set deviceconfig system ip-address 10.10.72.2
set deviceconfig system netmask 255.255.248.0
set deviceconfig system update-server updates.paloaltonetworks.com
set deviceconfig system update-schedule threats recurring weekly day-of-week wednesday
set deviceconfig system update-schedule threats recurring weekly at 01:02
set deviceconfig system update-schedule threats recurring weekly action download-only
set deviceconfig system timezone US/Pacific
set deviceconfig system service disable-telnet yes
set deviceconfig system service disable-http yes
set deviceconfig system hostname FW10-ORD1-11111-2222222
set deviceconfig system default-gateway 10.10.72.1
set deviceconfig system ntp-servers primary-ntp-server ntp-server-address 1.1.1.1
set deviceconfig system ntp-servers primary-ntp-server authentication-type none
set deviceconfig system ntp-servers secondary-ntp-server ntp-server-address 1.1.1.2
set deviceconfig system ntp-servers secondary-ntp-server authentication-type none
set deviceconfig system panorama local-panorama panorama-server 10.17.122.138
set deviceconfig system route service panorama source interface management
set deviceconfig system route service panorama source address 10.10.72.224
set deviceconfig system route service tacplus source interface management
set deviceconfig system route service tacplus source address 10.10.72.224
set deviceconfig system authentication-profile RACKACS
set deviceconfig setting config rematch yes
set deviceconfig setting management hostname-type-in-syslog FQDN
set deviceconfig high-availability interface ha1 ip-address 10.2.2.1
set deviceconfig high-availability interface ha1 netmask 255.255.255.252
set deviceconfig high-availability interface ha1 port ha1-a
set deviceconfig high-availability interface ha1 link-speed auto
set deviceconfig high-availability interface ha1 link-duplex auto
set deviceconfig high-availability interface ha1 monitor-hold-time 3000
set deviceconfig high-availability interface ha1-backup ip-address 10.2.2.5
set deviceconfig high-availability interface ha1-backup netmask 255.255.255.252
set deviceconfig high-availability interface ha1-backup port ha1-b
set deviceconfig high-availability interface ha1-backup link-speed auto
set deviceconfig high-availability interface ha1-backup link-duplex auto
set deviceconfig high-availability interface ha2 ip-address 10.2.2.9
set deviceconfig high-availability interface ha2 netmask 255.255.255.252
set deviceconfig high-availability interface ha2 port hsci
set deviceconfig high-availability group group-id 1
set deviceconfig high-availability group peer-ip 10.2.2.2
set deviceconfig high-availability group peer-ip-backup 10.2.2.6
set deviceconfig high-availability group configuration-synchronization enabled yes
set deviceconfig high-availability group mode active-passive passive-link-state auto
set deviceconfig high-availability group mode active-passive monitor-fail-hold-down-time 1
set deviceconfig high-availability group state-synchronization enabled yes
set deviceconfig high-availability group state-synchronization transport ethernet
set deviceconfig high-availability group state-synchronization ha2-keep-alive enabled yes
set deviceconfig high-availability group state-synchronization ha2-keep-alive threshold 10000
set deviceconfig high-availability group state-synchronization ha2-keep-alive action log-only
set deviceconfig high-availability group election-option device-priority 50
set deviceconfig high-availability group election-option preemptive no
set deviceconfig high-availability group election-option timers recommended
set deviceconfig high-availability group monitoring link-monitoring link-group ALL-LINKS interface [ ethernet1/1 ethernet1/2 ]
set deviceconfig high-availability group monitoring link-monitoring link-group ALL-LINKS enabled yes
set deviceconfig high-availability group monitoring link-monitoring link-group ALL-LINKS failure-condition any
set deviceconfig high-availability enabled yes
set network interface ethernet ethernet1/1 layer3 lldp enable no
set network interface ethernet ethernet1/1 layer3 ndp-proxy enabled no
set network interface ethernet ethernet1/2 layer3 lldp enable no
set network interface ethernet ethernet1/2 layer3 ndp-proxy enabled no
set network interface ethernet Ethernet1/13 link-speed auto
set network interface ethernet Ethernet1/13 link-duplex auto
set network interface ethernet Ethernet1/13 link-state auto
set network interface ethernet Ethernet1/13 layer3 untagged-sub-interface no
set network interface ethernet Ethernet1/13 layer3 ip 198.61.146.132/29
set network interface ethernet Ethernet1/13 layer3 adjust-tcp-mss enable no
set network interface ethernet Tunnel1 link-speed auto
set network interface ethernet Tunnel1 link-duplex auto
set network interface ethernet Tunnel1 link-state auto
set network interface ethernet Tunnel1 layer3 untagged-sub-interface no
set network interface ethernet Tunnel1 layer3 ip 169.254.138.90/30
set network interface ethernet Tunnel1 layer3 adjust-tcp-mss enable no
set network interface ethernet Tunnel2 link-speed auto
set network interface ethernet Tunnel2 link-duplex auto
set network interface ethernet Tunnel2 link-state auto
set network interface ethernet Tunnel2 layer3 untagged-sub-interface no
set network interface ethernet Tunnel2 layer3 ip 169.254.52.174/30
set network interface ethernet Tunnel2 layer3 adjust-tcp-mss enable no
set network interface ethernet Tunnel3 link-speed auto
set network interface ethernet Tunnel3 link-duplex auto
set network interface ethernet Tunnel3 link-state auto
set network interface ethernet Tunnel3 layer3 untagged-sub-interface no
set network interface ethernet Tunnel3 layer3 ip 169.254.100.10/30
set network interface ethernet Tunnel3 layer3 adjust-tcp-mss enable no
set network interface ethernet Ethernet1/14 link-speed auto
set network interface ethernet Ethernet1/14 link-duplex auto
set network interface ethernet Ethernet1/14 link-state auto
set network interface ethernet Ethernet1/14 layer3 untagged-sub-interface no
set network interface ethernet Ethernet1/14 layer3 adjust-tcp-mss enable no
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.201 tag 201
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.201 adjust-tcp-mss enable no
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.201 ip 172.21.0.1/24
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.202 tag 202
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.202 adjust-tcp-mss enable no
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.202 ip 172.21.4.1/24
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.203 tag 203
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.203 adjust-tcp-mss enable no
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.203 ip 172.21.5.1/24
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.204 tag 204
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.204 adjust-tcp-mss enable no
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.204 ip 192.168.255.5/29
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.205 tag 205
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.205 adjust-tcp-mss enable no
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.205 ip 192.168.255.13/29
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.923 tag 923
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.923 adjust-tcp-mss enable no
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.923 ip 192.168.109.1/24
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.927 tag 927
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.927 adjust-tcp-mss enable no
set network interface ethernet Ethernet1/14 layer3 units Ethernet1/14.927 ip 192.168.106.1/24
set network interface vlan
set network interface loopback
set network interface tunnel units tunnel.999204 comment VPNMAP-204
set network interface tunnel units tunnel.999209 comment VPNMAP-209
set network interface tunnel units tunnel.999210 comment VPNMAP-210
set network interface tunnel units tunnel.999211 comment VPNMAP-211
set network interface tunnel units tunnel.999213 comment VPNMAP-213
set network interface tunnel units tunnel.999214 comment VPNMAP-214
set network interface tunnel units tunnel.999215 comment VPNMAP-215
set network interface tunnel units tunnel.999216 comment VPNMAP-216
set network interface tunnel units tunnel.999217 comment VPNMAP-217
set network interface tunnel units tunnel.999218 comment VPNMAP-218
set network interface tunnel units tunnel.999219 comment VPNMAP-219
set network interface tunnel units tunnel.999220 comment VPNMAP-220
set network interface tunnel units tunnel.999221 comment VPNMAP-221
set network interface tunnel units tunnel.999225 comment VPNMAP-225
set network interface tunnel units tunnel.999227 comment VPNMAP-227
set network interface tunnel units tunnel.999228 comment VPNMAP-228
set network interface tunnel units tunnel.999229 comment VPNMAP-229
set network interface tunnel units tunnel.999230 comment VPNMAP-230
set network profiles monitor-profile default interval 3
set network profiles monitor-profile default threshold 5
set network profiles monitor-profile default action wait-recover
set network ike crypto-profiles global-protect-app-crypto-profiles default encryption aes-128-cbc
set network ike crypto-profiles global-protect-app-crypto-profiles default authentication sha1
set network ike crypto-profiles ike-crypto-profiles default encryption [ aes-128-cbc 3des ]
set network ike crypto-profiles ike-crypto-profiles default hash sha1
set network ike crypto-profiles ike-crypto-profiles default dh-group group2
set network ike crypto-profiles ike-crypto-profiles default lifetime hours 8
set network ike crypto-profiles ike-crypto-profiles Suite-B-GCM-128 encryption aes-128-cbc
set network ike crypto-profiles ike-crypto-profiles Suite-B-GCM-128 hash sha256
set network ike crypto-profiles ike-crypto-profiles Suite-B-GCM-128 dh-group group19
set network ike crypto-profiles ike-crypto-profiles Suite-B-GCM-128 lifetime hours 8
set network ike crypto-profiles ike-crypto-profiles Suite-B-GCM-256 encryption aes-256-cbc
set network ike crypto-profiles ike-crypto-profiles Suite-B-GCM-256 hash sha384
set network ike crypto-profiles ike-crypto-profiles Suite-B-GCM-256 dh-group group20
set network ike crypto-profiles ike-crypto-profiles Suite-B-GCM-256 lifetime hours 8
set network ike crypto-profiles ike-crypto-profiles ikev2-100 encryption aes256
set network ike crypto-profiles ike-crypto-profiles ikev2-100 hash [ sha512 sha384 sha256 sha1 ]
set network ike crypto-profiles ike-crypto-profiles ikev2-100 dh-group [ group14 group5 group2 ]
set network ike crypto-profiles ike-crypto-profiles ikev2-200 hash null
set network ike crypto-profiles ike-crypto-profiles ikev2-200 dh-group [ group21 group20 group19 ]
set network ike crypto-profiles ike-crypto-profiles ikev2-300 encryption aes256
set network ike crypto-profiles ike-crypto-profiles ikev2-300 hash [ sha512 sha384 sha256 sha1 ]
set network ike crypto-profiles ike-crypto-profiles ikev2-300 dh-group [ group14 group2 ]
set network ike crypto-profiles ipsec-crypto-profiles AES-SHA-VPNMAP-216 esp encryption aes128
set network ike crypto-profiles ipsec-crypto-profiles AES-SHA-VPNMAP-216 esp authentication sha1
set network ike crypto-profiles ipsec-crypto-profiles AES-SHA-VPNMAP-216 dh-group no-pfs
set network ike crypto-profiles ipsec-crypto-profiles AES-SHA-VPNMAP-216 lifetime seconds 3600
set network ike crypto-profiles ipsec-crypto-profiles AES-SHA-VPNMAP-219 esp encryption aes128
set network ike crypto-profiles ipsec-crypto-profiles AES-SHA-VPNMAP-219 esp authentication sha1
set network ike crypto-profiles ipsec-crypto-profiles AES-SHA-VPNMAP-219 dh-group group2
set network ike crypto-profiles ipsec-crypto-profiles AES-SHA-VPNMAP-219 lifetime seconds 3600
set network ike crypto-profiles ipsec-crypto-profiles AES256-SHA-VPNMAP-204 esp encryption aes256
set network ike crypto-profiles ipsec-crypto-profiles AES256-SHA-VPNMAP-204 esp authentication sha1
set network ike crypto-profiles ipsec-crypto-profiles AES256-SHA-VPNMAP-204 dh-group no-pfs
set network ike crypto-profiles ipsec-crypto-profiles AES256-SHA-VPNMAP-215 esp encryption aes256
set network ike crypto-profiles ipsec-crypto-profiles AES256-SHA-VPNMAP-215 esp authentication sha1
set network ike crypto-profiles ipsec-crypto-profiles AES256-SHA-VPNMAP-215 dh-group group2
set network ike crypto-profiles ipsec-crypto-profiles default esp encryption [ aes-128-cbc 3des ]
set network ike crypto-profiles ipsec-crypto-profiles default esp authentication sha1
set network ike crypto-profiles ipsec-crypto-profiles default dh-group group2
set network ike crypto-profiles ipsec-crypto-profiles default lifetime hours 1
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-209 esp encryption [ aes256 aes192 aes128 ]
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-209 esp authentication [ sha512 sha384 sha256 sha1 ]
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-209 dh-group no-pfs
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-209 lifetime seconds 27000
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-209 lifesize tb 65535
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-210 esp encryption [ aes256 aes192 aes128 ]
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-210 esp authentication [ sha512 sha384 sha256 sha1 ]
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-210 dh-group group5
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-210 lifesize kb 27000
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-214 esp encryption [ aes256 aes192 aes128 ]
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-214 esp authentication [ sha512 sha384 sha256 sha1 ]
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-214 dh-group no-pfs
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-214 lifesize kb 27000
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-218 esp encryption [ aes256 aes192 aes128 ]
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-218 esp authentication [ sha512 sha384 sha256 sha1 ]
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-218 dh-group group2
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-218 lifesize kb 27000
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-227 esp encryption [ aes256 aes192 aes128 ]
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-227 esp authentication [ sha512 sha384 sha256 sha1 ]
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-227 dh-group no-pfs
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-227 lifetime seconds 27000
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-228 esp encryption [ aes256 aes192 aes128 ]
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-228 esp authentication [ sha512 sha384 sha256 sha1 ]
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-228 dh-group group2
set network ike crypto-profiles ipsec-crypto-profiles IKEV2-IPSEC-PROPOSAL-VPNMAP-228 lifetime seconds 27000
set network ike crypto-profiles ipsec-crypto-profiles Suite-B-GCM-128 esp encryption aes-128-gcm
set network ike crypto-profiles ipsec-crypto-profiles Suite-B-GCM-128 esp authentication none
set network ike crypto-profiles ipsec-crypto-profiles Suite-B-GCM-128 dh-group group19
set network ike crypto-profiles ipsec-crypto-profiles Suite-B-GCM-128 lifetime hours 1
set network ike crypto-profiles ipsec-crypto-profiles Suite-B-GCM-256 esp encryption aes-256-gcm
set network ike crypto-profiles ipsec-crypto-profiles Suite-B-GCM-256 esp authentication none
set network ike crypto-profiles ipsec-crypto-profiles Suite-B-GCM-256 dh-group group20
set network ike crypto-profiles ipsec-crypto-profiles Suite-B-GCM-256 lifetime hours 1
set network ike gateway VPNMAP-204 protocol ikev1 dpd enable yes
set network ike gateway VPNMAP-204 protocol ikev1 dpd interval 2
set network ike gateway VPNMAP-204 protocol ikev1 dpd retry 2
set network ike gateway VPNMAP-204 protocol ikev1 exchange-mode auto
set network ike gateway VPNMAP-204 local-address interface Ethernet1/13
set network ike gateway VPNMAP-204 local-address ip 198.61.146.132/29
set network ike gateway VPNMAP-204 authentication pre-shared-key key XXX
set network ike gateway VPNMAP-204 protocol-common nat-traversal enable yes
set network ike gateway VPNMAP-204 protocol-common fragmentation enable no
set network ike gateway VPNMAP-204 peer-address ip 217.20.186.77
set network ike gateway VPNMAP-209 protocol ikev1 dpd enable yes
set network ike gateway VPNMAP-209 protocol ikev1 dpd interval 2
set network ike gateway VPNMAP-209 protocol ikev1 dpd retry 2
set network ike gateway VPNMAP-209 protocol ikev1 exchange-mode auto
set network ike gateway VPNMAP-209 local-address interface Ethernet1/13
set network ike gateway VPNMAP-209 local-address ip 198.61.146.132/29
set network ike gateway VPNMAP-209 authentication pre-shared-key key remote-authentication
set network ike gateway VPNMAP-209 protocol-common nat-traversal enable yes
set network ike gateway VPNMAP-209 protocol-common fragmentation enable no
set network ike gateway VPNMAP-209 peer-address ip 40.84.1.151
set network ike gateway VPNMAP-210 protocol ikev1 dpd enable yes
set network ike gateway VPNMAP-210 protocol ikev1 dpd interval 2
set network ike gateway VPNMAP-210 protocol ikev1 dpd retry 2
set network ike gateway VPNMAP-210 protocol ikev1 exchange-mode auto
set network ike gateway VPNMAP-210 local-address interface Ethernet1/13
set network ike gateway VPNMAP-210 local-address ip 198.61.146.132/29
set network ike gateway VPNMAP-210 authentication pre-shared-key key remote-authentication
set network ike gateway VPNMAP-210 protocol-common nat-traversal enable yes
set network ike gateway VPNMAP-210 protocol-common fragmentation enable no
set network ike gateway VPNMAP-210 peer-address ip 65.52.3.107
set network ike gateway VPNMAP-211 protocol ikev1 dpd enable yes
set network ike gateway VPNMAP-211 protocol ikev1 dpd interval 2
set network ike gateway VPNMAP-211 protocol ikev1 dpd retry 2
set network ike gateway VPNMAP-211 protocol ikev1 exchange-mode auto
set network ike gateway VPNMAP-211 local-address interface Ethernet1/13
set network ike gateway VPNMAP-211 local-address ip 198.61.146.132/29
set network ike gateway VPNMAP-211 authentication pre-shared-key key XXXX
set network ike gateway VPNMAP-211 protocol-common nat-traversal enable yes
set network ike gateway VPNMAP-211 protocol-common fragmentation enable no
set network ike gateway VPNMAP-211 peer-address ip 159.240.9.49
set network ike gateway VPNMAP-213 protocol ikev1 dpd enable yes
set network ike gateway VPNMAP-213 protocol ikev1 dpd interval 2
set network ike gateway VPNMAP-213 protocol ikev1 dpd retry 2
set network ike gateway VPNMAP-213 protocol ikev1 exchange-mode auto
set network ike gateway VPNMAP-213 local-address interface Ethernet1/13
set network ike gateway VPNMAP-213 local-address ip 198.61.146.132/29
set network ike gateway VPNMAP-213 authentication pre-shared-key key XXXX
set network ike gateway VPNMAP-213 protocol-common nat-traversal enable yes
set network ike gateway VPNMAP-213 protocol-common fragmentation enable no
set network ike gateway VPNMAP-213 peer-address ip 63.247.8.1
set network ike gateway VPNMAP-214 protocol ikev1 dpd enable yes
set network ike gateway VPNMAP-214 protocol ikev1 dpd interval 2
set network ike gateway VPNMAP-214 protocol ikev1 dpd retry 2
set network ike gateway VPNMAP-214 protocol ikev1 exchange-mode auto
set network ike gateway VPNMAP-214 local-address interface Ethernet1/13
set network ike gateway VPNMAP-214 local-address ip 198.61.146.132/29
set network ike gateway VPNMAP-214 authentication pre-shared-key key remote-authentication
set network ike gateway VPNMAP-214 protocol-common nat-traversal enable yes
set network ike gateway VPNMAP-214 protocol-common fragmentation enable no
set network ike gateway VPNMAP-214 peer-address ip 23.101.170.55
set network ike gateway VPNMAP-215 protocol ikev1 dpd enable yes
set network ike gateway VPNMAP-215 protocol ikev1 dpd interval 2
set network ike gateway VPNMAP-215 protocol ikev1 dpd retry 2
set network ike gateway VPNMAP-215 protocol ikev1 exchange-mode auto
set network ike gateway VPNMAP-215 local-address interface Ethernet1/13
set network ike gateway VPNMAP-215 local-address ip 198.61.146.132/29
set network ike gateway VPNMAP-215 authentication pre-shared-key key XXXX
set network ike gateway VPNMAP-215 protocol-common nat-traversal enable yes
set network ike gateway VPNMAP-215 protocol-common fragmentation enable no
set network ike gateway VPNMAP-215 peer-address ip 217.20.186.77
set network ike gateway VPNMAP-216 protocol ikev1 dpd enable yes
set network ike gateway VPNMAP-216 protocol ikev1 dpd interval 2
set network ike gateway VPNMAP-216 protocol ikev1 dpd retry 2
set network ike gateway VPNMAP-216 protocol ikev1 exchange-mode auto
set network ike gateway VPNMAP-216 local-address interface Ethernet1/13
set network ike gateway VPNMAP-216 local-address ip 198.61.146.132/29
set network ike gateway VPNMAP-216 authentication pre-shared-key key XXXX
set network ike gateway VPNMAP-216 protocol-common nat-traversal enable yes
set network ike gateway VPNMAP-216 protocol-common fragmentation enable no
set network ike gateway VPNMAP-216 peer-address ip 18.217.16.254
set network ike gateway VPNMAP-217 protocol ikev1 dpd enable yes
set network ike gateway VPNMAP-217 protocol ikev1 dpd interval 2
set network ike gateway VPNMAP-217 protocol ikev1 dpd retry 2
set network ike gateway VPNMAP-217 protocol ikev1 exchange-mode auto
set network ike gateway VPNMAP-217 local-address interface Ethernet1/13
set network ike gateway VPNMAP-217 local-address ip 198.61.146.132/29
set network ike gateway VPNMAP-217 authentication pre-shared-key key remote-authentication
set network ike gateway VPNMAP-217 protocol-common nat-traversal enable yes
set network ike gateway VPNMAP-217 protocol-common fragmentation enable no
set network ike gateway VPNMAP-217 peer-address ip 65.52.9.137
set network ike gateway VPNMAP-218 protocol ikev1 dpd enable yes
set network ike gateway VPNMAP-218 protocol ikev1 dpd interval 2
set network ike gateway VPNMAP-218 protocol ikev1 dpd retry 2
set network ike gateway VPNMAP-218 protocol ikev1 exchange-mode auto
set network ike gateway VPNMAP-218 local-address interface Ethernet1/13
set network ike gateway VPNMAP-218 local-address ip 198.61.146.132/29
set network ike gateway VPNMAP-218 authentication pre-shared-key key remote-authentication
set network ike gateway VPNMAP-218 protocol-common nat-traversal enable yes
set network ike gateway VPNMAP-218 protocol-common fragmentation enable no
set network ike gateway VPNMAP-218 peer-address ip 52.175.251.195
set network ike gateway VPNMAP-219 protocol ikev1 dpd enable yes
set network ike gateway VPNMAP-219 protocol ikev1 dpd interval 2
set network ike gateway VPNMAP-219 protocol ikev1 dpd retry 2
set network ike gateway VPNMAP-219 protocol ikev1 exchange-mode auto
set network ike gateway VPNMAP-219 local-address interface Ethernet1/13
set network ike gateway VPNMAP-219 local-address ip 198.61.146.132/29
set network ike gateway VPNMAP-219 authentication pre-shared-key key XXXX
set network ike gateway VPNMAP-219 protocol-common nat-traversal enable yes
set network ike gateway VPNMAP-219 protocol-common fragmentation enable no
set network ike gateway VPNMAP-219 peer-address ip 18.190.97.29
set network ike gateway VPNMAP-220 protocol ikev1 dpd enable yes
set network ike gateway VPNMAP-220 protocol ikev1 dpd interval 2
set network ike gateway VPNMAP-220 protocol ikev1 dpd retry 2
set network ike gateway VPNMAP-220 protocol ikev1 exchange-mode auto
set network ike gateway VPNMAP-220 local-address interface Ethernet1/13
set network ike gateway VPNMAP-220 local-address ip 198.61.146.132/29
set network ike gateway VPNMAP-220 authentication pre-shared-key key XXX
set network ike gateway VPNMAP-220 protocol-common nat-traversal enable yes
set network ike gateway VPNMAP-220 protocol-common fragmentation enable no
set network ike gateway VPNMAP-220 peer-address ip 18.189.246.98
set network ike gateway VPNMAP-221 protocol ikev1 dpd enable yes
set network ike gateway VPNMAP-221 protocol ikev1 dpd interval 2
set network ike gateway VPNMAP-221 protocol ikev1 dpd retry 2
set network ike gateway VPNMAP-221 protocol ikev1 exchange-mode auto
set network ike gateway VPNMAP-221 local-address interface Ethernet1/13
set network ike gateway VPNMAP-221 local-address ip 198.61.146.132/29
set network ike gateway VPNMAP-221 authentication pre-shared-key key XXX
set network ike gateway VPNMAP-221 protocol-common nat-traversal enable yes
set network ike gateway VPNMAP-221 protocol-common fragmentation enable no
set network ike gateway VPNMAP-221 peer-address ip 3.12.33.130
set network ike gateway VPNMAP-225 protocol ikev1 dpd enable yes
set network ike gateway VPNMAP-225 protocol ikev1 dpd interval 2
set network ike gateway VPNMAP-225 protocol ikev1 dpd retry 2
set network ike gateway VPNMAP-225 protocol ikev1 exchange-mode auto
set network ike gateway VPNMAP-225 local-address interface Ethernet1/13
set network ike gateway VPNMAP-225 local-address ip 198.61.146.132/29
set network ike gateway VPNMAP-225 authentication pre-shared-key key XXX
set network ike gateway VPNMAP-225 protocol-common nat-traversal enable yes
set network ike gateway VPNMAP-225 protocol-common fragmentation enable no
set network ike gateway VPNMAP-225 peer-address ip 13.88.189.3
set network ike gateway VPNMAP-227 protocol ikev1 dpd enable yes
set network ike gateway VPNMAP-227 protocol ikev1 dpd interval 2
set network ike gateway VPNMAP-227 protocol ikev1 dpd retry 2
set network ike gateway VPNMAP-227 protocol ikev1 exchange-mode auto
set network ike gateway VPNMAP-227 local-address interface Ethernet1/13
set network ike gateway VPNMAP-227 local-address ip 198.61.146.132/29
set network ike gateway VPNMAP-227 authentication pre-shared-key key remote-authentication
set network ike gateway VPNMAP-227 protocol-common nat-traversal enable yes
set network ike gateway VPNMAP-227 protocol-common fragmentation enable no
set network ike gateway VPNMAP-227 peer-address ip 13.64.193.25
set network ike gateway VPNMAP-228 protocol ikev1 dpd enable yes
set network ike gateway VPNMAP-228 protocol ikev1 dpd interval 2
set network ike gateway VPNMAP-228 protocol ikev1 dpd retry 2
set network ike gateway VPNMAP-228 protocol ikev1 exchange-mode auto
set network ike gateway VPNMAP-228 local-address interface Ethernet1/13
set network ike gateway VPNMAP-228 local-address ip 198.61.146.132/29
set network ike gateway VPNMAP-228 authentication pre-shared-key key remote-authentication
set network ike gateway VPNMAP-228 protocol-common nat-traversal enable yes
set network ike gateway VPNMAP-228 protocol-common fragmentation enable no
set network ike gateway VPNMAP-228 peer-address ip 20.114.200.59
set network ike gateway VPNMAP-229 protocol ikev1 dpd enable yes
set network ike gateway VPNMAP-229 protocol ikev1 dpd interval 2
set network ike gateway VPNMAP-229 protocol ikev1 dpd retry 2
set network ike gateway VPNMAP-229 protocol ikev1 exchange-mode auto
set network ike gateway VPNMAP-229 local-address interface Ethernet1/13
set network ike gateway VPNMAP-229 local-address ip 198.61.146.132/29
set network ike gateway VPNMAP-229 authentication pre-shared-key key XXX
set network ike gateway VPNMAP-229 protocol-common nat-traversal enable yes
set network ike gateway VPNMAP-229 protocol-common fragmentation enable no
set network ike gateway VPNMAP-229 peer-address ip 34.194.179.38
set network ike gateway VPNMAP-230 protocol ikev1 dpd enable yes
set network ike gateway VPNMAP-230 protocol ikev1 dpd interval 2
set network ike gateway VPNMAP-230 protocol ikev1 dpd retry 2
set network ike gateway VPNMAP-230 protocol ikev1 exchange-mode auto
set network ike gateway VPNMAP-230 local-address interface Ethernet1/13
set network ike gateway VPNMAP-230 local-address ip 198.61.146.132/29
set network ike gateway VPNMAP-230 authentication pre-shared-key key remote-authentication
set network ike gateway VPNMAP-230 protocol-common nat-traversal enable yes
set network ike gateway VPNMAP-230 protocol-common fragmentation enable no
set network ike gateway VPNMAP-230 peer-address ip 52.165.180.231
set network qos profile default class-bandwidth-type mbps class class1 priority real-time
set network qos profile default class-bandwidth-type mbps class class2 priority high
set network qos profile default class-bandwidth-type mbps class class3 priority high
set network qos profile default class-bandwidth-type mbps class class4 priority medium
set network qos profile default class-bandwidth-type mbps class class5 priority medium
set network qos profile default class-bandwidth-type mbps class class6 priority low
set network qos profile default class-bandwidth-type mbps class class7 priority low
set network qos profile default class-bandwidth-type mbps class class8 priority low
set network virtual-router default interface
set network virtual-router default protocol bgp enable no
set network virtual-router default protocol bgp dampening-profile default cutoff 1.25
set network virtual-router default protocol bgp dampening-profile default reuse 0.5
set network virtual-router default protocol bgp dampening-profile default max-hold-time 900
set network virtual-router default protocol bgp dampening-profile default decay-half-life-reachable 300
set network virtual-router default protocol bgp dampening-profile default decay-half-life-unreachable 900
set network virtual-router default protocol bgp dampening-profile default enable yes
set network virtual-router default admin-dists
set network virtual-router default interface [ Ethernet1/13 Ethernet1/14.201 Ethernet1/14.202 Ethernet1/14.203 Ethernet1/14.204 Ethernet1/14.205 Ethernet1/14.923 Ethernet1/14.927 Tunnel1 Tunnel2 Tunnel3 tunnel.999204 tunnel.999209 tunnel.999210 tunnel.999211 tunnel.999213 tunnel.999214 tunnel.999215 tunnel.999216 tunnel.999217 tunnel.999218 tunnel.999219 tunnel.999220 tunnel.999221 tunnel.999225 tunnel.999227 tunnel.999228 tunnel.999229 tunnel.999230 ]
set network virtual-router default admin-dists static 10
set network virtual-router default admin-dists ospf-int 30
set network virtual-router default admin-dists ospf-ext 110
set network virtual-router default admin-dists ibgp 200
set network virtual-router default admin-dists ebgp 20
set network virtual-router default admin-dists rip 120
set network virtual-router default admin-dists static-ipv6 10
set network virtual-router default admin-dists ospfv3-int 30
set network virtual-router default admin-dists ospfv3-ext 110
set network virtual-router default routing-table ip static-route default destination 0.0.0.0/0
set network virtual-router default routing-table ip static-route default interface Ethernet1/13
set network virtual-router default routing-table ip static-route default nexthop ip-address 198.61.146.129
set network virtual-router default routing-table ip static-route default metric 10
set network virtual-router default routing-table ip static-route default path-monitor enable no
set network virtual-router default routing-table ip static-route default path-monitor failure-condition any
set network virtual-router default routing-table ip static-route default path-monitor hold-time 2
set network virtual-router default routing-table ip static-route default route-table unicast
set network virtual-router default routing-table ip static-route "Route 1" destination 10.20.48.0/20
set network virtual-router default routing-table ip static-route "Route 1" interface Tunnel3
set network virtual-router default routing-table ip static-route "Route 1" nexthop ip-address 20.110.16.157
set network virtual-router default routing-table ip static-route "Route 1" metric 10
set network virtual-router default routing-table ip static-route "Route 1" path-monitor enable no
set network virtual-router default routing-table ip static-route "Route 1" path-monitor failure-condition any
set network virtual-router default routing-table ip static-route "Route 1" path-monitor hold-time 2
set network virtual-router default routing-table ip static-route "Route 1" route-table unicast
set network virtual-router default routing-table ip static-route "Route 2" destination 10.52.65.16/29
set network virtual-router default routing-table ip static-route "Route 2" interface Ethernet1/14.923
set network virtual-router default routing-table ip static-route "Route 2" nexthop ip-address 192.168.109.4
set network virtual-router default routing-table ip static-route "Route 2" metric 10
set network virtual-router default routing-table ip static-route "Route 2" path-monitor enable no
set network virtual-router default routing-table ip static-route "Route 2" path-monitor failure-condition any
set network virtual-router default routing-table ip static-route "Route 2" path-monitor hold-time 2
set network virtual-router default routing-table ip static-route "Route 2" route-table unicast
set network virtual-router default routing-table ip static-route "Route 3" destination 192.168.103.0/24
set network virtual-router default routing-table ip static-route "Route 3" interface Ethernet1/14.923
set network virtual-router default routing-table ip static-route "Route 3" nexthop ip-address 192.168.109.4
set network virtual-router default routing-table ip static-route "Route 3" metric 10
set network virtual-router default routing-table ip static-route "Route 3" path-monitor enable no
set network virtual-router default routing-table ip static-route "Route 3" path-monitor failure-condition any
set network virtual-router default routing-table ip static-route "Route 3" path-monitor hold-time 2
set network virtual-router default routing-table ip static-route "Route 3" route-table unicast
set network virtual-router default routing-table ip static-route "Route 4" destination 192.168.104.0/24
set network virtual-router default routing-table ip static-route "Route 4" interface Ethernet1/14.923
set network virtual-router default routing-table ip static-route "Route 4" nexthop ip-address 192.168.109.4
set network virtual-router default routing-table ip static-route "Route 4" metric 10
set network virtual-router default routing-table ip static-route "Route 4" path-monitor enable no
set network virtual-router default routing-table ip static-route "Route 4" path-monitor failure-condition any
set network virtual-router default routing-table ip static-route "Route 4" path-monitor hold-time 2
set network virtual-router default routing-table ip static-route "Route 4" route-table unicast
set network virtual-router default routing-table ip static-route "Route 5" destination 192.168.105.0/24
set network virtual-router default routing-table ip static-route "Route 5" interface Ethernet1/14.923
set network virtual-router default routing-table ip static-route "Route 5" nexthop ip-address 192.168.109.4
set network virtual-router default routing-table ip static-route "Route 5" metric 10
set network virtual-router default routing-table ip static-route "Route 5" path-monitor enable no
set network virtual-router default routing-table ip static-route "Route 5" path-monitor failure-condition any
set network virtual-router default routing-table ip static-route "Route 5" path-monitor hold-time 2
set network virtual-router default routing-table ip static-route "Route 5" route-table unicast
set network virtual-router default routing-table ip static-route "Route 6" destination 192.168.107.0/24
set network virtual-router default routing-table ip static-route "Route 6" interface Ethernet1/14.923
set network virtual-router default routing-table ip static-route "Route 6" nexthop ip-address 192.168.109.4
set network virtual-router default routing-table ip static-route "Route 6" metric 10
set network virtual-router default routing-table ip static-route "Route 6" path-monitor enable no
set network virtual-router default routing-table ip static-route "Route 6" path-monitor failure-condition any
set network virtual-router default routing-table ip static-route "Route 6" path-monitor hold-time 2
set network virtual-router default routing-table ip static-route "Route 6" route-table unicast
set network virtual-router default routing-table ip static-route "Route 7" destination 192.168.108.0/24
set network virtual-router default routing-table ip static-route "Route 7" interface Ethernet1/14.923
set network virtual-router default routing-table ip static-route "Route 7" nexthop ip-address 192.168.109.4
set network virtual-router default routing-table ip static-route "Route 7" metric 10
set network virtual-router default routing-table ip static-route "Route 7" path-monitor enable no
set network virtual-router default routing-table ip static-route "Route 7" path-monitor failure-condition any
set network virtual-router default routing-table ip static-route "Route 7" path-monitor hold-time 2
set network virtual-router default routing-table ip static-route "Route 7" route-table unicast
set network virtual-router default routing-table ip static-route VPNMAP-2041 destination 192.168.20.0/24
set network virtual-router default routing-table ip static-route VPNMAP-2041 interface tunnel.999215
set network virtual-router default routing-table ip static-route VPNMAP-2041 metric 10
set network virtual-router default routing-table ip static-route VPNMAP-2041 path-monitor enable no
set network virtual-router default routing-table ip static-route VPNMAP-2041 path-monitor failure-condition any
set network virtual-router default routing-table ip static-route VPNMAP-2041 path-monitor hold-time 2
set network virtual-router default routing-table ip static-route VPNMAP-2041 route-table unicast
set network virtual-router default routing-table ip static-route VPNMAP-2091 destination 192.168.28.0/23
set network virtual-router default routing-table ip static-route VPNMAP-2091 interface tunnel.999209
set network virtual-router default routing-table ip static-route VPNMAP-2091 metric 10
set network virtual-router default routing-table ip static-route VPNMAP-2091 path-monitor enable no
set network virtual-router default routing-table ip static-route VPNMAP-2091 path-monitor failure-condition any
set network virtual-router default routing-table ip static-route VPNMAP-2091 path-monitor hold-time 2
set network virtual-router default routing-table ip static-route VPNMAP-2091 route-table unicast
set network virtual-router default routing-table ip static-route VPNMAP-2101 destination 192.168.30.0/23
set network virtual-router default routing-table ip static-route VPNMAP-2101 interface tunnel.999210
set network virtual-router default routing-table ip static-route VPNMAP-2101 metric 10
set network virtual-router default routing-table ip static-route VPNMAP-2101 path-monitor enable no
set network virtual-router default routing-table ip static-route VPNMAP-2101 path-monitor failure-condition any
set network virtual-router default routing-table ip static-route VPNMAP-2101 path-monitor hold-time 2
set network virtual-router default routing-table ip static-route VPNMAP-2101 route-table unicast
set network virtual-router default routing-table ip static-route VPNMAP-2111 destination 10.11.126.38/32
set network virtual-router default routing-table ip static-route VPNMAP-2111 interface tunnel.999211
set network virtual-router default routing-table ip static-route VPNMAP-2111 metric 10
set network virtual-router default routing-table ip static-route VPNMAP-2111 path-monitor enable no
set network virtual-router default routing-table ip static-route VPNMAP-2111 path-monitor failure-condition any
set network virtual-router default routing-table ip static-route VPNMAP-2111 path-monitor hold-time 2
set network virtual-router default routing-table ip static-route VPNMAP-2111 route-table unicast
set network virtual-router default routing-table ip static-route VPNMAP-2112 destination 172.26.142.234/32
set network virtual-router default routing-table ip static-route VPNMAP-2112 interface tunnel.999211
set network virtual-router default routing-table ip static-route VPNMAP-2112 metric 10
set network virtual-router default routing-table ip static-route VPNMAP-2112 path-monitor enable no
set network virtual-router default routing-table ip static-route VPNMAP-2112 path-monitor failure-condition any
set network virtual-router default routing-table ip static-route VPNMAP-2112 path-monitor hold-time 2
set network virtual-router default routing-table ip static-route VPNMAP-2112 route-table unicast
set network virtual-router default routing-table ip static-route VPNMAP-2131 destination 207.151.19.128/27
set network virtual-router default routing-table ip static-route VPNMAP-2131 interface tunnel.999213
set network virtual-router default routing-table ip static-route VPNMAP-2131 metric 10
set network virtual-router default routing-table ip static-route VPNMAP-2131 path-monitor enable no
set network virtual-router default routing-table ip static-route VPNMAP-2131 path-monitor failure-condition any
set network virtual-router default routing-table ip static-route VPNMAP-2131 path-monitor hold-time 2
set network virtual-router default routing-table ip static-route VPNMAP-2131 route-table unicast
set network virtual-router default routing-table ip static-route VPNMAP-2141 destination 192.168.32.0/23
set network virtual-router default routing-table ip static-route VPNMAP-2141 interface tunnel.999214
set network virtual-router default routing-table ip static-route VPNMAP-2141 metric 10
set network virtual-router default routing-table ip static-route VPNMAP-2141 path-monitor enable no
set network virtual-router default routing-table ip static-route VPNMAP-2141 path-monitor failure-condition any
set network virtual-router default routing-table ip static-route VPNMAP-2141 path-monitor hold-time 2
set network virtual-router default routing-table ip static-route VPNMAP-2141 route-table unicast
set network virtual-router default routing-table ip static-route VPNMAP-2151 destination 192.168.21.0/24
set network virtual-router default routing-table ip static-route VPNMAP-2151 interface tunnel.999215
set network virtual-router default routing-table ip static-route VPNMAP-2151 metric 10
set network virtual-router default routing-table ip static-route VPNMAP-2151 path-monitor enable no
set network virtual-router default routing-table ip static-route VPNMAP-2151 path-monitor failure-condition any
set network virtual-router default routing-table ip static-route VPNMAP-2151 path-monitor hold-time 2
set network virtual-router default routing-table ip static-route VPNMAP-2151 route-table unicast
set network virtual-router default routing-table ip static-route VPNMAP-2171 destination 192.168.142.0/23
set network virtual-router default routing-table ip static-route VPNMAP-2171 interface tunnel.999217
set network virtual-router default routing-table ip static-route VPNMAP-2171 metric 10
set network virtual-router default routing-table ip static-route VPNMAP-2171 path-monitor enable no
set network virtual-router default routing-table ip static-route VPNMAP-2171 path-monitor failure-condition any
set network virtual-router default routing-table ip static-route VPNMAP-2171 path-monitor hold-time 2
set network virtual-router default routing-table ip static-route VPNMAP-2171 route-table unicast
set network virtual-router default routing-table ip static-route VPNMAP-2181 destination 192.168.230.0/23
set network virtual-router default routing-table ip static-route VPNMAP-2181 interface tunnel.999218
set network virtual-router default routing-table ip static-route VPNMAP-2181 metric 10
set network virtual-router default routing-table ip static-route VPNMAP-2181 path-monitor enable no
set network virtual-router default routing-table ip static-route VPNMAP-2181 path-monitor failure-condition any
set network virtual-router default routing-table ip static-route VPNMAP-2181 path-monitor hold-time 2
set network virtual-router default routing-table ip static-route VPNMAP-2181 route-table unicast
set network virtual-router default routing-table ip static-route VPNMAP-2251 destination 192.168.118.0/23
set network virtual-router default routing-table ip static-route VPNMAP-2251 interface tunnel.999225
set network virtual-router default routing-table ip static-route VPNMAP-2251 metric 10
set network virtual-router default routing-table ip static-route VPNMAP-2251 path-monitor enable no
set network virtual-router default routing-table ip static-route VPNMAP-2251 path-monitor failure-condition any
set network virtual-router default routing-table ip static-route VPNMAP-2251 path-monitor hold-time 2
set network virtual-router default routing-table ip static-route VPNMAP-2251 route-table unicast
set network virtual-router default routing-table ip static-route VPNMAP-2271 destination 192.168.105.65/32
set network virtual-router default routing-table ip static-route VPNMAP-2271 interface tunnel.999227
set network virtual-router default routing-table ip static-route VPNMAP-2271 metric 10
set network virtual-router default routing-table ip static-route VPNMAP-2271 path-monitor enable no
set network virtual-router default routing-table ip static-route VPNMAP-2271 path-monitor failure-condition any
set network virtual-router default routing-table ip static-route VPNMAP-2271 path-monitor hold-time 2
set network virtual-router default routing-table ip static-route VPNMAP-2271 route-table unicast
set network virtual-router default routing-table ip static-route VPNMAP-2272 destination 10.10.0.0/16
set network virtual-router default routing-table ip static-route VPNMAP-2272 interface tunnel.999227
set network virtual-router default routing-table ip static-route VPNMAP-2272 metric 10
set network virtual-router default routing-table ip static-route VPNMAP-2272 path-monitor enable no
set network virtual-router default routing-table ip static-route VPNMAP-2272 path-monitor failure-condition any
set network virtual-router default routing-table ip static-route VPNMAP-2272 path-monitor hold-time 2
set network virtual-router default routing-table ip static-route VPNMAP-2272 route-table unicast
set network virtual-router default routing-table ip static-route VPNMAP-2281 destination 10.20.0.0/19
set network virtual-router default routing-table ip static-route VPNMAP-2281 interface tunnel.999228
set network virtual-router default routing-table ip static-route VPNMAP-2281 metric 10
set network virtual-router default routing-table ip static-route VPNMAP-2281 path-monitor enable no
set network virtual-router default routing-table ip static-route VPNMAP-2281 path-monitor failure-condition any
set network virtual-router default routing-table ip static-route VPNMAP-2281 path-monitor hold-time 2
set network virtual-router default routing-table ip static-route VPNMAP-2281 route-table unicast
set network virtual-router default routing-table ip static-route VPNMAP-2301 destination 10.20.32.0/19
set network virtual-router default routing-table ip static-route VPNMAP-2301 interface tunnel.999230
set network virtual-router default routing-table ip static-route VPNMAP-2301 metric 10
set network virtual-router default routing-table ip static-route VPNMAP-2301 path-monitor enable no
set network virtual-router default routing-table ip static-route VPNMAP-2301 path-monitor failure-condition any
set network virtual-router default routing-table ip static-route VPNMAP-2301 path-monitor hold-time 2
set network virtual-router default routing-table ip static-route VPNMAP-2301 route-table unicast
set network tunnel ipsec VPNMAP-227 auto-key ike-gateway VPNMAP-227
set network tunnel ipsec VPNMAP-227 auto-key proxy-id ProxyID1 protocol any
set network tunnel ipsec VPNMAP-227 auto-key proxy-id ProxyID1 local 10.10.8.0/24
set network tunnel ipsec VPNMAP-227 auto-key proxy-id ProxyID1 remote 192.168.105.65/32
set network tunnel ipsec VPNMAP-227 auto-key proxy-id ProxyID2 protocol any
set network tunnel ipsec VPNMAP-227 auto-key proxy-id ProxyID2 local 10.10.9.0/24
set network tunnel ipsec VPNMAP-227 auto-key proxy-id ProxyID2 remote 192.168.105.65/32
set network tunnel ipsec VPNMAP-227 auto-key proxy-id ProxyID3 protocol any
set network tunnel ipsec VPNMAP-227 auto-key proxy-id ProxyID3 local 10.10.10.0/24
set network tunnel ipsec VPNMAP-227 auto-key proxy-id ProxyID3 remote 192.168.105.65/32
set network tunnel ipsec VPNMAP-227 auto-key proxy-id ProxyID4 protocol any
set network tunnel ipsec VPNMAP-227 auto-key proxy-id ProxyID4 local 10.10.11.0/24
set network tunnel ipsec VPNMAP-227 auto-key proxy-id ProxyID4 remote 192.168.105.65/32
set network tunnel ipsec VPNMAP-227 auto-key proxy-id ProxyID5 protocol any
set network tunnel ipsec VPNMAP-227 auto-key proxy-id ProxyID5 local 192.168.104.0/23
set network tunnel ipsec VPNMAP-227 auto-key proxy-id ProxyID5 remote 10.10.0.0/16
set network tunnel ipsec VPNMAP-227 auto-key ipsec-crypto-profile IKEV2-IPSEC-PROPOSAL-VPNMAP-227
set network tunnel ipsec VPNMAP-227 tunnel-interface tunnel.999227
set network tunnel ipsec VPNMAP-225 auto-key ike-gateway VPNMAP-225
set network tunnel ipsec VPNMAP-225 auto-key proxy-id ProxyID1 protocol any
set network tunnel ipsec VPNMAP-225 auto-key proxy-id ProxyID1 local 192.168.104.0/23
set network tunnel ipsec VPNMAP-225 auto-key proxy-id ProxyID1 remote 192.168.118.0/23
set network tunnel ipsec VPNMAP-225 auto-key ipsec-crypto-profile IKEV2-IPSEC-PROPOSAL-VPNMAP-209
set network tunnel ipsec VPNMAP-225 tunnel-interface tunnel.999225
set network tunnel ipsec VPNMAP-204 auto-key ike-gateway VPNMAP-204
set network tunnel ipsec VPNMAP-204 auto-key proxy-id ProxyID1 protocol any
set network tunnel ipsec VPNMAP-204 auto-key proxy-id ProxyID1 local 192.168.104.0/23
set network tunnel ipsec VPNMAP-204 auto-key proxy-id ProxyID1 remote 192.168.20.0/24
set network tunnel ipsec VPNMAP-204 auto-key ipsec-crypto-profile AES256-SHA-VPNMAP-204
set network tunnel ipsec VPNMAP-204 tunnel-interface tunnel.999204
set network tunnel ipsec VPNMAP-220 auto-key ike-gateway VPNMAP-220
set network tunnel ipsec VPNMAP-220 auto-key ipsec-crypto-profile AES-SHA-VPNMAP-219
set network tunnel ipsec VPNMAP-220 tunnel-interface tunnel.999220
set network tunnel ipsec VPNMAP-219 auto-key ike-gateway VPNMAP-219
set network tunnel ipsec VPNMAP-219 auto-key ipsec-crypto-profile AES-SHA-VPNMAP-219
set network tunnel ipsec VPNMAP-219 tunnel-interface tunnel.999219
set network tunnel ipsec VPNMAP-216 auto-key ike-gateway VPNMAP-216
set network tunnel ipsec VPNMAP-216 auto-key ipsec-crypto-profile AES-SHA-VPNMAP-216
set network tunnel ipsec VPNMAP-216 tunnel-interface tunnel.999216
set network tunnel ipsec VPNMAP-228 auto-key ike-gateway VPNMAP-228
set network tunnel ipsec VPNMAP-228 auto-key proxy-id ProxyID1 protocol any
set network tunnel ipsec VPNMAP-228 auto-key proxy-id ProxyID1 local 192.168.104.0/23
set network tunnel ipsec VPNMAP-228 auto-key proxy-id ProxyID1 remote 10.20.0.0/19
set network tunnel ipsec VPNMAP-228 auto-key ipsec-crypto-profile IKEV2-IPSEC-PROPOSAL-VPNMAP-228
set network tunnel ipsec VPNMAP-228 tunnel-interface tunnel.999228
set network tunnel ipsec VPNMAP-215 auto-key ike-gateway VPNMAP-215
set network tunnel ipsec VPNMAP-215 auto-key proxy-id ProxyID1 protocol any
set network tunnel ipsec VPNMAP-215 auto-key proxy-id ProxyID1 local 192.168.104.0/23
set network tunnel ipsec VPNMAP-215 auto-key proxy-id ProxyID1 remote 192.168.20.0/24
set network tunnel ipsec VPNMAP-215 auto-key proxy-id ProxyID2 protocol any
set network tunnel ipsec VPNMAP-215 auto-key proxy-id ProxyID2 local 192.168.104.0/23
set network tunnel ipsec VPNMAP-215 auto-key proxy-id ProxyID2 remote 192.168.21.0/24
set network tunnel ipsec VPNMAP-215 auto-key ipsec-crypto-profile AES256-SHA-VPNMAP-215
set network tunnel ipsec VPNMAP-215 tunnel-interface tunnel.999215
set network tunnel ipsec VPNMAP-214 auto-key ike-gateway VPNMAP-214
set network tunnel ipsec VPNMAP-214 auto-key proxy-id ProxyID1 protocol any
set network tunnel ipsec VPNMAP-214 auto-key proxy-id ProxyID1 local 192.168.104.0/23
set network tunnel ipsec VPNMAP-214 auto-key proxy-id ProxyID1 remote 192.168.32.0/23
set network tunnel ipsec VPNMAP-214 auto-key ipsec-crypto-profile IKEV2-IPSEC-PROPOSAL-VPNMAP-214
set network tunnel ipsec VPNMAP-214 tunnel-interface tunnel.999214
set network tunnel ipsec VPNMAP-221 auto-key ike-gateway VPNMAP-221
set network tunnel ipsec VPNMAP-221 auto-key ipsec-crypto-profile AES-SHA-VPNMAP-216
set network tunnel ipsec VPNMAP-221 tunnel-interface tunnel.999221
set network tunnel ipsec VPNMAP-229 auto-key ike-gateway VPNMAP-229
set network tunnel ipsec VPNMAP-229 auto-key ipsec-crypto-profile AES-SHA-VPNMAP-216
set network tunnel ipsec VPNMAP-229 tunnel-interface tunnel.999229
set network tunnel ipsec VPNMAP-209 auto-key ike-gateway VPNMAP-209
set network tunnel ipsec VPNMAP-209 auto-key proxy-id ProxyID1 protocol any
set network tunnel ipsec VPNMAP-209 auto-key proxy-id ProxyID1 local 192.168.104.0/23
set network tunnel ipsec VPNMAP-209 auto-key proxy-id ProxyID1 remote 192.168.28.0/23
set network tunnel ipsec VPNMAP-209 auto-key ipsec-crypto-profile IKEV2-IPSEC-PROPOSAL-VPNMAP-209
set network tunnel ipsec VPNMAP-209 tunnel-interface tunnel.999209
set network tunnel ipsec VPNMAP-230 auto-key ike-gateway VPNMAP-230
set network tunnel ipsec VPNMAP-230 auto-key proxy-id ProxyID1 protocol any
set network tunnel ipsec VPNMAP-230 auto-key proxy-id ProxyID1 local 192.168.104.0/23
set network tunnel ipsec VPNMAP-230 auto-key proxy-id ProxyID1 remote 10.20.32.0/19
set network tunnel ipsec VPNMAP-230 auto-key ipsec-crypto-profile IKEV2-IPSEC-PROPOSAL-VPNMAP-209
set network tunnel ipsec VPNMAP-230 tunnel-interface tunnel.999230
set network tunnel ipsec VPNMAP-218 auto-key ike-gateway VPNMAP-218
set network tunnel ipsec VPNMAP-218 auto-key proxy-id ProxyID1 protocol any
set network tunnel ipsec VPNMAP-218 auto-key proxy-id ProxyID1 local 192.168.104.0/23
set network tunnel ipsec VPNMAP-218 auto-key proxy-id ProxyID1 remote 192.168.230.0/23
set network tunnel ipsec VPNMAP-218 auto-key ipsec-crypto-profile IKEV2-IPSEC-PROPOSAL-VPNMAP-218
set network tunnel ipsec VPNMAP-218 tunnel-interface tunnel.999218
set network tunnel ipsec VPNMAP-213 auto-key ike-gateway VPNMAP-213
set network tunnel ipsec VPNMAP-213 auto-key proxy-id ProxyID1 protocol any
set network tunnel ipsec VPNMAP-213 auto-key proxy-id ProxyID1 local 192.168.105.0/24
set network tunnel ipsec VPNMAP-213 auto-key proxy-id ProxyID1 remote 207.151.19.128/27
set network tunnel ipsec VPNMAP-213 auto-key ipsec-crypto-profile AES256-SHA-VPNMAP-204
set network tunnel ipsec VPNMAP-213 tunnel-interface tunnel.999213
set network tunnel ipsec VPNMAP-211 auto-key ike-gateway VPNMAP-211
set network tunnel ipsec VPNMAP-211 auto-key proxy-id ProxyID1 protocol any
set network tunnel ipsec VPNMAP-211 auto-key proxy-id ProxyID1 local 192.168.105.0/24
set network tunnel ipsec VPNMAP-211 auto-key proxy-id ProxyID1 remote 10.11.126.38/32
set network tunnel ipsec VPNMAP-211 auto-key proxy-id ProxyID2 protocol any
set network tunnel ipsec VPNMAP-211 auto-key proxy-id ProxyID2 local 192.168.105.0/24
set network tunnel ipsec VPNMAP-211 auto-key proxy-id ProxyID2 remote 172.26.142.234/32
set network tunnel ipsec VPNMAP-211 auto-key ipsec-crypto-profile AES256-SHA-VPNMAP-204
set network tunnel ipsec VPNMAP-211 tunnel-interface tunnel.999211
set network tunnel ipsec VPNMAP-210 auto-key ike-gateway VPNMAP-210
set network tunnel ipsec VPNMAP-210 auto-key proxy-id ProxyID1 protocol any
set network tunnel ipsec VPNMAP-210 auto-key proxy-id ProxyID1 local 192.168.104.0/23
set network tunnel ipsec VPNMAP-210 auto-key proxy-id ProxyID1 remote 192.168.30.0/23
set network tunnel ipsec VPNMAP-210 auto-key ipsec-crypto-profile IKEV2-IPSEC-PROPOSAL-VPNMAP-210
set network tunnel ipsec VPNMAP-210 tunnel-interface tunnel.999210
set network tunnel ipsec VPNMAP-217 auto-key ike-gateway VPNMAP-217
set network tunnel ipsec VPNMAP-217 auto-key proxy-id ProxyID1 protocol any
set network tunnel ipsec VPNMAP-217 auto-key proxy-id ProxyID1 local 192.168.104.0/23
set network tunnel ipsec VPNMAP-217 auto-key proxy-id ProxyID1 remote 192.168.142.0/23
set network tunnel ipsec VPNMAP-217 auto-key ipsec-crypto-profile IKEV2-IPSEC-PROPOSAL-VPNMAP-214
set network tunnel ipsec VPNMAP-217 tunnel-interface tunnel.999217
set shared botnet configuration http dynamic-dns enabled yes
set shared botnet configuration http dynamic-dns threshold 5
set shared botnet configuration http malware-sites enabled yes
set shared botnet configuration http malware-sites threshold 5
set shared botnet configuration http recent-domains enabled yes
set shared botnet configuration http recent-domains threshold 5
set shared botnet configuration http ip-domains enabled yes
set shared botnet configuration http ip-domains threshold 10
set shared botnet configuration http executables-from-unknown-sites enabled yes
set shared botnet configuration http executables-from-unknown-sites threshold 5
set shared botnet configuration other-applications irc yes
set shared botnet configuration unknown-applications unknown-tcp destinations-per-hour 10
set shared botnet configuration unknown-applications unknown-tcp sessions-per-hour 10
set shared botnet configuration unknown-applications unknown-tcp session-length maximum-bytes 100
set shared botnet configuration unknown-applications unknown-tcp session-length minimum-bytes 50
set shared botnet configuration unknown-applications unknown-udp destinations-per-hour 10
set shared botnet configuration unknown-applications unknown-udp sessions-per-hour 10
set shared botnet configuration unknown-applications unknown-udp session-length maximum-bytes 100
set shared botnet configuration unknown-applications unknown-udp session-length minimum-bytes 50
set shared botnet report topn 100
set shared botnet report scheduled yes
set shared server-profile tacplus RACKACS server ORD-1 secret ****
set shared server-profile tacplus RACKACS server ORD-1 port 49
set shared server-profile tacplus RACKACS server ORD-1 address 1.1.1.1
set shared server-profile tacplus RACKACS server ORD-2 secret ****
set shared server-profile tacplus RACKACS server ORD-2 port 49
set shared server-profile tacplus RACKACS server ORD-2 address 1.1.1.2
set shared server-profile tacplus RACKACS protocol PAP
set shared server-profile tacplus RACKACS admin-use-only yes
set shared authentication-profile RACKACS multi-factor-auth mfa-enable no
set shared authentication-profile RACKACS allow-list all
set shared authentication-profile RACKACS method tacplus server-profile RACKACS
set rulebase security rules 101_1 profile-setting profiles
set rulebase security rules 101_1 from OUTSIDE
set rulebase security rules 101_1 to OUTSIDE
set rulebase security rules 101_1 source RAX-VMW-INT_RVI-SERVERS
set rulebase security rules 101_1 destination RAX-VMW-INT_HYP-INFRA-SERVERS-PUB
set rulebase security rules 101_1 source-user any
set rulebase security rules 101_1 category any
set rulebase security rules 101_1 application any
set rulebase security rules 101_1 service RAX-VMW-INT_RVI-PORTS
set rulebase security rules 101_1 source-hip any
set rulebase security rules 101_1 action allow
set rulebase security rules 101_1 tag 101
set rulebase security rules 101_2 profile-setting profiles
set rulebase security rules 101_2 from OUTSIDE
set rulebase security rules 101_2 to OUTSIDE
set rulebase security rules 101_2 source RAX-VMW-INT_RVI-SERVERS
set rulebase security rules 101_2 destination RAX-VMW-INT_HYP_DEPLOYMENT-PUB
set rulebase security rules 101_2 source-user any
set rulebase security rules 101_2 category any
set rulebase security rules 101_2 application any
set rulebase security rules 101_2 service RAX-VMW-INT_RVI-PORTS
set rulebase security rules 101_2 source-hip any
set rulebase security rules 101_2 action allow
set rulebase security rules 101_2 tag 101
set rulebase security rules 101_3 profile-setting profiles
set rulebase security rules 101_3 from OUTSIDE
set rulebase security rules 101_3 to OUTSIDE
set rulebase security rules 101_3 source RAX-VMW-INT_MYRACK-SERVERS
set rulebase security rules 101_3 destination RAX-VMW-INT_HYP-INFRA-SERVERS-PUB
set rulebase security rules 101_3 source-user any
set rulebase security rules 101_3 category any
set rulebase security rules 101_3 application any
set rulebase security rules 101_3 service RAX-VMW-INT_MYRACK-PORTS
set rulebase security rules 101_3 source-hip any
set rulebase security rules 101_3 action allow
set rulebase security rules 101_3 tag 101
set rulebase security rules 101_4 profile-setting profiles
set rulebase security rules 101_4 from OUTSIDE
set rulebase security rules 101_4 to OUTSIDE
set rulebase security rules 101_4 source ALERT-LOGIC-IPs
set rulebase security rules 101_4 destination AL-PRIV-IP-PUB
set rulebase security rules 101_4 source-user any
set rulebase security rules 101_4 category any
set rulebase security rules 101_4 application any
set rulebase security rules 101_4 service AL-IN-Ports
set rulebase security rules 101_4 source-hip any
set rulebase security rules 101_4 action allow
set rulebase security rules 101_4 tag 101
set rulebase security rules 101_5 profile-setting profiles
set rulebase security rules 101_5 from OUTSIDE
set rulebase security rules 101_5 to any
set rulebase security rules 101_5 source fwcp-customer-deny
set rulebase security rules 101_5 destination any
set rulebase security rules 101_5 source-user any
set rulebase security rules 101_5 category any
set rulebase security rules 101_5 application any
set rulebase security rules 101_5 service any
set rulebase security rules 101_5 source-hip any
set rulebase security rules 101_5 action deny
set rulebase security rules 101_5 tag 101
set rulebase security rules 101_6 profile-setting profiles
set rulebase security rules 101_6 from OUTSIDE
set rulebase security rules 101_6 to OUTSIDE
set rulebase security rules 101_6 source any
set rulebase security rules 101_6 destination H-50.57.24.92-32
set rulebase security rules 101_6 source-user any
set rulebase security rules 101_6 category any
set rulebase security rules 101_6 application any
set rulebase security rules 101_6 service tcp_1480
set rulebase security rules 101_6 source-hip any
set rulebase security rules 101_6 action allow
set rulebase security rules 101_6 tag 101
set rulebase security rules 101_7 profile-setting profiles
set rulebase security rules 101_7 from OUTSIDE
set rulebase security rules 101_7 to OUTSIDE
set rulebase security rules 101_7 source any
set rulebase security rules 101_7 destination H-50.57.24.92-32
set rulebase security rules 101_7 source-user any
set rulebase security rules 101_7 category any
set rulebase security rules 101_7 application any
set rulebase security rules 101_7 service tcp_1470
set rulebase security rules 101_7 source-hip any
set rulebase security rules 101_7 action allow
set rulebase security rules 101_7 tag 101
set rulebase security rules 101_8 profile-setting profiles
set rulebase security rules 101_8 from OUTSIDE
set rulebase security rules 101_8 to OUTSIDE
set rulebase security rules 101_8 source any
set rulebase security rules 101_8 destination H-50.57.24.92-32
set rulebase security rules 101_8 source-user any
set rulebase security rules 101_8 category any
set rulebase security rules 101_8 application any
set rulebase security rules 101_8 service tcp_1471
set rulebase security rules 101_8 source-hip any
set rulebase security rules 101_8 action allow
set rulebase security rules 101_8 tag 101
set rulebase security rules 101_9 profile-setting profiles
set rulebase security rules 101_9 from OUTSIDE
set rulebase security rules 101_9 to OUTSIDE
set rulebase security rules 101_9 source H-50.206.210.134-32
set rulebase security rules 101_9 destination H-50.57.200.40-32
set rulebase security rules 101_9 source-user any
set rulebase security rules 101_9 category any
set rulebase security rules 101_9 application any
set rulebase security rules 101_9 service tcp_3389
set rulebase security rules 101_9 source-hip any
set rulebase security rules 101_9 action allow
set rulebase security rules 101_9 tag 101
set rulebase security rules 101_10 profile-setting profiles
set rulebase security rules 101_10 from OUTSIDE
set rulebase security rules 101_10 to OUTSIDE
set rulebase security rules 101_10 source any
set rulebase security rules 101_10 destination H-173.203.34.99-32
set rulebase security rules 101_10 source-user any
set rulebase security rules 101_10 category any
set rulebase security rules 101_10 application any
set rulebase security rules 101_10 service ssh
set rulebase security rules 101_10 source-hip any
set rulebase security rules 101_10 action allow
set rulebase security rules 101_10 tag 101
set rulebase security rules 101_11 profile-setting profiles
set rulebase security rules 101_11 from OUTSIDE
set rulebase security rules 101_11 to OUTSIDE
set rulebase security rules 101_11 source any
set rulebase security rules 101_11 destination H-50.56.2.131-32
set rulebase security rules 101_11 source-user any
set rulebase security rules 101_11 category any
set rulebase security rules 101_11 application any
set rulebase security rules 101_11 service tcp_www
set rulebase security rules 101_11 source-hip any
set rulebase security rules 101_11 action allow
set rulebase security rules 101_11 tag 101
set rulebase security rules 101_12 profile-setting profiles
set rulebase security rules 101_12 from OUTSIDE
set rulebase security rules 101_12 to OUTSIDE
set rulebase security rules 101_12 source any
set rulebase security rules 101_12 destination H-50.56.2.131-32
set rulebase security rules 101_12 source-user any
set rulebase security rules 101_12 category any
set rulebase security rules 101_12 application any
set rulebase security rules 101_12 service https
set rulebase security rules 101_12 source-hip any
set rulebase security rules 101_12 action allow
set rulebase security rules 101_12 tag 101
set rulebase security rules 101_13 profile-setting profiles
set rulebase security rules 101_13 from OUTSIDE
set rulebase security rules 101_13 to OUTSIDE
set rulebase security rules 101_13 source any
set rulebase security rules 101_13 destination H-161.47.141.184-32
set rulebase security rules 101_13 source-user any
set rulebase security rules 101_13 category any
set rulebase security rules 101_13 application any
set rulebase security rules 101_13 service https
set rulebase security rules 101_13 source-hip any
set rulebase security rules 101_13 action allow
set rulebase security rules 101_13 tag 101
set rulebase security rules 101_14 profile-setting profiles
set rulebase security rules 101_14 from OUTSIDE
set rulebase security rules 101_14 to OUTSIDE
set rulebase security rules 101_14 source any
set rulebase security rules 101_14 destination H-161.47.141.184-32
set rulebase security rules 101_14 source-user any
set rulebase security rules 101_14 category any
set rulebase security rules 101_14 application any
set rulebase security rules 101_14 service pptp
set rulebase security rules 101_14 source-hip any
set rulebase security rules 101_14 action allow
set rulebase security rules 101_14 tag 101
set rulebase security rules 101_15 profile-setting profiles
set rulebase security rules 101_15 from OUTSIDE
set rulebase security rules 101_15 to OUTSIDE
set rulebase security rules 101_15 source any
set rulebase security rules 101_15 destination H-161.47.141.184-32
set rulebase security rules 101_15 source-user any
set rulebase security rules 101_15 category any
set rulebase security rules 101_15 application any
set rulebase security rules 101_15 service tcp_47
set rulebase security rules 101_15 source-hip any
set rulebase security rules 101_15 action allow
set rulebase security rules 101_15 tag 101
set rulebase security rules 101_16 profile-setting profiles
set rulebase security rules 101_16 from OUTSIDE
set rulebase security rules 101_16 to OUTSIDE
set rulebase security rules 101_16 source any
set rulebase security rules 101_16 destination H-161.47.141.184-32
set rulebase security rules 101_16 source-user any
set rulebase security rules 101_16 category any
set rulebase security rules 101_16 application any
set rulebase security rules 101_16 service udp_4500
set rulebase security rules 101_16 source-hip any
set rulebase security rules 101_16 action allow
set rulebase security rules 101_16 tag 101
set rulebase security rules 101_17 profile-setting profiles
set rulebase security rules 101_17 from OUTSIDE
set rulebase security rules 101_17 to OUTSIDE
set rulebase security rules 101_17 source any
set rulebase security rules 101_17 destination H-161.47.141.184-32
set rulebase security rules 101_17 source-user any
set rulebase security rules 101_17 category any
set rulebase security rules 101_17 application any
set rulebase security rules 101_17 service isakmp
set rulebase security rules 101_17 source-hip any
set rulebase security rules 101_17 action allow
set rulebase security rules 101_17 tag 101
set rulebase security rules 101_18 profile-setting profiles
set rulebase security rules 101_18 from OUTSIDE
set rulebase security rules 101_18 to OUTSIDE
set rulebase security rules 101_18 source any
set rulebase security rules 101_18 destination H-161.47.141.184-32
set rulebase security rules 101_18 source-user any
set rulebase security rules 101_18 category any
set rulebase security rules 101_18 application any
set rulebase security rules 101_18 service tcp_5000
set rulebase security rules 101_18 source-hip any
set rulebase security rules 101_18 action allow
set rulebase security rules 101_18 tag 101
set rulebase security rules 101_19 profile-setting profiles
set rulebase security rules 101_19 from OUTSIDE
set rulebase security rules 101_19 to OUTSIDE
set rulebase security rules 101_19 source any
set rulebase security rules 101_19 destination H-161.47.42.45-32
set rulebase security rules 101_19 source-user any
set rulebase security rules 101_19 category any
set rulebase security rules 101_19 application any
set rulebase security rules 101_19 service tcp_www
set rulebase security rules 101_19 source-hip any
set rulebase security rules 101_19 action allow
set rulebase security rules 101_19 tag 101
set rulebase security rules 101_20 profile-setting profiles
set rulebase security rules 101_20 from OUTSIDE
set rulebase security rules 101_20 to OUTSIDE
set rulebase security rules 101_20 source any
set rulebase security rules 101_20 destination H-161.47.42.45-32
set rulebase security rules 101_20 source-user any
set rulebase security rules 101_20 category any
set rulebase security rules 101_20 application any
set rulebase security rules 101_20 service https
set rulebase security rules 101_20 source-hip any
set rulebase security rules 101_20 action allow
set rulebase security rules 101_20 tag 101
set rulebase security rules 101_21 profile-setting profiles
set rulebase security rules 101_21 from OUTSIDE
set rulebase security rules 101_21 to OUTSIDE
set rulebase security rules 101_21 source any
set rulebase security rules 101_21 destination H-161.47.42.45-32
set rulebase security rules 101_21 source-user any
set rulebase security rules 101_21 category any
set rulebase security rules 101_21 application any
set rulebase security rules 101_21 service smtp
set rulebase security rules 101_21 source-hip any
set rulebase security rules 101_21 action allow
set rulebase security rules 101_21 tag 101
set rulebase security rules 101_22 profile-setting profiles
set rulebase security rules 101_22 from OUTSIDE
set rulebase security rules 101_22 to OUTSIDE
set rulebase security rules 101_22 source any
set rulebase security rules 101_22 destination H-50.56.2.128-32
set rulebase security rules 101_22 source-user any
set rulebase security rules 101_22 category any
set rulebase security rules 101_22 application any
set rulebase security rules 101_22 service tcp_www
set rulebase security rules 101_22 source-hip any
set rulebase security rules 101_22 action allow
set rulebase security rules 101_22 tag 101
set rulebase security rules 101_23 profile-setting profiles
set rulebase security rules 101_23 from OUTSIDE
set rulebase security rules 101_23 to OUTSIDE
set rulebase security rules 101_23 source any
set rulebase security rules 101_23 destination H-50.56.2.128-32
set rulebase security rules 101_23 source-user any
set rulebase security rules 101_23 category any
set rulebase security rules 101_23 application any
set rulebase security rules 101_23 service https
set rulebase security rules 101_23 source-hip any
set rulebase security rules 101_23 action allow
set rulebase security rules 101_23 tag 101
set rulebase security rules 101_24 profile-setting profiles
set rulebase security rules 101_24 from OUTSIDE
set rulebase security rules 101_24 to OUTSIDE
set rulebase security rules 101_24 source RAX-VMW-INT_RVI-SERVERS
set rulebase security rules 101_24 destination CUSTOMER-BASTION-PUB
set rulebase security rules 101_24 source-user any
set rulebase security rules 101_24 category any
set rulebase security rules 101_24 application any
set rulebase security rules 101_24 service ssh
set rulebase security rules 101_24 source-hip any
set rulebase security rules 101_24 action allow
set rulebase security rules 101_24 tag 101
set rulebase security rules 101_25 profile-setting profiles
set rulebase security rules 101_25 from OUTSIDE
set rulebase security rules 101_25 to OUTSIDE
set rulebase security rules 101_25 source RAX-VMW-INT_RVI-SERVERS
set rulebase security rules 101_25 destination CUSTOMER-BASTION-PUB
set rulebase security rules 101_25 source-user any
set rulebase security rules 101_25 category any
set rulebase security rules 101_25 application any
set rulebase security rules 101_25 service https
set rulebase security rules 101_25 source-hip any
set rulebase security rules 101_25 action allow
set rulebase security rules 101_25 tag 101
set rulebase security rules 101_26 profile-setting profiles
set rulebase security rules 101_26 from OUTSIDE
set rulebase security rules 101_26 to OUTSIDE
set rulebase security rules 101_26 source any
set rulebase security rules 101_26 destination H-50.57.24.89-32
set rulebase security rules 101_26 source-user any
set rulebase security rules 101_26 category any
set rulebase security rules 101_26 application any
set rulebase security rules 101_26 service https
set rulebase security rules 101_26 source-hip any
set rulebase security rules 101_26 action allow
set rulebase security rules 101_26 tag 101
set rulebase security rules 101_27 profile-setting profiles
set rulebase security rules 101_27 from OUTSIDE
set rulebase security rules 101_27 to OUTSIDE
set rulebase security rules 101_27 source any
set rulebase security rules 101_27 destination H-50.57.24.89-32
set rulebase security rules 101_27 source-user any
set rulebase security rules 101_27 category any
set rulebase security rules 101_27 application any
set rulebase security rules 101_27 service tcp_www
set rulebase security rules 101_27 source-hip any
set rulebase security rules 101_27 action allow
set rulebase security rules 101_27 tag 101
set rulebase security rules 101_28 profile-setting profiles
set rulebase security rules 101_28 from OUTSIDE
set rulebase security rules 101_28 to OUTSIDE
set rulebase security rules 101_28 source any
set rulebase security rules 101_28 destination H-161.47.140.176-32
set rulebase security rules 101_28 source-user any
set rulebase security rules 101_28 category any
set rulebase security rules 101_28 application any
set rulebase security rules 101_28 service https
set rulebase security rules 101_28 source-hip any
set rulebase security rules 101_28 action allow
set rulebase security rules 101_28 tag 101
set rulebase security rules 101_29 profile-setting profiles
set rulebase security rules 101_29 from OUTSIDE
set rulebase security rules 101_29 to OUTSIDE
set rulebase security rules 101_29 source any
set rulebase security rules 101_29 destination H-161.47.140.176-32
set rulebase security rules 101_29 source-user any
set rulebase security rules 101_29 category any
set rulebase security rules 101_29 application any
set rulebase security rules 101_29 service tcp_www
set rulebase security rules 101_29 source-hip any
set rulebase security rules 101_29 action allow
set rulebase security rules 101_29 tag 101
set rulebase security rules 101_30 profile-setting profiles
set rulebase security rules 101_30 from OUTSIDE
set rulebase security rules 101_30 to OUTSIDE
set rulebase security rules 101_30 source any
set rulebase security rules 101_30 destination H-162.209.38.236-32
set rulebase security rules 101_30 source-user any
set rulebase security rules 101_30 category any
set rulebase security rules 101_30 application any
set rulebase security rules 101_30 service tcp_www
set rulebase security rules 101_30 source-hip any
set rulebase security rules 101_30 action allow
set rulebase security rules 101_30 tag 101
set rulebase security rules 101_31 profile-setting profiles
set rulebase security rules 101_31 from OUTSIDE
set rulebase security rules 101_31 to OUTSIDE
set rulebase security rules 101_31 source any
set rulebase security rules 101_31 destination H-162.209.38.236-32
set rulebase security rules 101_31 source-user any
set rulebase security rules 101_31 category any
set rulebase security rules 101_31 application any
set rulebase security rules 101_31 service https
set rulebase security rules 101_31 source-hip any
set rulebase security rules 101_31 action allow
set rulebase security rules 101_31 tag 101
set rulebase security rules 101_32 profile-setting profiles
set rulebase security rules 101_32 from OUTSIDE
set rulebase security rules 101_32 to OUTSIDE
set rulebase security rules 101_32 source any
set rulebase security rules 101_32 destination H-192.237.140.63-32
set rulebase security rules 101_32 source-user any
set rulebase security rules 101_32 category any
set rulebase security rules 101_32 application any
set rulebase security rules 101_32 service https
set rulebase security rules 101_32 source-hip any
set rulebase security rules 101_32 action allow
set rulebase security rules 101_32 tag 101
set rulebase security rules 101_33 profile-setting profiles
set rulebase security rules 101_33 from OUTSIDE
set rulebase security rules 101_33 to OUTSIDE
set rulebase security rules 101_33 source any
set rulebase security rules 101_33 destination H-192.237.140.63-32
set rulebase security rules 101_33 source-user any
set rulebase security rules 101_33 category any
set rulebase security rules 101_33 application any
set rulebase security rules 101_33 service tcp_www
set rulebase security rules 101_33 source-hip any
set rulebase security rules 101_33 action allow
set rulebase security rules 101_33 tag 101
set rulebase security rules 101_34 profile-setting profiles
set rulebase security rules 101_34 from OUTSIDE
set rulebase security rules 101_34 to OUTSIDE
set rulebase security rules 101_34 source any
set rulebase security rules 101_34 destination H-161.47.140.176-32
set rulebase security rules 101_34 source-user any
set rulebase security rules 101_34 category any
set rulebase security rules 101_34 application any
set rulebase security rules 101_34 service smtp
set rulebase security rules 101_34 source-hip any
set rulebase security rules 101_34 action allow
set rulebase security rules 101_34 tag 101
set rulebase security rules RPCV-HYP-INFRA_1 profile-setting profiles
set rulebase security rules RPCV-HYP-INFRA_1 from RPCV-HYP-INFRA
set rulebase security rules RPCV-HYP-INFRA_1 to FW-NEXUS
set rulebase security rules RPCV-HYP-INFRA_1 source RPCV-HYP-INFRA
set rulebase security rules RPCV-HYP-INFRA_1 destination NEXUS-INSIDE
set rulebase security rules RPCV-HYP-INFRA_1 source-user any
set rulebase security rules RPCV-HYP-INFRA_1 category any
set rulebase security rules RPCV-HYP-INFRA_1 application any
set rulebase security rules RPCV-HYP-INFRA_1 service any
set rulebase security rules RPCV-HYP-INFRA_1 source-hip any
set rulebase security rules RPCV-HYP-INFRA_1 action allow
set rulebase security rules RPCV-HYP-INFRA_1 tag RPCV-HYP-INFRA
set rulebase security rules RPCV-HYP-INFRA_2 profile-setting profiles
set rulebase security rules RPCV-HYP-INFRA_2 from RPCV-HYP-INFRA
set rulebase security rules RPCV-HYP-INFRA_2 to [ RPCV-HYP-INFRA RPCV-HYP-VXLAN RPCV-EDGESL RC-CLOUD-VQ8 FW-NEXUS OUTSIDE ]
set rulebase security rules RPCV-HYP-INFRA_2 source CUSTOMER-BASTION
set rulebase security rules RPCV-HYP-INFRA_2 destination FW-SEGMENTS
set rulebase security rules RPCV-HYP-INFRA_2 source-user any
set rulebase security rules RPCV-HYP-INFRA_2 category any
set rulebase security rules RPCV-HYP-INFRA_2 application any
set rulebase security rules RPCV-HYP-INFRA_2 service ssh
set rulebase security rules RPCV-HYP-INFRA_2 source-hip any
set rulebase security rules RPCV-HYP-INFRA_2 action allow
set rulebase security rules RPCV-HYP-INFRA_2 tag RPCV-HYP-INFRA
set rulebase security rules RPCV-HYP-INFRA_3 profile-setting profiles
set rulebase security rules RPCV-HYP-INFRA_3 from RPCV-HYP-INFRA
set rulebase security rules RPCV-HYP-INFRA_3 to [ RPCV-HYP-INFRA RPCV-HYP-VXLAN RPCV-EDGESL RC-CLOUD-VQ8 FW-NEXUS OUTSIDE ]
set rulebase security rules RPCV-HYP-INFRA_3 source CUSTOMER-BASTION
set rulebase security rules RPCV-HYP-INFRA_3 destination FW-SEGMENTS
set rulebase security rules RPCV-HYP-INFRA_3 source-user any
set rulebase security rules RPCV-HYP-INFRA_3 category any
set rulebase security rules RPCV-HYP-INFRA_3 application any
set rulebase security rules RPCV-HYP-INFRA_3 service tcp_3389
set rulebase security rules RPCV-HYP-INFRA_3 source-hip any
set rulebase security rules RPCV-HYP-INFRA_3 action allow
set rulebase security rules RPCV-HYP-INFRA_3 tag RPCV-HYP-INFRA
set rulebase security rules RPCV-HYP-INFRA_4 profile-setting profiles
set rulebase security rules RPCV-HYP-INFRA_4 from RPCV-HYP-INFRA
set rulebase security rules RPCV-HYP-INFRA_4 to [ RPCV-HYP-INFRA RPCV-HYP-VXLAN RPCV-EDGESL RC-CLOUD-VQ8 FW-NEXUS OUTSIDE ]
set rulebase security rules RPCV-HYP-INFRA_4 source any
set rulebase security rules RPCV-HYP-INFRA_4 destination FW-SEGMENTS
set rulebase security rules RPCV-HYP-INFRA_4 source-user any
set rulebase security rules RPCV-HYP-INFRA_4 category any
set rulebase security rules RPCV-HYP-INFRA_4 application any
set rulebase security rules RPCV-HYP-INFRA_4 service https
set rulebase security rules RPCV-HYP-INFRA_4 source-hip any
set rulebase security rules RPCV-HYP-INFRA_4 action allow
set rulebase security rules RPCV-HYP-INFRA_4 tag RPCV-HYP-INFRA
set rulebase security rules RPCV-HYP-INFRA_5 profile-setting profiles
set rulebase security rules RPCV-HYP-INFRA_5 from RPCV-HYP-INFRA
set rulebase security rules RPCV-HYP-INFRA_5 to [ RPCV-HYP-INFRA RPCV-HYP-VXLAN RPCV-EDGESL RC-CLOUD-VQ8 FW-NEXUS OUTSIDE ]
set rulebase security rules RPCV-HYP-INFRA_5 source any
set rulebase security rules RPCV-HYP-INFRA_5 destination FW-SEGMENTS
set rulebase security rules RPCV-HYP-INFRA_5 source-user any
set rulebase security rules RPCV-HYP-INFRA_5 category any
set rulebase security rules RPCV-HYP-INFRA_5 application any
set rulebase security rules RPCV-HYP-INFRA_5 service tcp_902
set rulebase security rules RPCV-HYP-INFRA_5 source-hip any
set rulebase security rules RPCV-HYP-INFRA_5 action allow
set rulebase security rules RPCV-HYP-INFRA_5 tag RPCV-HYP-INFRA
set rulebase security rules RPCV-HYP-INFRA_6 profile-setting profiles
set rulebase security rules RPCV-HYP-INFRA_6 from RPCV-HYP-INFRA
set rulebase security rules RPCV-HYP-INFRA_6 to any
set rulebase security rules RPCV-HYP-INFRA_6 source RPCV-HYP-INFRA
set rulebase security rules RPCV-HYP-INFRA_6 destination any
set rulebase security rules RPCV-HYP-INFRA_6 source-user any
set rulebase security rules RPCV-HYP-INFRA_6 category any
set rulebase security rules RPCV-HYP-INFRA_6 application icmp
set rulebase security rules RPCV-HYP-INFRA_6 service any
set rulebase security rules RPCV-HYP-INFRA_6 source-hip any
set rulebase security rules RPCV-HYP-INFRA_6 action allow
set rulebase security rules RPCV-HYP-INFRA_6 tag RPCV-HYP-INFRA
set rulebase security rules RPCV-HYP-INFRA_7 profile-setting profiles
set rulebase security rules RPCV-HYP-INFRA_7 from RPCV-HYP-INFRA
set rulebase security rules RPCV-HYP-INFRA_7 to [ RPCV-HYP-INFRA RPCV-HYP-VXLAN RPCV-EDGESL RC-CLOUD-VQ8 FW-NEXUS OUTSIDE ]
set rulebase security rules RPCV-HYP-INFRA_7 source RPCV-HYP-INFRA
set rulebase security rules RPCV-HYP-INFRA_7 destination FW-SEGMENTS
set rulebase security rules RPCV-HYP-INFRA_7 source-user any
set rulebase security rules RPCV-HYP-INFRA_7 category any
set rulebase security rules RPCV-HYP-INFRA_7 application any
set rulebase security rules RPCV-HYP-INFRA_7 service any
set rulebase security rules RPCV-HYP-INFRA_7 source-hip any
set rulebase security rules RPCV-HYP-INFRA_7 action deny
set rulebase security rules RPCV-HYP-INFRA_7 tag RPCV-HYP-INFRA
set rulebase security rules RPCV-HYP-INFRA_8 profile-setting profiles
set rulebase security rules RPCV-HYP-INFRA_8 from RPCV-HYP-INFRA
set rulebase security rules RPCV-HYP-INFRA_8 to any
set rulebase security rules RPCV-HYP-INFRA_8 source RPCV-HYP-INFRA
set rulebase security rules RPCV-HYP-INFRA_8 destination any
set rulebase security rules RPCV-HYP-INFRA_8 source-user any
set rulebase security rules RPCV-HYP-INFRA_8 category any
set rulebase security rules RPCV-HYP-INFRA_8 application any
set rulebase security rules RPCV-HYP-INFRA_8 service any
set rulebase security rules RPCV-HYP-INFRA_8 source-hip any
set rulebase security rules RPCV-HYP-INFRA_8 action allow
set rulebase security rules RPCV-HYP-INFRA_8 tag RPCV-HYP-INFRA
set rulebase security rules RPCV-HYP-VXLAN_1 profile-setting profiles
set rulebase security rules RPCV-HYP-VXLAN_1 from RPCV-HYP-VXLAN
set rulebase security rules RPCV-HYP-VXLAN_1 to any
set rulebase security rules RPCV-HYP-VXLAN_1 source RPCV-HYP-VXLAN
set rulebase security rules RPCV-HYP-VXLAN_1 destination any
set rulebase security rules RPCV-HYP-VXLAN_1 source-user any
set rulebase security rules RPCV-HYP-VXLAN_1 category any
set rulebase security rules RPCV-HYP-VXLAN_1 application icmp
set rulebase security rules RPCV-HYP-VXLAN_1 service any
set rulebase security rules RPCV-HYP-VXLAN_1 source-hip any
set rulebase security rules RPCV-HYP-VXLAN_1 action allow
set rulebase security rules RPCV-HYP-VXLAN_1 tag RPCV-HYP-VXLAN
set rulebase security rules RPCV-HYP-VXLAN_2 profile-setting profiles
set rulebase security rules RPCV-HYP-VXLAN_2 from RPCV-HYP-VXLAN
set rulebase security rules RPCV-HYP-VXLAN_2 to [ RPCV-HYP-INFRA RPCV-HYP-VXLAN RPCV-EDGESL RC-CLOUD-VQ8 FW-NEXUS OUTSIDE ]
set rulebase security rules RPCV-HYP-VXLAN_2 source RPCV-HYP-VXLAN
set rulebase security rules RPCV-HYP-VXLAN_2 destination FW-SEGMENTS
set rulebase security rules RPCV-HYP-VXLAN_2 source-user any
set rulebase security rules RPCV-HYP-VXLAN_2 category any
set rulebase security rules RPCV-HYP-VXLAN_2 application any
set rulebase security rules RPCV-HYP-VXLAN_2 service any
set rulebase security rules RPCV-HYP-VXLAN_2 source-hip any
set rulebase security rules RPCV-HYP-VXLAN_2 action deny
set rulebase security rules RPCV-HYP-VXLAN_2 tag RPCV-HYP-VXLAN
set rulebase security rules RPCV-HYP-VXLAN_3 profile-setting profiles
set rulebase security rules RPCV-HYP-VXLAN_3 from RPCV-HYP-VXLAN
set rulebase security rules RPCV-HYP-VXLAN_3 to any
set rulebase security rules RPCV-HYP-VXLAN_3 source RPCV-HYP-VXLAN
set rulebase security rules RPCV-HYP-VXLAN_3 destination any
set rulebase security rules RPCV-HYP-VXLAN_3 source-user any
set rulebase security rules RPCV-HYP-VXLAN_3 category any
set rulebase security rules RPCV-HYP-VXLAN_3 application any
set rulebase security rules RPCV-HYP-VXLAN_3 service any
set rulebase security rules RPCV-HYP-VXLAN_3 source-hip any
set rulebase security rules RPCV-HYP-VXLAN_3 action allow
set rulebase security rules RPCV-HYP-VXLAN_3 tag RPCV-HYP-VXLAN
set rulebase security rules RPCV-EDGESL_1 profile-setting profiles
set rulebase security rules RPCV-EDGESL_1 from RPCV-EDGESL
set rulebase security rules RPCV-EDGESL_1 to any
set rulebase security rules RPCV-EDGESL_1 source RPCV-EDGESL
set rulebase security rules RPCV-EDGESL_1 destination any
set rulebase security rules RPCV-EDGESL_1 source-user any
set rulebase security rules RPCV-EDGESL_1 category any
set rulebase security rules RPCV-EDGESL_1 application icmp
set rulebase security rules RPCV-EDGESL_1 service any
set rulebase security rules RPCV-EDGESL_1 source-hip any
set rulebase security rules RPCV-EDGESL_1 action allow
set rulebase security rules RPCV-EDGESL_1 tag RPCV-EDGESL
set rulebase security rules RPCV-EDGESL_2 profile-setting profiles
set rulebase security rules RPCV-EDGESL_2 from RPCV-EDGESL
set rulebase security rules RPCV-EDGESL_2 to [ RPCV-HYP-INFRA RPCV-HYP-VXLAN RPCV-EDGESL RC-CLOUD-VQ8 FW-NEXUS OUTSIDE ]
set rulebase security rules RPCV-EDGESL_2 source RPCV-EDGESL
set rulebase security rules RPCV-EDGESL_2 destination FW-SEGMENTS
set rulebase security rules RPCV-EDGESL_2 source-user any
set rulebase security rules RPCV-EDGESL_2 category any
set rulebase security rules RPCV-EDGESL_2 application any
set rulebase security rules RPCV-EDGESL_2 service any
set rulebase security rules RPCV-EDGESL_2 source-hip any
set rulebase security rules RPCV-EDGESL_2 action deny
set rulebase security rules RPCV-EDGESL_2 tag RPCV-EDGESL
set rulebase security rules RPCV-EDGESL_3 profile-setting profiles
set rulebase security rules RPCV-EDGESL_3 from RPCV-EDGESL
set rulebase security rules RPCV-EDGESL_3 to any
set rulebase security rules RPCV-EDGESL_3 source RPCV-EDGESL
set rulebase security rules RPCV-EDGESL_3 destination any
set rulebase security rules RPCV-EDGESL_3 source-user any
set rulebase security rules RPCV-EDGESL_3 category any
set rulebase security rules RPCV-EDGESL_3 application any
set rulebase security rules RPCV-EDGESL_3 service any
set rulebase security rules RPCV-EDGESL_3 source-hip any
set rulebase security rules RPCV-EDGESL_3 action allow
set rulebase security rules RPCV-EDGESL_3 tag RPCV-EDGESL
set rulebase security rules RC-CLOUD-VQ8_1 profile-setting profiles
set rulebase security rules RC-CLOUD-VQ8_1 from RC-CLOUD-VQ8
set rulebase security rules RC-CLOUD-VQ8_1 to any
set rulebase security rules RC-CLOUD-VQ8_1 source RC-CLOUD-VQ8
set rulebase security rules RC-CLOUD-VQ8_1 destination any
set rulebase security rules RC-CLOUD-VQ8_1 source-user any
set rulebase security rules RC-CLOUD-VQ8_1 category any
set rulebase security rules RC-CLOUD-VQ8_1 application icmp
set rulebase security rules RC-CLOUD-VQ8_1 service any
set rulebase security rules RC-CLOUD-VQ8_1 source-hip any
set rulebase security rules RC-CLOUD-VQ8_1 action allow
set rulebase security rules RC-CLOUD-VQ8_1 tag RC-CLOUD-VQ8
set rulebase security rules RC-CLOUD-VQ8_2 profile-setting profiles
set rulebase security rules RC-CLOUD-VQ8_2 from RC-CLOUD-VQ8
set rulebase security rules RC-CLOUD-VQ8_2 to FW-NEXUS
set rulebase security rules RC-CLOUD-VQ8_2 source RC-CLOUD-VQ8
set rulebase security rules RC-CLOUD-VQ8_2 destination H-192.168.105.102-32
set rulebase security rules RC-CLOUD-VQ8_2 source-user any
set rulebase security rules RC-CLOUD-VQ8_2 category any
set rulebase security rules RC-CLOUD-VQ8_2 application any
set rulebase security rules RC-CLOUD-VQ8_2 service any
set rulebase security rules RC-CLOUD-VQ8_2 source-hip any
set rulebase security rules RC-CLOUD-VQ8_2 action allow
set rulebase security rules RC-CLOUD-VQ8_2 tag RC-CLOUD-VQ8
set rulebase security rules RC-CLOUD-VQ8_3 profile-setting profiles
set rulebase security rules RC-CLOUD-VQ8_3 from RC-CLOUD-VQ8
set rulebase security rules RC-CLOUD-VQ8_3 to [ RPCV-HYP-INFRA RPCV-HYP-VXLAN RPCV-EDGESL RC-CLOUD-VQ8 FW-NEXUS OUTSIDE ]
set rulebase security rules RC-CLOUD-VQ8_3 source RC-CLOUD-VQ8
set rulebase security rules RC-CLOUD-VQ8_3 destination FW-SEGMENTS
set rulebase security rules RC-CLOUD-VQ8_3 source-user any
set rulebase security rules RC-CLOUD-VQ8_3 category any
set rulebase security rules RC-CLOUD-VQ8_3 application any
set rulebase security rules RC-CLOUD-VQ8_3 service any
set rulebase security rules RC-CLOUD-VQ8_3 source-hip any
set rulebase security rules RC-CLOUD-VQ8_3 action deny
set rulebase security rules RC-CLOUD-VQ8_3 tag RC-CLOUD-VQ8
set rulebase security rules RC-CLOUD-VQ8_4 profile-setting profiles
set rulebase security rules RC-CLOUD-VQ8_4 from RC-CLOUD-VQ8
set rulebase security rules RC-CLOUD-VQ8_4 to any
set rulebase security rules RC-CLOUD-VQ8_4 source RC-CLOUD-VQ8
set rulebase security rules RC-CLOUD-VQ8_4 destination any
set rulebase security rules RC-CLOUD-VQ8_4 source-user any
set rulebase security rules RC-CLOUD-VQ8_4 category any
set rulebase security rules RC-CLOUD-VQ8_4 application any
set rulebase security rules RC-CLOUD-VQ8_4 service any
set rulebase security rules RC-CLOUD-VQ8_4 source-hip any
set rulebase security rules RC-CLOUD-VQ8_4 action allow
set rulebase security rules RC-CLOUD-VQ8_4 tag RC-CLOUD-VQ8
set rulebase security rules RCG-PRI01-AZURE_1 profile-setting profiles
set rulebase security rules RCG-PRI01-AZURE_1 from RCG-PRI01-AZURE
set rulebase security rules RCG-PRI01-AZURE_1 to [ RPCV-HYP-INFRA RC-CLOUD-VQ8 FW-NEXUS ]
set rulebase security rules RCG-PRI01-AZURE_1 source N-10.10.0.0-16
set rulebase security rules RCG-PRI01-AZURE_1 destination FW-LOCAL
set rulebase security rules RCG-PRI01-AZURE_1 source-user any
set rulebase security rules RCG-PRI01-AZURE_1 category any
set rulebase security rules RCG-PRI01-AZURE_1 application any
set rulebase security rules RCG-PRI01-AZURE_1 service any
set rulebase security rules RCG-PRI01-AZURE_1 source-hip any
set rulebase security rules RCG-PRI01-AZURE_1 action allow
set rulebase security rules RCG-PRI01-AZURE_1 tag RCG-PRI01-AZURE
set rulebase security rules RCG-PRI01-AZURE_2 profile-setting profiles
set rulebase security rules RCG-PRI01-AZURE_2 from RCG-PRI01-AZURE
set rulebase security rules RCG-PRI01-AZURE_2 to any
set rulebase security rules RCG-PRI01-AZURE_2 source FW-LOCAL
set rulebase security rules RCG-PRI01-AZURE_2 destination any
set rulebase security rules RCG-PRI01-AZURE_2 source-user any
set rulebase security rules RCG-PRI01-AZURE_2 category any
set rulebase security rules RCG-PRI01-AZURE_2 application any
set rulebase security rules RCG-PRI01-AZURE_2 service any
set rulebase security rules RCG-PRI01-AZURE_2 source-hip any
set rulebase security rules RCG-PRI01-AZURE_2 action allow
set rulebase security rules RCG-PRI01-AZURE_2 tag RCG-PRI01-AZURE
set rulebase security rules RCG-PRI01-AZURE_3 profile-setting profiles
set rulebase security rules RCG-PRI01-AZURE_3 from RCG-PRI01-AZURE
set rulebase security rules RCG-PRI01-AZURE_3 to any
set rulebase security rules RCG-PRI01-AZURE_3 source azure_adc
set rulebase security rules RCG-PRI01-AZURE_3 destination any
set rulebase security rules RCG-PRI01-AZURE_3 source-user any
set rulebase security rules RCG-PRI01-AZURE_3 category any
set rulebase security rules RCG-PRI01-AZURE_3 application any
set rulebase security rules RCG-PRI01-AZURE_3 service any
set rulebase security rules RCG-PRI01-AZURE_3 source-hip any
set rulebase security rules RCG-PRI01-AZURE_3 action allow
set rulebase security rules RCG-PRI01-AZURE_3 tag RCG-PRI01-AZURE
set rulebase security rules RCG-PRI02-AWS_1 profile-setting profiles
set rulebase security rules RCG-PRI02-AWS_1 from RCG-PRI02-AWS
set rulebase security rules RCG-PRI02-AWS_1 to any
set rulebase security rules RCG-PRI02-AWS_1 source N-10.40.0.0-16
set rulebase security rules RCG-PRI02-AWS_1 destination any
set rulebase security rules RCG-PRI02-AWS_1 source-user any
set rulebase security rules RCG-PRI02-AWS_1 category any
set rulebase security rules RCG-PRI02-AWS_1 application any
set rulebase security rules RCG-PRI02-AWS_1 service any
set rulebase security rules RCG-PRI02-AWS_1 source-hip any
set rulebase security rules RCG-PRI02-AWS_1 action allow
set rulebase security rules RCG-PRI02-AWS_1 tag RCG-PRI02-AWS
set rulebase security rules VTI-AZURE-20.11_1 profile-setting profiles
set rulebase security rules VTI-AZURE-20.11_1 from VTI-AZURE-20.110.16.157
set rulebase security rules VTI-AZURE-20.11_1 to FW-NEXUS
set rulebase security rules VTI-AZURE-20.11_1 source N-10.20.48.0-20
set rulebase security rules VTI-AZURE-20.11_1 destination N-192.168.104.0-23
set rulebase security rules VTI-AZURE-20.11_1 source-user any
set rulebase security rules VTI-AZURE-20.11_1 category any
set rulebase security rules VTI-AZURE-20.11_1 application any
set rulebase security rules VTI-AZURE-20.11_1 service any
set rulebase security rules VTI-AZURE-20.11_1 source-hip any
set rulebase security rules VTI-AZURE-20.11_1 action allow
set rulebase security rules VTI-AZURE-20.11_1 tag VTI-AZURE-20.110.16.157
set rulebase security rules VTI-AZURE-20.11_2 profile-setting profiles
set rulebase security rules VTI-AZURE-20.11_2 from VTI-AZURE-20.110.16.157
set rulebase security rules VTI-AZURE-20.11_2 to [ RPCV-HYP-INFRA RC-CLOUD-VQ8 FW-NEXUS ]
set rulebase security rules VTI-AZURE-20.11_2 source azure_gia
set rulebase security rules VTI-AZURE-20.11_2 destination FW-LOCAL
set rulebase security rules VTI-AZURE-20.11_2 source-user any
set rulebase security rules VTI-AZURE-20.11_2 category any
set rulebase security rules VTI-AZURE-20.11_2 application any
set rulebase security rules VTI-AZURE-20.11_2 service any
set rulebase security rules VTI-AZURE-20.11_2 source-hip any
set rulebase security rules VTI-AZURE-20.11_2 action allow
set rulebase security rules VTI-AZURE-20.11_2 tag VTI-AZURE-20.110.16.157
set rulebase security rules 204_1 profile-setting profiles
set rulebase security rules 204_1 from FW-NEXUS
set rulebase security rules 204_1 to VPN-S2S
set rulebase security rules 204_1 source VPN-LOCAL-204
set rulebase security rules 204_1 destination VPN-REMOTE-204
set rulebase security rules 204_1 source-user any
set rulebase security rules 204_1 category any
set rulebase security rules 204_1 application any
set rulebase security rules 204_1 service any
set rulebase security rules 204_1 source-hip any
set rulebase security rules 204_1 action allow
set rulebase security rules 204_1 tag [ 204 VPN-l2l ]
set rulebase security rules 209_1 profile-setting profiles
set rulebase security rules 209_1 from FW-NEXUS
set rulebase security rules 209_1 to VPN-S2S
set rulebase security rules 209_1 source VPN-LOCAL-209
set rulebase security rules 209_1 destination VPN-REMOTE-209
set rulebase security rules 209_1 source-user any
set rulebase security rules 209_1 category any
set rulebase security rules 209_1 application any
set rulebase security rules 209_1 service any
set rulebase security rules 209_1 source-hip any
set rulebase security rules 209_1 action allow
set rulebase security rules 209_1 tag [ 209 VPN-l2l ]
set rulebase security rules 210_1 profile-setting profiles
set rulebase security rules 210_1 from FW-NEXUS
set rulebase security rules 210_1 to VPN-S2S
set rulebase security rules 210_1 source VPN-LOCAL-210
set rulebase security rules 210_1 destination VPN-REMOTE-210
set rulebase security rules 210_1 source-user any
set rulebase security rules 210_1 category any
set rulebase security rules 210_1 application any
set rulebase security rules 210_1 service any
set rulebase security rules 210_1 source-hip any
set rulebase security rules 210_1 action allow
set rulebase security rules 210_1 tag [ 210 VPN-l2l ]
set rulebase security rules 211_1 profile-setting profiles
set rulebase security rules 211_1 from FW-NEXUS
set rulebase security rules 211_1 to VPN-S2S
set rulebase security rules 211_1 source VPN-LOCAL-211
set rulebase security rules 211_1 destination VPN-REMOTE-211
set rulebase security rules 211_1 source-user any
set rulebase security rules 211_1 category any
set rulebase security rules 211_1 application any
set rulebase security rules 211_1 service any
set rulebase security rules 211_1 source-hip any
set rulebase security rules 211_1 action allow
set rulebase security rules 211_1 tag [ 211 VPN-l2l ]
set rulebase security rules 213_1 profile-setting profiles
set rulebase security rules 213_1 from FW-NEXUS
set rulebase security rules 213_1 to VPN-S2S
set rulebase security rules 213_1 source VPN-LOCAL-213
set rulebase security rules 213_1 destination VPN-REMOTE-213
set rulebase security rules 213_1 source-user any
set rulebase security rules 213_1 category any
set rulebase security rules 213_1 application any
set rulebase security rules 213_1 service any
set rulebase security rules 213_1 source-hip any
set rulebase security rules 213_1 action allow
set rulebase security rules 213_1 tag [ 213 VPN-l2l ]
set rulebase security rules 214_1 profile-setting profiles
set rulebase security rules 214_1 from FW-NEXUS
set rulebase security rules 214_1 to VPN-S2S
set rulebase security rules 214_1 source VPN-LOCAL-214
set rulebase security rules 214_1 destination VPN-REMOTE-214
set rulebase security rules 214_1 source-user any
set rulebase security rules 214_1 category any
set rulebase security rules 214_1 application any
set rulebase security rules 214_1 service any
set rulebase security rules 214_1 source-hip any
set rulebase security rules 214_1 action allow
set rulebase security rules 214_1 tag [ 214 VPN-l2l ]
set rulebase security rules 215_1 profile-setting profiles
set rulebase security rules 215_1 from FW-NEXUS
set rulebase security rules 215_1 to VPN-S2S
set rulebase security rules 215_1 source VPN-LOCAL-215
set rulebase security rules 215_1 destination VPN-REMOTE-215
set rulebase security rules 215_1 source-user any
set rulebase security rules 215_1 category any
set rulebase security rules 215_1 application any
set rulebase security rules 215_1 service any
set rulebase security rules 215_1 source-hip any
set rulebase security rules 215_1 action allow
set rulebase security rules 215_1 tag [ 215 VPN-l2l ]
set rulebase security rules 216_1 profile-setting profiles
set rulebase security rules 216_1 from any
set rulebase security rules 216_1 to VPN-S2S
set rulebase security rules 216_1 source any
set rulebase security rules 216_1 destination VPN-REMOTE-216
set rulebase security rules 216_1 source-user any
set rulebase security rules 216_1 category any
set rulebase security rules 216_1 application any
set rulebase security rules 216_1 service any
set rulebase security rules 216_1 source-hip any
set rulebase security rules 216_1 action allow
set rulebase security rules 216_1 tag [ 216 VPN-l2l ]
set rulebase security rules 217_1 profile-setting profiles
set rulebase security rules 217_1 from FW-NEXUS
set rulebase security rules 217_1 to VPN-S2S
set rulebase security rules 217_1 source VPN-LOCAL-217
set rulebase security rules 217_1 destination VPN-REMOTE-217
set rulebase security rules 217_1 source-user any
set rulebase security rules 217_1 category any
set rulebase security rules 217_1 application any
set rulebase security rules 217_1 service any
set rulebase security rules 217_1 source-hip any
set rulebase security rules 217_1 action allow
set rulebase security rules 217_1 tag [ 217 VPN-l2l ]
set rulebase security rules 218_1 profile-setting profiles
set rulebase security rules 218_1 from FW-NEXUS
set rulebase security rules 218_1 to VPN-S2S
set rulebase security rules 218_1 source VPN-LOCAL-218
set rulebase security rules 218_1 destination VPN-REMOTE-218
set rulebase security rules 218_1 source-user any
set rulebase security rules 218_1 category any
set rulebase security rules 218_1 application any
set rulebase security rules 218_1 service any
set rulebase security rules 218_1 source-hip any
set rulebase security rules 218_1 action allow
set rulebase security rules 218_1 tag [ 218 VPN-l2l ]
set rulebase security rules 219_1 profile-setting profiles
set rulebase security rules 219_1 from any
set rulebase security rules 219_1 to VPN-S2S
set rulebase security rules 219_1 source any
set rulebase security rules 219_1 destination VPN-REMOTE-219
set rulebase security rules 219_1 source-user any
set rulebase security rules 219_1 category any
set rulebase security rules 219_1 application any
set rulebase security rules 219_1 service any
set rulebase security rules 219_1 source-hip any
set rulebase security rules 219_1 action allow
set rulebase security rules 219_1 tag [ 219 VPN-l2l ]
set rulebase security rules 220_1 profile-setting profiles
set rulebase security rules 220_1 from any
set rulebase security rules 220_1 to VPN-S2S
set rulebase security rules 220_1 source any
set rulebase security rules 220_1 destination VPN-REMOTE-220
set rulebase security rules 220_1 source-user any
set rulebase security rules 220_1 category any
set rulebase security rules 220_1 application any
set rulebase security rules 220_1 service any
set rulebase security rules 220_1 source-hip any
set rulebase security rules 220_1 action allow
set rulebase security rules 220_1 tag [ 220 VPN-l2l ]
set rulebase security rules 221_1 profile-setting profiles
set rulebase security rules 221_1 from any
set rulebase security rules 221_1 to VPN-S2S
set rulebase security rules 221_1 source any
set rulebase security rules 221_1 destination VPN-REMOTE-221
set rulebase security rules 221_1 source-user any
set rulebase security rules 221_1 category any
set rulebase security rules 221_1 application any
set rulebase security rules 221_1 service any
set rulebase security rules 221_1 source-hip any
set rulebase security rules 221_1 action allow
set rulebase security rules 221_1 tag [ 221 VPN-l2l ]
set rulebase security rules 225_1 profile-setting profiles
set rulebase security rules 225_1 from FW-NEXUS
set rulebase security rules 225_1 to VPN-S2S
set rulebase security rules 225_1 source VPN-LOCAL-225
set rulebase security rules 225_1 destination VPN-REMOTE-225
set rulebase security rules 225_1 source-user any
set rulebase security rules 225_1 category any
set rulebase security rules 225_1 application any
set rulebase security rules 225_1 service any
set rulebase security rules 225_1 source-hip any
set rulebase security rules 225_1 action allow
set rulebase security rules 225_1 tag [ 225 VPN-l2l ]
set rulebase security rules 227_1 profile-setting profiles
set rulebase security rules 227_1 from OUTSIDE
set rulebase security rules 227_1 to VPN-S2S
set rulebase security rules 227_1 source azure-vpn-8-22
set rulebase security rules 227_1 destination H-192.168.105.65-32
set rulebase security rules 227_1 source-user any
set rulebase security rules 227_1 category any
set rulebase security rules 227_1 application any
set rulebase security rules 227_1 service any
set rulebase security rules 227_1 source-hip any
set rulebase security rules 227_1 action deny
set rulebase security rules 227_1 tag [ 227 VPN-l2l ]
set rulebase security rules 227_2 profile-setting profiles
set rulebase security rules 227_2 from FW-NEXUS
set rulebase security rules 227_2 to VPN-S2S
set rulebase security rules 227_2 source VPN-LOCAL-227
set rulebase security rules 227_2 destination VPN-REMOTE-227
set rulebase security rules 227_2 source-user any
set rulebase security rules 227_2 category any
set rulebase security rules 227_2 application any
set rulebase security rules 227_2 service any
set rulebase security rules 227_2 source-hip any
set rulebase security rules 227_2 action allow
set rulebase security rules 227_2 tag [ 227 VPN-l2l ]
set rulebase security rules 228_1 profile-setting profiles
set rulebase security rules 228_1 from FW-NEXUS
set rulebase security rules 228_1 to VPN-S2S
set rulebase security rules 228_1 source VPN-LOCAL-228
set rulebase security rules 228_1 destination VPN-REMOTE-228
set rulebase security rules 228_1 source-user any
set rulebase security rules 228_1 category any
set rulebase security rules 228_1 application any
set rulebase security rules 228_1 service any
set rulebase security rules 228_1 source-hip any
set rulebase security rules 228_1 action allow
set rulebase security rules 228_1 tag [ 228 VPN-l2l ]
set rulebase security rules 229_1 profile-setting profiles
set rulebase security rules 229_1 from any
set rulebase security rules 229_1 to VPN-S2S
set rulebase security rules 229_1 source any
set rulebase security rules 229_1 destination VPN-REMOTE-229
set rulebase security rules 229_1 source-user any
set rulebase security rules 229_1 category any
set rulebase security rules 229_1 application any
set rulebase security rules 229_1 service any
set rulebase security rules 229_1 source-hip any
set rulebase security rules 229_1 action allow
set rulebase security rules 229_1 tag [ 229 VPN-l2l ]
set rulebase security rules 230_1 profile-setting profiles
set rulebase security rules 230_1 from FW-NEXUS
set rulebase security rules 230_1 to [ VTI-AZURE-20.110.16.157 OUTSIDE ]
set rulebase security rules 230_1 source VPN-LOCAL-230
set rulebase security rules 230_1 destination VPN-REMOTE-230
set rulebase security rules 230_1 source-user any
set rulebase security rules 230_1 category any
set rulebase security rules 230_1 application any
set rulebase security rules 230_1 service any
set rulebase security rules 230_1 source-hip any
set rulebase security rules 230_1 action allow
set rulebase security rules 230_1 tag [ 230 VPN-l2l ]
set zone OUTSIDE network layer3
set zone VPN-S2S network layer3
set zone OUTSIDE network layer3 Ethernet1/13
set zone RPCV-HYP-INFRA network layer3 Ethernet1/14.201
set zone RPCV-HYP-VXLAN network layer3 Ethernet1/14.202
set zone RPCV-EDGESL network layer3 Ethernet1/14.203
set zone RCG-PRI01-AZURE network layer3 Ethernet1/14.204
set zone RCG-PRI02-AWS network layer3 Ethernet1/14.205
set zone FW-NEXUS network layer3 Ethernet1/14.923
set zone RC-CLOUD-VQ8 network layer3 Ethernet1/14.927
set zone VPN-23.22.170.160-AWS-0 network layer3 Tunnel1
set zone VPN-52.204.151.165-AWS-1 network layer3 Tunnel2
set zone VTI-AZURE-20.110.16.157 network layer3 Tunnel3
set zone VPN-S2S network layer3
set address-group RPCV-HYP-INFRA static N-172.21.0.0-24
set address-group RPCV-HYP-VXLAN static N-172.21.4.0-24
set address-group RPCV-EDGESL static N-172.21.5.0-24
set address-group FW-SEGMENTS static [ N-192.168.102.0-24 N-192.168.103.0-24 N-192.168.104.0-24 N-192.168.105.0-24 N-192.168.106.0-24 N-192.168.107.0-24 N-192.168.108.0-24 RPCV-HYP-INFRA RPCV-HYP-VXLAN RPCV-EDGESL ]
set address-group AL-PRIV-IP static [ H-192.168.105.196-32 H-192.168.105.197-32 ]
set address-group AL-PRIV-IP description "Alert Logic Sensor Private IP"
set address-group ALERT-LOGIC-IPs static [ N-204.110.218.96-27 N-204.110.219.96-27 N-208.71.209.32-27 ]
set address-group ALERT-LOGIC-IPs-OUTBOUND static [ N-216.52.175.192-26 N-204.110.218.96-27 N-204.110.219.96-27 H-8.8.4.4-32 H-8.8.8.8-32 ]
set address-group CLIENT-VPN-IPPOOL static N-192.168.237.0-24
set address-group FW-LOCAL static [ N-192.168.103.0-24 N-192.168.104.0-24 N-192.168.105.0-24 N-192.168.106.0-24 N-192.168.107.0-24 N-192.168.108.0-24 N-172.21.0.0-24 ]
set address-group WEB-ALLOWED static H-192.168.105.96-32
set address-group VPN-LOCAL-215 static N-192.168.104.0-23
set address-group VPN-LOCAL-213 static N-192.168.105.0-24
set address-group VPN-LOCAL-204 static N-192.168.104.0-23
set address-group NEXUS-INSIDE static N-192.168.105.0-24
set address-group fwcp-ids-greylist static [ H-188.163.232.130-32 H-67.139.224.214-32 H-85.223.209.2-32 H-192.168.105.98-32 H-192.168.105.96-32 H-192.168.104.83-32 H-192.168.104.80-32 H-54.208.242.36-32 ]
set address-group fwcp-ids-greylist description '"IPs in this object-group are considered grey-listed on the Alert Logic IDS Smart-Tickets"'
set address-group fwcp-customer-deny static [ H-50.63.144.202-32 H-37.9.53.129-32 H-176.113.59.109-32 H-117.21.227.66-32 H-176.125.229.11-32 H-146.70.65.9-32 H-146.70.65.142-32 H-46.161.27.138-32 H-95.181.232.12-32 H-185.253.162.11-32 H-212.102.47.161-32 H-95.181.233.11-32 H-154.57.3.131-32 H-188.126.89.4-32 H-212.102.59.222-32 H-131.228.2.1-32 H-185.206.224.230-32 H-91.90.124.12-32 H-205.251.150.210-32 H-46.246.3.241-32 H-154.21.22.71-32 H-188.241.82.12-32 H-193.56.252.252-32 H-37.120.193.184-32 H-154.57.3.82-32 H-185.236.42.13-32 H-212.102.49.251-32 H-193.56.252.251-32 H-66.115.165.142-32 H-95.181.237.21-32 H-143.244.37.62-32 H-156.146.50.141-32 H-107.148.209.57-32 H-77.81.142.12-32 H-154.21.21.152-32 H-165.227.49.226-32 H-5.167.66.145-32 H-188.126.89.81-32 H-91.220.163.130-32 H-91.90.126.132-32 H-188.126.89.141-32 H-37.120.143.62-32 H-102.129.153.161-32 H-212.102.36.31-32 H-90.154.73.97-32 ]
set address-group VPN-REMOTE-215 static [ N-192.168.20.0-24 N-192.168.21.0-24 ]
set address-group VPN-REMOTE-216 static N-192.168.64.0-23
set address-group VPN-LOCAL-216 static [ N-192.168.104.0-24 N-192.168.105.0-24 ]
set address-group VPN-LOCAL-212 static H-173.203.34.119-32
set address-group VPN-REMOTE-212 static [ H-159.240.140.42-32 H-159.240.140.48-32 ]
set address-group ANYCONNECT-IPPOOL static N-192.168.238.0-24
set address-group RC-CLOUD-VQ8 static N-192.168.106.0-24
set address-group CLOUD-SEGMENTS static [ RC-CLOUD-VQ8 RPCV-HYP-INFRA RPCV-HYP-VXLAN RPCV-EDGESL ]
set address-group WHITELIST-IPS static [ N-65.89.98.0-24 N-67.98.222.0-24 ]
set address-group VPN-REMOTE-204 static N-192.168.20.0-24
set address-group VPN-REMOTE-213 static N-207.151.19.128-27
set address-group VPN-REMOTE-225 static N-192.168.118.0-23
set address-group VPN-LOCAL-225 static N-192.168.104.0-23
set address-group VPN-LOCAL-209 static N-192.168.104.0-23
set address-group VPN-REMOTE-209 static N-192.168.28.0-23
set address-group VPN-LOCAL-210 static N-192.168.104.0-23
set address-group VPN-REMOTE-210 static N-192.168.30.0-23
set address-group VPN-LOCAL-211 static N-192.168.105.0-24
set address-group VPN-REMOTE-211 static [ H-10.11.126.38-32 H-172.26.142.234-32 ]
set address-group VPN-LOCAL-211_2 static N-192.168.105.0-24
set address-group CONIFER-SRC-REAL static N-10.52.239.0-24
set address-group VPN-LOCAL-214 static N-192.168.104.0-23
set address-group CONIFER-DST-REAL-105slash24 static N-192.168.105.0-24
set address-group CONIFER-DST-MAP-104slash24 static N-10.137.104.0-24
set address-group VPN-REMOTE-214 static N-192.168.32.0-23
set address-group CONIFER-DST-PNAT static [ H-10.52.240.161-32 H-10.52.240.162-32 H-10.52.240.163-32 H-10.52.240.164-32 H-10.52.240.165-32 ]
set address-group VPN-LOCAL-217 static N-192.168.104.0-23
set address-group VPN-REMOTE-217 static N-192.168.142.0-23
set address-group VPN-LOCAL-218 static N-192.168.104.0-23
set address-group VPN-REMOTE-218 static N-192.168.230.0-23
set address-group VPN-LOCAL-219 static [ N-192.168.104.0-24 N-192.168.105.0-24 ]
set address-group VPN-REMOTE-219 static N-192.168.68.0-22
set address-group RAX-VMW-INT_HYP-INFRA-SERVERS static [ H-172.21.0.66-32 H-172.21.0.51-32 H-172.21.0.5-32 H-172.21.0.11-32 H-172.21.0.10-32 H-172.21.0.6-32 H-172.21.0.12-32 H-172.21.0.71-32 H-172.21.0.72-32 H-172.21.0.4-32 H-172.21.0.64-32 H-172.21.0.62-32 H-172.21.0.61-32 H-172.21.0.63-32 H-172.21.0.32-32 H-172.21.0.34-32 H-172.21.0.18-32 H-172.21.0.31-32 H-172.21.0.33-32 H-172.21.0.30-32 H-172.21.0.16-32 H-172.21.0.60-32 ]
set address-group RAX-VMW-INT_HYP_DEPLOYMENT static [ H-172.21.0.101-32 H-172.21.0.103-32 H-172.21.0.104-32 H-172.21.0.100-32 H-172.21.0.102-32 ]
set address-group RAX-VMW-INT_RVI-SERVERS static [ H-119.9.161.4-32 H-119.9.161.5-32 H-119.9.186.8-32 H-119.9.186.89-32 H-119.9.32.60-32 H-119.9.63.6-32 H-119.9.63.7-32 H-120.136.34.236-32 H-134.213.35.60-32 H-146.20.127.166-32 H-159.135.130.65-32 H-159.135.131.128-32 H-166.78.202.24-32 H-172.99.83.206-32 H-173.203.182.12-32 H-180.150.131.108-32 H-180.150.131.109-32 H-180.150.148.198-32 H-180.150.148.199-32 H-212.100.229.148-32 H-212.100.229.149-32 H-50.56.156.4-32 H-50.56.156.5-32 H-50.56.44.5-32 H-50.56.44.6-32 H-50.57.199.106-32 H-50.57.199.107-32 H-67.192.182.76-32 H-69.20.116.180-32 H-69.20.116.181-32 H-78.136.2.132-32 H-78.136.2.133-32 H-83.138.188.4-32 H-83.138.188.5-32 H-95.138.140.236-32 H-95.138.140.237-32 ]
set address-group RAX-VMW-INT_MYRACK-SERVERS static [ H-50.56.1.224-32 H-50.56.1.227-32 H-50.56.19.96-32 H-50.56.1.225-32 H-166.78.193.80-32 ]
set address-group CUSTOMER-BASTION static [ H-172.21.0.26-32 H-172.21.0.27-32 ]
set address-group RPC-V-MGMT-CLIENTVPN static [ H-172.21.0.66-32 H-172.21.0.51-32 H-172.21.0.5-32 H-172.21.0.11-32 H-172.21.0.10-32 H-172.21.0.6-32 ]
set address-group VPN-LOCAL-220 static [ N-192.168.104.0-24 N-192.168.105.0-24 ]
set address-group VPN-REMOTE-220 static N-192.168.72.0-22
set address-group VPN-LOCAL-221 static [ N-192.168.104.0-24 N-192.168.105.0-24 ]
set address-group VPN-REMOTE-221 static N-192.168.84.0-22
set address-group VPN-LOCAL-227 static N-192.168.104.0-23
set address-group VPN-REMOTE-227 static N-10.10.0.0-16
set address-group azure-vpn-8-22 static [ N-10.10.8.0-24 N-10.10.9.0-24 N-10.10.10.0-24 N-10.10.11.0-24 ]
set address-group azure-vpn-8-22 description "Group azure-vpn-8-22"
set address-group VPN-LOCAL-228 static N-192.168.104.0-23
set address-group VPN-REMOTE-228 static N-10.20.0.0-19
set address-group VPN-LOCAL-229 static N-192.168.104.0-23
set address-group VPN-REMOTE-229 static N-10.40.0.0-16
set address-group VPN-LOCAL-230 static N-192.168.104.0-23
set address-group VPN-REMOTE-230 static N-10.20.32.0-19
set address-group azure_gia static [ N-10.20.48.0-24 N-10.20.49.0-24 N-10.20.50.0-24 N-10.20.51.0-24 N-10.20.52.0-24 N-10.20.53.0-24 N-10.20.54.0-24 N-10.20.55.0-24 N-10.20.56.0-24 N-10.20.57.0-24 N-10.20.58.0-24 N-10.20.59.0-24 N-10.20.60.0-24 N-10.20.61.0-24 N-10.20.62.0-24 N-10.20.63.0-24 ]
set address-group azure_gia description "Group azure_gia"
set address-group OUTBOUND-BLACKLIST static [ H-191.96.43.183-32 H-159.8.229.235-32 H-90.154.73.97-32 ]
set address-group azure_adc static [ N-10.20.68.0-24 N-10.20.69.0-24 N-10.20.70.0-24 N-10.20.71.0-24 N-10.20.72.0-24 N-10.20.73.0-24 N-10.20.74.0-24 N-10.20.75.0-24 ]
set address-group azure_adc description "Group azure_adc"
set address-group RAX-VMW-INT_HYP-INFRA-SERVERS-PUB static [ H-173.203.19.142-32 H-184.106.32.123-32 H-184.106.32.125-32 H-173.203.23.13-32 H-173.203.23.8-32 H-173.203.23.10-32 H-173.203.23.15-32 H-173.203.23.14-32 H-198.101.162.122-32 H-184.106.32.127-32 H-184.106.32.126-32 H-184.106.32.120-32 H-198.101.162.120-32 H-173.203.19.140-32 H-184.106.32.124-32 H-173.203.19.139-32 H-173.203.23.9-32 H-198.101.162.121-32 H-173.203.19.143-32 H-173.203.23.12-32 H-173.203.19.141-32 H-184.106.32.122-32 ]
set address-group RAX-VMW-INT_HYP_DEPLOYMENT-PUB static [ H-173.203.19.137-32 H-173.203.34.103-32 H-173.203.19.136-32 H-173.203.19.138-32 H-23.253.197.158-32 ]
set address-group AL-PRIV-IP-PUB static [ H-108.166.23.197-32 H-108.166.23.196-32 ]
set address-group CUSTOMER-BASTION-PUB static H-198.101.162.123-32
set address N-192.168.102.0_24 ip-netmask 192.168.102.0/24
set address N-192.168.102.0_24 description FW-NEXUS-NET
set address H-192.168.105.196 ip-netmask 192.168.105.196/32
set address H-192.168.105.197 ip-netmask 192.168.105.197/32
set address H-192.168.105.65 ip-netmask 192.168.105.65/32
set address H-192.168.105.68 ip-netmask 192.168.105.68/32
set address H-192.168.105.78 ip-netmask 192.168.105.78/32
set address H-192.168.105.12 ip-netmask 192.168.105.12/32
set address H-192.168.105.13 ip-netmask 192.168.105.13/32
set address H-192.168.105.96 ip-netmask 192.168.105.96/32
set address H-192.168.105.102 ip-netmask 192.168.105.102/32
set address H-192.168.104.80 ip-netmask 192.168.104.80/32
set address H-192.168.104.81 ip-netmask 192.168.104.81/32
set address H-192.168.104.82 ip-netmask 192.168.104.82/32
set address H-192.168.104.83 ip-netmask 192.168.104.83/32
set address H-192.168.104.84 ip-netmask 192.168.104.84/32
set address H-192.168.104.85 ip-netmask 192.168.104.85/32
set address H-192.168.104.40 ip-netmask 192.168.104.40/32
set address H-192.168.103.90 ip-netmask 192.168.103.90/32
set address H-192.168.103.91 ip-netmask 192.168.103.91/32
set address H-192.168.103.92 ip-netmask 192.168.103.92/32
set address H-192.168.105.116 ip-netmask 192.168.105.116/32
set address H-192.168.105.97 ip-netmask 192.168.105.97/32
set address H-192.168.105.104 ip-netmask 192.168.105.104/32
set address H-192.168.105.105 ip-netmask 192.168.105.105/32
set address H-192.168.105.106 ip-netmask 192.168.105.106/32
set address H-192.168.105.107 ip-netmask 192.168.105.107/32
set address H-192.168.105.108 ip-netmask 192.168.105.108/32
set address H-192.168.105.109 ip-netmask 192.168.105.109/32
set address H-192.168.105.110 ip-netmask 192.168.105.110/32
set address H-192.168.105.115 ip-netmask 192.168.105.115/32
set address H-192.168.107.95 ip-netmask 192.168.107.95/32
set address H-192.168.105.4 ip-netmask 192.168.105.4/32
set address CLOUD-PAT-IP ip-netmask 108.166.8.216/32
set address H-192.168.104.117 ip-netmask 192.168.104.117/32
set address H-192.168.104.236 ip-netmask 192.168.104.236/32
set address H-192.168.105.199 ip-netmask 192.168.105.199/32
set address H-192.168.104.112 ip-netmask 192.168.104.112/32
set address H-192.168.104.158 ip-netmask 192.168.104.158/32
set address H-192.168.104.114 ip-netmask 192.168.104.114/32
set address H-192.168.105.10 ip-netmask 192.168.105.10/32
set address H-192.168.105.121 ip-netmask 192.168.105.121/32
set address H-192.168.105.127 ip-netmask 192.168.105.127/32
set address H-192.168.104.87 ip-netmask 192.168.104.87/32
set address H-192.168.105.99 ip-netmask 192.168.105.99/32
set address H-192.168.105.86 ip-netmask 192.168.105.86/32
set address H-192.168.105.122 ip-netmask 192.168.105.122/32
set address H-192.168.105.126 ip-netmask 192.168.105.126/32
set address H-192.168.105.239 ip-netmask 192.168.105.239/32
set address H-192.168.104.113 ip-netmask 192.168.104.113/32
set address H-192.168.105.124 ip-netmask 192.168.105.124/32
set address H-192.168.105.113 ip-netmask 192.168.105.113/32
set address H-192.168.105.130 ip-netmask 192.168.105.130/32
set address H-192.168.105.131 ip-netmask 192.168.105.131/32
set address H-10.52.65.20 ip-netmask 10.52.65.20/32
set address H-10.52.65.20 description 916951::2018-01-16T19:32:20.434105+00:00::manu6975::NSCLI
set address H-192.168.105.98 ip-netmask 192.168.105.98/32
set address H-192.168.105.82 ip-netmask 192.168.105.82/32
set address H-192.168.105.83 ip-netmask 192.168.105.83/32
set address H-192.168.104.177 ip-netmask 192.168.104.177/32
set address H-192.168.104.184 ip-netmask 192.168.104.184/32
set address N-192.168.104.0_24 ip-netmask 192.168.104.0/24
set address N-192.168.104.0_24 description SUBNET-192.168.104.0slash24
set address N-192.168.105.0_24 ip-netmask 192.168.105.0/24
set address N-192.168.105.0_24 description SUBNET-192.168.105.0slash24
set address N-10.137.104.0_24 ip-netmask 10.137.104.0/24
set address N-10.137.104.0_24 description SUBNET-10.137.104.0slash24
set address N-10.137.105.0_24 ip-netmask 10.137.105.0/24
set address N-10.137.105.0_24 description SUBNET-10.137.105.0slash24
set address H-192.168.105.7 ip-netmask 192.168.105.7/32
set address H-192.168.105.81 ip-netmask 192.168.105.81/32
set address H-192.168.105.8 ip-netmask 192.168.105.8/32
set address H-192.168.105.9 ip-netmask 192.168.105.9/32
set address H-192.168.104.44 ip-netmask 192.168.104.44/32
set address H-192.168.105.11 ip-netmask 192.168.105.11/32
set address H-192.168.105.16 ip-netmask 192.168.105.16/32
set address H-192.168.105.42 ip-netmask 192.168.105.42/32
set address H-192.168.105.186 ip-netmask 192.168.105.186/32
set address H-192.168.105.60 ip-netmask 192.168.105.60/32
set address H-192.168.105.61 ip-netmask 192.168.105.61/32
set address H-192.168.105.62 ip-netmask 192.168.105.62/32
set address H-192.168.105.128 ip-netmask 192.168.105.128/32
set address H-192.168.105.43 ip-netmask 192.168.105.43/32
set address H-192.168.105.156 ip-netmask 192.168.105.156/32
set address H-192.168.105.226 ip-netmask 192.168.105.226/32
set address H-192.168.105.243 ip-netmask 192.168.105.243/32
set address H-192.168.105.18 ip-netmask 192.168.105.18/32
set address H-192.168.105.19 ip-netmask 192.168.105.19/32
set address H-192.168.105.89 ip-netmask 192.168.105.89/32
set address H-192.168.104.20 ip-netmask 192.168.104.20/32
set address H-192.168.105.63 ip-netmask 192.168.105.63/32
set address H-192.168.105.63 description 1026806::2019-06-14T21:00:27.885880+00:00::NSCLI
set address H-192.168.105.21 ip-netmask 192.168.105.21/32
set address H-192.168.104.107 ip-netmask 192.168.104.107/32
set address H-192.168.105.123 ip-netmask 192.168.105.123/32
set address H-192.168.105.20 ip-netmask 192.168.105.20/32
set address H-192.168.105.20 description 1032376::2019-09-17T17:59:22.729566+00:00::NSCLI
set address H-192.168.105.22 ip-netmask 192.168.105.22/32
set address H-192.168.105.22 description 1032378::2019-09-17T17:59:22.730651+00:00::NSCLI
set address H-192.168.105.23 ip-netmask 192.168.105.23/32
set address H-192.168.105.23 description 1032379::2019-09-17T17:59:22.731521+00:00::NSCLI
set address H-192.168.105.25 ip-netmask 192.168.105.25/32
set address H-192.168.105.25 description 1032381::2019-09-17T17:59:22.733181+00:00::NSCLI
set address H-192.168.105.26 ip-netmask 192.168.105.26/32
set address H-192.168.105.26 description 1032382::2019-09-17T17:59:22.733936+00:00::NSCLI
set address H-192.168.105.27 ip-netmask 192.168.105.27/32
set address H-192.168.105.27 description 1032383::2019-09-17T17:59:22.734690+00:00::NSCLI
set address H-192.168.105.28 ip-netmask 192.168.105.28/32
set address H-192.168.105.28 description 1032384::2019-09-17T17:59:22.735441+00:00::NSCLI
set address H-192.168.105.36 ip-netmask 192.168.105.36/32
set address H-192.168.105.36 description 1032385::2019-09-17T17:59:22.736151+00:00::NSCLI
set address H-192.168.105.37 ip-netmask 192.168.105.37/32
set address H-192.168.105.37 description 1032386::2019-09-17T17:59:22.736823+00:00::NSCLI
set address H-192.168.105.38 ip-netmask 192.168.105.38/32
set address H-192.168.105.38 description 1032387::2019-09-17T17:59:22.737496+00:00::NSCLI
set address H-192.168.105.39 ip-netmask 192.168.105.39/32
set address H-192.168.105.39 description 1032388::2019-09-17T17:59:22.738242+00:00::NSCLI
set address H-192.168.105.40 ip-netmask 192.168.105.40/32
set address H-192.168.105.40 description 1032389::2019-09-17T17:59:22.738935+00:00::NSCLI
set address H-192.168.105.44 ip-netmask 192.168.105.44/32
set address H-192.168.105.44 description 1032390::2019-09-17T17:59:22.739573+00:00::NSCLI
set address H-192.168.105.29 ip-netmask 192.168.105.29/32
set address H-192.168.105.29 description 1032397::2019-09-17T17:59:22.740719+00:00::NSCLI
set address H-192.168.105.30 ip-netmask 192.168.105.30/32
set address H-192.168.105.30 description 1032398::2019-09-17T17:59:22.741304+00:00::NSCLI
set address H-192.168.105.31 ip-netmask 192.168.105.31/32
set address H-192.168.105.31 description 1032399::2019-09-17T17:59:22.741992+00:00::NSCLI
set address H-192.168.105.32 ip-netmask 192.168.105.32/32
set address H-192.168.105.32 description 1046434::2019-09-17T17:59:22.742695+00:00::NSCLI
set address H-192.168.105.33 ip-netmask 192.168.105.33/32
set address H-192.168.105.33 description 1046442::2019-09-17T17:59:22.743299+00:00::NSCLI
set address H-192.168.105.34 ip-netmask 192.168.105.34/32
set address H-192.168.105.34 description 1046444::2019-09-17T17:59:22.743860+00:00::NSCLI
set address H-192.168.105.35 ip-netmask 192.168.105.35/32
set address H-192.168.105.35 description 1046461::2019-09-17T17:59:22.744415+00:00::NSCLI
set address H-192.168.105.46 ip-netmask 192.168.105.46/32
set address H-192.168.105.46 description 1032396::2019-09-17T20:05:47.798459+00:00::NSCLI
set address H-172.21.0.5 ip-netmask 172.21.0.5/32
set address H-172.21.0.5 description 1031624::2019-10-01T19:10:09.817651+00:00::NSCLI
set address H-172.21.0.4 ip-netmask 172.21.0.4/32
set address H-172.21.0.4 description 1031625::2019-10-01T19:10:09.819150+00:00::NSCLI
set address H-172.21.0.10 ip-netmask 172.21.0.10/32
set address H-172.21.0.10 description 1031626::2019-10-01T19:10:09.819870+00:00::NSCLI
set address H-172.21.0.11 ip-netmask 172.21.0.11/32
set address H-172.21.0.11 description 1031627::2019-10-01T19:10:09.820572+00:00::NSCLI
set address H-172.21.0.12 ip-netmask 172.21.0.12/32
set address H-172.21.0.12 description 1031628::2019-10-01T19:10:09.821250+00:00::NSCLI
set address H-172.21.0.51 ip-netmask 172.21.0.51/32
set address H-172.21.0.51 description 1031630::2019-10-01T19:10:09.821903+00:00::NSCLI
set address H-172.21.0.66 ip-netmask 172.21.0.66/32
set address H-172.21.0.66 description 1031631::2019-10-01T19:10:09.822529+00:00::NSCLI
set address H-172.21.0.6 ip-netmask 172.21.0.6/32
set address H-172.21.0.6 description 1031632::2019-10-01T19:10:09.823154+00:00::NSCLI
set address H-172.21.5.11 ip-netmask 172.21.5.11/32
set address H-172.21.5.11 description 1031634::2019-10-01T19:10:09.824400+00:00::NSCLI
set address H-172.21.5.12 ip-netmask 172.21.5.12/32
set address H-172.21.5.12 description 1031634::2019-10-01T19:10:09.825070+00:00::NSCLI
set address H-172.21.5.13 ip-netmask 172.21.5.13/32
set address H-172.21.5.13 description 1031634::2019-10-01T19:10:09.825669+00:00::NSCLI
set address H-172.21.5.14 ip-netmask 172.21.5.14/32
set address H-172.21.5.14 description 1031634::2019-10-01T19:10:09.826248+00:00::NSCLI
set address H-172.21.0.71 ip-netmask 172.21.0.71/32
set address H-172.21.0.71 description 1031636::2019-10-01T19:10:09.826833+00:00::NSCLI
set address H-172.21.0.72 ip-netmask 172.21.0.72/32
set address H-172.21.0.72 description 1031637::2019-10-01T19:10:09.827475+00:00::NSCLI
set address H-172.21.0.18 ip-netmask 172.21.0.18/32
set address H-172.21.0.18 description 1031638::2019-10-01T19:10:09.828113+00:00::NSCLI
set address H-172.21.0.16 ip-netmask 172.21.0.16/32
set address H-172.21.0.16 description 1031640::2019-10-01T19:10:09.828749+00:00::NSCLI
set address H-172.21.0.60 ip-netmask 172.21.0.60/32
set address H-172.21.0.60 description 1031641::2019-10-01T19:10:09.829658+00:00::NSCLI
set address H-172.21.0.65 ip-netmask 172.21.0.65/32
set address H-172.21.0.65 description 1031642::2019-10-01T19:10:09.830513+00:00::NSCLI
set address H-172.21.0.61 ip-netmask 172.21.0.61/32
set address H-172.21.0.61 description 1031643::2019-10-01T19:10:09.831312+00:00::NSCLI
set address H-172.21.0.62 ip-netmask 172.21.0.62/32
set address H-172.21.0.62 description 1031644::2019-10-01T19:10:09.832074+00:00::NSCLI
set address H-172.21.0.63 ip-netmask 172.21.0.63/32
set address H-172.21.0.63 description 1031645::2019-10-01T19:10:09.832790+00:00::NSCLI
set address H-172.21.0.64 ip-netmask 172.21.0.64/32
set address H-172.21.0.64 description 1031646::2019-10-01T19:10:09.833484+00:00::NSCLI
set address H-172.21.0.30 ip-netmask 172.21.0.30/32
set address H-172.21.0.30 description 1031647::2019-10-01T19:10:09.834110+00:00::NSCLI
set address H-172.21.0.31 ip-netmask 172.21.0.31/32
set address H-172.21.0.31 description 1031648::2019-10-01T19:10:09.834787+00:00::NSCLI
set address H-172.21.0.32 ip-netmask 172.21.0.32/32
set address H-172.21.0.32 description 1031649::2019-10-01T19:10:09.835435+00:00::NSCLI
set address H-172.21.0.33 ip-netmask 172.21.0.33/32
set address H-172.21.0.33 description 1031650::2019-10-01T19:10:09.836041+00:00::NSCLI
set address H-172.21.0.34 ip-netmask 172.21.0.34/32
set address H-172.21.0.34 description 1031651::2019-10-01T19:10:09.836758+00:00::NSCLI
set address H-172.21.0.26 ip-netmask 172.21.0.26/32
set address H-172.21.0.26 description 1031702::2019-10-01T19:10:09.837438+00:00::NSCLI
set address H-172.21.0.100 ip-netmask 172.21.0.100/32
set address H-172.21.0.103 ip-netmask 172.21.0.103/32
set address H-172.21.0.102 ip-netmask 172.21.0.102/32
set address H-172.21.0.101 ip-netmask 172.21.0.101/32
set address H-172.21.0.104 ip-netmask 172.21.0.104/32
set address H-192.168.104.48 ip-netmask 192.168.104.48/32
set address H-192.168.104.101 ip-netmask 192.168.104.101/32
set address H-192.168.104.237 ip-netmask 192.168.104.237/32
set address H-192.168.105.185 ip-netmask 192.168.105.185/32
set address H-192.168.105.85 ip-netmask 192.168.105.85/32
set address H-192.168.105.85 description 1063636::2019-11-15T16:54:39.696358+00:00::NSCLI
set address H-192.168.105.93 ip-netmask 192.168.105.93/32
set address H-192.168.105.100 ip-netmask 192.168.105.100/32
set address H-192.168.105.111 ip-netmask 192.168.105.111/32
set address H-192.168.105.118 ip-netmask 192.168.105.118/32
set address H-192.168.105.64 ip-netmask 192.168.105.64/32
set address H-192.168.105.103 ip-netmask 192.168.105.103/32
set address H-192.168.105.160 ip-netmask 192.168.105.160/32
set address H-192.168.105.161 ip-netmask 192.168.105.161/32
set address H-192.168.105.162 ip-netmask 192.168.105.162/32
set address H-192.168.105.163 ip-netmask 192.168.105.163/32
set address H-192.168.105.164 ip-netmask 192.168.105.164/32
set address H-192.168.105.165 ip-netmask 192.168.105.165/32
set address H-192.168.105.166 ip-netmask 192.168.105.166/32
set address H-192.168.105.6 ip-netmask 192.168.105.6/32
set address H-192.168.105.41 ip-netmask 192.168.105.41/32
set address H-192.168.105.24 ip-netmask 192.168.105.24/32
set address H-192.168.105.119 ip-netmask 192.168.105.119/32
set address H-192.168.105.66 ip-netmask 192.168.105.66/32
set address H-192.168.105.66 description 1139697::2020-09-11T14:41:21.893605+00:00::NSCLI
set address H-192.168.105.67 ip-netmask 192.168.105.67/32
set address H-192.168.105.67 description 1140825::2020-09-12T22:53:06.324632+00:00::NSCLI
set address H-192.168.105.71 ip-netmask 192.168.105.71/32
set address H-192.168.105.71 description 1141021::2020-09-12T22:53:06.326585+00:00::NSCLI
set address H-192.168.105.69 ip-netmask 192.168.105.69/32
set address H-192.168.105.69 description 1141022::2020-09-12T22:53:06.328363+00:00::NSCLI
set address H-192.168.105.70 ip-netmask 192.168.105.70/32
set address H-192.168.105.70 description 1141025::2020-09-12T22:53:06.330007+00:00::NSCLI
set address H-192.168.104.178 ip-netmask 192.168.104.178/32
set address H-192.168.104.180 ip-netmask 192.168.104.180/32
set address H-192.168.103.93 ip-netmask 192.168.103.93/32
set address H-192.168.104.79 ip-netmask 192.168.104.79/32
set address H-192.168.105.47 ip-netmask 192.168.105.47/32
set address H-192.168.105.48 ip-netmask 192.168.105.48/32
set address H-192.168.105.195 ip-netmask 192.168.105.195/32
set address H-192.168.105.198 ip-netmask 192.168.105.198/32
set address H-192.168.105.140 ip-netmask 192.168.105.140/32
set address H-192.168.105.141 ip-netmask 192.168.105.141/32
set address H-192.168.105.142 ip-netmask 192.168.105.142/32
set address H-192.168.105.143 ip-netmask 192.168.105.143/32
set address H-192.168.105.144 ip-netmask 192.168.105.144/32
set address H-192.168.105.194 ip-netmask 192.168.105.194/32
set address H-192.168.105.148 ip-netmask 192.168.105.148/32
set address H-192.168.104.89 ip-netmask 192.168.104.89/32
set address H-192.168.105.147 ip-netmask 192.168.105.147/32
set address H-192.168.105.145 ip-netmask 192.168.105.145/32
set address H-192.168.105.80 ip-netmask 192.168.105.80/32
set address H-192.168.105.242 ip-netmask 192.168.105.242/32
set address H-192.168.105.120 ip-netmask 192.168.105.120/32
set address H-192.168.105.120 description "Group azure_adc"
set address N-172.21.0.0-24 ip-netmask 172.21.0.0/24
set address N-172.21.4.0-24 ip-netmask 172.21.4.0/24
set address N-172.21.5.0-24 ip-netmask 172.21.5.0/24
set address N-192.168.102.0-24 ip-netmask 192.168.102.0/24
set address N-192.168.103.0-24 ip-netmask 192.168.103.0/24
set address N-192.168.104.0-24 ip-netmask 192.168.104.0/24
set address N-192.168.105.0-24 ip-netmask 192.168.105.0/24
set address N-192.168.106.0-24 ip-netmask 192.168.106.0/24
set address N-192.168.107.0-24 ip-netmask 192.168.107.0/24
set address N-192.168.108.0-24 ip-netmask 192.168.108.0/24
set address H-192.168.105.196-32 ip-netmask 192.168.105.196/32
set address H-192.168.105.197-32 ip-netmask 192.168.105.197/32
set address N-204.110.218.96-27 ip-netmask 204.110.218.96/27
set address N-204.110.219.96-27 ip-netmask 204.110.219.96/27
set address N-208.71.209.32-27 ip-netmask 208.71.209.32/27
set address N-216.52.175.192-26 ip-netmask 216.52.175.192/26
set address H-8.8.4.4-32 ip-netmask 8.8.4.4/32
set address H-8.8.8.8-32 ip-netmask 8.8.8.8/32
set address N-192.168.237.0-24 ip-netmask 192.168.237.0/24
set address H-192.168.105.96-32 ip-netmask 192.168.105.96/32
set address N-192.168.104.0-23 ip-netmask 192.168.104.0/23
set address H-188.163.232.130-32 ip-netmask 188.163.232.130/32
set address H-67.139.224.214-32 ip-netmask 67.139.224.214/32
set address H-85.223.209.2-32 ip-netmask 85.223.209.2/32
set address H-192.168.105.98-32 ip-netmask 192.168.105.98/32
set address H-192.168.104.83-32 ip-netmask 192.168.104.83/32
set address H-192.168.104.80-32 ip-netmask 192.168.104.80/32
set address H-54.208.242.36-32 ip-netmask 54.208.242.36/32
set address H-50.63.144.202-32 ip-netmask 50.63.144.202/32
set address H-37.9.53.129-32 ip-netmask 37.9.53.129/32
set address H-176.113.59.109-32 ip-netmask 176.113.59.109/32
set address H-117.21.227.66-32 ip-netmask 117.21.227.66/32
set address H-176.125.229.11-32 ip-netmask 176.125.229.11/32
set address H-146.70.65.9-32 ip-netmask 146.70.65.9/32
set address H-146.70.65.142-32 ip-netmask 146.70.65.142/32
set address H-46.161.27.138-32 ip-netmask 46.161.27.138/32
set address H-95.181.232.12-32 ip-netmask 95.181.232.12/32
set address H-185.253.162.11-32 ip-netmask 185.253.162.11/32
set address H-212.102.47.161-32 ip-netmask 212.102.47.161/32
set address H-95.181.233.11-32 ip-netmask 95.181.233.11/32
set address H-154.57.3.131-32 ip-netmask 154.57.3.131/32
set address H-188.126.89.4-32 ip-netmask 188.126.89.4/32
set address H-212.102.59.222-32 ip-netmask 212.102.59.222/32
set address H-131.228.2.1-32 ip-netmask 131.228.2.1/32
set address H-185.206.224.230-32 ip-netmask 185.206.224.230/32
set address H-91.90.124.12-32 ip-netmask 91.90.124.12/32
set address H-205.251.150.210-32 ip-netmask 205.251.150.210/32
set address H-46.246.3.241-32 ip-netmask 46.246.3.241/32
set address H-154.21.22.71-32 ip-netmask 154.21.22.71/32
set address H-188.241.82.12-32 ip-netmask 188.241.82.12/32
set address H-193.56.252.252-32 ip-netmask 193.56.252.252/32
set address H-37.120.193.184-32 ip-netmask 37.120.193.184/32
set address H-154.57.3.82-32 ip-netmask 154.57.3.82/32
set address H-185.236.42.13-32 ip-netmask 185.236.42.13/32
set address H-212.102.49.251-32 ip-netmask 212.102.49.251/32
set address H-193.56.252.251-32 ip-netmask 193.56.252.251/32
set address H-66.115.165.142-32 ip-netmask 66.115.165.142/32
set address H-95.181.237.21-32 ip-netmask 95.181.237.21/32
set address H-143.244.37.62-32 ip-netmask 143.244.37.62/32
set address H-156.146.50.141-32 ip-netmask 156.146.50.141/32
set address H-107.148.209.57-32 ip-netmask 107.148.209.57/32
set address H-77.81.142.12-32 ip-netmask 77.81.142.12/32
set address H-154.21.21.152-32 ip-netmask 154.21.21.152/32
set address H-165.227.49.226-32 ip-netmask 165.227.49.226/32
set address H-5.167.66.145-32 ip-netmask 5.167.66.145/32
set address H-188.126.89.81-32 ip-netmask 188.126.89.81/32
set address H-91.220.163.130-32 ip-netmask 91.220.163.130/32
set address H-91.90.126.132-32 ip-netmask 91.90.126.132/32
set address H-188.126.89.141-32 ip-netmask 188.126.89.141/32
set address H-37.120.143.62-32 ip-netmask 37.120.143.62/32
set address H-102.129.153.161-32 ip-netmask 102.129.153.161/32
set address H-212.102.36.31-32 ip-netmask 212.102.36.31/32
set address H-90.154.73.97-32 ip-netmask 90.154.73.97/32
set address N-192.168.20.0-24 ip-netmask 192.168.20.0/24
set address N-192.168.21.0-24 ip-netmask 192.168.21.0/24
set address N-192.168.64.0-23 ip-netmask 192.168.64.0/23
set address H-173.203.34.119-32 ip-netmask 173.203.34.119/32
set address H-159.240.140.42-32 ip-netmask 159.240.140.42/32
set address H-159.240.140.48-32 ip-netmask 159.240.140.48/32
set address N-192.168.238.0-24 ip-netmask 192.168.238.0/24
set address N-65.89.98.0-24 ip-netmask 65.89.98.0/24
set address N-67.98.222.0-24 ip-netmask 67.98.222.0/24
set address N-207.151.19.128-27 ip-netmask 207.151.19.128/27
set address N-192.168.118.0-23 ip-netmask 192.168.118.0/23
set address N-192.168.28.0-23 ip-netmask 192.168.28.0/23
set address N-192.168.30.0-23 ip-netmask 192.168.30.0/23
set address H-10.11.126.38-32 ip-netmask 10.11.126.38/32
set address H-172.26.142.234-32 ip-netmask 172.26.142.234/32
set address N-10.52.239.0-24 ip-netmask 10.52.239.0/24
set address N-10.137.104.0-24 ip-netmask 10.137.104.0/24
set address N-192.168.32.0-23 ip-netmask 192.168.32.0/23
set address H-10.52.240.161-32 ip-netmask 10.52.240.161/32
set address H-10.52.240.162-32 ip-netmask 10.52.240.162/32
set address H-10.52.240.163-32 ip-netmask 10.52.240.163/32
set address H-10.52.240.164-32 ip-netmask 10.52.240.164/32
set address H-10.52.240.165-32 ip-netmask 10.52.240.165/32
set address N-192.168.142.0-23 ip-netmask 192.168.142.0/23
set address N-192.168.230.0-23 ip-netmask 192.168.230.0/23
set address N-192.168.68.0-22 ip-netmask 192.168.68.0/22
set address H-172.21.0.66-32 ip-netmask 172.21.0.66/32
set address H-172.21.0.51-32 ip-netmask 172.21.0.51/32
set address H-172.21.0.5-32 ip-netmask 172.21.0.5/32
set address H-172.21.0.11-32 ip-netmask 172.21.0.11/32
set address H-172.21.0.10-32 ip-netmask 172.21.0.10/32
set address H-172.21.0.6-32 ip-netmask 172.21.0.6/32
set address H-172.21.0.12-32 ip-netmask 172.21.0.12/32
set address H-172.21.0.71-32 ip-netmask 172.21.0.71/32
set address H-172.21.0.72-32 ip-netmask 172.21.0.72/32
set address H-172.21.0.4-32 ip-netmask 172.21.0.4/32
set address H-172.21.0.64-32 ip-netmask 172.21.0.64/32
set address H-172.21.0.62-32 ip-netmask 172.21.0.62/32
set address H-172.21.0.61-32 ip-netmask 172.21.0.61/32
set address H-172.21.0.63-32 ip-netmask 172.21.0.63/32
set address H-172.21.0.32-32 ip-netmask 172.21.0.32/32
set address H-172.21.0.34-32 ip-netmask 172.21.0.34/32
set address H-172.21.0.18-32 ip-netmask 172.21.0.18/32
set address H-172.21.0.31-32 ip-netmask 172.21.0.31/32
set address H-172.21.0.33-32 ip-netmask 172.21.0.33/32
set address H-172.21.0.30-32 ip-netmask 172.21.0.30/32
set address H-172.21.0.16-32 ip-netmask 172.21.0.16/32
set address H-172.21.0.60-32 ip-netmask 172.21.0.60/32
set address H-172.21.0.101-32 ip-netmask 172.21.0.101/32
set address H-172.21.0.103-32 ip-netmask 172.21.0.103/32
set address H-172.21.0.104-32 ip-netmask 172.21.0.104/32
set address H-172.21.0.100-32 ip-netmask 172.21.0.100/32
set address H-172.21.0.102-32 ip-netmask 172.21.0.102/32
set address H-119.9.161.4-32 ip-netmask 119.9.161.4/32
set address H-119.9.161.5-32 ip-netmask 119.9.161.5/32
set address H-119.9.186.8-32 ip-netmask 119.9.186.8/32
set address H-119.9.186.89-32 ip-netmask 119.9.186.89/32
set address H-119.9.32.60-32 ip-netmask 119.9.32.60/32
set address H-119.9.63.6-32 ip-netmask 119.9.63.6/32
set address H-119.9.63.7-32 ip-netmask 119.9.63.7/32
set address H-120.136.34.236-32 ip-netmask 120.136.34.236/32
set address H-134.213.35.60-32 ip-netmask 134.213.35.60/32
set address H-146.20.127.166-32 ip-netmask 146.20.127.166/32
set address H-159.135.130.65-32 ip-netmask 159.135.130.65/32
set address H-159.135.131.128-32 ip-netmask 159.135.131.128/32
set address H-166.78.202.24-32 ip-netmask 166.78.202.24/32
set address H-172.99.83.206-32 ip-netmask 172.99.83.206/32
set address H-173.203.182.12-32 ip-netmask 173.203.182.12/32
set address H-180.150.131.108-32 ip-netmask 180.150.131.108/32
set address H-180.150.131.109-32 ip-netmask 180.150.131.109/32
set address H-180.150.148.198-32 ip-netmask 180.150.148.198/32
set address H-180.150.148.199-32 ip-netmask 180.150.148.199/32
set address H-212.100.229.148-32 ip-netmask 212.100.229.148/32
set address H-212.100.229.149-32 ip-netmask 212.100.229.149/32
set address H-50.56.156.4-32 ip-netmask 50.56.156.4/32
set address H-50.56.156.5-32 ip-netmask 50.56.156.5/32
set address H-50.56.44.5-32 ip-netmask 50.56.44.5/32
set address H-50.56.44.6-32 ip-netmask 50.56.44.6/32
set address H-50.57.199.106-32 ip-netmask 50.57.199.106/32
set address H-50.57.199.107-32 ip-netmask 50.57.199.107/32
set address H-67.192.182.76-32 ip-netmask 67.192.182.76/32
set address H-69.20.116.180-32 ip-netmask 69.20.116.180/32
set address H-69.20.116.181-32 ip-netmask 69.20.116.181/32
set address H-78.136.2.132-32 ip-netmask 78.136.2.132/32
set address H-78.136.2.133-32 ip-netmask 78.136.2.133/32
set address H-83.138.188.4-32 ip-netmask 83.138.188.4/32
set address H-83.138.188.5-32 ip-netmask 83.138.188.5/32
set address H-95.138.140.236-32 ip-netmask 95.138.140.236/32
set address H-95.138.140.237-32 ip-netmask 95.138.140.237/32
set address H-50.56.1.224-32 ip-netmask 50.56.1.224/32
set address H-50.56.1.227-32 ip-netmask 50.56.1.227/32
set address H-50.56.19.96-32 ip-netmask 50.56.19.96/32
set address H-50.56.1.225-32 ip-netmask 50.56.1.225/32
set address H-166.78.193.80-32 ip-netmask 166.78.193.80/32
set address H-172.21.0.26-32 ip-netmask 172.21.0.26/32
set address H-172.21.0.27-32 ip-netmask 172.21.0.27/32
set address N-192.168.72.0-22 ip-netmask 192.168.72.0/22
set address N-192.168.84.0-22 ip-netmask 192.168.84.0/22
set address N-10.10.0.0-16 ip-netmask 10.10.0.0/16
set address N-10.10.8.0-24 ip-netmask 10.10.8.0/24
set address N-10.10.9.0-24 ip-netmask 10.10.9.0/24
set address N-10.10.10.0-24 ip-netmask 10.10.10.0/24
set address N-10.10.11.0-24 ip-netmask 10.10.11.0/24
set address N-10.20.0.0-19 ip-netmask 10.20.0.0/19
set address N-10.40.0.0-16 ip-netmask 10.40.0.0/16
set address N-10.20.32.0-19 ip-netmask 10.20.32.0/19
set address N-10.20.48.0-24 ip-netmask 10.20.48.0/24
set address N-10.20.49.0-24 ip-netmask 10.20.49.0/24
set address N-10.20.50.0-24 ip-netmask 10.20.50.0/24
set address N-10.20.51.0-24 ip-netmask 10.20.51.0/24
set address N-10.20.52.0-24 ip-netmask 10.20.52.0/24
set address N-10.20.53.0-24 ip-netmask 10.20.53.0/24
set address N-10.20.54.0-24 ip-netmask 10.20.54.0/24
set address N-10.20.55.0-24 ip-netmask 10.20.55.0/24
set address N-10.20.56.0-24 ip-netmask 10.20.56.0/24
set address N-10.20.57.0-24 ip-netmask 10.20.57.0/24
set address N-10.20.58.0-24 ip-netmask 10.20.58.0/24
set address N-10.20.59.0-24 ip-netmask 10.20.59.0/24
set address N-10.20.60.0-24 ip-netmask 10.20.60.0/24
set address N-10.20.61.0-24 ip-netmask 10.20.61.0/24
set address N-10.20.62.0-24 ip-netmask 10.20.62.0/24
set address N-10.20.63.0-24 ip-netmask 10.20.63.0/24
set address H-191.96.43.183-32 ip-netmask 191.96.43.183/32
set address H-159.8.229.235-32 ip-netmask 159.8.229.235/32
set address N-10.20.68.0-24 ip-netmask 10.20.68.0/24
set address N-10.20.69.0-24 ip-netmask 10.20.69.0/24
set address N-10.20.70.0-24 ip-netmask 10.20.70.0/24
set address N-10.20.71.0-24 ip-netmask 10.20.71.0/24
set address N-10.20.72.0-24 ip-netmask 10.20.72.0/24
set address N-10.20.73.0-24 ip-netmask 10.20.73.0/24
set address N-10.20.74.0-24 ip-netmask 10.20.74.0/24
set address N-10.20.75.0-24 ip-netmask 10.20.75.0/24
set address H-173.203.19.142-32 ip-netmask 173.203.19.142/32
set address H-184.106.32.123-32 ip-netmask 184.106.32.123/32
set address H-184.106.32.125-32 ip-netmask 184.106.32.125/32
set address H-173.203.23.13-32 ip-netmask 173.203.23.13/32
set address H-173.203.23.8-32 ip-netmask 173.203.23.8/32
set address H-173.203.23.10-32 ip-netmask 173.203.23.10/32
set address H-173.203.23.15-32 ip-netmask 173.203.23.15/32
set address H-173.203.23.14-32 ip-netmask 173.203.23.14/32
set address H-198.101.162.122-32 ip-netmask 198.101.162.122/32
set address H-184.106.32.127-32 ip-netmask 184.106.32.127/32
set address H-184.106.32.126-32 ip-netmask 184.106.32.126/32
set address H-184.106.32.120-32 ip-netmask 184.106.32.120/32
set address H-198.101.162.120-32 ip-netmask 198.101.162.120/32
set address H-173.203.19.140-32 ip-netmask 173.203.19.140/32
set address H-184.106.32.124-32 ip-netmask 184.106.32.124/32
set address H-173.203.19.139-32 ip-netmask 173.203.19.139/32
set address H-173.203.23.9-32 ip-netmask 173.203.23.9/32
set address H-198.101.162.121-32 ip-netmask 198.101.162.121/32
set address H-173.203.19.143-32 ip-netmask 173.203.19.143/32
set address H-173.203.23.12-32 ip-netmask 173.203.23.12/32
set address H-173.203.19.141-32 ip-netmask 173.203.19.141/32
set address H-184.106.32.122-32 ip-netmask 184.106.32.122/32
set address H-173.203.19.137-32 ip-netmask 173.203.19.137/32
set address H-173.203.34.103-32 ip-netmask 173.203.34.103/32
set address H-173.203.19.136-32 ip-netmask 173.203.19.136/32
set address H-173.203.19.138-32 ip-netmask 173.203.19.138/32
set address H-23.253.197.158-32 ip-netmask 23.253.197.158/32
set address H-108.166.23.197-32 ip-netmask 108.166.23.197/32
set address H-108.166.23.196-32 ip-netmask 108.166.23.196/32
set address H-198.101.162.123-32 ip-netmask 198.101.162.123/32
set address H-50.57.24.92-32 ip-netmask 50.57.24.92/32
set address H-50.206.210.134-32 ip-netmask 50.206.210.134/32
set address H-50.57.200.40-32 ip-netmask 50.57.200.40/32
set address H-173.203.34.99-32 ip-netmask 173.203.34.99/32
set address H-50.56.2.131-32 ip-netmask 50.56.2.131/32
set address H-161.47.141.184-32 ip-netmask 161.47.141.184/32
set address H-161.47.42.45-32 ip-netmask 161.47.42.45/32
set address H-50.56.2.128-32 ip-netmask 50.56.2.128/32
set address H-50.57.24.89-32 ip-netmask 50.57.24.89/32
set address H-161.47.140.176-32 ip-netmask 161.47.140.176/32
set address H-162.209.38.236-32 ip-netmask 162.209.38.236/32
set address H-192.237.140.63-32 ip-netmask 192.237.140.63/32
set address H-192.168.105.102-32 ip-netmask 192.168.105.102/32
set address H-192.168.105.65-32 ip-netmask 192.168.105.65/32
set address N-10.20.48.0-20 ip-netmask 10.20.48.0/20
set service-group AL-IN-Ports members [ tcp-5666 ssh ]
set service-group AL-OUT-Ports members [ https tcp-4138 tcp-123 domain www ntp domain ]
set service-group WEB-PORTS members [ www https ]
set service-group RAX-VMW-INT_MYRACK-PORTS members [ https tcp-9443 tcp-5480 ]
set service-group RAX-VMW-INT_RVI-PORTS members [ ssh https tcp-902 tcp-903 tcp-8443 tcp-8080 tcp-9443 tcp-5480 tcp-5666 tcp-10443 tcp-12721 tcp-3389 tcp-9086 ]
set service tacacs protocol tcp port 49
set service tacacs protocol tcp override no
set service tacacs protocol udp port 49
set service tacacs protocol udp override no
set service domain protocol tcp port 53
set service domain protocol tcp override no
set service domain protocol udp port 53
set service domain protocol udp override no
set service sunrpc protocol tcp port 111
set service sunrpc protocol tcp override no
set service sunrpc protocol udp port 111
set service sunrpc protocol udp override no
set service pim-auto-rp protocol tcp port 496
set service pim-auto-rp protocol tcp override no
set service pim-auto-rp protocol udp port 496
set service pim-auto-rp protocol udp override no
set service talk protocol tcp port 517
set service talk protocol tcp override no
set service talk protocol udp port 517
set service talk protocol udp override no
set service kerberos protocol tcp port 750
set service kerberos protocol tcp override no
set service kerberos protocol udp port 750
set service kerberos protocol udp override no
set service nfs protocol tcp port 2049
set service nfs protocol tcp override no
set service nfs protocol udp port 2049
set service nfs protocol udp override no
set service sip protocol tcp port 5060
set service sip protocol tcp override no
set service sip protocol udp port 5060
set service sip protocol udp override no
set service daytime protocol tcp port 13
set service daytime protocol tcp override no
set service chargen protocol tcp port 19
set service chargen protocol tcp override no
set service ftp-data protocol tcp port 20
set service ftp-data protocol tcp override no
set service ftp protocol tcp port 21
set service ftp protocol tcp override no
set service ssh protocol tcp port 22
set service ssh protocol tcp override no
set service telnet protocol tcp port 23
set service telnet protocol tcp override no
set service smtp protocol tcp port 25
set service smtp protocol tcp override no
set service whois protocol tcp port 43
set service whois protocol tcp override no
set service gopher protocol tcp port 70
set service gopher protocol tcp override no
set service finger protocol tcp port 79
set service finger protocol tcp override no
set service www protocol tcp port 80
set service www protocol tcp override no
set service www protocol udp port 80
set service www protocol udp override no
set service hostname protocol tcp port 101
set service hostname protocol tcp override no
set service pop2 protocol tcp port 109
set service pop2 protocol tcp override no
set service pop3 protocol tcp port 110
set service pop3 protocol tcp override no
set service ident protocol tcp port 113
set service ident protocol tcp override no
set service nntp protocol tcp port 119
set service nntp protocol tcp override no
set service netbios-ssn protocol tcp port 139
set service netbios-ssn protocol tcp override no
set service imap4 protocol tcp port 143
set service imap4 protocol tcp override no
set service bgp protocol tcp port 179
set service bgp protocol tcp override no
set service irc protocol tcp port 194
set service irc protocol tcp override no
set service ldap protocol tcp port 389
set service ldap protocol tcp override no
set service https protocol tcp port 443
set service https protocol tcp override no
set service exec protocol tcp port 512
set service exec protocol tcp override no
set service login protocol tcp port 513
set service login protocol tcp override no
set service cmd protocol tcp port 514
set service cmd protocol tcp override no
set service rsh protocol tcp port 514
set service rsh protocol tcp override no
set service lpd protocol tcp port 515
set service lpd protocol tcp override no
set service uucp protocol tcp port 540
set service uucp protocol tcp override no
set service klogin protocol tcp port 543
set service klogin protocol tcp override no
set service kshell protocol tcp port 544
set service kshell protocol tcp override no
set service rtsp protocol tcp port 554
set service rtsp protocol tcp override no
set service ldaps protocol tcp port 636
set service ldaps protocol tcp override no
set service lotusnotes protocol tcp port 1352
set service lotusnotes protocol tcp override no
set service citrix-ica protocol tcp port 1494
set service citrix-ica protocol tcp override no
set service sqlnet protocol tcp port 1521
set service sqlnet protocol tcp override no
set service h323 protocol tcp port 1720
set service h323 protocol tcp override no
set service pptp protocol tcp port 1723
set service pptp protocol tcp override no
set service ctiqbe protocol tcp port 2748
set service ctiqbe protocol tcp override no
set service cifs protocol tcp port 3020
set service cifs protocol tcp override no
set service aol protocol tcp port 5190
set service aol protocol tcp override no
set service pcanywhere-data protocol tcp port 5631
set service pcanywhere-data protocol tcp override no
set service time protocol udp port 37
set service time protocol udp override no
set service nameserver protocol udp port 42
set service nameserver protocol udp override no
set service bootps protocol udp port 67
set service bootps protocol udp override no
set service bootpc protocol udp port 68
set service bootpc protocol udp override no
set service tftp protocol udp port 69
set service tftp protocol udp override no
set service ntp protocol udp port 123
set service ntp protocol udp override no
set service netbios-ns protocol udp port 137
set service netbios-ns protocol udp override no
set service netbios-dgm protocol udp port 138
set service netbios-dgm protocol udp override no
set service netbios-ss protocol udp port 139
set service netbios-ss protocol udp override no
set service snmp protocol udp port 161
set service snmp protocol udp override no
set service snmptrap protocol udp port 162
set service snmptrap protocol udp override no
set service xdmcp protocol udp port 177
set service xdmcp protocol udp override no
set service dnsix protocol udp port 195
set service dnsix protocol udp override no
set service mobile-ip protocol udp port 434
set service mobile-ip protocol udp override no
set service isakmp protocol udp port 500
set service isakmp protocol udp override no
set service biff protocol udp port 512
set service biff protocol udp override no
set service who protocol udp port 513
set service who protocol udp override no
set service syslog protocol udp port 514
set service syslog protocol udp override no
set service rip protocol udp port 520
set service rip protocol udp override no
set service radius protocol udp port 1645
set service radius protocol udp override no
set service radius-acct protocol udp port 1646
set service radius-acct protocol udp override no
set service secureid-udp protocol udp port 5510
set service secureid-udp protocol udp override no
set service pcanywhere-status protocol udp port 5632
set service pcanywhere-status protocol udp override no
set service snmptrap protocol udp port 162
set service snmptrap protocol udp override no
set service tcp-5666 protocol tcp port 5666
set service tcp-5666 protocol tcp override no
set service tcp-4138 protocol tcp port 4138
set service tcp-4138 protocol tcp override no
set service tcp-123 protocol tcp port 123
set service tcp-123 protocol tcp override no
set service tcp-9443 protocol tcp port 9443
set service tcp-9443 protocol tcp override no
set service tcp-5480 protocol tcp port 5480
set service tcp-5480 protocol tcp override no
set service tcp-902 protocol tcp port 902
set service tcp-902 protocol tcp override no
set service tcp-903 protocol tcp port 903
set service tcp-903 protocol tcp override no
set service tcp-8443 protocol tcp port 8443
set service tcp-8443 protocol tcp override no
set service tcp-8080 protocol tcp port 8080
set service tcp-8080 protocol tcp override no
set service tcp-10443 protocol tcp port 10443
set service tcp-10443 protocol tcp override no
set service tcp-12721 protocol tcp port 12721
set service tcp-12721 protocol tcp override no
set service tcp-3389 protocol tcp port 3389
set service tcp-3389 protocol tcp override no
set service tcp-9086 protocol tcp port 9086
set service tcp-9086 protocol tcp override no
set service all_TCP_ports protocol tcp port 1-65535
set service all_TCP_ports protocol tcp override no
set service all_TCP_ports description "All TCP ports"
set service all_UDP_ports protocol udp port 1-65535
set service all_UDP_ports protocol udp override no
set service all_UDP_ports description "All UDP ports"
set service tcp_1480 protocol tcp port 1480
set service tcp_1480 protocol tcp override yes timeout 3600
set service tcp_1480 protocol tcp override yes halfclose-timeout 120
set service tcp_1480 protocol tcp override yes timewait-timeout 15
set service tcp_1470 protocol tcp port 1470
set service tcp_1470 protocol tcp override yes timeout 3600
set service tcp_1470 protocol tcp override yes halfclose-timeout 120
set service tcp_1470 protocol tcp override yes timewait-timeout 15
set service tcp_1471 protocol tcp port 1471
set service tcp_1471 protocol tcp override yes timeout 3600
set service tcp_1471 protocol tcp override yes halfclose-timeout 120
set service tcp_1471 protocol tcp override yes timewait-timeout 15
set service tcp_3389 protocol tcp port 3389
set service tcp_3389 protocol tcp override yes timeout 3600
set service tcp_3389 protocol tcp override yes halfclose-timeout 120
set service tcp_3389 protocol tcp override yes timewait-timeout 15
set service tcp_www protocol tcp port 80
set service tcp_www protocol tcp override yes timeout 3600
set service tcp_www protocol tcp override yes halfclose-timeout 120
set service tcp_www protocol tcp override yes timewait-timeout 15
set service tcp_47 protocol tcp port 47
set service tcp_47 protocol tcp override yes timeout 3600
set service tcp_47 protocol tcp override yes halfclose-timeout 120
set service tcp_47 protocol tcp override yes timewait-timeout 15
set service udp_4500 protocol udp port 4500
set service udp_4500 protocol udp override yes timeout 30
set service tcp_5000 protocol tcp port 5000
set service tcp_5000 protocol tcp override yes timeout 3600
set service tcp_5000 protocol tcp override yes halfclose-timeout 120
set service tcp_5000 protocol tcp override yes timewait-timeout 15
set service tcp_902 protocol tcp port 902
set service tcp_902 protocol tcp override yes timeout 3600
set service tcp_902 protocol tcp override yes halfclose-timeout 120
set service tcp_902 protocol tcp override yes timewait-timeout 15
set setting ssl-decrypt allow-forward-decrypted-content no
set mgt-config users admin phash $1XXX..
set mgt-config users admin permissions role-based superuser yes
set mgt-config password-complexity enabled yes
set mgt-config password-complexity minimum-length 8
