!
!Device Configuration
!Date: 10-09-2025 19:40:04 
!DeviceDescription: DefensePro X
!Base MAC Address: 2c:b6:93:90:e6:00
!Software Version: 10.8.0.0 (Build date Dec 23 2024 14:11:51, Build#100)
!APSolute OS Version: 01.00-00.00(1):10.8.0.0
!Configuration Type: regular
!

!
! The following commands will take effect only
! once the device has been rebooted!
!

manage snmp versions-after-reset set "v1 & v2c & v3"

!
! The following commands take effect immediately
! upon execution!
!


net ip-interface create 10.1.1.200 24 MNG-1
net route table create 0.0.0.0 0 10.1.1.1 -i MNG-1
device static-forwarding-table setCreate 1 -dst 2 -fm Fail-Open
device static-forwarding-table setCreate 2 -dst 1 -fm Fail-Open -t \
Destination
device static-forwarding-table setCreate 3 -dst 4 -fm Fail-Open
device static-forwarding-table setCreate 4 -dst 3 -fm Fail-Open -t \
Destination
device static-forwarding-table setCreate 17 -dst 18 -fm Fail-Open
device static-forwarding-table setCreate 18 -dst 17 -fm Fail-Open -t \
Destination
device static-forwarding-table setCreate 19 -dst 20
device static-forwarding-table setCreate 20 -dst 19 -t Destination
device static-forwarding-table setCreate 21 -dst 22
device static-forwarding-table setCreate 22 -dst 21 -t Destination
device static-forwarding-table setCreate 23 -dst 24
device static-forwarding-table setCreate 24 -dst 23 -t Destination
device static-forwarding-table setCreate 5 -dst 6
device static-forwarding-table setCreate 6 -dst 5 -t Destination
device static-forwarding-table setCreate 7 -dst 8
device static-forwarding-table setCreate 8 -dst 7 -t Destination
device static-forwarding-table setCreate 9 -dst 10
device static-forwarding-table setCreate 10 -dst 9 -t Destination
device static-forwarding-table setCreate 11 -dst 12
device static-forwarding-table setCreate 12 -dst 11 -t Destination
device static-forwarding-table setCreate 13 -dst 14
device static-forwarding-table setCreate 14 -dst 13 -t Destination
device static-forwarding-table setCreate 15 -dst 16
device static-forwarding-table setCreate 16 -dst 15 -t Destination
device static-forwarding-table setCreate 25 -dst 26
device static-forwarding-table setCreate 26 -dst 25 -t Destination
device static-forwarding-table setCreate 27 -dst 28
device static-forwarding-table setCreate 28 -dst 27 -t Destination
device static-forwarding-table setCreate 29 -dst 30
device static-forwarding-table setCreate 30 -dst 29 -t Destination
device static-forwarding-table setCreate 31 -dst 32
device static-forwarding-table setCreate 32 -dst 31 -t Destination
classes modify application-port-groups create ftp 21 21
classes modify application-port-groups create ssh 22 22
classes modify application-port-groups create telnet 23 23
classes modify application-port-groups create smtp 25 25
classes modify application-port-groups create dns 53 53
classes modify application-port-groups create http 80 80
classes modify application-port-groups create pop3 110 110
classes modify application-port-groups create sunrpc 111 111
classes modify application-port-groups create ntp 123 123
classes modify application-port-groups create imap 143 143
classes modify application-port-groups create snmp 161 161
classes modify application-port-groups create https 443 443
classes modify application-port-groups create ms-sql-s 1433 1433
classes modify application-port-groups create ms-sql-m 1434 1434
classes modify application-port-groups create sip 5060 5060
classes modify application-port-groups create http 8080 8080
classes modify application-port-groups create rshell 514 514
classes modify application-port-groups create rexec 512 512
classes modify application-port-groups create tftp 69 69
classes modify application-port-groups create h225 1720 1720
classes modify application-port-groups create dcerpc 135 135
classes modify application-port-groups create dcerpc 139 139
classes modify application-port-groups create dcerpc 445 445
classes modify application-port-groups create rtsp 554 554
classes modify application-port-groups create radius 1645 1646
classes modify application-port-groups create radius 1812 1813
classes modify application-port-groups create TCPReset-ACK 0 0
classes modify application-port-groups create TCPReset-Data 0 0
classes modify application-port-groups create quic 443 443
classes modify application-port-groups create Zoom 8801 8810
classes modify application-port-groups create Teams 3480 3481
classes modify application-port-groups create Webex 5004 5004
classes modify application-port-groups create Webex 9000 9000
classes modify application-port-groups create Google-Meet 19302 19309
classes modify application-port-groups create Video-conf-Zoom-Teams-GMeet\
 3478 3479
dp reporting packet-report address set 10.1.1.201
system mib2-name set DPX10
classes modify network create nc_FW_VPN 0 -a 200.7.107.210 -s 32
classes modify network create nc_UNIANI 0 -a 200.7.107.211 -s 32
classes modify network create nc_ORFEO 0 -a 200.7.107.212 -s 32
classes modify network create nc_MESA_SERVICIO 0 -a 200.7.106.211 -s 32
classes modify network create nc_NWIDE_IPv4 0 -a 200.7.107.208 -s 29
classes modify network create nc_NWIDE_IPv6 0 -a 2801:01d2:: -s 48
classes modify network create nc_RAD_ORFEO 0 -a 200.7.107.213 -s 32
classes modify network create nc_INTRANET 0 -a 200.7.107.214 -s 32
services ntp polling-interval set 86400
services ntp status set enable
services ntp time-zone set -05:00
services ntp server-port set 123
manage user table create radware -pw \
YawnaTI/STBVmXJpJC7X8g2KihAIdp7QXEfOhbzO4f9HlcU/HNa/raQcymZy1cMDm9OslIioTtTr\
XHU0T/nvhw==
manage telnet status set disable
manage telnet server-port set 23
manage ssh status set enable
manage secure-web status set enable
net physical-interface set 1 -s 10Gbps -d Full -a On -f Auto
net physical-interface set 2 -s 10Gbps -d Full -a On -f Auto
net physical-interface set 3 -s 10Gbps -d Full -a On -f Auto
net physical-interface set 4 -s 10Gbps -d Full -a On -f Auto
net physical-interface set 5 -s N/A -d Full -a On -f Auto
net physical-interface set 6 -s N/A -d Full -a On -f Auto
net physical-interface set 7 -s N/A -d Full -a On -f Auto
net physical-interface set 8 -s N/A -d Full -a On -f Auto
net physical-interface set 9 -s N/A -d Full -a On -f Auto
net physical-interface set 10 -s N/A -d Full -a On -f Auto
net physical-interface set 11 -s N/A -d Full -a On -f Auto
net physical-interface set 12 -s N/A -d Full -a On -f Auto
net physical-interface set 13 -s N/A -d Full -a On -f Auto
net physical-interface set 14 -s N/A -d Full -a On -f Auto
net physical-interface set 15 -s N/A -d Full -a On -f Auto
net physical-interface set 16 -s N/A -d Full -a On -f Auto
net physical-interface set 17 -s 1Gbps -d Full -a On -f Auto
net physical-interface set 18 -s 1Gbps -d Full -a On -f Auto
net physical-interface set 19 -s 1Gbps -d Full -a On -f Auto
net physical-interface set 20 -s 1Gbps -d Full -a On -f Auto
net physical-interface set 21 -s 1Gbps -d Full -a On -f Auto
net physical-interface set 22 -s 1Gbps -d Full -a On -f Auto
net physical-interface set 23 -s 1Gbps -d Full -a On -f Auto
net physical-interface set 24 -s 1Gbps -d Full -a On -f Auto
net physical-interface set 25 -s N/A -d Full -a On -f Auto
net physical-interface set 26 -s N/A -d Full -a On -f Auto
net physical-interface set 27 -s N/A -d Full -a On -f Auto
net physical-interface set 28 -s N/A -d Full -a On -f Auto
net physical-interface set 29 -s N/A -d Full -a On -f Auto
net physical-interface set 30 -s N/A -d Full -a On -f Auto
net physical-interface set 31 -s N/A -d Full -a On -f Auto
net physical-interface set 32 -s N/A -d Full -a On -f Auto
net physical-interface set MNG-1 -s 1Gbps -d Full -a Auto -f Auto
net physical-interface set MNG-2 -s 1Gbps -d Full -a Auto -f Auto
services ntp server-name set 192.168.200.150
net l2-interface set 1 -ad up
net l2-interface set 2 -ad up -ifd help
net l2-interface set 3 -ad up
manage snmp groups create SNMPv1 public -gn initial
manage snmp groups create SNMPv1 ReadOnlySecurity -gn InitialReadOnly
manage snmp groups create SNMPv2c public -gn initial
manage snmp groups create SNMPv2c ReadOnlySecurity -gn InitialReadOnly
manage snmp groups create UserBased radware -gn initial
manage snmp groups create UserBased ReadOnlySecurity -gn InitialReadOnly
manage snmp groups create UserBased radwaresync -gn initial
manage snmp access create initial SNMPv1 noAuthNoPriv -rvn iso -wvn iso \
-nvn iso
manage snmp access create InitialReadOnly SNMPv1 noAuthNoPriv -rvn \
ReadOnlyView -wvn None -nvn None
manage snmp access create initial SNMPv2c noAuthNoPriv -rvn iso -wvn iso \
-nvn iso
manage snmp access create InitialReadOnly SNMPv2c noAuthNoPriv -rvn \
ReadOnlyView -wvn None -nvn None
manage snmp access create initial UserBased authPriv -rvn iso -wvn iso \
-nvn iso
manage snmp access create InitialReadOnly UserBased authPriv -rvn \
ReadOnlyView -wvn None -nvn None
manage snmp views create iso 1
manage snmp views create None 1 -cm excluded
manage snmp views create ReadOnlyView 1
manage snmp views create ReadOnlyView 1.3.6.1.4.1.89.2.7.2 -cm excluded
manage snmp views create ReadOnlyView 1.3.6.1.6.3.18.1.1 -cm excluded
manage snmp views create ReadOnlyView 1.3.6.1.6.3.15.1.2.2 -cm excluded
manage snmp views create ReadOnlyView 1.3.6.1.4.1.89.35.1.61 -cm \
excluded
manage snmp views create ReadOnlyView 1.3.6.1.6.3.16.1.2 -cm excluded
manage snmp views create ReadOnlyView 1.3.6.1.6.3.16.1.4 -cm excluded
manage snmp views create ReadOnlyView 1.3.6.1.6.3.16.1.5 -cm excluded
manage snmp notify create allTraps -ta v3Traps
manage snmp global engine-id set 80000059032cb69390e600
manage snmp users create radware -cf 0.0 -ap MD5 -akc \
ddd2f0bdfa89cf3cb43cbee7bfbe4770 -pp DES -pkc \
ddd2f0bdfa89cf3cb43cbee7bfbe4770
manage snmp users create radwaresync -cf 0.0 -ap SHA -akc \
f83d2da8d7ec1ed8d76c7fe9d3292dec92fed9e9 -pp AES -pkc \
f83d2da8d7ec1ed8d76c7fe9d3292dec92fed9e9000000000000000000000000
manage snmp target-address create v3MngStations -tl v3Traps -p \
radware-authPriv
manage snmp target-address create Vision-V3-10.1.1.201 -a 10.1.1.201-162 \
-tl v3Traps -p Vision-V3-10.1.1.201
manage snmp target-parameters create public-v1 -d SNMPv1 -sm SNMPv1 -sn \
public -sl noAuthNoPriv
manage snmp target-parameters create public-v2 -d SNMPv2c -sm SNMPv2c -sn \
public -sl noAuthNoPriv
manage snmp target-parameters create radware-authPriv -d SNMPv3 -sm \
UserBased -sn radware -sl authPriv
manage snmp target-parameters create Vision-V3-10.1.1.201 -d SNMPv3 -sm \
UserBased -sn radwaresync -sl authPriv
manage snmp community create public -n public -sn public
services auditing status set Enabled
dp out-of-state profiles create oos_FW_VPN -pr enable
dp out-of-state profiles create oos_UNIANI -pr enable
dp out-of-state profiles create oos_ORFEO -pr enable
dp out-of-state profiles create oos_MESA_SERVICIO -pr enable
dp out-of-state profiles create oos_NWIDE_IPv4 -pr enable
dp out-of-state profiles create oos_NWIDE_IPv6 -pr enable
dp out-of-state profiles create oos_GLOBAL -pr enable
dp out-of-state profiles create oos_RAD_ORFEO -pr enable
dp out-of-state profiles create oos_INTRANET -pr enable
dp anti-scanning global status set enable
dp anti-scanning profiles table create as_FW_VPN -udp Active -icmp \
Active -pr Enable
dp anti-scanning profiles table create as_UNIANI -udp Active -icmp \
Active -pr Enable
dp anti-scanning profiles table create as_ORFEO -udp Active -icmp Active \
-pr Enable
dp anti-scanning profiles table create as_MESA_SERVICIO -udp Active -icmp \
Active -pr Enable
dp anti-scanning profiles table create as_NWIDE_IPv4 -udp Active -icmp \
Active -pr Enable
dp anti-scanning profiles table create as_NWIDE_IPv6 -udp Active -icmp \
Active -pr Enable
dp anti-scanning profiles table create as_GLOBAL -udp Active -icmp \
Active -pr Enable
dp anti-scanning profiles table create as_RAD_ORFEO -udp Active -icmp \
Active -pr Enable
dp anti-scanning profiles table create as_INTRANET -udp Active -icmp \
Active -pr Enable
dp behavioral-DoS profiles create BDoS_FW_VPN -syn Enabled -udp Enabled \
-igmp Enabled -icmp Enabled -fa Enabled -rst Enabled -sa Enabled -tfr \
Enabled -it 100000 -ot 100000 -tiq 10 -uiq 90 -iciq 2 -igiq 2 -toq 10 -uoq \
90 -icoq 2 -igoq 2 -ufr Enabled -ufiq 25 -ufoq 25 -lst 25 -st Medium
dp behavioral-DoS profiles create BDoS_UNIANI -syn Enabled -udp Enabled \
-igmp Enabled -icmp Enabled -fa Enabled -rst Enabled -sa Enabled -tfr \
Enabled -it 100000 -ot 100000 -tiq 75 -uiq 50 -iciq 2 -igiq 2 -toq 75 -uoq \
50 -icoq 2 -igoq 2 -ufr Enabled -ufiq 25 -ufoq 25 -lst 25 -st Medium
dp behavioral-DoS profiles create BDoS_ORFEO -syn Enabled -udp Enabled \
-igmp Enabled -icmp Enabled -fa Enabled -rst Enabled -sa Enabled -tfr \
Enabled -it 100000 -ot 100000 -tiq 75 -uiq 50 -iciq 2 -igiq 2 -toq 75 -uoq \
50 -icoq 2 -igoq 2 -ufr Enabled -ufiq 25 -ufoq 25 -lst 25 -st Medium
dp behavioral-DoS profiles create BDoS_MESA_SERVICIO -syn Enabled -udp \
Enabled -igmp Enabled -icmp Enabled -fa Enabled -rst Enabled -sa Enabled \
-tfr Enabled -it 100000 -ot 100000 -tiq 75 -uiq 50 -iciq 2 -igiq 2 -toq \
75 -uoq 50 -icoq 2 -igoq 2 -ufr Enabled -ufiq 25 -ufoq 25 -lst 25 -st \
Medium
dp behavioral-DoS profiles create BDoS_NWIDE_IPv4 -syn Enabled -udp \
Enabled -igmp Enabled -icmp Enabled -fa Enabled -rst Enabled -sa Enabled \
-tfr Enabled -it 100000 -ot 100000 -tiq 75 -uiq 50 -iciq 2 -igiq 2 -toq \
75 -uoq 50 -icoq 2 -igoq 2 -ufr Enabled -ufiq 25 -ufoq 25 -lst 25 -st \
Medium
dp behavioral-DoS profiles create BDoS_NWIDE_IPv6 -syn Enabled -udp \
Enabled -igmp Enabled -icmp Enabled -fa Enabled -rst Enabled -sa Enabled \
-tfr Enabled -it 100000 -ot 100000 -tiq 75 -uiq 50 -iciq 2 -igiq 2 -toq \
75 -uoq 50 -icoq 2 -igoq 2 -ufr Enabled -ufiq 25 -ufoq 25 -lst 25 -st \
Medium
dp behavioral-DoS profiles create BDoS_GLOBAL -syn Enabled -udp Enabled \
-igmp Enabled -icmp Enabled -fa Enabled -rst Enabled -sa Enabled -tfr \
Enabled -it 100000 -ot 100000 -tiq 75 -uiq 50 -iciq 2 -igiq 2 -toq 75 -uoq \
50 -icoq 2 -igoq 2 -ufr Enabled -ufiq 25 -ufoq 25 -lst 25 -st Medium
dp behavioral-DoS profiles create BDoS_RAD_ORFEO -syn Enabled -udp \
Enabled -igmp Enabled -icmp Enabled -fa Enabled -rst Enabled -sa Enabled \
-tfr Enabled -it 100000 -ot 100000 -tiq 75 -uiq 50 -iciq 2 -igiq 2 -toq \
75 -uoq 50 -icoq 2 -igoq 2 -ufr Enabled -ufiq 25 -ufoq 25 -lst 25 -st \
Medium
dp behavioral-DoS profiles create BDoS_INTRANET -syn Enabled -udp \
Enabled -igmp Enabled -icmp Enabled -fa Enabled -rst Enabled -sa Enabled \
-tfr Enabled -it 100000 -ot 100000 -tiq 75 -uiq 50 -iciq 2 -igiq 2 -toq \
75 -uoq 50 -icoq 2 -igoq 2 -ufr Enabled -ufiq 25 -ufoq 25 -lst 25 -st \
Medium
hidden profile setCreate syn_FW_VPN HTTP -aid 200000
hidden profile setCreate syn_FW_VPN HTTPS -aid 200001
hidden profile setCreate syn_UNIANI HTTP -aid 200000
hidden profile setCreate syn_UNIANI HTTPS -aid 200001
hidden profile setCreate syn_ORFEO HTTP -aid 200000
hidden profile setCreate syn_ORFEO HTTPS -aid 200001
hidden profile setCreate syn_MESA_SERVICIO HTTP -aid 200000
hidden profile setCreate syn_MESA_SERVICIO HTTPS -aid 200001
hidden profile setCreate syn_NWIDE_IPv4 HTTP -aid 200000
hidden profile setCreate syn_NWIDE_IPv4 HTTPS -aid 200001
hidden profile setCreate syn_NWIDE_IPv6 HTTP -aid 200000
hidden profile setCreate syn_NWIDE_IPv6 HTTPS -aid 200001
hidden profile setCreate syn_GLOBAL HTTP -aid 200000
hidden profile setCreate syn_GLOBAL HTTPS -aid 200001
hidden profile setCreate syn_RAD_ORFEO HTTP -aid 200000
hidden profile setCreate syn_RAD_ORFEO HTTPS -aid 200001
hidden profile setCreate syn_INTRANET HTTPS -aid 200001
hidden profile setCreate syn_INTRANET HTTP -aid 200000
manage telnet session-timeout set 5
manage telnet auth-timeout set 30
manage ssh algorithms set chacha20-poly1305@openssh.com,aes128-ctr,aes192-\
ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
manage syslog destinations create 10.1.1.5
dp policies-config table setCreate pl_FW_VPN -dn nc_FW_VPN -pr Enabled \
-sig DoS-All -con "" -oos oos_FW_VPN -sca as_FW_VPN -dos BDoS_FW_VPN -syn \
syn_FW_VPN -dns "" -p 1000 -tf "" -https "" -geo GEO_FW_VPN -eaaf \
ert_FW_VPN -ppsl "" -qdos "" -fp "" -udf ""
dp policies-config table setCreate pl_UNIANI -dn nc_UNIANI -pr Enabled \
-sig DoS-All -con "" -oos oos_UNIANI -sca as_UNIANI -dos BDoS_UNIANI -syn \
syn_UNIANI -dns "" -p 1100 -tf "" -cdn Enabled -https "" -geo GEO_UNIANI \
-eaaf ert_UNIANI -ppsl "" -qdos "" -fp "" -udf ""
dp policies-config table setCreate pl_ORFEO -dn nc_ORFEO -pr Enabled -sig \
DoS-All -con "" -oos oos_ORFEO -sca as_ORFEO -dos BDoS_ORFEO -syn \
syn_ORFEO -dns "" -p 1200 -tf "" -cdn Enabled -https "" -geo GEO_ORFEO \
-eaaf ert_ORFEO -ppsl "" -qdos "" -fp "" -udf ""
dp policies-config table setCreate pl_MESA_SERVICIO -dn nc_MESA_SERVICIO \
-a "Report Only" -pr Enabled -sig DoS-All -con "" -oos oos_MESA_SERVICIO \
-sca as_MESA_SERVICIO -dos BDoS_MESA_SERVICIO -syn syn_MESA_SERVICIO -dns \
"" -p 1400 -tf "" -cdn Enabled -https "" -geo GEO_MESA_SERVICIO -eaaf \
ert_MESA_SERVICIO -ppsl "" -qdos "" -fp "" -udf ""
dp policies-config table setCreate pl_NWIDE_IPv4 -dn nc_NWIDE_IPv4 -pr \
Enabled -sig DoS-All -con "" -oos oos_NWIDE_IPv4 -sca as_NWIDE_IPv4 -dos \
BDoS_NWIDE_IPv4 -syn syn_NWIDE_IPv4 -dns "" -p 300 -tf "" -https "" -geo \
GEO_NWIDE_IPv4 -eaaf ert_NWIDE_IPv4 -ppsl "" -qdos "" -fp "" -udf ""
dp policies-config table setCreate pl_RAD_ORFEO -dn nc_RAD_ORFEO -pr \
Enabled -sig DoS-All -con "" -oos oos_RAD_ORFEO -sca as_RAD_ORFEO -dos \
BDoS_RAD_ORFEO -syn syn_RAD_ORFEO -dns "" -p 1300 -tf "" -cdn Enabled \
-https "" -geo GEO_RAD_ORFEO -eaaf ert_RAD_ORFEO -ppsl "" -qdos "" -fp "" \
-udf ""
dp policies-config table setCreate pl_NWIDE_IPv6 -dn nc_NWIDE_IPv6 -pr \
Enabled -sig DoS-All -con "" -oos oos_NWIDE_IPv6 -sca as_NWIDE_IPv6 -dos \
BDoS_NWIDE_IPv6 -syn syn_NWIDE_IPv6 -dns "" -p 200 -tf "" -https "" -geo \
GEO_GLOBAL -eaaf ert_NWIDE_IPv6 -ppsl "" -qdos "" -fp "" -udf ""
dp policies-config table setCreate pl_GLOBAL -pr Enabled -sig DoS-All \
-con "" -oos oos_GLOBAL -sca as_GLOBAL -dos BDoS_GLOBAL -syn syn_GLOBAL \
-dns "" -p 100 -tf "" -https "" -geo GEO_GLOBAL -eaaf ert_GLOBAL -ppsl "" \
-qdos "" -fp "" -udf ""
dp policies-config table setCreate pl_INTRANET -dn nc_INTRANET -a \
"Report Only" -pr Enabled -sig DoS-All -con "" -oos oos_INTRANET -sca \
as_INTRANET -dos BDoS_INTRANET -syn syn_INTRANET -dns "" -p 1500 -tf "" \
-cdn Enabled -https "" -geo GEO_INTRANET -eaaf ert_INTRANET -ppsl "" -qdos \
"" -fp "" -udf ""
dp geo-feed profiles table create GEO_GLOBAL
dp geo-feed profiles table create GEO_NWIDE_IPv6
dp geo-feed profiles table create GEO_NWIDE_IPv4
dp geo-feed profiles table create GEO_MESA_SERVICIO
dp geo-feed profiles table create GEO_RAD_ORFEO
dp geo-feed profiles table create GEO_ORFEO
dp geo-feed profiles table create GEO_UNIANI
dp geo-feed profiles table create GEO_FW_VPN
dp geo-feed profiles table create GEO_INTRANET
dp eaaf profiles create ert_FW_VPN
dp eaaf profiles create ert_UNIANI
dp eaaf profiles create ert_ORFEO
dp eaaf profiles create ert_MESA_SERVICIO
dp eaaf profiles create ert_NWIDE_IPv4
dp eaaf profiles create ert_NWIDE_IPv6
dp eaaf profiles create ert_GLOBAL
dp eaaf profiles create ert_RAD_ORFEO
dp eaaf profiles create ert_INTRANET
dp reporting packet-report destination-addresses setCreate 10.1.1.201
dp reporting data-report address setCreate 10.1.1.201
manage ssh mac set umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-s\
ha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.\
com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hma\
c-sha1
manage ssh kex set curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sh\
a2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-h\
ellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-s\
ha256,diffie-hellman-group14-sha1
hidden profiles params create syn_FW_VPN -reset enable
hidden profiles params create syn_UNIANI -reset enable
hidden profiles params create syn_ORFEO -reset enable
hidden profiles params create syn_MESA_SERVICIO -reset enable
hidden profiles params create syn_NWIDE_IPv4 -reset enable
hidden profiles params create syn_NWIDE_IPv6 -reset enable
hidden profiles params create syn_GLOBAL -reset enable
hidden profiles params create syn_RAD_ORFEO -reset enable
system internal dme-fast-reset-mode set Report
system internal dme-fast-reset-limit set 100
system internal dme-fast-reset-notification set Disable
dp behavioral-DoS advanced-udp services setCreate BDoS_FW_VPN Google-Meet \
-p Google-Meet
dp behavioral-DoS advanced-udp services setCreate BDoS_FW_VPN Teams -p \
Teams
dp behavioral-DoS advanced-udp services setCreate BDoS_FW_VPN\
 Video-conf-Zoom-Teams-GMeet -p Video-conf-Zoom-Teams-GMeet
dp behavioral-DoS advanced-udp services setCreate BDoS_FW_VPN Webex -p \
Webex
dp behavioral-DoS advanced-udp services setCreate BDoS_FW_VPN Zoom -p \
Zoom
dp behavioral-DoS advanced-udp services setCreate BDoS_GLOBAL Google-Meet \
-p Google-Meet
dp behavioral-DoS advanced-udp services setCreate BDoS_GLOBAL Teams -p \
Teams
dp behavioral-DoS advanced-udp services setCreate BDoS_GLOBAL\
 Video-conf-Zoom-Teams-GMeet -p Video-conf-Zoom-Teams-GMeet
dp behavioral-DoS advanced-udp services setCreate BDoS_GLOBAL Webex -p \
Webex
dp behavioral-DoS advanced-udp services setCreate BDoS_GLOBAL Zoom -p \
Zoom
dp behavioral-DoS advanced-udp services setCreate BDoS_INTRANET\
 Google-Meet -p Google-Meet
dp behavioral-DoS advanced-udp services setCreate BDoS_INTRANET Teams -p \
Teams
dp behavioral-DoS advanced-udp services setCreate BDoS_INTRANET\
 Video-conf-Zoom-Teams-GMeet -p Video-conf-Zoom-Teams-GMeet
dp behavioral-DoS advanced-udp services setCreate BDoS_INTRANET Webex -p \
Webex
dp behavioral-DoS advanced-udp services setCreate BDoS_INTRANET Zoom -p \
Zoom
dp behavioral-DoS advanced-udp services setCreate BDoS_MESA_SERVICIO\
 Google-Meet -p Google-Meet
dp behavioral-DoS advanced-udp services setCreate BDoS_MESA_SERVICIO\
 Teams -p Teams
dp behavioral-DoS advanced-udp services setCreate BDoS_MESA_SERVICIO\
 Video-conf-Zoom-Teams-GMeet -p Video-conf-Zoom-Teams-GMeet
dp behavioral-DoS advanced-udp services setCreate BDoS_MESA_SERVICIO\
 Webex -p Webex
dp behavioral-DoS advanced-udp services setCreate BDoS_MESA_SERVICIO Zoom \
-p Zoom
dp behavioral-DoS advanced-udp services setCreate BDoS_NWIDE_IPv4\
 Google-Meet -p Google-Meet
dp behavioral-DoS advanced-udp services setCreate BDoS_NWIDE_IPv4 Teams \
-p Teams
dp behavioral-DoS advanced-udp services setCreate BDoS_NWIDE_IPv4\
 Video-conf-Zoom-Teams-GMeet -p Video-conf-Zoom-Teams-GMeet
dp behavioral-DoS advanced-udp services setCreate BDoS_NWIDE_IPv4 Webex \
-p Webex
dp behavioral-DoS advanced-udp services setCreate BDoS_NWIDE_IPv4 Zoom -p \
Zoom
dp behavioral-DoS advanced-udp services setCreate BDoS_NWIDE_IPv6\
 Google-Meet -p Google-Meet
dp behavioral-DoS advanced-udp services setCreate BDoS_NWIDE_IPv6 Teams \
-p Teams
dp behavioral-DoS advanced-udp services setCreate BDoS_NWIDE_IPv6\
 Video-conf-Zoom-Teams-GMeet -p Video-conf-Zoom-Teams-GMeet
dp behavioral-DoS advanced-udp services setCreate BDoS_NWIDE_IPv6 Webex \
-p Webex
dp behavioral-DoS advanced-udp services setCreate BDoS_NWIDE_IPv6 Zoom -p \
Zoom
dp behavioral-DoS advanced-udp services setCreate BDoS_ORFEO Google-Meet \
-p Google-Meet
dp behavioral-DoS advanced-udp services setCreate BDoS_ORFEO Teams -p \
Teams
dp behavioral-DoS advanced-udp services setCreate BDoS_ORFEO\
 Video-conf-Zoom-Teams-GMeet -p Video-conf-Zoom-Teams-GMeet
dp behavioral-DoS advanced-udp services setCreate BDoS_ORFEO Webex -p \
Webex
dp behavioral-DoS advanced-udp services setCreate BDoS_ORFEO Zoom -p \
Zoom
dp behavioral-DoS advanced-udp services setCreate BDoS_RAD_ORFEO\
 Google-Meet -p Google-Meet
dp behavioral-DoS advanced-udp services setCreate BDoS_RAD_ORFEO Teams -p \
Teams
dp behavioral-DoS advanced-udp services setCreate BDoS_RAD_ORFEO\
 Video-conf-Zoom-Teams-GMeet -p Video-conf-Zoom-Teams-GMeet
dp behavioral-DoS advanced-udp services setCreate BDoS_RAD_ORFEO Webex -p \
Webex
dp behavioral-DoS advanced-udp services setCreate BDoS_RAD_ORFEO Zoom -p \
Zoom
dp behavioral-DoS advanced-udp services setCreate BDoS_UNIANI Google-Meet \
-p Google-Meet
dp behavioral-DoS advanced-udp services setCreate BDoS_UNIANI Teams -p \
Teams
dp behavioral-DoS advanced-udp services setCreate BDoS_UNIANI\
 Video-conf-Zoom-Teams-GMeet -p Video-conf-Zoom-Teams-GMeet
dp behavioral-DoS advanced-udp services setCreate BDoS_UNIANI Webex -p \
Webex
dp behavioral-DoS advanced-udp services setCreate BDoS_UNIANI Zoom -p \
Zoom
ssl-settings certificates-repository table \
Name: radware \
Type: certificate \
-----BEGIN CERTIFICATE----- \
MIIDYTCCAkkCBDrG8TAwDQYJKoZIhvcNAQELBQAwdTELMAkGA1UEBhMCVVMxEDAO \
BgNVBAgMB1JhZHdhcmUxEDAOBgNVBAcMB1JhZHdhcmUxEzARBgNVBAMMCjEwLjEu \
MS4yMDAxEDAOBgNVBAoMB1JhZHdhcmUxGzAZBgNVBAsMElJhZHdhcmUgd2ViIHNl \
cnZlcjAeFw0yNTA0MjQyMjAxNDVaFw0yNjA0MjQyMjAxNDVaMHUxCzAJBgNVBAYT \
AlVTMRAwDgYDVQQIDAdSYWR3YXJlMRAwDgYDVQQHDAdSYWR3YXJlMRMwEQYDVQQD \
DAoxMC4xLjEuMjAwMRAwDgYDVQQKDAdSYWR3YXJlMRswGQYDVQQLDBJSYWR3YXJl \
IHdlYiBzZXJ2ZXIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOI2QU \
ZaFcgOernI1k5VNl0WrEt10NVU93n76UDAGbVgRBgDAEEOUyErq8ZfC3BINhDfTt \
HqCh7z6nJhGj8gdFpqfjR0LDpYGki/PY+wGcAZGnOwnKXIgVGUktwLC2beayGU/b \
7KdM7VfPzcTqMKTMxinGw6WCuiqU7PL4GVvfEDd1770iP2tzqXSdiDCdD52P/fbc \
vjE8/jSGU7ExHPJjk4VaighqruqcPrnQelOIA+73q9ds9MD4L1+jmBhH3dH071F2 \
fiibburWGMhNU7KU5n/r8xb6KXxfi82gd1pB2S2Ox5EuRWqUVBolfH29NIMIeMoJ \
ME9PVmfqVdyoGeFNAgMBAAEwDQYJKoZIhvcNAQELBQADggEBAHT/lxlHU/x1o9Pg \
5JW+BRcNuQxuheTz8ZLVuj4gHTUCvjaQhDM0Ya3JEUP7g8h0HZCjx5NG+UqyOv57 \
7AWoA929fxXqDsxywY2Ryxd5kcEZXHq4MGzEtj9Y+VzEtSOB2LeTB/gcJsUFk9se \
2SgZV9P84hel4601eCc9N4vwKG4jVDh+T95byjAbPnVN36NH9D/SeguVmMtQ/avc \
n1BASGTsJ1Lx6faTcG1FgH/OxO061rQXU/WOGgKrCH9pfZV7FY0UMIFpQDK/0vOO \
e0SAaWeigCDnQ4x3PvWjklO/OTf7H689jdDC3fGjMFI5BvGZ6iiBY/ZRcx1qPhvJ \
+Luz1pQ= \
-----END CERTIFICATE----- 

!File Signature: 47f7437c2c33781571cc8e98fa9ae297