mode basic - set ip6-address ::/0 - unset ip6-allowaccess - set icmp6-send-redirect enable - set ra-send-mtu enable - set ip6-reachable-time 0 - set ip6-retrans-time 0 - set ip6-hop-limit 0 - set dhcp6-prefix-delegation disable - set dhcp6-information-request disable - set ip6-send-adv disable - set autoconf disable - set dhcp6-relay-service disable - end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dns-server-override enable set dns-server-protocol cleartext set wccp disable @@ -4989,6 +5030,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -5000,9 +5042,16 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set nd-mode basic set ip6-address ::/0 @@ -5012,11 +5061,11 @@ config system interface set ip6-retrans-time 0 set ip6-hop-limit 0 set ip6-prefix-mode dhcp6 - set ip6-delegated-prefix-iaid 0 set dhcp6-prefix-delegation disable set dhcp6-information-request disable end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dns-server-override enable set dns-server-protocol cleartext set wccp disable @@ -5059,9 +5108,11 @@ config system interface set weight 0 set external disable set trunk disable + set remote-ip 0.0.0.0 0.0.0.0 set description '' set alias '' set security-mode none + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -5073,9 +5124,16 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -5092,7 +5150,8 @@ config system interface set autoconf disable set dhcp6-relay-service disable end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dns-server-override enable set dns-server-protocol cleartext set wccp disable @@ -5109,8 +5168,6 @@ config system interface set arpforward enable set broadcast-forward disable set bfd global - set icmp-send-redirect enable - set icmp-accept-redirect enable set reachable-time 30000 set ips-sniffer-mode disable set ident-accept disable @@ -5138,6 +5195,7 @@ config system interface set description '' set alias "SSL VPN interface" set security-mode none + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -5149,15 +5207,21 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic set ip6-address ::/0 unset ip6-allowaccess - set icmp6-send-redirect enable set ra-send-mtu enable set ip6-reachable-time 0 set ip6-retrans-time 0 @@ -5168,7 +5232,8 @@ config system interface set autoconf disable set dhcp6-relay-service disable end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dns-server-override enable set dns-server-protocol cleartext set wccp disable @@ -5216,6 +5281,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -5227,9 +5293,16 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set nd-mode basic set ip6-address ::/0 @@ -5239,11 +5312,11 @@ config system interface set ip6-retrans-time 0 set ip6-hop-limit 0 set ip6-prefix-mode dhcp6 - set ip6-delegated-prefix-iaid 0 set dhcp6-prefix-delegation disable set dhcp6-information-request disable end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dns-server-override enable set dns-server-protocol cleartext set wccp disable @@ -5289,9 +5362,11 @@ config system interface set weight 0 set external disable set trunk disable + set remote-ip 0.0.0.0 0.0.0.0 set description '' set alias '' set security-mode none + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -5303,9 +5378,16 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -5322,7 +5404,8 @@ config system interface set autoconf disable set dhcp6-relay-service disable end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dns-server-override enable set dns-server-protocol cleartext set wccp disable @@ -5339,6 +5422,174 @@ config system interface set arpforward enable set broadcast-forward disable set bfd global + set reachable-time 30000 + set ips-sniffer-mode disable + set ident-accept disable + set ipmac disable + set status up + set netbios-forward disable + set wins-ip 0.0.0.0 + set type tunnel + set netflow-sampler disable + set sflow-sampler disable + set src-check enable + set sample-rate 2000 + set polling-interval 20 + set sample-direction both + set explicit-web-proxy disable + set explicit-ftp-proxy disable + set proxy-captive-portal disable + set tcp-mss 0 + set inbandwidth 0 + set outbandwidth 0 + set egress-shaping-profile '' + set ingress-shaping-profile '' + set spillover-threshold 0 + set ingress-spillover-threshold 0 + set weight 0 + set external disable + set trunk disable + set description '' + set alias "SSL VPN interface" + set security-mode none + set ike-saml-server '' + set estimated-upstream-bandwidth 0 + set estimated-downstream-bandwidth 0 + set measured-upstream-bandwidth 0 + set measured-downstream-bandwidth 0 + set bandwidth-measure-time 0 + set monitor-bandwidth disable + set role undefined + set snmp-index 47 + set preserve-session-route disable + set auto-auth-extension-device disable + set ap-discover enable + set switch-controller-igmp-snooping-proxy disable + set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end + config ipv6 + set ip6-mode static + set nd-mode basic + set ip6-address ::/0 + unset ip6-allowaccess + set ra-send-mtu enable + set ip6-reachable-time 0 + set ip6-retrans-time 0 + set ip6-hop-limit 0 + set dhcp6-prefix-delegation disable + set dhcp6-information-request disable + set ip6-send-adv disable + set autoconf disable + set dhcp6-relay-service disable + end + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' + set dns-server-override enable + set dns-server-protocol cleartext + set wccp disable + next + edit "naf.scsd" + set vdom "scsd" + set vrf 0 + set distance 5 + set priority 1 + set dhcp-relay-interface-select-method auto + set dhcp-relay-service disable + set ip 0.0.0.0 0.0.0.0 + set arpforward enable + set broadcast-forward disable + set bfd global + set icmp-send-redirect enable + set icmp-accept-redirect enable + set reachable-time 30000 + set ips-sniffer-mode disable + set ident-accept disable + set ipmac disable + set status up + set netbios-forward disable + set wins-ip 0.0.0.0 + set type tunnel + set netflow-sampler disable + set sflow-sampler disable + set src-check disable + set sample-rate 2000 + set polling-interval 20 + set sample-direction both + set explicit-web-proxy disable + set explicit-ftp-proxy disable + set proxy-captive-portal disable + set tcp-mss 0 + set inbandwidth 0 + set outbandwidth 0 + set egress-shaping-profile '' + set ingress-shaping-profile '' + set spillover-threshold 0 + set ingress-spillover-threshold 0 + set weight 0 + set external disable + set trunk disable + set description '' + set alias '' + set security-mode none + set ike-saml-server '' + set estimated-upstream-bandwidth 0 + set estimated-downstream-bandwidth 0 + set measured-upstream-bandwidth 0 + set measured-downstream-bandwidth 0 + set bandwidth-measure-time 0 + set monitor-bandwidth disable + set role undefined + set snmp-index 57 + set preserve-session-route disable + set auto-auth-extension-device disable + set ap-discover enable + set switch-controller-igmp-snooping-proxy disable + set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end + config ipv6 + set nd-mode basic + set ip6-address ::/0 + set icmp6-send-redirect enable + set ra-send-mtu enable + set ip6-reachable-time 0 + set ip6-retrans-time 0 + set ip6-hop-limit 0 + set ip6-prefix-mode dhcp6 + set dhcp6-prefix-delegation disable + set dhcp6-information-request disable + end + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' + set dns-server-override enable + set dns-server-protocol cleartext + set wccp disable + next + edit "l2t.scsd" + set vdom "scsd" + set vrf 0 + set distance 5 + set priority 1 + set dhcp-relay-interface-select-method auto + set dhcp-relay-service disable + set ip 0.0.0.0 0.0.0.0 + unset allowaccess + set arpforward enable + set broadcast-forward disable + set bfd global set icmp-send-redirect enable set icmp-accept-redirect enable set reachable-time 30000 @@ -5368,9 +5619,11 @@ config system interface set weight 0 set external disable set trunk disable + set remote-ip 0.0.0.0 0.0.0.0 set description '' - set alias "SSL VPN interface" + set alias '' set security-mode none + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -5378,13 +5631,20 @@ config system interface set bandwidth-measure-time 0 set monitor-bandwidth disable set role undefined - set snmp-index 47 + set snmp-index 58 set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -5401,7 +5661,93 @@ config system interface set autoconf disable set dhcp6-relay-service disable end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' + set dns-server-override enable + set dns-server-protocol cleartext + set wccp disable + next + edit "ssl.scsd" + set vdom "scsd" + set vrf 0 + set distance 5 + set priority 1 + set dhcp-relay-interface-select-method auto + set dhcp-relay-service disable + set ip 0.0.0.0 0.0.0.0 + unset allowaccess + set arpforward enable + set broadcast-forward disable + set bfd global + set reachable-time 30000 + set ips-sniffer-mode disable + set ident-accept disable + set ipmac disable + set status up + set netbios-forward disable + set wins-ip 0.0.0.0 + set type tunnel + set netflow-sampler disable + set sflow-sampler disable + set src-check enable + set sample-rate 2000 + set polling-interval 20 + set sample-direction both + set explicit-web-proxy disable + set explicit-ftp-proxy disable + set proxy-captive-portal disable + set tcp-mss 0 + set inbandwidth 0 + set outbandwidth 0 + set egress-shaping-profile '' + set ingress-shaping-profile '' + set spillover-threshold 0 + set ingress-spillover-threshold 0 + set weight 0 + set external disable + set trunk disable + set description '' + set alias "SSL VPN interface" + set security-mode none + set ike-saml-server '' + set estimated-upstream-bandwidth 0 + set estimated-downstream-bandwidth 0 + set measured-upstream-bandwidth 0 + set measured-downstream-bandwidth 0 + set bandwidth-measure-time 0 + set monitor-bandwidth disable + set role undefined + set snmp-index 45 + set preserve-session-route disable + set auto-auth-extension-device disable + set ap-discover enable + set switch-controller-igmp-snooping-proxy disable + set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end + config ipv6 + set ip6-mode static + set nd-mode basic + set ip6-address ::/0 + unset ip6-allowaccess + set ra-send-mtu enable + set ip6-reachable-time 0 + set ip6-retrans-time 0 + set ip6-hop-limit 0 + set dhcp6-prefix-delegation disable + set dhcp6-information-request disable + set ip6-send-adv disable + set autoconf disable + set dhcp6-relay-service disable + end + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dns-server-override enable set dns-server-protocol cleartext set wccp disable @@ -5449,7 +5795,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -5458,6 +5803,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -5474,11 +5820,19 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -5498,7 +5852,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -5507,10 +5862,10 @@ config system interface set dns-server-override enable set dns-server-protocol cleartext set speed auto - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable next edit "npu0_vlink1" set vdom "root" @@ -5555,7 +5910,6 @@ config system interface set outbandwidth 0 set egress-shaping-profile '' set ingress-shaping-profile '' - set disconnect-threshold 0 set spillover-threshold 0 set ingress-spillover-threshold 0 set weight 0 @@ -5564,6 +5918,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission vdom @@ -5580,11 +5935,19 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -5604,7 +5967,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -5613,10 +5977,10 @@ config system interface set dns-server-override enable set dns-server-protocol cleartext set speed auto - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable next edit "SRIC_BOCES" set vdom "scsd" @@ -5663,6 +6027,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -5674,9 +6039,16 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -5693,12 +6065,13 @@ config system interface set autoconf disable set dhcp6-relay-service disable end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dns-server-override enable set dns-server-protocol cleartext - set mtu-override disable set wccp disable set interface "outside lag" + set mtu-override disable next edit "vpn-042e9903" set vdom "scsd" @@ -5745,6 +6118,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -5756,9 +6130,16 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -5775,13 +6156,14 @@ config system interface set autoconf disable set dhcp6-relay-service disable end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dns-server-override enable set dns-server-protocol cleartext - set mtu-override enable - set mtu 1427 set wccp disable set interface "outside lag" + set mtu-override enable + set mtu 1427 next edit "SCHC" set vdom "scsd" @@ -5828,6 +6210,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -5839,9 +6222,16 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -5858,12 +6248,13 @@ config system interface set autoconf disable set dhcp6-relay-service disable end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dns-server-override enable set dns-server-protocol cleartext - set mtu-override disable set wccp disable set interface "outside lag" + set mtu-override disable next edit "vpn-0fc50345" set vdom "scsd" @@ -5910,6 +6301,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -5921,9 +6313,16 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -5940,13 +6339,14 @@ config system interface set autoconf disable set dhcp6-relay-service disable end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dns-server-override enable set dns-server-protocol cleartext - set mtu-override enable - set mtu 1427 set wccp disable set interface "outside lag" + set mtu-override enable + set mtu 1427 next edit "inside lag" set vdom "scsd" @@ -5998,6 +6398,7 @@ config system interface set description '' set alias "Inside" set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission enable @@ -6014,12 +6415,20 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -6039,7 +6448,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -6047,18 +6457,20 @@ config system interface set padt-retry-timeout 1 set dns-server-override enable set dns-server-protocol cleartext - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable set lacp-mode active - set lacp-ha-slave enable + set lacp-ha-secondary enable set system-id-type auto set lacp-speed slow set min-links 1 set min-links-down operational set algorithm L4 set link-up-delay 50 + set aggregate-type physical + set sw-algorithm default next edit "outside lag" set vdom "scsd" @@ -6110,6 +6522,7 @@ config system interface set description '' set alias "Outside" set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception enable set lldp-transmission enable @@ -6127,12 +6540,20 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -6152,7 +6573,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -6160,18 +6582,20 @@ config system interface set padt-retry-timeout 1 set dns-server-override enable set dns-server-protocol cleartext - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable set lacp-mode active - set lacp-ha-slave enable + set lacp-ha-secondary enable set system-id-type auto set lacp-speed slow set min-links 1 set min-links-down operational set algorithm L4 set link-up-delay 50 + set aggregate-type physical + set sw-algorithm default next edit "city_phones lag" set vdom "scsd" @@ -6223,6 +6647,7 @@ config system interface set description "City Phones" set alias "City_Phones" set security-mode none + set ike-saml-server '' set device-identification disable set lldp-reception vdom set lldp-transmission enable @@ -6239,12 +6664,20 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable + set ip-managed-by-fortiipam inherit-global set switch-controller-mgmt-vlan 4094 set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable set swc-first-create 0 + set eap-supplicant disable set np-qos-profile 0 + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -6264,7 +6697,8 @@ config system interface set dhcp6-relay-service disable end set priority 1 - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dhcp-client-identifier '' set dhcp-renew-time 0 set idle-timeout 0 @@ -6272,18 +6706,20 @@ config system interface set padt-retry-timeout 1 set dns-server-override enable set dns-server-protocol cleartext - set mtu-override disable set wccp disable set drop-overlapped-fragment disable set drop-fragment disable + set mtu-override disable set lacp-mode active - set lacp-ha-slave enable + set lacp-ha-secondary enable set system-id-type auto set lacp-speed slow set min-links 1 set min-links-down operational set algorithm L4 set link-up-delay 50 + set aggregate-type physical + set sw-algorithm default next edit "vpn-0403e61" set vdom "scsd" @@ -6330,6 +6766,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -6341,9 +6778,16 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -6360,13 +6804,14 @@ config system interface set autoconf disable set dhcp6-relay-service disable end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dns-server-override enable set dns-server-protocol cleartext - set mtu-override enable - set mtu 1427 set wccp disable set interface "outside lag" + set mtu-override enable + set mtu 1427 next edit "Highstreet" set vdom "scsd" @@ -6413,6 +6858,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -6424,9 +6870,16 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -6443,13 +6896,14 @@ config system interface set autoconf disable set dhcp6-relay-service disable end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dns-server-override enable set dns-server-protocol cleartext - set mtu-override enable - set mtu 1427 set wccp disable set interface "outside lag" + set mtu-override enable + set mtu 1427 next edit "Highstreet_2" set vdom "scsd" @@ -6496,6 +6950,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -6507,9 +6962,16 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -6526,13 +6988,14 @@ config system interface set autoconf disable set dhcp6-relay-service disable end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dns-server-override enable set dns-server-protocol cleartext - set mtu-override enable - set mtu 1427 set wccp disable set interface "outside lag" + set mtu-override enable + set mtu 1427 next edit "DPS" set vdom "scsd" @@ -6579,6 +7042,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -6590,9 +7054,16 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -6609,12 +7080,13 @@ config system interface set autoconf disable set dhcp6-relay-service disable end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dns-server-override enable set dns-server-protocol cleartext - set mtu-override disable set wccp disable set interface "outside lag" + set mtu-override disable next edit "RAP" set vdom "scsd" @@ -6661,6 +7133,7 @@ config system interface set description '' set alias '' set security-mode none + set ike-saml-server '' set estimated-upstream-bandwidth 0 set estimated-downstream-bandwidth 0 set measured-upstream-bandwidth 0 @@ -6672,9 +7145,16 @@ config system interface set preserve-session-route disable set auto-auth-extension-device disable set ap-discover enable - set ip-managed-by-fortiipam disable set switch-controller-igmp-snooping-proxy disable set switch-controller-igmp-snooping-fast-leave disable + set eap-supplicant disable + config mirroring-filter + set filter-srcip 0.0.0.0 0.0.0.0 + set filter-dstip 0.0.0.0 0.0.0.0 + set filter-sport 0 + set filter-dport 0 + set filter-protocol 0 + end config ipv6 set ip6-mode static set nd-mode basic @@ -6691,12 +7171,13 @@ config system interface set autoconf disable set dhcp6-relay-service disable end - set dhcp-relay-request-all-server disable + set dhcp-relay-source-ip 0.0.0.0 + set dhcp-relay-circuit-id '' set dns-server-override enable set dns-server-protocol cleartext - set mtu-override disable set wccp disable set interface "outside lag" + set mtu-override disable next end config system physical-switch @@ -6709,6 +7190,7 @@ config system virtual-switch end config system password-policy set status disable + set login-lockout-upon-downgrade disable end config system password-policy-guest-admin set status disable @@ -6941,7 +7423,7 @@ config system admin set sms-server fortiguard set sms-phone '' set guest-auth disable - set password ENC SH2MDEFNFDa99Ek1hpleBgiK/Y4kqbUFUwJAsBe8xloCdaOTzZxl3FBk2fFPqo= + set password ENC PB2P0kuXlxq+fAxE7YFWNe4J4LgUEAAMb9LL3y8zzVZh4qGe+Ui6oEvH1L318PasK3lkwtie2s3Ct9jDEE3vNMNga0KZkySK8Ant4oRjuJDDFU= set allow-remove-admin-session enable next edit "jkafta72.admin" @@ -6980,7 +7462,7 @@ config system admin set sms-server fortiguard set sms-phone '' set guest-auth disable - set password ENC SH2+WrS1YeN2wN1qqkANtIzxrsLUfFr9LiJpDb6HCiJyT4X4CBY5YkYHLg5LrY= + set password ENC PB2/w6nufSySeFZ0NlH3RdiLizG70o8bT63PX+WQQu4o78tMYQHMWWHsbr10CMGWAnsI7LInym+HV0ULcFDeA+zCCT7cnMxVIMIV17sWLvUzCQ= set allow-remove-admin-session enable next edit "estein66.admin" @@ -7029,12 +7511,19 @@ config system sso-admin end config system sso-forticloud-admin edit "FortiGateCloud" + set accprofile '' set vdom "root" next edit "4fc9e93dd975@fortigatecloud.com" + set accprofile '' set vdom "root" next end +config system sso-fortigate-cloud-admin +end +config system npu-post + set npu-group-effective-scope 255 +end config system fsso-polling set status enable set listening-port 8000 @@ -7045,13 +7534,14 @@ config system ha set group-name "SCSD_Fortigate" set mode a-p set sync-packet-balance disable - set password ENC zVhFIlBOTPDwZcZr90rn7twe2W4XmBfchgAOKtkF7NosfYROHM0w4Yhv9SYJsEkS6WWDC+XOq92JXrnStDDAbC6vGNdSHegMgpH2fZB7OPicEpM76dmKdcwXCcJPb1FUGs9jxh7jVKXBAONRUI0+gfSUhv8HQLrOAoaYG1ufsayG8aT6PQnuA1LVf4lByrPhl3JOBA== + set password ENC nSTxUFgtvFuuixrcFYSmn7WiNGbZ6Pnhp3Ww5rMEUCe6OLcNHmHpVGhimGOf8tjrx1qH8Egn2HhRV16gMKqDzfLYFiHESAk9d5YgyL2ZFlzgdin8k/dDx0TLcIUtS7w1x26xuNGH+QWWbFpzQV7lzUflxrpVY01IWSDP9oxoGUt2xA41I6gqgA2GfH1/0aPLAf4V9FlmMjY3dkVA set hbdev "port1" 50 "port2" 50 unset session-sync-dev set route-ttl 10 set route-wait 0 set route-hold 10 set multicast-ttl 600 + set evpn-ttl 60 set sync-config enable set encryption disable set authentication disable @@ -7064,8 +7554,9 @@ config system ha set arps-interval 8 set session-pickup disable set link-failed-signal disable - set uninterruptible-upgrade enable + set upgrade-mode uninterruptible set uninterruptible-primary-wait 30 + set standalone-mgmt-vdom disable set ha-mgmt-status disable set ha-eth-type "8890" set hc-eth-type "8891" @@ -7075,13 +7566,15 @@ config system ha set priority 200 unset monitor unset pingserver-monitor-interface - unset vdom - set vcluster2 disable + set vcluster-status disable set ssd-failover disable set memory-compatible-mode disable set memory-based-failover disable set failover-hold-time 0 - set logical-sn disable + set override-wait-time 0 + set pingserver-failover-threshold 0 + set pingserver-secondary-force-reset enable + set pingserver-flip-timeout 60 end config system ha-monitor set monitor-vlan disable @@ -7128,32 +7621,27 @@ config system dns set alt-primary 0.0.0.0 set alt-secondary 0.0.0.0 set log disable + set fqdn-cache-ttl 0 + set fqdn-max-refresh 3600 + set fqdn-min-refresh 60 end config system ddns end config system sflow - set collector-ip 0.0.0.0 - set collector-port 6343 - set source-ip 0.0.0.0 - set interface-select-method auto end config system netflow - set collector-ip 0.0.0.0 - set collector-port 2055 - set source-ip 0.0.0.0 set active-flow-timeout 1800 set inactive-flow-timeout 15 set template-tx-timeout 1800 set template-tx-counter 20 - set interface-select-method auto end config system replacemsg-image edit "logo_fnet" - set image-type gif + set image-type png set image-base64 '' next edit "logo_fguard_wf" - set image-type gif + set image-type png set image-base64 '' next edit "logo_v3_fguard_app" @@ -7233,7 +7721,7 @@ config system replacemsg http "url-block" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -7272,7 +7760,7 @@ config system replacemsg http "url-block" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -7385,7 +7873,7 @@ config system replacemsg http "urlfilter-err" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -7424,7 +7912,7 @@ config system replacemsg http "urlfilter-err" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -7527,7 +8015,7 @@ config system replacemsg http "infcache-block" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -7566,7 +8054,7 @@ config system replacemsg http "infcache-block" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -7669,7 +8157,7 @@ config system replacemsg http "http-contenttypeblock" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -7708,7 +8196,7 @@ config system replacemsg http "http-contenttypeblock" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -7812,7 +8300,7 @@ config system replacemsg http "https-invalid-cert-block" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -7851,7 +8339,7 @@ config system replacemsg http "https-invalid-cert-block" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -7975,7 +8463,7 @@ config system replacemsg http "https-untrusted-cert-block" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -8014,7 +8502,7 @@ config system replacemsg http "https-untrusted-cert-block" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -8138,7 +8626,7 @@ config system replacemsg http "https-blocklisted-cert-block" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -8177,7 +8665,7 @@ config system replacemsg http "https-blocklisted-cert-block" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -8250,6 +8738,152 @@ config system replacemsg http "https-blocklisted-cert-block" set header http set format html end +config system replacemsg http "https-ech-block" + set buffer " + + + + + + + Invalid Connection + +
+
+

%%FORTIGUARD_WF%%

+

The Encrypted ClientHello has been blocked for %%SNI%%

+ + + + + + + + + +
SNI%%SNI%%
Site%%HOSTNAME%%
+
+ +" + set header http + set format html +end config system replacemsg http "switching-protocols-block" set buffer " @@ -8301,7 +8935,7 @@ config system replacemsg http "switching-protocols-block" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -8340,7 +8974,7 @@ config system replacemsg http "switching-protocols-block" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -8437,7 +9071,7 @@ config system replacemsg http "http-antiphish-block" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -8476,7 +9110,7 @@ config system replacemsg http "http-antiphish-block" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -8579,7 +9213,7 @@ config system replacemsg http "videofilter-block" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -8618,7 +9252,7 @@ config system replacemsg http "videofilter-block" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -8726,7 +9360,7 @@ config system replacemsg webproxy "deny" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -8765,7 +9399,7 @@ config system replacemsg webproxy "deny" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -8862,7 +9496,7 @@ config system replacemsg webproxy "user-limit" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -8901,7 +9535,7 @@ config system replacemsg webproxy "user-limit" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -8998,7 +9632,7 @@ config system replacemsg webproxy "auth-challenge" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -9037,7 +9671,7 @@ config system replacemsg webproxy "auth-challenge" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -9134,7 +9768,7 @@ config system replacemsg webproxy "auth-login-fail" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -9173,7 +9807,7 @@ config system replacemsg webproxy "auth-login-fail" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -9272,7 +9906,7 @@ config system replacemsg webproxy "auth-group-info-fail" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -9311,7 +9945,7 @@ config system replacemsg webproxy "auth-group-info-fail" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -9408,7 +10042,7 @@ config system replacemsg webproxy "http-err" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -9447,7 +10081,7 @@ config system replacemsg webproxy "http-err" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -9550,7 +10184,7 @@ config system replacemsg webproxy "auth-ip-blackout" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -9589,7 +10223,7 @@ config system replacemsg webproxy "auth-ip-blackout" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -9635,7 +10269,7 @@ config system replacemsg webproxy "auth-ip-blackout" set header http set format html end -config system replacemsg webproxy "ztna-block" +config system replacemsg webproxy "ztna-invalid-cert" set buffer " @@ -9686,7 +10320,7 @@ config system replacemsg webproxy "ztna-block" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -9701,7 +10335,6 @@ config system replacemsg webproxy "ztna-block" margin: 1em; } table > tbody > tr > td:first-of-type:not([colspan]) { - white-space: nowrap; color: rgba(0,0,0,.5); } table > tbody > tr > td:first-of-type { @@ -9763,16 +10396,2818 @@ config system replacemsg webproxy "ztna-block"
-

ZTNA Access Denied

- - - - -
The page you requested has been blocked by a ZTNA restriction.
+

Invalid ZTNA Certificate

- - + + + + + + + + + + + + + + + +
Details:%%ZTNA_DETAIL_TAG%%Error Code:%%ZTNA_ERROR_CODE%%
Error Message:The page you requested has been blocked because the ZTNA certificate is invalid.
Certificate Information:%%ZTNA_CERT_INFO%%
Request Time:%%ZTNA_REQ_TIME%%
+
+ +" + set header http + set format html +end +config system replacemsg webproxy "ztna-empty-cert" + set buffer " + + + + + + + ZTNA Access Denied + +
+
+

Invalid ZTNA certificate

+ + + + + + + + + + + + + + + + + +
Error Code:%%ZTNA_ERROR_CODE%%
Error Message:The page you requested has been blocked because the ZTNA certificate is empty.
Certificate Information:%%ZTNA_CERT_INFO%%
Request Time:%%ZTNA_REQ_TIME%%
+
+ +" + set header http + set format html +end +config system replacemsg webproxy "ztna-manageable-empty-cert" + set buffer " + + + + + + + ZTNA Access Denied + +
+
+

Invalid ZTNA certificate

+ + + + + + + + + + + + + + + + + +
Error Code:%%ZTNA_ERROR_CODE%%
Error Message:The page you requested has been blocked because the device is manageable but with an empty ZTNA certificate.
Certificate Information:%%ZTNA_CERT_INFO%%
Request Time:%%ZTNA_REQ_TIME%%
+
+ +" + set header http + set format html +end +config system replacemsg webproxy "ztna-no-api-gwy-matched" + set buffer " + + + + + + + ZTNA Access Denied + +
+
+

ZTNA Application Not Found

+ + + + + + + + + + + + + + + + + + + + + +
Error Code:%%ZTNA_ERROR_CODE%%
Error Message:The page you requested has been blocked because no API gateway was matched.
Certificate Information:%%ZTNA_CERT_INFO%%
Device Information:%%ZTNA_DEV_INFO%%
Request Time:%%ZTNA_REQ_TIME%%
+
+ +" + set header http + set format html +end +config system replacemsg webproxy "ztna-cant-find-real-srv" + set buffer " + + + + + + + ZTNA Access Denied + +
+
+

ZTNA Application Not Found

+ + + + + + + + + + + + + + + + + + + + + +
Error Code:%%ZTNA_ERROR_CODE%%
Error Message:The page you requested has been blocked because the real server in the API gateway cannot be found.
Certificate Information:%%ZTNA_CERT_INFO%%
Device Information:%%ZTNA_DEV_INFO%%
Request Time:%%ZTNA_REQ_TIME%%
+
+ +" + set header http + set format html +end +config system replacemsg webproxy "ztna-fqdn-dns-failed" + set buffer " + + + + + + + ZTNA Access Denied + +
+
+

ZTNA Application Not Found

+ + + + + + + + + + + + + + + + + + + + + +
Error Code:%%ZTNA_ERROR_CODE%%
Error Message:The page you requested has been blocked because ZTNA FQDN DNS failed.
Certificate Information:%%ZTNA_CERT_INFO%%
Device Information:%%ZTNA_DEV_INFO%%
Request Time:%%ZTNA_REQ_TIME%%
+
+ +" + set header http + set format html +end +config system replacemsg webproxy "ztna-ssl-bookmark-failed" + set buffer " + + + + + + + ZTNA Access Denied + +
+
+

ZTNA Portal Error

+ + + + + + + + + + + + + + + + + + + + + +
Error Code:%%ZTNA_ERROR_CODE%%
Error Message:The page you requested has been blocked because SSLVPN bookmark address failed.
Certificate Information:%%ZTNA_CERT_INFO%%
Device Information:%%ZTNA_DEV_INFO%%
Request Time:%%ZTNA_REQ_TIME%%
+
+ +" + set header http + set format html +end +config system replacemsg webproxy "ztna-no-policy-matched" + set buffer " + + + + + + + ZTNA Access Denied + +
+
+

ZTNA Policy Denied

+ + + + + + + + + + + + + + + + + +
Error Code:%%ZTNA_ERROR_CODE%%
Error Message:The page you requested has been blocked because no policy was matched.
Device Information:%%ZTNA_DEV_INFO%%
Request Time:%%ZTNA_REQ_TIME%%
+
+ +" + set header http + set format html +end +config system replacemsg webproxy "ztna-matched-deny-policy" + set buffer " + + + + + + + ZTNA Access Denied + +
+
+

ZTNA Policy Denied

+ + + + + + + + + + + + + + + + + +
Error Code:%%ZTNA_ERROR_CODE%%
Error Message:The page you requested has been blocked because a policy with action deny was matched.
Device Information:%%ZTNA_DEV_INFO%%
Request Time:%%ZTNA_REQ_TIME%%
+
+ +" + set header http + set format html +end +config system replacemsg webproxy "ztna-client-cert-revoked" + set buffer " + + + + + + + ZTNA Access Denied + +
+
+

ZTNA Policy Denied

+ + + + + + + + + + + + + + + + + + + + + +
Error Code:%%ZTNA_ERROR_CODE%%
Error Message:The page you requested has been blocked because the client cert has been revoked.
Certificate Information:%%ZTNA_CERT_INFO%%
Device Information:%%ZTNA_DEV_INFO%%
Request Time:%%ZTNA_REQ_TIME%%
+
+ +" + set header http + set format html +end +config system replacemsg webproxy "ztna-denied-by-matched-tags" + set buffer " + + + + + + + ZTNA Access Denied + +
+
+

ZTNA Policy Denied

+ + + + + + + + + + + + + + + + + + + + + + + + + +
Error Code:%%ZTNA_ERROR_CODE%%
Error Message:The page you requested has been blocked because the tags matched a deny policy.
Certificate Information:%%ZTNA_CERT_INFO%%
Device Information:%%ZTNA_DEV_INFO%%
Device Tags:%%ZTNA_DEV_TAGS%%
Request Time:%%ZTNA_REQ_TIME%%
+
+ +" + set header http + set format html +end +config system replacemsg webproxy "ztna-denied-no-matched-tags" + set buffer " + + + + + + + ZTNA Access Denied + +
+
+

ZTNA Policy Denied

+ + + + + + + + + + + + + + + + + + + + + + + + + +
Error Code:%%ZTNA_ERROR_CODE%%
Error Message:The page you requested has been blocked because the tags didn\'t match any policy.
Certificate Information:%%ZTNA_CERT_INFO%%
Device Information:%%ZTNA_DEV_INFO%%
Device Tags:%%ZTNA_DEV_TAGS%%
Request Time:%%ZTNA_REQ_TIME%%
+
+ +" + set header http + set format html +end +config system replacemsg webproxy "ztna-no-dev-info" + set buffer " + + + + + + + ZTNA Access Denied + +
+
+

ZTNA Policy Denied

+ + + + + + + + + + + + + + + + + + + + + +
Error Code:%%ZTNA_ERROR_CODE%%
Error Message:The page you requested has been blocked because no device info was found.
Certificate Information:%%ZTNA_CERT_INFO%%
Device Information:%%ZTNA_DEV_INFO%%
Request Time:%%ZTNA_REQ_TIME%%
+
+ +" + set header http + set format html +end +config system replacemsg webproxy "ztna-dev-is-offline" + set buffer " + + + + + + + ZTNA Access Denied + +
+
+

ZTNA Policy Denied

+ + + + + + + + + + + + + + + + + + + + + +
Error Code:%%ZTNA_ERROR_CODE%%
Error Message:The page you requested has been blocked because the device is offline.
Certificate Information:%%ZTNA_CERT_INFO%%
Device Information:%%ZTNA_DEV_INFO%%
Request Time:%%ZTNA_REQ_TIME%%
+
+ +" + set header http + set format html +end +config system replacemsg webproxy "ztna-dev-is-unmanageable" + set buffer " + + + + + + + ZTNA Access Denied + +
+
+

ZTNA Policy Denied

+ + + + + + + + + + + + + + + + + + + + + +
Error Code:%%ZTNA_ERROR_CODE%%
Error Message:The page you requested has been blocked because the device is unknown or unmanaged.
Certificate Information:%%ZTNA_CERT_INFO%%
Device Information:%%ZTNA_DEV_INFO%%
Request Time:%%ZTNA_REQ_TIME%%
+
+ +" + set header http + set format html +end +config system replacemsg webproxy "ztna-auth-fail" + set buffer " + + + + + + + ZTNA Access Denied + +
+
+

ZTNA Policy Denied

+ + + + + + + + + + + + + + + + + + + + + + + + + +
Error Code:%%ZTNA_ERROR_CODE%%
Error Message:The page you requested has been blocked because authorization failed.
User Name:%%ZTNA_USER_NAME%%
Certificate Information:%%ZTNA_CERT_INFO%%
Device Information:%%ZTNA_DEV_INFO%%
Request Time:%%ZTNA_REQ_TIME%%
+
+ +" + set header http + set format html +end +config system replacemsg webproxy "casb-block" + set buffer " + + + + + + + Blocked by Inline CASB Control + +
+
+

Blocked by Inline CASB Control

+ + + + + + + + + + + + + + + + + +
Error Message:The page you requested has been blocked by inline CASB control.
CASB Profile:%%CASB_PROFILE%%
CASB SaaS Application:%%CASB_SAAS_APP%%
CASB User Activity:%%CASB_USER_ACTIVITY%%
+
+ +" + set header http + set format html +end +config system replacemsg webproxy "swp-empty-cert" + set buffer " + + + + + + + Secure Webproxy Access Denied + +
+
+

Invalid client certificate

+ + + + + + + + + + + + + + + + + +
Error Code:%%SECURE_WEBPROXY_ERROR_CODE%%
Error Message:The page you requested has been blocked because the client certificate is empty.
Certificate Information:%%SECURE_WEBPROXY_CERT_INFO%%
Request Time:%%SECURE_WEBPROXY_REQ_TIME%%
+
+ +" + set header http + set format html +end +config system replacemsg webproxy "swp-manageable-empty-cert" + set buffer " + + + + + + + Secure Webproxy Access Block + +
+
+

Invalid client certificate

+ + + + + + + + + + + + + + + +
Error Code:%%SECURE_WEBPROXY_ERROR_CODE%%
Error Message:The page you requested has been blocked because the device is manageable but with an empty client certificate.
Certificate Information:%%SECURE_WEBPROXY_CERT_INFO%%
Request Time:%%SECURE_WEBPROXY_REQ_TIME%%
@@ -9837,7 +13272,7 @@ config system replacemsg fortiguard-wf "ftgd-block" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -9876,7 +13311,7 @@ config system replacemsg fortiguard-wf "ftgd-block" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -9986,7 +13421,7 @@ config system replacemsg fortiguard-wf "ftgd-ovrd" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -10025,7 +13460,7 @@ config system replacemsg fortiguard-wf "ftgd-ovrd" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -10124,7 +13559,7 @@ config system replacemsg fortiguard-wf "ftgd-quota" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -10163,7 +13598,7 @@ config system replacemsg fortiguard-wf "ftgd-quota" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -10273,7 +13708,7 @@ config system replacemsg fortiguard-wf "ftgd-warning" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -10312,7 +13747,7 @@ config system replacemsg fortiguard-wf "ftgd-warning" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -10394,11 +13829,21 @@ config system replacemsg spam "smtp-spam-helo" set header none set format text end -config system replacemsg spam "smtp-spam-emailblock" +config system replacemsg spam "smtp-spam-emailblock-to" + set buffer "This message has been blocked because mail to this email address is not allowed." + set header none + set format text +end +config system replacemsg spam "smtp-spam-emailblock-from" set buffer "This message has been blocked because mail from this email address is not allowed." set header none set format text end +config system replacemsg spam "smtp-spam-emailblock-subject" + set buffer "This message has been blocked because the subject contains a banned phrase." + set header none + set format text +end config system replacemsg spam "smtp-spam-mimeheader" set buffer "This message has been blocked because it contains an invalid header." set header none @@ -10533,7 +13978,7 @@ config system replacemsg auth "auth-disclaimer-page-1" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -10572,7 +14017,7 @@ config system replacemsg auth "auth-disclaimer-page-1" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -10690,7 +14135,7 @@ config system replacemsg auth "auth-proxy-reject-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -10729,7 +14174,7 @@ config system replacemsg auth "auth-proxy-reject-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -10831,7 +14276,7 @@ config system replacemsg auth "auth-reject-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -10870,7 +14315,7 @@ config system replacemsg auth "auth-reject-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -10974,7 +14419,7 @@ config system replacemsg auth "auth-login-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -11013,7 +14458,7 @@ config system replacemsg auth "auth-login-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -11130,7 +14575,7 @@ config system replacemsg auth "auth-login-failed-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -11169,7 +14614,7 @@ config system replacemsg auth "auth-login-failed-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -11286,7 +14731,7 @@ config system replacemsg auth "auth-token-login-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -11325,7 +14770,7 @@ config system replacemsg auth "auth-token-login-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -11447,7 +14892,7 @@ config system replacemsg auth "auth-token-login-failed-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -11486,7 +14931,7 @@ config system replacemsg auth "auth-token-login-failed-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -11616,7 +15061,7 @@ config system replacemsg auth "auth-challenge-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -11655,7 +15100,7 @@ config system replacemsg auth "auth-challenge-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -11768,7 +15213,7 @@ config system replacemsg auth "auth-keepalive-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -11807,7 +15252,7 @@ config system replacemsg auth "auth-keepalive-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -11852,21 +15297,37 @@ config system replacemsg auth "auth-keepalive-page"

logout

%%QUOTA_TABLE%%

+ + @@ -11925,7 +15386,7 @@ config system replacemsg auth "auth-portal-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -11964,7 +15425,7 @@ config system replacemsg auth "auth-portal-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -12065,7 +15526,7 @@ config system replacemsg auth "auth-password-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -12104,7 +15565,7 @@ config system replacemsg auth "auth-password-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -12150,6 +15611,15 @@ config system replacemsg auth "auth-password-page"

Please set a new one.

+
@@ -12226,7 +15696,7 @@ config system replacemsg auth "auth-fortitoken-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -12265,7 +15735,7 @@ config system replacemsg auth "auth-fortitoken-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -12314,7 +15784,7 @@ config system replacemsg auth "auth-fortitoken-page"
- +

%%EXTRAINFO%%

@@ -12423,7 +15893,7 @@ config system replacemsg auth "auth-next-fortitoken-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -12462,7 +15932,7 @@ config system replacemsg auth "auth-next-fortitoken-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -12575,7 +16045,7 @@ config system replacemsg auth "auth-email-token-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -12614,7 +16084,7 @@ config system replacemsg auth "auth-email-token-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -12726,7 +16196,7 @@ config system replacemsg auth "auth-sms-token-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -12765,7 +16235,7 @@ config system replacemsg auth "auth-sms-token-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -12878,7 +16348,7 @@ config system replacemsg auth "auth-email-harvesting-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -12917,7 +16387,7 @@ config system replacemsg auth "auth-email-harvesting-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -12956,7 +16426,7 @@ config system replacemsg auth "auth-email-harvesting-page"

Terms and Disclaimer Agreement

-
+

You are about to access Internet content that is not under the control of the network access provider. The network access provider is therefore not responsible for any of these sites, their content or their privacy policies. The network access provider and its staff do not endorse nor make any representations about these sites, or any information, software or other products or materials found there, or any results that may be obtained from using them. If you decide to access any Internet content, you do this entirely at your own risk and you are responsible for ensuring that any accessed material does not infringe the laws governing, but not exhaustively covering, copyright, trademarks, pornography, or any other material which is slanderous, defamatory or might cause offence in any other way.

@@ -13037,7 +16507,7 @@ config system replacemsg auth "auth-email-failed-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -13076,7 +16546,7 @@ config system replacemsg auth "auth-email-failed-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -13115,7 +16585,7 @@ config system replacemsg auth "auth-email-failed-page"

Terms and Disclaimer Agreement

- +

You are about to access Internet content that is not under the control of the network access provider. The network access provider is therefore not responsible for any of these sites, their content or their privacy policies. The network access provider and its staff do not endorse nor make any representations about these sites, or any information, software or other products or materials found there, or any results that may be obtained from using them. If you decide to access any Internet content, you do this entirely at your own risk and you are responsible for ensuring that any accessed material does not infringe the laws governing, but not exhaustively covering, copyright, trademarks, pornography, or any other material which is slanderous, defamatory or might cause offence in any other way.

@@ -13196,7 +16666,7 @@ config system replacemsg auth "auth-cert-passwd-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -13235,7 +16705,7 @@ config system replacemsg auth "auth-cert-passwd-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -13368,7 +16838,7 @@ config system replacemsg auth "auth-success-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -13407,7 +16877,7 @@ config system replacemsg auth "auth-success-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -13505,7 +16975,7 @@ config system replacemsg auth "auth-block-notification-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -13544,7 +17014,7 @@ config system replacemsg auth "auth-block-notification-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -13641,7 +17111,7 @@ config system replacemsg auth "auth-quarantine-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -13680,7 +17150,7 @@ config system replacemsg auth "auth-quarantine-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -13788,7 +17258,7 @@ config system replacemsg auth "auth-qtn-reject-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -13827,7 +17297,7 @@ config system replacemsg auth "auth-qtn-reject-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -13931,7 +17401,7 @@ config system replacemsg auth "auth-saml-page" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -13970,7 +17440,7 @@ config system replacemsg auth "auth-saml-page" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -14045,13 +17515,6 @@ config system replacemsg sslvpn "sslvpn-login" - - - - - - - Please Login @@ -14059,16 +17522,18 @@ config system replacemsg sslvpn "sslvpn-login"
-
-
- -
Please Login
+
+
+ \"brand-left\"
-
+
+
+ \"SSL-VPN +
%%SSL_LOGIN%%
-
+
@@ -14085,6 +17550,9 @@ config system replacemsg sslvpn "sslvpn-login"
+
+ \"brand-right\" +
@@ -14096,17 +17564,8 @@ config system replacemsg sslvpn "sslvpn-login" set format html end config system replacemsg sslvpn "sslvpn-header" - set buffer "
- -
-
- %%SSL_STATUS_INFO%% -
- -
- %%SSL_RESPONSIVE_EXPAND%% -
- + set buffer "
+%%SSL_STATUS_INFO%% %%SSL_OPTIONS%% " set header http @@ -14173,7 +17632,7 @@ config system replacemsg sslvpn "sslvpn-provision-user" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -14212,7 +17671,7 @@ config system replacemsg sslvpn "sslvpn-provision-user" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -14266,7 +17725,7 @@ config system replacemsg sslvpn "sslvpn-provision-user"
  • Configure the connection
    FortiClient VPN can configure your connection automatically.
    -
    Click on this link, or scan the QR code below from the FortiClient VPN app.
    +
    Click on this link (%%FTCL_VPN_CONFIG_URL%%), or scan the QR code below from the FortiClient VPN app.
    @@ -14338,7 +17797,7 @@ config system replacemsg nac-quar "nac-quar-virus" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -14377,7 +17836,7 @@ config system replacemsg nac-quar "nac-quar-virus" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -14474,7 +17933,7 @@ config system replacemsg nac-quar "nac-quar-dos" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -14513,7 +17972,7 @@ config system replacemsg nac-quar "nac-quar-dos" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -14610,7 +18069,7 @@ config system replacemsg nac-quar "nac-quar-ips" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -14649,7 +18108,7 @@ config system replacemsg nac-quar "nac-quar-ips" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -14746,7 +18205,7 @@ config system replacemsg nac-quar "nac-quar-dlp" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -14785,7 +18244,7 @@ config system replacemsg nac-quar "nac-quar-dlp" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -14819,12 +18278,12 @@ config system replacemsg nac-quar "nac-quar-dlp" flex-direction: column; } - Data Leak Detected + Data Loss Detected
    -

    Blocked because of data leak

    -

    Your computer has been blocked because of a data leak originating from your system. For more information, contact the system administrator.

    +

    Blocked because of data loss

    +

    Your computer has been blocked because of a data loss originating from your system. For more information, contact the system administrator.

    " @@ -14882,7 +18341,7 @@ config system replacemsg nac-quar "nac-quar-admin" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -14921,7 +18380,7 @@ config system replacemsg nac-quar "nac-quar-admin" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -15018,7 +18477,7 @@ config system replacemsg nac-quar "nac-quar-app" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -15057,7 +18516,7 @@ config system replacemsg nac-quar "nac-quar-app" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -15154,7 +18613,7 @@ config system replacemsg traffic-quota "per-ip-shaper-block" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -15193,7 +18652,7 @@ config system replacemsg traffic-quota "per-ip-shaper-block" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -15291,7 +18750,7 @@ config system replacemsg utm "virus-html" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -15330,7 +18789,7 @@ config system replacemsg utm "virus-html" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -15441,7 +18900,7 @@ config system replacemsg utm "client-virus-html" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -15480,7 +18939,7 @@ config system replacemsg utm "client-virus-html" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -15596,7 +19055,7 @@ config system replacemsg utm "dlp-html" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -15635,7 +19094,7 @@ config system replacemsg utm "dlp-html" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -15674,7 +19133,7 @@ config system replacemsg utm "dlp-html"

    Attention

    -

    The transfer attempt has been blocked because it appears to contain a data leak.

    +

    The transfer attempt has been blocked because it appears to match a data loss prevention profile.

    @@ -15688,7 +19147,7 @@ config system replacemsg utm "dlp-html" set format html end config system replacemsg utm "dlp-text" - set buffer "The transfer attempt has been blocked because it appears to contain a data leak." + set buffer "The transfer attempt has been blocked because it appears to match a data loss prevention profile." set header 8bit set format text end @@ -15743,7 +19202,7 @@ config system replacemsg utm "appblk-html" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -15782,7 +19241,7 @@ config system replacemsg utm "appblk-html" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -15898,7 +19357,7 @@ config system replacemsg utm "ipsblk-html" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -15937,7 +19396,7 @@ config system replacemsg utm "ipsblk-html" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -15994,6 +19453,153 @@ config system replacemsg utm "ipsblk-html" set header http set format html end +config system replacemsg utm "virpatchblk-html" + set buffer " + + + + + + + Virtual Patch Violation + +
    +
    +

    FortiGate Virtual Patch

    +

    Virtual Patch Triggered

    +

    Your attempt to access the Internet resource is blocked by Virtual Patch.

    +
    URL
    + + + + + + + + +
    URL%%PROTOCOL%%://%%URL%%
    Policy%%POLICY_UUID%%
    +
    + +" + set header http + set format html +end config system replacemsg utm "ipsfail-html" set buffer " @@ -16045,7 +19651,7 @@ config system replacemsg utm "ipsfail-html" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -16084,7 +19690,7 @@ config system replacemsg utm "ipsfail-html" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -16198,7 +19804,7 @@ config system replacemsg utm "waf-html" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -16237,7 +19843,7 @@ config system replacemsg utm "waf-html" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -16351,7 +19957,7 @@ config system replacemsg utm "outbreak-prevention-html" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -16390,7 +19996,7 @@ config system replacemsg utm "outbreak-prevention-html" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -16502,7 +20108,7 @@ config system replacemsg utm "external-blocklist-html" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -16541,7 +20147,7 @@ config system replacemsg utm "external-blocklist-html" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -16653,7 +20259,7 @@ config system replacemsg utm "ems-threat-feed-html" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -16692,7 +20298,7 @@ config system replacemsg utm "ems-threat-feed-html" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -16804,7 +20410,7 @@ config system replacemsg utm "file-filter-html" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -16843,7 +20449,7 @@ config system replacemsg utm "file-filter-html" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -16966,7 +20572,7 @@ config system replacemsg utm "archive-block-html" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -17005,7 +20611,7 @@ config system replacemsg utm "archive-block-html" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -17123,7 +20729,7 @@ config system replacemsg utm "banned-word-html" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -17162,7 +20768,7 @@ config system replacemsg utm "banned-word-html" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -17271,7 +20877,7 @@ config system replacemsg utm "block-html" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -17310,7 +20916,7 @@ config system replacemsg utm "block-html" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -17377,7 +20983,7 @@ config system replacemsg utm "decompress-limit-text" set format text end config system replacemsg utm "dlp-subject-text" - set buffer "Data leak detected! Subject: %%SUBJECT%%" + set buffer "Data loss detected! Subject: %%SUBJECT%%" set header 8bit set format text end @@ -17432,7 +21038,7 @@ config system replacemsg utm "file-size-html" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -17471,7 +21077,7 @@ config system replacemsg utm "file-size-html" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -17574,7 +21180,7 @@ config system replacemsg utm "client-file-size-html" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -17613,7 +21219,7 @@ config system replacemsg utm "client-file-size-html" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -17665,6 +21271,447 @@ config system replacemsg utm "client-file-size-html" set header http set format html end +config system replacemsg utm "inline-scan-timeout-html" + set buffer " + + + + + + + Scan Incomplete + +
    +
    +

    Scan Incomplete

    +

    The file \"%%FILE%%\" is still being scanned and will be released once complete. Please try the transfer again in a few minutes.

    + + + + + +
    URL%%PROTOCOL%%://%%URL%%
    +
    + +" + set header http + set format html +end +config system replacemsg utm "inline-scan-timeout-text" + set buffer "The file \"%%FILE%%\" is still being scanned and will be released once complete. Please try the transfer again in a few minutes." + set header 8bit + set format text +end +config system replacemsg utm "inline-scan-error-html" + set buffer " + + + + + + + Scan Unavailable + +
    +
    +

    Scan Unavailable

    +

    The file \"%%FILE%%\" has been blocked due to an inline-scan error.

    + + + + + +
    URL%%PROTOCOL%%://%%URL%%
    +
    + +" + set header http + set format html +end +config system replacemsg utm "inline-scan-error-text" + set buffer "The file \"%%FILE%%\" has been blocked due to an inline-scan error." + set header 8bit + set format text +end +config system replacemsg utm "icap-block-text" + set buffer "The file \"%%FILE%%\" has been blocked by ICAP service." + set header 8bit + set format text +end +config system replacemsg utm "icap-error-text" + set buffer "The file \"%%FILE%%\" has been blocked due to ICAP error." + set header 8bit + set format text +end +config system replacemsg utm "icap-http-error" + set buffer " + + + + + + + ICAP Error + +
    +
    +

    ICAP Error

    +

    An ICAP error was encountered while handling the request.

    +

    %%ICAP_ERR_DESC%%

    +
    + +" + set header http + set format html +end config system replacemsg icap "icap-req-resp" set buffer " @@ -17716,7 +21763,7 @@ config system replacemsg icap "icap-req-resp" } .message-container { height: 500px; - width: 600px; + width: 500px; padding: 0; margin: 10px; } @@ -17755,7 +21802,7 @@ config system replacemsg icap "icap-req-resp" max-width: 100%; display: inline-flex; align-items: baseline; - virtical-align: top; + vertical-align: top; box-sizing: border-box; margin: .3em; } @@ -17854,6 +21901,11 @@ config system snmp sysinfo set trap-high-cpu-threshold 80 set trap-low-memory-threshold 80 set trap-log-full-threshold 90 + set trap-free-memory-threshold 5 + set trap-freeable-memory-threshold 60 + set append-index enable +end +config system snmp mib-view end config system snmp community end @@ -17868,7 +21920,7 @@ config system autoupdate tunneling set address '' set port 0 set username '' - set password ENC EwIJqmckBhsWge4Vr1DJwz0AlfQOcsVyv3qq2GzmW2Tr8GvJ286jIokUR527gRBG7J4L0FooWYyUxEajk5bcPGSd5dgrdoAdRYKLxsObHmDmQlHpGDhRbNh+taB+eAy9r8Se9RzZx0NFwKPVsWyhe9iYmCLiYE2TvF3mm891u2QLc4cWhBRfdd2QpTA11eX2dsQmyg== + set password ENC ZZRA4ZJNNq6I3X2c0EXia7SWH0TTAonH5U5GD2GLxRfsi7GJIcUWx99TXRqM6pJSuUa5KC8aSpvqT2jk1YbFp90GtByO3AfmOpDQQSm5ZgSlrVnQWRl13M7V5D5jelt/qiQLp08iVgvuRItgbwb2Sfwq0QH1w67FkOkFe7tk/OT5uh0CXZLb0L3q50JhFdWhlB2oWFlmMjY3dkVA end config system alias end @@ -17888,6 +21940,8 @@ config system central-management set fmg-update-port 8890 set enc-algorithm high end +config system sdn-proxy +end config system sdn-connector end config firewall wildcard-fqdn custom @@ -24868,10 +28922,299 @@ config firewall internet-service-name set type default set internet-service-id 328080 next + edit "Microsoft-Azure.Connectors" + set type default + set internet-service-id 327980 + next + edit "Microsoft-Azure.Front.Door" + set type default + set internet-service-id 327993 + next + edit "Microsoft-Azure.Service.Bus" + set type default + set internet-service-id 328007 + next + edit "Microsoft-Azure.Microsoft.Defender" + set type default + set internet-service-id 328009 + next + edit "Microsoft-Azure.Resource.Manager" + set type default + set internet-service-id 328013 + next + edit "Microsoft-Azure.Arc.Infrastructure" + set type default + set internet-service-id 328014 + next + edit "Microsoft-Azure.Storage" + set type default + set internet-service-id 328015 + next + edit "Microsoft-Azure.ATP" + set type default + set internet-service-id 328016 + next + edit "Microsoft-Azure.Traffic.Manager" + set type default + set internet-service-id 328017 + next + edit "Microsoft-Azure.Windows.Admin.Center" + set type default + set internet-service-id 328018 + next + edit "Microsoft-Azure.KeyVault" + set type default + set internet-service-id 328021 + next + edit "Microsoft-Azure.Databricks" + set type default + set internet-service-id 328034 + next + edit "Microsoft-Azure.Event.Hub" + set type default + set internet-service-id 328035 + next + edit "Microsoft-Azure.Power.Platform" + set type default + set internet-service-id 328043 + next + edit "Amazon-AWS.EBS" + set type default + set internet-service-id 393470 + next + edit "Amazon-AWS.Cloud9" + set type default + set internet-service-id 393471 + next + edit "Amazon-AWS.DynamoDB" + set type default + set internet-service-id 393472 + next + edit "Amazon-AWS.Route53" + set type default + set internet-service-id 393473 + next + edit "Amazon-AWS.S3" + set type default + set internet-service-id 393474 + next + edit "Amazon-AWS.Kinesis.Video.Streams" + set type default + set internet-service-id 393475 + next + edit "Amazon-AWS.Global.Accelerator" + set type default + set internet-service-id 393476 + next + edit "Amazon-AWS.EC2" + set type default + set internet-service-id 393477 + next + edit "Amazon-AWS.API.Gateway" + set type default + set internet-service-id 393478 + next + edit "Amazon-AWS.Chime.Voice.Connector" + set type default + set internet-service-id 393479 + next + edit "Amazon-AWS.Connect" + set type default + set internet-service-id 393480 + next + edit "Amazon-AWS.CloudFront" + set type default + set internet-service-id 393481 + next + edit "Amazon-AWS.CodeBuild" + set type default + set internet-service-id 393482 + next + edit "Amazon-AWS.Chime.Meetings" + set type default + set internet-service-id 393483 + next + edit "Amazon-AWS.AppFlow" + set type default + set internet-service-id 393484 + next + edit "Salesforce-Hyperforce" + set type default + set internet-service-id 655738 + next + edit "Fortinet-FortiMonitor" + set type default + set internet-service-id 1245558 + next + edit "Tor-Tor.Node" + set type default + set internet-service-id 2818432 + next + edit "OVHcloud-OVH.Telecom" + set type default + set internet-service-id 13828461 + next + edit "Zero.Networks-Zero.Networks" + set type default + set internet-service-id 17891679 + next + edit "EGI-EGI.Hosting.Service" + set type default + set internet-service-id 18022753 + next + edit "ONYPHE-Scanner" + set type default + set internet-service-id 18088102 + next + edit "Proofpoint-Proofpoint" + set type default + set internet-service-id 18153828 + next + edit "Heimdal-Heimdal.Security" + set type default + set internet-service-id 18284902 + next + edit "Yealink-Yealink.Meeting" + set type default + set internet-service-id 18350439 + next + edit "Secomea-Secomea" + set type default + set internet-service-id 18415976 + next + edit "CallTower-CT.Cloud" + set type default + set internet-service-id 18481513 + next + edit "OpenAI-OpenAI.Bot" + set type default + set internet-service-id 18547052 + next + edit "OpenAI-GPT.Actions" + set type default + set internet-service-id 18547073 + next + edit "Alpemix-Alpemix" + set type default + set internet-service-id 18612590 + next + edit "M247-M247.Hosting.Service" + set type default + set internet-service-id 18678127 + next + edit "Quintex-Quintex.Hosting.Service" + set type default + set internet-service-id 18743664 + next + edit "Aeza-Aeza.Hosting.Service" + set type default + set internet-service-id 18809201 + next + edit "Amanah-Amanah.Hosting.Service" + set type default + set internet-service-id 18874738 + next + edit "ByteDance-Lark" + set type default + set internet-service-id 18940275 + next + edit "KnowBe4-KnowBe4" + set type default + set internet-service-id 19005812 + next + edit "Keeper-Keeper.Security" + set type default + set internet-service-id 19071349 + next + edit "NinjaOne-NinjaOne" + set type default + set internet-service-id 19136887 + next + edit "Modat-Scanner" + set type default + set internet-service-id 19202214 + next + edit "Make-Make.Platform" + set type default + set internet-service-id 19267963 + next + edit "Cloudzy-Cloudzy.Hosting.Service" + set type default + set internet-service-id 19333501 + next + edit "Nokia-Deepfield.Genome.Crawler" + set type default + set internet-service-id 19399038 + next + edit "Neat-Neat.Cloud" + set type default + set internet-service-id 19464575 + next + edit "Brightree-Brightree" + set type default + set internet-service-id 19530114 + next + edit "PagerDuty-PagerDuty" + set type default + set internet-service-id 19595651 + next + edit "JFrog-JFrog" + set type default + set internet-service-id 19661188 + next + edit "Tailscale-Tailscale" + set type default + set internet-service-id 19726725 + next + edit "Gamma-Horizon" + set type default + set internet-service-id 19792265 + next + edit "Automox-Automox" + set type default + set internet-service-id 19857802 + next + edit "Pulseway-Pulseway.RMM" + set type default + set internet-service-id 19923339 + next + edit "3xK-3xK.Hosting.Service" + set type default + set internet-service-id 19988876 + next + edit "ASEM-UBIQUITY" + set type default + set internet-service-id 20054413 + next + edit "Dialpad-Dialpad" + set type default + set internet-service-id 20119950 + next + edit "iboss-iboss.Cloud" + set type default + set internet-service-id 20185487 + next + edit "Redstor-Redstor" + set type default + set internet-service-id 20251025 + next + edit "Anthropic-Claude" + set type default + set internet-service-id 20382099 + next + edit "NETLOCK-NETLOCK" + set type default + set internet-service-id 20578711 + next + edit "Aircall-Aircall" + set type default + set internet-service-id 20906400 + next end config firewall internet-service-addition end config firewall internet-service-append + set addr-mode ipv4 set match-port 0 set append-port 0 end @@ -24885,37 +29228,37 @@ config certificate remote end config certificate local edit "Fortinet_CA_SSL" - set password ENC yY3lFAqf+1bSer33nL9rWERELLOE12hVCUf9sy0jqKfTpYmZDgwM4E0YFzCJEA/ox2qRGFyP6R0AXMF01kqLovu7zYn9yp4ijbYGv3zHDbK7EVMrslE8WbgGmpIEA8N0yacY52KxfR4DKroKtNiHASfK4RmzNvaAUbGuodohnI952+LFbTUhm0F3pKxYxXtse+8xHQ== + set password ENC Mi+RkiAZUvVf1O25Mytf5vsVlI5j1bK4BJpdf2MgGLqPMnJgFToOlA+GijA3jXi3snXNppugMscK3+wmi1vCkd7yUH1+mvTaihX3BBXqaeFrGjQr0XKM+CBk0t97tiSs2Q2K8xtcP8HoMl37nFldNI/5Cc6moEwZhdaJUWVNVdis7OyVeu4eRPnG7nPw+IzrcMxjE1lmMjY3dkVA set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates." set private-key "-----BEGIN ENCRYPTED PRIVATE KEY----- -MIIFHDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIEuH2tuBfp9UCAggA -MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECLLmrL/kMKjDBIIEyKYCUG2hhjio -nGgZIPhPujrPOyFCO8Xv5KYkfxwnLeLweTjnWKY9wtVVKOHZFVU8O4WexIIzLS/5 -YpAOKpetpjNXurWevBErwXEXbHFNo7cNzqpbOybtxR0fyyfoIZlsj9XrGcgMZZkM -Lzaoiawe/ztBtEIEzi/RAa+EXyo4Z79E/xuObRVA8V8hROeluDwcHGSD7pyr/Gd3 -pgCkbA/lPcqS2ma533YywDMJ4za6viEHZgk4NRtObPhhU43Weeg/9Di8PffocVoo -A8U/mz14fTco2co5ROn8Abo5tXG7QWqFPbo24cj3WRtDEHTSnkhybodjSiWPqVjB -9wlZes6KNKWtSgagtbztM72T5OEeNe/FuCU9cyzmMCzyD69J/9OfHM5Wvh9RGQBX -Ks7NjRUV/iC89M08s5m7G6x1hVgb3VPVj8jjxxavozNYlN5uiOcpLzr+MeFbwr2C -C9Sc+W0NaDO6x4sOcumMD8qcHoi4Pn8/2QSDD66SyaJ3xOgmhxj1jySR65esnQE5 -gQ0/FKaDQG+xwmNgIE1vF5KMu/tEGkvBwjbpttb8OIYN/BNTrmbPnKUAqObEg92n -Pb2DFjkSFmI10qPAVIsnGLGJkQdcDQfK3v3WkXs8tWPxuHrVygnamH25AtrHK75e -eHDH5st00xrnAKjXfqe+FexUIG3NABvLqUQSEOZVjRkt6wtaZstKLpUonPZiZzt5 -iR6clAwzTkDBA6021QA8KWeaArjA24MbCWqhlTKsCL2Aews26oVxQxiRVbcUBd6y -4tkYa0QkXsGSK+2gdfW1wlszPlaqoDs7cJOl8xNQ60IsAvaE3pYdsw4MIBnaRNz0 -NlCg9AKSyB2/zQD1AF9plKrQ9/IMlSHP3/8TEBrrm4kGgBbZsOW5mE6THFvrcSLM -PI6HMx6NZs2c0kYMIdPT7RdcEfP6fuK4Nx8/UpRZxMWt+xn1fk+ruhLY4hjGLrD7 -/LcBrDdJ0uWKb7v8kKGUK56GTR8r+N5stRQB8knRV6AEFRYajqpqMuOUDjSYhZK7 -15yDe+MwbL9FfK7Wu4DgbnDXSNYjctkgs+9z98QoU05hTUdy3iGDwE7wrRMwksiZ -bJEf3qrtxHiglShJTktGz+f/zACD/GKkTpGvseCSCvxGw+hVkznt88HXe65Hy5JX -zMawXOI6R7ioWPTmOxFMBX+764tPaEASeV+2WlQeapbIo3Y+8c2QRz8fuVYl+ZXE -ZJu3jFHTxvNLiYSJ7ZqD6F6j2FkQKa6FZUzDg2ZKr5K8d+aJrL7ouNYbRD3tHc5X -mr0cW8V+krS8+wkMeAlqwRGSd0+gkwBtxWsaB+GMoV0Uo/GMKqEC/jy0lW+Q7hED -5gva9kgJndUyGt8hu9VElN+oo+EYsAgnm06i1PYnNXxscm3yI9QZvYdEpVDBIcyu -o78gd95VXng3OK0EAEdmWjrr2cCo58qXY1cjM0E+8QgusOR0myOJMCEMf97wKzxd -iwKXBlwAlhRI4s4gBDM2cJhUHtYj1XIjl990uwHTXGvjFMRFdZmJAcGh4ukgOGw8 -k5AG1uOQu7R1DXzsw8XFcAh/3Y1n4rzxkOmSjyqMHelFWvhb+RmF/7TU+Tx0bZ7z -HyJmJM5uNsCfGJ+M6hIreg== +MIIFJDBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQMruTNMhH79B4AqKy +g0DJBgICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIW84xFIDqj1EEggTI +5qxi4Rg3+FOpoHqDYWUrK5Oouwmg6H7bgsOMrL0nRTtV6X38j5Jx0I8nYuqvNj9N +z+XT1A1ngjiuGn3ky5CkGTgrHC1csa7Tqbh5U04kep5r424kuen44CztR7wArsPW +5SzhDBD4HmWPcOtfv3WqtzZn4HW+spkCNPjIiezgWC5M+2GuZIIh5kAgk1mBV4tM +CWsXhzJBL8v2s7JUF/QF3A36Hz+gNIcb7ofti3+5VQuP81gCasXChSvTsJgK0ZiJ +2JLK6d4+BMF7Ubf30sQsbQZUAsPhn9uQA8IAbwJ3ebE61ch9MgW3OipobXnpnt2x +BvR2JUhZqh0eJjJF/cRCJ5Z8Ppyr7P5DsSNi6O2TjXBR12LTftllkCpspWYkYNHC +HIKixvvZQs58Tg8Kdbb/1We8px2B8WriX6ajLcfdTJDdA4Go8yMjawDqUequxsqs +cNJZ+Yde9i1DruoWL89sE3ob8iLM9pizzbH5caGzPKdkzO5lp5HdvdWoTxeNmqoh +6I3NEBPanzVIorAYiIY0RtCsjBf9pRtbEkIZ2V6lSdspSPFj11aLA32IUMI2WVab +oGMIrqq/1+xngubxGHqFhmTzX0iMd4rB0vBLUbRxxC8Kg3WX7niMNzCTNAhcK1wI +immgKKk/DBq8BMtE7YF5glihBrjf+BHewgQXI5bvEo5yAy4axq3YnAdDh0KxJ69P +s0ia+MxB061Aki/rDRXQU+srXVzMT/ikVcqEFs86ibxeP1+zjcZ/FAeqYlgHMu/3 +vCXaWS8Guh6OX9760zhJaJWSOwrs0qgNgge0LHl1g9R1n66ZJyqWAjU8v/T7tpi8 +vc+A4cN1SNnB0MY8s97dufV8oBwtn9KbTOoioUoF0GFSZ4oQGN6TsI2CDZGX8PWL +uwJwQTCGJ7wv1nRwgfm4edr/v+f0J4a073HOd5aModBqTfsOnUR5BWNqdnVuNNJq +6YagjKiku5NkIEqdx4z5pvhntCbsfGzrfaYO1MlgRZ74gKt6kxIowaaifu4IpL/N +rTY4iE6Sklvrm9eTPeciBkeGo4igDCP9k9+Ns+Z2sbC5/k59G/hjTIIEBdl2nDnU +hTlmp8G34ZNMhnT6XGaD5ZZv4S4KuoOXZxZ59XIaylPb6B8eck+oE36MGIShEey+ +I+O8+e0wFxWLi5ivSXATp+iTKkrm+ggR2Sz/ez39rA1D/CFfzNUzqdqfHrJRuFhA +ga/bsHOP9mVZjgkGg+zrjlUljtiDb8CNdFkamezyqMt5aGyrnownwtDKFpXc9OFM +9Dj/I2TvP9/p3WwETXyNsAq6TsdWo3SMyYKJHilIPEmlAxETls0PK41HEDBYivea +OCUofVbc1WRmouSlFtVoeasqDpF8wKpKGgYKjcUBpwfc0jjTIW/Mpc5lBofPxKnX +nZafKQHxB6QFwyW4elklR+9naosDdZDMQI//PQFMemuC5TbQGllF6XCW5J+oikoE +fQm/+rGN6smu0Le+VvQXWgy0DTwA4TaTk45OPoXjqD5byDAnnkT4nFA+iXpNXdcq +nUGJbB4t1dLcOvCe1jEqiS6M5TwpwMSWlNrncYMSjiResUvHgqxdD6m+vOqox7pF +mnyp0x5u0fOmBfK1peSZDXuv4gy5qtoB -----END ENCRYPTED PRIVATE KEY-----" set certificate "-----BEGIN CERTIFICATE----- MIID5jCCAs6gAwIBAgIIB7EKemWPvOQwDQYJKoZIhvcNAQELBQAwgakxCzAJBgNV @@ -24947,37 +29290,37 @@ xXZbFhu6d5a9mB1ykfdnxwlXwL44T273UzikwDl6YJNpJ+F8++WYJmhS set enroll-protocol none next edit "Fortinet_CA_Untrusted" - set password ENC DJWVp2x7rpiwR/46Rqx+eeILlGzXYTQn4BDaTdnxWA/5+S755H32gXJ1vuG43NaEg2U6Oq2V0MzrMOEIKWTatbL9C76+GbZH+gycH2c6KxCyHPRiqBRevyzK6cN3HiFYMpc5PwHvRTnWCpWX7iUO30xhT9agKnNBMM8W211TPhNXX7JwchDcWXmXaLMkIyPALt4nOg== + set password ENC uutHYCAQpAnSXEYO9KZ1uXYtnN+8/dhvH3Ar3s9dvmXDjSWTv1vvEyeRM421GAITL/fuUNIBGWYLvJfFNdURAw4OSmU6TwZGb5DjVLBtVg0+W0xMt7RnhU5kdv/r1glznJ2Z1Wf//q7krT1U5FZPUtTfsktCtffMmf68mcB13XFD2T3JClMr/S7xI+ifn9izFMqznFlmMjY3dkVA set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates." set private-key "-----BEGIN ENCRYPTED PRIVATE KEY----- -MIIFHDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIwl3sKGVsP8ICAggA -MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECLI6BvXPAFSOBIIEyKu9/PnMThPL -NgIUCRy93SRPxptgVewRo3M3sANoDFdslOAA7GsaJliaA9j3u+WWhos9fOqa5aHh -WsZR1WgoIAvmr/rE+xSzXdOruFqFUxWdwvobSRly/JUNsS0bVlpt/TZ0OzydC/ml -KqiMQTY2QD5IxfhmwV0jY8XoZ0aIt+x3degv5twI0RJWNgPfrqEj57KF+i20e3Gp -ADabvs8DWZKqeEpApYdRtZHPDNSFr+sZccRX6UMO+pzcIMW1Y3nffPX76L44guOa -1nx93S9SJNfjMxj8NYv1jz3mdMUpkaNW4AQfvmh+TSNp5dmpcrW9Ec/z1pfKM9vR -eTsqHAa8vghWBup95UnmAAG4PDCcnXZrF48nNVND2f1GcWl2i44tnZbjHuw9W9EZ -Apt2/Bib50/YVvPQ5K6w7ziMB71W3K7lbE8/xIXi16nQ8V48JjyjXTYFRw+lFVd3 -WKqZzRiUWlTnLMwP3xmKOGZqXCjdvOFCfTHQW6Y4eTOmRfu0VEMnygyDD632HOJl -lIqbBUXrdGleC7PGQPLGIxsm3lJWAzNPAvn9vO1gu6b/3bZtFmvP9DGCzKFaQIQI -MCLseWV1pPsrNuxjAii9tGsGLrNJSPoWT4s5oSExd4QFBVVrYbiB3A41c6hzaY+s -ma9rBgClywonUs3PxlOvJLkESTl7NaSAtSZhD7zOreXQGzwz01qIsPHmAntIM3P0 -Skzxx8gnzwXX/MPa+D8pGhEflp+rUuzCJBgdA8ala+U9d62DAEuM7Pgh1/XOmrEt -CpBqQqsSgza+FQy6s7njd9jqxIZDHFdvBMu+U5vu4LjGlfspQXK59TsAI9Cv+pBy -F0CXBmCq72lfZSGIKo1Ezwti5EBPikHQtGXvt/Vl3VdnqF64ID3IAwOg/v6U/c+O -x8pmFFVYtNjyzatE22KM1ZPiwdjDaPYnaQGHl5c3HCwdiBIVL/0ypfZ+ju8Nf9DN -mLC6+DoiBTuu0+W09fkICD9Z49MDqJYZvdlXom5S5Lhwtkj6BduRsG46+PULKLVf -H287qEv9FUcnonbg43gCm7CnlJ7Ei8Kv0Hg7uEctQZAPmf8LMMj57sGKUK6fw/rk -zfHKdMzu8dqVPQosYPjTIkJomJ1tIp/4dh5oChNNDkFt5q1bXcpRQy89GsB/+cBg -EI1zVfaY88+/L+odO5/IFpPFd1YNaCyP0lKAsBV8dGvr78RvPNhLyYOm9k1x9FhH -b6Q0gLWmPweVhLtKEneaXmomFR0L7si5o3YUeK6DNKFbxGlpd3xkY03WET6bAZaR -Sm12wxrOUOm+vXpOTEuYlJW/QEpIksnpFSkLOgk1jtBIGBygCA94XcDjjQOIva79 -esIeKPsTr6QNYF0yCrHgBauhlRmj/mBsK+z1TP052vuTiupG2WDJ2pmUiwF5zLjA -wtQECEvuCe0gYKp5bkf2VM7BW35t2GMSc2kNMjPT+TPgSHtGPmxjGHIPOC4mOmJl -pKF7535jpZTbmoD9PQyUktq6uO2clsKX3ec/4waGl8nN19U4ok2+hoci5AZtjadj -lLYXZZkuxJEwbotoZ2u/aEzmwi2/hWfMsOvgxj3v9lZ9kZpizBorJct/118M5k5C -J92yCNpFWE1ca1rLXMF6gw== +MIIFJDBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQbpG/8TCmZNN0JqN2 +UlJtWAICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIjEcFZpG99kAEggTI +dQkF1uMcxlU7LUN8EqPkr36hMBxLd9sd5+kX96oB4kcsUQIc8fkas8UddUIyWE5z +PtruacFDWgPLr0UCUE67anRBYC+ldv6H8QNc1uF6NPA5qb31vOcjuibIUJmGtIXi +ee8oP5BnhOSEvndIMH+mYRgGcVCB+2F5IpJxMUOgERupAMZDoFhLbmwyajaAxhVN +cw5JrhJgHM9C+7okGXErOT+NN4Zz7oI2QEoBuBEpIJiV64SLuA0ntywuZoX/+jIj +kNHMyFpOHo+ixb/wnNIzmqeHgP10XEdB2kYJqZGIoTpNqujYy9H0IaHWb0lsWmVq +Y3mzmHFfIrFZ3eF14S+fHsoc5aei5Jfxvje6T5gqBUg5Kp5zTS4xCh3WIVeZWE0S +HfFZP5pn9V8boBfiVr/JtwixcFN2WZwxVddsgu5vDh7IDCyIX80VcB6+X8DDzxcp +zCL6SWdT2ux1gr9E6iooKOEGiz0y1BBGun5p8OXVdkwuYVB/qKAdbu0qkcZSzDAM +jHBGT7d5QAUhJhGBw61ECZKLuBUjblcrY3xeYUzLf38uRgKA+tHuSZ4btq5UPUqw +iMw0B4B16JEaKidWzrmz3ixizcUQYWIHnqU23zWCpZthiNLfnIPu+1pTmFeyz+gR +LLaDh+izzKTrm+OALIPWjZUw00dHlM/gBihB2GGw6rvBMRDSTGT6F69S58D6RAuv ++pX9Ft+H2CN5AbWeqiL60UeecME6KjrrA9HniEUJBaHZ4o7uEi6/pKbq2lm2qhP2 +2kocPCy/fLEnlp5/19ZD+1hmPNzEjcvxodV46eBxrrw+TneBD3dlVA9tzCNhrTii +JmVnWX5045XWo5kmm5Nrb1pHb32NEHjG30CTpWA0sY84tWQvt+at48yiMf5EyHwH +eIf+IozkTnpCrXjanfwbR0W3+Hf+v49F1Ryx3M5rpjYFxMUmzf1JIhuumqhTAZ8k +zgqIPTlKeJADEBnuqMQdx41w5VWIUsuRIe0/l8tUeW3+43ZP/BfF0MnrtOdRI3Dy +Oz7zO0h35+dIweFlZV6vNk4UalKCtnAX14GvdhMbsZsHGBNidORSvCJDEq91oEwJ +yRA7QDWi1C/rQ4JS15TMiEVuIfScHFDV/1T9wPZc7Tpjbcmcl/UxynNoGK0st4uh +5AlVM51t3q/bSZnYKD6UuREYW+Mcw8kOlcrZzECGdi+rRE3z2x1iMvuHkMe/Cot1 +XP/0L0EQjQ5+p+m73lN/W8btT+FdJ18xWLacSPPNwQSGzgJ1xgUQ5LV1HC4nLiE7 +q04NXX1kNRL7H3bvOwuX1cXAyqUbGILwbsjeJbF8zu4mo2Mo+iSe3M4DzwApmzWD +kqjFPY1KDM7ga6xVDZoPcDDkK+RBt7yRz6PiE8/34I6iH+/5IAy+0nGWCmblCsvO +i4spO7bIk/jVIPypNxGiWah8MYZ9XJ1SIohlHASaCD1wyyJbUZiqFt67FKUU2aBu +b7CrjHca+nzP7QzT4z18GP5IBTE0nODmZZzGZFI9tbAJjVXnJA4YjWwFwwvQy1I6 +WwAAJm4D1uhnzkarO42kdmYYjCOaCfWpOSSHBuz1UHWRktR6YwVdMM7ey3KS/ALs +X0/dgLlEH8Uff8aLWUaipPiwHLf6Ood/ -----END ENCRYPTED PRIVATE KEY-----" set certificate "-----BEGIN CERTIFICATE----- MIID8DCCAtigAwIBAgIIJJ5p1RsocBEwDQYJKoZIhvcNAQELBQAwga4xCzAJBgNV @@ -25010,37 +29353,37 @@ q0ik2r7sts/s3V+z8yMore1n8FcMX7ADoGjCSNHe5gOq/kThWWVR2EHwkDTnraYp set enroll-protocol none next edit "Fortinet_SSL" - set password ENC LK4XUDuuFIVhWIVLihDhOEp1h3haWeej3YY9KPeDz/G996glDiwm/0vfC2llwysL+jNc8XF6G3EsW76/bh2wNzApp9sllTRYhT75l0eZtGqehlN1Faw01H3fzoSc1f/FeIR2hiLYwsqUlDHvEKRQQiMXu4c1nVTIuUDCm54Y9zF1+xEEww7/mpqLq+424yPiZFFAuA== + set password ENC PxJUTb0utZYYh79LUvAPkDwkg7prxnsYzmnQajuFRMS3E5AiFN3ZPtax3m23GwMVnVRZdjJudMsScSx2KlByAlJJG7hvINQPHk2Gp/xkoj8ok5vmYqlw0SaX8+0iOKNMUkRZtr1vYFS9jcP1mOFSEl8DIUU5MqLZmI9hxfiM/krSItgIk6ypZBHq6E8jQGJKX1l7PFlmMjY3dkVA set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. " set private-key "-----BEGIN ENCRYPTED PRIVATE KEY----- -MIIFHDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQI6+DvmLRD6PICAggA -MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECIIIDJA1o0T1BIIEyGhwwDuhTXsA -v1LoXEoRCYYnVtPKNl0qoskt+PxsFxAb47ZmJJloZEMdXvFJ4adBQUutzd718YCp -fbpegLSwG0Z37/si5V0Ro/EatEuzTBP2X+QInsa/pMYqg5boPHUojGhlryX2IhNE -3BuxYjfR3wt0mQJKU8CXy54PYmHs9F0KNwWVwCRLWqKAxV+m1gg8LzCei4DUaVa6 -U72yVoCfCvOtBY1uxj0dQJ0IFlqc1MzWslcyP2fqEhLaPpcTuk8/jI4cUJsPI4rv -iFhd8rpThxpBmaqHLhLDzmsDGfle2MhlAsdRKdjGv06YIkDsx+DB5PD6rSNiHL0L -zooF5IdmgJJNAzPOynEosZTUTZoe7h9WiZVNH7Tgh+KMltCMPMj4+ooDJm1R9buH -oHufDV2vxXx5fU+HNK4oPsFT1wtjry1RuN8vg+kezl5J7LddzIZ75NLt9WAQmhC1 -3tstAyAHoOSqwQyuybGDW4bhRQ+P95chrCQzjE/qjRfE2uMJxV0IfeDvif8Ny6Qx -Pi6KJ93e0AuG1d9E+VMFQTSOGSuK19S4Te81WP5npklxH7hNLeHGJhBSAWHeheXW -scNuNCw/OEktnjHxwvUGPyjyussYmIhOOLjJjVKjP0IU1BOvC7xpDmcF2GpP6cRW -psr/kzlUbI7zBVNFAni/P2i3aLhLYqtAgxENxDQPVa9P9dc35fnKlFQzdQtUKxv7 -WpbNa73dNeav644+EbeZhbwd0kKMuFUex1l5AHuX0hbiq075WBvyIg9UpLGtJR8O -krODAfEmm2PGu8U514U+O5dheugyfhvlQg64wMdtjjLz6h2jAGzsjMGdWW2lz6Nv -YmUO9eFdsjfRSvWFutY04YObe53srxr8yVuvY4O3xT73LUoiHlexrB8KFncV3Bry -pSX0Qg1VdujhqXAU/Vet1X2fBy/Ed/A+ECeiWiZ8BpEa+rqSgdTdYcg2lCuLPJA8 -oO7PiPAIZ+hC3Prycn8xFZKNNPdrljSMJEklv8/yDCbuFiI3iWx8kx/XC908Pgs6 -uqL31X6h9Fq5dPZSSon2Uc181ztc7fPK4EHuecolw8Aw6tVnZvwgcM1XEUA38t/9 -9Lsko9mmkiisvVuRDTCgngHtumVz+E0b8rjg3fCDuhCC5urPusDhrGprdXBorU1u -KTtA+i7cTOsRccjNaGc2UholKxiL5fmwRciUAW4+D+t22IiqSxIg+O3BQIJ2EYqm -0Ns2uxomYRPSxa1YV5OBe3oC4xAmoe83lbQdizD92rVpMTKMfipZhJQkCCC9F43t -J4g8mjQJIDBGNqbhe8349ixDYiTAMDP8vRll5WTuz7Cb4R7wgQiQmYGR/l4Sifup -ul7zZ2O/W5lShI9BQAXN11BSZu4zVhHSCiYpw6RH9vyhhVS/HxgWQHvW6HZsrSU7 -+FA/RjsKbP4KT0dXyLbLnKpYit47hzdMZXL3+QBkOj37IPTAkGT46JYvGkStM4VJ -edWGyvlxUQAn1mheADJfsBeR8mCEIHWzI2QM0KbDG4zEBsJrmURj8xFM455kyQrX -sf7eWdPOjnxi0a8xCyTlfl2CBUiMsxiLR0jh0jjg/z0pbifJws1VX8FIUH8u25O5 -B6zYkMZSTat8TnSb8KnF5g== +MIIFJDBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQXMYbkaixx86enTep +MIWCwQICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQI15kDYq1F8TQEggTI +TzBr3bK8xJ60minHDeM9cEK0zbhStIqiUjd09dGHM4qTtMlb+ONW7aiaOI8FWr5U +0cQyFI5pX9hBJ5pHXnef5WiPqzwxfwog7BhFE1RQobZFrblasFgPLOiX9+ABbR5c +dq7oIwGHSGiCqB/xdlQ4iy+Y/FjtCK6SP35IPwUc0M8E7qsMR7TPw+asMhG67yco +XgaX+7rR44SYbU/s4MG0m2dm6yR1UM4zczQxZ82todW/8AOkL1lA2YlFw1Zx0M2u +qEiqIy7wN/4HC5yNjfYve4pFjxNoY4oQjpYTO9NviYWF5z6XJwyzd283jrZynS5z +OYUr+hgrNJwlwHQTgS7AqJJhTXk81XaaLW8qgWD1DB+hwdeuhv39TxkYmGYtoADG +687TvViAh6PboxxPP1sQo8nUpFq5ZA8yPikL1dppemnuo7//PVV780l3OJwa3+23 +u2AwnZuWrN7oEAL1uaA9EVfh0pk7LoD5cGFNVlekO5YIb/iXlScNb6uoCoBNUL+i +PhspmHt5Ejei9UekOJJwKnMFGc7BmhRj5m9iZxnd/5SC9dFecCTyLSOnisotszdD +OnSfS1XDtxvWX2/Iiqk9Rb3pYOZH46pYk2ilMbvOxNod6YfjElX01c5bV5qy/D0/ +fJ1dlwEiZG3Ip3gUCrXGpKIqWI4E8UvD977h4mTGxvtB6CRtvkM9V2OS+BUj+lAb +GuW7qb/C0fr5ILsTwDrYZuoOUNi5bQtgSjVdHiSsb3DwwGSmbTAjamlS9ua31BUa +VtAzAWmJw89AamgT6RBizFWPOMVm4o49nBnS+C1egckLaY26X1Zh2YOGznuff3xA +5NRiFgr6+56agrxkS1rG7BYNWhyh1bVkRkBisLwiMGjZ2YejWjI+uZjuB1pRoq17 +qJWegBkoJSsKURVuNY1L9PU1WUJiAdj8auiZgZyzYtEzPLJN/xVzXXCqN38k6SrD +MQ1o0m1E4+1brupCUeMYN67S0gKZUcxCNpput0Q1zCcsRdpzX5hI9Ixh8B9QuDua +9IUMyNqAQPEvVs4E8aNA7lsLB19o49U3vgP++pgBmMqSW1gmjQ4ATEBG5qFpbI2V +i3kkEmNFBLKw0zuiVgJsNPFwBoFnaAuGYG/Rgrj+glxGU6oorR87sa+q2lheLAMp +UDmw0U8whwM79mcraP5JionRaVwRP56naf9Lryp+UZl8EnhGkQ21hEvudGkvbj9q +/qZStGzWIuHoKD6fWzo9nIrrMk68YFqP66cGhMpOMKeWu8/Y8YIMAsIrfV41uBKm +fw6+JvM0T7P/fbTolKdNJeIkWsQcF3iy6cXUvm5Cc/7PoGoDyjIQP4smSLVDtX2w +Szns6ly54jM/jUiheWLKMC5DzKJl4y3OdWsdWW5RXLiwrI4NoRZHzADUV1IRBMm6 +wAiOi7hZGBoT9rUd5bLl6ha3Kt+lxb6mHZvg/Io19dsBWDsh1GkSFkzpxImuy4hM +/mtcfAwKhLPZz8vL6W1joD7AVhFFapljR8oeJkiGri9jQFs17x67skHBLfpBcFUq +9h9iiySqjUBmrMudeE47HKuye8MczN5i9KuvTL/wVVWISzXXtoSmxFkG+q/OxFXW +y6Wx5qNoxuv1q0cRCb4EWzuS6DXbR0Vr -----END ENCRYPTED PRIVATE KEY-----" set certificate "-----BEGIN CERTIFICATE----- MIID4DCCAsigAwIBAgIIDpscz/0cckAwDQYJKoZIhvcNAQELBQAwgZ0xCzAJBgNV @@ -25071,44 +29414,141 @@ GIkjH1RQNZqgIWm9oqyVE6p2U5ZWpVghjAgxibuofpuddUTG set ike-localid-type asn1dn set enroll-protocol none next - edit "Fortinet_SSL_RSA1024" - set password ENC Ol7lJgj/pb4oO+c+1NyZ9y+5Uq3XFgmiRKcLQktMkdGUL9sT1vWhEcug+ZBfjNRkNT2QwFRreebIigQMmuLFpcbnSuSo0tHtI4cz+lAb9z2SOyNBYNdCO0Kg5r9jvUnMcDnzqzI4bxU0qELeNg9KF1VQrMzxOwLrtbYHIti3yEUP3n34/jFiCFhlTA/FU0tqJWFhuA== - set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. " + edit "Fortinet_GUI_Server" + set password ENC voDnRaioy9I6igQspcVfIIDEzHqO4g9LRV9JjOfO3fNpzp5CgTTvl6iC7ER3jSkTwGyvvmhHcAZL/+9KkO1SLRc9UkZyDj5v/jRALVHFxOclAnyzm/0lECk6YQ8GsskhObFRmyDqaFtQG1bBY8lztl4+cjOS/zDTsvgb0/oIz9jCQ2Hznl/oLy2g0E0nItkEFPjMs1lmMjY3dkVA + set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates." set private-key "-----BEGIN ENCRYPTED PRIVATE KEY----- -MIIC1DBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQI4GfUXOUIcikCAggA -MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECBBag9TfWHmcBIICgEyoV8BFGndR -TVOtymz1ajOTIEj5RrFiD8DOOz8bZfjVUW1cpGcJNJMLhFtWVKB0Og60RdLHZKz8 -eO2mCO1YqoFgat/jpNCkU2tf52sJA2MhLkWxX/BKfOA6ozp9VY0fZT57a7BJPBl+ -GUVdjqlTyBNow5buDK0D2l3jnP3kkBXEOPDw23Jt8IcmRuMxwPzAIWq+gtpm8J81 -5nlPFRhOvSxIQZ13NHea6oWu8rFnQTqTXv4E53i5kv7l02RBteNGh641aqx1AxPW -MQ1qUD5KXzZXNQ2suSycAjfZ4q+n6jyONo4dIn0xXjUADU0EOZKXD0LlYW98/7vz -Y7nIZtVZ/q/8KuxG0Tqyx1zJeW81J60esX/eRLRkYCoQj6CZgTZqmW9UUZjBux9Y -BT6qcWudwO2tU00lB8MDPrBvlsMn17QzYTeEF8uX1GJQNSAaqHtKzJMQe4B2+MIy -8htBVZ4G5Rc2NQ77nfDLIxMVYVbuZGDCTR9FBm6MWygYtoIaRT/dcjFEgT9HSJwC -/0Pq760uaHYmFYOnKuDqubML6N5At0mGrZjsxJeCqJ/TNVMXo26ZVYuwT72xrlzN -ONNce2LiXejAZjwHPyacHNAOLQBjLpDNB5SiT2OPbD62dJFn2rPAx7Jim2FB0c/H -OVyMozwFrjWbmTNiFNcH2oKjuZOqMHr7qoHGyiY9xiXFeQjtsCLhcZFQMgaj8GME -F6Zdo2JjdeBS6AjjGOTTlMMA4rRoT2o4wy4YAqJUF66u2XlzdcYdBB3kNRbi1ayP -n3TmWLao7qcVOqAp6TSY+tFCCHMcl6CjEJOR6qAlx9IY7ItOThaajAtE86cHnq7/ -G0L+/qWbs6M= +MIIJpDBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQiix+G49lzzNidfpz ++VSZUwICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIqnNkD4mYmegEgglI +jCFnGP2ACTrUEyau9bdTsR7eIN4Md7GS6hI5G2vdDkIBX0k8v26oggo++eyoBhEb +0kekN4zwTNYiiFYi2UPYniDfF6aosKGtitS9uKGkhNViyL9TorUb/uTMvpDvtJlh +R82EcbyEJLFekMIXDzg8UuPolHDUCrBFHH1B5t7/T1zidFQsA19U3imwErhPjkPQ +9hLrY8z4U/y6d+HppTfFR5V1yljKjcktgiollvxe3IhjUz8/My77cUMKHPoZaaDE +DcrwTpDgTSd5f3J8AHmVx+qJAoscNBMnlxL1TtkpLwkNPMPcyVdB1Jw+qAPTxkDP +RgIkO8CQqfv06CDUCvf0UchomRWQ63pfNz5xHIu3AwJ1lOsRJE7RUVjlT+NlQmTS +rJ0QAnag82yGW+qjgBwcbHRZStT7+qa4HbLSGLEwnN9CkLQ4xFaRvnEX5eP/mYkm +IfFJXSiL2GL+wNnU0asJbfX06jt49FSSKbHLBMqjiRjQkTXCAczs589Sql2aopsR +FGiPveyjGZQ1z/UP0gWquVA6ObfDGCYwgi5f9grean6fZEDZ8ALE/rJPbPxkehkB +MnBZDQB9IXdt6rtu5i3EO6D4xT5bDhxvb0JpY8LhSvnHxlnzJCLRlapYBx9en/r+ +3+WG6CXBm9IREUs3eReAwM0UZI6uBWbUEWvwQvtNKC9KyNu+p9dGYloLJQIOvAnr +9XT8K4H/b/P/h6nNKvV9Ch3HQiRUfSIr0i49i/d4XGkGzDNIiomIr7N1QA7ie4Pw +pAOisJH/EiH+ERY/SpXfQMaGKVHiEOXuP8n++6SjUoY6/jWkP4Q3cg+vN5v0XCnK +pXJ/qJrOAbij8l7ldAARxf2jkW3ilOMbP8Shal/yPECdJPz2KXTNrHeHWZ7fN5KL +P/35jaeAD9K64zuyoL1Ktr2Le2DvERNV3fCoKCuRA0vbKDudhoxIP2MLrut951Az +FA4WGTE/OT0plZFY10J8xBhkw94B7SPMiOtP1D2cgafKSQgWbQ8jCqWhO4jVzpKR +z+d+YDRAc+TkHV085JyISwWqxGLAy0nPa5+yB9EpLGztydrQit/qKFgerNn5ssKA +MfHKqocVDQ4Q6jGXWSztNmOlqwIzMhIHc9A+KOGKkzlCPw9YKyD6lEiGcnwoLhbL +kKrpUHDgigfBcaLvxg51ZPVHLfRkTNs/JJnHqu5wGCvLdjNl3aYQ2Yo4NHlbiFVF +k5spRfMcfG0xNbvmBoYWAJ9M/boe3cYaPVNHp1u9+zz01qNP+PMExVmkB+9onSDP +7+LVmXA0IuvykyRFIQKfKpw7EEIacCPdlM4eyVnhyviDNa8mYJTQg51XhgmYT10i +U2MNg8vLBKPrhGQeGE90/3WNvDC5Cx8TNKskYxAvPVAdMaCaABCUHKKNHL31Wcmo +bTxwapoE6q8dQSr4T1u3/8YcRn37ARWuZ8ChjV3h0+ivVzy0+ktJ5fNubXWi5QLw +GakWsmv8rNQCKtNklEfRZG7mGBy7a65yJa6LUlShGcDObhWmRAguens97uRqFS7z +zisSNfKoTKQSOL8UDVre4oLInsK9Vfe+UbOm6woAJ5y5900b5q4b+ktf//sJFe+5 +usNMZV3dUU3mxtEnV/KDbn/7q8Ai+8tFKH9Iz+dzdJEsC09L8aFfXchyvS+d6PYi +iKg1f48FKZnSXwNEjkUqpH538c1I4yIAXECJqhrk//lpHU3/qtr4dvqi4eqYYAAY +JlKaFSJ0DSbejDY9dSwbLHRSxeIJ5q+IIi44plyHDOy+OLSAfzeybsEe5S1OlxS/ +IMNbUOD/w0p6tRrvGj0OmpQl6GWS1ixbabv8XJAPV8d948Stfzli2NOQ4u6nnRFX +qs/HcUKeNPpdJavNrizLntnFnM1J4JhXCfd+Cy8xXe8n4d1Qd+6KQwBYRgQKikaT +NDPNmXaY0EmaMPxs3+94CV7s75uvFlcj8c7y8GjZyF7mXGBlkzFBS1+X/9tRIIDA +FYV3kRKOvYVIhPLXyg2jYmb7pmQT3Hd/LjPH6bLbNC4hyty3IOfC1uZ4UJLIzlVE +D3cMA7G2937wkIFM5M+nM9C7vb4ivjx9uaoTBUPuAzLJrxoRK62rZf14253Nj5tL +DEAbAkPXtxPimX0trNtqAxmLbyaXdnSmcWiOX10x/WR73Y2Yc1uZ40kVA+ZxfAfY +JyFLJwVNaoH5eBWp6hrjphVF4eoKoq0qzZey9jPzXB6i+lfWBWkU5Gc2n5uZTgdX +w/006VWq4dOZY2ceV+dtiNYhulw2UdewRgCJsm9kDWcfiXi3kU0y7EE5pmdJHVl9 +q/F+7AkF4TOGcoyaFKTI2BpxSr/OKJlBm0uErMhcdFduTEt+7SqOnhB0u7HRAKO2 +BhqkqxGTwtZ9+1VDdVFPrFioszpVly1AbK+dG4Z9D12Ug47kzk+JqjppdKep1ZEQ +goqMbO5SYDTp3P5PowRiSXbXc2eiMUIwHQ+hndjKNWyf0x+L5G/Wl2Yj1NxqJ8P0 +rOR48jr0zEC2brWhHEXxjI2s7qUU7wEFU3OZLRClwR+LULsSBMr+FVF2VgD/rgvY +yvoRI1c0zCEdLjePVSLX6yHTTOkRk/ye0fbNEBAc2KQm6+v55JRfhSmuTNGwzMum +R8SdvPjI4/R2it2BsdMrOsiXWBTIy8lyE4vTyNkkxN+1C+41J0NAtYJBWddgAVN2 +9YrSdfIC64XHwyrb3afWOiLWBAxR3Eb/8JubENn9RyFTAMzH+1P3thE6dFS/t07e +OBqo61q6hPMOKj3U8TZT5axbifutLyFbCZsBzVl4c1bDJq+OLHIGakP1vjk0/PAi +nkn22Ws+gihOqkJjwQqaNjOBZI7cJ+PaeI55uNEGg2pzSNOeZtDVRaILi1/4hy1Z +io5i+KhJAsFnrixDGZWy3wuFkEh7aLBYsAlSqPkzWb/cJhmxTmAEupcAOtw9dD2f +h+oIHhazf71FZ/UrOZa94ZboBkwOF/54CZDWYQgEm3wl5UaydCP/uW4wQpJ2Mvq/ +7LgV1i1DfXfsdaBtKNpd7tc8jXVWvf2Z9R66tAVwx8wmrkYQb7nGsPpy95Y4uQIL +i6iXbv4NYdtBzCa2e6r7D4uUrZ6SmBknAqAmDihrXspelMVVFcEKOZ11GudGrzYy +bYMRsVb9Pzpvs42imntxLQQP9riRGWt4 -----END ENCRYPTED PRIVATE KEY-----" set certificate "-----BEGIN CERTIFICATE----- -MIIC2zCCAkSgAwIBAgIIYcPBSSh9j04wDQYJKoZIhvcNAQELBQAwgZ0xCzAJBgNV +MIIF2zCCBMOgAwIBAgIIJLn0LcCD9NkwDQYJKoZIhvcNAQELBQAwgakxCzAJBgNV +BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx +ETAPBgNVBAoMCEZvcnRpbmV0MR4wHAYDVQQLDBVDZXJ0aWZpY2F0ZSBBdXRob3Jp +dHkxGTAXBgNVBAMMEEYySzYxRlRLMjE5MDAzMzQxIzAhBgkqhkiG9w0BCQEWFHN1 +cHBvcnRAZm9ydGluZXQuY29tMB4XDTI1MTExNDAxMTM0MVoXDTI4MDIxNzAxMTM0 +MVowdjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcM +CVN1bm55dmFsZTEWMBQGA1UECgwNRm9ydGluZXQgTHRkLjESMBAGA1UECwwJRm9y +dGlHYXRlMRIwEAYDVQQDDAlGb3J0aUdhdGUwggIiMA0GCSqGSIb3DQEBAQUAA4IC +DwAwggIKAoICAQDVH0R8Epzt94v4RQuzrMxCHn/p12MUDeBKw2F0oi7T526SiEBa ++xVCro8wVP+BLujYwN3HMWzUs5emKnOU5j814QW91yq1UVxpmmO4WoSAhYBbPZ5a +6qQaQ/1RKVp8QedF6axtiB710Za1OXPTLpDYFvt1fYxrIWbYQ3QWb4La5xTjLLHE +5qCslcE6d25SAzE4VWSLBTBi/hNAkO8yLK23b93XraSpDO5xyAu93yBiq2AP6EoH +Mi9w1+xSyBd6gq6Pn7Lb+DIwpI1G5cTR+4eWyKEciWr7neKvP98H0eRmYaEOhGts +B+/v4+99iCqdMy+X+n1HG6cOWorod4Ck8lfttQA9JjvZ9S6LJSaFJfazttkaJ6+d +VVfD8JnHTQIRUIwT0GYpCpmsNjvhFCywyjzS51tY+UF+qdogpnJZb1oh5beGi5L0 +cszV+1tmmmFYDfaU6OdN0LoLazkLLqBTjDTgZm4GZCUlwVMqRCCcYgrhr6JH3Url +kBNrFEi2Bcp2bw18iiyGgsMkWlkHZTeQe3bZg5yxxoTxGp14vVxxz0wwfmoPvuaT +kC4eLNFMFG+VRzBy70CedC1QmSgNvAUw2EUSSrlumMZcXVyK8dBNG/TTpJ0h1qf2 +HYDqIkQAbNis2ImNQDQ4Xic8qaXOqXWOIN+celx2OTHX2qS2JkSnsFB7XwIDAQAB +o4IBNzCCATMwCQYDVR0TBAIwADATBgNVHSUEDDAKBggrBgEFBQcDATALBgNVHQ8E +BAMCB4AwHQYDVR0OBBYEFHQC3INjDa3Sw6SsBNc/zCyBfIhqMIHHBgNVHSMEgb8w +gbyhga+kgawwgakxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIw +EAYDVQQHDAlTdW5ueXZhbGUxETAPBgNVBAoMCEZvcnRpbmV0MR4wHAYDVQQLDBVD +ZXJ0aWZpY2F0ZSBBdXRob3JpdHkxGTAXBgNVBAMMEEYySzYxRlRLMjE5MDAzMzQx +IzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQuY29tgggHsQp6ZY+85DAb +BgNVHREEFDAShwTAqJMBhwTAqAHxhwTAqMgBMA0GCSqGSIb3DQEBCwUAA4IBAQCI +RnebU56CiT1j9AS/7/wXYY2aZMIwLwCZmF3W7lL2zfYj9u0QAnf3Uk5kH7mAP5nl +BKoQGRIxNvWWLPEeqeJnt3qvakdsF2wbaiodHOUIJoAYzlnfIhWDbeyaun7Ae4z7 +4O8azQzox/x1i+/gKxILmNjpx++MnxsY7D/CdEnjrOZyf26gnPn5GJB5/+4PnwI9 +DCOoRcujP7glPQIfNo/JugP9gN6lqZGHnyHCgAP5cNShv0ZSDmhgb733vFLgwk4F +gT/QClZfXSltNMNP98dlVgNUyZDw8+5HwmNgXBvjZ78gJI92FYB72RIq69vKhh79 +i4KlcjmY2jcCt0bIeK+6 +-----END CERTIFICATE-----" + set range global + set source factory + set source-ip 0.0.0.0 + set ike-localid-type asn1dn + set enroll-protocol none + next + edit "Fortinet_SSL_RSA1024" + set password ENC k7N0pVlaFIpoMS02scqwKomk+hK+RxM3HjwTa6/HzQU+0Ph9cRwfdRCbLq7hFbesgls7EL/37W108c1lOqmvnTTuGBd2K+IaERuC03KgJ2SgwGeHNEWqT6aoXG3VqJfxuOixDlz8l6ssb6IfQXkQW6jmx3jq7e3ZWBvzym41MhIqgGtD9xQypaUIEAst/xU/LHFHn1lmMjY3dkVA + set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. " + set private-key "-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIC3DBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQhxrpyDXlgU3NjEEA +xXYTogICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQI8QYqCQ+nF3kEggKA +KlHT7Pv6n49uBcx34Vv9bRaNXQ7SuXxhn0SSplT5XfBYsXLCb7ah9pEhKQOYnAlT +wS/MdLb/WmGKWbktrSl7zuV2XnLI1+3KA4WI6VcSyz36z6xQe1VQm5Rg9Z9URoNI +uxH8Ubgyk3LvabNdpzExMAGkdMexbqV3XrJjkwZXEl9Ly3AJWmBy3sRkbOZ9Q2uf +6WJM8AHj9MehrZ2+W1xbfP1cBheEMLyyz3yWdZW0h8Li1L1tAKpKeGVHHH6iigja +j5bgcPti4ME4OEe8kc1k5UNTOsjen8dO5/k+8lYw2o4TgQlFR2HmWyr/bjUtwgj9 +LM13r0y66yf/x9EhA4bjo3MQWDvqBYD4RmPzHKes1pS9dmd5J2PcWQKFKt463hzU +gGznmQNf/KZH9QFXql2fcICEQi3/q2twzIQZdpFs8iduigFFcww4JBaK2urJgTEe +SdhnsrMt7fonitP3R254ctGSGcn8W0TWurYqez7OU3cwyzX8/xSiw9UrBKyN2zB7 +PXxisRtfoseQNDHnA2VGAqjwvy2b4BU3yeUNt86W08q1vS01oUO4fgIfReWFlbFw +DnkIF7+qY8VIqye2MJoqQxEeBfc5Yw0jdCUdgC8MuDPW5lnH1SRRkpBXx5sLbsCt +y4b0RJ9VpCN4t5nDE6oZuy9F2IGOqcoSbSwq1EkOBMi7sJMeoq2KcUV1b/5FwL2w +gpXEUWVMTbOmLqmARVAoM2JBxtXbzVN0atsMKgi2Q9VfHEJpFzPs4dYX8xQbBwSO +/JjqISUIG0kQloGQW2RoCEIYidnO1ggyU0QnLSGAllNjk5tevUkkB88zaLqcCifk +FJT9otFa8oVFQ0iM/Oo2Zg== +-----END ENCRYPTED PRIVATE KEY-----" + set certificate "-----BEGIN CERTIFICATE----- +MIIC2zCCAkSgAwIBAgIIOvputoR7mCowDQYJKoZIhvcNAQELBQAwgZ0xCzAJBgNV BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx ETAPBgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMM EEYySzYxRlRLMjE5MDAzMzQxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGlu -ZXQuY29tMB4XDTIyMDEyMTEzMTczMVoXDTI0MDQyNTEzMTczMVowgZ0xCzAJBgNV +ZXQuY29tMB4XDTI1MTExNDAxMzA0MFoXDTI4MDIxNzAxMzA0MFowgZ0xCzAJBgNV BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx ETAPBgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMM EEYySzYxRlRLMjE5MDAzMzQxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGlu -ZXQuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDU0m2pdvxFcNs3IvQO -50vExHsO59u9xdFgF9SO4yQF/55mzTcIdZDNVinpCZpQl7sRyPLpQrag8kq+oqum -BPpOnT/QmaVimQkvl1m3cAMw4/gaqPQ9A9+WJ9P+VcGpnOU5sCbwVwchcyYa2l6Q -kLgpzSIC0ZN2302gsKaDVgWpNQIDAQABoyIwIDAJBgNVHRMEAjAAMBMGA1UdJQQM -MAoGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4GBABcU2eQRRvz7rWuC1AYF8+7L -6fDLvn2AenusmaqIillRciwkxihsC2AJAgooy+VQmhzIitia4MThmrnFyg8YUtaE -xAelnLljOrOuiruJT7LDEWlvt7MeQFVbXIo1VbYAN3cThA2iG4wWURJjqSNDHJkt -/bS1p3QmMb86zWZq0FBs +ZXQuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4DufhwMPNciCpCyId +g+byBe65dO8hY+jfZCPyuO8EltMQKwyaAtr7q1OysM6P5utngPkpuOsBTxeU77U/ +bvNaa80BkztryUayFA4v6S9owDvrk+O3N6oP1tHYHn1mZN/5+dDk0LMMhATCU5hk +Rm1eemzMGPKLDNG7FTvPZOxOtwIDAQABoyIwIDAJBgNVHRMEAjAAMBMGA1UdJQQM +MAoGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4GBAFEu1fCpsOzp/MSwgVKNZrft +AQmEluumGDHmRi1g93RLttGAqhMg6uScKgXybIWOGJkZIqrriucuwTT2qy8JEc0m +nK8/OnuYiDrbTYNd3a+OQpBRjqGMtxhsr44gJwng5t9ivEx1sLDwDYkHZyFJn1v4 +RJjU97CJwyzxePdHuZqC -----END CERTIFICATE-----" set range global set source factory @@ -25117,60 +29557,60 @@ xAelnLljOrOuiruJT7LDEWlvt7MeQFVbXIo1VbYAN3cThA2iG4wWURJjqSNDHJkt set enroll-protocol none next edit "Fortinet_SSL_RSA2048" - set password ENC UTONffCqHbkhaAaAsd5x2I7kBmtcFXFvFzFIdJtYn+2KTa3K5/jPtKPgath78RLCxSQ4hVDQNTCT84BOMsI2D0wP4utBncMRnhTgJtKZLaAXiU1XaKL34tVnc9jWWeYNtcKAqnGDmVqT9loeDwdVc/wAHj3LIW+q7qAvh8YY6tAg2U1ldhOhubNACcpneAaLiAhjPA== + set password ENC cWV+2BEXcXqLk7lz7Na0wOvG76XprvLqmqyKbTw6t1k6BepvK3RbHl7Zc4qYDWxL7MVTN4TsZJAwxk5uopXPpI6G5pk5b1rx8aQU1fxaTKfKTX4+v7nNNLjkUjN2zZ2RcmTjsOB8P5rmns0XrcQgxBfMKJ2Ed8XNAdziDduJGE9BTEPcqHfniAO9di57/G4d0GeqC1lmMjY3dkVA set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. " set private-key "-----BEGIN ENCRYPTED PRIVATE KEY----- -MIIFHDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIt9nsFMTGYoECAggA -MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECN57zg1jzY4fBIIEyENyuqyHSG/q -WfukGQCekQCl7dLRMkYLyLrY/1GFHrRLb2ekuzYON/uiAd1BQj6p48muR06zwrjR -cIYa8wdsxSKnU1nvYFLW27kAZM5ZPiJ2XShuwMFh1zbyi4XL+IxhCtEXsiHKxbJ4 -SjeuVKHUzsvOIVVEQQxRP+TUtJYcn2pB5Qy3cnCJiiOEA7+Fay2oox7ed81OhfFG -JIby7Lp8kKqY4GO5cYbZ5qi+KYJeYMsXriFhyej9VgbZxYkIjQZvd0/dAqi5d6eP -vfQ6zq/LzuJ696ePTHnI0GY2nfSV14qToNo0Mzmc2MZeFOafGVgpiglJT6gr4OSD -UQ3nnISibThel/HYwUaZKI2DqR6cUUbaRrg26MaWapQfkEom3vpD1NE2KiBXekE/ -3DK3hFs42oTredRfLBGzYxsqUIHEvkaiqfnCx9oN8T+JP/3SBXwNRi/sPTAi8ldx -3eTST6zeI5SucCZlAVRE3cyFEhRX+3Vy7na+icY9IF6caCRHTT8NVNCvpIu29/Vt -yy6F4WRz0XCtZ/ZVfSEkcysisRY9UcKxUAryLXeUnzEj6qqrboO8d3Kbw1+N8gua -acTIakqzNNPz8f18RC12tL/5YqaDQrSKUyiki+vUp6aPZrepJW9Axzn7rlj/XyQy -VvTz49tyeqPugauQ5pBT8x0HwGx99kogwg85SJv6AqaDzoSHFPWOnyx2xi837RTV -s+dPJ8L0K9lc2uOauUPUcF43ntgS65gabClMLadBN5ynS8FsIrhSTwhjfFhTekEI -YAv8SKN0Wzhea2FuOZBNkDCjgYYmYQe07a1y4V/gOYvglH/OB7fT3A8vHuNU1k0Y -yWev5WRt0p6IfMrMRujxJW5da5ZYd+JKkCxgseXR6ysq34JU1hghmRnzS/K5VTsG -MYxMXlDtoPl+u1/zkaCCzBWd8+vN/KBQh0/llYakOucz2JzrPB+ru34BHMeTTm3K -X4kDaNp6+HOhPBAbkaiF8yL9YY+8F10FLF0Nt8q4x8XyeLbCiruDScoSllHYQaNd -mqXPDXd7B45NU8/ly/s0C07i4Vsl1eDFK5GRx/hrl3Wz7ZZ4LC5B3jSsWVaY92DF -jUXbUZN01bXyHojDeusSxOcxl0Os6RrAhx18BdBCxqA9XXtNDfNsQ/JpOxeDLaP3 -tgD9muCIrIHwU5xfDctzr4n0rGmmhvvlZ+6C33tESbyLtWOXhyeuQD60QuHqkiWU -y09eMYcAay5NEeLfMfEfSucllHADc7XdWnPdFVcnRZL5I0GbiUgxbEYhP9Ij/GZD -CVOL5hlAd7YazFmR8L1sAoV/WuweVBD52JV+wlmWTFpk0e9NKmZE1EKj9G3UeLXy -UAfg2bJ/5U8geyr19LC5rR+LBsg9FTZlu1nq27pIzYXlNMCNOuurg0CqNinwJt7I -KQqTJes/WHZxOjqTVIQ1VfVlsv53Ldw6TF4g5Yt9CzV030aJZQGtZq9wUzMIuw9k -po3+D2eUOOnzkvS0zTMXGB6mBngMDCAUppV88JRu1xgs8L9cggpbCvBTtlrQ6fZl -6RwHvhiDzAW53X91FYsBgMKcCavnEu8gUpnZb9cZ5HmfLLEahumCQXQa3mc97ePw -jdEH1q/9juSuZC/QY8+Zcw== +MIIFJDBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQIi/B4zhfQaSj8RhA +G+FtFQICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIgt6wcKBcZgIEggTI +zOCoHjnInW9knfiXIRCm3LyQvXhQONQPUE3ZW3B1KtuRM8VSMmzFXeQhOqpLlnWg +3EWzgQTWeY3Nk4ETiG9JE5YFjOurWNm/dT/8bt2V3rd/gv0eL9I/+YghLAx2HN21 +/mnTYavaCL9AXK1SGA/L9z9BVyyKuseiZjgK9p0Psz+w//uKmNe2cxLTRIWqPFmI +84xXMzdZ7KW/wSMd7E34cknlbaV0Hm8gjWqP6hECmJerphQRG4dgTWCqIQdoN8u3 +MW/dEKWIJMDFjGVNmz8la59Tl40WqU8aRMo59JczEUvwa6nQS9QAc71Ru5usARyy +ET/KcwhtlaGy2qHwjbg556y+JyNRyBBRbFOB9AuFGHcxgZpP8TkHWuUtUwd22L7w +hAhse1BdnAjQboKw8qv5ja96G80hJdaFdx1sHkTCNoRdc9abCV3aaKmd7LmD0cuR +z86Bnn6mpCs2UzWZBu4H579AwjYaPA1nurHbO3O0v6/luFHAgd77UPQEPO4hZ9zA +qm8idIuFBCbl8y0qPN+IH+WKiNjWlAO15MH37cV+JhPvk07eGdpQIDgCiWKvxSO7 +0iPk1d1S3wGFnYUzs/9EbXA06izGAxypBuYDfemtp4XR6PWZLu8BrWwvH4ntjdjC +/8G5DMLQQzF1EahIi85hXMOG9ZOyRcxVfRb2aOFlv3NiuorS7xBI8iUAqxRJMoYr +9dHKYz+0Kj2OoT2ZOxos/hfMnNcMPVo0cp7clhlNj2ZO2cQ6Y5p9IB8r+uiPXYA3 +ELIYfE7aGbFyu+n4z1yfSKqjoLRWXymiwkmYkqlW0XawPQXOSlWGA+sTaa9AxvR7 +fN48BJvQYGeZPnLeWVlGRAUSU2xnQs7SLfw+0UNlFnK7BahCPVWS8clTFIa8i3cK +2TqS/XZ1WJpGU9n0gT/bVJQ4IHMq75Btd8xuk//D1raGiFmMm4rtuico+XGdlYKL +CytnRPuZNKr9pzBtkklrjaWzftlGExsyTM38ja9GqzzTBkVpgANkT4A6euMbufR5 +C/mNe0noLiahuscORZBl8yvEeBxRIe5owARNqmXGRN0OMLy/Mksz6kBiqAfmdMvh +Sf/quoLUv8TDEBrp7lprDX3xWOw4kYwoFfDqYGNaP76Pek0zHXnMib0DAPRyERj4 +UrLu7XtqEPQYdGaH8sEGyfhkycqrmXIxnIh1lPv6kc8gjfjXdo9gfYkVZIkqPHqm +2XEB/Prg5hUanWpyofufLy1JYN65/ioIhSKEJO7wsyZ6uuiQHRXiS4rUkuCZNUe/ +1lu1Qtacjf4/FlJfEl2EQ+HM5ZmhtVLOj9oAT6grLwbGcnbV1KJGIwshyhXYM4iO +YSnzC2juM34/ezRtUB7+naTjaSPUdTmOCL6arcomIrNABv6kyYO2H9F5lUdjf80m +hvZ9chMB115jQXlD4pgZGeyfkIkLKr35Ler0Tsf+TClCw4Mwi8l4WHFVv5+rwpLn +3wBf+QkZDE29FoZpE+eD4Y3F2QDs0q5zjkciTb4zsi0uG95e47/wIm+vVZUCB11J +2EuO8TzVjBuFollbF1hAIYu1zsvwgkwMdKdaMCz2NAT4KpvzJ1mxOs8Obuy5dp+D +UWDLKgD14Hnk9ipoNbimX0ywnmK2IoJM -----END ENCRYPTED PRIVATE KEY-----" set certificate "-----BEGIN CERTIFICATE----- -MIID4DCCAsigAwIBAgIIA3GupZAm+lAwDQYJKoZIhvcNAQELBQAwgZ0xCzAJBgNV +MIID4DCCAsigAwIBAgIIVrvfpsp0uRkwDQYJKoZIhvcNAQELBQAwgZ0xCzAJBgNV BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx ETAPBgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMM EEYySzYxRlRLMjE5MDAzMzQxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGlu -ZXQuY29tMB4XDTIyMDEyMTEzMTczMVoXDTI0MDQyNTEzMTczMVowgZ0xCzAJBgNV +ZXQuY29tMB4XDTI1MTExNDAxMzA0MFoXDTI4MDIxNzAxMzA0MFowgZ0xCzAJBgNV BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx ETAPBgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMM EEYySzYxRlRLMjE5MDAzMzQxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGlu -ZXQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53h9bYxHM8LH -XOfXRnTI55K6wbcnpch1MN/8jYlEbsFcZJnUTIHr2UYhdZiUHZJZ6xCRVHsBwuVt -7e0MG0UY5BFD6qWOErK+4/ZgdYqN4kzpPKkDZLeXwaIp541mOBfjAUWZXNQLU0Aq -xXIDMyAqxNlMb/WoemhHTXNidKUw2IPhcRtu2YbYSCn51cuwl1aliXDcwPbpFATl -GXX49WuX0+obW3mXT0bXnGFUdrSQDxTZFllobFABNFptyVvnmXn3ykEJcM3xq3py -Fu2WX/VscxNT/PzV9EzfeevimKeNPOgGQEMhZA9geHckFL0dAoxV+7uDsXpGT8Up -FPyHh8RHCwIDAQABoyIwIDAJBgNVHRMEAjAAMBMGA1UdJQQMMAoGCCsGAQUFBwMB -MA0GCSqGSIb3DQEBCwUAA4IBAQBNswgAgK7uko2M/TndztvtLIOuM21TDAL328yb -5xGoIi31sg45bDlhEzU10/DFutOs9idq17ujZMkJBQ3kQZ8SBWIP/VNW8KV/AeCV -rWpgCRSKl+3gG7d49x1iQdyYwQJKykvY70eyfPctDXrtr7fX2camAS6QpHtmV2I4 -/VBaPC5FB47JocaoK9PJDKQ1diVPKoIyD9/otBOmfZSmKESqknikYhM9xffTEF7W -4xxyN27pTQOCW5ZPtOmSh4aqcHgTR+w8rIJOfxApy61dO0Ahc1l8vYGnWNSgqlG2 -yJ7HMjDau9HMqeaxnKWVubbZ3tVPDM4iYZEeRFbBx8V2Dmv6 +ZXQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztV+HX1vzb2X +Av2mddZO8Ll1bWCxZDPowechHX/FBzT56/V/qxvOAK1nTYUivsScaUTjsrJOpZec +6xoEzkMZdhv5riDcIUhJqCt537YQOooRo1kgPHG6fof3ab7atBZYMugu829RSl7/ +kRiQhtGDzSHjzJEANsa26yOQjhhCugrTsxenY6tePM+JgbpnpYm5W1795wsQx7qA +4z8f9p/rbrEfWLeH88Wjn0eGtSPc9E9CI/mKJkQx3n+FxUndGnjhF/c3h4ziUaE7 +R5a0+8Z0GKq8wf14/Q4MAbKKN30ZK+BSMkhroEvl8p1Iv6q2fsAgbnvH6b9N6CFe +Sq21HXZmgQIDAQABoyIwIDAJBgNVHRMEAjAAMBMGA1UdJQQMMAoGCCsGAQUFBwMB +MA0GCSqGSIb3DQEBCwUAA4IBAQCbBI8tJElTU4xoxzyYNgzJ+BeBIKVvYCI64mZb +ETeMHt701b5ueayGEuFjuETA4+/9EhysQSMs8GEQDMpXirWgAzAZUFOXHXF0Vqpc +nhT1Aj+77lzJbyb+fz/fNZKSNCi6nNtBX+woexJsZCOe2dkCzdNHGVhfOe2oIDPZ +0ADgxg3TV90caz4znujl8EL7SHqo04ss6FKQf4rrU8h3lfRDFDutgRBA7CGN9dN0 +mTNgmfUsxEowLJP/CFBpvLNVQZwQjhlk8p0bx52j9CC2FgwbIQerdYl+rRFQXdyD +1KsVhHkP3OPGyDsZcnV585pek3MvDm6w67z/q4LtccXbNpQQ -----END CERTIFICATE-----" set range global set source factory @@ -25179,95 +29619,95 @@ yJ7HMjDau9HMqeaxnKWVubbZ3tVPDM4iYZEeRFbBx8V2Dmv6 set enroll-protocol none next edit "Fortinet_SSL_RSA4096" - set password ENC vsH2fptqFHsVFRSeUP3nKdhLthjfuizwBCajYtgoUp0btz4+jiqLC6s+aZTloHDkjj6nxo2Bo983dSvQscMWtRElX3uWDbaxVynDzjuf3t+LhX9w+QVJATLwFHnJBvobUCIc2zA2DGsBK17KFJ8MUmR3d/2lBTu1+o8hODgJQVG5g1oUCW9fvVSCn6m7Km/+TbufAg== + set password ENC la0FukggdvHfPsSROTxfO+uojpNjan7oYi1VYJ7G6p4+CmTA64whDVroqUcs1kMO5KCBvVXIQF6AE6Yn3sNmJYtVagmW3D6Mdnn9r6MI9+2VmohD5vKZoMJcp2bPKQDFLpLF7eLMafXMU+LgvALwzxIWdEQdsoh9ajE2bWryFZre41m/MwPIzoqID9b9n/7kB1dOT1lmMjY3dkVA set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. " set private-key "-----BEGIN ENCRYPTED PRIVATE KEY----- -MIIJnDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIUv2b1VuD61UCAggA -MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECF+4UMMlZcKiBIIJSC1+g0hTX0U8 -Szv5eHTUtmAmMrTp1ZOIF6D23GJXxekde6LGkrIA8dzgSLCPtLhA0zawqy34CKlO -TXyfOw4HBLVbHstzax7Ithe7TdfXgNMwUzCCEeeJ/wwGeX3LiNFb2fHUAJUQV+w+ -hSKQ2OadDNS/FjghputTyV6mVqTuxUg+QCrJaUJDW3gJ8iNiePaDmO+WshUXi5tH -n6r9ELzjwIeK1qywhFUGN2HD2P6n6Ux+HUMwg05qIqgL6hcE7RE3e+YYEy+VY5Z1 -uiaiBw/1Yw5sezXq6Sml5wwc19f5R6uCQ0FYDXlwaf1P7wpXqAkuMusAh0zMpSWr -PuzhbZ1CpklMtR1W+Gg7qwf8tjinQkaDScgOOQwWO1+0k8Tljlw7v+jlCIrO/s4/ -gZVYGJewejLXnMC6LavarYoNUKLQvgoAd3iYoHDr5UK/s6+qASjB3uegZYL2wEvH -TJKx6r4NSIZPnZDmZRQyQdJYfF7atoGc9lO27LF1wS3rxHyZ/S4LoMzlhB/oKfI2 -bJjH5bRZU+vWATgYFnI45AE+J3BYKswMfz21F33nJGxk6aJDHG4y1ncWychnZ/6c -Fz4aS5Hzk5WsD9SyUdUwZ5CI5UYxi/Z9Nsqx+fHlER8MNGRVU7PeqX1fUoD0kO1R -6wQ9iT5tXSAQVbj4F9GFBJ6neQzMng10iyVB3mPNvY1xwUrKGTppfcBI4DW/dAWR -lBzV+cojTX0+uoIyGryXzs1mMG5Tjk6hNF8cLom2etGvPSHkfy2vfo8RQuoE87U4 -yjQsPsmQmYo/2LzKhzcd4HkbjmA0fqRx58Imtx+hSJAMNPBB19vWBU6x3MTeNiXL -bzBDiVtsDLKp6oMF90ZTJLmsWl5W4bSBt+XzbEpNL/YhMkMQRZGC4EGTBM4QkYBG -ClwWhrG0q/ElI95t99wFSOQcQG3KKTgs4Rj0qmMAr2OhWlO8nUqosOujbN8zBXkZ -ILHuxJ7XV4pqBpVoCZ/wmAZ7ZhflxDLQT98i4Gfs62rgKKMJ9swm/IeGo3gLxgqB -MSBqSXAQllM2aw4cQ3Qnt0YwkFc6D/69Anuj67xBDh0P6H+pXkAP9pDUQuKt5Q3l -WV7voaOT16OKNWjHXpJwDQ0oJ8CxByRCWGtfN0Nwwy5D93VMfpVvtBEHog/wAAwM -Q/ZmDVy/DJ5sLM5Wh88DT3fJXGxdnPWO/Oj15ZyWJwXKoSc/zG1S0D4CNJ8KN5VY -NfOUzZeCT05x/5HKMAgCAS7zLAOWCKIVhUooA6PPoaoUxL4tu2rOiE0rpyLDlTo2 -TOQujoII0bLoKmOBJDNzp9vdlDPtUVKDz1RBmEM1tYlUD+/FxBDWuHJ4zCPok7vq -SmU5s1VxntZpzsiIsjXMrJkiC5tU0m35Mlz81OrD9UN5vUeJxPJsP96d3I6LesRr -s39x7PSluJM0oiHWjlf33HGuX1x/gyuIqbCRq6MadWjDhWJ5L5YvF5akOMkgBJrL -vqat+lFMT6fTS+hPWVUhbBgXe6xB2hPyUWmQSTswB5iDKFYQo8MwWGJMjDW6RUWb -y71KWRyMBJ3w9TYfssHtoOLImjBvNQ/JTfglcxiuyyoyv5SS7cDWQF28l/rQT3su -PGQ7xnlkzJ4kHnCuEfpS3HTblcLA8YCSQaUTvSM1bX5ErOoBg3dpwOX3lYpYduyS -fdqyor67cCBwltVMFO1EWV6RGFJMS8YQanvdmmQFKZ8W659YP99iUg7zSduYrLT/ -S727ZpaC91Mdhj54NXpFD2HkhxXxt7FEMIYVIb/bw+AhLy2UaqohroeVeqXDRLko -ajHZNXNyCx1jr6iA4UIFml2LD8HyoQm/Ofa39CKEAUcxPGpdKGGfSRv2oT/c4Kq2 -cwJQnA395qQk0uI2KfSrypWM4HDnGPeB1pteH49wLQhzGDNYLzgg3jTGZUSUKFwf -NBnsQVGLTEhHws8DKhcKEjIcBJgP4Tm3Dj11NQ/NNXVX2NG8rsJHTpLKjm8DmNwW -gDOCp5977azp+FSYreBQlnfiI33p6CwFEwrqnTi8tg5lLVzMj/7aG/hH9N38Ck0S -/ENkyaIoVn6M2BIAnDwkV1GMnKKuZYDNancI5F8B1lwNYQopuQBiGaFE5ZOv9JEt -Va+bKrW0zHJS/gfUkZElCKl7SNIrZf0zXXI/9Uc3urCY+j5xaa51Tr5lQhlpAZIA -4SC9hz0I5iEtH2XvHlcIO7nC9ESVMHisrsi/FVfReQjJu+7tIE+rHjdDE4ZPp2GD -GjFcd/+BvG1a4WFPLcSqiY8cVCYMBPO62a29gh1ep30Sv8lln9VZ7NoKCiNfxCF4 -dvmar92ffh8rG9RFyKJiCpKD1zmoolZZlZRBmXwlsaevUBomYARMcrr3/BWS9sDV -SigO6zeXPp6btwGP0HdUaBELT4VMI+JOCQq6kds5MN4IYp923NDfDCnIr8AXbvw8 -dH2rcqXiIFw7IYSHBFSjw5xhHAxO4jJdCn5N4IZQM/iYKbxQwwPuUqHRY2c6OLA7 -fP7QjUjF3GoaWwj8DtvW4/LSJyXvHi3Wbu+oUTn5jesMXJBtqhCPUtau86gG0yR4 -Ef2L0kQnHckdTuc92ubfbSMS8KWwkMFxIYv5RbyL0uvArAqXLfZ2IF5YtrwOb3lZ -XOOJ2KkqYyinGbTXGRrTueZn+ZS2MPMeFmYAxyckWKJveZngaKXzAptOaEAx6Kmf -nM+FROrcF7ihZMBa9H0LoAMMCgy0fDC4E754qW0bJTO+LK8yX7hhKVN1iLMQfCLM -LD58lO4aOBzoVn4ld/L5hTKGPoG1ypumA5lLb3nfMgnMKYs5bfEwBqP8xDOdUTsz -RvzCZQj1CJAz/iRjwI0xgCggyB5tllCj8lay9eLGVe0janZTQiDBWcT2XLS533rm -sqFYvt5J9SigFeRnjKVfGGaX2Vtl35BCFjqq/E+NY0rA6KUi454pxaHN1FOdzW3C -14dO1kjhJVBKrqjGC8GBS5YhSDWfg/H7Ybp5z1HkRG1BhlQ21brfyguDsNhJQAVT -Cz0QHM2PBKO6DOpPw1C7m69oIIKHnbs+8HC5kp91hZkrHsJL99igHT7JIHR35Wsc -tPiHrx2h9z7idwvGiUCDfRGVXOBMpyJPdWElRJQeTEMSGDVTZ8mstowYESpK5W1H -jokqA1rqRz0baRaX5cmKfQ== +MIIJpDBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQ9wP5YoCrd+yNGWhF +IrmuAAICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIpqhGOlkGM5sEgglI +9a6tfAbIW2NqD6d+Gjhx/MROzIv+0xNFbE3DSVJzTXX0fdP+45tsqySH3x3X5lba +3U75peWKnHdPH2y7/wCz3Z99Rsj60Wtr0uMAeQ1Gc12dOh+46lXIlAJLzC314LXd +G7rI/CGClyV9SwjgfbsbwVMFJN1JYpZwJYmc/7qqpz6UtvRybBw4g881whjMeWkm +NDN/jsCjJNhnaOS0kafYANZY/y6qrfqDFcpnv7rAWZOXzMWPNyp9gQ74kn8BTyq3 +fDLpfQGrG2lOBlie/I+SCC30Nw6JcJtvbrzxfxnRHw2Mc/p74b3wJWXt88ZgAIsJ +tY0JQe7STlJZUmQLJgRJGuPhQm9VapnBsPnSWJS3lY59ZiOlwOu7ocVR9qzlHN7s +C5m4ntBaji9kIPavoP5SsUMy7mM6Ti5zU2u+NlzcIyeS4cnu5Rno8TQKM9QeugIK +Qcnwk4tejj3wLuWJWkxXyORy8C1AU/yVL8Fnx+L+OdWLm1AXLrlEjqn80ptPSb5g +3u+Xwb6b02nsjVocmH4ik8GJ7fcSIyLqakzIeKJbStfK9xXAIkN/PSs9eTv0hx4Q +AIq05QDOvm1JTHfMsG5ZaNtUyxx3LRT2vHow8Vd6o/7PF7sUsiSjnploCS+V8GF5 +PfzLpVxpanuOiFhdRk5uISEvppaKjih34NwUOcS4j1rtJ10nk03eedQz5LXd77rE +kJ83Fu2Nl7e3yoHkGpbEq3ymko//gNo6GZRznh0IYm3R+Mdfpx7F2GWwM+tGSFNy +YpyEr0XEKunkx0ZqNXupj+zg9By6faUoRuQ3rwRoYEolpNUDTHRW6YffYb0IQNPF +69d4urjUwGvxi4NCa3/y+mmib+zUhvoQ2g3A8K21z1EjcC6hzITiP5CEUpKXPxeM +hJsX7edEcDRT8PDhaeAFC89RByolpBPBTdbj78CrUFlYcK+0nEPBLcllhxWRc5hr +SPw/iaLWTLk+HEMlaK6rEP0Bo47dGQ/SBd2lNw00zBDBOk3AbgJzH9gjnxlfddZ4 +Z5NaVip3jbJPAh7uknqAGyv3kvGiRTH5Ahe10YCWyAGqk3DpPpoXvD1ImbR7GAqP ++KTeQ6ahtFEnPmUFIiR2IBJRTjHsmN7pMS8WcBdL6cuAAnNzpwvYF00P02CVKQmM +XlUBQMJq8UNwRqSzxf7+tcUsxoi2ZfpmHxooN+8JIDB1LXTJkG//qOde8WVnRfN+ +DfNVkE4HbHbRc025bQT/QjpgnisUR9UFIr71WXrox+9ygsr/glvAAckiTAyPKZIg +VYhlvCjcSwDj0FU4YTi9G75flOXGaDlMZm4YoTs8y61sNHiwmgHK/wJJ/4Pf22v8 +72l9cZGb/s27lkDgLYr4bwTRVduOLWAe3tses/ZhdTDPQhFvpXVMW4s/u72Dx2Uh +qqxaM1BzlGX96CvK30z0VEmetpe7ZKE8ty64L4nCmbqNDKhY86w75MMG/KuWqJ6X +moZhxDXimeyOtpUNFRA5Rr7vfUG2mmwO9SLij/kIQLXxfEwEeNcqHhId6C0ckHnr +gV7SuB6iH2WAhZke7qz0GkH73f+QpCJ1mo6sWAiyX1zsmpT1R9GJfQYS9f0si2AI +1D/MdySKYApttSGNhxueKMRdRw4BqCov2s0ugSRVfyb6UYWtGBvzBbLTqtAaPd5+ +yHKo5/VY1avxIjxWgVN+7HCPb3Ms/23Hlo/X0jNCXQIsV/heGLKp4ATtZIm9AL2p +KCldetg2+UdagqUpv5LwM9BYHgxGbbcT4vIFJFnujfeOC96K+cORkvBoZaS8ZXCK +1CgjW5GamqhkH633/rjVMxTVxlNq+ehCdN1XAqi/5xper0Gi39hfpTcb1iXuXCBQ +UJLI+TzAHEzpBG+9ssFWGPBppj0L9oaapTJzpHORpri+9SJXscLVZU7Kj+Rypv7a +rQL3cCGxCqU5Qf9jBDoCTQYWUebJX5tstm7xL19+uqbIO5RQR2HhKAwXjCQ9C2B1 +l2Dbs/p1yIjyecgJMSPF2TPZrtyCqZC/Ui53i7goZ/2Ter4H/3nQ8QZkidRHWdGn +leXYxmUYQrJtlR7BEjKWXAKtNiIybQ9cF5iywWKdtZeT/Oez7nQ6T3uNKGU/RaWc +k073mQ1IGosf8IKMmxh39NGc990A+5uL0XcTOmIaRz2JePzZwhi4tr0f4buzN3gY +csprumCJiejm4Yqe3p1YsY/95UQL6wA9iuIg1bAfr8som+fFZRccI1CUczLsnAjt +p+kyVSUl5XxyBUNhLGQevSfqP4XjLz8AttmBMBaTwBJO1PDMiyC0N83mTY4tQBYk +hG6wjCm70btiQlzeYAmZvGVZ4KGw/3YQqPq9aWJte5GQ/PqB6DJ9U5hLmEM2B2bR +n3XedzwSZnOCoIJqbsOIa1o5YEPQ3gVXfFPT6//qZZ7lwBrLjPwzYLgv0ZptBoWx +9ouiSor46yb3ITtyEvtbC8Gdv5VttNzovf5MrOBK57euH9R5Sv8a196sDgLIQ4PK +7wxX1okx0c3FmYPfcdJxJJN5lXxNxD2OE4rg9wRDBlTQnY8fR9q6JYfhsvTdRWQh +2ta+edGGvXRXpv9BqzfgmJTCkHmiRsH+B775iwhwS9+uLHtUOb/Ao2cFSrLorECj +Crf+WEGDhSihKKinKXKZR/0FE3qzPjNCbI8DRZNuLKAIFWtkYO+AqFwH546ycNNT +8ngE3aiJ4ZT6/uLKY5+ZIWKz6mtjqUKaDCaB2jiXcbXHB+6NmRo5Q4+NIbo+f0+0 +2SRxx6Zom+r+MzN7zCvBCr8eQyXof7X6Dj0DJOvCIwHyrek/UJEBgjXhi1N63LB/ +K2Pcx6rBnhHmQHUSHfIWNPGnd/fkm8jvBm+yykSJgmnarQlAESaFMFWGLxzXfbJg +L3v8cF0sCtG28DbIRdZTEV4EsbeX3n8pSmgXBnFEtvvNIaBdE39L7dsBdpbWhttY +Cn4cQkNotQf7u4KO8TDcoAYBZKdcRjjptB+2n5Bd8mPBql2FIXJV4Q7uPwSnD/VS +qpC1txka9boYsUa1O/NB9+b5KE7MBAfUJOCVNAnktryWKtjhfHC88Q6vcQ9c9cmL ++o6CpylfsrjJ09JRA4DlFZolk+o2bqgiYSWY3aNOfgkSMxIlTnm2f5BRSRcYokpo +wK5FgBWpSuxRsmgzss0ZVZCB/JMjuLFO -----END ENCRYPTED PRIVATE KEY-----" set certificate "-----BEGIN CERTIFICATE----- -MIIF4DCCA8igAwIBAgIIOyuSlXiAZz0wDQYJKoZIhvcNAQELBQAwgZ0xCzAJBgNV +MIIF4DCCA8igAwIBAgIIMT3E/XqnRLowDQYJKoZIhvcNAQELBQAwgZ0xCzAJBgNV BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx ETAPBgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMM EEYySzYxRlRLMjE5MDAzMzQxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGlu -ZXQuY29tMB4XDTIyMDEyMTEzMTczMloXDTI0MDQyNTEzMTczMlowgZ0xCzAJBgNV +ZXQuY29tMB4XDTI1MTExNDAxMzA0MVoXDTI4MDIxNzAxMzA0MVowgZ0xCzAJBgNV BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx ETAPBgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMM EEYySzYxRlRLMjE5MDAzMzQxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGlu -ZXQuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwyVG5t7nGwDg -vej/7eZ0r7PcHpLa0WqilM7KNTeYMcNBob7sbPgHmLJgWIGCtrzp7fgxp1LEO2JM -68NCEyqGTj6n3iNU3zUw4CIllrZeTSCIo7KeZ/wf1yGr/HGRszXKWn0aa1m9cEsf -8IeNvdqSaok68v0dm97E3Ce8lFAftVO57i9Qh7sPHK3xXGAuBuZhm0dgkU+I6lPl -6ycSwr4DIbkOdHOMMtkJslnZZ/fYazorEwg4CYgT934nDQNUprberUSgKlkuEJDw -nA55Cp9AleyvkL/2xH6KGO/aUIuzMZn9bRmOwz2GxvX5Zk/b629I7O8GCtjcZJ+l -UScparoPpaE+Q45oaxsAfC4+cWaWTd6WCNv36PVrNvmt/gQWNPuXbfTBEUL5cHgk -ouq75PmvuiAaC6s3bH2wpbls1zPXbqTdXQxQiZIzPniLEDc9o3P8S9sRnm6ypOwx -j4cAys5fPdGreRFTI95mWnrM30yK1P2YpGU7LCPAuleXrkJ/04tG1R0U+dHwJcW+ -HMK09qPxusUpp6rZBIydVAkkSMlL2fMNvvLkPAfD15iuF2hs+pDYa8Pel/pCXoTO -jQekiweLFVd/t97Z0Bh7s9Ko3uFPavtsztzbLvT0qSpSSpE6cMC1ZsIHykyJFRli -aweYgIDwiq9ja4Wb79E7uPV4x4o4KNUCAwEAAaMiMCAwCQYDVR0TBAIwADATBgNV -HSUEDDAKBggrBgEFBQcDATANBgkqhkiG9w0BAQsFAAOCAgEAI+Aqpvb0ojqpsmsl -vEr9mQNTL6bKvagWpYKnfzHVhlhkRJxEQgH6ItgqZRt593MpxMtWL4dvM0Sfl7vh -e8PxetFvNJjbgkiCGKOhdx5bnl90p28YVS6iXi2DkokAkdJSpJnsqGYIzzgEXY+Y -q5EjLCuhF8dSq1TOhNjZLkqVcSZe65jNh1Y3fQ1OPPv72nFLLpFSGk3htr+L1yes -RsfOpBdXu7gO/HwLGbHzTjksHAsklVcm+KcdsC+P0XPB4RKsC9Gqyv/lbbXGD6xM -u+7AxbmBWloYScHiSeffu9ooIeaDGIKPG24kf2tqEGRnHXTQXEBcYt1bUmL6FYdB -HvdROeNUWF5qno/9GBbuWJ7K/c4+Nj+B/Fjh9EMyQbuRf/WQlMYN4wROgfqZjU84 -TNMcX1ezdzKh7K4d2JQNB2ke/byEwF3KwFO6mV8ag20bCPq8oaUtMmQDmM0HgA/H -2IW21yVgyAOvA+ZvFffocseA1SAIKgHsb8zU/xYzfc9P2RfxXtm2REgq35yho5uO -3aqKlLvSFb9GN9zn3lrzlur61gfuSNSrlk8Cbf932HB4lG9A/hs9+AnmZmC2DDLr -USgnPvV9FGt/zySOjvlY71Y/ysoj5jAzQrtMswvcVAE/7uj4OurLvIQGm8OSIp8q -UM9qCGu2uhHLRu7OJt1t2qWPS/w= +ZXQuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAl1oVndfr3v4n +W1ztkYnsv4fds/VLTpdCdPFx1docGZq2mZfv3JJp/1ARdaW07ir6FAFWpVjHp3be +DGc+bziEGwj08mYj+ZgPVzDC9Pq1b06+xj+cxvDpne9S1M/1SH87b1OE/Xxd967X +HD3W2EJg6SVZTWwhzQUi+VzoSVClyAvFrZ5dlUl5NQfR6NiCTj7Tb5quq5pYo17u +1TBehWBG6O2f0WqUmphhpTdgvqu+jFnvw3QjBYoeKLSz7rfoqgs6YOaWDbgrWS2o +AqhaebPKco/aPrO9NL+5xSwEpowuO0Z+3NA443CuaBzb9R/VWIhOfkUe3WMqzae+ +0dGsNX5wGNwiB4/x4Y6hI3KvH5spNwiWVhbcUNU3jfUuF+JLI00G3Iy2O7XM27qZ +lN/6jB2RMiFJSNnKMkbFAyqMvlvshIxR5lZ4aaLoQ3ILlTKtkuKBbGGhJXTCWQYV +TdvnK1UwHq3TearynPigoDQwj45Z8SckFomkQpG5eL6Ypq3hj4AFU9Kv5aj3kzTf +wdN0BnxM3UABfrFk6dUZTrgI1csJbowHIBfCuzcsarfIbhEZhg+zvDVW7cfzjTk9 +I4e5/dx4Wz4IGPKN/8iDSdzavLwG4508GBtnx1yM/gPAZaBmStyGDWlDC//mjDtm +z+jqpZj4kEhLuIdaGoQg69gic7LU3ncCAwEAAaMiMCAwCQYDVR0TBAIwADATBgNV +HSUEDDAKBggrBgEFBQcDATANBgkqhkiG9w0BAQsFAAOCAgEAJRDqh3Cc66e9a236 +ERPQW1c+hnI7vBHFXKR+M1NVwE4pX6cRn1gmch5wVDXJYaYBsQnHbYrZBWfvtOq8 +bNweryhoLf3dwhl7ZgIYiofH5TaO+Ju2sevuV4zrI15ussXfp0cHOrJp6AXWtLBU ++nK7uZwsrxONqzf3XA8T35cW8piIT9SHWxv6GUzRoMtx9B8Siw9cuHaokgmJLcgA +CVnU6bKZL5RXQLVIGTalRePhFA62W7bk8tA9fsSkDRCeD87KqP8DQvEVbXLaZLrS +bflIntmbgKFf0LSSoIVsmTEXvdhr+/eQf+LLo3m2pPTQjB5sCJ3Z9KeuEF1YdgH1 +ZC/+pVTjOYZ+PZl/clabxYiYZOHODsfrzrHfAPwD6uv4qZ7LPx8/tnSGFRWAM1S8 +cyot2aQ78bNdHkoN7LO+C3Jcy5WKg9eX/9ctcFbtlMBgqwmjzG1tMrfWm3bXWx2o +047hcsKnqoi2hcOWGtUMkLSSbqo094Pf6/zVRuSU3WKiQ4SRyQmKnnyLFLWlvQQ5 +xuOz4eyEAZX4c6Vf0YBQ7L9KndKJqXLfIFGWDCAiQ60PAzam+aTnqsFzRRZt6Tpu +7B32NgpcSoFauyKreHQG2qgt+/e0YrEE3v2Ufcb0jKd9rIIcLBcrJpoaPbnaAI6B +tvItQ3It73aapJ31L6iNgZ1WLN4= -----END CERTIFICATE-----" set range global set source factory @@ -25276,40 +29716,40 @@ UM9qCGu2uhHLRu7OJt1t2qWPS/w= set enroll-protocol none next edit "Fortinet_SSL_DSA1024" - set password ENC sdhck6w9J4aoSnK51CQifpn5jsmTEbLlJsGN5kQlRNyllCrXdvzm+0BrfoFObmGHKdQMI38FkYnO2kM/BrWsQfEnJ6vnyR5rPZhVjjk5wwGebZjJ7UeElGBflXAAGqh0mcWalFHwL2caQwR5htBRVF+VuczsODgBnQCKGAVg08VjU5CkJcmmh8F7qq5eYo9v5xXIfg== + set password ENC nZyZ1Xlmyados8ZelOqwHeuu8VybEld1h8BFhcuKTXrmOh2bmLtrF+j7PR1mj8mjI3f/jXdkYsZVA1nJeutupZ8V825FBcrdw5XEFocuhVFIQLGuE/+DSUa9oxg+/UMR3TzTBqdHCTE2oCN7aJW7e+soy+T1nVFnGaSmoSYye44Yc4JVDtsqkxDamkxsksJUjUtSfFlmMjY3dkVA set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. " set private-key "-----BEGIN ENCRYPTED PRIVATE KEY----- -MIIBpDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQI2ycJsiFfB4cCAggA -MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECED1YTSwJF6gBIIBUI5OlCAlBACe -2DgSryf76+D0TL1UCmD2XqWKxbalkIl086OTsBaf02nncv6WhKF9TuxWh2UQ+Zfg -Sosf3sXCtYRN0/HXTj/4UT2xoCj8yvO0fD8iSLeuyCKIELSyOYsaqYgzx25Yw52q -zJdlXLtbS/0OYMh6OAOnj2BloxySCHEgX3jH/QypkI/cWi4A847VACWG8fm9Fld5 -KTgiGvGE4OttpfE0Iww4a5IskCkg1kY6+LcpBY5dAJ3I0XAYFbWZB1EgbTtyxtMi -XHAqNYKVZ3aTXdxgrQ4sBDbKmeYvnLOS6JjPhjUnYZJSzM7zei2DN07QkgkQMVkG -F84b4BjcaQFdeBMY3oG7CLlRzeyQ2uDeE/vvMj09RchQgMZDqI4P5CdqWS8M8TZG -AOWm2tSno8yQq68EQFhTauE+mhy862XG7xmoSgjSay5lZqkGnY65og== +MIIBrDBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQf2wcgGxa6DEIRY7t +8cvYkQICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQI2dR57P/UW+8EggFQ +CT08/rbOqOt0dgTmzF5DICV4e+YVKy5Ukh/QV6OMxMuOL1Ofubkv3QQfVm2aD0Qf +wD0R8s6rh0+CL02BCb2qTBf/KB3T43de9s7pqIK0h3FFTSbqumP58qNOE98zRybV +qVkSf1vdIip2FnuQzFdmM4aTsh9J17Sx125hb7jdKlQmbgUvxtKu+boB1kCpkLyc +GDOAzVuhWYRHctsB7dTqIlOMckVwVg0RZSVIty69pFiOvVVxB+qMGBoLyF7VQlx2 +soIZiRV6+o9/znsm77YK0EJ8w6FypANCxSrb53Um8/8zNMShjhIQEgPrTwGzQZOF +OgkBWMnRiHsATAWMQ5nS0SAAYl52zzY0fyIM/hMA1wNpG22VwXT2uVat5eeVDaFr +fjLwq+gefmLlKwQAnq+LcYO9+kgZenYV2ny5YdYpZ/cPBDHPiRL/lvpEna6JfZ5t -----END ENCRYPTED PRIVATE KEY-----" set certificate "-----BEGIN CERTIFICATE----- -MIIDnjCCA1ugAwIBAgIICnJZiuQT5kwwCwYJYIZIAWUDBAMCMIGdMQswCQYDVQQG +MIIDnDCCA1qgAwIBAgIITu8tuSZ16aUwCwYJYIZIAWUDBAMCMIGdMQswCQYDVQQG EwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU3Vubnl2YWxlMREw DwYDVQQKDAhGb3J0aW5ldDESMBAGA1UECwwJRm9ydGlHYXRlMRkwFwYDVQQDDBBG Mks2MUZUSzIxOTAwMzM0MSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0 -LmNvbTAeFw0yMjAxMjExMzE3MzJaFw0yNDA0MjUxMzE3MzJaMIGdMQswCQYDVQQG +LmNvbTAeFw0yNTExMTQwMTMwNDFaFw0yODAyMTcwMTMwNDFaMIGdMQswCQYDVQQG EwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU3Vubnl2YWxlMREw DwYDVQQKDAhGb3J0aW5ldDESMBAGA1UECwwJRm9ydGlHYXRlMRkwFwYDVQQDDBBG Mks2MUZUSzIxOTAwMzM0MSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0 -LmNvbTCCAbcwggErBgcqhkjOOAQBMIIBHgKBgQC+4nK8AoHZzfZOk6DeFoqkU/1E -tsChanHEA7rA/zewAN1lXEyY1Q1wLcoBAfWM+dKsu5QoFPQOfpkBEv7/lNlu31Kf -EoGWy1llX36XNtGSUODWN84MpDZRZvbB7hYYpCSI1oXQWRH5iPDn0oqhALUWyvbb -PKP/p/QqJHAKQl4DMwIVAM0negphMCVwllVVs65Lrn3qBObJAoGADowodiGVQS+j -yYFhh0q1KQZUwqz5w/UMeRvidMMTXpWzA0/6mi9m2mI3nlthlqjKlT/jkgZVATqn -LIrkPe+QpEfz/KGIf/juVl8EGlYDlxBR0wv2RQiR/Us5cSSGAP0oaxOUNCdacWd1 -iXtwSsIuflcxzTqj7Pn2zKnc8vVkDlUDgYUAAoGBAJZt6dKujCngP0X0jvZHIkHh -lhpCaRaiktahC9v/qN2RSVeowxZ8AKBRI1+QJuHBrBOwEddEkNknliMXjZr4JP17 -dW8oXDB9A0MzkHH5EMONKXlixmjO4Hprj2r5mKACUCkbb2reI+jo8fz6GpRmDZSW -qs6hRQIshfZ0CF/w3rwIoyIwIDAJBgNVHRMEAjAAMBMGA1UdJQQMMAoGCCsGAQUF -BwMBMAsGCWCGSAFlAwQDAgMwADAtAhUAvyA64Mp+Dw9KuaBJb3RWnXS8C3MCFHd3 -vncZsUn3T4/gdogfFYgsj1Z2 +LmNvbTCCAbYwggErBgcqhkjOOAQBMIIBHgKBgQDxE4oFTS0ubKpRxTB5sHlo72Ak +G9eMqhJ2P1/x+oGmD6dx+YWDtaBLGDRhRVHmW8Ig/lJpvngPBoKZ9NwlOedsbVWc +rm4dm351kvYBJfg9UjRP+OTGbJPlF3MrZZcW5QFemfkmI11KIzgQuBdqr31APbxk +OKT60riXJnpapJFTKQIVAPX1JgkZKORHzQT1mtBHGOVtPMixAoGAK1uLf8nex7Nb +ssr717lOU6EC/W1ZaPxdatAGygbsoaqvL9X3i02h5GFEcvmI4X2iSlvHOB1vAyPk +Pu8ef14jnekk5z7VJCRdHQskavJwJ1QR1B69kVIJFFW26l+TKqT6n8qmxPNuX658 +3VErZUeZZtBNDb0TarCxw1O0Juswfp4DgYQAAoGAEXnWNsjzqQo39skoERX1qVx9 +xI6ZUe2avRKEuDpDn/wUib5Frjrlqx3YkfsJ2pM2+1+morLS4Kzad0V8ahWfHEQ2 +j3g6VzDs4ejalbcJmrR+N5PKQrTVidNBajuBNupMxghSQ0eG1QA0Lw8UADmHJx+w +yN0Poz7YDlrH1A59dP+jIjAgMAkGA1UdEwQCMAAwEwYDVR0lBAwwCgYIKwYBBQUH +AwEwCwYJYIZIAWUDBAMCAy8AMCwCFEXRd3P0r8/zL2q1F8hBvBtefLYaAhRe3+6n +RZpMszcHuz00adaSCeumXg== -----END CERTIFICATE-----" set range global set source factory @@ -25318,55 +29758,55 @@ vncZsUn3T4/gdogfFYgsj1Z2 set enroll-protocol none next edit "Fortinet_SSL_DSA2048" - set password ENC XTJy/NlxQWXxi55sy0Q9sWu4cCs3g03hUGy9QUH4cBC/gcfAfTLfQngB8LyHlpp6qVwbeRInZ4WrWYkyXkVrxyTs0MX1BWif+jLb5RrVpOmQ//MDWaxomJBw5HfamNQJ2aNTpEz2NdpaZ5+IH1W8heUDW2FQRdT61mV/X6quNDm37xYiWp06OjgzTjgYxlQ8FI1nnA== + set password ENC 26+ZnoKzmTKgpiI8RFqm+R347SwIiUcyx0wEaQmqT2rPh6lH/HTpPfBWl2nxDusSQAeex8kxLaVPCvGfcMKrsBxmGtgidk286ovgnzK7itHosRTCTCX0syppKim6D5amEYp2KuGZ3LZ6vajVuTHQWQBjscqNc0RY3jhCqfiih7WWChTFjTeRc7biZfs7flKeF2XKIllmMjY3dkVA set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. " set private-key "-----BEGIN ENCRYPTED PRIVATE KEY----- -MIICxDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQI423a6iaegTUCAggA -MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECLL5kR8fnx8/BIICcGl6EHpfClq5 -xgLGmsyoMKe+QLyAuxjcjqbEFUFWFo9Xo4z+bohzGykxzmLtjYF/PSQ3yCluTK8m -L67Y9HTu+sm5FmCyVZVa/cC8PFCM2/Sb8ufR2e5fjgT2pVbR/Se6OLys+JufBDEu -4Xynd1JI+vDc2Qm75LyVvg9owWUOkRmUXLGHJtDNlRq+X0adozvXNyiGEp7AvxdY -6b7NPV5gfsSlWaBsK8Bu/NYZSCu5ldWmc7MJOVgHgIr48s4KJ14+RNWvwMPBO8G5 -hCjFagBUd9u/5Wqcx0lFBgrATOgltbaHRjwoo2rnMwbYpOUrNDGJ1YC+N3EiJ1IO -d9I4QAAqQkawaEbTRHogzC+oUqS6xK2DL7oqxi6WNrOhM01VjZiUfMqxvrmlyN11 -Nvi8X3lXPZt3VeeU3mCZwpaUguq7He1EIb2uvdVt2oADJYJtwJAdzhWz3phu/v2+ -C6ugXvZoAHCCHuDICC8wn+QZkevOVtJRmn7N+/iFZ74AD9H/opqeFJ5ElEqEokIB -2XDoPdWjIX7rg5ubD9xW2e6xloze1xhVsHCJ0pAhby3NEHz/AQekU/VzbO7ydTlC -A7Mcr0fxVANXNsl5qmkOoUgH6hMOQ/2llj70Sh00ggFlyrKqSCsGSlGzX2lamJfJ -EdUVHKno9lc1vmdIu0dSgzcVH/VLc37bokvCnVllSYwQv/NzS5sYhr+7IvrFVwZN -ZJEXjLU1qUvcPyK4mvcak0VDV3hsTozMUeSx+pyv2jOWkZ+Jk8931B+ES4covprj -Fi79RJKlENddOhMvu45y5ocHkc8/Lzco5UnpageN29XYpb5z8ovCjg== +MIICzDBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQohu/kaEGOZr1q7p2 +5JTY/AICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQI4OSKy7oOLhwEggJw +FXHIOomPQ8JKeD6uhlkxoTWvnc2VqCZTkq91DN1XReQwqqfAGxUtp5SkXEdgGzkI +RPnJesdUSnx6ki6PJ5z+WvClh5G8ERPEHjpu8BeLrtnFU3pBdQG7reT4SsPN6k1F +s7o+XNlRbBZRCRnUM34IBGE3b4pRAbDQhScVSd4+rciKBAr7zGgZzi51aR08v3gX +R7hOqcx3NachnAMhFy3r6Ar5qs6MvxzkqmoE0bpcc4B2kah2E18tBkCdLglWbVku ++nQ3AQ/vWDFRjnFNZM64AxeXboSWl2idGbncR1rziYY7cZQ26wioF/RJ8ZC4iwnF +FDg8u+NKliyBxW70JUvG/OVvNXVtvHWw4csLrMbFXcYwYloUaB62zGpKkFiOjFyl +luU6S83gJ3w+EZZ1s0S6co2Un+iEbtLm4NBnQv9KrTTo1zU5mvnQOG7APV7Z8y2I +x0EbvzCI5+vovaJqFwAP3/3QCF+7Y3B4NTOtIuUCic/k8Wk7fL0N9LLIpxEn5OKD +Z2i/2OmTuSs/E+c97ZsVLXQOXBD4Ne2MiS6JoZbdIx8YjSP5T9YA7x601wjtS47V +5DxRFLGXzxMmU3ziW01XdYwKoDSBbO9gcoTd/1NPOxBNbxoq+3z+pURYoIcrsLGv +W3Ea+KPW+RqRQCPaNhxUY1QxBr7wlY+XmNT0q6qc7xnFqZMH4PteQvNw+yIU66di +RmQmjV3drBtkPVcELgsETWxS9gK0ijvI0Xvo+2ETwbkj+4fkHo9MAO5P9oxOz3nX +Z4xn9pt9d4mvemv8n3sItrw2xFfrLxXBqksg0+twRpkPULzHDVdAp8c1lFChLNEP -----END ENCRYPTED PRIVATE KEY-----" set certificate "-----BEGIN CERTIFICATE----- -MIIFRjCCBOugAwIBAgIIb9Ue9OCxwc4wCwYJYIZIAWUDBAMCMIGdMQswCQYDVQQG +MIIFSDCCBOygAwIBAgIIG0E2Mj+F5a4wCwYJYIZIAWUDBAMCMIGdMQswCQYDVQQG EwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU3Vubnl2YWxlMREw DwYDVQQKDAhGb3J0aW5ldDESMBAGA1UECwwJRm9ydGlHYXRlMRkwFwYDVQQDDBBG Mks2MUZUSzIxOTAwMzM0MSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0 -LmNvbTAeFw0yMjAxMjExMzE3MzNaFw0yNDA0MjUxMzE3MzNaMIGdMQswCQYDVQQG +LmNvbTAeFw0yNTExMTQwMTMwNDFaFw0yODAyMTcwMTMwNDFaMIGdMQswCQYDVQQG EwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU3Vubnl2YWxlMREw DwYDVQQKDAhGb3J0aW5ldDESMBAGA1UECwwJRm9ydGlHYXRlMRkwFwYDVQQDDBBG Mks2MUZUSzIxOTAwMzM0MSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0 -LmNvbTCCA0cwggI5BgcqhkjOOAQBMIICLAKCAQEAobgWFx7GOelSuTz2LQXq2WSf -XNU2bOmog6adPfioJkQfgmSfpzM5O9wFOs0L5oZMDv01Cig8U5UlWvd3sEjyHmiB -EUR0swc2jGMIXuW4d+7Wu9HdiKQ+XwbDTuysoegG/F604I+6syj5PYy5IGKmBUAl -ff2WkrkISafqIUJYKCe6ipF4uK84bc58+elygYLGdtC+64zgq+6PUBcePmKPxWtk -d0FBFiaSwSOnj1fhv38koSOEI3sMfkPYKzIsJd3l8BUoIuj1ISGYQzobO+aZPoGU -GpxnGE8ztyb1ICYe9OEgCXQ5GQ0Y+EHxufarHISvsUbC+ZR8665wThsQc1xOYQIh -ANteeFG+/MJHYNasES0Jr8fS9XU+RVjmS8CuSuhv/JILAoIBAESm2CulfpNo7WGH -b6KmJQSCTH+mGQ8bO3gCRyc5p3l2t1aTG4dFa0x8Od+eCUBzJs31GgeOncY4OPp6 -ZIcqt2L8G9Vc/W9M7b+xNEOO4tF34zxycxg0bsK1mW+kNpBgsBvfBKoKoV1dedy7 -dV3Qmtu/xeIcgG+Uii50MzxpZNKnkYecmj6yA2T7Di5W/kmmRfo6EndQGIXRt6He -fJz8IP1Xq6K86FkvgnnAES1rC0THYbgHBtZi/CQc/plvHc/8fsKWwLhIM5ANMOtN -h9Vsjmb5xQkmrFIdX+K0vDNINd/WETw5HtgDapHmLgIPUPcsHFAewOv96gPEMCnQ -8VdCni0DggEGAAKCAQEAjWAFqLgApELI0RLgmhx551lFckyW2FMaA0m8CZ4auMXA -RvmCtcILrvtzjevaNmdWn3S7/zIa60nYY2JSVgSFss/eP6BpmvBiKbDEb7w1qQ78 -+vj1Ym737AjSgtM96m6kcKCUS3LKZu1LD58IFkf2OC6SlV1MyMClhOnNBS7JjwdO -ZQmvPYVsSr44FFqgKbGOgd6mW/+li7SXI5vRi68ak3rVVIFo+Nq7mbY45e8JSoaM -zWf8mQR9AojvjlfQmlLDmixqbGU+1fKvb+jnK35S+hxg82hvZ5ROcCEEz4M5D8Om -SeeY9Ho4Uy/u+JWEtm2HHN8/abGIhUkq0CY8/FsB5KMiMCAwCQYDVR0TBAIwADAT -BgNVHSUEDDAKBggrBgEFBQcDATALBglghkgBZQMEAwIDSAAwRQIgETGpcM+jLq6B -QJdHqanHlAeKrkBRk+YT7U/f1TDF0oICIQCryEVtHWwX/MOh7rkfwQQvWkcmQQaC -MJWQytLYT+txcQ== +LmNvbTCCA0gwggI6BgcqhkjOOAQBMIICLQKCAQEA61WmKkADZ3KCao4L/AZjFz58 +tC1q2W0NaI+6VfpDy2bBd+/sqwGLPBdtNro3mkjLH/ItrAaaW4gafK96ZBShmMUf +F73xrL+wT/Mtb0HSuDvfYFof3iePiS5REoMWQ7KVOhbrIQIjgxP3kHXlxHd14E11 +TN9mVM3gKlLrHawieALVROgsEC4ImBOCbDIAe3pmaZ9dP42itTKHWxjsXbbaveJN +ZTuF+4pzeuZSVsoKzQfQgQ7AH0iQQPqTVgIMxAtsQHX61oqA+BuLSnnalX+FUmlt +e9itHNB56cBrEL1Qiew8XQw3Avbcjf9jYY/cvCOZluw8E3AqCXNkPrK0+Np9fQIh +AP4dA29px4MxDjXiowNUMQ2tx9dyKjTlF/B0fJJidshZAoIBAQDFBpiWHOOJBR5E +i343f4GMs4yW1yZH4+8EY8s+P5USrQ6IfNuziVzVcnDUeBWsxS2mfG7p+BlBJvGy +t1SqTSNyCgqMxZevFx8SeHLa8vwF3t8YSl8gSEprSN4U+KRPKoxTgc/zhzSJAFNw +Qif6ysthDfBaqGA4hYA0O4Tex0Ue8fVmFgqj9TzEx0imSP0wyeyj7r530Gw5u7Nk +6M2Iv6B1lRDnL7VWlNTWQ3usG93HLyFUrDtHbR6UIA/Mnkb3esPzfiqiI2naThVS +iV3BOPD2gVKKPRxK5YGWnv8u4y5q5r1DG2onrCPj3vWOwpWbEgBhQ5LNDri5vd8C +CyQsP6+UA4IBBgACggEBAIWjSG8VQHRXnnrMuHLOGc5NMiJIUs+YNLS07EjH41D8 +BDW2EwLW15k08ncXLCYmiK6bHfODFcQ0mSiY+XKefhsf+YAjMyKywOVt49Pn8b+x +qBFvw5Ri6/bl9YAx4gOjrIWAEYjX/CgCjEEhVkMSxjiYrPN/5ObuaC2LWTZNFQsY +WRZig4MFivfPQzXFsEAkTjLe/s5fe8ocVr6vtpjq527AP3R/TX9Oz2vbbFKAVIoP +AUnkmGgBNNwpliY9hBWiHi0o5w2XLnesRZMKh2WTpuZ3YYf07SHO42hfpfTMRyab +TQnOHa//dpjk9+m2gIKE72KQSq8vWtl3RxY6/GAA7ZSjIjAgMAkGA1UdEwQCMAAw +EwYDVR0lBAwwCgYIKwYBBQUHAwEwCwYJYIZIAWUDBAMCA0kAMEYCIQCqxHciNf7/ +axdCbb0hhowr/qBaszLxahN1+s3/oaLymgIhANqPdNoihVt71wGs/+5/wHBYI/TA +XZduYvFaQP26BoR6 -----END CERTIFICATE-----" set range global set source factory @@ -25375,29 +29815,29 @@ MJWQytLYT+txcQ== set enroll-protocol none next edit "Fortinet_SSL_ECDSA256" - set password ENC Zc0qRGVu5zLGaF/s0wkZuk/kGxKa0k3t3j4Kl2ZFpseL3MgxMJLumzbdyCABp899EZc8/uYU1y6udEVtj9viOMibk3UGfkAutPUGQfLZLuaQLgFj4kcViYI4zyyuBR5mA3IlOhzxiphNsJh3iYhKW0JuiYQQ51OgYZBBFum33iFb9Ih2F/J4jh8mYwP6KZJtbA5q9g== + set password ENC KYwMgy8NtFxQxbLP8x2sZsx+yRIWRt75jQRfZTLGAko4by2Zl3Q5qz4gYUtsYtwKVsllatRNMoYWTTc/z1l+haUi7yZKRiLLUhJm53RNxw234KV7TQRjFU6f82lJx0muscd7DrS5+GxrV82ghc6LMtmidhMSMbXxtGrjwqkCoyTKai3S3CZBBFJunJo3AZ+aIDaiJllmMjY3dkVA set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. " set private-key "-----BEGIN ENCRYPTED PRIVATE KEY----- -MIHjME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAgQR3h7s0zJsgICCAAw -DAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIn/fyhOSSthkEgZBujg3z5txtL78D -+7Q9qj8V0vxglsbT2Dq44a4Vb6e+70lxx7nKwx8YOQN82JW0IZNITk4V6AXFa6P9 -oPV9G3TPpf09mL+K+BerOOOpjgNj52C7iQmACFY2L7ZwZClWYp7Xmcji4RPVnsSc -xGTks3pYjpVHewU0q4gXjUhhy+CqK+Nwz5qCe5vgypUDTbR3n2g= +MIHrMFYGCSqGSIb3DQEFDTBJMDEGCSqGSIb3DQEFDDAkBBCI1mruvgH/7HAfDiNJ +z4tqAgIIADAMBggqhkiG9w0CCQUAMBQGCCqGSIb3DQMHBAipStdnEcwlAASBkJoJ +FOJHKpu4qjBZIfneUf5VBPJNH+NoDoOB0P/WytBJxoPg09yJ+8VNgim1CuIMaCsj +qArpMB4BlRf5KpDT5ucTbmlPoGj/51Eo+XsSe1ibZtBR8BCLZYBhZy5ikVGbRtGZ +sGg4MDQUlzzWDgDAgHuLz1FY/uqYcW1fgFuNe+xz8UUipVRwP41BW4os6rB54w== -----END ENCRYPTED PRIVATE KEY-----" set certificate "-----BEGIN CERTIFICATE----- -MIICUzCCAfqgAwIBAgIIZRi7f/MAJXcwCgYIKoZIzj0EAwIwgZ0xCzAJBgNVBAYT +MIICVTCCAfqgAwIBAgIILNW6raUlg+YwCgYIKoZIzj0EAwIwgZ0xCzAJBgNVBAYT AlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUxETAP BgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMMEEYy SzYxRlRLMjE5MDAzMzQxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQu -Y29tMB4XDTIyMDEyMTEzMTczM1oXDTI0MDQyNTEzMTczM1owgZ0xCzAJBgNVBAYT +Y29tMB4XDTI1MTExNDAxMzA0MVoXDTI4MDIxNzAxMzA0MVowgZ0xCzAJBgNVBAYT AlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUxETAP BgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMMEEYy SzYxRlRLMjE5MDAzMzQxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQu -Y29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEzQlo5ZS9PJ7tEifDb4GWLIcB -49A0sUddXg6tvIDdZwWDEeNCrHZ2Za55budhEmjUScHT8OOX/RNwbU51BEvJyKMi -MCAwCQYDVR0TBAIwADATBgNVHSUEDDAKBggrBgEFBQcDATAKBggqhkjOPQQDAgNH -ADBEAiB6T3DTjYQg6Th9qmXaf8Sr9YMhzp9THiwKY9wCMjk2UAIgaFZalmSAyAb3 -aPVOyJd/Vo4LhganarUtReirtMNLteE= +Y29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEXxZ/MH6nzGJ8Fe4edYEVjs48 +WceypkDVTxMqxP8U6TRk3YjJMfncX1IsaIfFY3+s31nHBkYn2rjif6NJAK7HMaMi +MCAwCQYDVR0TBAIwADATBgNVHSUEDDAKBggrBgEFBQcDATAKBggqhkjOPQQDAgNJ +ADBGAiEA+Tq+595Ky67PA4Z5H145qNL2oBuS0WWqKkD6Qswge3ACIQCe0jlkjdGl +gH6+9449jDcfsbFryxjwxlCWl9mx/3s/PQ== -----END CERTIFICATE-----" set range global set source factory @@ -25406,31 +29846,31 @@ aPVOyJd/Vo4LhganarUtReirtMNLteE= set enroll-protocol none next edit "Fortinet_SSL_ECDSA384" - set password ENC SPryzUSTr9Ts/jsjZQp+oXy/DDM/HA0YXsit5BE1seRJI+W+EgD4n99AvENkE2dPVK2/NpQSBXo699NR6kSgNMgG9ZFuIBNmSVBKOzzBI3o+48Hq4VcG1Km0aSigWXMEHOs/SIhdgxdBdYJBBY7Wcx2PONB+oaDD4agCkBIUi6sjtc7zvGNC2/kYLQWip3uqkkx1Ag== + set password ENC m2sAgxfbBAajlnw7T003kiM0R77RldnK9VV4cOf5X/epXZZEQkCG2OGrPzhCbgkirpzjXGJVUH11NYEJk1geLXpf+UBLy1cul+usPbX1pvxIRwH0Rq0KYRO53pSPnMXyVXSR2X/0+SuqW5QN97K1LMUYod5j6Fe2KD4/M5pXkYPCgb6EEBkLt91EEmYUj+QEyFDe3llmMjY3dkVA set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. " set private-key "-----BEGIN ENCRYPTED PRIVATE KEY----- -MIIBEzBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQI5M1UYhWoQC4CAggA -MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECJe66bW96f2+BIHAI7yen+vQ4LcJ -1USCfHwEKH4jQwS9dzP+C/Xr80PFp9jcTMXtBYDncLwyLVZva8nyzEY63dr33i6s -fAnaaUpnVSukBK4e+P0IGr1YdCUBrNAi7wlSftv/W2T3XueX6yUC+yanjM82jvGX -ymmqJefTP+6GMIyj6f8/ADdRUdMq1JNBGyCnWmX6Z7jSNe/tsA8VekRFQMa2ksxW -DQf5/S8xtta9dUld/L+bi8qQpa+JV+Ke3ilzLQAyOGmw4XWXN5mx +MIIBGzBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQwNIDx6eQKyFe88I6 +v3/8GwICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIevDgLbDv4aYEgcB2 +EY43HFPy3u5SUrMeC6ozqnhP0H5sxQpgG3nmdnl/CY9DWamo0fBPIsA33+iUZS8F +vNa9+kTKJrwQIi/5ecqtxIbWCBjmdTlxQmeRwNRhiXZl9gzEcdodegfSzS0dobho +AGSATwu5tqPkllRiCfLCCJigkov3SyaTWvdSOMi1fs3gDfyLZSE/wsnv5v0I8OYD +p2s1JNGe1YQag4IaurxRWW7jS6iqa7gokMS2Bx7vG4Bd0Gd8kWCZxtoDCheMDX0= -----END ENCRYPTED PRIVATE KEY-----" set certificate "-----BEGIN CERTIFICATE----- -MIICkTCCAhegAwIBAgIIaKfzT0doMX0wCgYIKoZIzj0EAwIwgZ0xCzAJBgNVBAYT +MIICkjCCAhegAwIBAgIIG5QXpCktDM4wCgYIKoZIzj0EAwIwgZ0xCzAJBgNVBAYT AlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUxETAP BgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMMEEYy SzYxRlRLMjE5MDAzMzQxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQu -Y29tMB4XDTIyMDEyMTEzMTczM1oXDTI0MDQyNTEzMTczM1owgZ0xCzAJBgNVBAYT +Y29tMB4XDTI1MTExNDAxMzA0MVoXDTI4MDIxNzAxMzA0MVowgZ0xCzAJBgNVBAYT AlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUxETAP BgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMMEEYy SzYxRlRLMjE5MDAzMzQxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQu -Y29tMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEXltra7ZMLIm5s1It30E8m0WMLm07 -cqGS0DcSOfH2EznGOMs79QXn/YH1IdbbWEz1w86NfgVxfyi5CWkKqHSsL1DBYLan -y0v4BBrH4no+hB2UvWm3aExhkbqn4cbr10FAoyIwIDAJBgNVHRMEAjAAMBMGA1Ud -JQQMMAoGCCsGAQUFBwMBMAoGCCqGSM49BAMCA2gAMGUCMBRHQLVuZxXEvqOwGRnb -DL4Pi8SL3rLBZVJZw4ll+XIx9clascYG70Xk1ffcQDu4hAIxAJqAd+R0RhjDWrkS -rXRhJBy9Awg19h5c3UFoaQRlfUIYy70XRPrIUGaxGZms7t2qpQ== +Y29tMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEVW+7K239Jc4XxkQBOEwxhPgjnXE6 +Rcq4GTx5wmpsOLvGqKrCaVhVT6Z9lktEDYTMnC6OKk+cCyvp/fMoSUzXyYqyF+XU +NhTkZXLCrnBD58Hwfc/RviA9I5Plr+B7zRqHoyIwIDAJBgNVHRMEAjAAMBMGA1Ud +JQQMMAoGCCsGAQUFBwMBMAoGCCqGSM49BAMCA2kAMGYCMQDP7ndKMvBDNfWc+LFt +uPP9CfFbSkpVEEvLE62ZwP2BeXdA1csWm0vekFbFSh2/iUECMQC5Rj/cpwHCECCw +GwB0oPXBYv0bs6Hpioo+Dy4nEB91ikwjFUhojQ25TmTHw1IuXrY= -----END CERTIFICATE-----" set range global set source factory @@ -25439,34 +29879,35 @@ rXRhJBy9Awg19h5c3UFoaQRlfUIYy70XRPrIUGaxGZms7t2qpQ== set enroll-protocol none next edit "Fortinet_SSL_ECDSA521" - set password ENC pXQyV8/OpZsqqOmbWjb8EC4fmu9COXpnPQ5OYTkY5lNsRBR5JCiZKLlDaS57jRhbJBkFPZEJSg6yzsn6Cnlb7qcb+vN/Hq9N6zo7YqjzBSXRGBy9u5wOOhCVIwNU7YgBeIJZqorkiCxWvivkh1L2HNLjbDA+vRUmWTTt/mc8t9WYSpVdN1nuGjfNacrKscAHm1Kfzw== + set password ENC +kpKhZQbsumXe5WN+IIjD2IjVzWH/xIIvz7ApQo4neLdLBMATvtpcY80vSH7pJDg50aABDWhpJcYEG1hX7tlBD/bsjgxJ0nt1n32bZh/RuuiPFzSPsQPBPwKgtv8TnnSeRNnnhz4hYSRUZsAN0C5eT0KB/r+DT6eBKjz/6i/7eZzbE1M4epNQfo6Ca0AZgDCEJ/BSFlmMjY3dkVA set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. " set private-key "-----BEGIN ENCRYPTED PRIVATE KEY----- -MIIBSzBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQI2JyEZr8Z9Y8CAggA -MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECKJB6WkvvgfJBIH4S2kAnhyyoRVn -9qk1un6uxn4dk+elHrywk0fqC7As76kMGVGxtJUdG9f77qE8vw/Ds5oJJfjJ8Z9U -d2O7hDG+HdjJIpFfUZO3/PvlvRGQ5vrSQ+QXZxozKA1q2MrK+Zc6HXSXvUAeq582 -4LOn7BKR1WTa3nidECR8ha/OHK1bSlzfxcw7dtE3geHET3viqXauACjWshoDgn46 -eJoL9kbmj1J3fOvehlM+NjOkuMqq0e2VA+mFNBrs3TGYzmMjSP525CNJi4EWK10b -83C6D786BoNMUDNdqftASB8JcJ5rs88/jnIzRsPdRx0kJo/OGYPGunrArHx+aes= +MIIBUzBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQP29E4aSH2BWOI7m6 +/Pq8eAICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIRfyxRfyhGZAEgfgu +vzeDQDTdUqsaSReXh2Nm/XJLN9tV+n06SaGGCVBtxr29UTbeKxaLkyu85EcjwhrZ +NqOaJYjRug5ZbYIqpgDTG0eXHT7+o/O2QkGVnVP9frI4ekZ5vdcmyXmS34Wo98SC +Lw6SeLa6yGr/GvA6FGriRme9OCg0JmVIHtn/1AKM0wIBm0QS4J7QPhXYaMeMPGNV +FAh3eIPReR3yVaIEapJ5QpkapJ86eQB90ntP38P51wJci0YrlNXuTz55vsZlB247 +oyziPd21FBGuRByeMHo9pgcY+bpKAHH3dSQ15l8eN4BGzuGPUYGfY9OISRsqQXrH +4dbYlUKaGg== -----END ENCRYPTED PRIVATE KEY-----" set certificate "-----BEGIN CERTIFICATE----- -MIIC3DCCAj2gAwIBAgIIVq8ihaRoKLgwCgYIKoZIzj0EAwIwgZ0xCzAJBgNVBAYT +MIIC2zCCAj2gAwIBAgIIUhWueGMt38AwCgYIKoZIzj0EAwIwgZ0xCzAJBgNVBAYT AlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUxETAP BgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMMEEYy SzYxRlRLMjE5MDAzMzQxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQu -Y29tMB4XDTIyMDEyMTEzMTczM1oXDTI0MDQyNTEzMTczM1owgZ0xCzAJBgNVBAYT +Y29tMB4XDTI1MTExNDAxMzA0MVoXDTI4MDIxNzAxMzA0MVowgZ0xCzAJBgNVBAYT AlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUxETAP BgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMMEEYy SzYxRlRLMjE5MDAzMzQxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQu -Y29tMIGbMBAGByqGSM49AgEGBSuBBAAjA4GGAAQAqfE1xW05XaLgS3pqEAvGluNP -awzUAnkKAGAYCoTf476vdaZx9rXvZsLHf0l4vMKaQ9Bz6UqmT567MQECodv76m0B -CQa8mJiek5dqT/TUTNibO4VK/xd0zkgTyJmzvKfmuG//NKejGZE7V8VQ8r9ZKvX4 -e2imhNBhmkJPZ6e8Zex9EY6jIjAgMAkGA1UdEwQCMAAwEwYDVR0lBAwwCgYIKwYB -BQUHAwEwCgYIKoZIzj0EAwIDgYwAMIGIAkIBgfYFR5Zs8Bv1cBIc5Hxw/HR+SR5T -j/wQQ1PI9if/yx4n5SicKsmU3SV5WdEC/ux8edI6pzgzKqzWGLoxLV45fGECQgES -i8D6f3jce8/D5Ll97+q3Mmq1AHWrUBvBh7QeHd/48IIGQusgkNQbxAjquo2YbDXD -AJvskQzNTa+n/oTmPe0ksw== +Y29tMIGbMBAGByqGSM49AgEGBSuBBAAjA4GGAAQBWqFY/hXIuA6B3fE3Q0AINVCk +vkxEY3t9HpxMOqjeMxheL1c6HJf9K2QnC4qUGvCNYaQAr28Df43EDD58mQyXJMoA +WjUtO9toaW6WPeaK9/vcRabISf5cPv1n5tUEKakmYd7rV8YYThGZEJFvlShdTlFr +0bukZ8z+Y1H9YZFbdAmU2d+jIjAgMAkGA1UdEwQCMAAwEwYDVR0lBAwwCgYIKwYB +BQUHAwEwCgYIKoZIzj0EAwIDgYsAMIGHAkFLvKG8jXen3dXGnWJhz8rAes/Clp3w +MIkVFEisioof2RjQUooxsjXqgFxAJLSGKk39GE9+DpQEXzbNn3NtAt1DvwJCASGT +RTQYKsLZj2Abo40BunNKX88KPo7zkO+OuLfBxRaBc3VGRdu4qlDSg/LjaXOnAuO5 +KmZtc8Ln0iqVyIJn0Xyp -----END CERTIFICATE-----" set range global set source factory @@ -25475,26 +29916,27 @@ AJvskQzNTa+n/oTmPe0ksw== set enroll-protocol none next edit "Fortinet_SSL_ED25519" - set password ENC uHPceZjPq122rGFsIJFCyzNhuwQmy3aVNERMuV3KhVYyczbr67c38O7yCvRwuFWdIknNF0F9uUtZP7/dFeLYEl4SFnF+jllkVppZYH33+EShq9xLPdwSGo2RRsHPpb3EsJt/hjaiFd8HOH+vnyDUl7cyeOX1AAakjsRHVvelOJQ7U5JtXpSsljhISOxYs1XjTVXPzg== + set password ENC DGp9X7XfNZ2XM5bQDbD3/RSGMisUuVk4D5dhplWafGY8UAoPNZYVfrg6Kh+PRwAtEozW/+ncnOFeKTJWbw7vPMPymefKzrEPQLA2slLG06OgLfB5N9cwWWlPypc4SXd5Rs/emoa0tz9BxwGrB+hSsIKPc9HWskT9NfpegrvHhterTzaUyI1JPSFxnV0NlsYc+VCmuVlmMjY3dkVA set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. " set private-key "-----BEGIN ENCRYPTED PRIVATE KEY----- -MIGKME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAjXH8wejW+7FQICCAAw -DAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIUQw7h84j/HcEOC4f4XR4rn9p6c9l -YFPlYjAzt2Lg+GJBGUC36CCN4lqPbWeVGFgSuxJS26+ljKpom3j8NzoQVmTq +MIGSMFYGCSqGSIb3DQEFDTBJMDEGCSqGSIb3DQEFDDAkBBCE64Yv/TRXhencZ/9O +gR++AgIIADAMBggqhkiG9w0CCQUAMBQGCCqGSIb3DQMHBAjbW/xSRzp6/QQ4XZpK +Ya3AEl9Mf0wh+vMy/0+9Zwub8qUJBuZO8yHxb/WCKluWsrbWPs2E+l2lGeuuKxmy +jn5TaCI= -----END ENCRYPTED PRIVATE KEY-----" set certificate "-----BEGIN CERTIFICATE----- -MIICFDCCAcagAwIBAgIIe9Jk9bbV9AowBQYDK2VwMIGdMQswCQYDVQQGEwJVUzET +MIICFDCCAcagAwIBAgIITBDvv7P69TMwBQYDK2VwMIGdMQswCQYDVQQGEwJVUzET MBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU3Vubnl2YWxlMREwDwYDVQQK DAhGb3J0aW5ldDESMBAGA1UECwwJRm9ydGlHYXRlMRkwFwYDVQQDDBBGMks2MUZU SzIxOTAwMzM0MSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0LmNvbTAe -Fw0yMjAxMjExMzE3MzNaFw0yNDA0MjUxMzE3MzNaMIGdMQswCQYDVQQGEwJVUzET +Fw0yNTExMTQwMTMwNDFaFw0yODAyMTcwMTMwNDFaMIGdMQswCQYDVQQGEwJVUzET MBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU3Vubnl2YWxlMREwDwYDVQQK DAhGb3J0aW5ldDESMBAGA1UECwwJRm9ydGlHYXRlMRkwFwYDVQQDDBBGMks2MUZU SzIxOTAwMzM0MSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0LmNvbTAq -MAUGAytlcAMhAPTybe+KeTPvQdh2eRZ/QfcwTvsaMhhZDLq0egkutZgcoyIwIDAJ -BgNVHRMEAjAAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAUGAytlcANBADgJJhYZcDnc -jDiUkqW+EZWsh09in5d/a4DVDk78zqFsrFIbrWTQxotUHEYwu038DxndyIayYw1N -dB6YzHdvZAE= +MAUGAytlcAMhAOEIJR0IxVpfDEnTkVHVFHWB2dR5y7YWirilObrB3wA9oyIwIDAJ +BgNVHRMEAjAAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAUGAytlcANBALBY0q7ljU62 +aGS4USbjVm27TNYyp5kLKKTxLKaUL1QRbR1i+yMl8BhWXPa1p/f2Se6owVtESFvT +VCBi0GLZOgw= -----END CERTIFICATE-----" set range global set source factory @@ -25503,28 +29945,28 @@ dB6YzHdvZAE= set enroll-protocol none next edit "Fortinet_SSL_ED448" - set password ENC RMDpVGdxjzumtfOHVspIB9WR23FmZibs2sZLQKmLaKzWd0qmWi/bNfEaP4kPW+kodAjKlNg+tCVLuym/Wuh4LVRv0DEVws+AuQ4FHhWyJeJQxuuCCDS/ObgnShzeaLjX4cod54BvXn0uM//zk4EWZGfXB2gqrnLe4dJddM4A6oyP3ba+bjt+v2eu4fCKabamtNW8MA== + set password ENC cZlqQnTHDJzgFQrFme3G2rZZZXUlyofV0R99p5c+rnJK1Wz/Vj5HVvPjlwZbezPCppcGG00F0Rz1yDVNNNkUPTHXvC6XE3K/e85uXE8Rekjs81arIZWpb+rpTBgECFwdPr+VqSnWW0JDM1UeOiq1qtjNwVzahhEbXgefQfadgEYRRqEHzKYo/ypYrMGp1oo0973PO1lmMjY3dkVA set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. " set private-key "-----BEGIN ENCRYPTED PRIVATE KEY----- -MIGiME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAh0jSq1wDOswAICCAAw -DAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIDw67IHsEAr8EUIv4lPUsbALEx2Cg -+ji5XUHbl6JO8NC7wROeWyoljbvM1Qjw+1BlviC9FY0sl4J2ootQ7nkJGx6aDKUh -iaSFZdQBI5VljcLnOMz9BZqGmQ0W +MIGqMFYGCSqGSIb3DQEFDTBJMDEGCSqGSIb3DQEFDDAkBBDDquLU2g/j2rpNtDNg ++3vsAgIIADAMBggqhkiG9w0CCQUAMBQGCCqGSIb3DQMHBAhuJyraSnpgKARQf+o1 +1iw1c4Lb0EkvzZgCWveTfOke0oWNmMCfX1aL6cFfMWw4yP+wXVIdY45eWo9QU94j +GIK9ygOZZvCsqVPBNw+QM1OjKgAwBngDyK8qhng= -----END ENCRYPTED PRIVATE KEY-----" set certificate "-----BEGIN CERTIFICATE----- -MIICXzCCAd+gAwIBAgIIEpo4xm2L33kwBQYDK2VxMIGdMQswCQYDVQQGEwJVUzET +MIICXzCCAd+gAwIBAgIIUqB2V4LUdhEwBQYDK2VxMIGdMQswCQYDVQQGEwJVUzET MBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU3Vubnl2YWxlMREwDwYDVQQK DAhGb3J0aW5ldDESMBAGA1UECwwJRm9ydGlHYXRlMRkwFwYDVQQDDBBGMks2MUZU SzIxOTAwMzM0MSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0LmNvbTAe -Fw0yMjAxMjExMzE3MzNaFw0yNDA0MjUxMzE3MzNaMIGdMQswCQYDVQQGEwJVUzET +Fw0yNTExMTQwMTMwNDFaFw0yODAyMTcwMTMwNDFaMIGdMQswCQYDVQQGEwJVUzET MBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU3Vubnl2YWxlMREwDwYDVQQK DAhGb3J0aW5ldDESMBAGA1UECwwJRm9ydGlHYXRlMRkwFwYDVQQDDBBGMks2MUZU SzIxOTAwMzM0MSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0LmNvbTBD -MAUGAytlcQM6AFjYzJ8Mqakz7JW0a/UxfzmYUdJ8ctXQ3KLxx/smIp6dq2tAJS62 -K7nL2gm9oVHYfVGGzASzH6zcAKMiMCAwCQYDVR0TBAIwADATBgNVHSUEDDAKBggr -BgEFBQcDATAFBgMrZXEDcwDSOW6ovjbS16JdUIQc4SHTPXQCnp3gN/3hRdcllT7X -PhPTkxF0UQt34SIc/r8Bk+ZOI2jTFmxgegB8r65l0m1JEG8o25GjnLs/Y7picq6g -Ci9wZHk6Jp1Z8BotCQLQsTqgitidAXzT3exG7bnl4C08EAA= +MAUGAytlcQM6AAn6asaIw/7cIyfljXliVKnU3VnxEDZEh9KIbyjEQd6yVnBOs0Ow +ZouU6IZyNgACdgHwjrDrtvWLAKMiMCAwCQYDVR0TBAIwADATBgNVHSUEDDAKBggr +BgEFBQcDATAFBgMrZXEDcwCqpxarhVT445RMmBoADOCGxmrRGmvaO48HCXtYJOvs ++EWF9/UZ9i/4hp6oXlDLApSfsfbfxCA+IQBShUUavyPENIKqTos8Wzwy8UG/O0zD +1CcB0l2Yd63XwzGbI2q1duj5Mq7IlVHCZMJaJNePEhdzJgA= -----END CERTIFICATE-----" set range global set source factory @@ -25545,10 +29987,13 @@ config ips sensor config entries edit 1 set location all - set severity medium high critical + set severity medium high critical set protocol all set os all set application all + set default-action all + set default-status all + unset last-modified set status default set log enable set log-packet disable @@ -25567,10 +30012,13 @@ config ips sensor config entries edit 1 set location all - set severity medium high critical + set severity medium high critical set protocol all set os all set application all + set default-action all + set default-status all + unset last-modified set status default set log enable set log-packet disable @@ -25589,10 +30037,13 @@ config ips sensor config entries edit 1 set location all - set severity medium high critical + set severity medium high critical set protocol all set os all set application all + set default-action all + set default-status all + unset last-modified set status default set log enable set log-packet disable @@ -25605,6 +30056,8 @@ config ips sensor end config sctp-filter profile end +config diameter-filter profile +end config application list edit "g-default" set comment "Monitor all applications." @@ -25706,9 +30159,74 @@ config application list set control-default-network-services disable next end +config dlp data-type + edit "g-edm-keyword" + set pattern ".+" + set verify '' + set match-around '' + set transform "/\\b\\0\\b/i" + set comment '' + next + edit "g-keyword" + set pattern "built-in" + set verify '' + set match-around '' + set transform '' + set comment '' + next + edit "g-regex" + set pattern "built-in" + set verify '' + set match-around '' + set transform '' + set comment '' + next + edit "g-hex" + set pattern "built-in" + set verify '' + set match-around '' + set transform '' + set comment '' + next + edit "g-mip-label" + set pattern "^[[:xdigit:]]{8}-[[:xdigit:]]{4}-[[:xdigit:]]{4}-[[:xdigit:]]{4}-[[:xdigit:]]{12}$" + set verify '' + set match-around '' + set transform "built-in" + set comment '' + next + edit "g-credit-card" + set pattern "\\b([2-6]{1}\\d{3})[- ]?(\\d{4})[- ]?(\\d{2})[- ]?(\\d{2})[- ]?(\\d{2,4})\\b" + set verify "builtin)credit-card" + set verify2 '' + set match-around '' + set look-back 20 + set look-ahead 1 + set transform "\\b\\1[- ]?\\2[- ]?\\3[- ]?\\4[- ]?\\5\\b" + set verify-transformed-pattern disable + set comment '' + next + edit "g-ssn-us" + set pattern "\\b(\\d{3})-(\\d{2})-(\\d{4})\\b" + set verify "(?