#config-version=FGVMK6-7.4.0-FW-build2360-230509:opmode=0:vdom=0:user=admin
#conf_file_ver=2719465918273791
#buildno=2360
#global_vdom=1
config system global
    set alias "FortiGate-VM64-KVM"
    set hostname "HUB1"
    set timezone 80
end
config system accprofile
    edit "prof_admin"
        set secfabgrp read-write
        set ftviewgrp read-write
        set authgrp read-write
        set sysgrp read-write
        set netgrp read-write
        set loggrp read-write
        set fwgrp read-write
        set vpngrp read-write
        set utmgrp read-write
        set wanoptgrp read-write
        set wifi read-write
    next
    edit "nologout"
        set secfabgrp read-write
        set ftviewgrp read-write
        set authgrp read-write
        set sysgrp read-write
        set netgrp read-write
        set loggrp read-write
        set fwgrp read-write
        set vpngrp read-write
        set utmgrp read-write
        set wanoptgrp read-write
        set wifi read-write
        set admintimeout-override enable
        set admintimeout 0
    next
end
config system interface
    edit "port1"
        set vdom "root"
        set ip 10.1.0.1 255.255.255.0
        set allowaccess ping https ssh http fgfm
        set type physical
        set snmp-index 1
        set ip-managed-by-fortiipam disable
    next
    edit "port2"
        set vdom "root"
        set ip 1.1.1.1 255.255.255.0
        set allowaccess ping
        set bfd enable
        set type physical
        set snmp-index 2
        set ip-managed-by-fortiipam disable
    next
    edit "port3"
        set vdom "root"
        set ip 11.11.11.11 255.255.255.0
        set allowaccess ping
        set bfd enable
        set type physical
        set snmp-index 3
        set ip-managed-by-fortiipam disable
    next
    edit "port4"
        set vdom "root"
        set status down
        set type physical
        set snmp-index 4
        set ip-managed-by-fortiipam disable
    next
    edit "port5"
        set vdom "root"
        set ip 192.168.100.20 255.255.255.0
        set allowaccess fgfm
        set type physical
        set snmp-index 5
    next
    edit "port6"
        set vdom "root"
        set ip 192.168.200.20 255.255.255.0
        set allowaccess https ssh
        set type physical
        set snmp-index 6
    next
    edit "naf.root"
        set vdom "root"
        set type tunnel
        set src-check disable
        set snmp-index 7
    next
    edit "l2t.root"
        set vdom "root"
        set type tunnel
        set snmp-index 8
    next
    edit "ssl.root"
        set vdom "root"
        set type tunnel
        set alias "SSL VPN interface"
        set snmp-index 9
    next
    edit "fortilink"
        set vdom "root"
        set fortilink enable
        set ip 10.255.1.1 255.255.255.0
        set allowaccess ping fabric
        set type aggregate
        set lldp-reception enable
        set lldp-transmission enable
        set snmp-index 10
    next
    edit "VPN1"
        set vdom "root"
        set ip 172.31.31.253 255.255.255.255
        set type tunnel
        set remote-ip 172.31.31.254 255.255.224.0
        set snmp-index 112
        set interface "port2"
    next
    edit "VPN2"
        set vdom "root"
        set ip 172.31.63.253 255.255.255.255
        set type tunnel
        set remote-ip 172.31.63.254 255.255.224.0
        set snmp-index 113
        set interface "port3"
    next
    edit "HUB1-Lo"
        set vdom "root"
        set ip 172.29.100.253 255.255.255.255
        set allowaccess ping
        set type loopback
        set snmp-index 114
    next
    edit "HUB1-Lo2"
        set vdom "root"
        set ip 172.29.101.253 255.255.255.255
        set type loopback
        set role lan
        set snmp-index 11
    next
    edit "To-HUB2"
        set vdom "root"
        set type tunnel
        set snmp-index 12
        set interface "port2"
    next
end
config system custom-language
    edit "en"
        set filename "en"
    next
    edit "fr"
        set filename "fr"
    next
    edit "sp"
        set filename "sp"
    next
    edit "pg"
        set filename "pg"
    next
    edit "x-sjis"
        set filename "x-sjis"
    next
    edit "big5"
        set filename "big5"
    next
    edit "GB2312"
        set filename "GB2312"
    next
    edit "euc-kr"
        set filename "euc-kr"
    next
end
config system admin
    edit "admin"
        set accprofile "super_admin"
        set vdom "root"
        config gui-dashboard
            edit 1
                set name "Status"
                set vdom "root"
                set permanent enable
                config widget
                    edit 1
                        set width 1
                        set height 1
                    next
                    edit 2
                        set type licinfo
                        set x-pos 1
                        set width 1
                        set height 1
                    next
                    edit 3
                        set type vminfo
                        set x-pos 2
                        set width 1
                        set height 1
                    next
                    edit 4
                        set type forticloud
                        set x-pos 3
                        set width 1
                        set height 1
                    next
                    edit 5
                        set type security-fabric
                        set x-pos 4
                        set width 1
                        set height 1
                    next
                    edit 6
                        set type admins
                        set x-pos 5
                        set width 1
                        set height 1
                    next
                    edit 7
                        set type cpu-usage
                        set x-pos 6
                        set width 2
                        set height 1
                    next
                    edit 8
                        set type memory-usage
                        set x-pos 7
                        set width 2
                        set height 1
                    next
                    edit 9
                        set type sessions
                        set x-pos 8
                        set width 2
                        set height 1
                    next
                end
            next
            edit 2
                set name "Security"
                set vdom "root"
                config widget
                    edit 1
                        set type fortiview
                        set width 2
                        set height 1
                        set fortiview-type "compromisedHosts"
                        set fortiview-sort-by "verdict"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 2
                        set type fortiview
                        set x-pos 1
                        set width 2
                        set height 1
                        set fortiview-type "threats"
                        set fortiview-sort-by "threatLevel"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                    edit 3
                        set type device-vulnerability
                        set x-pos 2
                        set width 2
                        set height 1
                    next
                end
            next
            edit 3
                set name "Network"
                set vdom "root"
                config widget
                    edit 1
                        set type routing
                        set width 2
                        set height 1
                        set router-view-type "staticdynamic"
                    next
                    edit 2
                        set type dhcp
                        set x-pos 1
                        set width 2
                        set height 1
                    next
                    edit 3
                        set type virtual-wan
                        set x-pos 2
                        set width 2
                        set height 1
                    next
                    edit 4
                        set type ipsec-vpn
                        set x-pos 3
                        set width 2
                        set height 1
                    next
                    edit 5
                        set type ssl-vpn
                        set x-pos 4
                        set width 1
                        set height 1
                    next
                end
            next
            edit 4
                set name "Assets & Identities"
                set vdom "root"
                config widget
                    edit 1
                        set type device-inventory
                        set width 2
                        set height 1
                    next
                    edit 2
                        set type identities
                        set x-pos 1
                        set width 2
                        set height 1
                    next
                    edit 3
                        set type firewall-user
                        set x-pos 2
                        set width 2
                        set height 1
                    next
                    edit 4
                        set type quarantine
                        set x-pos 3
                        set width 2
                        set height 1
                    next
                    edit 5
                        set type nac-vlans
                        set x-pos 4
                        set width 2
                        set height 1
                    next
                end
            next
            edit 5
                set name "WiFi"
                set vdom "root"
                config widget
                    edit 1
                        set type ap-status
                        set width 2
                        set height 1
                    next
                    edit 2
                        set type channel-utilization
                        set x-pos 1
                        set width 2
                        set height 1
                        set wifi-band "both"
                    next
                    edit 3
                        set type clients-by-ap
                        set x-pos 2
                        set width 2
                        set height 1
                        set wifi-band "both"
                    next
                    edit 4
                        set type client-signal-strength
                        set x-pos 3
                        set width 2
                        set height 1
                        set wifi-band "both"
                    next
                    edit 5
                        set type rogue-ap
                        set x-pos 4
                        set width 2
                        set height 1
                    next
                    edit 6
                        set type historical-clients
                        set x-pos 5
                        set width 2
                        set height 1
                        set wifi-band "both"
                    next
                    edit 7
                        set type interfering-ssids
                        set x-pos 6
                        set width 2
                        set height 1
                        set wifi-band "both"
                    next
                    edit 8
                        set type wifi-login-failures
                        set x-pos 7
                        set width 2
                        set height 1
                    next
                end
            next
            edit 6
                set name "FortiView Sources"
                set vdom "root"
                set layout-type standalone
                set csf disable
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "source"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 7
                set name "FortiView Destinations"
                set vdom "root"
                set layout-type standalone
                set csf disable
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "destination"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 8
                set name "FortiView Applications"
                set vdom "root"
                set layout-type standalone
                set csf disable
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "application"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 9
                set name "FortiView Web Sites"
                set vdom "root"
                set layout-type standalone
                set csf disable
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "website"
                        set fortiview-sort-by "sessions"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 10
                set name "FortiView Policies"
                set vdom "root"
                set layout-type standalone
                set csf disable
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "policy"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "hour"
                        set fortiview-visualization "table"
                    next
                end
            next
            edit 11
                set name "FortiView Sessions"
                set vdom "root"
                set layout-type standalone
                set csf disable
                config widget
                    edit 1
                        set type fortiview
                        set width 6
                        set height 3
                        set fortiview-type "realtimeSessions"
                        set fortiview-sort-by "bytes"
                        set fortiview-timeframe "realtime"
                        set fortiview-visualization "table"
                    next
                end
            next
        end
        set gui-ignore-release-overview-version "7.4.0"
        set password ENC SH210MPpmQCQESyYGalG/Nmpd+uqFCiItmuF4HxjOo8GxUkXlPRMUGPQqEcn5E=
    next
end
config system sso-admin
end
config system ha
    set override disable
end
config system auto-scale
end
config system dns
    set primary 96.45.45.45
    set secondary 96.45.46.46
end
config system replacemsg-image
    edit "logo_fnet"
    next
    edit "logo_fguard_wf"
    next
    edit "logo_v3_fguard_app"
    next
end
config system replacemsg mail "partial"
end
config system replacemsg http "url-block"
end
config system replacemsg http "urlfilter-err"
end
config system replacemsg http "infcache-block"
end
config system replacemsg http "http-contenttypeblock"
end
config system replacemsg http "https-invalid-cert-block"
end
config system replacemsg http "https-untrusted-cert-block"
end
config system replacemsg http "https-blocklisted-cert-block"
end
config system replacemsg http "switching-protocols-block"
end
config system replacemsg http "http-antiphish-block"
end
config system replacemsg http "videofilter-block"
end
config system replacemsg webproxy "deny"
end
config system replacemsg webproxy "user-limit"
end
config system replacemsg webproxy "auth-challenge"
end
config system replacemsg webproxy "auth-login-fail"
end
config system replacemsg webproxy "auth-group-info-fail"
end
config system replacemsg webproxy "http-err"
end
config system replacemsg webproxy "auth-ip-blackout"
end
config system replacemsg webproxy "ztna-block"
end
config system replacemsg ftp "ftp-explicit-banner"
end
config system replacemsg fortiguard-wf "ftgd-block"
end
config system replacemsg fortiguard-wf "ftgd-ovrd"
end
config system replacemsg fortiguard-wf "ftgd-quota"
end
config system replacemsg fortiguard-wf "ftgd-warning"
end
config system replacemsg spam "ipblocklist"
end
config system replacemsg spam "smtp-spam-dnsbl"
end
config system replacemsg spam "smtp-spam-feip"
end
config system replacemsg spam "smtp-spam-helo"
end
config system replacemsg spam "smtp-spam-emailblock-to"
end
config system replacemsg spam "smtp-spam-emailblock-from"
end
config system replacemsg spam "smtp-spam-emailblock-subject"
end
config system replacemsg spam "smtp-spam-mimeheader"
end
config system replacemsg spam "reversedns"
end
config system replacemsg spam "smtp-spam-ase"
end
config system replacemsg spam "submit"
end
config system replacemsg alertmail "alertmail-virus"
end
config system replacemsg alertmail "alertmail-block"
end
config system replacemsg alertmail "alertmail-nids-event"
end
config system replacemsg alertmail "alertmail-crit-event"
end
config system replacemsg alertmail "alertmail-disk-full"
end
config system replacemsg admin "pre_admin-disclaimer-text"
end
config system replacemsg admin "post_admin-disclaimer-text"
end
config system replacemsg auth "auth-disclaimer-page-1"
end
config system replacemsg auth "auth-disclaimer-page-2"
end
config system replacemsg auth "auth-disclaimer-page-3"
end
config system replacemsg auth "auth-proxy-reject-page"
end
config system replacemsg auth "auth-reject-page"
end
config system replacemsg auth "auth-login-page"
end
config system replacemsg auth "auth-login-failed-page"
end
config system replacemsg auth "auth-token-login-page"
end
config system replacemsg auth "auth-token-login-failed-page"
end
config system replacemsg auth "auth-success-msg"
end
config system replacemsg auth "auth-challenge-page"
end
config system replacemsg auth "auth-keepalive-page"
end
config system replacemsg auth "auth-portal-page"
end
config system replacemsg auth "auth-password-page"
end
config system replacemsg auth "auth-fortitoken-page"
end
config system replacemsg auth "auth-next-fortitoken-page"
end
config system replacemsg auth "auth-email-token-page"
end
config system replacemsg auth "auth-sms-token-page"
end
config system replacemsg auth "auth-email-harvesting-page"
end
config system replacemsg auth "auth-email-failed-page"
end
config system replacemsg auth "auth-cert-passwd-page"
end
config system replacemsg auth "auth-guest-print-page"
end
config system replacemsg auth "auth-guest-email-page"
end
config system replacemsg auth "auth-success-page"
end
config system replacemsg auth "auth-block-notification-page"
end
config system replacemsg auth "auth-quarantine-page"
end
config system replacemsg auth "auth-qtn-reject-page"
end
config system replacemsg auth "auth-saml-page"
end
config system replacemsg sslvpn "sslvpn-login"
end
config system replacemsg sslvpn "sslvpn-header"
end
config system replacemsg sslvpn "sslvpn-limit"
end
config system replacemsg sslvpn "hostcheck-error"
end
config system replacemsg sslvpn "sslvpn-provision-user"
end
config system replacemsg sslvpn "sslvpn-provision-user-sms"
end
config system replacemsg nac-quar "nac-quar-virus"
end
config system replacemsg nac-quar "nac-quar-dos"
end
config system replacemsg nac-quar "nac-quar-ips"
end
config system replacemsg nac-quar "nac-quar-dlp"
end
config system replacemsg nac-quar "nac-quar-admin"
end
config system replacemsg nac-quar "nac-quar-app"
end
config system replacemsg traffic-quota "per-ip-shaper-block"
end
config system replacemsg utm "virus-html"
end
config system replacemsg utm "client-virus-html"
end
config system replacemsg utm "virus-text"
end
config system replacemsg utm "dlp-html"
end
config system replacemsg utm "dlp-text"
end
config system replacemsg utm "appblk-html"
end
config system replacemsg utm "ipsblk-html"
end
config system replacemsg utm "ipsfail-html"
end
config system replacemsg utm "exe-text"
end
config system replacemsg utm "waf-html"
end
config system replacemsg utm "outbreak-prevention-html"
end
config system replacemsg utm "outbreak-prevention-text"
end
config system replacemsg utm "external-blocklist-html"
end
config system replacemsg utm "external-blocklist-text"
end
config system replacemsg utm "ems-threat-feed-html"
end
config system replacemsg utm "ems-threat-feed-text"
end
config system replacemsg utm "file-filter-html"
end
config system replacemsg utm "file-filter-text"
end
config system replacemsg utm "file-size-text"
end
config system replacemsg utm "transfer-size-text"
end
config system replacemsg utm "internal-error-text"
end
config system replacemsg utm "archive-block-html"
end
config system replacemsg utm "archive-block-text"
end
config system replacemsg utm "file-av-fail-text"
end
config system replacemsg utm "transfer-av-fail-text"
end
config system replacemsg utm "banned-word-html"
end
config system replacemsg utm "banned-word-text"
end
config system replacemsg utm "block-html"
end
config system replacemsg utm "block-text"
end
config system replacemsg utm "decompress-limit-text"
end
config system replacemsg utm "dlp-subject-text"
end
config system replacemsg utm "file-size-html"
end
config system replacemsg utm "client-file-size-html"
end
config system replacemsg utm "inline-scan-timeout-html"
end
config system replacemsg utm "inline-scan-timeout-text"
end
config system replacemsg utm "inline-scan-error-html"
end
config system replacemsg utm "inline-scan-error-text"
end
config system replacemsg utm "icap-block-text"
end
config system replacemsg utm "icap-error-text"
end
config system replacemsg utm "icap-http-error"
end
config system replacemsg icap "icap-req-resp"
end
config system replacemsg automation "automation-email"
end
config system snmp sysinfo
end
config system central-management
    set type fortimanager
    set serial-number "FMG-VMTM23016697"
    set fmg "::ffff:192.168.100.99"
end
config firewall internet-service-name
    edit "Google-Other"
        set internet-service-id 65536
    next
    edit "Google-Web"
        set internet-service-id 65537
    next
    edit "Google-ICMP"
        set internet-service-id 65538
    next
    edit "Google-DNS"
        set internet-service-id 65539
    next
    edit "Google-Outbound_Email"
        set internet-service-id 65540
    next
    edit "Google-SSH"
        set internet-service-id 65542
    next
    edit "Google-FTP"
        set internet-service-id 65543
    next
    edit "Google-NTP"
        set internet-service-id 65544
    next
    edit "Google-Inbound_Email"
        set internet-service-id 65545
    next
    edit "Google-LDAP"
        set internet-service-id 65550
    next
    edit "Google-NetBIOS.Session.Service"
        set internet-service-id 65551
    next
    edit "Google-RTMP"
        set internet-service-id 65552
    next
    edit "Google-NetBIOS.Name.Service"
        set internet-service-id 65560
    next
    edit "Google-Google.Cloud"
        set internet-service-id 65641
    next
    edit "Google-Google.Bot"
        set internet-service-id 65643
    next
    edit "Google-Gmail"
        set internet-service-id 65646
    next
    edit "Meta-Other"
        set internet-service-id 131072
    next
    edit "Meta-Web"
        set internet-service-id 131073
    next
    edit "Meta-ICMP"
        set internet-service-id 131074
    next
    edit "Meta-DNS"
        set internet-service-id 131075
    next
    edit "Meta-Outbound_Email"
        set internet-service-id 131076
    next
    edit "Meta-SSH"
        set internet-service-id 131078
    next
    edit "Meta-FTP"
        set internet-service-id 131079
    next
    edit "Meta-NTP"
        set internet-service-id 131080
    next
    edit "Meta-Inbound_Email"
        set internet-service-id 131081
    next
    edit "Meta-LDAP"
        set internet-service-id 131086
    next
    edit "Meta-NetBIOS.Session.Service"
        set internet-service-id 131087
    next
    edit "Meta-RTMP"
        set internet-service-id 131088
    next
    edit "Meta-NetBIOS.Name.Service"
        set internet-service-id 131096
    next
    edit "Meta-Whatsapp"
        set internet-service-id 131184
    next
    edit "Meta-Instagram"
        set internet-service-id 131189
    next
    edit "Apple-Other"
        set internet-service-id 196608
    next
    edit "Apple-Web"
        set internet-service-id 196609
    next
    edit "Apple-ICMP"
        set internet-service-id 196610
    next
    edit "Apple-DNS"
        set internet-service-id 196611
    next
    edit "Apple-Outbound_Email"
        set internet-service-id 196612
    next
    edit "Apple-SSH"
        set internet-service-id 196614
    next
    edit "Apple-FTP"
        set internet-service-id 196615
    next
    edit "Apple-NTP"
        set internet-service-id 196616
    next
    edit "Apple-Inbound_Email"
        set internet-service-id 196617
    next
    edit "Apple-LDAP"
        set internet-service-id 196622
    next
    edit "Apple-NetBIOS.Session.Service"
        set internet-service-id 196623
    next
    edit "Apple-RTMP"
        set internet-service-id 196624
    next
    edit "Apple-NetBIOS.Name.Service"
        set internet-service-id 196632
    next
    edit "Apple-App.Store"
        set internet-service-id 196723
    next
    edit "Apple-APNs"
        set internet-service-id 196747
    next
    edit "Yahoo-Other"
        set internet-service-id 262144
    next
    edit "Yahoo-Web"
        set internet-service-id 262145
    next
    edit "Yahoo-ICMP"
        set internet-service-id 262146
    next
    edit "Yahoo-DNS"
        set internet-service-id 262147
    next
    edit "Yahoo-Outbound_Email"
        set internet-service-id 262148
    next
    edit "Yahoo-SSH"
        set internet-service-id 262150
    next
    edit "Yahoo-FTP"
        set internet-service-id 262151
    next
    edit "Yahoo-NTP"
        set internet-service-id 262152
    next
    edit "Yahoo-Inbound_Email"
        set internet-service-id 262153
    next
    edit "Yahoo-LDAP"
        set internet-service-id 262158
    next
    edit "Yahoo-NetBIOS.Session.Service"
        set internet-service-id 262159
    next
    edit "Yahoo-RTMP"
        set internet-service-id 262160
    next
    edit "Yahoo-NetBIOS.Name.Service"
        set internet-service-id 262168
    next
    edit "Microsoft-Other"
        set internet-service-id 327680
    next
    edit "Microsoft-Web"
        set internet-service-id 327681
    next
    edit "Microsoft-ICMP"
        set internet-service-id 327682
    next
    edit "Microsoft-DNS"
        set internet-service-id 327683
    next
    edit "Microsoft-Outbound_Email"
        set internet-service-id 327684
    next
    edit "Microsoft-SSH"
        set internet-service-id 327686
    next
    edit "Microsoft-FTP"
        set internet-service-id 327687
    next
    edit "Microsoft-NTP"
        set internet-service-id 327688
    next
    edit "Microsoft-Inbound_Email"
        set internet-service-id 327689
    next
    edit "Microsoft-LDAP"
        set internet-service-id 327694
    next
    edit "Microsoft-NetBIOS.Session.Service"
        set internet-service-id 327695
    next
    edit "Microsoft-RTMP"
        set internet-service-id 327696
    next
    edit "Microsoft-NetBIOS.Name.Service"
        set internet-service-id 327704
    next
    edit "Microsoft-Skype_Teams"
        set internet-service-id 327781
    next
    edit "Microsoft-Office365"
        set internet-service-id 327782
    next
    edit "Microsoft-Azure"
        set internet-service-id 327786
    next
    edit "Microsoft-Bing.Bot"
        set internet-service-id 327788
    next
    edit "Microsoft-Outlook"
        set internet-service-id 327791
    next
    edit "Microsoft-Microsoft.Update"
        set internet-service-id 327793
    next
    edit "Microsoft-Dynamics"
        set internet-service-id 327837
    next
    edit "Microsoft-WNS"
        set internet-service-id 327839
    next
    edit "Microsoft-Office365.Published"
        set internet-service-id 327880
    next
    edit "Microsoft-Intune"
        set internet-service-id 327886
    next
    edit "Microsoft-Office365.Published.Optimize"
        set internet-service-id 327902
    next
    edit "Microsoft-Office365.Published.Allow"
        set internet-service-id 327903
    next
    edit "Microsoft-Office365.Published.USGOV"
        set internet-service-id 327917
    next
    edit "Microsoft-Azure.Monitor"
        set internet-service-id 327958
    next
    edit "Microsoft-Azure.SQL"
        set internet-service-id 327959
    next
    edit "Microsoft-Azure.AD"
        set internet-service-id 327960
    next
    edit "Microsoft-Azure.Data.Factory"
        set internet-service-id 327961
    next
    edit "Microsoft-Azure.Virtual.Desktop"
        set internet-service-id 327962
    next
    edit "Microsoft-Azure.Power.BI"
        set internet-service-id 327963
    next
    edit "Amazon-Other"
        set internet-service-id 393216
    next
    edit "Amazon-Web"
        set internet-service-id 393217
    next
    edit "Amazon-ICMP"
        set internet-service-id 393218
    next
    edit "Amazon-DNS"
        set internet-service-id 393219
    next
    edit "Amazon-Outbound_Email"
        set internet-service-id 393220
    next
    edit "Amazon-SSH"
        set internet-service-id 393222
    next
    edit "Amazon-FTP"
        set internet-service-id 393223
    next
    edit "Amazon-NTP"
        set internet-service-id 393224
    next
    edit "Amazon-Inbound_Email"
        set internet-service-id 393225
    next
    edit "Amazon-LDAP"
        set internet-service-id 393230
    next
    edit "Amazon-NetBIOS.Session.Service"
        set internet-service-id 393231
    next
    edit "Amazon-RTMP"
        set internet-service-id 393232
    next
    edit "Amazon-NetBIOS.Name.Service"
        set internet-service-id 393240
    next
    edit "Amazon-AWS"
        set internet-service-id 393320
    next
    edit "Amazon-AWS.WorkSpaces.Gateway"
        set internet-service-id 393403
    next
    edit "Amazon-Twitch"
        set internet-service-id 393446
    next
    edit "Amazon-AWS.GovCloud.US"
        set internet-service-id 393452
    next
    edit "Amazon-AWS.EBS"
        set internet-service-id 393470
    next
    edit "Amazon-AWS.Cloud9"
        set internet-service-id 393471
    next
    edit "Amazon-AWS.DynamoDB"
        set internet-service-id 393472
    next
    edit "Amazon-AWS.Route53"
        set internet-service-id 393473
    next
    edit "Amazon-AWS.S3"
        set internet-service-id 393474
    next
    edit "Amazon-AWS.Kinesis.Video.Streams"
        set internet-service-id 393475
    next
    edit "Amazon-AWS.Global.Accelerator"
        set internet-service-id 393476
    next
    edit "Amazon-AWS.EC2"
        set internet-service-id 393477
    next
    edit "Amazon-AWS.API.Gateway"
        set internet-service-id 393478
    next
    edit "Amazon-AWS.Chime.Voice.Connector"
        set internet-service-id 393479
    next
    edit "Amazon-AWS.Connect"
        set internet-service-id 393480
    next
    edit "Amazon-AWS.CloudFront"
        set internet-service-id 393481
    next
    edit "Amazon-AWS.CodeBuild"
        set internet-service-id 393482
    next
    edit "Amazon-AWS.Chime.Meetings"
        set internet-service-id 393483
    next
    edit "Amazon-AWS.AppFlow"
        set internet-service-id 393484
    next
    edit "Amazon-Amazon.SES"
        set internet-service-id 393493
    next
    edit "eBay-Other"
        set internet-service-id 458752
    next
    edit "eBay-Web"
        set internet-service-id 458753
    next
    edit "eBay-ICMP"
        set internet-service-id 458754
    next
    edit "eBay-DNS"
        set internet-service-id 458755
    next
    edit "eBay-Outbound_Email"
        set internet-service-id 458756
    next
    edit "eBay-SSH"
        set internet-service-id 458758
    next
    edit "eBay-FTP"
        set internet-service-id 458759
    next
    edit "eBay-NTP"
        set internet-service-id 458760
    next
    edit "eBay-Inbound_Email"
        set internet-service-id 458761
    next
    edit "eBay-LDAP"
        set internet-service-id 458766
    next
    edit "eBay-NetBIOS.Session.Service"
        set internet-service-id 458767
    next
    edit "eBay-RTMP"
        set internet-service-id 458768
    next
    edit "eBay-NetBIOS.Name.Service"
        set internet-service-id 458776
    next
    edit "PayPal-Other"
        set internet-service-id 524288
    next
    edit "PayPal-Web"
        set internet-service-id 524289
    next
    edit "PayPal-ICMP"
        set internet-service-id 524290
    next
    edit "PayPal-DNS"
        set internet-service-id 524291
    next
    edit "PayPal-Outbound_Email"
        set internet-service-id 524292
    next
    edit "PayPal-SSH"
        set internet-service-id 524294
    next
    edit "PayPal-FTP"
        set internet-service-id 524295
    next
    edit "PayPal-NTP"
        set internet-service-id 524296
    next
    edit "PayPal-Inbound_Email"
        set internet-service-id 524297
    next
    edit "PayPal-LDAP"
        set internet-service-id 524302
    next
    edit "PayPal-NetBIOS.Session.Service"
        set internet-service-id 524303
    next
    edit "PayPal-RTMP"
        set internet-service-id 524304
    next
    edit "PayPal-NetBIOS.Name.Service"
        set internet-service-id 524312
    next
    edit "Box-Other"
        set internet-service-id 589824
    next
    edit "Box-Web"
        set internet-service-id 589825
    next
    edit "Box-ICMP"
        set internet-service-id 589826
    next
    edit "Box-DNS"
        set internet-service-id 589827
    next
    edit "Box-Outbound_Email"
        set internet-service-id 589828
    next
    edit "Box-SSH"
        set internet-service-id 589830
    next
    edit "Box-FTP"
        set internet-service-id 589831
    next
    edit "Box-NTP"
        set internet-service-id 589832
    next
    edit "Box-Inbound_Email"
        set internet-service-id 589833
    next
    edit "Box-LDAP"
        set internet-service-id 589838
    next
    edit "Box-NetBIOS.Session.Service"
        set internet-service-id 589839
    next
    edit "Box-RTMP"
        set internet-service-id 589840
    next
    edit "Box-NetBIOS.Name.Service"
        set internet-service-id 589848
    next
    edit "Salesforce-Other"
        set internet-service-id 655360
    next
    edit "Salesforce-Web"
        set internet-service-id 655361
    next
    edit "Salesforce-ICMP"
        set internet-service-id 655362
    next
    edit "Salesforce-DNS"
        set internet-service-id 655363
    next
    edit "Salesforce-Outbound_Email"
        set internet-service-id 655364
    next
    edit "Salesforce-SSH"
        set internet-service-id 655366
    next
    edit "Salesforce-FTP"
        set internet-service-id 655367
    next
    edit "Salesforce-NTP"
        set internet-service-id 655368
    next
    edit "Salesforce-Inbound_Email"
        set internet-service-id 655369
    next
    edit "Salesforce-LDAP"
        set internet-service-id 655374
    next
    edit "Salesforce-NetBIOS.Session.Service"
        set internet-service-id 655375
    next
    edit "Salesforce-RTMP"
        set internet-service-id 655376
    next
    edit "Salesforce-NetBIOS.Name.Service"
        set internet-service-id 655384
    next
    edit "Salesforce-Email.Relay"
        set internet-service-id 655530
    next
    edit "Dropbox-Other"
        set internet-service-id 720896
    next
    edit "Dropbox-Web"
        set internet-service-id 720897
    next
    edit "Dropbox-ICMP"
        set internet-service-id 720898
    next
    edit "Dropbox-DNS"
        set internet-service-id 720899
    next
    edit "Dropbox-Outbound_Email"
        set internet-service-id 720900
    next
    edit "Dropbox-SSH"
        set internet-service-id 720902
    next
    edit "Dropbox-FTP"
        set internet-service-id 720903
    next
    edit "Dropbox-NTP"
        set internet-service-id 720904
    next
    edit "Dropbox-Inbound_Email"
        set internet-service-id 720905
    next
    edit "Dropbox-LDAP"
        set internet-service-id 720910
    next
    edit "Dropbox-NetBIOS.Session.Service"
        set internet-service-id 720911
    next
    edit "Dropbox-RTMP"
        set internet-service-id 720912
    next
    edit "Dropbox-NetBIOS.Name.Service"
        set internet-service-id 720920
    next
    edit "Netflix-Other"
        set internet-service-id 786432
    next
    edit "Netflix-Web"
        set internet-service-id 786433
    next
    edit "Netflix-ICMP"
        set internet-service-id 786434
    next
    edit "Netflix-DNS"
        set internet-service-id 786435
    next
    edit "Netflix-Outbound_Email"
        set internet-service-id 786436
    next
    edit "Netflix-SSH"
        set internet-service-id 786438
    next
    edit "Netflix-FTP"
        set internet-service-id 786439
    next
    edit "Netflix-NTP"
        set internet-service-id 786440
    next
    edit "Netflix-Inbound_Email"
        set internet-service-id 786441
    next
    edit "Netflix-LDAP"
        set internet-service-id 786446
    next
    edit "Netflix-NetBIOS.Session.Service"
        set internet-service-id 786447
    next
    edit "Netflix-RTMP"
        set internet-service-id 786448
    next
    edit "Netflix-NetBIOS.Name.Service"
        set internet-service-id 786456
    next
    edit "LinkedIn-Other"
        set internet-service-id 851968
    next
    edit "LinkedIn-Web"
        set internet-service-id 851969
    next
    edit "LinkedIn-ICMP"
        set internet-service-id 851970
    next
    edit "LinkedIn-DNS"
        set internet-service-id 851971
    next
    edit "LinkedIn-Outbound_Email"
        set internet-service-id 851972
    next
    edit "LinkedIn-SSH"
        set internet-service-id 851974
    next
    edit "LinkedIn-FTP"
        set internet-service-id 851975
    next
    edit "LinkedIn-NTP"
        set internet-service-id 851976
    next
    edit "LinkedIn-Inbound_Email"
        set internet-service-id 851977
    next
    edit "LinkedIn-LDAP"
        set internet-service-id 851982
    next
    edit "LinkedIn-NetBIOS.Session.Service"
        set internet-service-id 851983
    next
    edit "LinkedIn-RTMP"
        set internet-service-id 851984
    next
    edit "LinkedIn-NetBIOS.Name.Service"
        set internet-service-id 851992
    next
    edit "Adobe-Other"
        set internet-service-id 917504
    next
    edit "Adobe-Web"
        set internet-service-id 917505
    next
    edit "Adobe-ICMP"
        set internet-service-id 917506
    next
    edit "Adobe-DNS"
        set internet-service-id 917507
    next
    edit "Adobe-Outbound_Email"
        set internet-service-id 917508
    next
    edit "Adobe-SSH"
        set internet-service-id 917510
    next
    edit "Adobe-FTP"
        set internet-service-id 917511
    next
    edit "Adobe-NTP"
        set internet-service-id 917512
    next
    edit "Adobe-Inbound_Email"
        set internet-service-id 917513
    next
    edit "Adobe-LDAP"
        set internet-service-id 917518
    next
    edit "Adobe-NetBIOS.Session.Service"
        set internet-service-id 917519
    next
    edit "Adobe-RTMP"
        set internet-service-id 917520
    next
    edit "Adobe-NetBIOS.Name.Service"
        set internet-service-id 917528
    next
    edit "Adobe-Adobe.Experience.Cloud"
        set internet-service-id 917640
    next
    edit "Adobe-Adobe.Sign"
        set internet-service-id 917776
    next
    edit "Oracle-Other"
        set internet-service-id 983040
    next
    edit "Oracle-Web"
        set internet-service-id 983041
    next
    edit "Oracle-ICMP"
        set internet-service-id 983042
    next
    edit "Oracle-DNS"
        set internet-service-id 983043
    next
    edit "Oracle-Outbound_Email"
        set internet-service-id 983044
    next
    edit "Oracle-SSH"
        set internet-service-id 983046
    next
    edit "Oracle-FTP"
        set internet-service-id 983047
    next
    edit "Oracle-NTP"
        set internet-service-id 983048
    next
    edit "Oracle-Inbound_Email"
        set internet-service-id 983049
    next
    edit "Oracle-LDAP"
        set internet-service-id 983054
    next
    edit "Oracle-NetBIOS.Session.Service"
        set internet-service-id 983055
    next
    edit "Oracle-RTMP"
        set internet-service-id 983056
    next
    edit "Oracle-NetBIOS.Name.Service"
        set internet-service-id 983064
    next
    edit "Oracle-Oracle.Cloud"
        set internet-service-id 983171
    next
    edit "Hulu-Other"
        set internet-service-id 1048576
    next
    edit "Hulu-Web"
        set internet-service-id 1048577
    next
    edit "Hulu-ICMP"
        set internet-service-id 1048578
    next
    edit "Hulu-DNS"
        set internet-service-id 1048579
    next
    edit "Hulu-Outbound_Email"
        set internet-service-id 1048580
    next
    edit "Hulu-SSH"
        set internet-service-id 1048582
    next
    edit "Hulu-FTP"
        set internet-service-id 1048583
    next
    edit "Hulu-NTP"
        set internet-service-id 1048584
    next
    edit "Hulu-Inbound_Email"
        set internet-service-id 1048585
    next
    edit "Hulu-LDAP"
        set internet-service-id 1048590
    next
    edit "Hulu-NetBIOS.Session.Service"
        set internet-service-id 1048591
    next
    edit "Hulu-RTMP"
        set internet-service-id 1048592
    next
    edit "Hulu-NetBIOS.Name.Service"
        set internet-service-id 1048600
    next
    edit "Pinterest-Other"
        set internet-service-id 1114112
    next
    edit "Pinterest-Web"
        set internet-service-id 1114113
    next
    edit "Pinterest-ICMP"
        set internet-service-id 1114114
    next
    edit "Pinterest-DNS"
        set internet-service-id 1114115
    next
    edit "Pinterest-Outbound_Email"
        set internet-service-id 1114116
    next
    edit "Pinterest-SSH"
        set internet-service-id 1114118
    next
    edit "Pinterest-FTP"
        set internet-service-id 1114119
    next
    edit "Pinterest-NTP"
        set internet-service-id 1114120
    next
    edit "Pinterest-Inbound_Email"
        set internet-service-id 1114121
    next
    edit "Pinterest-LDAP"
        set internet-service-id 1114126
    next
    edit "Pinterest-NetBIOS.Session.Service"
        set internet-service-id 1114127
    next
    edit "Pinterest-RTMP"
        set internet-service-id 1114128
    next
    edit "Pinterest-NetBIOS.Name.Service"
        set internet-service-id 1114136
    next
    edit "LogMeIn-Other"
        set internet-service-id 1179648
    next
    edit "LogMeIn-Web"
        set internet-service-id 1179649
    next
    edit "LogMeIn-ICMP"
        set internet-service-id 1179650
    next
    edit "LogMeIn-DNS"
        set internet-service-id 1179651
    next
    edit "LogMeIn-Outbound_Email"
        set internet-service-id 1179652
    next
    edit "LogMeIn-SSH"
        set internet-service-id 1179654
    next
    edit "LogMeIn-FTP"
        set internet-service-id 1179655
    next
    edit "LogMeIn-NTP"
        set internet-service-id 1179656
    next
    edit "LogMeIn-Inbound_Email"
        set internet-service-id 1179657
    next
    edit "LogMeIn-LDAP"
        set internet-service-id 1179662
    next
    edit "LogMeIn-NetBIOS.Session.Service"
        set internet-service-id 1179663
    next
    edit "LogMeIn-RTMP"
        set internet-service-id 1179664
    next
    edit "LogMeIn-NetBIOS.Name.Service"
        set internet-service-id 1179672
    next
    edit "LogMeIn-GoTo.Suite"
        set internet-service-id 1179767
    next
    edit "Fortinet-Other"
        set internet-service-id 1245184
    next
    edit "Fortinet-Web"
        set internet-service-id 1245185
    next
    edit "Fortinet-ICMP"
        set internet-service-id 1245186
    next
    edit "Fortinet-DNS"
        set internet-service-id 1245187
    next
    edit "Fortinet-Outbound_Email"
        set internet-service-id 1245188
    next
    edit "Fortinet-SSH"
        set internet-service-id 1245190
    next
    edit "Fortinet-FTP"
        set internet-service-id 1245191
    next
    edit "Fortinet-NTP"
        set internet-service-id 1245192
    next
    edit "Fortinet-Inbound_Email"
        set internet-service-id 1245193
    next
    edit "Fortinet-LDAP"
        set internet-service-id 1245198
    next
    edit "Fortinet-NetBIOS.Session.Service"
        set internet-service-id 1245199
    next
    edit "Fortinet-RTMP"
        set internet-service-id 1245200
    next
    edit "Fortinet-NetBIOS.Name.Service"
        set internet-service-id 1245208
    next
    edit "Fortinet-FortiGuard"
        set internet-service-id 1245324
    next
    edit "Fortinet-FortiMail.Cloud"
        set internet-service-id 1245325
    next
    edit "Fortinet-FortiCloud"
        set internet-service-id 1245326
    next
    edit "Fortinet-FortiVoice.Cloud"
        set internet-service-id 1245432
    next
    edit "Fortinet-FortiGuard.Secure.DNS"
        set internet-service-id 1245454
    next
    edit "Fortinet-FortiEDR"
        set internet-service-id 1245475
    next
    edit "Kaspersky-Other"
        set internet-service-id 1310720
    next
    edit "Kaspersky-Web"
        set internet-service-id 1310721
    next
    edit "Kaspersky-ICMP"
        set internet-service-id 1310722
    next
    edit "Kaspersky-DNS"
        set internet-service-id 1310723
    next
    edit "Kaspersky-Outbound_Email"
        set internet-service-id 1310724
    next
    edit "Kaspersky-SSH"
        set internet-service-id 1310726
    next
    edit "Kaspersky-FTP"
        set internet-service-id 1310727
    next
    edit "Kaspersky-NTP"
        set internet-service-id 1310728
    next
    edit "Kaspersky-Inbound_Email"
        set internet-service-id 1310729
    next
    edit "Kaspersky-LDAP"
        set internet-service-id 1310734
    next
    edit "Kaspersky-NetBIOS.Session.Service"
        set internet-service-id 1310735
    next
    edit "Kaspersky-RTMP"
        set internet-service-id 1310736
    next
    edit "Kaspersky-NetBIOS.Name.Service"
        set internet-service-id 1310744
    next
    edit "McAfee-Other"
        set internet-service-id 1376256
    next
    edit "McAfee-Web"
        set internet-service-id 1376257
    next
    edit "McAfee-ICMP"
        set internet-service-id 1376258
    next
    edit "McAfee-DNS"
        set internet-service-id 1376259
    next
    edit "McAfee-Outbound_Email"
        set internet-service-id 1376260
    next
    edit "McAfee-SSH"
        set internet-service-id 1376262
    next
    edit "McAfee-FTP"
        set internet-service-id 1376263
    next
    edit "McAfee-NTP"
        set internet-service-id 1376264
    next
    edit "McAfee-Inbound_Email"
        set internet-service-id 1376265
    next
    edit "McAfee-LDAP"
        set internet-service-id 1376270
    next
    edit "McAfee-NetBIOS.Session.Service"
        set internet-service-id 1376271
    next
    edit "McAfee-RTMP"
        set internet-service-id 1376272
    next
    edit "McAfee-NetBIOS.Name.Service"
        set internet-service-id 1376280
    next
    edit "Symantec-Other"
        set internet-service-id 1441792
    next
    edit "Symantec-Web"
        set internet-service-id 1441793
    next
    edit "Symantec-ICMP"
        set internet-service-id 1441794
    next
    edit "Symantec-DNS"
        set internet-service-id 1441795
    next
    edit "Symantec-Outbound_Email"
        set internet-service-id 1441796
    next
    edit "Symantec-SSH"
        set internet-service-id 1441798
    next
    edit "Symantec-FTP"
        set internet-service-id 1441799
    next
    edit "Symantec-NTP"
        set internet-service-id 1441800
    next
    edit "Symantec-Inbound_Email"
        set internet-service-id 1441801
    next
    edit "Symantec-LDAP"
        set internet-service-id 1441806
    next
    edit "Symantec-NetBIOS.Session.Service"
        set internet-service-id 1441807
    next
    edit "Symantec-RTMP"
        set internet-service-id 1441808
    next
    edit "Symantec-NetBIOS.Name.Service"
        set internet-service-id 1441816
    next
    edit "Symantec-Symantec.Cloud"
        set internet-service-id 1441922
    next
    edit "VMware-Other"
        set internet-service-id 1507328
    next
    edit "VMware-Web"
        set internet-service-id 1507329
    next
    edit "VMware-ICMP"
        set internet-service-id 1507330
    next
    edit "VMware-DNS"
        set internet-service-id 1507331
    next
    edit "VMware-Outbound_Email"
        set internet-service-id 1507332
    next
    edit "VMware-SSH"
        set internet-service-id 1507334
    next
    edit "VMware-FTP"
        set internet-service-id 1507335
    next
    edit "VMware-NTP"
        set internet-service-id 1507336
    next
    edit "VMware-Inbound_Email"
        set internet-service-id 1507337
    next
    edit "VMware-LDAP"
        set internet-service-id 1507342
    next
    edit "VMware-NetBIOS.Session.Service"
        set internet-service-id 1507343
    next
    edit "VMware-RTMP"
        set internet-service-id 1507344
    next
    edit "VMware-NetBIOS.Name.Service"
        set internet-service-id 1507352
    next
    edit "VMware-Workspace.ONE"
        set internet-service-id 1507461
    next
    edit "AOL-Other"
        set internet-service-id 1572864
    next
    edit "AOL-Web"
        set internet-service-id 1572865
    next
    edit "AOL-ICMP"
        set internet-service-id 1572866
    next
    edit "AOL-DNS"
        set internet-service-id 1572867
    next
    edit "AOL-Outbound_Email"
        set internet-service-id 1572868
    next
    edit "AOL-SSH"
        set internet-service-id 1572870
    next
    edit "AOL-FTP"
        set internet-service-id 1572871
    next
    edit "AOL-NTP"
        set internet-service-id 1572872
    next
    edit "AOL-Inbound_Email"
        set internet-service-id 1572873
    next
    edit "AOL-LDAP"
        set internet-service-id 1572878
    next
    edit "AOL-NetBIOS.Session.Service"
        set internet-service-id 1572879
    next
    edit "AOL-RTMP"
        set internet-service-id 1572880
    next
    edit "AOL-NetBIOS.Name.Service"
        set internet-service-id 1572888
    next
    edit "RealNetworks-Other"
        set internet-service-id 1638400
    next
    edit "RealNetworks-Web"
        set internet-service-id 1638401
    next
    edit "RealNetworks-ICMP"
        set internet-service-id 1638402
    next
    edit "RealNetworks-DNS"
        set internet-service-id 1638403
    next
    edit "RealNetworks-Outbound_Email"
        set internet-service-id 1638404
    next
    edit "RealNetworks-SSH"
        set internet-service-id 1638406
    next
    edit "RealNetworks-FTP"
        set internet-service-id 1638407
    next
    edit "RealNetworks-NTP"
        set internet-service-id 1638408
    next
    edit "RealNetworks-Inbound_Email"
        set internet-service-id 1638409
    next
    edit "RealNetworks-LDAP"
        set internet-service-id 1638414
    next
    edit "RealNetworks-NetBIOS.Session.Service"
        set internet-service-id 1638415
    next
    edit "RealNetworks-RTMP"
        set internet-service-id 1638416
    next
    edit "RealNetworks-NetBIOS.Name.Service"
        set internet-service-id 1638424
    next
    edit "Zoho-Other"
        set internet-service-id 1703936
    next
    edit "Zoho-Web"
        set internet-service-id 1703937
    next
    edit "Zoho-ICMP"
        set internet-service-id 1703938
    next
    edit "Zoho-DNS"
        set internet-service-id 1703939
    next
    edit "Zoho-Outbound_Email"
        set internet-service-id 1703940
    next
    edit "Zoho-SSH"
        set internet-service-id 1703942
    next
    edit "Zoho-FTP"
        set internet-service-id 1703943
    next
    edit "Zoho-NTP"
        set internet-service-id 1703944
    next
    edit "Zoho-Inbound_Email"
        set internet-service-id 1703945
    next
    edit "Zoho-LDAP"
        set internet-service-id 1703950
    next
    edit "Zoho-NetBIOS.Session.Service"
        set internet-service-id 1703951
    next
    edit "Zoho-RTMP"
        set internet-service-id 1703952
    next
    edit "Zoho-NetBIOS.Name.Service"
        set internet-service-id 1703960
    next
    edit "Zoho-Site24x7.Monitor"
        set internet-service-id 1704153
    next
    edit "Mozilla-Other"
        set internet-service-id 1769472
    next
    edit "Mozilla-Web"
        set internet-service-id 1769473
    next
    edit "Mozilla-ICMP"
        set internet-service-id 1769474
    next
    edit "Mozilla-DNS"
        set internet-service-id 1769475
    next
    edit "Mozilla-Outbound_Email"
        set internet-service-id 1769476
    next
    edit "Mozilla-SSH"
        set internet-service-id 1769478
    next
    edit "Mozilla-FTP"
        set internet-service-id 1769479
    next
    edit "Mozilla-NTP"
        set internet-service-id 1769480
    next
    edit "Mozilla-Inbound_Email"
        set internet-service-id 1769481
    next
    edit "Mozilla-LDAP"
        set internet-service-id 1769486
    next
    edit "Mozilla-NetBIOS.Session.Service"
        set internet-service-id 1769487
    next
    edit "Mozilla-RTMP"
        set internet-service-id 1769488
    next
    edit "Mozilla-NetBIOS.Name.Service"
        set internet-service-id 1769496
    next
    edit "TeamViewer-Other"
        set internet-service-id 1835008
    next
    edit "TeamViewer-Web"
        set internet-service-id 1835009
    next
    edit "TeamViewer-ICMP"
        set internet-service-id 1835010
    next
    edit "TeamViewer-DNS"
        set internet-service-id 1835011
    next
    edit "TeamViewer-Outbound_Email"
        set internet-service-id 1835012
    next
    edit "TeamViewer-SSH"
        set internet-service-id 1835014
    next
    edit "TeamViewer-FTP"
        set internet-service-id 1835015
    next
    edit "TeamViewer-NTP"
        set internet-service-id 1835016
    next
    edit "TeamViewer-Inbound_Email"
        set internet-service-id 1835017
    next
    edit "TeamViewer-LDAP"
        set internet-service-id 1835022
    next
    edit "TeamViewer-NetBIOS.Session.Service"
        set internet-service-id 1835023
    next
    edit "TeamViewer-RTMP"
        set internet-service-id 1835024
    next
    edit "TeamViewer-NetBIOS.Name.Service"
        set internet-service-id 1835032
    next
    edit "TeamViewer-TeamViewer"
        set internet-service-id 1835117
    next
    edit "HP-Other"
        set internet-service-id 1900544
    next
    edit "HP-Web"
        set internet-service-id 1900545
    next
    edit "HP-ICMP"
        set internet-service-id 1900546
    next
    edit "HP-DNS"
        set internet-service-id 1900547
    next
    edit "HP-Outbound_Email"
        set internet-service-id 1900548
    next
    edit "HP-SSH"
        set internet-service-id 1900550
    next
    edit "HP-FTP"
        set internet-service-id 1900551
    next
    edit "HP-NTP"
        set internet-service-id 1900552
    next
    edit "HP-Inbound_Email"
        set internet-service-id 1900553
    next
    edit "HP-LDAP"
        set internet-service-id 1900558
    next
    edit "HP-NetBIOS.Session.Service"
        set internet-service-id 1900559
    next
    edit "HP-RTMP"
        set internet-service-id 1900560
    next
    edit "HP-NetBIOS.Name.Service"
        set internet-service-id 1900568
    next
    edit "HP-Aruba"
        set internet-service-id 1900726
    next
    edit "Cisco-Other"
        set internet-service-id 1966080
    next
    edit "Cisco-Web"
        set internet-service-id 1966081
    next
    edit "Cisco-ICMP"
        set internet-service-id 1966082
    next
    edit "Cisco-DNS"
        set internet-service-id 1966083
    next
    edit "Cisco-Outbound_Email"
        set internet-service-id 1966084
    next
    edit "Cisco-SSH"
        set internet-service-id 1966086
    next
    edit "Cisco-FTP"
        set internet-service-id 1966087
    next
    edit "Cisco-NTP"
        set internet-service-id 1966088
    next
    edit "Cisco-Inbound_Email"
        set internet-service-id 1966089
    next
    edit "Cisco-LDAP"
        set internet-service-id 1966094
    next
    edit "Cisco-NetBIOS.Session.Service"
        set internet-service-id 1966095
    next
    edit "Cisco-RTMP"
        set internet-service-id 1966096
    next
    edit "Cisco-NetBIOS.Name.Service"
        set internet-service-id 1966104
    next
    edit "Cisco-Webex"
        set internet-service-id 1966183
    next
    edit "Cisco-Meraki.Cloud"
        set internet-service-id 1966218
    next
    edit "Cisco-Duo.Security"
        set internet-service-id 1966225
    next
    edit "Cisco-AppDynamic"
        set internet-service-id 1966260
    next
    edit "Cisco-Webex.FedRAMP"
        set internet-service-id 1966315
    next
    edit "Cisco-Secure.Endpoint"
        set internet-service-id 1966324
    next
    edit "IBM-Other"
        set internet-service-id 2031616
    next
    edit "IBM-Web"
        set internet-service-id 2031617
    next
    edit "IBM-ICMP"
        set internet-service-id 2031618
    next
    edit "IBM-DNS"
        set internet-service-id 2031619
    next
    edit "IBM-Outbound_Email"
        set internet-service-id 2031620
    next
    edit "IBM-SSH"
        set internet-service-id 2031622
    next
    edit "IBM-FTP"
        set internet-service-id 2031623
    next
    edit "IBM-NTP"
        set internet-service-id 2031624
    next
    edit "IBM-Inbound_Email"
        set internet-service-id 2031625
    next
    edit "IBM-LDAP"
        set internet-service-id 2031630
    next
    edit "IBM-NetBIOS.Session.Service"
        set internet-service-id 2031631
    next
    edit "IBM-RTMP"
        set internet-service-id 2031632
    next
    edit "IBM-NetBIOS.Name.Service"
        set internet-service-id 2031640
    next
    edit "IBM-IBM.Cloud"
        set internet-service-id 2031748
    next
    edit "Citrix-Other"
        set internet-service-id 2097152
    next
    edit "Citrix-Web"
        set internet-service-id 2097153
    next
    edit "Citrix-ICMP"
        set internet-service-id 2097154
    next
    edit "Citrix-DNS"
        set internet-service-id 2097155
    next
    edit "Citrix-Outbound_Email"
        set internet-service-id 2097156
    next
    edit "Citrix-SSH"
        set internet-service-id 2097158
    next
    edit "Citrix-FTP"
        set internet-service-id 2097159
    next
    edit "Citrix-NTP"
        set internet-service-id 2097160
    next
    edit "Citrix-Inbound_Email"
        set internet-service-id 2097161
    next
    edit "Citrix-LDAP"
        set internet-service-id 2097166
    next
    edit "Citrix-NetBIOS.Session.Service"
        set internet-service-id 2097167
    next
    edit "Citrix-RTMP"
        set internet-service-id 2097168
    next
    edit "Citrix-NetBIOS.Name.Service"
        set internet-service-id 2097176
    next
    edit "Twitter-Other"
        set internet-service-id 2162688
    next
    edit "Twitter-Web"
        set internet-service-id 2162689
    next
    edit "Twitter-ICMP"
        set internet-service-id 2162690
    next
    edit "Twitter-DNS"
        set internet-service-id 2162691
    next
    edit "Twitter-Outbound_Email"
        set internet-service-id 2162692
    next
    edit "Twitter-SSH"
        set internet-service-id 2162694
    next
    edit "Twitter-FTP"
        set internet-service-id 2162695
    next
    edit "Twitter-NTP"
        set internet-service-id 2162696
    next
    edit "Twitter-Inbound_Email"
        set internet-service-id 2162697
    next
    edit "Twitter-LDAP"
        set internet-service-id 2162702
    next
    edit "Twitter-NetBIOS.Session.Service"
        set internet-service-id 2162703
    next
    edit "Twitter-RTMP"
        set internet-service-id 2162704
    next
    edit "Twitter-NetBIOS.Name.Service"
        set internet-service-id 2162712
    next
    edit "Dell-Other"
        set internet-service-id 2228224
    next
    edit "Dell-Web"
        set internet-service-id 2228225
    next
    edit "Dell-ICMP"
        set internet-service-id 2228226
    next
    edit "Dell-DNS"
        set internet-service-id 2228227
    next
    edit "Dell-Outbound_Email"
        set internet-service-id 2228228
    next
    edit "Dell-SSH"
        set internet-service-id 2228230
    next
    edit "Dell-FTP"
        set internet-service-id 2228231
    next
    edit "Dell-NTP"
        set internet-service-id 2228232
    next
    edit "Dell-Inbound_Email"
        set internet-service-id 2228233
    next
    edit "Dell-LDAP"
        set internet-service-id 2228238
    next
    edit "Dell-NetBIOS.Session.Service"
        set internet-service-id 2228239
    next
    edit "Dell-RTMP"
        set internet-service-id 2228240
    next
    edit "Dell-NetBIOS.Name.Service"
        set internet-service-id 2228248
    next
    edit "Vimeo-Other"
        set internet-service-id 2293760
    next
    edit "Vimeo-Web"
        set internet-service-id 2293761
    next
    edit "Vimeo-ICMP"
        set internet-service-id 2293762
    next
    edit "Vimeo-DNS"
        set internet-service-id 2293763
    next
    edit "Vimeo-Outbound_Email"
        set internet-service-id 2293764
    next
    edit "Vimeo-SSH"
        set internet-service-id 2293766
    next
    edit "Vimeo-FTP"
        set internet-service-id 2293767
    next
    edit "Vimeo-NTP"
        set internet-service-id 2293768
    next
    edit "Vimeo-Inbound_Email"
        set internet-service-id 2293769
    next
    edit "Vimeo-LDAP"
        set internet-service-id 2293774
    next
    edit "Vimeo-NetBIOS.Session.Service"
        set internet-service-id 2293775
    next
    edit "Vimeo-RTMP"
        set internet-service-id 2293776
    next
    edit "Vimeo-NetBIOS.Name.Service"
        set internet-service-id 2293784
    next
    edit "Redhat-Other"
        set internet-service-id 2359296
    next
    edit "Redhat-Web"
        set internet-service-id 2359297
    next
    edit "Redhat-ICMP"
        set internet-service-id 2359298
    next
    edit "Redhat-DNS"
        set internet-service-id 2359299
    next
    edit "Redhat-Outbound_Email"
        set internet-service-id 2359300
    next
    edit "Redhat-SSH"
        set internet-service-id 2359302
    next
    edit "Redhat-FTP"
        set internet-service-id 2359303
    next
    edit "Redhat-NTP"
        set internet-service-id 2359304
    next
    edit "Redhat-Inbound_Email"
        set internet-service-id 2359305
    next
    edit "Redhat-LDAP"
        set internet-service-id 2359310
    next
    edit "Redhat-NetBIOS.Session.Service"
        set internet-service-id 2359311
    next
    edit "Redhat-RTMP"
        set internet-service-id 2359312
    next
    edit "Redhat-NetBIOS.Name.Service"
        set internet-service-id 2359320
    next
    edit "VK-Other"
        set internet-service-id 2424832
    next
    edit "VK-Web"
        set internet-service-id 2424833
    next
    edit "VK-ICMP"
        set internet-service-id 2424834
    next
    edit "VK-DNS"
        set internet-service-id 2424835
    next
    edit "VK-Outbound_Email"
        set internet-service-id 2424836
    next
    edit "VK-SSH"
        set internet-service-id 2424838
    next
    edit "VK-FTP"
        set internet-service-id 2424839
    next
    edit "VK-NTP"
        set internet-service-id 2424840
    next
    edit "VK-Inbound_Email"
        set internet-service-id 2424841
    next
    edit "VK-LDAP"
        set internet-service-id 2424846
    next
    edit "VK-NetBIOS.Session.Service"
        set internet-service-id 2424847
    next
    edit "VK-RTMP"
        set internet-service-id 2424848
    next
    edit "VK-NetBIOS.Name.Service"
        set internet-service-id 2424856
    next
    edit "TrendMicro-Other"
        set internet-service-id 2490368
    next
    edit "TrendMicro-Web"
        set internet-service-id 2490369
    next
    edit "TrendMicro-ICMP"
        set internet-service-id 2490370
    next
    edit "TrendMicro-DNS"
        set internet-service-id 2490371
    next
    edit "TrendMicro-Outbound_Email"
        set internet-service-id 2490372
    next
    edit "TrendMicro-SSH"
        set internet-service-id 2490374
    next
    edit "TrendMicro-FTP"
        set internet-service-id 2490375
    next
    edit "TrendMicro-NTP"
        set internet-service-id 2490376
    next
    edit "TrendMicro-Inbound_Email"
        set internet-service-id 2490377
    next
    edit "TrendMicro-LDAP"
        set internet-service-id 2490382
    next
    edit "TrendMicro-NetBIOS.Session.Service"
        set internet-service-id 2490383
    next
    edit "TrendMicro-RTMP"
        set internet-service-id 2490384
    next
    edit "TrendMicro-NetBIOS.Name.Service"
        set internet-service-id 2490392
    next
    edit "Tencent-Other"
        set internet-service-id 2555904
    next
    edit "Tencent-Web"
        set internet-service-id 2555905
    next
    edit "Tencent-ICMP"
        set internet-service-id 2555906
    next
    edit "Tencent-DNS"
        set internet-service-id 2555907
    next
    edit "Tencent-Outbound_Email"
        set internet-service-id 2555908
    next
    edit "Tencent-SSH"
        set internet-service-id 2555910
    next
    edit "Tencent-FTP"
        set internet-service-id 2555911
    next
    edit "Tencent-NTP"
        set internet-service-id 2555912
    next
    edit "Tencent-Inbound_Email"
        set internet-service-id 2555913
    next
    edit "Tencent-LDAP"
        set internet-service-id 2555918
    next
    edit "Tencent-NetBIOS.Session.Service"
        set internet-service-id 2555919
    next
    edit "Tencent-RTMP"
        set internet-service-id 2555920
    next
    edit "Tencent-NetBIOS.Name.Service"
        set internet-service-id 2555928
    next
    edit "Ask-Other"
        set internet-service-id 2621440
    next
    edit "Ask-Web"
        set internet-service-id 2621441
    next
    edit "Ask-ICMP"
        set internet-service-id 2621442
    next
    edit "Ask-DNS"
        set internet-service-id 2621443
    next
    edit "Ask-Outbound_Email"
        set internet-service-id 2621444
    next
    edit "Ask-SSH"
        set internet-service-id 2621446
    next
    edit "Ask-FTP"
        set internet-service-id 2621447
    next
    edit "Ask-NTP"
        set internet-service-id 2621448
    next
    edit "Ask-Inbound_Email"
        set internet-service-id 2621449
    next
    edit "Ask-LDAP"
        set internet-service-id 2621454
    next
    edit "Ask-NetBIOS.Session.Service"
        set internet-service-id 2621455
    next
    edit "Ask-RTMP"
        set internet-service-id 2621456
    next
    edit "Ask-NetBIOS.Name.Service"
        set internet-service-id 2621464
    next
    edit "CNN-Other"
        set internet-service-id 2686976
    next
    edit "CNN-Web"
        set internet-service-id 2686977
    next
    edit "CNN-ICMP"
        set internet-service-id 2686978
    next
    edit "CNN-DNS"
        set internet-service-id 2686979
    next
    edit "CNN-Outbound_Email"
        set internet-service-id 2686980
    next
    edit "CNN-SSH"
        set internet-service-id 2686982
    next
    edit "CNN-FTP"
        set internet-service-id 2686983
    next
    edit "CNN-NTP"
        set internet-service-id 2686984
    next
    edit "CNN-Inbound_Email"
        set internet-service-id 2686985
    next
    edit "CNN-LDAP"
        set internet-service-id 2686990
    next
    edit "CNN-NetBIOS.Session.Service"
        set internet-service-id 2686991
    next
    edit "CNN-RTMP"
        set internet-service-id 2686992
    next
    edit "CNN-NetBIOS.Name.Service"
        set internet-service-id 2687000
    next
    edit "Myspace-Other"
        set internet-service-id 2752512
    next
    edit "Myspace-Web"
        set internet-service-id 2752513
    next
    edit "Myspace-ICMP"
        set internet-service-id 2752514
    next
    edit "Myspace-DNS"
        set internet-service-id 2752515
    next
    edit "Myspace-Outbound_Email"
        set internet-service-id 2752516
    next
    edit "Myspace-SSH"
        set internet-service-id 2752518
    next
    edit "Myspace-FTP"
        set internet-service-id 2752519
    next
    edit "Myspace-NTP"
        set internet-service-id 2752520
    next
    edit "Myspace-Inbound_Email"
        set internet-service-id 2752521
    next
    edit "Myspace-LDAP"
        set internet-service-id 2752526
    next
    edit "Myspace-NetBIOS.Session.Service"
        set internet-service-id 2752527
    next
    edit "Myspace-RTMP"
        set internet-service-id 2752528
    next
    edit "Myspace-NetBIOS.Name.Service"
        set internet-service-id 2752536
    next
    edit "Tor-Relay.Node"
        set internet-service-id 2818238
    next
    edit "Tor-Exit.Node"
        set internet-service-id 2818243
    next
    edit "Baidu-Other"
        set internet-service-id 2883584
    next
    edit "Baidu-Web"
        set internet-service-id 2883585
    next
    edit "Baidu-ICMP"
        set internet-service-id 2883586
    next
    edit "Baidu-DNS"
        set internet-service-id 2883587
    next
    edit "Baidu-Outbound_Email"
        set internet-service-id 2883588
    next
    edit "Baidu-SSH"
        set internet-service-id 2883590
    next
    edit "Baidu-FTP"
        set internet-service-id 2883591
    next
    edit "Baidu-NTP"
        set internet-service-id 2883592
    next
    edit "Baidu-Inbound_Email"
        set internet-service-id 2883593
    next
    edit "Baidu-LDAP"
        set internet-service-id 2883598
    next
    edit "Baidu-NetBIOS.Session.Service"
        set internet-service-id 2883599
    next
    edit "Baidu-RTMP"
        set internet-service-id 2883600
    next
    edit "Baidu-NetBIOS.Name.Service"
        set internet-service-id 2883608
    next
    edit "ntp.org-Other"
        set internet-service-id 2949120
    next
    edit "ntp.org-Web"
        set internet-service-id 2949121
    next
    edit "ntp.org-ICMP"
        set internet-service-id 2949122
    next
    edit "ntp.org-DNS"
        set internet-service-id 2949123
    next
    edit "ntp.org-Outbound_Email"
        set internet-service-id 2949124
    next
    edit "ntp.org-SSH"
        set internet-service-id 2949126
    next
    edit "ntp.org-FTP"
        set internet-service-id 2949127
    next
    edit "ntp.org-NTP"
        set internet-service-id 2949128
    next
    edit "ntp.org-Inbound_Email"
        set internet-service-id 2949129
    next
    edit "ntp.org-LDAP"
        set internet-service-id 2949134
    next
    edit "ntp.org-NetBIOS.Session.Service"
        set internet-service-id 2949135
    next
    edit "ntp.org-RTMP"
        set internet-service-id 2949136
    next
    edit "ntp.org-NetBIOS.Name.Service"
        set internet-service-id 2949144
    next
    edit "Proxy-Proxy.Server"
        set internet-service-id 3014850
    next
    edit "Botnet-C&C.Server"
        set internet-service-id 3080383
    next
    edit "Spam-Spamming.Server"
        set internet-service-id 3145920
    next
    edit "Phishing-Phishing.Server"
        set internet-service-id 3211457
    next
    edit "Zendesk-Other"
        set internet-service-id 3407872
    next
    edit "Zendesk-Web"
        set internet-service-id 3407873
    next
    edit "Zendesk-ICMP"
        set internet-service-id 3407874
    next
    edit "Zendesk-DNS"
        set internet-service-id 3407875
    next
    edit "Zendesk-Outbound_Email"
        set internet-service-id 3407876
    next
    edit "Zendesk-SSH"
        set internet-service-id 3407878
    next
    edit "Zendesk-FTP"
        set internet-service-id 3407879
    next
    edit "Zendesk-NTP"
        set internet-service-id 3407880
    next
    edit "Zendesk-Inbound_Email"
        set internet-service-id 3407881
    next
    edit "Zendesk-LDAP"
        set internet-service-id 3407886
    next
    edit "Zendesk-NetBIOS.Session.Service"
        set internet-service-id 3407887
    next
    edit "Zendesk-RTMP"
        set internet-service-id 3407888
    next
    edit "Zendesk-NetBIOS.Name.Service"
        set internet-service-id 3407896
    next
    edit "Zendesk-Zendesk.Suite"
        set internet-service-id 3408047
    next
    edit "DocuSign-Other"
        set internet-service-id 3473408
    next
    edit "DocuSign-Web"
        set internet-service-id 3473409
    next
    edit "DocuSign-ICMP"
        set internet-service-id 3473410
    next
    edit "DocuSign-DNS"
        set internet-service-id 3473411
    next
    edit "DocuSign-Outbound_Email"
        set internet-service-id 3473412
    next
    edit "DocuSign-SSH"
        set internet-service-id 3473414
    next
    edit "DocuSign-FTP"
        set internet-service-id 3473415
    next
    edit "DocuSign-NTP"
        set internet-service-id 3473416
    next
    edit "DocuSign-Inbound_Email"
        set internet-service-id 3473417
    next
    edit "DocuSign-LDAP"
        set internet-service-id 3473422
    next
    edit "DocuSign-NetBIOS.Session.Service"
        set internet-service-id 3473423
    next
    edit "DocuSign-RTMP"
        set internet-service-id 3473424
    next
    edit "DocuSign-NetBIOS.Name.Service"
        set internet-service-id 3473432
    next
    edit "ServiceNow-Other"
        set internet-service-id 3538944
    next
    edit "ServiceNow-Web"
        set internet-service-id 3538945
    next
    edit "ServiceNow-ICMP"
        set internet-service-id 3538946
    next
    edit "ServiceNow-DNS"
        set internet-service-id 3538947
    next
    edit "ServiceNow-Outbound_Email"
        set internet-service-id 3538948
    next
    edit "ServiceNow-SSH"
        set internet-service-id 3538950
    next
    edit "ServiceNow-FTP"
        set internet-service-id 3538951
    next
    edit "ServiceNow-NTP"
        set internet-service-id 3538952
    next
    edit "ServiceNow-Inbound_Email"
        set internet-service-id 3538953
    next
    edit "ServiceNow-LDAP"
        set internet-service-id 3538958
    next
    edit "ServiceNow-NetBIOS.Session.Service"
        set internet-service-id 3538959
    next
    edit "ServiceNow-RTMP"
        set internet-service-id 3538960
    next
    edit "ServiceNow-NetBIOS.Name.Service"
        set internet-service-id 3538968
    next
    edit "GitHub-GitHub"
        set internet-service-id 3604638
    next
    edit "Workday-Other"
        set internet-service-id 3670016
    next
    edit "Workday-Web"
        set internet-service-id 3670017
    next
    edit "Workday-ICMP"
        set internet-service-id 3670018
    next
    edit "Workday-DNS"
        set internet-service-id 3670019
    next
    edit "Workday-Outbound_Email"
        set internet-service-id 3670020
    next
    edit "Workday-SSH"
        set internet-service-id 3670022
    next
    edit "Workday-FTP"
        set internet-service-id 3670023
    next
    edit "Workday-NTP"
        set internet-service-id 3670024
    next
    edit "Workday-Inbound_Email"
        set internet-service-id 3670025
    next
    edit "Workday-LDAP"
        set internet-service-id 3670030
    next
    edit "Workday-NetBIOS.Session.Service"
        set internet-service-id 3670031
    next
    edit "Workday-RTMP"
        set internet-service-id 3670032
    next
    edit "Workday-NetBIOS.Name.Service"
        set internet-service-id 3670040
    next
    edit "HubSpot-Other"
        set internet-service-id 3735552
    next
    edit "HubSpot-Web"
        set internet-service-id 3735553
    next
    edit "HubSpot-ICMP"
        set internet-service-id 3735554
    next
    edit "HubSpot-DNS"
        set internet-service-id 3735555
    next
    edit "HubSpot-Outbound_Email"
        set internet-service-id 3735556
    next
    edit "HubSpot-SSH"
        set internet-service-id 3735558
    next
    edit "HubSpot-FTP"
        set internet-service-id 3735559
    next
    edit "HubSpot-NTP"
        set internet-service-id 3735560
    next
    edit "HubSpot-Inbound_Email"
        set internet-service-id 3735561
    next
    edit "HubSpot-LDAP"
        set internet-service-id 3735566
    next
    edit "HubSpot-NetBIOS.Session.Service"
        set internet-service-id 3735567
    next
    edit "HubSpot-RTMP"
        set internet-service-id 3735568
    next
    edit "HubSpot-NetBIOS.Name.Service"
        set internet-service-id 3735576
    next
    edit "Twilio-Other"
        set internet-service-id 3801088
    next
    edit "Twilio-Web"
        set internet-service-id 3801089
    next
    edit "Twilio-ICMP"
        set internet-service-id 3801090
    next
    edit "Twilio-DNS"
        set internet-service-id 3801091
    next
    edit "Twilio-Outbound_Email"
        set internet-service-id 3801092
    next
    edit "Twilio-SSH"
        set internet-service-id 3801094
    next
    edit "Twilio-FTP"
        set internet-service-id 3801095
    next
    edit "Twilio-NTP"
        set internet-service-id 3801096
    next
    edit "Twilio-Inbound_Email"
        set internet-service-id 3801097
    next
    edit "Twilio-LDAP"
        set internet-service-id 3801102
    next
    edit "Twilio-NetBIOS.Session.Service"
        set internet-service-id 3801103
    next
    edit "Twilio-RTMP"
        set internet-service-id 3801104
    next
    edit "Twilio-NetBIOS.Name.Service"
        set internet-service-id 3801112
    next
    edit "Twilio-Elastic.SIP.Trunking"
        set internet-service-id 3801277
    next
    edit "Coupa-Other"
        set internet-service-id 3866624
    next
    edit "Coupa-Web"
        set internet-service-id 3866625
    next
    edit "Coupa-ICMP"
        set internet-service-id 3866626
    next
    edit "Coupa-DNS"
        set internet-service-id 3866627
    next
    edit "Coupa-Outbound_Email"
        set internet-service-id 3866628
    next
    edit "Coupa-SSH"
        set internet-service-id 3866630
    next
    edit "Coupa-FTP"
        set internet-service-id 3866631
    next
    edit "Coupa-NTP"
        set internet-service-id 3866632
    next
    edit "Coupa-Inbound_Email"
        set internet-service-id 3866633
    next
    edit "Coupa-LDAP"
        set internet-service-id 3866638
    next
    edit "Coupa-NetBIOS.Session.Service"
        set internet-service-id 3866639
    next
    edit "Coupa-RTMP"
        set internet-service-id 3866640
    next
    edit "Coupa-NetBIOS.Name.Service"
        set internet-service-id 3866648
    next
    edit "Atlassian-Other"
        set internet-service-id 3932160
    next
    edit "Atlassian-Web"
        set internet-service-id 3932161
    next
    edit "Atlassian-ICMP"
        set internet-service-id 3932162
    next
    edit "Atlassian-DNS"
        set internet-service-id 3932163
    next
    edit "Atlassian-Outbound_Email"
        set internet-service-id 3932164
    next
    edit "Atlassian-SSH"
        set internet-service-id 3932166
    next
    edit "Atlassian-FTP"
        set internet-service-id 3932167
    next
    edit "Atlassian-NTP"
        set internet-service-id 3932168
    next
    edit "Atlassian-Inbound_Email"
        set internet-service-id 3932169
    next
    edit "Atlassian-LDAP"
        set internet-service-id 3932174
    next
    edit "Atlassian-NetBIOS.Session.Service"
        set internet-service-id 3932175
    next
    edit "Atlassian-RTMP"
        set internet-service-id 3932176
    next
    edit "Atlassian-NetBIOS.Name.Service"
        set internet-service-id 3932184
    next
    edit "Atlassian-Atlassian.Cloud"
        set internet-service-id 3932388
    next
    edit "Atlassian-Atlassian.Notification"
        set internet-service-id 3932436
    next
    edit "Xero-Other"
        set internet-service-id 3997696
    next
    edit "Xero-Web"
        set internet-service-id 3997697
    next
    edit "Xero-ICMP"
        set internet-service-id 3997698
    next
    edit "Xero-DNS"
        set internet-service-id 3997699
    next
    edit "Xero-Outbound_Email"
        set internet-service-id 3997700
    next
    edit "Xero-SSH"
        set internet-service-id 3997702
    next
    edit "Xero-FTP"
        set internet-service-id 3997703
    next
    edit "Xero-NTP"
        set internet-service-id 3997704
    next
    edit "Xero-Inbound_Email"
        set internet-service-id 3997705
    next
    edit "Xero-LDAP"
        set internet-service-id 3997710
    next
    edit "Xero-NetBIOS.Session.Service"
        set internet-service-id 3997711
    next
    edit "Xero-RTMP"
        set internet-service-id 3997712
    next
    edit "Xero-NetBIOS.Name.Service"
        set internet-service-id 3997720
    next
    edit "Zuora-Other"
        set internet-service-id 4063232
    next
    edit "Zuora-Web"
        set internet-service-id 4063233
    next
    edit "Zuora-ICMP"
        set internet-service-id 4063234
    next
    edit "Zuora-DNS"
        set internet-service-id 4063235
    next
    edit "Zuora-Outbound_Email"
        set internet-service-id 4063236
    next
    edit "Zuora-SSH"
        set internet-service-id 4063238
    next
    edit "Zuora-FTP"
        set internet-service-id 4063239
    next
    edit "Zuora-NTP"
        set internet-service-id 4063240
    next
    edit "Zuora-Inbound_Email"
        set internet-service-id 4063241
    next
    edit "Zuora-LDAP"
        set internet-service-id 4063246
    next
    edit "Zuora-NetBIOS.Session.Service"
        set internet-service-id 4063247
    next
    edit "Zuora-RTMP"
        set internet-service-id 4063248
    next
    edit "Zuora-NetBIOS.Name.Service"
        set internet-service-id 4063256
    next
    edit "AdRoll-Other"
        set internet-service-id 4128768
    next
    edit "AdRoll-Web"
        set internet-service-id 4128769
    next
    edit "AdRoll-ICMP"
        set internet-service-id 4128770
    next
    edit "AdRoll-DNS"
        set internet-service-id 4128771
    next
    edit "AdRoll-Outbound_Email"
        set internet-service-id 4128772
    next
    edit "AdRoll-SSH"
        set internet-service-id 4128774
    next
    edit "AdRoll-FTP"
        set internet-service-id 4128775
    next
    edit "AdRoll-NTP"
        set internet-service-id 4128776
    next
    edit "AdRoll-Inbound_Email"
        set internet-service-id 4128777
    next
    edit "AdRoll-LDAP"
        set internet-service-id 4128782
    next
    edit "AdRoll-NetBIOS.Session.Service"
        set internet-service-id 4128783
    next
    edit "AdRoll-RTMP"
        set internet-service-id 4128784
    next
    edit "AdRoll-NetBIOS.Name.Service"
        set internet-service-id 4128792
    next
    edit "Xactly-Other"
        set internet-service-id 4194304
    next
    edit "Xactly-Web"
        set internet-service-id 4194305
    next
    edit "Xactly-ICMP"
        set internet-service-id 4194306
    next
    edit "Xactly-DNS"
        set internet-service-id 4194307
    next
    edit "Xactly-Outbound_Email"
        set internet-service-id 4194308
    next
    edit "Xactly-SSH"
        set internet-service-id 4194310
    next
    edit "Xactly-FTP"
        set internet-service-id 4194311
    next
    edit "Xactly-NTP"
        set internet-service-id 4194312
    next
    edit "Xactly-Inbound_Email"
        set internet-service-id 4194313
    next
    edit "Xactly-LDAP"
        set internet-service-id 4194318
    next
    edit "Xactly-NetBIOS.Session.Service"
        set internet-service-id 4194319
    next
    edit "Xactly-RTMP"
        set internet-service-id 4194320
    next
    edit "Xactly-NetBIOS.Name.Service"
        set internet-service-id 4194328
    next
    edit "Intuit-Other"
        set internet-service-id 4259840
    next
    edit "Intuit-Web"
        set internet-service-id 4259841
    next
    edit "Intuit-ICMP"
        set internet-service-id 4259842
    next
    edit "Intuit-DNS"
        set internet-service-id 4259843
    next
    edit "Intuit-Outbound_Email"
        set internet-service-id 4259844
    next
    edit "Intuit-SSH"
        set internet-service-id 4259846
    next
    edit "Intuit-FTP"
        set internet-service-id 4259847
    next
    edit "Intuit-NTP"
        set internet-service-id 4259848
    next
    edit "Intuit-Inbound_Email"
        set internet-service-id 4259849
    next
    edit "Intuit-LDAP"
        set internet-service-id 4259854
    next
    edit "Intuit-NetBIOS.Session.Service"
        set internet-service-id 4259855
    next
    edit "Intuit-RTMP"
        set internet-service-id 4259856
    next
    edit "Intuit-NetBIOS.Name.Service"
        set internet-service-id 4259864
    next
    edit "Marketo-Other"
        set internet-service-id 4325376
    next
    edit "Marketo-Web"
        set internet-service-id 4325377
    next
    edit "Marketo-ICMP"
        set internet-service-id 4325378
    next
    edit "Marketo-DNS"
        set internet-service-id 4325379
    next
    edit "Marketo-Outbound_Email"
        set internet-service-id 4325380
    next
    edit "Marketo-SSH"
        set internet-service-id 4325382
    next
    edit "Marketo-FTP"
        set internet-service-id 4325383
    next
    edit "Marketo-NTP"
        set internet-service-id 4325384
    next
    edit "Marketo-Inbound_Email"
        set internet-service-id 4325385
    next
    edit "Marketo-LDAP"
        set internet-service-id 4325390
    next
    edit "Marketo-NetBIOS.Session.Service"
        set internet-service-id 4325391
    next
    edit "Marketo-RTMP"
        set internet-service-id 4325392
    next
    edit "Marketo-NetBIOS.Name.Service"
        set internet-service-id 4325400
    next
    edit "Bill-Other"
        set internet-service-id 4456448
    next
    edit "Bill-Web"
        set internet-service-id 4456449
    next
    edit "Bill-ICMP"
        set internet-service-id 4456450
    next
    edit "Bill-DNS"
        set internet-service-id 4456451
    next
    edit "Bill-Outbound_Email"
        set internet-service-id 4456452
    next
    edit "Bill-SSH"
        set internet-service-id 4456454
    next
    edit "Bill-FTP"
        set internet-service-id 4456455
    next
    edit "Bill-NTP"
        set internet-service-id 4456456
    next
    edit "Bill-Inbound_Email"
        set internet-service-id 4456457
    next
    edit "Bill-LDAP"
        set internet-service-id 4456462
    next
    edit "Bill-NetBIOS.Session.Service"
        set internet-service-id 4456463
    next
    edit "Bill-RTMP"
        set internet-service-id 4456464
    next
    edit "Bill-NetBIOS.Name.Service"
        set internet-service-id 4456472
    next
    edit "Shopify-Other"
        set internet-service-id 4521984
    next
    edit "Shopify-Web"
        set internet-service-id 4521985
    next
    edit "Shopify-ICMP"
        set internet-service-id 4521986
    next
    edit "Shopify-DNS"
        set internet-service-id 4521987
    next
    edit "Shopify-Outbound_Email"
        set internet-service-id 4521988
    next
    edit "Shopify-SSH"
        set internet-service-id 4521990
    next
    edit "Shopify-FTP"
        set internet-service-id 4521991
    next
    edit "Shopify-NTP"
        set internet-service-id 4521992
    next
    edit "Shopify-Inbound_Email"
        set internet-service-id 4521993
    next
    edit "Shopify-LDAP"
        set internet-service-id 4521998
    next
    edit "Shopify-NetBIOS.Session.Service"
        set internet-service-id 4521999
    next
    edit "Shopify-RTMP"
        set internet-service-id 4522000
    next
    edit "Shopify-NetBIOS.Name.Service"
        set internet-service-id 4522008
    next
    edit "Shopify-Shopify"
        set internet-service-id 4522162
    next
    edit "MuleSoft-Other"
        set internet-service-id 4587520
    next
    edit "MuleSoft-Web"
        set internet-service-id 4587521
    next
    edit "MuleSoft-ICMP"
        set internet-service-id 4587522
    next
    edit "MuleSoft-DNS"
        set internet-service-id 4587523
    next
    edit "MuleSoft-Outbound_Email"
        set internet-service-id 4587524
    next
    edit "MuleSoft-SSH"
        set internet-service-id 4587526
    next
    edit "MuleSoft-FTP"
        set internet-service-id 4587527
    next
    edit "MuleSoft-NTP"
        set internet-service-id 4587528
    next
    edit "MuleSoft-Inbound_Email"
        set internet-service-id 4587529
    next
    edit "MuleSoft-LDAP"
        set internet-service-id 4587534
    next
    edit "MuleSoft-NetBIOS.Session.Service"
        set internet-service-id 4587535
    next
    edit "MuleSoft-RTMP"
        set internet-service-id 4587536
    next
    edit "MuleSoft-NetBIOS.Name.Service"
        set internet-service-id 4587544
    next
    edit "Cornerstone-Other"
        set internet-service-id 4653056
    next
    edit "Cornerstone-Web"
        set internet-service-id 4653057
    next
    edit "Cornerstone-ICMP"
        set internet-service-id 4653058
    next
    edit "Cornerstone-DNS"
        set internet-service-id 4653059
    next
    edit "Cornerstone-Outbound_Email"
        set internet-service-id 4653060
    next
    edit "Cornerstone-SSH"
        set internet-service-id 4653062
    next
    edit "Cornerstone-FTP"
        set internet-service-id 4653063
    next
    edit "Cornerstone-NTP"
        set internet-service-id 4653064
    next
    edit "Cornerstone-Inbound_Email"
        set internet-service-id 4653065
    next
    edit "Cornerstone-LDAP"
        set internet-service-id 4653070
    next
    edit "Cornerstone-NetBIOS.Session.Service"
        set internet-service-id 4653071
    next
    edit "Cornerstone-RTMP"
        set internet-service-id 4653072
    next
    edit "Cornerstone-NetBIOS.Name.Service"
        set internet-service-id 4653080
    next
    edit "Eventbrite-Other"
        set internet-service-id 4718592
    next
    edit "Eventbrite-Web"
        set internet-service-id 4718593
    next
    edit "Eventbrite-ICMP"
        set internet-service-id 4718594
    next
    edit "Eventbrite-DNS"
        set internet-service-id 4718595
    next
    edit "Eventbrite-Outbound_Email"
        set internet-service-id 4718596
    next
    edit "Eventbrite-SSH"
        set internet-service-id 4718598
    next
    edit "Eventbrite-FTP"
        set internet-service-id 4718599
    next
    edit "Eventbrite-NTP"
        set internet-service-id 4718600
    next
    edit "Eventbrite-Inbound_Email"
        set internet-service-id 4718601
    next
    edit "Eventbrite-LDAP"
        set internet-service-id 4718606
    next
    edit "Eventbrite-NetBIOS.Session.Service"
        set internet-service-id 4718607
    next
    edit "Eventbrite-RTMP"
        set internet-service-id 4718608
    next
    edit "Eventbrite-NetBIOS.Name.Service"
        set internet-service-id 4718616
    next
    edit "Paychex-Other"
        set internet-service-id 4784128
    next
    edit "Paychex-Web"
        set internet-service-id 4784129
    next
    edit "Paychex-ICMP"
        set internet-service-id 4784130
    next
    edit "Paychex-DNS"
        set internet-service-id 4784131
    next
    edit "Paychex-Outbound_Email"
        set internet-service-id 4784132
    next
    edit "Paychex-SSH"
        set internet-service-id 4784134
    next
    edit "Paychex-FTP"
        set internet-service-id 4784135
    next
    edit "Paychex-NTP"
        set internet-service-id 4784136
    next
    edit "Paychex-Inbound_Email"
        set internet-service-id 4784137
    next
    edit "Paychex-LDAP"
        set internet-service-id 4784142
    next
    edit "Paychex-NetBIOS.Session.Service"
        set internet-service-id 4784143
    next
    edit "Paychex-RTMP"
        set internet-service-id 4784144
    next
    edit "Paychex-NetBIOS.Name.Service"
        set internet-service-id 4784152
    next
    edit "NewRelic-Other"
        set internet-service-id 4849664
    next
    edit "NewRelic-Web"
        set internet-service-id 4849665
    next
    edit "NewRelic-ICMP"
        set internet-service-id 4849666
    next
    edit "NewRelic-DNS"
        set internet-service-id 4849667
    next
    edit "NewRelic-Outbound_Email"
        set internet-service-id 4849668
    next
    edit "NewRelic-SSH"
        set internet-service-id 4849670
    next
    edit "NewRelic-FTP"
        set internet-service-id 4849671
    next
    edit "NewRelic-NTP"
        set internet-service-id 4849672
    next
    edit "NewRelic-Inbound_Email"
        set internet-service-id 4849673
    next
    edit "NewRelic-LDAP"
        set internet-service-id 4849678
    next
    edit "NewRelic-NetBIOS.Session.Service"
        set internet-service-id 4849679
    next
    edit "NewRelic-RTMP"
        set internet-service-id 4849680
    next
    edit "NewRelic-NetBIOS.Name.Service"
        set internet-service-id 4849688
    next
    edit "Splunk-Other"
        set internet-service-id 4915200
    next
    edit "Splunk-Web"
        set internet-service-id 4915201
    next
    edit "Splunk-ICMP"
        set internet-service-id 4915202
    next
    edit "Splunk-DNS"
        set internet-service-id 4915203
    next
    edit "Splunk-Outbound_Email"
        set internet-service-id 4915204
    next
    edit "Splunk-SSH"
        set internet-service-id 4915206
    next
    edit "Splunk-FTP"
        set internet-service-id 4915207
    next
    edit "Splunk-NTP"
        set internet-service-id 4915208
    next
    edit "Splunk-Inbound_Email"
        set internet-service-id 4915209
    next
    edit "Splunk-LDAP"
        set internet-service-id 4915214
    next
    edit "Splunk-NetBIOS.Session.Service"
        set internet-service-id 4915215
    next
    edit "Splunk-RTMP"
        set internet-service-id 4915216
    next
    edit "Splunk-NetBIOS.Name.Service"
        set internet-service-id 4915224
    next
    edit "Domo-Other"
        set internet-service-id 4980736
    next
    edit "Domo-Web"
        set internet-service-id 4980737
    next
    edit "Domo-ICMP"
        set internet-service-id 4980738
    next
    edit "Domo-DNS"
        set internet-service-id 4980739
    next
    edit "Domo-Outbound_Email"
        set internet-service-id 4980740
    next
    edit "Domo-SSH"
        set internet-service-id 4980742
    next
    edit "Domo-FTP"
        set internet-service-id 4980743
    next
    edit "Domo-NTP"
        set internet-service-id 4980744
    next
    edit "Domo-Inbound_Email"
        set internet-service-id 4980745
    next
    edit "Domo-LDAP"
        set internet-service-id 4980750
    next
    edit "Domo-NetBIOS.Session.Service"
        set internet-service-id 4980751
    next
    edit "Domo-RTMP"
        set internet-service-id 4980752
    next
    edit "Domo-NetBIOS.Name.Service"
        set internet-service-id 4980760
    next
    edit "FreshBooks-Other"
        set internet-service-id 5046272
    next
    edit "FreshBooks-Web"
        set internet-service-id 5046273
    next
    edit "FreshBooks-ICMP"
        set internet-service-id 5046274
    next
    edit "FreshBooks-DNS"
        set internet-service-id 5046275
    next
    edit "FreshBooks-Outbound_Email"
        set internet-service-id 5046276
    next
    edit "FreshBooks-SSH"
        set internet-service-id 5046278
    next
    edit "FreshBooks-FTP"
        set internet-service-id 5046279
    next
    edit "FreshBooks-NTP"
        set internet-service-id 5046280
    next
    edit "FreshBooks-Inbound_Email"
        set internet-service-id 5046281
    next
    edit "FreshBooks-LDAP"
        set internet-service-id 5046286
    next
    edit "FreshBooks-NetBIOS.Session.Service"
        set internet-service-id 5046287
    next
    edit "FreshBooks-RTMP"
        set internet-service-id 5046288
    next
    edit "FreshBooks-NetBIOS.Name.Service"
        set internet-service-id 5046296
    next
    edit "Tableau-Other"
        set internet-service-id 5111808
    next
    edit "Tableau-Web"
        set internet-service-id 5111809
    next
    edit "Tableau-ICMP"
        set internet-service-id 5111810
    next
    edit "Tableau-DNS"
        set internet-service-id 5111811
    next
    edit "Tableau-Outbound_Email"
        set internet-service-id 5111812
    next
    edit "Tableau-SSH"
        set internet-service-id 5111814
    next
    edit "Tableau-FTP"
        set internet-service-id 5111815
    next
    edit "Tableau-NTP"
        set internet-service-id 5111816
    next
    edit "Tableau-Inbound_Email"
        set internet-service-id 5111817
    next
    edit "Tableau-LDAP"
        set internet-service-id 5111822
    next
    edit "Tableau-NetBIOS.Session.Service"
        set internet-service-id 5111823
    next
    edit "Tableau-RTMP"
        set internet-service-id 5111824
    next
    edit "Tableau-NetBIOS.Name.Service"
        set internet-service-id 5111832
    next
    edit "Druva-Other"
        set internet-service-id 5177344
    next
    edit "Druva-Web"
        set internet-service-id 5177345
    next
    edit "Druva-ICMP"
        set internet-service-id 5177346
    next
    edit "Druva-DNS"
        set internet-service-id 5177347
    next
    edit "Druva-Outbound_Email"
        set internet-service-id 5177348
    next
    edit "Druva-SSH"
        set internet-service-id 5177350
    next
    edit "Druva-FTP"
        set internet-service-id 5177351
    next
    edit "Druva-NTP"
        set internet-service-id 5177352
    next
    edit "Druva-Inbound_Email"
        set internet-service-id 5177353
    next
    edit "Druva-LDAP"
        set internet-service-id 5177358
    next
    edit "Druva-NetBIOS.Session.Service"
        set internet-service-id 5177359
    next
    edit "Druva-RTMP"
        set internet-service-id 5177360
    next
    edit "Druva-NetBIOS.Name.Service"
        set internet-service-id 5177368
    next
    edit "Act-on-Other"
        set internet-service-id 5242880
    next
    edit "Act-on-Web"
        set internet-service-id 5242881
    next
    edit "Act-on-ICMP"
        set internet-service-id 5242882
    next
    edit "Act-on-DNS"
        set internet-service-id 5242883
    next
    edit "Act-on-Outbound_Email"
        set internet-service-id 5242884
    next
    edit "Act-on-SSH"
        set internet-service-id 5242886
    next
    edit "Act-on-FTP"
        set internet-service-id 5242887
    next
    edit "Act-on-NTP"
        set internet-service-id 5242888
    next
    edit "Act-on-Inbound_Email"
        set internet-service-id 5242889
    next
    edit "Act-on-LDAP"
        set internet-service-id 5242894
    next
    edit "Act-on-NetBIOS.Session.Service"
        set internet-service-id 5242895
    next
    edit "Act-on-RTMP"
        set internet-service-id 5242896
    next
    edit "Act-on-NetBIOS.Name.Service"
        set internet-service-id 5242904
    next
    edit "GoodData-Other"
        set internet-service-id 5308416
    next
    edit "GoodData-Web"
        set internet-service-id 5308417
    next
    edit "GoodData-ICMP"
        set internet-service-id 5308418
    next
    edit "GoodData-DNS"
        set internet-service-id 5308419
    next
    edit "GoodData-Outbound_Email"
        set internet-service-id 5308420
    next
    edit "GoodData-SSH"
        set internet-service-id 5308422
    next
    edit "GoodData-FTP"
        set internet-service-id 5308423
    next
    edit "GoodData-NTP"
        set internet-service-id 5308424
    next
    edit "GoodData-Inbound_Email"
        set internet-service-id 5308425
    next
    edit "GoodData-LDAP"
        set internet-service-id 5308430
    next
    edit "GoodData-NetBIOS.Session.Service"
        set internet-service-id 5308431
    next
    edit "GoodData-RTMP"
        set internet-service-id 5308432
    next
    edit "GoodData-NetBIOS.Name.Service"
        set internet-service-id 5308440
    next
    edit "SurveyMonkey-Other"
        set internet-service-id 5373952
    next
    edit "SurveyMonkey-Web"
        set internet-service-id 5373953
    next
    edit "SurveyMonkey-ICMP"
        set internet-service-id 5373954
    next
    edit "SurveyMonkey-DNS"
        set internet-service-id 5373955
    next
    edit "SurveyMonkey-Outbound_Email"
        set internet-service-id 5373956
    next
    edit "SurveyMonkey-SSH"
        set internet-service-id 5373958
    next
    edit "SurveyMonkey-FTP"
        set internet-service-id 5373959
    next
    edit "SurveyMonkey-NTP"
        set internet-service-id 5373960
    next
    edit "SurveyMonkey-Inbound_Email"
        set internet-service-id 5373961
    next
    edit "SurveyMonkey-LDAP"
        set internet-service-id 5373966
    next
    edit "SurveyMonkey-NetBIOS.Session.Service"
        set internet-service-id 5373967
    next
    edit "SurveyMonkey-RTMP"
        set internet-service-id 5373968
    next
    edit "SurveyMonkey-NetBIOS.Name.Service"
        set internet-service-id 5373976
    next
    edit "Cvent-Other"
        set internet-service-id 5439488
    next
    edit "Cvent-Web"
        set internet-service-id 5439489
    next
    edit "Cvent-ICMP"
        set internet-service-id 5439490
    next
    edit "Cvent-DNS"
        set internet-service-id 5439491
    next
    edit "Cvent-Outbound_Email"
        set internet-service-id 5439492
    next
    edit "Cvent-SSH"
        set internet-service-id 5439494
    next
    edit "Cvent-FTP"
        set internet-service-id 5439495
    next
    edit "Cvent-NTP"
        set internet-service-id 5439496
    next
    edit "Cvent-Inbound_Email"
        set internet-service-id 5439497
    next
    edit "Cvent-LDAP"
        set internet-service-id 5439502
    next
    edit "Cvent-NetBIOS.Session.Service"
        set internet-service-id 5439503
    next
    edit "Cvent-RTMP"
        set internet-service-id 5439504
    next
    edit "Cvent-NetBIOS.Name.Service"
        set internet-service-id 5439512
    next
    edit "Blackbaud-Other"
        set internet-service-id 5505024
    next
    edit "Blackbaud-Web"
        set internet-service-id 5505025
    next
    edit "Blackbaud-ICMP"
        set internet-service-id 5505026
    next
    edit "Blackbaud-DNS"
        set internet-service-id 5505027
    next
    edit "Blackbaud-Outbound_Email"
        set internet-service-id 5505028
    next
    edit "Blackbaud-SSH"
        set internet-service-id 5505030
    next
    edit "Blackbaud-FTP"
        set internet-service-id 5505031
    next
    edit "Blackbaud-NTP"
        set internet-service-id 5505032
    next
    edit "Blackbaud-Inbound_Email"
        set internet-service-id 5505033
    next
    edit "Blackbaud-LDAP"
        set internet-service-id 5505038
    next
    edit "Blackbaud-NetBIOS.Session.Service"
        set internet-service-id 5505039
    next
    edit "Blackbaud-RTMP"
        set internet-service-id 5505040
    next
    edit "Blackbaud-NetBIOS.Name.Service"
        set internet-service-id 5505048
    next
    edit "InsideSales-Other"
        set internet-service-id 5570560
    next
    edit "InsideSales-Web"
        set internet-service-id 5570561
    next
    edit "InsideSales-ICMP"
        set internet-service-id 5570562
    next
    edit "InsideSales-DNS"
        set internet-service-id 5570563
    next
    edit "InsideSales-Outbound_Email"
        set internet-service-id 5570564
    next
    edit "InsideSales-SSH"
        set internet-service-id 5570566
    next
    edit "InsideSales-FTP"
        set internet-service-id 5570567
    next
    edit "InsideSales-NTP"
        set internet-service-id 5570568
    next
    edit "InsideSales-Inbound_Email"
        set internet-service-id 5570569
    next
    edit "InsideSales-LDAP"
        set internet-service-id 5570574
    next
    edit "InsideSales-NetBIOS.Session.Service"
        set internet-service-id 5570575
    next
    edit "InsideSales-RTMP"
        set internet-service-id 5570576
    next
    edit "InsideSales-NetBIOS.Name.Service"
        set internet-service-id 5570584
    next
    edit "ServiceMax-Other"
        set internet-service-id 5636096
    next
    edit "ServiceMax-Web"
        set internet-service-id 5636097
    next
    edit "ServiceMax-ICMP"
        set internet-service-id 5636098
    next
    edit "ServiceMax-DNS"
        set internet-service-id 5636099
    next
    edit "ServiceMax-Outbound_Email"
        set internet-service-id 5636100
    next
    edit "ServiceMax-SSH"
        set internet-service-id 5636102
    next
    edit "ServiceMax-FTP"
        set internet-service-id 5636103
    next
    edit "ServiceMax-NTP"
        set internet-service-id 5636104
    next
    edit "ServiceMax-Inbound_Email"
        set internet-service-id 5636105
    next
    edit "ServiceMax-LDAP"
        set internet-service-id 5636110
    next
    edit "ServiceMax-NetBIOS.Session.Service"
        set internet-service-id 5636111
    next
    edit "ServiceMax-RTMP"
        set internet-service-id 5636112
    next
    edit "ServiceMax-NetBIOS.Name.Service"
        set internet-service-id 5636120
    next
    edit "Apptio-Other"
        set internet-service-id 5701632
    next
    edit "Apptio-Web"
        set internet-service-id 5701633
    next
    edit "Apptio-ICMP"
        set internet-service-id 5701634
    next
    edit "Apptio-DNS"
        set internet-service-id 5701635
    next
    edit "Apptio-Outbound_Email"
        set internet-service-id 5701636
    next
    edit "Apptio-SSH"
        set internet-service-id 5701638
    next
    edit "Apptio-FTP"
        set internet-service-id 5701639
    next
    edit "Apptio-NTP"
        set internet-service-id 5701640
    next
    edit "Apptio-Inbound_Email"
        set internet-service-id 5701641
    next
    edit "Apptio-LDAP"
        set internet-service-id 5701646
    next
    edit "Apptio-NetBIOS.Session.Service"
        set internet-service-id 5701647
    next
    edit "Apptio-RTMP"
        set internet-service-id 5701648
    next
    edit "Apptio-NetBIOS.Name.Service"
        set internet-service-id 5701656
    next
    edit "Veracode-Other"
        set internet-service-id 5767168
    next
    edit "Veracode-Web"
        set internet-service-id 5767169
    next
    edit "Veracode-ICMP"
        set internet-service-id 5767170
    next
    edit "Veracode-DNS"
        set internet-service-id 5767171
    next
    edit "Veracode-Outbound_Email"
        set internet-service-id 5767172
    next
    edit "Veracode-SSH"
        set internet-service-id 5767174
    next
    edit "Veracode-FTP"
        set internet-service-id 5767175
    next
    edit "Veracode-NTP"
        set internet-service-id 5767176
    next
    edit "Veracode-Inbound_Email"
        set internet-service-id 5767177
    next
    edit "Veracode-LDAP"
        set internet-service-id 5767182
    next
    edit "Veracode-NetBIOS.Session.Service"
        set internet-service-id 5767183
    next
    edit "Veracode-RTMP"
        set internet-service-id 5767184
    next
    edit "Veracode-NetBIOS.Name.Service"
        set internet-service-id 5767192
    next
    edit "Anaplan-Other"
        set internet-service-id 5832704
    next
    edit "Anaplan-Web"
        set internet-service-id 5832705
    next
    edit "Anaplan-ICMP"
        set internet-service-id 5832706
    next
    edit "Anaplan-DNS"
        set internet-service-id 5832707
    next
    edit "Anaplan-Outbound_Email"
        set internet-service-id 5832708
    next
    edit "Anaplan-SSH"
        set internet-service-id 5832710
    next
    edit "Anaplan-FTP"
        set internet-service-id 5832711
    next
    edit "Anaplan-NTP"
        set internet-service-id 5832712
    next
    edit "Anaplan-Inbound_Email"
        set internet-service-id 5832713
    next
    edit "Anaplan-LDAP"
        set internet-service-id 5832718
    next
    edit "Anaplan-NetBIOS.Session.Service"
        set internet-service-id 5832719
    next
    edit "Anaplan-RTMP"
        set internet-service-id 5832720
    next
    edit "Anaplan-NetBIOS.Name.Service"
        set internet-service-id 5832728
    next
    edit "Rapid7-Other"
        set internet-service-id 5898240
    next
    edit "Rapid7-Web"
        set internet-service-id 5898241
    next
    edit "Rapid7-ICMP"
        set internet-service-id 5898242
    next
    edit "Rapid7-DNS"
        set internet-service-id 5898243
    next
    edit "Rapid7-Outbound_Email"
        set internet-service-id 5898244
    next
    edit "Rapid7-SSH"
        set internet-service-id 5898246
    next
    edit "Rapid7-FTP"
        set internet-service-id 5898247
    next
    edit "Rapid7-NTP"
        set internet-service-id 5898248
    next
    edit "Rapid7-Inbound_Email"
        set internet-service-id 5898249
    next
    edit "Rapid7-LDAP"
        set internet-service-id 5898254
    next
    edit "Rapid7-NetBIOS.Session.Service"
        set internet-service-id 5898255
    next
    edit "Rapid7-RTMP"
        set internet-service-id 5898256
    next
    edit "Rapid7-NetBIOS.Name.Service"
        set internet-service-id 5898264
    next
    edit "AnyDesk-AnyDesk"
        set internet-service-id 5963927
    next
    edit "ESET-Eset.Service"
        set internet-service-id 6029426
    next
    edit "Slack-Other"
        set internet-service-id 6094848
    next
    edit "Slack-Web"
        set internet-service-id 6094849
    next
    edit "Slack-ICMP"
        set internet-service-id 6094850
    next
    edit "Slack-DNS"
        set internet-service-id 6094851
    next
    edit "Slack-Outbound_Email"
        set internet-service-id 6094852
    next
    edit "Slack-SSH"
        set internet-service-id 6094854
    next
    edit "Slack-FTP"
        set internet-service-id 6094855
    next
    edit "Slack-NTP"
        set internet-service-id 6094856
    next
    edit "Slack-Inbound_Email"
        set internet-service-id 6094857
    next
    edit "Slack-LDAP"
        set internet-service-id 6094862
    next
    edit "Slack-NetBIOS.Session.Service"
        set internet-service-id 6094863
    next
    edit "Slack-RTMP"
        set internet-service-id 6094864
    next
    edit "Slack-NetBIOS.Name.Service"
        set internet-service-id 6094872
    next
    edit "Slack-Slack"
        set internet-service-id 6095024
    next
    edit "ADP-Other"
        set internet-service-id 6160384
    next
    edit "ADP-Web"
        set internet-service-id 6160385
    next
    edit "ADP-ICMP"
        set internet-service-id 6160386
    next
    edit "ADP-DNS"
        set internet-service-id 6160387
    next
    edit "ADP-Outbound_Email"
        set internet-service-id 6160388
    next
    edit "ADP-SSH"
        set internet-service-id 6160390
    next
    edit "ADP-FTP"
        set internet-service-id 6160391
    next
    edit "ADP-NTP"
        set internet-service-id 6160392
    next
    edit "ADP-Inbound_Email"
        set internet-service-id 6160393
    next
    edit "ADP-LDAP"
        set internet-service-id 6160398
    next
    edit "ADP-NetBIOS.Session.Service"
        set internet-service-id 6160399
    next
    edit "ADP-RTMP"
        set internet-service-id 6160400
    next
    edit "ADP-NetBIOS.Name.Service"
        set internet-service-id 6160408
    next
    edit "Blackboard-Other"
        set internet-service-id 6225920
    next
    edit "Blackboard-Web"
        set internet-service-id 6225921
    next
    edit "Blackboard-ICMP"
        set internet-service-id 6225922
    next
    edit "Blackboard-DNS"
        set internet-service-id 6225923
    next
    edit "Blackboard-Outbound_Email"
        set internet-service-id 6225924
    next
    edit "Blackboard-SSH"
        set internet-service-id 6225926
    next
    edit "Blackboard-FTP"
        set internet-service-id 6225927
    next
    edit "Blackboard-NTP"
        set internet-service-id 6225928
    next
    edit "Blackboard-Inbound_Email"
        set internet-service-id 6225929
    next
    edit "Blackboard-LDAP"
        set internet-service-id 6225934
    next
    edit "Blackboard-NetBIOS.Session.Service"
        set internet-service-id 6225935
    next
    edit "Blackboard-RTMP"
        set internet-service-id 6225936
    next
    edit "Blackboard-NetBIOS.Name.Service"
        set internet-service-id 6225944
    next
    edit "SAP-Other"
        set internet-service-id 6291456
    next
    edit "SAP-Web"
        set internet-service-id 6291457
    next
    edit "SAP-ICMP"
        set internet-service-id 6291458
    next
    edit "SAP-DNS"
        set internet-service-id 6291459
    next
    edit "SAP-Outbound_Email"
        set internet-service-id 6291460
    next
    edit "SAP-SSH"
        set internet-service-id 6291462
    next
    edit "SAP-FTP"
        set internet-service-id 6291463
    next
    edit "SAP-NTP"
        set internet-service-id 6291464
    next
    edit "SAP-Inbound_Email"
        set internet-service-id 6291465
    next
    edit "SAP-LDAP"
        set internet-service-id 6291470
    next
    edit "SAP-NetBIOS.Session.Service"
        set internet-service-id 6291471
    next
    edit "SAP-RTMP"
        set internet-service-id 6291472
    next
    edit "SAP-NetBIOS.Name.Service"
        set internet-service-id 6291480
    next
    edit "SAP-HANA"
        set internet-service-id 6291612
    next
    edit "SAP-SuccessFactors"
        set internet-service-id 6291618
    next
    edit "Snap-Snapchat"
        set internet-service-id 6357108
    next
    edit "Zoom.us-Zoom.Meeting"
        set internet-service-id 6422646
    next
    edit "Sophos-Other"
        set internet-service-id 6488064
    next
    edit "Sophos-Web"
        set internet-service-id 6488065
    next
    edit "Sophos-ICMP"
        set internet-service-id 6488066
    next
    edit "Sophos-DNS"
        set internet-service-id 6488067
    next
    edit "Sophos-Outbound_Email"
        set internet-service-id 6488068
    next
    edit "Sophos-SSH"
        set internet-service-id 6488070
    next
    edit "Sophos-FTP"
        set internet-service-id 6488071
    next
    edit "Sophos-NTP"
        set internet-service-id 6488072
    next
    edit "Sophos-Inbound_Email"
        set internet-service-id 6488073
    next
    edit "Sophos-LDAP"
        set internet-service-id 6488078
    next
    edit "Sophos-NetBIOS.Session.Service"
        set internet-service-id 6488079
    next
    edit "Sophos-RTMP"
        set internet-service-id 6488080
    next
    edit "Sophos-NetBIOS.Name.Service"
        set internet-service-id 6488088
    next
    edit "Cloudflare-Other"
        set internet-service-id 6553600
    next
    edit "Cloudflare-Web"
        set internet-service-id 6553601
    next
    edit "Cloudflare-ICMP"
        set internet-service-id 6553602
    next
    edit "Cloudflare-DNS"
        set internet-service-id 6553603
    next
    edit "Cloudflare-Outbound_Email"
        set internet-service-id 6553604
    next
    edit "Cloudflare-SSH"
        set internet-service-id 6553606
    next
    edit "Cloudflare-FTP"
        set internet-service-id 6553607
    next
    edit "Cloudflare-NTP"
        set internet-service-id 6553608
    next
    edit "Cloudflare-Inbound_Email"
        set internet-service-id 6553609
    next
    edit "Cloudflare-LDAP"
        set internet-service-id 6553614
    next
    edit "Cloudflare-NetBIOS.Session.Service"
        set internet-service-id 6553615
    next
    edit "Cloudflare-RTMP"
        set internet-service-id 6553616
    next
    edit "Cloudflare-NetBIOS.Name.Service"
        set internet-service-id 6553624
    next
    edit "Cloudflare-CDN"
        set internet-service-id 6553737
    next
    edit "Pexip-Pexip.Meeting"
        set internet-service-id 6619256
    next
    edit "Zscaler-Other"
        set internet-service-id 6684672
    next
    edit "Zscaler-Web"
        set internet-service-id 6684673
    next
    edit "Zscaler-ICMP"
        set internet-service-id 6684674
    next
    edit "Zscaler-DNS"
        set internet-service-id 6684675
    next
    edit "Zscaler-Outbound_Email"
        set internet-service-id 6684676
    next
    edit "Zscaler-SSH"
        set internet-service-id 6684678
    next
    edit "Zscaler-FTP"
        set internet-service-id 6684679
    next
    edit "Zscaler-NTP"
        set internet-service-id 6684680
    next
    edit "Zscaler-Inbound_Email"
        set internet-service-id 6684681
    next
    edit "Zscaler-LDAP"
        set internet-service-id 6684686
    next
    edit "Zscaler-NetBIOS.Session.Service"
        set internet-service-id 6684687
    next
    edit "Zscaler-RTMP"
        set internet-service-id 6684688
    next
    edit "Zscaler-NetBIOS.Name.Service"
        set internet-service-id 6684696
    next
    edit "Zscaler-Zscaler.Cloud"
        set internet-service-id 6684793
    next
    edit "Yandex-Other"
        set internet-service-id 6750208
    next
    edit "Yandex-Web"
        set internet-service-id 6750209
    next
    edit "Yandex-ICMP"
        set internet-service-id 6750210
    next
    edit "Yandex-DNS"
        set internet-service-id 6750211
    next
    edit "Yandex-Outbound_Email"
        set internet-service-id 6750212
    next
    edit "Yandex-SSH"
        set internet-service-id 6750214
    next
    edit "Yandex-FTP"
        set internet-service-id 6750215
    next
    edit "Yandex-NTP"
        set internet-service-id 6750216
    next
    edit "Yandex-Inbound_Email"
        set internet-service-id 6750217
    next
    edit "Yandex-LDAP"
        set internet-service-id 6750222
    next
    edit "Yandex-NetBIOS.Session.Service"
        set internet-service-id 6750223
    next
    edit "Yandex-RTMP"
        set internet-service-id 6750224
    next
    edit "Yandex-NetBIOS.Name.Service"
        set internet-service-id 6750232
    next
    edit "mail.ru-Other"
        set internet-service-id 6815744
    next
    edit "mail.ru-Web"
        set internet-service-id 6815745
    next
    edit "mail.ru-ICMP"
        set internet-service-id 6815746
    next
    edit "mail.ru-DNS"
        set internet-service-id 6815747
    next
    edit "mail.ru-Outbound_Email"
        set internet-service-id 6815748
    next
    edit "mail.ru-SSH"
        set internet-service-id 6815750
    next
    edit "mail.ru-FTP"
        set internet-service-id 6815751
    next
    edit "mail.ru-NTP"
        set internet-service-id 6815752
    next
    edit "mail.ru-Inbound_Email"
        set internet-service-id 6815753
    next
    edit "mail.ru-LDAP"
        set internet-service-id 6815758
    next
    edit "mail.ru-NetBIOS.Session.Service"
        set internet-service-id 6815759
    next
    edit "mail.ru-RTMP"
        set internet-service-id 6815760
    next
    edit "mail.ru-NetBIOS.Name.Service"
        set internet-service-id 6815768
    next
    edit "Alibaba-Other"
        set internet-service-id 6881280
    next
    edit "Alibaba-Web"
        set internet-service-id 6881281
    next
    edit "Alibaba-ICMP"
        set internet-service-id 6881282
    next
    edit "Alibaba-DNS"
        set internet-service-id 6881283
    next
    edit "Alibaba-Outbound_Email"
        set internet-service-id 6881284
    next
    edit "Alibaba-SSH"
        set internet-service-id 6881286
    next
    edit "Alibaba-FTP"
        set internet-service-id 6881287
    next
    edit "Alibaba-NTP"
        set internet-service-id 6881288
    next
    edit "Alibaba-Inbound_Email"
        set internet-service-id 6881289
    next
    edit "Alibaba-LDAP"
        set internet-service-id 6881294
    next
    edit "Alibaba-NetBIOS.Session.Service"
        set internet-service-id 6881295
    next
    edit "Alibaba-RTMP"
        set internet-service-id 6881296
    next
    edit "Alibaba-NetBIOS.Name.Service"
        set internet-service-id 6881304
    next
    edit "Alibaba-Alibaba.Cloud"
        set internet-service-id 6881402
    next
    edit "GoDaddy-Other"
        set internet-service-id 6946816
    next
    edit "GoDaddy-Web"
        set internet-service-id 6946817
    next
    edit "GoDaddy-ICMP"
        set internet-service-id 6946818
    next
    edit "GoDaddy-DNS"
        set internet-service-id 6946819
    next
    edit "GoDaddy-Outbound_Email"
        set internet-service-id 6946820
    next
    edit "GoDaddy-SSH"
        set internet-service-id 6946822
    next
    edit "GoDaddy-FTP"
        set internet-service-id 6946823
    next
    edit "GoDaddy-NTP"
        set internet-service-id 6946824
    next
    edit "GoDaddy-Inbound_Email"
        set internet-service-id 6946825
    next
    edit "GoDaddy-LDAP"
        set internet-service-id 6946830
    next
    edit "GoDaddy-NetBIOS.Session.Service"
        set internet-service-id 6946831
    next
    edit "GoDaddy-RTMP"
        set internet-service-id 6946832
    next
    edit "GoDaddy-NetBIOS.Name.Service"
        set internet-service-id 6946840
    next
    edit "GoDaddy-GoDaddy.Email"
        set internet-service-id 6946939
    next
    edit "Bluejeans-Other"
        set internet-service-id 7012352
    next
    edit "Bluejeans-Web"
        set internet-service-id 7012353
    next
    edit "Bluejeans-ICMP"
        set internet-service-id 7012354
    next
    edit "Bluejeans-DNS"
        set internet-service-id 7012355
    next
    edit "Bluejeans-Outbound_Email"
        set internet-service-id 7012356
    next
    edit "Bluejeans-SSH"
        set internet-service-id 7012358
    next
    edit "Bluejeans-FTP"
        set internet-service-id 7012359
    next
    edit "Bluejeans-NTP"
        set internet-service-id 7012360
    next
    edit "Bluejeans-Inbound_Email"
        set internet-service-id 7012361
    next
    edit "Bluejeans-LDAP"
        set internet-service-id 7012366
    next
    edit "Bluejeans-NetBIOS.Session.Service"
        set internet-service-id 7012367
    next
    edit "Bluejeans-RTMP"
        set internet-service-id 7012368
    next
    edit "Bluejeans-NetBIOS.Name.Service"
        set internet-service-id 7012376
    next
    edit "Bluejeans-Bluejeans.Meeting"
        set internet-service-id 7012476
    next
    edit "Webroot-Webroot.SecureAnywhere"
        set internet-service-id 7078013
    next
    edit "Avast-Other"
        set internet-service-id 7143424
    next
    edit "Avast-Web"
        set internet-service-id 7143425
    next
    edit "Avast-ICMP"
        set internet-service-id 7143426
    next
    edit "Avast-DNS"
        set internet-service-id 7143427
    next
    edit "Avast-Outbound_Email"
        set internet-service-id 7143428
    next
    edit "Avast-SSH"
        set internet-service-id 7143430
    next
    edit "Avast-FTP"
        set internet-service-id 7143431
    next
    edit "Avast-NTP"
        set internet-service-id 7143432
    next
    edit "Avast-Inbound_Email"
        set internet-service-id 7143433
    next
    edit "Avast-LDAP"
        set internet-service-id 7143438
    next
    edit "Avast-NetBIOS.Session.Service"
        set internet-service-id 7143439
    next
    edit "Avast-RTMP"
        set internet-service-id 7143440
    next
    edit "Avast-NetBIOS.Name.Service"
        set internet-service-id 7143448
    next
    edit "Avast-Avast.Security"
        set internet-service-id 7143550
    next
    edit "Wetransfer-Other"
        set internet-service-id 7208960
    next
    edit "Wetransfer-Web"
        set internet-service-id 7208961
    next
    edit "Wetransfer-ICMP"
        set internet-service-id 7208962
    next
    edit "Wetransfer-DNS"
        set internet-service-id 7208963
    next
    edit "Wetransfer-Outbound_Email"
        set internet-service-id 7208964
    next
    edit "Wetransfer-SSH"
        set internet-service-id 7208966
    next
    edit "Wetransfer-FTP"
        set internet-service-id 7208967
    next
    edit "Wetransfer-NTP"
        set internet-service-id 7208968
    next
    edit "Wetransfer-Inbound_Email"
        set internet-service-id 7208969
    next
    edit "Wetransfer-LDAP"
        set internet-service-id 7208974
    next
    edit "Wetransfer-NetBIOS.Session.Service"
        set internet-service-id 7208975
    next
    edit "Wetransfer-RTMP"
        set internet-service-id 7208976
    next
    edit "Wetransfer-NetBIOS.Name.Service"
        set internet-service-id 7208984
    next
    edit "Sendgrid-Sendgrid.Email"
        set internet-service-id 7274623
    next
    edit "Ubiquiti-UniFi"
        set internet-service-id 7340160
    next
    edit "Lifesize-Lifesize.Cloud"
        set internet-service-id 7405697
    next
    edit "Okta-Other"
        set internet-service-id 7471104
    next
    edit "Okta-Web"
        set internet-service-id 7471105
    next
    edit "Okta-ICMP"
        set internet-service-id 7471106
    next
    edit "Okta-DNS"
        set internet-service-id 7471107
    next
    edit "Okta-Outbound_Email"
        set internet-service-id 7471108
    next
    edit "Okta-SSH"
        set internet-service-id 7471110
    next
    edit "Okta-FTP"
        set internet-service-id 7471111
    next
    edit "Okta-NTP"
        set internet-service-id 7471112
    next
    edit "Okta-Inbound_Email"
        set internet-service-id 7471113
    next
    edit "Okta-LDAP"
        set internet-service-id 7471118
    next
    edit "Okta-NetBIOS.Session.Service"
        set internet-service-id 7471119
    next
    edit "Okta-RTMP"
        set internet-service-id 7471120
    next
    edit "Okta-NetBIOS.Name.Service"
        set internet-service-id 7471128
    next
    edit "Okta-Okta"
        set internet-service-id 7471307
    next
    edit "Cybozu-Other"
        set internet-service-id 7536640
    next
    edit "Cybozu-Web"
        set internet-service-id 7536641
    next
    edit "Cybozu-ICMP"
        set internet-service-id 7536642
    next
    edit "Cybozu-DNS"
        set internet-service-id 7536643
    next
    edit "Cybozu-Outbound_Email"
        set internet-service-id 7536644
    next
    edit "Cybozu-SSH"
        set internet-service-id 7536646
    next
    edit "Cybozu-FTP"
        set internet-service-id 7536647
    next
    edit "Cybozu-NTP"
        set internet-service-id 7536648
    next
    edit "Cybozu-Inbound_Email"
        set internet-service-id 7536649
    next
    edit "Cybozu-LDAP"
        set internet-service-id 7536654
    next
    edit "Cybozu-NetBIOS.Session.Service"
        set internet-service-id 7536655
    next
    edit "Cybozu-RTMP"
        set internet-service-id 7536656
    next
    edit "Cybozu-NetBIOS.Name.Service"
        set internet-service-id 7536664
    next
    edit "VNC-Other"
        set internet-service-id 7602176
    next
    edit "VNC-Web"
        set internet-service-id 7602177
    next
    edit "VNC-ICMP"
        set internet-service-id 7602178
    next
    edit "VNC-DNS"
        set internet-service-id 7602179
    next
    edit "VNC-Outbound_Email"
        set internet-service-id 7602180
    next
    edit "VNC-SSH"
        set internet-service-id 7602182
    next
    edit "VNC-FTP"
        set internet-service-id 7602183
    next
    edit "VNC-NTP"
        set internet-service-id 7602184
    next
    edit "VNC-Inbound_Email"
        set internet-service-id 7602185
    next
    edit "VNC-LDAP"
        set internet-service-id 7602190
    next
    edit "VNC-NetBIOS.Session.Service"
        set internet-service-id 7602191
    next
    edit "VNC-RTMP"
        set internet-service-id 7602192
    next
    edit "VNC-NetBIOS.Name.Service"
        set internet-service-id 7602200
    next
    edit "Egnyte-Egnyte"
        set internet-service-id 7667846
    next
    edit "CrowdStrike-CrowdStrike.Falcon.Cloud"
        set internet-service-id 7733383
    next
    edit "Aruba.it-Other"
        set internet-service-id 7798784
    next
    edit "Aruba.it-Web"
        set internet-service-id 7798785
    next
    edit "Aruba.it-ICMP"
        set internet-service-id 7798786
    next
    edit "Aruba.it-DNS"
        set internet-service-id 7798787
    next
    edit "Aruba.it-Outbound_Email"
        set internet-service-id 7798788
    next
    edit "Aruba.it-SSH"
        set internet-service-id 7798790
    next
    edit "Aruba.it-FTP"
        set internet-service-id 7798791
    next
    edit "Aruba.it-NTP"
        set internet-service-id 7798792
    next
    edit "Aruba.it-Inbound_Email"
        set internet-service-id 7798793
    next
    edit "Aruba.it-LDAP"
        set internet-service-id 7798798
    next
    edit "Aruba.it-NetBIOS.Session.Service"
        set internet-service-id 7798799
    next
    edit "Aruba.it-RTMP"
        set internet-service-id 7798800
    next
    edit "Aruba.it-NetBIOS.Name.Service"
        set internet-service-id 7798808
    next
    edit "ISLOnline-Other"
        set internet-service-id 7864320
    next
    edit "ISLOnline-Web"
        set internet-service-id 7864321
    next
    edit "ISLOnline-ICMP"
        set internet-service-id 7864322
    next
    edit "ISLOnline-DNS"
        set internet-service-id 7864323
    next
    edit "ISLOnline-Outbound_Email"
        set internet-service-id 7864324
    next
    edit "ISLOnline-SSH"
        set internet-service-id 7864326
    next
    edit "ISLOnline-FTP"
        set internet-service-id 7864327
    next
    edit "ISLOnline-NTP"
        set internet-service-id 7864328
    next
    edit "ISLOnline-Inbound_Email"
        set internet-service-id 7864329
    next
    edit "ISLOnline-LDAP"
        set internet-service-id 7864334
    next
    edit "ISLOnline-NetBIOS.Session.Service"
        set internet-service-id 7864335
    next
    edit "ISLOnline-RTMP"
        set internet-service-id 7864336
    next
    edit "ISLOnline-NetBIOS.Name.Service"
        set internet-service-id 7864344
    next
    edit "Akamai-CDN"
        set internet-service-id 7929993
    next
    edit "Akamai-Linode.Cloud"
        set internet-service-id 7930148
    next
    edit "Rackspace-CDN"
        set internet-service-id 7995529
    next
    edit "Instart-CDN"
        set internet-service-id 8061065
    next
    edit "Bitdefender-Other"
        set internet-service-id 8126464
    next
    edit "Bitdefender-Web"
        set internet-service-id 8126465
    next
    edit "Bitdefender-ICMP"
        set internet-service-id 8126466
    next
    edit "Bitdefender-DNS"
        set internet-service-id 8126467
    next
    edit "Bitdefender-Outbound_Email"
        set internet-service-id 8126468
    next
    edit "Bitdefender-SSH"
        set internet-service-id 8126470
    next
    edit "Bitdefender-FTP"
        set internet-service-id 8126471
    next
    edit "Bitdefender-NTP"
        set internet-service-id 8126472
    next
    edit "Bitdefender-Inbound_Email"
        set internet-service-id 8126473
    next
    edit "Bitdefender-LDAP"
        set internet-service-id 8126478
    next
    edit "Bitdefender-NetBIOS.Session.Service"
        set internet-service-id 8126479
    next
    edit "Bitdefender-RTMP"
        set internet-service-id 8126480
    next
    edit "Bitdefender-NetBIOS.Name.Service"
        set internet-service-id 8126488
    next
    edit "Pingdom-Other"
        set internet-service-id 8192000
    next
    edit "Pingdom-Web"
        set internet-service-id 8192001
    next
    edit "Pingdom-ICMP"
        set internet-service-id 8192002
    next
    edit "Pingdom-DNS"
        set internet-service-id 8192003
    next
    edit "Pingdom-Outbound_Email"
        set internet-service-id 8192004
    next
    edit "Pingdom-SSH"
        set internet-service-id 8192006
    next
    edit "Pingdom-FTP"
        set internet-service-id 8192007
    next
    edit "Pingdom-NTP"
        set internet-service-id 8192008
    next
    edit "Pingdom-Inbound_Email"
        set internet-service-id 8192009
    next
    edit "Pingdom-LDAP"
        set internet-service-id 8192014
    next
    edit "Pingdom-NetBIOS.Session.Service"
        set internet-service-id 8192015
    next
    edit "Pingdom-RTMP"
        set internet-service-id 8192016
    next
    edit "Pingdom-NetBIOS.Name.Service"
        set internet-service-id 8192024
    next
    edit "UptimeRobot-Other"
        set internet-service-id 8257536
    next
    edit "UptimeRobot-Web"
        set internet-service-id 8257537
    next
    edit "UptimeRobot-ICMP"
        set internet-service-id 8257538
    next
    edit "UptimeRobot-DNS"
        set internet-service-id 8257539
    next
    edit "UptimeRobot-Outbound_Email"
        set internet-service-id 8257540
    next
    edit "UptimeRobot-SSH"
        set internet-service-id 8257542
    next
    edit "UptimeRobot-FTP"
        set internet-service-id 8257543
    next
    edit "UptimeRobot-NTP"
        set internet-service-id 8257544
    next
    edit "UptimeRobot-Inbound_Email"
        set internet-service-id 8257545
    next
    edit "UptimeRobot-LDAP"
        set internet-service-id 8257550
    next
    edit "UptimeRobot-NetBIOS.Session.Service"
        set internet-service-id 8257551
    next
    edit "UptimeRobot-RTMP"
        set internet-service-id 8257552
    next
    edit "UptimeRobot-NetBIOS.Name.Service"
        set internet-service-id 8257560
    next
    edit "UptimeRobot-UptimeRobot.Monitor"
        set internet-service-id 8257709
    next
    edit "Quovadisglobal-Other"
        set internet-service-id 8323072
    next
    edit "Quovadisglobal-Web"
        set internet-service-id 8323073
    next
    edit "Quovadisglobal-ICMP"
        set internet-service-id 8323074
    next
    edit "Quovadisglobal-DNS"
        set internet-service-id 8323075
    next
    edit "Quovadisglobal-Outbound_Email"
        set internet-service-id 8323076
    next
    edit "Quovadisglobal-SSH"
        set internet-service-id 8323078
    next
    edit "Quovadisglobal-FTP"
        set internet-service-id 8323079
    next
    edit "Quovadisglobal-NTP"
        set internet-service-id 8323080
    next
    edit "Quovadisglobal-Inbound_Email"
        set internet-service-id 8323081
    next
    edit "Quovadisglobal-LDAP"
        set internet-service-id 8323086
    next
    edit "Quovadisglobal-NetBIOS.Session.Service"
        set internet-service-id 8323087
    next
    edit "Quovadisglobal-RTMP"
        set internet-service-id 8323088
    next
    edit "Quovadisglobal-NetBIOS.Name.Service"
        set internet-service-id 8323096
    next
    edit "Splashtop-Splashtop"
        set internet-service-id 8388751
    next
    edit "Zoox-Other"
        set internet-service-id 8454144
    next
    edit "Zoox-Web"
        set internet-service-id 8454145
    next
    edit "Zoox-ICMP"
        set internet-service-id 8454146
    next
    edit "Zoox-DNS"
        set internet-service-id 8454147
    next
    edit "Zoox-Outbound_Email"
        set internet-service-id 8454148
    next
    edit "Zoox-SSH"
        set internet-service-id 8454150
    next
    edit "Zoox-FTP"
        set internet-service-id 8454151
    next
    edit "Zoox-NTP"
        set internet-service-id 8454152
    next
    edit "Zoox-Inbound_Email"
        set internet-service-id 8454153
    next
    edit "Zoox-LDAP"
        set internet-service-id 8454158
    next
    edit "Zoox-NetBIOS.Session.Service"
        set internet-service-id 8454159
    next
    edit "Zoox-RTMP"
        set internet-service-id 8454160
    next
    edit "Zoox-NetBIOS.Name.Service"
        set internet-service-id 8454168
    next
    edit "Skyfii-Other"
        set internet-service-id 8519680
    next
    edit "Skyfii-Web"
        set internet-service-id 8519681
    next
    edit "Skyfii-ICMP"
        set internet-service-id 8519682
    next
    edit "Skyfii-DNS"
        set internet-service-id 8519683
    next
    edit "Skyfii-Outbound_Email"
        set internet-service-id 8519684
    next
    edit "Skyfii-SSH"
        set internet-service-id 8519686
    next
    edit "Skyfii-FTP"
        set internet-service-id 8519687
    next
    edit "Skyfii-NTP"
        set internet-service-id 8519688
    next
    edit "Skyfii-Inbound_Email"
        set internet-service-id 8519689
    next
    edit "Skyfii-LDAP"
        set internet-service-id 8519694
    next
    edit "Skyfii-NetBIOS.Session.Service"
        set internet-service-id 8519695
    next
    edit "Skyfii-RTMP"
        set internet-service-id 8519696
    next
    edit "Skyfii-NetBIOS.Name.Service"
        set internet-service-id 8519704
    next
    edit "CoffeeBean-Other"
        set internet-service-id 8585216
    next
    edit "CoffeeBean-Web"
        set internet-service-id 8585217
    next
    edit "CoffeeBean-ICMP"
        set internet-service-id 8585218
    next
    edit "CoffeeBean-DNS"
        set internet-service-id 8585219
    next
    edit "CoffeeBean-Outbound_Email"
        set internet-service-id 8585220
    next
    edit "CoffeeBean-SSH"
        set internet-service-id 8585222
    next
    edit "CoffeeBean-FTP"
        set internet-service-id 8585223
    next
    edit "CoffeeBean-NTP"
        set internet-service-id 8585224
    next
    edit "CoffeeBean-Inbound_Email"
        set internet-service-id 8585225
    next
    edit "CoffeeBean-LDAP"
        set internet-service-id 8585230
    next
    edit "CoffeeBean-NetBIOS.Session.Service"
        set internet-service-id 8585231
    next
    edit "CoffeeBean-RTMP"
        set internet-service-id 8585232
    next
    edit "CoffeeBean-NetBIOS.Name.Service"
        set internet-service-id 8585240
    next
    edit "Cloud4Wi-Other"
        set internet-service-id 8650752
    next
    edit "Cloud4Wi-Web"
        set internet-service-id 8650753
    next
    edit "Cloud4Wi-ICMP"
        set internet-service-id 8650754
    next
    edit "Cloud4Wi-DNS"
        set internet-service-id 8650755
    next
    edit "Cloud4Wi-Outbound_Email"
        set internet-service-id 8650756
    next
    edit "Cloud4Wi-SSH"
        set internet-service-id 8650758
    next
    edit "Cloud4Wi-FTP"
        set internet-service-id 8650759
    next
    edit "Cloud4Wi-NTP"
        set internet-service-id 8650760
    next
    edit "Cloud4Wi-Inbound_Email"
        set internet-service-id 8650761
    next
    edit "Cloud4Wi-LDAP"
        set internet-service-id 8650766
    next
    edit "Cloud4Wi-NetBIOS.Session.Service"
        set internet-service-id 8650767
    next
    edit "Cloud4Wi-RTMP"
        set internet-service-id 8650768
    next
    edit "Cloud4Wi-NetBIOS.Name.Service"
        set internet-service-id 8650776
    next
    edit "Panda-Panda.Security"
        set internet-service-id 8716432
    next
    edit "Ewon-Talk2M"
        set internet-service-id 8781970
    next
    edit "Nutanix-Nutanix.Cloud"
        set internet-service-id 8847507
    next
    edit "Backblaze-Other"
        set internet-service-id 8912896
    next
    edit "Backblaze-Web"
        set internet-service-id 8912897
    next
    edit "Backblaze-ICMP"
        set internet-service-id 8912898
    next
    edit "Backblaze-DNS"
        set internet-service-id 8912899
    next
    edit "Backblaze-Outbound_Email"
        set internet-service-id 8912900
    next
    edit "Backblaze-SSH"
        set internet-service-id 8912902
    next
    edit "Backblaze-FTP"
        set internet-service-id 8912903
    next
    edit "Backblaze-NTP"
        set internet-service-id 8912904
    next
    edit "Backblaze-Inbound_Email"
        set internet-service-id 8912905
    next
    edit "Backblaze-LDAP"
        set internet-service-id 8912910
    next
    edit "Backblaze-NetBIOS.Session.Service"
        set internet-service-id 8912911
    next
    edit "Backblaze-RTMP"
        set internet-service-id 8912912
    next
    edit "Backblaze-NetBIOS.Name.Service"
        set internet-service-id 8912920
    next
    edit "Extreme-Extreme.Cloud"
        set internet-service-id 8978580
    next
    edit "XING-Other"
        set internet-service-id 9043968
    next
    edit "XING-Web"
        set internet-service-id 9043969
    next
    edit "XING-ICMP"
        set internet-service-id 9043970
    next
    edit "XING-DNS"
        set internet-service-id 9043971
    next
    edit "XING-Outbound_Email"
        set internet-service-id 9043972
    next
    edit "XING-SSH"
        set internet-service-id 9043974
    next
    edit "XING-FTP"
        set internet-service-id 9043975
    next
    edit "XING-NTP"
        set internet-service-id 9043976
    next
    edit "XING-Inbound_Email"
        set internet-service-id 9043977
    next
    edit "XING-LDAP"
        set internet-service-id 9043982
    next
    edit "XING-NetBIOS.Session.Service"
        set internet-service-id 9043983
    next
    edit "XING-RTMP"
        set internet-service-id 9043984
    next
    edit "XING-NetBIOS.Name.Service"
        set internet-service-id 9043992
    next
    edit "Genesys-PureCloud"
        set internet-service-id 9109653
    next
    edit "BlackBerry-Cylance"
        set internet-service-id 9175190
    next
    edit "DigiCert-OCSP"
        set internet-service-id 9240728
    next
    edit "Infomaniak-SwissTransfer"
        set internet-service-id 9306265
    next
    edit "Fuze-Fuze"
        set internet-service-id 9371802
    next
    edit "Truecaller-Truecaller"
        set internet-service-id 9437339
    next
    edit "GlobalSign-OCSP"
        set internet-service-id 9502872
    next
    edit "VeriSign-OCSP"
        set internet-service-id 9568408
    next
    edit "Sony-PlayStation.Network"
        set internet-service-id 9633952
    next
    edit "Acronis-Cyber.Cloud"
        set internet-service-id 9699489
    next
    edit "RingCentral-RingCentral"
        set internet-service-id 9765027
    next
    edit "FSecure-FSecure"
        set internet-service-id 9830564
    next
    edit "Kaseya-Kaseya.Cloud"
        set internet-service-id 9896101
    next
    edit "Shodan-Scanner"
        set internet-service-id 9961638
    next
    edit "Censys-Scanner"
        set internet-service-id 10027174
    next
    edit "Valve-Steam"
        set internet-service-id 10092711
    next
    edit "YouSeeU-Bongo"
        set internet-service-id 10158248
    next
    edit "Cato-Cato.Cloud"
        set internet-service-id 10223785
    next
    edit "SolarWinds-SpamExperts"
        set internet-service-id 10289323
    next
    edit "SolarWinds-Pingdom.Probe"
        set internet-service-id 10289326
    next
    edit "SolarWinds-SolarWinds.RMM"
        set internet-service-id 10289379
    next
    edit "8X8-8X8.Cloud"
        set internet-service-id 10354860
    next
    edit "Zattoo-Zattoo.TV"
        set internet-service-id 10420401
    next
    edit "Datto-Datto.RMM"
        set internet-service-id 10485939
    next
    edit "Barracuda-Barracuda.Cloud"
        set internet-service-id 10551477
    next
    edit "Naver-Line"
        set internet-service-id 10617015
    next
    edit "Disney-Disney+"
        set internet-service-id 10682552
    next
    edit "DNS-DoH_DoT"
        set internet-service-id 10748089
    next
    edit "DNS-Root.Name.Servers"
        set internet-service-id 10748156
    next
    edit "Quad9-Quad9.Standard.DNS"
        set internet-service-id 10813626
    next
    edit "Stretchoid-Scanner"
        set internet-service-id 10879142
    next
    edit "Poly-RealConnect.Service"
        set internet-service-id 10944700
    next
    edit "Telegram-Telegram"
        set internet-service-id 11010249
    next
    edit "Spotify-Spotify"
        set internet-service-id 11075786
    next
    edit "NextDNS-NextDNS"
        set internet-service-id 11141324
    next
    edit "Fastly-CDN"
        set internet-service-id 11206793
    next
    edit "Neustar-UltraDNS.Probes"
        set internet-service-id 11272397
    next
    edit "Malicious-Malicious.Server"
        set internet-service-id 11337935
    next
    edit "NIST-ITS"
        set internet-service-id 11403472
    next
    edit "Jamf-Jamf.Cloud"
        set internet-service-id 11469009
    next
    edit "Alcatel.Lucent-Rainbow"
        set internet-service-id 11534546
    next
    edit "Forcepoint-Forcepoint.Cloud"
        set internet-service-id 11600083
    next
    edit "Datadog-Datadog"
        set internet-service-id 11665620
    next
    edit "Mimecast-Mimecast"
        set internet-service-id 11731157
    next
    edit "MediaFire-Other"
        set internet-service-id 11796480
    next
    edit "MediaFire-Web"
        set internet-service-id 11796481
    next
    edit "MediaFire-ICMP"
        set internet-service-id 11796482
    next
    edit "MediaFire-DNS"
        set internet-service-id 11796483
    next
    edit "MediaFire-Outbound_Email"
        set internet-service-id 11796484
    next
    edit "MediaFire-SSH"
        set internet-service-id 11796486
    next
    edit "MediaFire-FTP"
        set internet-service-id 11796487
    next
    edit "MediaFire-NTP"
        set internet-service-id 11796488
    next
    edit "MediaFire-Inbound_Email"
        set internet-service-id 11796489
    next
    edit "MediaFire-LDAP"
        set internet-service-id 11796494
    next
    edit "MediaFire-NetBIOS.Session.Service"
        set internet-service-id 11796495
    next
    edit "MediaFire-RTMP"
        set internet-service-id 11796496
    next
    edit "MediaFire-NetBIOS.Name.Service"
        set internet-service-id 11796504
    next
    edit "Pandora-Pandora"
        set internet-service-id 11862230
    next
    edit "SiriusXM-SiriusXM"
        set internet-service-id 11927767
    next
    edit "Hopin-Hopin"
        set internet-service-id 11993304
    next
    edit "RedShield-RedShield.Cloud"
        set internet-service-id 12058842
    next
    edit "InterneTTL-Scanner"
        set internet-service-id 12124326
    next
    edit "VadeSecure-VadeSecure.Cloud"
        set internet-service-id 12189915
    next
    edit "Netskope-Netskope.Cloud"
        set internet-service-id 12255452
    next
    edit "ClickMeeting-ClickMeeting"
        set internet-service-id 12320989
    next
    edit "Tenable-Tenable.io.Cloud.Scanner"
        set internet-service-id 12386528
    next
    edit "Vidyo-VidyoCloud"
        set internet-service-id 12452065
    next
    edit "OpenNIC-OpenNIC.DNS"
        set internet-service-id 12517602
    next
    edit "Sectigo-Sectigo"
        set internet-service-id 12583141
    next
    edit "DigitalOcean-DigitalOcean.Platform"
        set internet-service-id 12648679
    next
    edit "Pitney.Bowes-Pitney.Bowes.Data.Center"
        set internet-service-id 12714216
    next
    edit "VPN-Anonymous.VPN"
        set internet-service-id 12779753
    next
    edit "Blockchain-Crypto.Mining.Pool"
        set internet-service-id 12845290
    next
    edit "FactSet-FactSet"
        set internet-service-id 12910830
    next
    edit "Bloomberg-Bloomberg"
        set internet-service-id 12976367
    next
    edit "Five9-Five9"
        set internet-service-id 13041904
    next
    edit "Gigas-Gigas.Cloud"
        set internet-service-id 13107441
    next
    edit "Imperva-Imperva.Cloud.WAF"
        set internet-service-id 13172978
    next
    edit "INAP-INAP"
        set internet-service-id 13238515
    next
    edit "Azion-Azion.Platform"
        set internet-service-id 13304053
    next
    edit "Hurricane.Electric-Hurricane.Electric.Internet.Services"
        set internet-service-id 13369590
    next
    edit "NodePing-NodePing.Probe"
        set internet-service-id 13435127
    next
    edit "Frontline-Frontline"
        set internet-service-id 13500665
    next
    edit "Tally-Tally.ERP"
        set internet-service-id 13566202
    next
    edit "Hosting-Bulletproof.Hosting"
        set internet-service-id 13631739
    next
    edit "Okko-Okko.TV"
        set internet-service-id 13697277
    next
    edit "Voximplant-Voximplant.Platform"
        set internet-service-id 13762829
    next
    edit "OVHcloud-OVHcloud"
        set internet-service-id 13828367
    next
    edit "SentinelOne-SentinelOne.Cloud"
        set internet-service-id 13893905
    next
    edit "Kakao-Kakao.Services"
        set internet-service-id 13959442
    next
    edit "Stripe-Stripe"
        set internet-service-id 14024979
    next
    edit "NetScout-Scanner"
        set internet-service-id 14090406
    next
    edit "Recyber-Scanner"
        set internet-service-id 14155942
    next
    edit "Cyber.Casa-Scanner"
        set internet-service-id 14221478
    next
    edit "GTHost-Dedicated.Instant.Servers"
        set internet-service-id 14287132
    next
    edit "ivi-ivi.Streaming"
        set internet-service-id 14352669
    next
    edit "BinaryEdge-Scanner"
        set internet-service-id 14418086
    next
    edit "Fintech-MarketMap.Terminal"
        set internet-service-id 14483742
    next
    edit "xMatters-xMatters.Platform"
        set internet-service-id 14549279
    next
    edit "Blizzard-Battle.Net"
        set internet-service-id 14614816
    next
    edit "Axon-Evidence"
        set internet-service-id 14680353
    next
    edit "CDN77-CDN"
        set internet-service-id 14745737
    next
    edit "GCore.Labs-CDN"
        set internet-service-id 14811273
    next
    edit "Matrix42-FastViewer"
        set internet-service-id 14876962
    next
    edit "Bunny.net-CDN"
        set internet-service-id 14942345
    next
    edit "StackPath-CDN"
        set internet-service-id 15007881
    next
    edit "Edgio-CDN"
        set internet-service-id 15073417
    next
    edit "CacheFly-CDN"
        set internet-service-id 15138953
    next
    edit "Microsoft-Azure.Connectors"
        set internet-service-id 327980
    next
    edit "Microsoft-Teams.Published.Worldwide.Optimize"
        set internet-service-id 327991
    next
    edit "Microsoft-Teams.Published.Worldwide.Allow"
        set internet-service-id 327992
    next
    edit "Microsoft-Azure.Front.Door"
        set internet-service-id 327993
    next
    edit "Microsoft-Azure.Service.Bus"
        set internet-service-id 328007
    next
    edit "Fortinet-FortiClient.EMS"
        set internet-service-id 1245477
    next
    edit "Fortinet-FortiWeb.Cloud"
        set internet-service-id 1245480
    next
    edit "Fortinet-FortiSASE"
        set internet-service-id 1245481
    next
    edit "Tencent-VooV.Meeting"
        set internet-service-id 2556219
    next
    edit "NewRelic-Synthetic.Monitor"
        set internet-service-id 4849970
    next
    edit "SAP-SAP.Ariba"
        set internet-service-id 6291766
    next
    edit "Datto-Datto.BCDR"
        set internet-service-id 10486083
    next
    edit "DNS-ARPA.Name.Servers"
        set internet-service-id 10748206
    next
    edit "Paylocity-Paylocity"
        set internet-service-id 15204646
    next
    edit "Qualys-Qualys.Cloud.Platform"
        set internet-service-id 15270183
    next
    edit "Dailymotion-Other"
        set internet-service-id 15335424
    next
    edit "Dailymotion-Web"
        set internet-service-id 15335425
    next
    edit "Dailymotion-ICMP"
        set internet-service-id 15335426
    next
    edit "Dailymotion-DNS"
        set internet-service-id 15335427
    next
    edit "Dailymotion-Outbound_Email"
        set internet-service-id 15335428
    next
    edit "Dailymotion-SSH"
        set internet-service-id 15335430
    next
    edit "Dailymotion-FTP"
        set internet-service-id 15335431
    next
    edit "Dailymotion-NTP"
        set internet-service-id 15335432
    next
    edit "Dailymotion-Inbound_Email"
        set internet-service-id 15335433
    next
    edit "Dailymotion-LDAP"
        set internet-service-id 15335438
    next
    edit "Dailymotion-NetBIOS.Session.Service"
        set internet-service-id 15335439
    next
    edit "Dailymotion-RTMP"
        set internet-service-id 15335440
    next
    edit "Dailymotion-NetBIOS.Name.Service"
        set internet-service-id 15335448
    next
    edit "LaunchDarkly-LaunchDarkly.Platform"
        set internet-service-id 15401258
    next
    edit "Medianova-CDN"
        set internet-service-id 15466633
    next
    edit "NetDocuments-NetDocuments.Platform"
        set internet-service-id 15532331
    next
    edit "Vonage-Vonage.Contact.Center"
        set internet-service-id 15597869
    next
    edit "Vonage-Vonage.Video.API"
        set internet-service-id 15597872
    next
    edit "Veritas-Enterprise.Vault.Cloud"
        set internet-service-id 15663407
    next
    edit "UK.NCSC-Scanner"
        set internet-service-id 15728806
    next
    edit "Restream-Restream.Platform"
        set internet-service-id 15794481
    next
    edit "ArcticWolf-ArcticWolf.Cloud"
        set internet-service-id 15860019
    next
    edit "CounterPath-Bria"
        set internet-service-id 15925556
    next
    edit "CriminalIP-Scanner"
        set internet-service-id 15990950
    next
    edit "IPFS-IPFS.Gateway"
        set internet-service-id 16056629
    next
    edit "Internet.Census.Group-Scanner"
        set internet-service-id 16122022
    next
    edit "Performive-Performive.Cloud"
        set internet-service-id 16187706
    next
    edit "OneLogin-OneLogin"
        set internet-service-id 16253244
    next
    edit "Shadowserver-Scanner"
        set internet-service-id 16318630
    next
    edit "Turkcell-Suit.Conference"
        set internet-service-id 16384317
    next
    edit "LeakIX-Scanner"
        set internet-service-id 16449702
    next
    edit "Infoblox-BloxOne"
        set internet-service-id 16515390
    next
    edit "Nice-CXone"
        set internet-service-id 16580927
    next
    edit "Hetzner-Hetzner.Hosting.Service"
        set internet-service-id 16646464
    next
    edit "ThreatLocker-ThreatLocker"
        set internet-service-id 16712001
    next
    edit "ZPE-ZPE.Cloud"
        set internet-service-id 16777538
    next
    edit "ColoCrossing-ColoCrossing.Hosting.Service"
        set internet-service-id 16843076
    next
    edit "Sinch-Mailgun"
        set internet-service-id 16908613
    next
    edit "SpaceX-Starlink"
        set internet-service-id 16974150
    next
    edit "Microsoft-Azure.Microsoft.Defender"
        set internet-service-id 328009
    next
    edit "Ingenuity-Ingenuity.Cloud.Service"
        set internet-service-id 17039688
    next
end
config firewall internet-service-definition
end
config wanopt content-delivery-network-rule
    edit "vcache://"
        set comment "Static entries are not allowed to change except disable."
        set response-expires enable
        set text-response-vcache disable
        config rules
            edit "rule1"
                config match-entries
                    edit 1
                        set pattern "/*.m3u8"
                    next
                end
                config content-id
                    set target hls-manifest
                    set start-str "/"
                end
            next
            edit "rule2"
                config match-entries
                    edit 1
                        set pattern "/*.mpd"
                    next
                end
                config content-id
                    set target dash-manifest
                    set start-str "/"
                end
            next
            edit "rule3"
                config match-entries
                    edit 1
                        set pattern "/*.ts"
                    next
                end
                config content-id
                    set target hls-fragment
                    set start-str "/"
                end
            next
            edit "rule4"
                config match-entries
                    edit 1
                        set pattern "/*.*"
                    next
                end
                config content-id
                    set target dash-fragment
                    set start-str "/"
                end
            next
        end
    next
    edit "vcache://youtube/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "youtube.com"
        set category youtube
        set text-response-vcache disable
        config rules
            edit "rule1"
                config match-entries
                    edit 1
                        set pattern "/videoplayback"
                    next
                end
                config content-id
                    set target youtube-id
                    set start-str "v="
                    set start-skip 2
                    set end-str "&"
                end
            next
            edit "rule2"
                config match-entries
                    edit 1
                        set pattern "/videoplayback"
                    next
                end
                config content-id
                    set target youtube-id
                    set start-str "v="
                    set start-skip 2
                end
            next
            edit "rule3"
                set match-mode any
                config match-entries
                    edit 1
                        set pattern "/stream_204"
                    next
                    edit 2
                        set pattern "/ptracking"
                    next
                    edit 3
                        set pattern "/get_video_info"
                    next
                end
                config content-id
                    set target youtube-map
                    set start-str "/"
                end
            next
        end
    next
    edit "vcache://googlevideo/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "googlevideo.com"
        set category youtube
        set text-response-vcache disable
        config rules
            edit "rule1"
                config match-entries
                    edit 1
                        set pattern "/videoplayback"
                    next
                end
                config content-id
                    set target youtube-id
                    set start-str "v="
                    set start-skip 2
                    set end-str "&"
                end
            next
            edit "rule2"
                config match-entries
                    edit 1
                        set pattern "/videoplayback"
                    next
                end
                config content-id
                    set target youtube-id
                    set start-str "v="
                    set start-skip 2
                end
            next
            edit "rule3"
                set match-mode any
                config match-entries
                    edit 1
                        set pattern "/stream_204"
                    next
                    edit 2
                        set pattern "/ptracking"
                    next
                    edit 3
                        set pattern "/get_video_info"
                    next
                end
                config content-id
                    set target youtube-map
                    set start-str "/"
                end
            next
        end
    next
    edit "vcache://metacafe/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "mccont.com" "akvideos.metacafe.com" "cdn.metacafe.com"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                set skip-rule-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                    edit 3
                        set pattern "/*.ts"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://facebook/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "fbcdn.net" "facebook.com"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                set skip-rule-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                    edit 3
                        set pattern "/*.ts"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://dailymotion/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "dailymotion.com" "dmcdn.net"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                config match-entries
                    edit 1
                        set pattern "/video/*.mp4"
                    next
                    edit 2
                        set pattern "/video/*.flv"
                    next
                    edit 3
                        set pattern "/video/*.ts"
                    next
                    edit 4
                        set pattern "/video/*.on2"
                    next
                    edit 5
                        set pattern "/video/*.aac"
                    next
                    edit 6
                        set pattern "/video/*.h264"
                    next
                    edit 7
                        set pattern "/video/*.h263"
                    next
                    edit 8
                        set pattern "/sec*.mp4"
                    next
                    edit 9
                        set pattern "/sec*.flv"
                    next
                    edit 10
                        set pattern "/sec*.on2"
                    next
                    edit 11
                        set pattern "/sec*.aac"
                    next
                    edit 12
                        set pattern "/sec*.h264"
                    next
                    edit 13
                        set pattern "/sec*.h263"
                    next
                    edit 14
                        set pattern "*.ts"
                    next
                end
                config skip-entries
                    edit 1
                        set target parameter
                        set pattern "start=*"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://break/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "break.com" "0ebe.edgecastcdn.net"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                config match-entries
                    edit 1
                        set pattern "/dnet/media/*.flv"
                    next
                    edit 2
                        set pattern "/dnet/media/*.mp4"
                    next
                end
                config skip-entries
                    edit 1
                        set target parameter
                        set pattern "ec_seek=*"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
            edit "rule2"
                config match-entries
                    edit 1
                        set pattern "/*.mp4*"
                    next
                    edit 2
                        set pattern "*Seg*"
                    next
                    edit 3
                        set pattern "*Frag*"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://msn/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "video.msn.com"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                set skip-rule-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                    edit 3
                        set pattern "/*.ts"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://llnwd/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "llnwd.net"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                    edit 3
                        set pattern "/*.fll"
                    next
                end
                config skip-entries
                    edit 1
                        set target parameter
                        set pattern "fs=*"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://yahoo/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "yimg.com"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                    edit 3
                        set pattern "/*.m4s"
                    next
                end
                config content-id
                    set target parameter
                    set start-str "vid="
                end
            next
        end
    next
    edit "vcache://myspace/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "myspacecdn.com"
        set request-cache-control enable
        set response-cache-control enable
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                set skip-rule-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                    edit 3
                        set pattern "/*.ts"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://vimeo/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "vimeo.com" "vimeocdn.com" "56skyfiregce-a.akamaihd.net"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                    edit 3
                        set pattern "/*.m4s"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://blip.tv/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "blip.tv"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                config match-entries
                    edit 1
                        set pattern "/*.m4v"
                    next
                    edit 2
                        set pattern "/*.flv"
                    next
                    edit 3
                        set pattern "/*.mp4"
                    next
                    edit 4
                        set pattern "/*.wmv"
                    next
                    edit 5
                        set pattern "/*.rm"
                    next
                    edit 6
                        set pattern "/*.ram"
                    next
                    edit 7
                        set pattern "/*.mov"
                    next
                    edit 8
                        set pattern "/*.avi"
                    next
                end
                config skip-entries
                    edit 1
                        set target parameter
                        set pattern "ms=*"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://maker.tv/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "videos-f.jwpsrv.com"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                config match-entries
                    edit 1
                        set pattern "/*.ts"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://aol/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "stream.aol.com" "5min.com" "vidiblevod-vh.akamaihd.net" "stg-ec-ore-u.uplynk.com" "vidible.tv"
        set response-expires enable
        config rules
            edit "rule1"
                config match-entries
                    edit 1
                        set pattern "/*.mp4"
                    next
                end
                config skip-entries
                    edit 1
                        set target parameter
                        set pattern "*timeoffset=*"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
            edit "rule2"
                config match-entries
                    edit 1
                        set pattern "/*.ts"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://clipfish/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "clipfish.de" "universal-music.de"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.f4v"
                    next
                    edit 3
                        set pattern "/*.mp4"
                    next
                    edit 4
                        set pattern "/*.m4v"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://cnn/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "cnn-vh.akamaihd.net"
        set response-expires enable
        config rules
            edit "rule1"
                config match-entries
                    edit 1
                        set pattern "/*.flv*"
                    next
                    edit 2
                        set pattern "*Seg*"
                    next
                    edit 3
                        set pattern "*Frag*"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
            edit "rule2"
                config match-entries
                    edit 1
                        set pattern "/*.mp4*"
                    next
                    edit 2
                        set pattern "*Seg*"
                    next
                    edit 3
                        set pattern "*Frag*"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
            edit "rule3"
                config match-entries
                    edit 1
                        set pattern "/*.ts*"
                    next
                    edit 2
                        set pattern "*Seg*"
                    next
                    edit 3
                        set pattern "*Frag*"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://foxnews/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "foxnews.com" "foxnews-f.akamaihd.net"
        set response-expires enable
        config rules
            edit "rule1"
                config match-entries
                    edit 1
                        set pattern "/*.mp4*"
                    next
                    edit 2
                        set target parameter
                        set pattern "*Seg*"
                    next
                    edit 3
                        set target parameter
                        set pattern "*Frag*"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://discovery/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "discovery.com" "discidevflash-f.akamaihd.net"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                set skip-rule-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                    edit 3
                        set pattern "/*.ts"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://liveleak/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "edge.liveleak.com" "cdn.liveleak.com"
        set response-expires enable
        config rules
            edit "rule1"
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set target parameter
                        set pattern "*seek=0"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
            edit "rule2"
                config match-entries
                    edit 1
                        set pattern "/*.mp4"
                    next
                    edit 2
                        set target parameter
                        set pattern "*seek=0"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
            edit "rule3"
                config match-entries
                    edit 1
                        set pattern "/*.wmv"
                    next
                    edit 2
                        set target parameter
                        set pattern "*seek=0"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://sevenload/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "sevenload.com"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                end
                config skip-entries
                    edit 1
                        set target parameter
                        set pattern "aktimeoffset=*"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://stupidvideos/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "stupidvideos.com"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                set skip-rule-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                    edit 3
                        set pattern "/*.ts"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://howcast/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "media.howcast.com"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                end
                config skip-entries
                    edit 1
                        set target parameter
                        set pattern "start=*"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://vevo/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "vevo.com"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                set skip-rule-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                    edit 3
                        set pattern "/*.ts"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://ooyala/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "ooyala.com"
        set response-expires enable
        config rules
            edit "rule1"
                config match-entries
                    edit 1
                        set pattern "*Seg*"
                    next
                    edit 2
                        set pattern "*Frag*"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://ms-ads/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "msads.net"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                set skip-rule-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                    edit 3
                        set pattern "/*.ts"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://yumenetworks-ads/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "yumenetworks.com"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                set skip-rule-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                    edit 3
                        set pattern "/*.ts"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://2mdn-ads/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "2mdn.net"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                set skip-rule-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                    edit 3
                        set pattern "/*.ts"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://eyewonder-ads/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "eyewonder.com"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                set skip-rule-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                    edit 3
                        set pattern "/*.ts"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://eyereturn-ads/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "eyereturn.com"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                set skip-rule-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                    edit 3
                        set pattern "/*.ts"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://serving-sys-ads/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "serving-sys.com"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                set skip-rule-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                    edit 3
                        set pattern "/*.ts"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://amazonaws-ads/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "amazonaws.com"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                set skip-rule-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                    edit 3
                        set pattern "/*.ts"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://edgesuite-ads/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "edgesuite.net"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                set skip-rule-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                    edit 3
                        set pattern "/*.ts"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://gorillanation-ads/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "video.gorillanation.com"
        set response-expires enable
        config rules
            edit "rule1"
                set match-mode any
                set skip-rule-mode any
                config match-entries
                    edit 1
                        set pattern "/*.flv"
                    next
                    edit 2
                        set pattern "/*.mp4"
                    next
                    edit 3
                        set pattern "/*.ts"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://youku/"
        set comment "Static entries are not allowed to change except disable."
        set response-expires enable
        config rules
            edit "rule1"
                config match-entries
                    edit 1
                        set pattern "/youku/*.mp4"
                    next
                    edit 2
                        set target parameter
                        set pattern "*start=0"
                    next
                end
                config content-id
                    set target youku-id
                    set start-str "/"
                    set start-skip 1
                    set start-direction backward
                end
            next
            edit "rule2"
                config match-entries
                    edit 1
                        set pattern "/youku/*.flv"
                    next
                    edit 2
                        set target parameter
                        set pattern "*start=0"
                    next
                end
                config content-id
                    set target youku-id
                    set start-str "/"
                    set start-skip 1
                    set start-direction backward
                end
            next
            edit "rule3"
                config match-entries
                    edit 1
                        set pattern "/youku/*.kux"
                    next
                    edit 2
                        set target parameter
                        set pattern "*start=0"
                    next
                end
                config content-id
                    set target youku-id
                    set start-str "/"
                    set start-skip 1
                    set start-direction backward
                end
            next
            edit "rule4"
                config match-entries
                    edit 1
                        set pattern "/youku/*.mp4"
                    next
                end
                config skip-entries
                    edit 1
                        set target parameter
                        set pattern "*start=*"
                    next
                end
                config content-id
                    set target youku-id
                    set start-str "/"
                    set start-skip 1
                    set start-direction backward
                end
            next
            edit "rule5"
                config match-entries
                    edit 1
                        set pattern "/youku/*.flv"
                    next
                end
                config skip-entries
                    edit 1
                        set target parameter
                        set pattern "*start=*"
                    next
                end
                config content-id
                    set target youku-id
                    set start-str "/"
                    set start-skip 1
                    set start-direction backward
                end
            next
            edit "rule6"
                config match-entries
                    edit 1
                        set pattern "/youku/*.kux"
                    next
                end
                config skip-entries
                    edit 1
                        set target parameter
                        set pattern "*start=*"
                    next
                end
                config content-id
                    set target youku-id
                    set start-str "/"
                    set start-skip 1
                    set start-direction backward
                end
            next
        end
    next
    edit "vcache://tudou/"
        set comment "Static entries are not allowed to change except disable."
        set response-expires enable
        config rules
            edit "rule1"
                config match-entries
                    edit 1
                        set pattern "/f4v/*"
                    next
                    edit 2
                        set target parameter
                        set pattern "*id=tudou*"
                    next
                end
                config skip-entries
                    edit 1
                        set target parameter
                        set pattern "*begin=*"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                    set start-direction backward
                end
            next
        end
    next
    edit "vcache://cbc/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "cbc.ca" "mobilehls-vh.akamaihd.net"
        set response-expires enable
        config rules
            edit "rule1"
                config match-entries
                    edit 1
                        set pattern "*.mp4*"
                    next
                    edit 2
                        set pattern "*Seg*"
                    next
                    edit 3
                        set pattern "*Frag*"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
            edit "rule2"
                set match-mode any
                config match-entries
                    edit 1
                        set pattern "*.ts"
                    next
                    edit 2
                        set pattern "*.mp4"
                    next
                end
                config content-id
                    set start-str "/"
                    set start-skip 1
                end
            next
        end
    next
    edit "vcache://megaupload/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "megaupload.com"
        set response-expires enable
        config rules
            edit "rule1"
                config match-entries
                    edit 1
                        set pattern "/files/*"
                    next
                end
                config content-id
                    set target referrer
                    set start-str "d="
                    set start-skip 2
                end
            next
        end
    next
    edit "update://windowsupdate/"
        set comment "Static entries are not allowed to change except disable."
        set host-domain-name-suffix "download.windowsupdate.com"
        set request-cache-control enable
        set response-cache-control enable
        set response-expires enable
        set updateserver enable
    next
end
config system standalone-cluster
    config cluster-peer
    end
end
config system fortiguard
    set update-server-location usa
end
config endpoint-control fctems
    edit 1
    next
    edit 2
    next
    edit 3
    next
    edit 4
    next
    edit 5
    next
    edit 6
    next
    edit 7
    next
end
config system email-server
    set server "notification.fortinet.net"
    set port 465
    set security smtps
end
config system session-helper
    edit 1
        set name pptp
        set protocol 6
        set port 1723
    next
    edit 2
        set name h323
        set protocol 6
        set port 1720
    next
    edit 3
        set name ras
        set protocol 17
        set port 1719
    next
    edit 4
        set name tns
        set protocol 6
        set port 1521
    next
    edit 5
        set name tftp
        set protocol 17
        set port 69
    next
    edit 6
        set name rtsp
        set protocol 6
        set port 554
    next
    edit 7
        set name rtsp
        set protocol 6
        set port 7070
    next
    edit 8
        set name rtsp
        set protocol 6
        set port 8554
    next
    edit 9
        set name ftp
        set protocol 6
        set port 21
    next
    edit 10
        set name mms
        set protocol 6
        set port 1863
    next
    edit 11
        set name pmap
        set protocol 6
        set port 111
    next
    edit 12
        set name pmap
        set protocol 17
        set port 111
    next
    edit 13
        set name sip
        set protocol 17
        set port 5060
    next
    edit 14
        set name dns-udp
        set protocol 17
        set port 53
    next
    edit 15
        set name rsh
        set protocol 6
        set port 514
    next
    edit 16
        set name rsh
        set protocol 6
        set port 512
    next
    edit 17
        set name dcerpc
        set protocol 6
        set port 135
    next
    edit 18
        set name dcerpc
        set protocol 17
        set port 135
    next
    edit 19
        set name mgcp
        set protocol 17
        set port 2427
    next
    edit 20
        set name mgcp
        set protocol 17
        set port 2727
    next
end
config system auto-install
    set auto-install-config enable
    set auto-install-image enable
end
config system ntp
    set ntpsync enable
    set server-mode enable
    set interface "fortilink"
end
config system ftm-push
    set server-cert "Fortinet_Factory"
end
config system automation-trigger
    edit "Compromised Host"
        set description "An incident of compromise has been detected on a host endpoint."
    next
    edit "Any Security Rating Notification"
        set description "A security rating summary report has been generated."
        set event-type security-rating-summary
        set report-type any
    next
    edit "AV & IPS DB update"
        set description "The antivirus and IPS database has been updated."
        set event-type virus-ips-db-updated
    next
    edit "Configuration Change"
        set description "An administrator\'s session that changed a FortiGate\'s configuration has ended."
        set event-type config-change
    next
    edit "Conserve Mode"
        set description "A FortiGate has entered conserve mode due to low memory."
        set event-type low-memory
    next
    edit "HA Failover"
        set description "A HA failover has occurred."
        set event-type ha-failover
    next
    edit "High CPU"
        set description "A FortiGate has high CPU usage."
        set event-type high-cpu
    next
    edit "License Expiry"
        set description "A FortiGate license is near expiration."
        set event-type license-near-expiry
        set license-type any
    next
    edit "Reboot"
        set description "A FortiGate is rebooted."
        set event-type reboot
    next
    edit "Anomaly Logs"
        set description "An anomalous event has occurred."
        set event-type anomaly-logs
    next
    edit "IPS Logs"
        set description "An IPS event has occurred."
        set event-type ips-logs
    next
    edit "SSH Logs"
        set description "An SSH event has occurred."
        set event-type ssh-logs
    next
    edit "Traffic Violation"
        set description "A traffic policy has been violated."
        set event-type traffic-violation
    next
    edit "Virus Logs"
        set description "A virus event has occurred."
        set event-type virus-logs
    next
    edit "Webfilter Violation"
        set description "A webfilter policy has been violated."
        set event-type webfilter-violation
    next
    edit "Admin Login"
        set description "A FortiOS event with specified log ID has occurred."
        set event-type event-log
        set logid 32001
    next
    edit "Incoming Webhook Call"
        set description "An incoming webhook call is received"
        set event-type incoming-webhook
    next
    edit "Weekly Trigger"
        set trigger-type scheduled
        set trigger-frequency weekly
        set trigger-weekday tuesday
        set trigger-hour 10
    next
    edit "FortiAnalyzer Connection Down"
        set description "A FortiAnalyzer connection is down."
        set event-type event-log
        set logid 22902
    next
    edit "Network Down"
        set description "A network connection is down."
        set event-type event-log
        set logid 20099
        config fields
            edit 1
                set name "status"
                set value "DOWN"
            next
        end
    next
    edit "Local Certificate Expiry"
        set description "A local certificate is near expiration."
        set event-type local-cert-near-expiry
    next
    edit "Auto Firmware upgrade"
        set description "Automatic firmware upgrade."
        set event-type event-log
        set logid 22094 22095
    next
end
config system automation-action
    edit "Access Layer Quarantine"
        set description "Quarantine the MAC address on access layer devices (FortiSwitch and FortiAP)."
        set action-type quarantine
    next
    edit "FortiClient Quarantine"
        set description "Use FortiClient EMS to quarantine the endpoint device."
        set action-type quarantine-forticlient
    next
    edit "FortiNAC Quarantine"
        set description "Use FortiNAC to quarantine the endpoint device."
        set action-type quarantine-fortinac
    next
    edit "IP Ban"
        set description "Ban the IP address specified in the automation trigger event."
        set action-type ban-ip
    next
    edit "FortiExplorer Notification"
        set description "Automation action configuration for sending a notification to any FortiExplorer mobile application."
        set action-type fortiexplorer-notification
    next
    edit "Email Notification"
        set description "Send a custom email to the specified recipient(s)."
        set action-type email
        set forticare-email enable
        set email-subject "%%log.logdesc%%"
    next
    edit "CLI Script - System Status"
        set description "Execute a CLI script to return the system status."
        set action-type cli-script
        set script "get system status"
        set accprofile "super_admin_readonly"
    next
    edit "Reboot FortiGate"
        set description "Reboot this FortiGate unit."
        set action-type system-actions
        set system-action reboot
        set minimum-interval 300
    next
    edit "Shutdown FortiGate"
        set description "Shut down this FortiGate unit."
        set action-type system-actions
        set system-action shutdown
    next
    edit "Backup Config Disk"
        set description "Backup the configuration on disk."
        set action-type system-actions
        set system-action backup-config
    next
end
config system automation-stitch
    edit "Network Down"
        set description "Send an email when a network goes down."
        set status disable
        set trigger "Network Down"
        config actions
            edit 1
                set action "Email Notification"
            next
        end
    next
    edit "HA Failover"
        set description "Send an email when a HA failover is detected."
        set status disable
        set trigger "HA Failover"
        config actions
            edit 1
                set action "Email Notification"
            next
        end
    next
    edit "Reboot"
        set description "Send an email when a FortiGate is rebooted."
        set status disable
        set trigger "Reboot"
        config actions
            edit 1
                set action "Email Notification"
            next
        end
    next
    edit "FortiAnalyzer Connection Down"
        set description "Send a email notification when the connection to FortiAnalyzer is lost."
        set trigger "FortiAnalyzer Connection Down"
        config actions
            edit 1
                set action "Email Notification"
            next
        end
    next
    edit "License Expired Notification"
        set description "Send a email notification when a license is near expiration."
        set trigger "License Expiry"
        config actions
            edit 1
                set action "Email Notification"
            next
        end
    next
    edit "Compromised Host Quarantine"
        set description "Quarantine a compromised host on FortiAPs, FortiSwitches, and FortiClient EMS."
        set status disable
        set trigger "Compromised Host"
        config actions
            edit 1
                set action "Access Layer Quarantine"
            next
            edit 2
                set action "FortiClient Quarantine"
            next
        end
    next
    edit "Incoming Webhook Quarantine"
        set description "Quarantine a provided MAC address on FortiAPs, FortiSwitches, and FortiClient EMS using an Incoming Webhook."
        set status disable
        set trigger "Incoming Webhook Call"
        config actions
            edit 1
                set action "Access Layer Quarantine"
            next
            edit 2
                set action "FortiClient Quarantine"
            next
        end
    next
    edit "Security Rating Notification"
        set description "Send a email notification when a new Security Rating report is available."
        set trigger "Any Security Rating Notification"
        config actions
            edit 1
                set action "Email Notification"
            next
        end
    next
    edit "Firmware upgrade notification"
        set description "Automatic firmware upgrade notification."
        set trigger "Auto Firmware upgrade"
        config actions
            edit 1
                set action "Email Notification"
            next
        end
    next
end
config system federated-upgrade
    set status disabled
end
config dpdk global
    set multiqueue disable
    set sleep-on-idle disable
    set elasticbuffer disable
    set per-session-accounting traffic-log-only
    set ipsec-offload disable
    set hugepage-percentage 30
    set mbufpool-percentage 25
end
config dpdk cpus
    set rx-cpus "all"
    set vnp-cpus "all"
    set ips-cpus "all"
    set tx-cpus "all"
end
config system ike
end
config system ipam
    config pools
        edit "default-pool"
            set subnet 172.31.0.0 255.255.0.0
        next
        edit "lan-pool"
            set subnet 192.168.0.0 255.255.0.0
        next
    end
    config rules
        edit "role-lan"
            set device "*"
            set interface "*"
            set role lan
            set pool "lan-pool"
            set dhcp enable
        next
    end
end
config system object-tagging
    edit "default"
    next
end
config switch-controller traffic-policy
    edit "quarantine"
        set description "Rate control for quarantined traffic"
        set guaranteed-bandwidth 163840
        set guaranteed-burst 8192
        set maximum-burst 163840
        set cos-queue 0
        set id 1
    next
    edit "sniffer"
        set description "Rate control for sniffer mirrored traffic"
        set guaranteed-bandwidth 50000
        set guaranteed-burst 8192
        set maximum-burst 163840
        set cos-queue 0
        set id 2
    next
end
config system settings
    set gui-multiple-interface-policy enable
end
config system dhcp server
    edit 1
        set ntp-service local
        set default-gateway 10.255.1.1
        set netmask 255.255.255.0
        set interface "fortilink"
        config ip-range
            edit 1
                set start-ip 10.255.1.2
                set end-ip 10.255.1.254
            next
        end
        set vci-match enable
        set vci-string "FortiSwitch" "FortiExtender"
    next
    edit 2
        set dns-service default
        set default-gateway 10.1.0.1
        set netmask 255.255.255.0
        set interface "port1"
        config ip-range
            edit 1
                set start-ip 10.1.0.10
                set end-ip 10.1.0.254
            next
        end
    next
end
config firewall address
    edit "all"
        set uuid 8a6aaed6-7737-51ee-e382-e9d62f47b78c
    next
    edit "FIREWALL_AUTH_PORTAL_ADDRESS"
        set uuid 8a6acace-7737-51ee-1d3c-165f497c824c
    next
    edit "FABRIC_DEVICE"
        set uuid 8a6accb8-7737-51ee-d2f6-8f14acfaf997
        set comment "IPv4 addresses of Fabric Devices."
    next
    edit "SSLVPN_TUNNEL_ADDR1"
        set uuid 8a6f699e-7737-51ee-5876-7478290a0347
        set type iprange
        set start-ip 10.212.134.200
        set end-ip 10.212.134.210
    next
    edit "EMS_ALL_UNMANAGEABLE_CLIENTS"
        set uuid e414a1ee-7737-51ee-2054-5ff5a0a68a4c
        set type dynamic
        set sub-type ems-tag
        set dirty clean
    next
    edit "EMS_ALL_UNKNOWN_CLIENTS"
        set uuid e4150882-7737-51ee-bffa-3af132d27845
        set type dynamic
        set sub-type ems-tag
        set dirty clean
    next
    edit "HUB1-Lo2 address"
        set uuid 621e083e-796b-51ee-cc73-3f4898ed07e4
        set type interface-subnet
        set subnet 172.29.101.253 255.255.255.255
        set interface "HUB1-Lo2"
    next
    edit "LAN_10.1.0.0_16"
        set uuid 77220a00-7f0b-51ee-77bd-e88737926073
        set subnet 10.1.0.0 255.255.0.0
    next
    edit "FCTEMS_ALL_FORTICLOUD_SERVERS"
        set uuid 7f8ee01e-7f0b-51ee-2ed5-0babb6e1bcaf
        set type dynamic
        set sub-type ems-tag
        set dirty clean
    next
    edit "To-HUB2_local_subnet_1"
        set uuid 68152138-821b-51ee-9d8c-5e7f7a01d399
        set allow-routing enable
        set subnet 10.1.0.0 255.255.255.0
    next
    edit "To-HUB2_remote_subnet_1"
        set uuid 681f3880-821b-51ee-b64d-76f2204d420a
        set allow-routing enable
        set subnet 10.2.0.0 255.255.255.0
    next
    edit "Port5-VPN_local_subnet_1"
        set uuid eb000cd4-82e3-51ee-6283-13b82dbac929
        set allow-routing enable
        set subnet 10.1.0.0 255.255.255.0
    next
    edit "Port5-VPN_remote_subnet_1"
        set uuid eb07fe3a-82e3-51ee-27ab-bf9b092bb027
        set allow-routing enable
        set subnet 192.168.230.0 255.255.255.0
    next
end
config firewall multicast-address
    edit "all"
        set start-ip 224.0.0.0
        set end-ip 239.255.255.255
    next
end
config firewall address6
    edit "SSLVPN_TUNNEL_IPv6_ADDR1"
        set uuid 8a6f6cbe-7737-51ee-608a-042fcc8637bc
        set ip6 fdff:ffff::/120
    next
    edit "all"
        set uuid 698267d6-7737-51ee-31de-a2b45ee9dcd1
    next
end
config firewall multicast-address6
    edit "all"
        set ip6 ff00::/8
    next
end
config firewall addrgrp
    edit "To-HUB2_local"
        set uuid 681aff9a-821b-51ee-6dbd-7904855f9590
        set member "To-HUB2_local_subnet_1"
        set comment "VPN: To-HUB2 (Created by VPN wizard)"
        set allow-routing enable
    next
    edit "To-HUB2_remote"
        set uuid 6824881c-821b-51ee-6b59-14bc504a4f93
        set member "To-HUB2_remote_subnet_1"
        set comment "VPN: To-HUB2 (Created by VPN wizard)"
        set allow-routing enable
    next
    edit "Port5-VPN_local"
        set uuid eb03d0ee-82e3-51ee-61a6-7f87604b5e01
        set member "Port5-VPN_local_subnet_1"
        set comment "VPN: Port5-VPN (Created by VPN wizard)"
        set allow-routing enable
    next
    edit "Port5-VPN_remote"
        set uuid eb0c7db6-82e3-51ee-4055-66c36e2ab12e
        set member "Port5-VPN_remote_subnet_1"
        set comment "VPN: Port5-VPN (Created by VPN wizard)"
        set allow-routing enable
    next
end
config firewall wildcard-fqdn custom
    edit "adobe"
        set uuid 6a675102-7737-51ee-6a31-435279ade970
        set wildcard-fqdn "*.adobe.com"
    next
    edit "Adobe Login"
        set uuid 6a675508-7737-51ee-daf9-ebfe265d0331
        set wildcard-fqdn "*.adobelogin.com"
    next
    edit "android"
        set uuid 6a675bca-7737-51ee-213c-8bfa25a9ffa4
        set wildcard-fqdn "*.android.com"
    next
    edit "apple"
        set uuid 6a675d50-7737-51ee-5ae6-e6250fc21919
        set wildcard-fqdn "*.apple.com"
    next
    edit "appstore"
        set uuid 6a675f1c-7737-51ee-60ea-4d0de4b27536
        set wildcard-fqdn "*.appstore.com"
    next
    edit "auth.gfx.ms"
        set uuid 6a676052-7737-51ee-47a5-50272a690bbe
        set wildcard-fqdn "*.auth.gfx.ms"
    next
    edit "citrix"
        set uuid 6a67617e-7737-51ee-e42a-9ab5063a3619
        set wildcard-fqdn "*.citrixonline.com"
    next
    edit "dropbox.com"
        set uuid 6a6762d2-7737-51ee-5c69-93cb7fd44222
        set wildcard-fqdn "*.dropbox.com"
    next
    edit "eease"
        set uuid 6a6763fe-7737-51ee-0002-4b6b44a1fea5
        set wildcard-fqdn "*.eease.com"
    next
    edit "firefox update server"
        set uuid 6a67652a-7737-51ee-4fe2-90add4e1da11
        set wildcard-fqdn "aus*.mozilla.org"
    next
    edit "fortinet"
        set uuid 6a676660-7737-51ee-5b5d-8d6cdebd5f90
        set wildcard-fqdn "*.fortinet.com"
    next
    edit "googleapis.com"
        set uuid 6a676818-7737-51ee-d192-c4205e5301a8
        set wildcard-fqdn "*.googleapis.com"
    next
    edit "google-drive"
        set uuid 6a67693a-7737-51ee-29bd-208b8d71c02c
        set wildcard-fqdn "*drive.google.com"
    next
    edit "google-play2"
        set uuid 6a676bec-7737-51ee-51f2-c98418a0883f
        set wildcard-fqdn "*.ggpht.com"
    next
    edit "google-play3"
        set uuid 6a676d22-7737-51ee-c7f1-91b75e2a7c1a
        set wildcard-fqdn "*.books.google.com"
    next
    edit "Gotomeeting"
        set uuid 6a676e8a-7737-51ee-48ad-2311bf422d2a
        set wildcard-fqdn "*.gotomeeting.com"
    next
    edit "icloud"
        set uuid 6a67709c-7737-51ee-03e9-cbff1de2f87c
        set wildcard-fqdn "*.icloud.com"
    next
    edit "itunes"
        set uuid 6a67729a-7737-51ee-585b-243431b299a4
        set wildcard-fqdn "*itunes.apple.com"
    next
    edit "microsoft"
        set uuid 6a6773f8-7737-51ee-d6db-801e71f0784d
        set wildcard-fqdn "*.microsoft.com"
    next
    edit "skype"
        set uuid 6a67752e-7737-51ee-3b61-57b652852553
        set wildcard-fqdn "*.messenger.live.com"
    next
    edit "softwareupdate.vmware.com"
        set uuid 6a67765a-7737-51ee-90cc-15a302e54a8a
        set wildcard-fqdn "*.softwareupdate.vmware.com"
    next
    edit "verisign"
        set uuid 6a67777c-7737-51ee-b593-a836667b8714
        set wildcard-fqdn "*.verisign.com"
    next
    edit "Windows update 2"
        set uuid 6a6778da-7737-51ee-7e80-68146a21456d
        set wildcard-fqdn "*.windowsupdate.com"
    next
    edit "live.com"
        set uuid 6a677a06-7737-51ee-01cd-eb27869aa6a5
        set wildcard-fqdn "*.live.com"
    next
    edit "google-play"
        set uuid 6a677b32-7737-51ee-1cf6-8c1c7fab6727
        set wildcard-fqdn "*play.google.com"
    next
    edit "update.microsoft.com"
        set uuid 6a677c90-7737-51ee-86ac-ee673b7de507
        set wildcard-fqdn "*update.microsoft.com"
    next
    edit "swscan.apple.com"
        set uuid 6a678258-7737-51ee-1167-236c48e9d277
        set wildcard-fqdn "*swscan.apple.com"
    next
    edit "autoupdate.opera.com"
        set uuid 6a6783b6-7737-51ee-1ee5-7984f58249a6
        set wildcard-fqdn "*autoupdate.opera.com"
    next
    edit "cdn-apple"
        set uuid 6a6784ec-7737-51ee-a7fc-9ab4c3c89d21
        set wildcard-fqdn "*.cdn-apple.com"
    next
    edit "mzstatic-apple"
        set uuid 6a678668-7737-51ee-f01a-534094c476fa
        set wildcard-fqdn "*.mzstatic.com"
    next
end
config firewall service category
    edit "General"
        set comment "General services."
    next
    edit "Web Access"
        set comment "Web access."
    next
    edit "File Access"
        set comment "File access."
    next
    edit "Email"
        set comment "Email services."
    next
    edit "Network Services"
        set comment "Network services."
    next
    edit "Authentication"
        set comment "Authentication service."
    next
    edit "Remote Access"
        set comment "Remote access."
    next
    edit "Tunneling"
        set comment "Tunneling service."
    next
    edit "VoIP, Messaging & Other Applications"
        set comment "VoIP, messaging, and other applications."
    next
    edit "Web Proxy"
        set comment "Explicit web proxy."
    next
end
config firewall service custom
    edit "DNS"
        set category "Network Services"
        set tcp-portrange 53
        set udp-portrange 53
    next
    edit "HTTP"
        set category "Web Access"
        set tcp-portrange 80
    next
    edit "HTTPS"
        set category "Web Access"
        set tcp-portrange 443
    next
    edit "IMAP"
        set category "Email"
        set tcp-portrange 143
    next
    edit "IMAPS"
        set category "Email"
        set tcp-portrange 993
    next
    edit "LDAP"
        set category "Authentication"
        set tcp-portrange 389
    next
    edit "DCE-RPC"
        set category "Remote Access"
        set tcp-portrange 135
        set udp-portrange 135
    next
    edit "POP3"
        set category "Email"
        set tcp-portrange 110
    next
    edit "POP3S"
        set category "Email"
        set tcp-portrange 995
    next
    edit "SAMBA"
        set category "File Access"
        set tcp-portrange 139
    next
    edit "SMTP"
        set category "Email"
        set tcp-portrange 25
    next
    edit "SMTPS"
        set category "Email"
        set tcp-portrange 465
    next
    edit "KERBEROS"
        set category "Authentication"
        set tcp-portrange 88 464
        set udp-portrange 88 464
    next
    edit "LDAP_UDP"
        set category "Authentication"
        set udp-portrange 389
    next
    edit "SMB"
        set category "File Access"
        set tcp-portrange 445
    next
    edit "FTP"
        set category "File Access"
        set tcp-portrange 21
    next
    edit "FTP_GET"
        set category "File Access"
        set tcp-portrange 21
    next
    edit "FTP_PUT"
        set category "File Access"
        set tcp-portrange 21
    next
    edit "ALL"
        set category "General"
        set protocol IP
    next
    edit "ALL_TCP"
        set category "General"
        set tcp-portrange 1-65535
    next
    edit "ALL_UDP"
        set category "General"
        set udp-portrange 1-65535
    next
    edit "ALL_ICMP"
        set category "General"
        set protocol ICMP
        unset icmptype
    next
    edit "ALL_ICMP6"
        set category "General"
        set protocol ICMP6
        unset icmptype
    next
    edit "GRE"
        set category "Tunneling"
        set protocol IP
        set protocol-number 47
    next
    edit "AH"
        set category "Tunneling"
        set protocol IP
        set protocol-number 51
    next
    edit "ESP"
        set category "Tunneling"
        set protocol IP
        set protocol-number 50
    next
    edit "AOL"
        set tcp-portrange 5190-5194
    next
    edit "BGP"
        set category "Network Services"
        set tcp-portrange 179
    next
    edit "DHCP"
        set category "Network Services"
        set udp-portrange 67-68
    next
    edit "FINGER"
        set tcp-portrange 79
    next
    edit "GOPHER"
        set tcp-portrange 70
    next
    edit "H323"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 1720 1503
        set udp-portrange 1719
    next
    edit "IKE"
        set category "Tunneling"
        set udp-portrange 500 4500
    next
    edit "Internet-Locator-Service"
        set tcp-portrange 389
    next
    edit "IRC"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 6660-6669
    next
    edit "L2TP"
        set category "Tunneling"
        set tcp-portrange 1701
        set udp-portrange 1701
    next
    edit "NetMeeting"
        set tcp-portrange 1720
    next
    edit "NFS"
        set category "File Access"
        set tcp-portrange 111 2049
        set udp-portrange 111 2049
    next
    edit "NNTP"
        set tcp-portrange 119
    next
    edit "NTP"
        set category "Network Services"
        set tcp-portrange 123
        set udp-portrange 123
    next
    edit "OSPF"
        set category "Network Services"
        set protocol IP
        set protocol-number 89
    next
    edit "PC-Anywhere"
        set category "Remote Access"
        set tcp-portrange 5631
        set udp-portrange 5632
    next
    edit "PING"
        set category "Network Services"
        set protocol ICMP
        set icmptype 8
        unset icmpcode
    next
    edit "TIMESTAMP"
        set protocol ICMP
        set icmptype 13
        unset icmpcode
    next
    edit "INFO_REQUEST"
        set protocol ICMP
        set icmptype 15
        unset icmpcode
    next
    edit "INFO_ADDRESS"
        set protocol ICMP
        set icmptype 17
        unset icmpcode
    next
    edit "ONC-RPC"
        set category "Remote Access"
        set tcp-portrange 111
        set udp-portrange 111
    next
    edit "PPTP"
        set category "Tunneling"
        set tcp-portrange 1723
    next
    edit "QUAKE"
        set udp-portrange 26000 27000 27910 27960
    next
    edit "RAUDIO"
        set udp-portrange 7070
    next
    edit "REXEC"
        set tcp-portrange 512
    next
    edit "RIP"
        set category "Network Services"
        set udp-portrange 520
    next
    edit "RLOGIN"
        set tcp-portrange 513:512-1023
    next
    edit "RSH"
        set tcp-portrange 514:512-1023
    next
    edit "SCCP"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 2000
    next
    edit "SIP"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 5060
        set udp-portrange 5060
    next
    edit "SIP-MSNmessenger"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 1863
    next
    edit "SNMP"
        set category "Network Services"
        set tcp-portrange 161-162
        set udp-portrange 161-162
    next
    edit "SSH"
        set category "Remote Access"
        set tcp-portrange 22
    next
    edit "SYSLOG"
        set category "Network Services"
        set udp-portrange 514
    next
    edit "TALK"
        set udp-portrange 517-518
    next
    edit "TELNET"
        set category "Remote Access"
        set tcp-portrange 23
    next
    edit "TFTP"
        set category "File Access"
        set udp-portrange 69
    next
    edit "MGCP"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 2428
        set udp-portrange 2427 2727
    next
    edit "UUCP"
        set tcp-portrange 540
    next
    edit "VDOLIVE"
        set tcp-portrange 7000-7010
    next
    edit "WAIS"
        set tcp-portrange 210
    next
    edit "WINFRAME"
        set tcp-portrange 1494 2598
    next
    edit "X-WINDOWS"
        set category "Remote Access"
        set tcp-portrange 6000-6063
    next
    edit "PING6"
        set protocol ICMP6
        set icmptype 128
        unset icmpcode
    next
    edit "MS-SQL"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 1433 1434
    next
    edit "MYSQL"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 3306
    next
    edit "RDP"
        set category "Remote Access"
        set tcp-portrange 3389
    next
    edit "VNC"
        set category "Remote Access"
        set tcp-portrange 5900
    next
    edit "DHCP6"
        set category "Network Services"
        set udp-portrange 546 547
    next
    edit "SQUID"
        set category "Tunneling"
        set tcp-portrange 3128
    next
    edit "SOCKS"
        set category "Tunneling"
        set tcp-portrange 1080
        set udp-portrange 1080
    next
    edit "WINS"
        set category "Remote Access"
        set tcp-portrange 1512
        set udp-portrange 1512
    next
    edit "RADIUS"
        set category "Authentication"
        set udp-portrange 1812 1813
    next
    edit "RADIUS-OLD"
        set udp-portrange 1645 1646
    next
    edit "CVSPSERVER"
        set tcp-portrange 2401
        set udp-portrange 2401
    next
    edit "AFS3"
        set category "File Access"
        set tcp-portrange 7000-7009
        set udp-portrange 7000-7009
    next
    edit "TRACEROUTE"
        set category "Network Services"
        set udp-portrange 33434-33535
    next
    edit "RTSP"
        set category "VoIP, Messaging & Other Applications"
        set tcp-portrange 554 7070 8554
        set udp-portrange 554
    next
    edit "MMS"
        set tcp-portrange 1755
        set udp-portrange 1024-5000
    next
    edit "NONE"
        set tcp-portrange 0
    next
    edit "webproxy"
        set proxy enable
        set category "Web Proxy"
        set protocol ALL
        set tcp-portrange 0-65535:0-65535
    next
end
config firewall service group
    edit "Email Access"
        set member "DNS" "IMAP" "IMAPS" "POP3" "POP3S" "SMTP" "SMTPS"
    next
    edit "Web Access"
        set member "DNS" "HTTP" "HTTPS"
    next
    edit "Windows AD"
        set member "DCE-RPC" "DNS" "KERBEROS" "LDAP" "LDAP_UDP" "SAMBA" "SMB"
    next
    edit "Exchange Server"
        set member "DCE-RPC" "DNS" "HTTPS"
    next
end
config vpn certificate ca
    edit "root_CA2"
        set ca "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
    next
end
config vpn certificate local
    edit "Fortinet_CA_SSL"
        set password ENC ksuPJyrSDQs7VkHIBSmtCt3uiFGRS/XKsCI112B/MCX12/77DcwITAFBS3cmMLm0EHXf9wcfQZUHY9RXIS9QZJamEa2EPO+00mVV5i+5CUhu3X6f3ypwsEOdC3JdpTndq7M1okysUDIW7yYdFbKU4eSz2DaiRZeJ7smNrHVGNfXRlpXVwW8oSQvAH7C+kr7ydNBt8g==
        set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIFHDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIBF3pkkqXQnACAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECII7kXXSssrXBIIEyCzssMfTLWyA
FIJ0s+ccuY6uDBvkI8fZCCSOJSjw2PgPPblOCiN9zSF7EGZA/XM8F1aVdfU3Xh3E
UinwUxhmqBomMzFhaZVU3Gn+g4swtSVkjJDPZDmWXU+oCQue1qL7sCCPSdXdwEBK
AbeY1kp1ugXWT08/pCqQOeo/CcI/J4QQcjpIcs8sNFyt2nOuEUq33TFQtmQr3yEA
5BQzQB+OaV3o3S9TwgiCrP79nHGZU1j0t2Bz1JAfOJW0IdehOe4BKKrO1/kU8/wx
31mbIvza0yhO82XOtfjRoLv/7C3iAz7DQO0tbLPFXn1sWdBm5Xjnxcbm0W0ME5la
9sJMsJgv7iCspYUzdN7BjgIncLXVGPyinvM/lwDSNhUvh7YB6yk+tyfIDMu3KIVO
dY/CJSmbgho4bNdOV31CCzK/6uRfyG2LX4FyhZN0jSR+1j92Kj3wUjsII6tafItM
eZDS1zq5RjKHrJpBeUa6tYehPuDK24Y/Dy3rlL8yJCPsJsit1S6YASiNGkQmRCK5
BXrKWIiN4hWisLIp/jbku8qyLdHAM2GeOYC5OrjpNmd7vyco7K7eQW8ncRcycX6H
lB9mgm67YGZ064tiLeucTgbeSrVL4ugkeEC2y7HgjN5MWU7jV/MbFIBM5TuioQVb
WF6iDjtuE9IQKNfHxMDYOgdQ2D+MjWbfVMRRqitFpoKcEQX8/puQAg9WnS+7zzey
lo4muBQ+2JJTsH5/PHph+9h8jzLMiy7JBUyLeAyhgpUEXM9pZRQ0HssTwa9dbuGV
SYJRG01fwdvS9RdgzeGMacbKITraEKI5LlEwpOw4BqOyW+xUwJaGy9zDaGnDMWaX
kIkUGzCA7qN1SWLxyQJNWMKQEdFVH3cPTow70KWWi7BtDLxBU+QGWAEw43KbcyNV
SwM/4WchJ6g/HmA4Xl5FbM/HcT1hsa31JczDchiFnyE7yhOOOUabBWAD/klPU7t8
R0vx4vhV+4pT6HWy5c9ZZQFTaF5p4aExbinfg3L7WYz1E1yITYeHbNQ2cKWlCVFw
j/2KziOFTmqMPNvJwiKcWKq3UngoXoW0weNrE6z6wSAq4eWSTwVopDmYO4Xmgn6d
sphIVAZonoaCnDiyODFIoNFy2BdOvxrCXaI5DS/drV528VaR0gZ5xzSnlLPY/xcq
RP6pldyyAskAcIxDFloPjKYRDOsRO0yequcPRjzjY2byBtzHUw/3eFmnUiXsH9yr
ti3Lh5GmFyp63oyFvvp7g+F9Ah7knXRb2ZEK/ZE2I7nAO6uUKpVMqAMtQdwQzX0E
9g2RzypZH4IA2HcUboiXmZuQsvnf/KiSb66qvTVlFU4UT+F0Cg+WH/5pZ03NEetL
qJN6v6Rn4jSxhaWWp7HJ8reEUmrbthizz9E/LhyHh9gfUupf53halbpj89kbSWsn
165pGN+4dv9B4uWIdZLNA8ZhQOq2L44ZSna6DKnUomYN5r7HNf+g/0eWQP0jcO0z
KlsGLL8uuD0yvoe3HbcYQgOX7UAdObv2160r9kEMvCLKzlsec+XbcRC17rblqIfR
BEHBkE9zWe82uyG6wceLdKAqbqosKhwBvBVh3UrrVFOaZuqQHYHpWPzczHFfVjlj
IdicUvzyHGpCtbNkgCCrew==
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1698679025
    next
    edit "Fortinet_CA_Untrusted"
        set password ENC pj8+Es6nUNnDS9uRF+Xh5Y3c08/k7x3RLuZMsyT/ss2BcQbdqSwrTzzske9/1D1hlDsPasjQw4f2fXRygfFhrV5bssmnwUBURluJheZxrVSBru7aBXDASqFdkVXpNmvhJ+cRYTgyRGpkrfEWSI//A8nR0ijfulImNhCiichKhxLM+fVlV5olGjXRe2u7/7WlFebEsA==
        set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1698679026
    next
    edit "Fortinet_SSL"
        set password ENC E4Ei9dN5QgwUdte2zLqJSbfH316urk+7CE6dwf51yW7wa2vC63R0WSifsts2QW9bhWbv5k0sFwFwLCTE0V1m/SlKumWwpkLZuNChZOGKeMuA6qVnt9aHD0A8zlwyOeCt5XjEDO/AA1tH4t1oDa6a3lfsnrZFCWLJ1e3O1A35EP1bFazgzCFFWdjc/A/b3TpYGteVjw==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1698679027
    next
    edit "Fortinet_GUI_Server"
        set password ENC PnhToIwJjWqXNpYT787KJIdbVklkL3tT8ZRWJ6Z6WghTjlBfg/Boy3bPT1qT3ForXTyXOfXe6BHidm6CxScjV4sMHWwvZjUCeYC2gQAOTxPD/jDIpo5Wa3XHD+eDuIO8G8iqwUAp7F4DMAqx7jQ0rctXCSuHswwqcxxeQfQ+lyRz16PEEg8nSQHvLrz8cMplDPPOqA==
        set comments "This is the default CA certificate the SSL Inspection will use when generating new server certificates."
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIJnDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIdF4oZjbADUsCAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECF5VkXm0S7SzBIIJSPQxw3Lz0pmP
RCEksMEC46I97eeKqRom/a26V25jJwafUwDuizIaUaphf7m0lbnRK3Fr8NOe3D3V
UBAx8SYdDmZlg92ER1rF3dCgBWxDnha3fuDyB0EGq6vzcdzB5mkGB1+Pi4CTezg8
jjhwWVBGstqRGoA1OlfYxzw59zmOHb7Y3B7ehfdBrk6eBQroobDmIcyfwnpSv5x9
SpdvqfKjGLP3s7uS6JtNoGqUeQi1KuZMIcQK1rY1XjuBhUWUgLw1pgcPz1L0IPUL
YAMp30MCFOs54W4DfWX8xYuWWUq9xU31Vj/W9P92HK7brIUsGS6iQAfu8NOwsYJg
hIhakzY5FV+35Az0bN/T+uAMsrNiozdgCopwvUC3RbouSkoUpr0bL0OvFuKtbRoK
cqlULonuyrh9XLnq3Bxtr3bUMISNQb/XYWtt8VvrghEWYaroB01A5J4UNvg2rked
OtXnu1ly47q6TteB9gJojt2gseBik1ujXv5250mH+8+pmfjX/aMIU5E7OUSYXZ/A
OXhMWmdKO1x54eB3lEaMpwUPejh2A43LxDzviQvYw4Sk9m6MYEc/VKr2lAii+/z9
zuveVvp7FQLor45jxA7mHZ3oqVGm90wm2fwqUGgtoQW5g4RAjsKJYU57ofFuqvpZ
lj0auZiqflS6tf8fWRM+Kt74U/gb9cYZx+Ghbo5X0hZbvlnQWe46Gy0GM7PXEh1x
W/G9Byl80udZ988whMj4uqtjCEbnzWZeuNk1jl8CaVW2nSl1kKcBI0RMduExKoH6
vxK4XoS3of7kxNRfe1kWBNhH+XI7u+p1QZo/MrsZwo3KJQt/G60QtajMQE3JZzJb
89RuD4dpWgtIeJubCtG632BW8iOP/VhW1kvsnsxS6VC4E7catP23v8Fi6BV2+Npg
ieQpyxNxfGjvSbgh+Q+xHWIoMAGD9jGO7QwTvzGmEPpYwQPxEB9347P8sxWP8VcM
AWAL1kF2W3deUicNhsJjUeaH9khSAHLhO+UHw2rGGMvtP4CRm+ISTGCReCBWTMBh
AnnChAxAe9APhTZFMc5HoGHwXYM9hZBY4vlh95iyc/r1Xy8fpoF+JezWzyhsTHEi
pKsAa9rUFiLwNZP9RFyfVNrq//R62UwO8QH/OQ0nlRW0hldtClKnUFburKzehVY0
LSJGwsQrPFEm9hJHsuJaljLmrVp5KHCxbfqjvAFpdXYmm5rg0sj3h6qCEzCH/ZPc
DI7L7pluaMZb/PgrqC5/Ok/H2hdqZBsEaVvGvEh5iQAHREtuA8NzcT+ub+AP4PWa
+huAykFwB8lRN0JZwvQ/q+Ss8TVsq+PPpy6pAddK9rRdsPpy2WOgIYuzWuPWm6/W
vgDHKVcFuyeznCmtqv8XHEuVkR6gFZCIIfm9IjwAbxO8GGIjGQFPEj3xZPW3B9ha
kFbl9lgK7jTzjUC9hUSNlCFJFddTOmLxKsW8ZGdeuWXLGrxaNh3HGFg1y8ONjf1g
q/1qJf7icL3KuOCBILoIHW0rX542xA+dr5e0fqO6wY38FAYuVBJ+Lwu8TnTXjsNW
5Xr7jturfzyUic1ZlfyW6IRFsiW582+qgJK38igxTeO9k2+mQcPhaftDYluL/efq
IvDdUtRXnMHUrP81niv9BfHR1HD6cvr9+Chf6ihk+eRHY/ST3svH4k1ZEf8FRrxw
FV1LFGHmVwegTQrN//8W8518undQEaS+Tna/nHmiQE9OvchvXHXM9gpByFkKhBwq
bVAoiv/sAsQKg2+/3dfEJYXWeAJ03rbm4kDOizuB57eXXSk3Y4TO6ySDDMwxzJZU
rliV7BKKeIGWas5lwr7O3QG8wA4PaNRXYRWxULVZqPXkuSaAIoxJ3+i1I/Lzj/qD
XnmOYKMxgWEQ0HMN1AFov5Ifw/5u0of1bdo/2N9ORMdgPaHoJaaNr+ySAjmVmcJK
ILhQ8GKn5blQpeg9jIRPQIEG04iU0ZdKft1GgsZWRzornwQ4F7nuwQtQehIe/F9+
Qzpp/ny5pRxwwdkSDSeCWkNm1ZhklZvjR4MKQeXnHUdj1SJNE+ibfP44N1YPAeOO
5QGsmIB+4ebHSRGdvpsxPMqnmjJNXcErqh5RlOz2WsfyEuZov3C068eQs7E5wF1H
nnZj5lSKwUtvSdkvNASGGJXvHqr/NbfPL1KEnHOefJQhGG/497NgOe+29nSs4dfL
/pzlTr4SJVe0j3VIbcIUbHBMVT5MrSXpu9+d2oXEajTQlTTGNND/0KYZG90Ih3n/
uC4x8kWOeucKzi6MGSM9ExM8WoQ46H8tByvIJh4etjduZzNvA1HR4NLSAkty8hei
ayT+YpTu5vlzMnBPvyLg53w9AbNE+Os1MwCKYtFWOXBUrlEHPCFkUu5/aLs4jHif
FKeJx/b1rZ1UOitF8oQ+QAkZzlI98aUKQ4YwtWdD/E0uAqlJAJnyHOuui6M31WFS
lJvCwCc2UkLFDV0dimqcQaO39TkCz8GKnT4EXhQvdOhyepAmJfxwbDMypfxOvG5V
9NHBnRt9+P5ep2N7SbsMeymrs4+HlT4q+6Rb8arm070tUs9IPanKFwByhWLYsNGB
DjIKdxIUuaVFewYyR8JWa6JaPJHgE70oOGKHUvHDhoitxZZnZvC4gquogs/GqDzB
QK9kFglAiZT2/rg8Uw+qGZOlCtLeI4TxU9bTPr4rKIkwMOjT6mNgpPiShAb91hI1
FyDHjEgjDC6h1VVoKDAU5hFMXCsYRJVCC8XuzgT4NXwGPN0PUPBlSlgA7z116qb6
l2nchsnOB5QOjvY66rmwgn38chYic3UZztp7nBAe7CUd/uSsxEuBHlw568c8wR0k
LxJ8X2u36xg6Gn033wXejx7swimk3wcJ+pqCzj6wOu3it4ymkdRlBDZOVosvPNUD
DYBU6sdVKvMD2mQ4HsQavoM0ok2tnPew2H6mz4ca83wsTrk6cALQLvxLNpkfGgXv
c7vCGNJ99wMusqJkV2pY6kq7xzd7xaRifLj/bL7F7ecGh0hLB6VCq9urqgu8YMY4
7j1p7oI+WF6uMyQQzz/yboUtctjeHaA0MtqebsXE/G5toKPHZK5269wQ0YLQ+H4Z
eEgH0xluMy5s1SfqAjEI5N4ItViAPDlwSb1gYJgBiVSMNzLFggWIETZ2Vaq5SGc0
F6uLC14U5Z74u8UIbjnANw==
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1698679027
    next
    edit "Fortinet_SSL_RSA1024"
        set password ENC gfZxFIjdSud6iwGXOLvSTCQB2KTGUpG9p20nlC6NmJ0igHDUjCEbQj3vH0Qw0g/XnQz/lOy80FgyEl0V5TEYyXWS4FYQ0IHsxZ+6htuW2iFukNLRMOrAJTDa3HEkCO07JsWpMgIqD51cUvvAgRBW7C2B0bfNzy+tO1XIQtapMUlS9ozVvEa6PiB99yhQwHs5hZ1lhw==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIC1DBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIJPkZIN0YHhACAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECHGR38jRoh/iBIICgBi0yqX//Eoz
Ku5I24cT/1MrUkDBGwtJSflz8Ok8HUg2ag5dxs4Zv6AJt8X2Eg98adYyLC3TykvG
S4/NFjKnEsLE8gItB7yZRFY1UPo27GbVthtZuDrKavJPqjOCK13cl2l3XbqweGFi
l81mJR2GHP9tJj1lF82sZpk+slZmX26WgPDlTvUxZde4vt266HzJkFCuxAAvGRXo
9uFzEyYsZAF/olUgLjpvicSqtjn0iG70xPs0kKT/hUUdsYHcE88P0H6FvPkYz59s
1rhqcStkqw8TNien9FzW0XtZ1oOj706Ag1SHDK5jKtpunhCqXX0J49Wp/q+ga2+I
P8ieCTsjA7plnm+6uMZk8MSfRh0RuvSgrxUmifwKK6c+YprRc7Y2Uu0oNC58DVBw
Uop2cpKfLlywjdckKF1pI1SolGajEM1VmcfUN7pF164GL0/GbwVSmXA8GHoBrf8M
IJYtkySKQ/2DBaTmJ/emHLJjJVnOTqoKhS+EjEnROjJyiQ/x2G6p+oM6pYJdFB9L
bER5v5InnckrHwjSYSVk3wfMM7+LhZCfNHSoLDJFD1ighLWWn6URk190HiDT8grY
PSDQtN3+NMiK3SoA7mnc8A7kWKrElJfEFqhNNhuqZPyzrXdbgq1zKoJmSa6xmoip
oWSMmgOkgdx7Odoc+dMSu3uUYozCPR+uZqNlbCmDyNDK1tgR8kZkeLiJuWzYmgFy
PsbVTk66PmXOWJVU9QQL+C85XTB3/dxJMHOGoiCIb0pd9koVufUYf+VSPuJlATd4
54S7CCWM1xdzY1hF3PipyXqERzpaYpS/0SkkzcR8VxGwUQ89xzPB9ow8nB2Z5YG7
S+votnpQQGI=
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1698679028
    next
    edit "Fortinet_SSL_RSA2048"
        set password ENC AXmdexQV8nSkGkb+WPOkF33VksF8JsLogjN6A1EL5hm/OKoAb1INxSA8qdqapIDAtG8zYgHsoWPgVyVjuDf0n2Doww08GhWWL6uQdex22Wa7SS7TEYm8j0785iklSbhEn/1+lX8UgPSinxDF0PdtwUX/L23NBxKYAzM2OOgBger7dtxapEnH+fD6zTUfKeZ5eyBAOA==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1698679030
    next
    edit "Fortinet_SSL_RSA4096"
        set password ENC ovR9abSVq74Q2zYdZnjcWUJgKYQbWwwrAg5Qnb3/I6uq6OSyNmwkDlq8AehTn7jbxfsP8SLCfHnM+pUiLgA5BWg18Jjj8UG2K4l/QgPsQ0j+kesVsgT3gC7H7D61t1XojYkZpojXlySecCuBCSLXw990iXh39+8cD/z9zWpqSWleahOyx+EcudWi0WuJNHJXhY3LFQ==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1698679030
    next
    edit "Fortinet_SSL_DSA1024"
        set password ENC NvLa2pEs6e3huzc1O6ea84aHZcHIRJEhlwADdj3y7GRHAtc2pgLDuSHRGAUqPEg6aipc6U2Vn+l1oC6SoQFFuNZTulc6MhHAvxsYXRvB87KUyfjrEksKSA/WpZY9szhUDKNKqVXllPXCvbRWTC8stvA5575bdSaP07pi7c6b0KDKdIZqr3ddsSwkN4Noo3vEeZ6MVQ==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIBrDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIIGD3ijnJCxcCAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECDkDmzUOYUp5BIIBWJdV6PdPN0df
7FWJWOi95PC1G9K7nlBP2dVS6x/ofGLP8AZ/y1nCFxcltUX22gDUop93JjCwb/aE
BSZS3m/Q4QSvd+D4A/hqVGkuv+j7FwusTRqongKjeSn0NagSMi1vNNMOuE+nws4q
scO0aO4G3Ia6sGYwzqM1VjbK3Qze9bRBF8nRmNczx/SgndwC9d3wlT6eR7LIGbd/
U/MHmmX3Ntg7UJrntrOowWyUnh0hlrIreKCKan7wZsPYSVVtj5T89mgNRDjTmRc2
qjXU/K2yWGG9TQ3t6eXrE/s1fafxM0z6LZHrpdwm3YOik8Chg3r87NzW7rsQkC/y
F4IzZcW3SmcRBlgBxf9eqMOxTUi6Fx1HIitbFnA//rTPXC3NILuk12WKVUIeroHK
2P3Dj6x0oM7VmRu5luAoZoyltKC6IHTn5tsh3F9jxpa+ScFp17e39YrmwiONfLlW
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----
MIIDnzCCA1ugAwIBAgIIa1aXklpelIEwCwYJYIZIAWUDBAMCMIGdMQswCQYDVQQG
EwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU3Vubnl2YWxlMREw
DwYDVQQKDAhGb3J0aW5ldDESMBAGA1UECwwJRm9ydGlHYXRlMRkwFwYDVQQDDBBG
R1ZNMDJUTTIzMDE1NzQxMSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0
LmNvbTAeFw0yMzExMTcxMjAzMzhaFw0yNjAyMTkxMjAzMzhaMIGdMQswCQYDVQQG
EwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU3Vubnl2YWxlMREw
DwYDVQQKDAhGb3J0aW5ldDESMBAGA1UECwwJRm9ydGlHYXRlMRkwFwYDVQQDDBBG
R1ZNMDJUTTIzMDE1NzQxMSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0
LmNvbTCCAbcwggEsBgcqhkjOOAQBMIIBHwKBgQC26IYLFjH0FmSv0/LNwg3MCsRN
WLtFPHy9dpFTTSd100PWp85Sk+h/IxNtk6U4WKj6VAO77THUcWVV5MOi0kjQXLmv
yob1ZiSm0OlIRcM2K0nZCR+3U7HDfGRDDWO/Tg22urZm4nQa30PoggQ/b5FtNytC
QUaqznO1r5w+Im1zYwIVAMm7LQEy3NtbmLGdIpSXzXQy2m1vAoGBAKbZrUzrQUD3
PsmRadhKVjDAtcyCPoLe3tbiqQI4bc5JTroI9f3sTJzEMi5d4k680bN/Df1tNpZQ
Uw8AFKPPfVt3IQynAcE+zkpOgYDKqZzQryuqR+ZU5Uqd8IBta1YoQjJ2x+lquHtt
ThfUtYJ8GHMjWPcnHQAg255hl1t++yJwA4GEAAKBgERj7sqPbchkk/+Z2g+xLu/W
F02WTN4FjMUJ9dy0l7yXI5ppXEaw7CL3G6zeyHU/c0E/LqMO6qY0WuOOsFlc42nq
7HV4oSW2C7YW4STWxxSPuByz9//B6rLj4ybxXvXshUfMrnU+DTB1uAH2a1W7aUuu
oYmpfLGkxUpv8+JuugO6oyIwIDAJBgNVHRMEAjAAMBMGA1UdJQQMMAoGCCsGAQUF
BwMBMAsGCWCGSAFlAwQDAgMxADAuAhUAvElz4pRzZMgs9n8GotkraWoguPcCFQCc
8m/3WU+HM+GzMtBuanJvlZeAlw==
-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1698679032
    next
    edit "Fortinet_SSL_DSA2048"
        set password ENC ig1Nj992KPdjl4LSVDvukURCQT38woMsTSlwVBrT9IqMLUKex3J3KRY5oS52GclrNgpzrXk9RuIAfuHtvfrDlsPtzqhFLeTkf/EvttLj+DIBIEozwNq7YBECo9zHToxaP8UWe+8oyjNbbXLbr9G8vbjvkQpxs0x4fUHNzoqIKowExX5QQx105eq2S+T2AwADkEyByQ==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----
MIIFRjCCBOqgAwIBAgIIJF6GlbascQcwCwYJYIZIAWUDBAMCMIGdMQswCQYDVQQG
EwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU3Vubnl2YWxlMREw
DwYDVQQKDAhGb3J0aW5ldDESMBAGA1UECwwJRm9ydGlHYXRlMRkwFwYDVQQDDBBG
R1ZNMDJUTTIzMDE1NzQxMSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0
LmNvbTAeFw0yMzExMTcxMjAzMzhaFw0yNjAyMTkxMjAzMzhaMIGdMQswCQYDVQQG
EwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU3Vubnl2YWxlMREw
DwYDVQQKDAhGb3J0aW5ldDESMBAGA1UECwwJRm9ydGlHYXRlMRkwFwYDVQQDDBBG
R1ZNMDJUTTIzMDE1NzQxMSMwIQYJKoZIhvcNAQkBFhRzdXBwb3J0QGZvcnRpbmV0
LmNvbTCCA0YwggI5BgcqhkjOOAQBMIICLAKCAQEA55GNHw3TP92t5Ra7j8aPAB7S
D0dpodH4qxLYjfcUP2noT5y5vd3a3xZUqVoIJq3Sn1BPpXkq2TisRriojke6QcXe
tE4Fx/5Gi/yx6qaQNqWBmfqBhWK6qUJD3QOOMm8j/Bdo1+VLU4+gMtBROg4vuWFr
gBXyXNFLhKfh/k1B2jE4DWpiiMGUs0Z0wohbtuyp06YuMC7hlQRhE/9hM8mzabYQ
DfZ7BbyZG6kRoLNJzaXZn1jq6gxtzYoclds9aBRUtn9ssAMPlMu+VOebaxBqFRXQ
+oHo6WnaT7wr6di84jemGonkCBizaAD91zlYgSOzZj6ysPxYWqSrksbc2SxmjQIh
APcYFmdUl+gcQO4PFRPXbz31g9+Z0M4fchdBMExBRee1AoIBACoUK8UgTEak3DkF
r8dSncVn9yvO98Lp3EA4FyZ/3vXsYS1erxog04TNGWEoDZB1OdUiyqDUhJPaINKN
7zhDu9vrjvH9lK8Z7QOxe8VsTluSXqGl1Dti/tAYR3NZuEa8DT7hogOY2mIaVXR/
tjz87If4mSnT/CX5lMLSEFNwUl1oQHoQSEJl/Ja3PbcsGBgrhiWRmd+tpW+leRkB
fP1BZr5JUEDNds/9s/zM9lq/vZS1Xenu9plafcyzXU/X3TBqCpI+xZKr1kcQ54C1
Rj+klLZOJA38wTUR7C1cb+KQsvFVnE+5DG8ZPI+LjsnfUc8Y8cpyDdWBjwPKr+Pr
hB29AkkDggEFAAKCAQA/PAR/xSSXcOdGKgasbZpuYB7cI+ISBJE9sk8+R/Nwrkjv
tLN6fxlwN1rTkFAwvqY16U//kFdW6XqxzAGjtxTIg8j2RB3LDLanCxWeiQLLK567
9I9X5PnDKrG+DYjeC9Zc5XrQRaP2OXdewXs8GR9ZarUHva3HDZU3i7Fl6u/R+2cg
1R7StPp+o9H30uB1AXgo1/CFx+foU+nhBxUwc1cS7Rg2V7wyIqXgAU6gMriEGGZw
WHaQwb0zgcxTtdKDzBPh/21E4U4+nUtWU+4laowWm2nBT++iLVcipSwUN7IEk1mV
fn86dylWkHnsxBOpyDMX2JeBEYyLHCe5cl5c/ItroyIwIDAJBgNVHRMEAjAAMBMG
A1UdJQQMMAoGCCsGAQUFBwMBMAsGCWCGSAFlAwQDAgNJADBGAiEArjrdxDs7m4j4
wvWHfKLSJJm6I00LvJIwbO3wdxl7JE8CIQDBG4+MfKq5+w1SpAZHuOWYPVUoiyt7
LV2zDx6dLGfIyw==
-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1698679032
    next
    edit "Fortinet_SSL_ECDSA256"
        set password ENC hjMxhSW1rg/7nuG7Wjn92cuyNSmmwrzIJUDlfOfOgKTJ6bvgr9+YVrnTXDkHflM5MVqOT6K8el+/2VYKmpBcYrMo8O4QxHXGE4XduWsNT1yunvxaeQZUtHXzT0i79UI0QHlxCCpoEpsFhsvsiMZk10KrgPTJYjuHjUmD8E/I2TKesYkYgCEDCwkI23kCNxOt492STg==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIHjME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAjT5Lebl2UZfgICCAAw
DAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIKsU7fkUOw1MEgZAbfCFQNfoVbaFH
lHUYf/lHBaIaKLUC4TR4E2G/t1LzLGDuYtkdJjx3xJk+cXLeolgcOTMbrU9l8Tty
yN4dbWj+o+JTDY++HMBFvh6vchKDiFa9L37iBXUL7S1TUox7MjyadtFCBwVh0K44
ec6QIZ/F28SbLEB/9e7D0WfOzqBFSDvzkI2e+fgwxMlmC54P+p0=
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1698679033
    next
    edit "Fortinet_SSL_ECDSA384"
        set password ENC yljKEa0zg1TWunZeqwHVMPMSXTXQn3Zg+HJhvYCe33m/t87E/VANxOQH4KwJKzGIhpNtzSc27s5F3+o08hkX/IAMhtsHvy7M3qQ8/7tMC/+faR1m9Ne/TyiX0f+v+kv/9anl9Clq6gaWRe8NAh2iLPkm6d3U0whQdsw9BLuTSxTAcwVCnA4nA5hPggujmZZeTYqf1w==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIBEzBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIMQT5pfy+eSsCAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECAVipgaRnH6LBIHA3PVqk+/KXxaR
zM3L86D3v8FNngZOVv5FvQgwyVaf/PsXYzC6VbeJ1gMbP5OYhx2UK/X2J9Lsrgsr
W8sEs+4NjjbEwaZhWR72VFBD/Zc8iEAiAN4T5OCqnJaW4yjWJY9Qm7P1uoBQaSed
49lpjUVmOp5I890uNZZEfcItAwcG9a9O3Wo8WjKbsXpp3keqTB87Snx8qSdvfvS6
tRZG+q9QcPgZYeEuyNhNFK8lcq+7j7ACWgiKGynYwn8RMgf7vgzs
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1698679034
    next
    edit "Fortinet_SSL_ECDSA521"
        set password ENC wZofDRCPPe+EmnIZaHjgAsbIjleYAYjhkps1aPq+0RVaO2hByGGl/7M1I6CUZBsgJMOa9t2YESwhBGS33G00UUtAz/HIgZMsV4T4bF8z9a6gXOCUky5bPTm4Sp5c8BYHWWg3H/ujXzGoZfiXk3Mr3jgMsDVnFaik8MTEbK2991PjPmgzCntnTN2FqEsmaZGGdFEI/A==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIBSzBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIcMtKbmdbBEYCAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECBkgak5IEjbeBIH4eaHsZ1K2+Zvt
8yCXz/EnWqoUDGxKYQvCtjuaZ+yipJn3bF7edPxsszngXXZNXMh5dp5pUmxUcLhv
ppIfb1fYFp1X1/pGZivX8LcQNsXAGyWVI5oPgfYfGEEnCImqaTRUZrTOAal6pmC/
ShuqNZ4+rdF9qcbshB+m8r6riJoV13vuJ0uz1LZWl95eSIG1+5/BkXcKxgJsd6R3
Rnn3lP15N0+j7s9jfLybdzPPaXyjKixXjIrQrXf5DKs6nb1WAYxaz2aS5hSbYzgG
kOJCz2r6j8c+ArwxVbswt4c0itIdkkdrPtw/ewpPrel94iAvodX/8GQo/AFdIv4=
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----
MIIC2jCCAj2gAwIBAgIIH+diyPBGdkMwCgYIKoZIzj0EAwIwgZ0xCzAJBgNVBAYT
AlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUxETAP
BgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMMEEZH
Vk0wMlRNMjMwMTU3NDExIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQu
Y29tMB4XDTIzMTExNzEyMDMzOFoXDTI2MDIxOTEyMDMzOFowgZ0xCzAJBgNVBAYT
AlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUxETAP
BgNVBAoMCEZvcnRpbmV0MRIwEAYDVQQLDAlGb3J0aUdhdGUxGTAXBgNVBAMMEEZH
Vk0wMlRNMjMwMTU3NDExIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQu
Y29tMIGbMBAGByqGSM49AgEGBSuBBAAjA4GGAAQBjjhkfcsMJGZ10eQ+vxzzfHrG
IpOfB2zDrc+aypMESpNy+92u58B67/o46KILYK4Bcr8RHqwE8qn5K5kct4571DYB
E+SDWh6lbbN6vEbvOX9BnPPmB/p0RdeGdMZoMZTOdQAdKjUvDxk940KoZP6gy3nM
sTos6VYNQDL4wS1yZpY+X8+jIjAgMAkGA1UdEwQCMAAwEwYDVR0lBAwwCgYIKwYB
BQUHAwEwCgYIKoZIzj0EAwIDgYoAMIGGAkFXZS0nRfawIxIzzhoPY3hqeCLfmd3V
rx/yoqb5OKWQbkJK+Qb/eiH5bCMYte0cabxy1VHZsmWo0GseaqNu7M2z+AJBRj+S
6THUMPLqIZJu2g0H75LM9rkEyrEsDAk2aFUUVeoOsB3qf+lynJYOznHU4Czq9aAP
tR30MSye20rouRZ2KOg=
-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1698679035
    next
    edit "Fortinet_SSL_ED25519"
        set password ENC eef2JpN9qCiZRcrEQQaaowNQk8DxpIsa0QFfdrtnXB34jxMTaFXSh8njqfqb0KpH1VcbyglKdVSpZXai3ILVmG9lHOElWXrtdsdZnYMyGrKLF2skphQVbUX7INgStMoVWiVM1K7w9iDEVENaKrbh/Lz3wKV1zLPVaVoiqlRZMdr2lfb+8XA7+2qOCC0OLFp3gyoXzg==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIGKME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAi+CJSiLYRcPgICCAAw
DAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIaou/aHBT1S0EOHJ5zBYiPvSPQzu5
uEbuXKDh67W3hT0ilpgkIpbZV6ckwmw0OB9b33JVYAMdCSU4U+Mt+GhNJSa6
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1698679036
    next
    edit "Fortinet_SSL_ED448"
        set password ENC V+ATdExlGxwLO2C3uWIgUANhBGV/lvL+oQlkBB058xxgLAkHd3YbXdqni1xpNmFTMCrtt2o9uSwEehq6C4I5VsUTpyYOu9KMnGfwC35q1joBDhoLC0o3mmMWawBZz4pKCquCoyF7hi2yCs4q1AQ+MX4tQRrtLpj7JLtdxnDtBWzEpM4mIDedXkcbqGRdbHDrnF/WZw==
        set comments "This certificate is embedded in the hardware at the factory and is unique to this unit. "
        set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----
MIGiME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAgg86XnnYsqQAICCAAw
DAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQI2SZTzZIXfOkEUA9/eujp51LhN4LA
AEISLB34y8KbD4WS6XeC15nt1FpkowDYNWKfNT39JeoMw8q9cgN0Xi8AVg0DS0wW
tEjboJeM4B6k1m+CEIzLCYVQEs/G
-----END ENCRYPTED PRIVATE KEY-----"
        set certificate "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
        set range global
        set source factory
        set last-updated 1698679036
    next
end
config ips sensor
    edit "default"
        set comment "Prevent critical attacks."
        config entries
            edit 1
                set severity medium high critical 
            next
        end
    next
    edit "sniffer-profile"
        set comment "Monitor IPS attacks."
        config entries
            edit 1
                set severity medium high critical 
            next
        end
    next
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        config entries
            edit 1
                set severity medium high critical 
            next
        end
    next
end
config firewall proxy-address
    edit "IPv4-address"
        set uuid 8a6ad3a2-7737-51ee-c0e6-25ae556af639
        set type host-regex
        set host-regex "^([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}$"
    next
    edit "IPv6-address"
        set uuid 8a6ad5c8-7737-51ee-cef9-f519476fb0f3
        set type host-regex
        set host-regex "^\\[(([0-9a-f]{0,4}:){1,7}[0-9a-f]{1,4})\\]$"
    next
end
config web-proxy global
    set proxy-fqdn "default.fqdn"
end
config application list
    edit "default"
        set comment "Monitor all applications."
        config entries
            edit 1
                set action pass
            next
        end
    next
    edit "sniffer-profile"
        set comment "Monitor all applications."
        unset options
        config entries
            edit 1
                set action pass
            next
        end
    next
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        set deep-app-inspection disable
        config entries
            edit 1
                set action pass
                set log disable
            next
        end
    next
end
config dlp data-type
    edit "keyword"
    next
    edit "regex"
    next
    edit "hex"
    next
    edit "mip-label"
    next
    edit "credit-card"
    next
    edit "ssn-us"
    next
end
config dlp profile
    edit "default"
        set comment "Default profile."
    next
    edit "sniffer-profile"
        set comment "Log a summary of email and web traffic."
        set summary-proto smtp pop3 imap http-get http-post
    next
end
config webfilter ips-urlfilter-setting
end
config webfilter ips-urlfilter-setting6
end
config log threat-weight
    config web
        edit 1
            set category 26
            set level high
        next
        edit 2
            set category 61
            set level high
        next
        edit 3
            set category 86
            set level high
        next
        edit 4
            set category 1
            set level medium
        next
        edit 5
            set category 3
            set level medium
        next
        edit 6
            set category 4
            set level medium
        next
        edit 7
            set category 5
            set level medium
        next
        edit 8
            set category 6
            set level medium
        next
        edit 9
            set category 12
            set level medium
        next
        edit 10
            set category 59
            set level medium
        next
        edit 11
            set category 62
            set level medium
        next
        edit 12
            set category 83
            set level medium
        next
        edit 13
            set category 72
        next
        edit 14
            set category 14
        next
        edit 15
            set category 96
            set level medium
        next
    end
    config application
        edit 1
            set category 2
        next
        edit 2
            set category 6
            set level medium
        next
    end
end
config icap profile
    edit "default"
        config icap-headers
            edit 1
                set name "X-Authenticated-User"
                set content "$auth_user_uri"
                set base64-encoding enable
            next
            edit 2
                set name "X-Authenticated-Groups"
                set content "$auth_group_uri"
                set base64-encoding enable
            next
        end
    next
end
config user fortitoken
    edit "FTKMOB3A91678822"
        set license "FTMTRIAL09F23643"
    next
    edit "FTKMOB3AE922C76A"
        set license "FTMTRIAL09F23643"
    next
end
config user setting
    set auth-cert "Fortinet_Factory"
end
config user group
    edit "SSO_Guest_Users"
    next
end
config vpn ssl settings
    set servercert ''
    set port 443
end
config voip profile
    edit "default"
        set comment "Default VoIP profile."
        config sip
        end
    next
end
config system sdwan
    set status enable
    config zone
        edit "virtual-wan-link"
        next
        edit "DIA-Out"
        next
    end
    config members
        edit 1
            set interface "port2"
            set zone "DIA-Out"
            set gateway 1.1.1.254
        next
        edit 2
            set interface "port3"
            set zone "DIA-Out"
            set gateway 11.11.11.254
        next
    end
    config health-check
        edit "Default_DNS"
            set system-dns enable
            set interval 1000
            set probe-timeout 1000
            set recoverytime 10
            set members 1 2
            config sla
                edit 1
                    set latency-threshold 250
                    set jitter-threshold 50
                    set packetloss-threshold 5
                next
            end
        next
        edit "Default_Office_365"
            set server "www.office.com"
            set protocol http
            set interval 1000
            set probe-timeout 1000
            set recoverytime 10
            set members 1 2
            config sla
                edit 1
                    set latency-threshold 250
                    set jitter-threshold 50
                    set packetloss-threshold 5
                next
            end
        next
        edit "Default_Gmail"
            set server "gmail.com"
            set interval 1000
            set probe-timeout 1000
            set recoverytime 10
            set members 1 2
            config sla
                edit 1
                    set latency-threshold 250
                    set jitter-threshold 50
                    set packetloss-threshold 2
                next
            end
        next
        edit "Default_AWS"
            set server "aws.amazon.com"
            set protocol http
            set interval 1000
            set probe-timeout 1000
            set recoverytime 10
            set members 1 2
            config sla
                edit 1
                    set latency-threshold 250
                    set jitter-threshold 50
                    set packetloss-threshold 5
                next
            end
        next
        edit "Default_Google Search"
            set server "www.google.com"
            set protocol http
            set interval 1000
            set probe-timeout 1000
            set recoverytime 10
            config sla
                edit 1
                    set latency-threshold 250
                    set jitter-threshold 50
                    set packetloss-threshold 5
                next
            end
        next
        edit "Default_FortiGuard"
            set server "fortiguard.com"
            set protocol http
            set interval 1000
            set probe-timeout 1000
            set recoverytime 10
            set members 1 2
            config sla
                edit 1
                    set latency-threshold 250
                    set jitter-threshold 50
                    set packetloss-threshold 5
                next
            end
        next
        edit "Internet_Google"
            set server "8.8.8.8"
            set members 1 2
            config sla
                edit 1
                next
            end
        next
    end
    config service
        edit 1
            set name "Internet"
            set mode sla
            set dst "all"
            set src "all"
            config sla
                edit "Internet_Google"
                    set id 1
                next
                edit "Default_AWS"
                    set id 1
                next
            end
            set priority-members 2 1
            set priority-zone "DIA-Out"
        next
    end
end
config vpn ipsec phase1-interface
    edit "VPN1"
        set type dynamic
        set interface "port2"
        set ike-version 2
        set peertype any
        set net-device disable
        set mode-cfg enable
        set proposal aes256-sha256
        set add-route disable
        set dpd on-idle
        set comments "VPN: VPN1 [Created by IPSEC Template]"
        set auto-discovery-sender enable
        set network-overlay enable
        set network-id 1
        set ipv4-start-ip 172.31.0.1
        set ipv4-end-ip 172.31.31.252
        set ipv4-netmask 255.255.224.0
        set psksecret ENC **
        set dpd-retryinterval 60
    next
    edit "VPN2"
        set type dynamic
        set interface "port3"
        set ike-version 2
        set peertype any
        set net-device disable
        set mode-cfg enable
        set proposal aes256-sha256
        set add-route disable
        set dpd on-idle
        set comments "VPN: VPN2 [Created by IPSEC Template]"
        set auto-discovery-sender enable
        set network-overlay enable
        set network-id 2
        set ipv4-start-ip 172.31.32.1
        set ipv4-end-ip 172.31.63.252
        set ipv4-netmask 255.255.224.0
        set psksecret ENC **
        set dpd-retryinterval 60
    next
    edit "To-HUB2"
        set interface "port2"
        set peertype any
        set net-device disable
        set proposal aes128-sha256 aes256-sha256 aes128-sha1 aes256-sha1
        set comments "VPN: To-HUB2 (Created by VPN wizard)"
        set wizard-type static-fortigate
        set remote-gw 2.2.2.2
        set psksecret ENC **
    next
end
config vpn ipsec phase2-interface
    edit "VPN1"
        set phase1name "VPN1"
        set proposal aes256-sha256
        set comments "VPN: VPN1 [Created by IPSEC Template]"
    next
    edit "VPN2"
        set phase1name "VPN2"
        set proposal aes256-sha256
        set comments "VPN: VPN2 [Created by IPSEC Template]"
    next
    edit "To-HUB2"
        set phase1name "To-HUB2"
        set proposal aes128-sha1 aes256-sha1 aes128-sha256 aes256-sha256 aes128gcm aes256gcm chacha20poly1305
        set comments "VPN: To-HUB2 (Created by VPN wizard)"
        set src-addr-type name
        set dst-addr-type name
        set src-name "To-HUB2_local"
        set dst-name "To-HUB2_remote"
    next
end
config dnsfilter profile
    edit "default"
        set comment "Default dns filtering."
        config ftgd-dns
            config filters
                edit 1
                    set category 2
                next
                edit 2
                    set category 7
                next
                edit 3
                    set category 8
                next
                edit 4
                    set category 9
                next
                edit 5
                    set category 11
                next
                edit 6
                    set category 12
                next
                edit 7
                    set category 13
                next
                edit 8
                    set category 14
                next
                edit 9
                    set category 15
                next
                edit 10
                    set category 16
                next
                edit 11
                next
                edit 12
                    set category 57
                next
                edit 13
                    set category 63
                next
                edit 14
                    set category 64
                next
                edit 15
                    set category 65
                next
                edit 16
                    set category 66
                next
                edit 17
                    set category 67
                next
                edit 18
                    set category 26
                    set action block
                next
                edit 19
                    set category 61
                    set action block
                next
                edit 20
                    set category 86
                    set action block
                next
                edit 21
                    set category 88
                    set action block
                next
                edit 22
                    set category 90
                    set action block
                next
                edit 23
                    set category 91
                    set action block
                next
                edit 24
                    set category 96
                    set action block
                next
                edit 25
                    set category 98
                    set action block
                next
                edit 26
                    set category 99
                    set action block
                next
            end
        end
        set block-botnet enable
    next
end
config antivirus settings
    set machine-learning-detection enable
    set grayware enable
end
config antivirus profile
    edit "default"
        set comment "Scan files and block viruses."
        config http
            set av-scan block
        end
        config ftp
            set av-scan block
        end
        config imap
            set av-scan block
            set executables virus
        end
        config pop3
            set av-scan block
            set executables virus
        end
        config smtp
            set av-scan block
            set executables virus
        end
    next
    edit "sniffer-profile"
        set comment "Scan files and monitor viruses."
        config http
            set av-scan block
        end
        config ftp
            set av-scan block
        end
        config imap
            set av-scan block
            set executables virus
        end
        config pop3
            set av-scan block
            set executables virus
        end
        config smtp
            set av-scan block
            set executables virus
        end
    next
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        config http
            set av-scan block
        end
        config ftp
            set av-scan block
        end
        config imap
            set av-scan block
            set executables virus
        end
        config pop3
            set av-scan block
            set executables virus
        end
        config smtp
            set av-scan block
            set executables virus
        end
    next
end
config file-filter profile
    edit "default"
        set comment "File type inspection."
    next
    edit "sniffer-profile"
        set comment "File type inspection."
    next
end
config webfilter profile
    edit "default"
        set comment "Default web filtering."
        config ftgd-wf
            unset options
            config filters
                edit 1
                    set action block
                next
                edit 2
                    set category 2
                    set action block
                next
                edit 3
                    set category 7
                    set action block
                next
                edit 4
                    set category 8
                    set action block
                next
                edit 5
                    set category 9
                    set action block
                next
                edit 6
                    set category 11
                    set action block
                next
                edit 7
                    set category 13
                    set action block
                next
                edit 8
                    set category 14
                    set action block
                next
                edit 9
                    set category 15
                    set action block
                next
                edit 10
                    set category 16
                    set action block
                next
                edit 11
                    set category 26
                    set action block
                next
                edit 12
                    set category 57
                    set action block
                next
                edit 13
                    set category 61
                    set action block
                next
                edit 14
                    set category 63
                    set action block
                next
                edit 15
                    set category 64
                    set action block
                next
                edit 16
                    set category 65
                    set action block
                next
                edit 17
                    set category 66
                    set action block
                next
                edit 18
                    set category 67
                    set action block
                next
                edit 19
                    set category 83
                    set action block
                next
                edit 20
                    set category 86
                    set action block
                next
                edit 21
                    set category 88
                    set action block
                next
                edit 22
                    set category 90
                    set action block
                next
                edit 23
                    set category 91
                    set action block
                next
                edit 24
                    set category 96
                    set action block
                next
                edit 25
                    set category 98
                    set action block
                next
                edit 26
                    set category 99
                    set action block
                next
                edit 27
                    set category 1
                next
                edit 28
                    set category 3
                next
                edit 29
                    set category 4
                next
                edit 30
                    set category 5
                next
                edit 31
                    set category 6
                next
                edit 32
                    set category 12
                next
                edit 33
                    set category 59
                next
                edit 34
                    set category 62
                next
            end
        end
    next
    edit "sniffer-profile"
        set comment "Monitor web traffic."
        config ftgd-wf
            config filters
                edit 1
                next
                edit 2
                    set category 1
                next
                edit 3
                    set category 2
                next
                edit 4
                    set category 3
                next
                edit 5
                    set category 4
                next
                edit 6
                    set category 5
                next
                edit 7
                    set category 6
                next
                edit 8
                    set category 7
                next
                edit 9
                    set category 8
                next
                edit 10
                    set category 9
                next
                edit 11
                    set category 11
                next
                edit 12
                    set category 12
                next
                edit 13
                    set category 13
                next
                edit 14
                    set category 14
                next
                edit 15
                    set category 15
                next
                edit 16
                    set category 16
                next
                edit 17
                    set category 17
                next
                edit 18
                    set category 18
                next
                edit 19
                    set category 19
                next
                edit 20
                    set category 20
                next
                edit 21
                    set category 23
                next
                edit 22
                    set category 24
                next
                edit 23
                    set category 25
                next
                edit 24
                    set category 26
                next
                edit 25
                    set category 28
                next
                edit 26
                    set category 29
                next
                edit 27
                    set category 30
                next
                edit 28
                    set category 31
                next
                edit 29
                    set category 33
                next
                edit 30
                    set category 34
                next
                edit 31
                    set category 35
                next
                edit 32
                    set category 36
                next
                edit 33
                    set category 37
                next
                edit 34
                    set category 38
                next
                edit 35
                    set category 39
                next
                edit 36
                    set category 40
                next
                edit 37
                    set category 41
                next
                edit 38
                    set category 42
                next
                edit 39
                    set category 43
                next
                edit 40
                    set category 44
                next
                edit 41
                    set category 46
                next
                edit 42
                    set category 47
                next
                edit 43
                    set category 48
                next
                edit 44
                    set category 49
                next
                edit 45
                    set category 50
                next
                edit 46
                    set category 51
                next
                edit 47
                    set category 52
                next
                edit 48
                    set category 53
                next
                edit 49
                    set category 54
                next
                edit 50
                    set category 55
                next
                edit 51
                    set category 56
                next
                edit 52
                    set category 57
                next
                edit 53
                    set category 58
                next
                edit 54
                    set category 59
                next
                edit 55
                    set category 61
                next
                edit 56
                    set category 62
                next
                edit 57
                    set category 63
                next
                edit 58
                    set category 64
                next
                edit 59
                    set category 65
                next
                edit 60
                    set category 66
                next
                edit 61
                    set category 67
                next
                edit 62
                    set category 68
                next
                edit 63
                    set category 69
                next
                edit 64
                    set category 70
                next
                edit 65
                    set category 71
                next
                edit 66
                    set category 72
                next
                edit 67
                    set category 75
                next
                edit 68
                    set category 76
                next
                edit 69
                    set category 77
                next
                edit 70
                    set category 78
                next
                edit 71
                    set category 79
                next
                edit 72
                    set category 80
                next
                edit 73
                    set category 81
                next
                edit 74
                    set category 82
                next
                edit 75
                    set category 83
                next
                edit 76
                    set category 84
                next
                edit 77
                    set category 85
                next
                edit 78
                    set category 86
                next
                edit 79
                    set category 87
                next
                edit 80
                    set category 88
                next
                edit 81
                    set category 89
                next
                edit 82
                    set category 90
                next
                edit 83
                    set category 91
                next
                edit 84
                    set category 92
                next
                edit 85
                    set category 93
                next
                edit 86
                    set category 94
                next
                edit 87
                    set category 95
                next
                edit 88
                    set category 96
                next
                edit 89
                    set category 97
                next
                edit 90
                    set category 98
                next
                edit 91
                    set category 99
                next
            end
        end
    next
    edit "wifi-default"
        set comment "Default configuration for offloading WiFi traffic."
        set options block-invalid-url
        config ftgd-wf
            unset options
            config filters
                edit 1
                    set action block
                next
                edit 2
                    set category 2
                    set action block
                next
                edit 3
                    set category 7
                    set action block
                next
                edit 4
                    set category 8
                    set action block
                next
                edit 5
                    set category 9
                    set action block
                next
                edit 6
                    set category 11
                    set action block
                next
                edit 7
                    set category 13
                    set action block
                next
                edit 8
                    set category 14
                    set action block
                next
                edit 9
                    set category 15
                    set action block
                next
                edit 10
                    set category 16
                    set action block
                next
                edit 11
                    set category 26
                    set action block
                next
                edit 12
                    set category 57
                    set action block
                next
                edit 13
                    set category 61
                    set action block
                next
                edit 14
                    set category 63
                    set action block
                next
                edit 15
                    set category 64
                    set action block
                next
                edit 16
                    set category 65
                    set action block
                next
                edit 17
                    set category 66
                    set action block
                next
                edit 18
                    set category 67
                    set action block
                next
                edit 19
                    set category 83
                    set action block
                next
                edit 20
                    set category 86
                    set action block
                next
                edit 21
                    set category 88
                    set action block
                next
                edit 22
                    set category 90
                    set action block
                next
                edit 23
                    set category 91
                    set action block
                next
                edit 24
                    set category 96
                    set action block
                next
                edit 25
                    set category 98
                    set action block
                next
                edit 26
                    set category 99
                    set action block
                next
                edit 27
                    set category 1
                next
                edit 28
                    set category 3
                next
                edit 29
                    set category 4
                next
                edit 30
                    set category 5
                next
                edit 31
                    set category 6
                next
                edit 32
                    set category 12
                next
                edit 33
                    set category 59
                next
                edit 34
                    set category 62
                next
            end
        end
    next
end
config webfilter search-engine
    edit "google"
        set hostname ".*\\.google\\..*"
        set url "^\\/((custom|search|images|videosearch|webhp)\\?)"
        set query "q="
        set safesearch url
        set safesearch-str "&safe=active"
    next
    edit "yahoo"
        set hostname ".*\\.yahoo\\..*"
        set url "^\\/search(\\/video|\\/images){0,1}(\\?|;)"
        set query "p="
        set safesearch url
        set safesearch-str "&vm=r"
    next
    edit "bing"
        set hostname ".*\\.bing\\..*"
        set url "^(\\/images|\\/videos)?(\\/search|\\/async|\\/asyncv2)\\?"
        set query "q="
        set safesearch header
    next
    edit "yandex"
        set hostname "yandex\\..*"
        set url "^\\/((yand|images\\/|video\\/)(search)|search\\/)\\?"
        set query "text="
        set safesearch url
        set safesearch-str "&family=yes"
    next
    edit "youtube"
        set hostname ".*youtube.*"
        set safesearch header
    next
    edit "baidu"
        set hostname ".*\\.baidu\\.com"
        set url "^\\/s?\\?"
        set query "wd="
    next
    edit "baidu2"
        set hostname ".*\\.baidu\\.com"
        set url "^\\/(ns|q|m|i|v)\\?"
        set query "word="
    next
    edit "baidu3"
        set hostname "tieba\\.baidu\\.com"
        set url "^\\/f\\?"
        set query "kw="
    next
    edit "vimeo"
        set hostname ".*vimeo.*"
        set url "^\\/search\\?"
        set query "q="
        set safesearch header
    next
    edit "yt-scan-1"
        set url "www.youtube.com/user/"
        set safesearch yt-scan
    next
    edit "yt-scan-2"
        set url "www.youtube.com/youtubei/v1/browse"
        set safesearch yt-scan
    next
    edit "yt-scan-3"
        set url "www.youtube.com/youtubei/v1/player"
        set safesearch yt-scan
    next
    edit "yt-scan-4"
        set url "www.youtube.com/youtubei/v1/navigator"
        set safesearch yt-scan
    next
    edit "yt-channel"
        set url "www.youtube.com/channel"
        set safesearch yt-channel
    next
    edit "yt-pattern"
        set url "youtube.com/channel/"
        set safesearch yt-pattern
    next
    edit "twitter"
        set hostname "twitter\\.com"
        set url "^\\/i\\/api\\/graphql\\/.*\\/UserByScreenName"
        set query "variables="
        set safesearch translate
        set safesearch-str "regex::%22screen_name%22:%22([A-Za-z0-9_]{4,15})%22::twitter.com/\\1"
    next
    edit "google-translate-1"
        set hostname "translate\\.google\\..*"
        set url "^\\/translate"
        set query "u="
        set safesearch translate
        set safesearch-str "regex::(?:\\?|&)u=([^&]+)::\\1"
    next
    edit "google-translate-2"
        set hostname ".*\\.translate\\.goog"
        set url "^\\/"
        set safesearch translate
        set safesearch-str "case::google-translate"
    next
end
config emailfilter profile
    edit "sniffer-profile"
        set comment "Malware and phishing URL monitoring."
        config imap
        end
        config pop3
        end
        config smtp
        end
    next
    edit "default"
        set comment "Malware and phishing URL filtering."
        config imap
        end
        config pop3
        end
        config smtp
        end
    next
end
config wanopt settings
    set host-id "default-id"
end
config wanopt profile
    edit "default"
        set comments "Default WANopt profile."
    next
end
config log memory setting
    set status enable
end
config log null-device setting
    set status disable
end
config log setting
    set fwpolicy-implicit-log enable
end
config firewall schedule recurring
    edit "always"
        set day sunday monday tuesday wednesday thursday friday saturday
    next
    edit "default-darrp-optimize"
        set start 01:00
        set end 01:30
        set day sunday monday tuesday wednesday thursday friday saturday
    next
end
config firewall ssh local-key
    edit "Fortinet_SSH_RSA2048"
        set password ENC MpeERFyDqG9iUbnbbK7BXwXCx+DtrOGtWniXhmEf8VxOUyp1S3KYQdbCZ4A9jsiweq5wgC9Oy/hiPKHVwsbP40WbrSpxtJTI0eF/XYp+lVtaJIXTXU4XH7KxkIo5hsqwGX+zD3yY2n1kNSBPLhLG4spqVIvP6FIGZY5Yl7b8h/UadU4YPS1arLwqE+Xd4mTDmVdkdw==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOW0uOAkbBP12phsWbclCJktp3PR39eAfmmqRNgwsoZLzZbOk9kGs+zDx9nvgKs+7tjaYdZNumJEVX/fAbSbgUDWyOU290rvYnVVboKII8o9MIh53KnumrLmtWJhbeqWsie94oa80AeEp/6bubsMu1rpmhz0/nLBs0qsFkRXIoU6WyN6SOKDfqRCzcz3tMbqjR8JipWKi79NmDcOav1V4pQ4UAihypRzHDw836DB0VqlD0ZW9KD1i8hon9lod/Mnqmh3vtcVXS2sWUh29jyU/T6xr2WtpEm7YUGRSQZQMva2Nlr01jQ2odxVDQ5t7UMzm/VkIWFhaEojfj0kTTah7/"
        set source built-in
    next
    edit "Fortinet_SSH_DSA1024"
        set password ENC e25zIMmoaanasuXIFEo0rQr0mAvTltwt29K5SBroZGb3assNrgql6yi4U9GgfRw1TIWHGbld+Hy8i9+lXViG7KU0qrrz0wh3iLWB20LuViceYRh/4psAAg7Cv2/qRjmA8LhCjYXChaySJOHbHppa4ZKyaAANwZy16b36wn9EL5/ZzftmWOyTYX0ttl0q13zbbFrm2g==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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=
-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-dss 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"
        set source built-in
    next
    edit "Fortinet_SSH_ECDSA256"
        set password ENC z27BkCI4xUj9LGazzqWt84Qcx6WiEPon93VhyeU+oZTS7KJ3bqRkM8Y8ehWWtvsxfs9doMZcPFMuWrVlVuJi38RxzH7aX9Yi25dZy+sCCjpuphqaTAKpBC4xcd8JI34k4uZZcWSjN1kWuS06X/Lral7xDDDcR3cIC5H2/m3ih8ZSH9psuWgbjTAC0ImW03MsD9fxbA==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABAlzRJE/W
e8EBoGM2/tWE6bAAAAEAAAAAEAAABoAAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlz
dHAyNTYAAABBBNMzAI5Xqw/Uw5Kozbh43Ooq2lVDKdBWT3/vrQdl4FWxJDjYEp6bQQ1vTU
TU019faL+HLFi+IUtf7U3IG0FrbokAAACgGwUnZae9qFXTznzex1KWQlaT637iqW4YjAYy
D5JuqumJLhRjhdes2K9fP6P2lmzqe4nZX69LEIFJcJDiWTWUYpS6bu3tliOLZecAAgqrC8
s3pIr4ZFh/LZV7KVW6J/lyeOuUuDGDM9NkUfzzpAVx8crpl9ZOkezvGNYOwlA5dYyTguAm
R2xt7ToFC83D6JnNSYggJRtNFkbi4LKT6VcKPA==
-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNMzAI5Xqw/Uw5Kozbh43Ooq2lVDKdBWT3/vrQdl4FWxJDjYEp6bQQ1vTUTU019faL+HLFi+IUtf7U3IG0Frbok="
        set source built-in
    next
    edit "Fortinet_SSH_ECDSA384"
        set password ENC MCF7Fv3mmJuYjqCrRRxZMF4wH+3dBb9KMTnfDjf+2kxhhzi7Egy9+aCoYQ1B5lCJXOJhrqH/rspMAio/T6zhNZaal6oFpzsadzuK/UYBJWAsrp2bbXAGSovZJ1e2FwnKl2azKJg/tflOwNU3RVY6e8l2HrSsVVorCW2OZ519Jaxdj9RRSHT0dvrOURjWmzW5Ixi1/Q==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ecdsa-sha2-nistp384 AAAAE2VjZHNhLXNoYTItbmlzdHAzODQAAAAIbmlzdHAzODQAAABhBPqAXu0CIPuko8paNchMJ8u3RmjEwPWb3MHXJ3guSv+N6Zt92FlpLvBa983pCB8GC+4vhteAdWjKTtwpcK+E0k+M9jzZfIYytRvi/0KrRud+oMzwqmksI6XeB4zxuhbp7A=="
        set source built-in
    next
    edit "Fortinet_SSH_ECDSA521"
        set password ENC 7a2NVpIrOCDEZyreEPU0z/arX254D9er78jeFgixpJRIN+YiFAqEKVGEcYAnwp2shDoM1pdtG+onLCCQCTBV6uRUasHOFDeEraa/vZKBHpQFPjHzH3yOybxshIx8gZ4noX26AaLF7TjBFMSH7Q7dHB/4AHTQ9ZOoYhuzMMS7x5h6LDoZCxdWJZptVqmnOOyR42W5HQ==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBACyVRvDXu9RHlbvS3UrkxKZmpoB0bWrfTEqcEU9iJakBDR8dHM3scF7h82C/kRcRC6lo1fkaoLpn7jPgrsNVyfLqQD9+BdoJVjjLdrJfTRt/2O3tzrwqz+fNjAFgHuwQA/VthYEwKic1up0buyclzvy2c/UIUkgT3MAgBVitMkqhx/09A=="
        set source built-in
    next
    edit "Fortinet_SSH_ED25519"
        set password ENC DSmeIZ1b2p1NpsmphZ6/samhMchUsWOr34xmoy6XO/GqOJStf26aBfwHwosKv2+AzYJaORhNaGauCH/g9PTKNCfoQNIgBtkrIOYNEl7s2oIpxBft3SqpUaLAUg7Ue9787UT9WtorLeh626HljdlY+AIeSxRiEp/MjssoIV06h9WDeQw0aG4QNZhLSrbCthT94hwJCQ==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABCH3B0/Hj
Wjek8E18KRnMv/AAAAEAAAAAEAAAAzAAAAC3NzaC1lZDI1NTE5AAAAILYx4rYh12EF4Wrx
pZxmv4N7dxRxMtS74VUvJonmuw+mAAAAkIa815sDYoCDNPa9IsXs+rXYCkeGkELhxc8Dtv
q7dvdZWDWL5ujSxa1mN2qWhRlZ055ZGvUJ50mxKlWNopfa1e7N5aWyx4PZKy//DQEeKMM7
1RjVI2kBd74AMOss1YFpWLMN1GlO4uqnRtILMbnSXcXiKA7oXEbkZSJiUnSn6fgOt3fB+V
GwSVAv2bVzPke4rA==
-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILYx4rYh12EF4WrxpZxmv4N7dxRxMtS74VUvJonmuw+m"
        set source built-in
    next
end
config firewall ssh local-ca
    edit "Fortinet_SSH_CA"
        set password ENC uJ3Wzj+FzO2RpAhnJLeXtHK17/5qlSSulLxRgolAtPlJe3itzkskci6w4ekArBx3bUo30M9wLo/nI/iuV/xix4YfMUrDTXyImmFAWxWqJdwgArD9aTHikKzg9+VumJ6vdh18Vr/utYaM9VcsqB/tmKiiTejnQdH3NEj230E+setaxqtm3xiD1nzSXrFSybq+kv1U/A==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvE/LRci5AQjE0qvV9vuilvsZ3E3iQmYk8EA6F2BJ58HkVoFZnFdE7kiqqzoU4aUxLykfFeG0gp1NsiDRosdNlJ5oqUYyqhOLX+WfokyCq/pLD0mJBuYshGY4SCJ8QeeKX45Y/Ad+gvxsNpM+PKorSMCJzw953beMJk+JJf1BHwWcnlqRiTjM8sB2zW7TpIfddnVHoayANO4F9jacF8wpE1P5xAw0NDBroYc2kYQKJhC6hJLzGWZhteeRIvRQnhByvSOw7nL01FpZ3vlypocIgdp3hbYv+RQmTxjvML+/8PGPNVxPQy4I7o7soSsOc1xlVNqGnPBHbqJ35jP/QbqR9"
        set source built-in
    next
    edit "Fortinet_SSH_CA_Untrusted"
        set password ENC KgLqPW83COFXkQMMN/3ETg+CN2DtFii89QiT4vxcSVpU5QXdzsV+PPXRNDPjmycx7QTYnINNVARl6/hae4jZP9dSYc+OcGkMX2rWMjYRNn7og7YAMBRJVrgHLES2bitmAUM4q41RbRA3ESdPd8jBj2CX7EAJ9HMZF3/p3tiyYH5mDMqneclYekAZ9lv/+CK6XQ/fMw==
        set private-key "-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
"
        set public-key "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCOp6n4emqaLqzHouaSlNfvc6cX8XX4ORwI8K+JLxZLeQwBUnNAKYjPCrFk4HFtfHmgx6o5XqF7RFl5ipZh9lOw4Qtb5Lx7M7RaloxlAAqkHEXBBV2eurbxCTykxnQptjlSyDvjZSRDxVxlYzw1Kjf+opaCC+x5MkMM/pEXwtdfJe/hkkaWZ3VbqEWtlfDCqaWLLJlu1iUbmGD7944PLNAPuKZBiCMfNUeTQH0mOSp9JqvtM9FWlbD0ZGh37J8f/6D/Und/6DKBoO2KX/71L0a7A4LNO85Wm96kSn/0yZ8w4aVxaqDdPTLciItKMruEQNrCJoh48YM9h0OaZu/YLugT"
        set source built-in
    next
end
config firewall ssh setting
    set caname "Fortinet_SSH_CA"
    set untrusted-caname "Fortinet_SSH_CA_Untrusted"
    set hostkey-rsa2048 "Fortinet_SSH_RSA2048"
    set hostkey-dsa1024 "Fortinet_SSH_DSA1024"
    set hostkey-ecdsa256 "Fortinet_SSH_ECDSA256"
    set hostkey-ecdsa384 "Fortinet_SSH_ECDSA384"
    set hostkey-ecdsa521 "Fortinet_SSH_ECDSA521"
    set hostkey-ed25519 "Fortinet_SSH_ED25519"
end
config firewall profile-protocol-options
    edit "default"
        set comment "All default services."
        config http
            set ports 80
            unset options
            unset post-lang
        end
        config ftp
            set ports 21
            set options splice
        end
        config imap
            set ports 143
            set options fragmail
        end
        config mapi
            set ports 135
            set options fragmail
        end
        config pop3
            set ports 110
            set options fragmail
        end
        config smtp
            set ports 25
            set options fragmail splice
        end
        config nntp
            set ports 119
            set options splice
        end
        config ssh
            unset options
        end
        config dns
            set ports 53
        end
        config cifs
            set ports 445
            unset options
        end
    next
end
config firewall ssl-ssh-profile
    edit "deep-inspection"
        set comment "Read-only deep inspection profile."
        config https
            set ports 443
            set status deep-inspection
        end
        config ftps
            set ports 990
            set status deep-inspection
        end
        config imaps
            set ports 993
            set status deep-inspection
        end
        config pop3s
            set ports 995
            set status deep-inspection
        end
        config smtps
            set ports 465
            set status deep-inspection
        end
        config ssh
            set ports 22
            set status disable
        end
        config dot
            set status disable
        end
        config ssl-exempt
            edit 1
                set fortiguard-category 31
            next
            edit 2
                set fortiguard-category 33
            next
            edit 3
                set type wildcard-fqdn
                set wildcard-fqdn "adobe"
            next
            edit 4
                set type wildcard-fqdn
                set wildcard-fqdn "Adobe Login"
            next
            edit 5
                set type wildcard-fqdn
                set wildcard-fqdn "android"
            next
            edit 6
                set type wildcard-fqdn
                set wildcard-fqdn "apple"
            next
            edit 7
                set type wildcard-fqdn
                set wildcard-fqdn "appstore"
            next
            edit 8
                set type wildcard-fqdn
                set wildcard-fqdn "auth.gfx.ms"
            next
            edit 9
                set type wildcard-fqdn
                set wildcard-fqdn "citrix"
            next
            edit 10
                set type wildcard-fqdn
                set wildcard-fqdn "dropbox.com"
            next
            edit 11
                set type wildcard-fqdn
                set wildcard-fqdn "eease"
            next
            edit 12
                set type wildcard-fqdn
                set wildcard-fqdn "firefox update server"
            next
            edit 13
                set type wildcard-fqdn
                set wildcard-fqdn "fortinet"
            next
            edit 14
                set type wildcard-fqdn
                set wildcard-fqdn "googleapis.com"
            next
            edit 15
                set type wildcard-fqdn
                set wildcard-fqdn "google-drive"
            next
            edit 16
                set type wildcard-fqdn
                set wildcard-fqdn "google-play2"
            next
            edit 17
                set type wildcard-fqdn
                set wildcard-fqdn "google-play3"
            next
            edit 18
                set type wildcard-fqdn
                set wildcard-fqdn "Gotomeeting"
            next
            edit 19
                set type wildcard-fqdn
                set wildcard-fqdn "icloud"
            next
            edit 20
                set type wildcard-fqdn
                set wildcard-fqdn "itunes"
            next
            edit 21
                set type wildcard-fqdn
                set wildcard-fqdn "microsoft"
            next
            edit 22
                set type wildcard-fqdn
                set wildcard-fqdn "skype"
            next
            edit 23
                set type wildcard-fqdn
                set wildcard-fqdn "softwareupdate.vmware.com"
            next
            edit 24
                set type wildcard-fqdn
                set wildcard-fqdn "verisign"
            next
            edit 25
                set type wildcard-fqdn
                set wildcard-fqdn "Windows update 2"
            next
            edit 26
                set type wildcard-fqdn
                set wildcard-fqdn "live.com"
            next
            edit 27
                set type wildcard-fqdn
                set wildcard-fqdn "google-play"
            next
            edit 28
                set type wildcard-fqdn
                set wildcard-fqdn "update.microsoft.com"
            next
            edit 29
                set type wildcard-fqdn
                set wildcard-fqdn "swscan.apple.com"
            next
            edit 30
                set type wildcard-fqdn
                set wildcard-fqdn "autoupdate.opera.com"
            next
            edit 31
                set type wildcard-fqdn
                set wildcard-fqdn "cdn-apple"
            next
            edit 32
                set type wildcard-fqdn
                set wildcard-fqdn "mzstatic-apple"
            next
        end
    next
    edit "custom-deep-inspection"
        set comment "Customizable deep inspection profile."
        config https
            set ports 443
            set status deep-inspection
        end
        config ftps
            set ports 990
            set status deep-inspection
        end
        config imaps
            set ports 993
            set status deep-inspection
        end
        config pop3s
            set ports 995
            set status deep-inspection
        end
        config smtps
            set ports 465
            set status deep-inspection
        end
        config ssh
            set ports 22
            set status disable
        end
        config dot
            set status disable
        end
        config ssl-exempt
            edit 1
                set fortiguard-category 31
            next
            edit 2
                set fortiguard-category 33
            next
            edit 3
                set type wildcard-fqdn
                set wildcard-fqdn "adobe"
            next
            edit 4
                set type wildcard-fqdn
                set wildcard-fqdn "Adobe Login"
            next
            edit 5
                set type wildcard-fqdn
                set wildcard-fqdn "android"
            next
            edit 6
                set type wildcard-fqdn
                set wildcard-fqdn "apple"
            next
            edit 7
                set type wildcard-fqdn
                set wildcard-fqdn "appstore"
            next
            edit 8
                set type wildcard-fqdn
                set wildcard-fqdn "auth.gfx.ms"
            next
            edit 9
                set type wildcard-fqdn
                set wildcard-fqdn "citrix"
            next
            edit 10
                set type wildcard-fqdn
                set wildcard-fqdn "dropbox.com"
            next
            edit 11
                set type wildcard-fqdn
                set wildcard-fqdn "eease"
            next
            edit 12
                set type wildcard-fqdn
                set wildcard-fqdn "firefox update server"
            next
            edit 13
                set type wildcard-fqdn
                set wildcard-fqdn "fortinet"
            next
            edit 14
                set type wildcard-fqdn
                set wildcard-fqdn "googleapis.com"
            next
            edit 15
                set type wildcard-fqdn
                set wildcard-fqdn "google-drive"
            next
            edit 16
                set type wildcard-fqdn
                set wildcard-fqdn "google-play2"
            next
            edit 17
                set type wildcard-fqdn
                set wildcard-fqdn "google-play3"
            next
            edit 18
                set type wildcard-fqdn
                set wildcard-fqdn "Gotomeeting"
            next
            edit 19
                set type wildcard-fqdn
                set wildcard-fqdn "icloud"
            next
            edit 20
                set type wildcard-fqdn
                set wildcard-fqdn "itunes"
            next
            edit 21
                set type wildcard-fqdn
                set wildcard-fqdn "microsoft"
            next
            edit 22
                set type wildcard-fqdn
                set wildcard-fqdn "skype"
            next
            edit 23
                set type wildcard-fqdn
                set wildcard-fqdn "softwareupdate.vmware.com"
            next
            edit 24
                set type wildcard-fqdn
                set wildcard-fqdn "verisign"
            next
            edit 25
                set type wildcard-fqdn
                set wildcard-fqdn "Windows update 2"
            next
            edit 26
                set type wildcard-fqdn
                set wildcard-fqdn "live.com"
            next
            edit 27
                set type wildcard-fqdn
                set wildcard-fqdn "google-play"
            next
            edit 28
                set type wildcard-fqdn
                set wildcard-fqdn "update.microsoft.com"
            next
            edit 29
                set type wildcard-fqdn
                set wildcard-fqdn "swscan.apple.com"
            next
            edit 30
                set type wildcard-fqdn
                set wildcard-fqdn "autoupdate.opera.com"
            next
            edit 31
                set type wildcard-fqdn
                set wildcard-fqdn "cdn-apple"
            next
            edit 32
                set type wildcard-fqdn
                set wildcard-fqdn "mzstatic-apple"
            next
        end
    next
    edit "no-inspection"
        set comment "Read-only profile that does no inspection."
        config https
            set status disable
        end
        config ftps
            set status disable
        end
        config imaps
            set status disable
        end
        config pop3s
            set status disable
        end
        config smtps
            set status disable
        end
        config ssh
            set ports 22
            set status disable
        end
        config dot
            set status disable
        end
    next
    edit "certificate-inspection"
        set comment "Read-only SSL handshake inspection profile."
        config https
            set ports 443
            set status certificate-inspection
        end
        config ftps
            set status disable
        end
        config imaps
            set status disable
        end
        config pop3s
            set status disable
        end
        config smtps
            set status disable
        end
        config ssh
            set ports 22
            set status disable
        end
        config dot
            set status disable
        end
    next
end
config waf profile
    edit "default"
        config signature
            config main-class 100000000
                set action block
                set severity high
            end
            config main-class 20000000
            end
            config main-class 30000000
                set status enable
                set action block
                set severity high
            end
            config main-class 40000000
            end
            config main-class 50000000
                set status enable
                set action block
                set severity high
            end
            config main-class 60000000
            end
            config main-class 70000000
                set status enable
                set action block
                set severity high
            end
            config main-class 80000000
                set status enable
                set severity low
            end
            config main-class 110000000
                set status enable
                set severity high
            end
            config main-class 90000000
                set status enable
                set action block
                set severity high
            end
            set disabled-signature 80080005 80200001 60030001 60120001 80080003 90410001 90410002
        end
        config constraint
            config header-length
                set status enable
                set log enable
                set severity low
            end
            config content-length
                set status enable
                set log enable
                set severity low
            end
            config param-length
                set status enable
                set log enable
                set severity low
            end
            config line-length
                set status enable
                set log enable
                set severity low
            end
            config url-param-length
                set status enable
                set log enable
                set severity low
            end
            config version
                set log enable
            end
            config method
                set action block
                set log enable
            end
            config hostname
                set action block
                set log enable
            end
            config malformed
                set log enable
            end
            config max-cookie
                set status enable
                set log enable
                set severity low
            end
            config max-header-line
                set status enable
                set log enable
                set severity low
            end
            config max-url-param
                set status enable
                set log enable
                set severity low
            end
            config max-range-segment
                set status enable
                set log enable
                set severity high
            end
        end
    next
end
config firewall policy
    edit 1
        set name "All"
        set uuid 261242aa-7813-51ee-f42b-0c69abe4bae0
        set srcintf "port1"
        set dstintf "DIA-Out"
        set action accept
        set srcaddr "all"
        set dstaddr "all"
        set schedule "always"
        set service "ALL"
        set logtraffic all
        set nat enable
    next
    edit 2
        set name "VPN traffic to Hub"
        set uuid 96bb673e-7818-51ee-6a0a-1df430546055
        set srcintf "VPN1" "VPN2"
        set dstintf "HUB1-Lo" "port1"
        set action accept
        set srcaddr "all"
        set dstaddr "all"
        set schedule "always"
        set service "PING"
        set logtraffic all
    next
    edit 6
        set name "Hub to VPN"
        set uuid 26361142-a0e2-51ee-ca57-2dae9524b24b
        set srcintf "port1"
        set dstintf "VPN1" "VPN2"
        set action accept
        set srcaddr "all"
        set dstaddr "all"
        set schedule "always"
        set service "PING"
        set logtraffic all
        set comments " (Reverse of VPN traffic to Hub)"
    next
    edit 3
        set name "VPN Traffic between branches"
        set uuid 470eae40-78b2-51ee-7114-456d89a3a835
        set srcintf "VPN1" "VPN2"
        set dstintf "VPN1" "VPN2"
        set action accept
        set srcaddr "all"
        set dstaddr "all"
        set schedule "always"
        set service "ALL"
        set logtraffic all
    next
    edit 4
        set name "vpn_To-HUB2_local_0"
        set uuid 6839715a-821b-51ee-253f-817a152137d1
        set srcintf "port1"
        set dstintf "To-HUB2" "VPN1" "VPN2"
        set action accept
        set srcaddr "To-HUB2_local"
        set dstaddr "To-HUB2_remote"
        set schedule "always"
        set service "ALL"
        set logtraffic all
        set comments "VPN: To-HUB2 (Created by VPN wizard)"
    next
    edit 5
        set name "vpn_To-HUB2_remote_0"
        set uuid 68796a76-821b-51ee-fae4-a2a690ca1452
        set srcintf "To-HUB2"
        set dstintf "port1"
        set action accept
        set srcaddr "To-HUB2_remote"
        set dstaddr "To-HUB2_local"
        set schedule "always"
        set service "ALL"
        set logtraffic all
        set comments "VPN: To-HUB2 (Created by VPN wizard)"
    next
end
config switch-controller security-policy 802-1X
    edit "802-1X-policy-default"
        set user-group "SSO_Guest_Users"
        set mac-auth-bypass disable
        set open-auth disable
        set eap-passthru enable
        set eap-auto-untagged-vlans enable
        set guest-vlan disable
        set auth-fail-vlan disable
        set framevid-apply enable
        set radius-timeout-overwrite disable
        set authserver-timeout-vlan disable
    next
end
config switch-controller security-policy local-access
    edit "default"
        set mgmt-allowaccess https ping ssh
        set internal-allowaccess https ping ssh
    next
end
config switch-controller lldp-profile
    edit "default"
        set med-tlvs inventory-management network-policy location-identification
        set auto-isl disable
        config med-network-policy
            edit "voice"
            next
            edit "voice-signaling"
            next
            edit "guest-voice"
            next
            edit "guest-voice-signaling"
            next
            edit "softphone-voice"
            next
            edit "video-conferencing"
            next
            edit "streaming-video"
            next
            edit "video-signaling"
            next
        end
        config med-location-service
            edit "coordinates"
            next
            edit "address-civic"
            next
            edit "elin-number"
            next
        end
    next
    edit "default-auto-isl"
    next
    edit "default-auto-mclag-icl"
        set auto-mclag-icl enable
    next
end
config switch-controller qos dot1p-map
    edit "voice-dot1p"
        set priority-0 queue-4
        set priority-1 queue-4
        set priority-2 queue-3
        set priority-3 queue-2
        set priority-4 queue-3
        set priority-5 queue-1
        set priority-6 queue-2
        set priority-7 queue-2
    next
end
config switch-controller qos ip-dscp-map
    edit "voice-dscp"
        config map
            edit "1"
                set cos-queue 1
                set value 46
            next
            edit "2"
                set cos-queue 2
                set value 24,26,48,56
            next
            edit "5"
                set cos-queue 3
                set value 34
            next
        end
    next
end
config switch-controller qos queue-policy
    edit "default"
        set schedule round-robin
        set rate-by kbps
        config cos-queue
            edit "queue-0"
            next
            edit "queue-1"
            next
            edit "queue-2"
            next
            edit "queue-3"
            next
            edit "queue-4"
            next
            edit "queue-5"
            next
            edit "queue-6"
            next
            edit "queue-7"
            next
        end
    next
    edit "voice-egress"
        set schedule weighted
        set rate-by kbps
        config cos-queue
            edit "queue-0"
            next
            edit "queue-1"
                set weight 0
            next
            edit "queue-2"
                set weight 6
            next
            edit "queue-3"
                set weight 37
            next
            edit "queue-4"
                set weight 12
            next
            edit "queue-5"
            next
            edit "queue-6"
            next
            edit "queue-7"
            next
        end
    next
end
config switch-controller qos qos-policy
    edit "default"
    next
    edit "voice-qos"
        set trust-dot1p-map "voice-dot1p"
        set trust-ip-dscp-map "voice-dscp"
        set queue-policy "voice-egress"
    next
end
config switch-controller storm-control-policy
    edit "default"
        set description "default storm control on all port"
    next
    edit "auto-config"
        set description "storm control policy for fortilink-isl-icl port"
        set storm-control-mode disabled
    next
end
config switch-controller auto-config policy
    edit "pse"
    next
    edit "default"
    next
    edit "default-icl"
        set poe-status disable
        set igmp-flood-report enable
        set igmp-flood-traffic enable
    next
end
config switch-controller initial-config template
    edit "_default"
        set vlanid 1
    next
    edit "quarantine"
        set vlanid 4093
        set dhcp-server enable
    next
    edit "rspan"
        set vlanid 4092
        set dhcp-server enable
    next
    edit "voice"
        set vlanid 4091
    next
    edit "video"
        set vlanid 4090
    next
    edit "onboarding"
        set vlanid 4089
    next
    edit "nac_segment"
        set vlanid 4088
        set dhcp-server enable
    next
end
config switch-controller switch-profile
    edit "default"
    next
end
config switch-controller ptp settings
    set mode disable
end
config switch-controller ptp policy
    edit "default"
        set status enable
    next
end
config switch-controller remote-log
    edit "syslogd"
    next
    edit "syslogd2"
    next
end
config wireless-controller setting
    set darrp-optimize-schedules "default-darrp-optimize"
end
config wireless-controller wids-profile
    edit "default"
        set comment "Default WIDS profile."
        set ap-scan enable
        set wireless-bridge enable
        set deauth-broadcast enable
        set null-ssid-probe-resp enable
        set long-duration-attack enable
        set invalid-mac-oui enable
        set weak-wep-iv enable
        set auth-frame-flood enable
        set assoc-frame-flood enable
        set spoofed-deauth enable
        set asleap-attack enable
        set eapol-start-flood enable
        set eapol-logoff-flood enable
        set eapol-succ-flood enable
        set eapol-fail-flood enable
        set eapol-pre-succ-flood enable
        set eapol-pre-fail-flood enable
    next
    edit "default-wids-apscan-enabled"
        set ap-scan enable
    next
end
config wireless-controller ble-profile
    edit "fortiap-discovery"
        set advertising ibeacon eddystone-uid eddystone-url
        set ibeacon-uuid "wtp-uuid"
    next
end
config router prefix-list
    edit "all_prefixes"
        config rule
            edit 1
                set prefix any
                unset ge
                unset le
            next
        end
    next
end
config router rip
    config redistribute "connected"
    end
    config redistribute "static"
    end
    config redistribute "ospf"
    end
    config redistribute "bgp"
    end
    config redistribute "isis"
    end
end
config router ripng
    config redistribute "connected"
    end
    config redistribute "static"
    end
    config redistribute "ospf"
    end
    config redistribute "bgp"
    end
    config redistribute "isis"
    end
end
config router static
    edit 3
        set dst 12.12.12.12 255.255.255.255
        set gateway 11.11.11.254
        set device "port3"
    next
    edit 4
        set dst 13.13.13.13 255.255.255.255
        set gateway 11.11.11.254
        set device "port3"
    next
    edit 5
        set dst 14.14.14.14 255.255.255.255
        set gateway 11.11.11.254
        set device "port3"
    next
    edit 6
        set dst 2.2.2.2 255.255.255.255
        set gateway 1.1.1.254
        set device "port2"
        set comment "Route to Hub2"
    next
    edit 7
        set dst 3.3.3.3 255.255.255.255
        set gateway 1.1.1.254
        set device "port2"
    next
    edit 8
        set dst 4.4.4.4 255.255.255.255
        set gateway 1.1.1.254
        set device "port2"
    next
    edit 9
        set distance 1
        set sdwan-zone "DIA-Out"
    next
    edit 10
        set device "To-HUB2"
        set comment "VPN: To-HUB2 (Created by VPN wizard)"
        set dstaddr "To-HUB2_remote"
    next
    edit 11
        set distance 254
        set comment "VPN: To-HUB2 (Created by VPN wizard)"
        set blackhole enable
        set dstaddr "To-HUB2_remote"
        set vrf 0
    next
end
config router ospf
    config redistribute "connected"
    end
    config redistribute "static"
    end
    config redistribute "rip"
    end
    config redistribute "bgp"
    end
    config redistribute "isis"
    end
end
config router ospf6
    config redistribute "connected"
    end
    config redistribute "static"
    end
    config redistribute "rip"
    end
    config redistribute "bgp"
    end
    config redistribute "isis"
    end
end
config router bgp
    set as 65000
    set router-id 172.29.100.253
    set ibgp-multipath enable
    set additional-path enable
    set graceful-restart enable
    set additional-path-select 255
    config neighbor-group
        edit "VPN1"
            set capability-graceful-restart enable
            set link-down-failover enable
            set next-hop-self enable
            set soft-reconfiguration enable
            set remote-as 65000
            set additional-path send
            set route-reflector-client enable
        next
        edit "VPN2"
            set capability-graceful-restart enable
            set link-down-failover enable
            set next-hop-self enable
            set soft-reconfiguration enable
            set remote-as 65000
            set additional-path send
            set route-reflector-client enable
        next
    end
    config neighbor-range
        edit 1
            set prefix 172.31.0.0 255.255.224.0
            set neighbor-group "VPN1"
        next
        edit 2
            set prefix 172.31.32.0 255.255.224.0
            set neighbor-group "VPN2"
        next
    end
    config network
        edit 1
            set prefix 172.31.0.0 255.255.224.0
        next
        edit 2
            set prefix 172.31.32.0 255.255.224.0
        next
    end
    config network6
        edit 1
            set prefix6 ::/128
        next
    end
    config redistribute "connected"
        set status enable
    end
    config redistribute "rip"
    end
    config redistribute "ospf"
    end
    config redistribute "static"
    end
    config redistribute "isis"
    end
    config redistribute6 "connected"
    end
    config redistribute6 "rip"
    end
    config redistribute6 "ospf"
    end
    config redistribute6 "static"
    end
    config redistribute6 "isis"
    end
end
config router isis
    config redistribute "connected"
    end
    config redistribute "rip"
    end
    config redistribute "ospf"
    end
    config redistribute "bgp"
    end
    config redistribute "static"
    end
    config redistribute6 "connected"
    end
    config redistribute6 "rip"
    end
    config redistribute6 "ospf"
    end
    config redistribute6 "bgp"
    end
    config redistribute6 "static"
    end
end
config router multicast
end