config user radius
edit FGT-Radius
set server 200.70.15.201
set secret yGv2NcwcWZfEdCvJ
set source-ip 200.41.172.241
next
end
config user group
edit Radius_group
set member FGT-Radius
config match
edit 1
set server-name FGT-Radius
set group-name SOC_L1
next
edit 2
set server-name FGT-Radius
set group-name SOC_L2
next
end
next
end
config system accprofile
edit no_access
next
edit super_viewer
set mntgrp read
set admingrp read
set updategrp read
set authgrp read
set sysgrp read
set netgrp read
set loggrp read
set routegrp read
set fwgrp read
set vpngrp read
set utmgrp read
set wanoptgrp read
set endpoint-control-grp read
set wifi read
next
end
config system admin
edit admin
set trusthost1 200.0.224.192 255.255.255.192
set trusthost2 200.70.15.192 255.255.255.192
set trusthost4 200.16.206.224 255.255.255.252
set trusthost5 200.41.172.240 255.255.255.248
next
edit Radius_Admins
set trusthost1 200.0.224.192 255.255.255.192
set trusthost2 200.70.15.192 255.255.255.192
set trusthost4 200.16.206.224 255.255.255.252
set trusthost5 200.41.172.240 255.255.255.248
set accprofile no_access
set remote-auth enable
set vdom root
set wildcard enable
set remote-group Radius_group
set accprofile-override enable
next
end
config system settings
set gui-multiple-utm-profiles enable
end
config application list
edit SOC_Monitor
set app-replacemsg disable
set other-application-log enable
set unknown-application-log enable
config entries
edit 1
set category 3 7 12 15 21 22 25 28 29 30 31
set action pass
set log disable
next
end
next
edit SOC_Standard
set app-replacemsg disable
set other-application-log enable
set unknown-application-log enable
config entries
edit 1
set application 16435 16714 17244 27948 40012
set action pass
next
edit 2
set risk 5 4
set category 12
set technology 2
next
edit 3
set category 2 6 8
next
edit 4
set category 3 12 15 21 22 25 26 28 29 30 31
set action pass
set log disable
next
end
next
end
config webfilter profile
edit SOC_Monitor
config ftgd-wf
set options error-allow
config filters
edit 5
set category 11
next
edit 8
set category 14
next
edit 9
set category 15
next
edit 11
next
edit 18
set category 26
next
edit 19
set category 61
next
edit 20
set category 86
next
edit 21
set category 88
next
edit 22
set category 90
next
edit 23
set category 91
next
edit 24
set category 83
next
edit 28
set category 3
next
edit 31
set category 59
next
edit 36
set category 72
next
end
end
next
edit SOC_Standard
config ftgd-wf
set options error-allow
config filters
edit 24
set category 83
next
edit 25
set category 1
next
edit 6
set category 12
next
edit 26
set category 3
set action block
next
edit 27
set category 59
set action block
next
edit 9
set category 15
set action block
next
edit 5
set category 11
set action block
next
edit 8
set category 14
set action block
next
edit 28
set category 72
set action block
next
edit 21
set category 88
next
edit 18
set category 26
set action block
next
edit 22
set category 90
next
edit 23
set category 91
next
edit 19
set category 61
set action block
next
edit 19
set category 86
set action block
next
next
end
end
end
