Struktura plików ->

Struktura katalogu zawierającego pliki konfiguracyjne UTM: ConfigFiles/wifi ConfigFiles/webadmin ConfigFiles/verbose ConfigFiles/userright ConfigFiles/userreqd ConfigFiles/urlgroup ConfigFiles/urlcat...

webadmin

Plik definiuje dostęp do GUI UTM-a. Ustala port na którym nasłuchuje konsola GUI oraz zabezpieczenia dostępu. [ACL] any   [Config] State=1 BruteforceState=1 NbAttempt=3 TimeoutBa...

system

[Service] Syslog=0   [Console] Default=1 Speed=9600# Default 9600, should be rised to 115200 KernelMsg=# 0: Off, 1: Serial (w/o display), 2: Display if Keyboard detected else Serial, 3: S...

auth

[Config] Anonymised=0# show an anonymised portal SslCertificate=# When using a custom SSL certificate SslShutdown=2# How to shutdown the SSL connection (0=send&receive&close, 2=send&c...

autobackup

[Autobackup] State=0 Period=1w BackupId= BackupPassword= DistantBackup=1 Server= Port= Path= Protocol= Controlname= Mode= AuthUsername= AuthPassword= ServerCertificate= ClientCertific...

autoupdate

[Global] version=1 Verbose=1 #0 to disable verbose, 1 for Errors only, 2 for Errors+Infos, 3 for Errors+Infos+Debug VerboseFile=stdout   [Antispam] URL=http://update1.stormshield.eu/1,htt...

boot

[Usb] Boot=0 CheckUsbConf=0   [Error] Install= Secure= Usb=

cngroup

[proxyssl_bypass] *.mozillamessaging.com *.mozilla.org *.vmware.com microsoft.com *.microsoft.com *.cdn.mozilla.net get.adobe.com *.stormshieldcs.eu

ddnsclient

[Config] Verbose=0# set level 0, 1, 2, 3 (default is 0) VerboseFile=# choose output file   ################################################# # Examples of all sections and tokens available...

dhcp

[Config] State=0 RelayState=0# disable/enable DHCPv4 relay   [Global] default-ltime=86400# default lease time in seconds: default duration for which stations will keep the same IP address ...

dns

[Config] Nat=0               # disable/enable transparent mode (intercepts all DNS queries sent by authorized clients) State=0          ...

ether

[Config] MaxARPEntries= MaxNDPEntries= MbufWaitingPerMille=50# permillage of arp or ndp request that can hold mbuf

hostrep

[Global] State=1 RiskHalfLife=21600# a risk of 100 will be scored as 50 after this duration, and 25 after twice this duration... RiskTTL=86400# a risk older than this duration will be ignored &n...

proxy

[Config] Verbose=               # Verbosity : [ all | <http>,<smtp>,<pop3>,<ftp>,<ssl>,<antivirus>,<antispam>,<icap&g...

pvm

[Global] State=1 EventTTL=604800         # 7 days keeping the vulnerability / product detection EventConnTTL=5          # 5 seconds EventParserTTL=86...

route

[Config] DefaultRoute=gateway   [StaticRoutes] # host/net,interface[->gateway][,color]

serverd

[Global] State=1 AuthRemoteAdmin=1 AdminLdapDN= AdminLogin=admin WriteMonitorLog=1# Compute statistics and put it on l_monitor log (Performance cost) VerboseAtStart=0 Verbose=all    ...

stated

[Global] # Possible verbose types are: #   All : all the following elements #   Main : Stated startup / cleanup + verbosity levels changes #   Thread : Threads management #  ...

statusweight

[System]# System total : 165 LogHaltBlock=10# log file with halt or stop action is near its limit LogOther=2# log file with an other action (rotate) is near its limit LogMaxWeight=30# maximum wei...

system

[Service] Syslog=0   [Console] Default=1 Speed=9600# Default 9600, should be rised to 115200 KernelMsg=# 0: Off, 1: Serial (w/o display), 2: Display if Keyboard detected else Serial, 3: S...

thind

[Config] State=1 SandboxingReport=1# use for debug (0|1) set to 0 to force Sandboxing Report halt SandboxingStatus=1# use for debug (0|1) set to 0 to force Sandboxing Report Status halt

time

[workhours]         # object time name Time=08:00-20:00# time slot Weekday=1-5# day(s) of the week

timezone

[Config] currentZone=GMT

uac

[Defaults] xvpn=block xvpnprofile= ipsec=block openvpn=block sponsoring=block   [Ruleset] # state=on user=IT_trainee xvpn=block xvpnprofile= ipsec=block openvpn=block sponsoring=block # st...

ulgroup

[vpnssl_owa] schemas.microsoft.com/* www.w3.org/TR/*   [antivirus_bypass] *.windowsupdate.com/* *.windowsupdate.microsoft.com/* *.msdn.microsoft.com/* download.microsoft.com/* officecd...

wifi

[Global] Country=fr  # country code (ISO/IEC 3166-1) Txpower=50  # amplification (db) Schedule=   # Time object (optional) State=0 HT=0 Mode=g ChannelModeA=100 ChannelModeBG=5...

verbose

[module] #verbose definition example for the logger "module" State=0 #0|1 enable/disable the verbose engine (default is 0) #Available levels are # off: no messages at all # error: error messages...

userright

[Ruleset] # # user=uid manage="right#1,right#2" #or # group="cn" manage="right#1,right#2"

userreqd

[Global] # Nothing to configure for now

urlcategorygroup

sysevent

[EventLevel] 0=ignore 1=major 2=minor 3=minor 4=major 5=minor 6=minor 7=minor 8=major 9=minor 10=major 11=major 12=major 13=major 14=major 15=system 16=minor 17=minor 18=system 19=minor 20=system 21=...

switch

[Ethernet0] Port=1   [Ethernet1] Port=2   [Ethernet2] Port=3   [Ethernet3] Port=4   [Ethernet4] Port=5   [Ethernet5] Port=6   [Ethernet6] Port=7   [Ethernet7] Port=8   [Ethernet8] Port=9  

snmp

[Config] V2cState=0 V3State=0 State=0   [Access] community= userv3= authtype=SHA#SHA | MD5 privtype=AES#AES | DES authpass= privpass=   [TrapV3]   [TrapV2]   [TrapV1]

smcrouting

[Global] State=0 CacheMaxEntries=1024 CacheLifetime=300   [MulticastRoutes] # state=<0|1> srcif=if1,if2,... mgroup=multicast_group dstif=if1,if2,... comment="My route" # each interface can be e...

servicegroup

[full_srv] # Useful Services dns_udp ftp http https imap nntp oscar pop3 smtp telnet   [mail_srv]# Mail Services imap pop3 smtp submission   [web_srv] # Web Services dns_udp http https   [ssl_srv] # ...

router

################################################# # Examples of tokens available                  # ################################################# # [myrouter]# name of the router object # Comment...

route6-script

#!/bin/sh # # This script is called by gatemon when default IPv6 route changes # ARG: <new default route's IPv6>

route6

[Config] DefaultRoute=# router object or host object   [StaticRoutes] # remote[/prefix],interface->gateway[,color] # remote and gateway are IPv6 address of respectively the network or host to reac...

route-script

#!/bin/sh # # This script is called by gatemon when default IPv4 route changes # ARG: <new default route's IPv4>

pending.enrolment

[Global] Current=0 NBreq=0

objectgroup

[rfc5735] rfc5735_6to4_relay_anycast rfc5735_bench_net rfc5735_link_local rfc5735_loopback rfc5735_multicast rfc5735_private_1 rfc5735_private_2 rfc5735_private_3 rfc5735_reserved_1 rfc5735_reserved_...

object

[Host] download.cloudurl.netasq.com=216.163.188.45,resolve=dynamic# CloudURL Download Server cloudurl1.netasq.com=208.50.223.244,resolve=dynamic# CloudURL Server 1 cloudurl2.netasq.com=64.191.223.37,...

ntp

[Config] State=0 AllowUnauth=1   [Server] #server,(0|keyid) ntp1.stormshieldcs.eu,0 ntp2.stormshieldcs.eu,0   [Key]

nsconf

[Config] NbFile=0

network.g2.5

################################################# # Examples of all sections and tokens available # ################################################# # # Addressing: each interface must have one of t...

network

################################################# # Examples of all sections and tokens available # ################################################# # # Addressing: each interface must have one of t...

modem

[Modem0] State=0 Name= Model= VendorId= ProductIdInit= ModeSwitchString= ProductId= CommandPort= MonitoringPort= InitString1= InitString2= InitString3=   [Modem1] State=0 Name= Model= VendorId= Produ...

mailgroup

[MailGroup]

log

[EmailASQ] State=0 SendMinor=1 MailGroup=   [EmailSysEvent] State=0 SendMinor=1 MailGroup=   [SnmpASQ] State=1 SendMinor=1   [SnmpSysEvent] State=1 SendMinor=1   [LogAlarm] State=1 MaxSize=15 Delay=3...

licenceupdate

[Config] State=1 Auto=0 Period=24 # in hours

ldap

[SERVER] Default=

language

[Language] Language=us Keyboard=us.iso PswdCharset=ISO-8859-15

krb5.keytab

iprepgroup

guest_ldap

[SERVER] Default=

geogroup

dhcp6

[Config] State=0             # disable/enable DHCPv6 server (default is 0) RelayState=0        # disable/enable DHCPv6 relay (default is 0)   [Global] default-ltime=86400 # default lease time: defaul...

cncategorygroup