You are on page 1of 145

Why the domain did not

yes

Active Directory

FireWall CA

FireWall CA

SSL Forward Untrust

fef1a1b9
fef1a1b9
Mar 18 19:45:42 2017 GMT
/C=IE/O=PAN Training/OU=IT Helpdesk/CN=firewall-
ca.lab.local/emailAddress=helpdesk@pan.local
Mar 16 19:45:42 2027 GMT
firewall-ca.lab.local
1805226342
yes
/C=IE/O=PAN Training/OU=IT Helpdesk/CN=firewall-
ca.lab.local/emailAddress=helpdesk@pan.local
-----BEGIN CERTIFICATE-----
MIIDmjCCAoKgAwIBAgIJAJzm2ngPkRgWMA0GCSqGSIb3DQEBCwUAMH0xCzAJBgNV
BAYTAklFMRUwEwYDVQQKEwxQQU4gVHJhaW5pbmcxFDASBgNVBAsTC0lUIEhlbHBk
ZXNrMR4wHAYDVQQDExVmaXJld2FsbC1jYS5sYWIubG9jYWwxITAfBgkqhkiG9w0B
CQEWEmhlbHBkZXNrQHBhbi5sb2NhbDAeFw0xNzAzMTgxOTQ1NDJaFw0yNzAzMTYx
OTQ1NDJaMH0xCzAJBgNVBAYTAklFMRUwEwYDVQQKEwxQQU4gVHJhaW5pbmcxFD
AS BgNVBAsTC0lUIEhlbHBkZXNrMR4wHAYDVQQDExVmaXJld2FsbC1jYS5sYWIubG9j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 Y+XTHeOdTiYBR4qd8d6zwhyzt2JTPfw5r10AaJ2TlaOfdq5UV6zDPy4NP0WPcHot
iKWyIzoK+TSYo4BSP2zsB9VosivJtpQE2e6SvK2MahodQkJkYLR8bIaN8vxSm0fI
CcQCaRoAMSDp2lgn9XAfB9fgO9xpoApWqv9ET7GwZ9fxAZtoKExaaMTN8tbuBGVQ
nZMt65wRJ1KukY0gaaSnrNY1A0o1Khua5DJrk8yPBXgilRl1ZMAHqhQ2/i9jypX+
8PiO1hh8panpZreVKtMoUXhYN/zJgFSu0CmV6xvgma44yjJuhVkRxLV4QZuMPUaK
Ja08F48krMucBfeRfu0= -----END CERTIFICATE-----
RSA
-
AQ==Ui1y4zf2rXGViQTmaOQVVVO9+Lo=wfL5Zc+wUAak+B7CnAVY6NdutYWtt67XvF+y
GHFGS+s9JXWq/ZS2hGmEWv7PpHogmcrGspbjnYf8zexGRer9h5mgZ/24UuPI1zkGU9G8nzb
MIaiXlwp5M3sTG/UcmY68O3xZtpnMyA5JdGmdmNFD1hPmU7u8oarbNqfi1w6mAfe/X3dPO
A7smFgeGUwllot4NkIS7ldtafNZxh1v56HhU0zvwf1a+5K1yEJXG2C8PedbC6gcetMUKW0i7pJ
zkEVtNHlwY0dY3tBpj2BGrDZoicDCqhwF3njZEhKTiN/AoGGVlzKnU8yz44IyFtSgL1JkMuG
NtDLiZ4Re2sdQ5JtADBl4SFyxg7ih66yMYB+wB0RfWe2iJmwnQHoO2smFMA5dk9P5B3GQg
gXvJiNB9ryu2Lrl/FtuCv9MidDGHA6RTE7MfblxQsd0IkdLMsVkpy1I4vlv8ctPfl2u3Y9VueLJ31
ldphtRxXrOR7ZqwIml+uCdAWVdhIKejiSfFNRJdSnYSppR245RzWt269dBKCjjARAUF1HRut
1UsmTczIdDRBwJv0PyCmdeFVfkgGue412W8BjD2c/5S+p2G9GqpQvs3nrRQiKWWH72210K
cjbB5Do1yyOKPgckQgNP63Q1NVDZlaPmXdxcUiLGEQxBeAXA60BtIzFSfjA+G/FHGeNa4yx
oh6RGD0JEdFx4eQ/gU4r9qz/l2SnWxXsRjHlhfMBVgBy8EBs3c8HKjKmmthcr5UtaLgmLWG3
RnKrUv+1MhcnDoA1CmvfcSnDZmg6V+On3yubrlKfPCzazHvCuBg/EmF3vg2JASXbMGAUsx
5Y1jSkLtf8BtLho15baCKOIzT6zXsjnd2u3Z1jBAl7A+2Y75OPM+IrAiJbvChdr0YcHIu8l2jZjRj7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2cbb6198
2cbb6198
Mar 18 19:46:48 2017 GMT
/C=IE/O=PAN Training/OU=IT Helpdesk/CN=DO-NOT-TRUST-THIS-
SITE/emailAddress=helpdesk@lab.local
Mar 16 19:46:48 2027 GMT
DO-NOT-TRUST-THIS-SITE
1805226408
yes
/C=IE/O=PAN Training/OU=IT Helpdesk/CN=DO-NOT-TRUST-THIS-
SITE/emailAddress=helpdesk@lab.local
-----BEGIN CERTIFICATE-----
MIIDnDCCAoSgAwIBAgIJANVNeB5T5RVxMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNV
BAYTAklFMRUwEwYDVQQKEwxQQU4gVHJhaW5pbmcxFDASBgNVBAsTC0lUIEhlbHBk
ZXNrMR8wHQYDVQQDExZETy1OT1QtVFJVU1QtVEhJUy1TSVRFMSEwHwYJKoZIhvcN
AQkBFhJoZWxwZGVza0BsYWIubG9jYWwwHhcNMTcwMzE4MTk0NjQ4WhcNMjcwMzE2
MTk0NjQ4WjB+MQswCQYDVQQGEwJJRTEVMBMGA1UEChMMUEFOIFRyYWluaW5nM
RQw
EgYDVQQLEwtJVCBIZWxwZGVzazEfMB0GA1UEAxMWRE8tTk9ULVRSVVNULVRISVM
t U0lURTEhMB8GCSqGSIb3DQEJARYSaGVscGRlc2tAbGFiLmxvY2FsMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXiVdM9fnXsAVK6kNeykGc9zI3vnl5Sa
nUn1DCkuckcgLZMBsX2fkvYHyIco4CWeXe+an6QJPgYukPz4dwE2kqegAUAKBPWz
Xwy5DCNZns6hRCRPISQ1Qcs4wbiSrCuvfdIe8Wd1uXImvks/Rj87ICJHRKFkdyVl
f5SQl/SBvaP2BGIP36urnUxczY4XS+XscCMyJKI3jwXiZDsGCzPk0xkVVjQeiR/4
dFxTFvpeEX32EdsJYbJtxnmsTPTzS1DkwFohIeySjqsWSre2gJu5fSLCIG+5eZBf
TmmzYFIs5fmhI+A1mjBs1TrJxZeypyhpQtCFbcT+Te6NuFotKUOsQQIDAQABox0w
GzAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwICBDANBgkqhkiG9w0BAQsFAAOCA
QEA YufccXBai5Ld89SOyZQuW6dE9V929F+5ndOE9ZHnMMIe7HgOCMG47l5/OfK7GIVP
c8JT2GOKsyN8gAC7NOVYsMUHjvgYZ5mJqW0hKt3scLGlG77yWd3HKJFi1Vz9TGe5
2gax6YnDd61FMIAr6ZHzSHd/WMyLL+RryYgBuZ/8oIulwKqb3ry7YY8SlV0Nv7py
83cC/Yt3nVi99hK6q1NkEg3hR5TkGnP6brhfYEt0jrJ77uzbywg2Ale+dfFVHtlx
33csK/IqYf+r5SVThwSjZC740toOAty2yAk3+dY2aWnjVH2MuwcQvf4JXyre/3gG
l+jW1iodeNhcPf+pdd7KWQ== -----END CERTIFICATE-----
RSA
-
AQ==WwrNLZ0IexN07CpSMIzraBNCtZg=wfL5Zc+wUAak+B7CnAVY6NdutYWtt67XvF+yG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03aecd4b
fef1a1b9
Mar 18 23:43:56 2017 GMT
/C=IE/O=PAN Training/OU=IT Helpdesk/CN=firewall-
ca.lab.local/emailAddress=helpdesk@pan.local
Mar 16 23:43:56 2027 GMT
203.0.113.20
1805240636
no
/CN=203.0.113.20
-----BEGIN CERTIFICATE-----
MIIDfzCCAmegAwIBAgIEAYBv/jANBgkqhkiG9w0BAQsFADB9MQswCQYDVQQGEwJJ
RTEVMBMGA1UEChMMUEFOIFRyYWluaW5nMRQwEgYDVQQLEwtJVCBIZWxwZGVza
zEe
MBwGA1UEAxMVZmlyZXdhbGwtY2EubGFiLmxvY2FsMSEwHwYJKoZIhvcNAQkBFhJo
ZWxwZGVza0BwYW4ubG9jYWwwHhcNMTcwMzE4MjM0MzU2WhcNMjcwMzE2MjM0Mz
U2
WjAXMRUwEwYDVQQDEwwyMDMuMC4xMTMuMjAwggEiMA0GCSqGSIb3DQEBAQU
AA4IB
DwAwggEKAoIBAQDOljLmyThGUxGn034FnAqHQK2IKF/NinjsUjY6NzvZSxKMwGUd
0xeCYqp8zYvwAIWUQLzygmOzVVSOk6ou0YnhI2jYJUa/N4Rb83QoMPpzfuUbTOxO
qLBK19Qf8c6SvPxF4CY9apkff+zfL8TKkeSwQFFI9W/QNrbYy2WT+dwqi1timcXz
h7YfUQT4zj5ObFrglfm1fzO5GCmqIud2WN67nq/D3cLDeuJKsP05ngb67XgiL3Q7
o9D1eyD8bj5QkG6LOKAG8Pym7o+jKPo1DcPb3LBP0oQ3jPX4A2DRluaWkACTs4Bz
2W91nUvekGmTn8F7lbXFsSCgSiX23mvurxLHAgMBAAGjbTBrMAkGA1UdEwQCMAAw
CwYDVR0PBAQDAgO4MCcGA1UdJQQgMB4GCCsGAQUFBwMBBggrBgEFBQcDAgYIKw
YB
BQUHAwUwCQYDVR0jBAIwADAdBgNVHQ4EFgQUA/zuR1grUAP9ZqhOzlvz273Zkacw
DQYJKoZIhvcNAQELBQADggEBALHuPLLKYE/QP41PUbsSRnX5+KaoyPW5Zvp7hR21
Qc8gsEy2UTnUquNw7RjxtqHywfPGEi/M/o28mXz0qdWmOD8ftSMMltErz68sOMC2
IpHriq2OdAmlkMOa4R9OuP5faqjZaIo0QX7jMpa+knST9mpQx2m6kOcy6YEjOJal
UcvdD0U1ZL0KTq2HPsOsmP7Twg8mobJVnMNXkqbw8RIB0v7Ogy79dW6Ryssxfgr0
XXGMenLTb6DcUNWDdPKgQ5A4dLLjm7fNS0o70pODNe7Cq1shVYlCHn6rCY06RScD
KLdVVOghYB7PQIa7M90+Iwi09jDPw0pXDXLVa4SEpsXBP2Q= -----END CERTIFICATE---
--
RSA
-
AQ==YUme/j1hHVN8jkTqsbvtgEP8pmw=wfL5Zc+wUAak+B7CnAVY6NdutYWtt67XvF+yG
HFGS+v3hQ6NGerTNEn2/C/2TE21jLESBF++uyUg6P8Cp7Ck3kFp4qIcr4Rla3A6hkMFcHz33w
5tPPNU9FZ5hqwtnJ84Luey5IjUhYyGsviJcOm077NtMKZSG/SpeB8JYSNzuUQPhgmbE3G0HY
dq3EOXfZV/67em5f8/TRZUrhaLuzdVWU1VvXsv7bc7WFhdQVa0k9lcg+qtIqH9fdRx3JHL0Qx
Qua1mIlUcAtoI/2q+q7LxLZ9y12BQzkI1JAHWQievRJEKqIL565x+rkyMNaVnLzwLT+Us7cfW
Ght8tp+S8UIYUzwcq4V7DiroIzLNafa7YvZMeePZr4Cumjy03kz1FOloxkMMT4PPFbFNk2uncr
cWCXdYcl6whiX9c04acJQp00IDCTv1I2MCsj/VhWMZ0EFGFkAjdsJj/mf0lC+yWoUiFRseHV
DB6pplOBcO0oS7bvVRE87hi7B5cfiJTBKcMqpOTka2YWTsEUzIe4t9A9TDxz3TsPo+wUj521l
1CiRVvC53IojK7U9USiu/bTYmqN7MZBITWAkWYZW6Nz26OHAl0UlvWhqjXpb7KPeytDhe
P9+NPLgXGnFbFZKeaJPx4eD6FLFFrPrkSYUB26Q7Lbw13XfahZiPsnR6sAc/KhaaPQR0Ixj+q
mhxzvqgjkbi7ci71EjYWqtc6SnxPHyXGcJtBVOrHAPGJodfoCEPpZ4twDvED5E8shMHGiZcDh
lBO34QnNMM4tcZsP1EZkIOxlnP+aP2jZzcZvo9Kw5tk6umsX4VHQMiay2JQwYKYgf5+Na9x
MqkBv72YQ7DrCPubjibohsGhoh0D309/ebTU6Nl3bzcp5yQgRbYCpmHVd14S5U6HaNcl+EYo
oMwAszt5yZzJLA5pacxoZ/KVZsYW7yX8TZnzseRDdxmhluZ5dL1kcxwDhf1BJzyPCl3F4mPeg
mQ34bNrcUgU1dqJjw31uRfuMHtv8WI+llN2Dn4y7l6zdQecLEWy6sYxZ0tiO2ZUL9KxOPymA
jMg/1GmiHU5oYtxCk7Zw92YQWMScTgd45dZAiwAwuoFo0G1BKOx1Es5cBsGmgm1X1zIyI
VtnxZ69v3ZdmSb+Any3WOl1qNHQur0UQr25DoKZiWCb7ElWBpEITEURjNeeMg8N7zQzVo
S0fxS+gUyA4xdzuY0zqIJk4qgUx5Y9/hWkxs6rVQHuzKFUY9myXNJe7V7r6Zq4VSi9HwYZD
FlW9XlqYNizY1Sokskr/2nyaiv/FCrb8UPynbkzdAXZavvwFNGHeKyTRvmC4BI78Jld9kRp+rud
z6Bt99x+9yqyMHOp8Aaxw0Ep1UwgsSPEdCjmNEWy/odFynxkjGsqvntBmo+Sa1d1xdeMJlts+I
279+vRQU0djlTpxyiLNdPfR4xXLr84N95mqkuANzxyAvW3T2VbJmgEHvVmJJ8oJ8RJXW4au
DSAFds9rljASMq3VktTW0ZKTWESWr4xEWI5FQEdK4GeeNPRDpirO5575bRWUpzkGgjye4/
qaRwtDqb0+NXi5+1hNd2R96OoYNyRsnAk0EacYhB6Iiy2VXlS4nuWRlmFUcKUkGVBySeHT
kadcC8ZuLdlcueGYVvz+H4EhzA8aV1Re8SEdkFhUSyw7kMOF1iKtNELP/58i//pV6KDZUfcal
MYncgkcgM9zTJojPbSnPNwvQ7Th6+b00GxQYLboELQfTcjfqZxmLArllrFty34pfCuKl32DXX
rAbc67BCntEHpTtIM2JAigLttz7/dzCSA1s3xwiO0Paxj2iMMxn15kruapjob5LAlWm+hJ8Yto6U
asVrLsdcMhWBq+nwfZL6UvCd7cEy/p2Mi+EIqdiaG0TKYHKeALHYT2/QpU90vcS7QDszI3X
EO2bHUJ3dxNRA9azyuSBwLU1RWzGp3doR43NY4CHxf/rdLHEpVlOXWdMn+crqk2/AHnc+
4/CKin28I5WqW0QfkaWXaKyiAYtwoXDROPIHlegEM6YFvZYI+gWhaWDgcJ4NTTg40wUV
1X1xy+E1Fw+MMR0USoRRQx0heRJ80stD+tOk3LfFKFuNe+YmKeMcHU5wqBwdcYtugo0Lz
XHxgR2OG9nkp0S5zTUyjXGzvO7yss5j2M8QRnN5AfsUTCAFVij/GFnP8M4FtXrSHuBPKWn
n+6QqGpoXq3YbipV4mCnGr5vjPwztK/sT9o0WTejXntnd/qUNIGm

83e474bd
fef1a1b9
Mar 18 23:44:30 2017 GMT
/C=IE/O=PAN Training/OU=IT Helpdesk/CN=firewall-
ca.lab.local/emailAddress=helpdesk@pan.local
Mar 16 23:44:30 2027 GMT
192.168.1.1
1805240670
no
/CN=192.168.1.1
-----BEGIN CERTIFICATE-----
MIIDfjCCAmagAwIBAgIEAYBv/zANBgkqhkiG9w0BAQsFADB9MQswCQYDVQQGEwJJ
RTEVMBMGA1UEChMMUEFOIFRyYWluaW5nMRQwEgYDVQQLEwtJVCBIZWxwZGVza
zEe
MBwGA1UEAxMVZmlyZXdhbGwtY2EubGFiLmxvY2FsMSEwHwYJKoZIhvcNAQkBFhJo
ZWxwZGVza0BwYW4ubG9jYWwwHhcNMTcwMzE4MjM0NDMwWhcNMjcwMzE2MjM0N
DMw
WjAWMRQwEgYDVQQDEwsxOTIuMTY4LjEuMTCCASIwDQYJKoZIhvcNAQEBBQADgg
EP ADCCAQoCggEBALX/0AFuRuAOGv9ciynR+tg/q0pCnaPxK0oBUIP0kummtANnfuFP
Rej3Uz7aLBBM0Zxg75DXNKgXy5ozcja/oRRy/r8JhkucP+cU4e4HAZA8PF5RvuzO
K7G/9oI/+iYfplvJhmP5modpMz/1ljYjUwvDQMZQj0Y9hbjce20/xcfaZLhYZmGU
lJmvKaaA9RuHdJps0xYswusrq0nEcEIe/TVp7UK9JqDnPn1zQm8KmGz+9sxf0nVi
PMUv+mTZ0rqgHzev9FEsUIIkYudUnuI7UbL09TOjEteYD0iqOfDaWyIs4fhFWdQO
AjhNS4hJkWjNqZuBFjd+hgpFBSdsC/aYA5UCAwEAAaNtMGswCQYDVR0TBAIwADAL
BgNVHQ8EBAMCA7gwJwYDVR0lBCAwHgYIKwYBBQUHAwEGCCsGAQUFBwMCBggrB
gEF
BQcDBTAJBgNVHSMEAjAAMB0GA1UdDgQWBBQM8YWT+qIdjNLC8i8BTW+MJGgUW
TAN BgkqhkiG9w0BAQsFAAOCAQEACYe7LHd9dKE/Zi2lIz5ohEAFx02uSw7CiLZiCT6+
S2GYk9JN50aaYdIUhokHukvd6y2DN1ABhWT5imP6DIuWPhor8z8Bev0aG67zI+OJ
aY6QlGeek98x4A2oYakg3ZsBOTW77vX9Aa3omwSlHXQ8HQXfJDN1Yc4WvQIdraQY
+m4cvCo+17FtZDu4QinM/HSrqr8zg7+jCLIeZ/274Q3wCgkMvJnWqI2MFlXdTDBv
nkh9/7scH8e44HCYTvMVirkU/gDI/hJJcb806E4sDTLDjH2kMkCNhJFoQpX21kuN
Xs58IT9BiK/toSVkmdivv3yD42iDSkHX0GUtGD5bZT2Leg== -----END CERTIFICATE-----
RSA
-
AQ==L4XWt/RBsd+3ygb+CQkheIITDHA=wfL5Zc+wUAak+B7CnAVY6NdutYWtt67XvF+yG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d
sY3WvVeTkJ9pqz2cIAV6Xz9jjrTwRkDZmb3I/cM70TMYKx4vGfE0hgf

9b75d4ee
fef1a1b9
Mar 19 14:08:04 2017 GMT
/C=IE/O=PAN Training/OU=IT Helpdesk/CN=firewall-
ca.lab.local/emailAddress=helpdesk@pan.local
Mar 17 14:08:04 2027 GMT
192.168.1.254
1805292484
no
/C=IE/O=PAN Training/CN=192.168.1.254
-----BEGIN CERTIFICATE-----
MIIDpDCCAoygAwIBAgIEAYBwADANBgkqhkiG9w0BAQsFADB9MQswCQYDVQQGEwJJ
RTEVMBMGA1UEChMMUEFOIFRyYWluaW5nMRQwEgYDVQQLEwtJVCBIZWxwZGVza
zEe
MBwGA1UEAxMVZmlyZXdhbGwtY2EubGFiLmxvY2FsMSEwHwYJKoZIhvcNAQkBFhJo
ZWxwZGVza0BwYW4ubG9jYWwwHhcNMTcwMzE5MTQwODA0WhcNMjcwMzE3MTQwO
DA0
WjA8MQswCQYDVQQGEwJJRTEVMBMGA1UEChMMUEFOIFRyYWluaW5nMRYwFAYD
VQQD
Ew0xOTIuMTY4LjEuMjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
x8PCDvJNOxBOgSjxhVPT0cNQJjRffEkUbxZI310U8ItoWYujiBErHQKaZugN+yta
UScNKC/w0EvIqFYu8iy6QiTa0iyCi3Re8Vsxh+F/kmJ2YWvFtwA8RMDJr+YfvKDz
IRfZ7PBUvfzRUTj/wNn7eElSgamPGoBCccwvHlJ1DTIxpmTbpP2U1ys333FtSgAX
c7W1skwldEzVZYjBsl+2pD5cRdwFPbFxE5oWNIJxg6PVgKGtdRVUSOITRtIUgjNA
NvwnPVME8FP9QJMNahQ0+a/yyIWqhOzGypNrJV+q+LpipdsUbsGGkIvOp0na4PPr
86SITptJctJhGKzySo4GpwIDAQABo20wazAJBgNVHRMEAjAAMAsGA1UdDwQEAwID
uDAnBgNVHSUEIDAeBggrBgEFBQcDAQYIKwYBBQUHAwIGCCsGAQUFBwMFMAkGA1
Ud
IwQCMAAwHQYDVR0OBBYEFFkFoKwv/AfbbeLcXdDepvF1VQVTMA0GCSqGSIb3DQEB
CwUAA4IBAQCqCBFFxDsQCM3ZifEUYi+/+Z0SKiitd3uYSnNFYvfERMzbYOLr9k4d
XZaDlZ1xwGf7SKUSQ6/V8T4za8sZFMOM5UwY/z2Df338bC+32mu31zC0Zyn6fiIo
GSzolUje1qdI55t4pTErfNiGhojL85Yd43XQeYC1unxMYUqMBT1etmH3oEi9AG7x
8KlU7hLcAQ9wvmKi5kUp4Q3XxiTLSKhWdQABb3VQvSd3jONOo6NI50t6XFdEpd8h
jKT7GZSjsCVvbdundQRpR5oJYfYwP6hkubL1khHrExat3R/gr4spOZjCGYIBVpHp
eMNL/tpfrWuXZA/k8RdN8QQt3h7u8XjD -----END CERTIFICATE-----
RSA
-
AQ==ljblLKTP09+ifpngIOiUd8m9oow=wfL5Zc+wUAak+B7CnAVY6NdutYWtt67XvF+yGHF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PGh0bWw+DQo8aGVhZD4NCjx0aXRsZT5BcHBsaWNhdGlvbiBCbG9ja2VkPC90aXRsZT4NCjxtZ
XRh
IGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PX
V0
Zi04Ij4NCjxNRVRBIEhUVFAtRVFVSVY9IlBSQUdNQSIgQ09OVEVOVD0iTk8tQ0FDSEUiPg0K
PHN0
eWxlPg0KI2NvbnRlbnR7Ym9yZGVyOjNweCBzb2xpZCNhYWE7YmFja2dyb3VuZC1jb2xvcjojZm
Zm
O21hcmdpbjo0MDtwYWRkaW5nOjQwO2ZvbnQtZmFtaWx5OlRhaG9tYSxIZWx2ZXRpY2EsQXJp
YWws
c2Fucy1zZXJpZjtmb250LXNpemU6MTJweDt9DQogIGgxe2ZvbnQtc2l6ZToyMHB4O2ZvbnQtd2V
p
Z2h0OmJvbGQ7Y29sb3I6IzE5NjM5MDt9DQogIGJ7Zm9udC13ZWlnaHQ6Ym9sZDtjb2xvcjojMTk
2
MzkwO30NCjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBiZ2NvbG9yPSIjZTdlOGU5Ij4NCjxka
XYg
aWQ9ImNvbnRlbnQiPg0KPGgxPkFwcGxpY2F0aW9uIEJsb2NrZWQ8L2gxPg0KPHA+QWNjZXNz
IHRv
IHRoZSBhcHBsaWNhdGlvbiB5b3Ugd2VyZSB0cnlpbmcgdG8gdXNlIGhhcyBiZWVuIGJsb2NrZWQ
g
aW4gYWNjb3JkYW5jZSB3aXRoIGNvbXBhbnkgcG9saWN5LiBQbGVhc2UgY29udGFjdCB5b3Vy
IHN5
c3RlbSBhZG1pbmlzdHJhdG9yIGlmIHlvdSBiZWxpZXZlIHRoaXMgaXMgaW4gZXJyb3IuPC9wPg0
K
PHA+PGI+VXNlcjo8L2I+IDx1c2VyLz4gPC9wPg0KPHA+PGI+QXBwbGljYXRpb246PC9iPiA8YX
Bw bmFtZS8+IDwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K
PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVud
D0i
dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxNRVRBIEhUVFAtRVFVSVY9IlBSQUdNQSIgQ
09O
VEVOVD0iTk8tQ0FDSEUiPg0KPHRpdGxlPlVzZXIgSWRlbnRpZmljYXRpb24gUG9ydGFsPC90a
XRs
ZT4NCjxzdHlsZT4NCiAgICAgICAgYm9keSB7DQogICAgICAgICAgICAgICAgY29sb3I6ICMxMT
E7
DQogICAgICAgICAgICAgICAgZm9udC1mYW1pbHk6IFZlcmRhbmEsQXJpYWwsSGVsdmV0aW
NhLHNh
bnMtc2VyaWY7DQogICAgICAgICAgICAgICAgYmFja2dyb3VuZC1jb2xvcjojRjJGNkZBOw0KIC
Ag
ICAgICB9DQogICAgICAgICNoZWFkaW5nIHsNCiAgICAgICAgICAgICAgICBmb250LXNpemU6
IDI0
cHg7DQogICAgICAgICAgICAgICAgZm9udC13ZWlnaHQ6IGJvbGQ7DQogICAgICAgICAgICAgI
CAg
bWFyZ2luOiA1cHg7DQogICAgICAgICAgICAgICAgbWFyZ2luLWxlZnQ6IGF1dG87DQogICAgIC
Ag
ICAgICAgICAgbWFyZ2luLXJpZ2h0OiBhdXRvOw0KICAgICAgICB9DQogICAgICAgICNkZXNjI
HsN
CiAgICAgICAgICAgICAgICBmb250LXNpemU6IDExcHg7DQogICAgICAgICAgICAgICAgbWFy
Z2lu
OiAxNXB4Ow0KICAgICAgICAgICAgICAgIHRleHQtYWxpZ246IGxlZnQ7DQogICAgICAgICAgI
CAg
ICAgbWFyZ2luLWxlZnQ6IGF1dG87DQogICAgICAgICAgICAgICAgbWFyZ2luLXJpZ2h0OiBhdX
Rv
Ow0KICAgICAgICB9DQogICAgICAgIGZvcm0gdGQsIGZvcm0gaW5wdXQgew0KICAgICAgICAg
ICAg
ICAgIGZvbnQtc2l6ZTogMTFweDsNCiAgICAgICAgICAgICAgICBmb250LXdlaWdodDogYm9sZD
sN
CiAgICAgICAgfQ0KICAgICAgICAjZm9ybXRhYmxlIHsNCiAgICAgICAgICAgICAgICBoZWlnaH
Q6
IDEwMCU7DQogICAgICAgICAgICAgICAgd2lkdGg6IDEwMCU7DQogICAgICAgIH0NCiAgICA
gICAg
I2Zvcm10ZCB7DQogICAgICAgICAgICAgICAgdmVydGljYWwtYWxpZ246IG1pZGRsZTsNCiAgI
CAg
ICAgfQ0KICAgICAgICAjZm9ybWRpdiB7DQogICAgICAgICAgICAgICAgbWFyZ2luLWxlZnQ6I
GF1
dG87DQogICAgICAgICAgICAgICAgbWFyZ2luLXJpZ2h0OiBhdXRvOw0KICAgICAgICB9DQo8L
3N0
eWxlPg0KPC9oZWFkPg0KPGJvZHk+DQo8dGFibGUgaWQ9ImZvcm10YWJsZSI+DQo8dHI+PHR
kIGFs
aWduPSJjZW50ZXIiIHZhbGlnbj0ibWlkZGxlIj4NCiAgICAgICAgPGRpdiBpZD0iaGVhZGluZyI+
VXNlciBJZGVudGlmaWNhdGlvbiBQb3J0YWw8L2Rpdj4NCjwvdGQ+PC90cj4NCjx0cj48dGQgY
Wxp
Z249ImNlbnRlciIgdmFsaWduPSJtaWRkbGUiPg0KICAgICAgICA8ZGl2IGlkPSJkZXNjIj5UaGUg
cmVzb3VyY2UgeW91IGFyZSB0cnlpbmcgdG8gYWNjZXNzIHJlcXVpcmVzIHByb3BlciB1c2VyIGl
k
ZW50aWZpY2F0aW9uIHByaW9yIHRvIGFjY2Vzcy4gUGxlYXNlIGVudGVyIHlvdXIgY3JlZGVud
Glh
bHMuPC9kaXY+DQo8L3RkPjwvdHI+DQo8dHI+PHRkIGFsaWduPSJjZW50ZXIiIHZhbGlnbj0ibWl
k
ZGxlIj4NCjxkaXYgaWQ9ImZvcm1kaXYiPg0KPHBhbl9mb3JtLz4NCjwvZGl2Pg0KPC90ZD48L3R
y Pg0KPC90YWJsZT4NCjwvYm9keT4NCjwvaHRtbD4NCg0K
PGh0bWw+DQo8aGVhZD4NCjx0aXRsZT5GaWxlIERvd25sb2FkIEJsb2NrZWQ8L3RpdGxlPg0KP
G1l
dGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZX
Q9
dXRmLTgiPg0KPE1FVEEgSFRUUC1FUVVJVj0iUFJBR01BIiBDT05URU5UPSJOTy1DQUNIRSI
+DQo8
c3R5bGU+DQojY29udGVudHtib3JkZXI6M3B4IHNvbGlkI2FhYTtiYWNrZ3JvdW5kLWNvbG9yOi
Nm
ZmY7bWFyZ2luOjQwO3BhZGRpbmc6NDA7Zm9udC1mYW1pbHk6VGFob21hLEhlbHZldGljYSx
Bcmlh
bCxzYW5zLXNlcmlmO2ZvbnQtc2l6ZToxMnB4O30NCiAgaDF7Zm9udC1zaXplOjIwcHg7Zm9udC
13
ZWlnaHQ6Ym9sZDtjb2xvcjojMTk2MzkwO30NCiAgYntmb250LXdlaWdodDpib2xkO2NvbG9yOi
Mx
OTYzOTA7fQ0KPC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGJnY29sb3I9IiNlN2U4ZTkiPg0KPGR
p
diBpZD0iY29udGVudCI+DQo8aDE+RmlsZSBEb3dubG9hZCBCbG9ja2VkPC9oMT4NCjxwPkFjY2
Vz
cyB0byB0aGUgZmlsZSB5b3Ugd2VyZSB0cnlpbmcgdG8gZG93bmxvYWQgaGFzIGJlZW4gYmxvY
2tl
ZCBpbiBhY2NvcmRhbmNlIHdpdGggY29tcGFueSBwb2xpY3kuIFBsZWFzZSBjb250YWN0IHlvdX
Ig c3lzdGVtIGFkbWluaXN0cmF0b3IgaWYgeW91IGJlbGlldmUgdGhpcyBpcyBpbiBlcnJvci48L3A+
DQo8cD48Yj5GaWxlIG5hbWU6PC9iPiA8Zm5hbWUvPiA8L3A+DQo8L2Rpdj4NCjwvYm9keT4N
Cjwv aHRtbD4NCg==
PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVud
D0i
dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxNRVRBIEhUVFAtRVFVSVY9IlBSQUdNQSIgQ
09O
VEVOVD0iTk8tQ0FDSEUiPg0KPHRpdGxlPkNlcnRpZmljYXRlIEVycm9yPC90aXRsZT4NCjxzdH
ls ZT4NCiNjb250ZW50e2JvcmRlcjozcHggc29saWQjYWFhO2JhY2tncm91bmQtY29sb3I6I2ZmZjtt
YXJnaW46NDA7cGFkZGluZzo0MDtmb250LWZhbWlseTpUYWhvbWEsSGVsdmV0aWNhLEFya
WFsLHNh
bnMtc2VyaWY7Zm9udC1zaXplOjEycHg7fQ0KICBoMXtmb250LXNpemU6MjBweDtmb250LXdla
Wdo
dDpib2xkO2NvbG9yOiMxOTYzOTA7fQ0KICBie2ZvbnQtd2VpZ2h0OmJvbGQ7Y29sb3I6IzE5NjM
5
MDt9DQo8L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgYmdjb2xvcj0iI2U3ZThlOSI+DQo8ZGl2IGl
k
PSJjb250ZW50Ij4NCjxoMT5DZXJ0aWZpY2F0ZSBFcnJvcjwvaDE+DQo8cD5UaGVyZSBpcyBhbi
Bp
c3N1ZSB3aXRoIHRoZSBTU0wgY2VydGlmaWNhdGUgb2YgdGhlIHNlcnZlciB5b3UgYXJlIHRye
Wlu
ZyB0byBjb250YWN0LjwvcD4NCjxwPjxiPkNlcnRpZmljYXRlIE5hbWU6PC9iPiA8Y2VydG5hbWU
v
PiA8L3A+DQo8cD48Yj5JUDo8L2I+IDx1cmwvPiA8L3A+DQo8cD48Yj5Jc3N1ZXI6PC9iPiA8aXN
z
dWVyLz4gPC9wPg0KPHA+PGI+U3RhdHVzOjwvYj4gPHN0YXR1cy8+IDwvcD4NCjxwPjxiPlJlY
XNv bjo8L2I+IDxyZWFzb24vPiA8L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg0K
PGgxPlNTTCBJbnNwZWN0aW9uPC9oMT4NCjxwPkluIGFjY29yZGFuY2Ugd2l0aCBjb21wYW55I
HNl
Y3VyaXR5IHBvbGljeSwgdGhlIFNTTCBlbmNyeXB0ZWQgY29ubmVjdGlvbiB5b3UgaGF2ZSBpb
ml0
aWF0ZWQgd2lsbCBiZSB0ZW1wb3JhcmlseSB1bmVuY3J5cHRlZCBzbyB0aGF0IGl0IGNhbiBiZSB
p
bnNwZWN0ZWQgZm9yIHZpcnVzZXMsIHNweXdhcmUsIGFuZCBvdGhlciBtYWx3YXJlLjwvcD4
NCjxw
PkFmdGVyIHRoZSBjb25uZWN0aW9uIGlzIGluc3BlY3RlZCBpdCB3aWxsIGJlIHJlLWVuY3J5cHR
l
ZCBhbmQgc2VudCB0byBpdHMgZGVzdGluYXRpb24uIE5vIGRhdGEgd2lsbCBiZSBzdG9yZWQgb
3Ig
bWFkZSBhdmFpbGFibGUgZm9yIG90aGVyIHB1cnBvc2VzLjwvcD4NCjxwPjxiPklQOjwvYj4gPH
Vy bC8+IDwvcD4NCjxwPjxiPkNhdGVnb3J5OjwvYj4gPGNhdGVnb3J5Lz4gPC9wPg0K
PGh0bWw+DQo8aGVhZD4NCjx0aXRsZT5XZWIgUGFnZSBCbG9ja2VkPC90aXRsZT4NCjxtZXR
hIGh0
dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi0
4
Ij4NCjxNRVRBIEhUVFAtRVFVSVY9IlBSQUdNQSIgQ09OVEVOVD0iTk8tQ0FDSEUiPg0KPHN
0eWxl
Pg0KI2NvbnRlbnR7Ym9yZGVyOjNweCBzb2xpZCNhYWE7YmFja2dyb3VuZC1jb2xvcjojZmZmO
21h
cmdpbjo0MDtwYWRkaW5nOjQwO2ZvbnQtZmFtaWx5OlRhaG9tYSxIZWx2ZXRpY2EsQXJpYW
wsc2Fu
cy1zZXJpZjtmb250LXNpemU6MTJweDt9DQogIGgxe2ZvbnQtc2l6ZToyMHB4O2ZvbnQtd2VpZ2h
0
OmJvbGQ7Y29sb3I6IzE5NjM5MDt9DQogIGJ7Zm9udC13ZWlnaHQ6Ym9sZDtjb2xvcjojMTk2Mzk
w
O30NCjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBiZ2NvbG9yPSIjZTdlOGU5Ij4NCjxkaXYga
WQ9
ImNvbnRlbnQiPg0KPGgxPldlYiBQYWdlIEJsb2NrZWQ8L2gxPg0KPHA+QWNjZXNzIHRvIHRoZ
SB3
ZWIgcGFnZSB5b3Ugd2VyZSB0cnlpbmcgdG8gdmlzaXQgaGFzIGJlZW4gYmxvY2tlZCBpbiBhY2N
v
cmRhbmNlIHdpdGggY29tcGFueSBwb2xpY3kuIFBsZWFzZSBjb250YWN0IHlvdXIgc3lzdGVtIGFk
bWluaXN0cmF0b3IgaWYgeW91IGJlbGlldmUgdGhpcyBpcyBpbiBlcnJvci48L3A+DQo8cD48Yj5V
c2VyOjwvYj4gPHVzZXIvPiA8L3A+DQo8cD48Yj5VUkw6PC9iPiA8dXJsLz4gPC9wPg0KPHA+P
GI+
Q2F0ZWdvcnk6PC9iPiA8Y2F0ZWdvcnkvPiA8L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD
4N Cg==
PGh0bWw+DQo8aGVhZD4NCjx0aXRsZT5XZWIgUGFnZSBCbG9ja2VkPC90aXRsZT4NCjxtZXR
hIGh0
dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi0
4
Ij4NCjxNRVRBIEhUVFAtRVFVSVY9IlBSQUdNQSIgQ09OVEVOVD0iTk8tQ0FDSEUiPg0KPHN
0eWxl
Pg0KI2NvbnRlbnR7Ym9yZGVyOjNweCBzb2xpZCNhYWE7YmFja2dyb3VuZC1jb2xvcjojZmZmO
21h
cmdpbjo0MDtwYWRkaW5nOjQwO2ZvbnQtZmFtaWx5OlRhaG9tYSxIZWx2ZXRpY2EsQXJpYW
wsc2Fu
cy1zZXJpZjtmb250LXNpemU6MTJweDt9DQogIGgxe2ZvbnQtc2l6ZToyMHB4O2ZvbnQtd2VpZ2h
0
OmJvbGQ7Y29sb3I6IzE5NjM5MDt9DQogIGJ7Zm9udC13ZWlnaHQ6Ym9sZDtjb2xvcjojMTk2Mzk
w
O30NCiAgICAgICAgZm9ybSB0ZCwgZm9ybSBpbnB1dCB7DQogICAgICAgICAgICAgICAgZm9u
dC1z
aXplOiAxMXB4Ow0KICAgICAgICAgICAgICAgIGZvbnQtd2VpZ2h0OiBib2xkOw0KICAgICAgIC
B9
DQogICAgICAgICNmb3JtdGFibGUgew0KICAgICAgICAgICAgICAgIGhlaWdodDogMTAwJTsNC
iAg
ICAgICAgICAgICAgICB3aWR0aDogMTAwJTsNCiAgICAgICAgfQ0KICAgICAgICAjZm9ybXRkI
HsN
CiAgICAgICAgICAgICAgICB2ZXJ0aWNhbC1hbGlnbjogbWlkZGxlOw0KICAgICAgICB9DQogIC
Ag
ICAgICNmb3JtZGl2IHsNCiAgICAgICAgICAgICAgICBtYXJnaW4tbGVmdDogYXV0bzsNCiAgIC
Ag
ICAgICAgICAgICBtYXJnaW4tcmlnaHQ6IGF1dG87DQogICAgICAgIH0NCjwvc3R5bGU+DQo8c2
Ny
aXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCI+DQpmdW5jdGlvbiBwd2RDaGVjaygpIHsNCglpZih
k
b2N1bWVudC5nZXRFbGVtZW50QnlJZCgicHdkIikpIHsNCgkJZG9jdW1lbnQuZ2V0RWxlbWVudE
J5
SWQoImNvbnRpbnVlVGV4dCIpLmlubmVySFRNTCA9ICJJZiB5b3UgcmVxdWlyZSBhY2Nlc3Mg
dG8g
dGhpcyBwYWdlLCBoYXZlIGFuIGFkbWluaXN0cmF0b3IgZW50ZXIgdGhlIG92ZXJyaWRlIHBhc3
N3
b3JkIGhlcmU6IjsNCgl9CQ0KfQ0KPC9zY3JpcHQ+DQo8L2hlYWQ+DQo8Ym9keSBiZ2NvbG9yPS
Ij
ZTdlOGU5Ij4NCjxkaXYgaWQ9ImNvbnRlbnQiPg0KPGgxPldlYiBQYWdlIEJsb2NrZWQ8L2gxPg0
K
PHA+QWNjZXNzIHRvIHRoZSB3ZWIgcGFnZSB5b3Ugd2VyZSB0cnlpbmcgdG8gdmlzaXQgaGFzI
GJl
ZW4gYmxvY2tlZCBpbiBhY2NvcmRhbmNlIHdpdGggY29tcGFueSBwb2xpY3kuIFBsZWFzZSBjb2
50
YWN0IHlvdXIgc3lzdGVtIGFkbWluaXN0cmF0b3IgaWYgeW91IGJlbGlldmUgdGhpcyBpcyBpbiBl
cnJvci48L3A+DQo8cD48Yj5Vc2VyOjwvYj4gPHVzZXIvPiA8L3A+DQo8cD48Yj5VUkw6PC9iPiA
8
dXJsLz4gPC9wPg0KPHA+PGI+Q2F0ZWdvcnk6PC9iPiA8Y2F0ZWdvcnkvPiA8L3A+DQoNCjxocj
4N
CjxwIGlkPSJjb250aW51ZVRleHQiPklmIHlvdSBmZWVsIHRoaXMgcGFnZSBoYXMgYmVlbiBpb
mNv
cnJlY3RseSBibG9ja2VkLCB5b3UgbWF5IGNsaWNrIENvbnRpbnVlIHRvIHByb2NlZWQgdG8gdGh
l
IHBhZ2UuIEhvd2V2ZXIsIHRoaXMgYWN0aW9uIHdpbGwgYmUgbG9nZ2VkLjwvcD4NCjxkaXY
gaWQ9
ImZvcm1kaXYiPg0KPHBhbl9mb3JtLz4NCjwvZGl2Pg0KPGEgaHJlZj0iIyIgb25jbGljaz0iaGlz
dG9yeS5iYWNrKCk7cmV0dXJuIGZhbHNlOyI+UmV0dXJuIHRvIHByZXZpb3VzIHBhZ2U8L2E+
DQo8 L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg==
PGh0bWw+DQo8aGVhZD4NCjx0aXRsZT5WaXJ1cyBEb3dubG9hZCBCbG9ja2VkPC90aXRsZT4N
Cjxt
ZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2
V0
PXV0Zi04Ij4NCjxNRVRBIEhUVFAtRVFVSVY9IlBSQUdNQSIgQ09OVEVOVD0iTk8tQ0FDSEUi
Pg0K
PHN0eWxlPg0KI2NvbnRlbnR7Ym9yZGVyOjNweCBzb2xpZCNhYWE7YmFja2dyb3VuZC1jb2xvcj
oj
ZmZmO21hcmdpbjo0MDtwYWRkaW5nOjQwO2ZvbnQtZmFtaWx5OlRhaG9tYSxIZWx2ZXRpY2E
sQXJp
YWwsc2Fucy1zZXJpZjtmb250LXNpemU6MTJweDt9DQogIGgxe2ZvbnQtc2l6ZToyMHB4O2Zvbn
Qt
d2VpZ2h0OmJvbGQ7Y29sb3I6IzE5NjM5MDt9DQogIGJ7Zm9udC13ZWlnaHQ6Ym9sZDtjb2xvcjoj
MTk2MzkwO30NCjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBiZ2NvbG9yPSIjZTdlOGU5Ij4N
Cjxk
aXYgaWQ9ImNvbnRlbnQiPg0KPGgxPlZpcnVzIERvd25sb2FkIEJsb2NrZWQ8L2gxPg0KPHA+RG9
3
bmxvYWQgb2YgdGhlIHZpcnVzIGhhcyBiZWVuIGJsb2NrZWQgaW4gYWNjb3JkYW5jZSB3aXRo
IGNv
bXBhbnkgcG9saWN5LiBQbGVhc2UgY29udGFjdCB5b3VyIHN5c3RlbSBhZG1pbmlzdHJhdG9yIGl
m
IHlvdSBiZWxpZXZlIHRoaXMgaXMgaW4gZXJyb3IuPC9wPg0KPHA+PGI+RmlsZSBuYW1lOjwv
Yj4g PGZuYW1lLz4gPC9wPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo=

yes
5

yes
5

yes
5

yes
10

yes
5

yes

10
10

100
50

10
10

100
50

100
yes

192.168.1.20
389

active-directory
DC=lab,DC=local
lab-user-id@lab.local
30
30
-AQ==CaHEtj8wWUhMJjtCSo8m3cTNXm0=m2FUhEU5thOOOgEQzCV6Xw==
no

all

Active Directory
7
sAMAccountName

lab.local
None

no
tls1-2
max

GP-External-Portal

tls1-2
max

lab-firewall_mgmt

FireWall
213.0.223.66
firewall@lab.local
it.team@lab.local

IT Team

All Logs
Send E-Mail alert for critical system log events

IT Team

wildfire
(verdict eq grayware) or (verdict eq malicious) or (verdict eq phishing)
no

repeatcnt
src

srcuser
proto
dport
app
category

bytes
bytes_received
bytes_sent
repeatcnt

25
50
(addr.dst in 223.255.255.223)
last-calendar-day
IOC - DNS Sinkhole
daily

repeatcnt
src

srcuser
srcloc
category
app
dstloc

repeatcnt

25
50
( zone.dst eq Internet ) and ((category eq unknown) or (category eq proxy-avoidance-and-
anonymizers) or (category eq phishing) or (category eq peer-to-peer) or (category eq parked) or
(category eq malware) or (category eq dynamic-dns))
IOC - Suspicious URLs
last-calendar-day
daily

repeatcnt
dst

to
dstuser
proto
sport
app
threatid
src
srcloc

repeatcnt

last-calendar-day
25
50
IOC - User Threats from iNet
( zone eq Internet ) and (( addr.dst in 10.0.0.0/8 ) or ( addr.dst in 192.168.0.0/16 ) or ( addr.dst in
172.16.0.0/12 ))
daily

repeatcnt
src

from
srcuser
proto
dport
app
threatid
dst
dstloc

repeatcnt

last-calendar-day
25
50
IOC - User Threats to iNet
( zone eq Internet ) and (( addr.dst in 10.0.0.0/8 ) or ( addr.dst in 192.168.0.0/16 ) or ( addr.dst in
172.16.0.0/12 )) and !(( subtype eq spyware ) and ( app eq dns ))
daily

repeatcnt
src

srcuser
proto
dport
app
category
dstloc

bytes
bytes_received
bytes_sent
repeatcnt

25
50
( zone.dst eq Internet ) and (( app eq incomplete ) or ( app eq not-applicable ) or ( app eq
insufficient-data ) or (app eq unknown-p2p) or (app eq unknown-tcp) or (app eq unknown-udp))
and !( addr.dst in 169.254.0.0/16 ) and !( addr.dst in 10.0.0.0/8 ) and !( addr.dst in 192.168.0.0/16 )
and !( addr.dst in 172.16.0.0/12 ) and !( zone.src eq Internet )
last-calendar-day
IOC - Suspicious iNet Traffic
daily

nbytes
technology-of-name

name
category-of-name
subcategory-of-name
risk

nbytes
nsess
nthreats

last-7-calendar-days
50
25
daily
Top Applications

repeatcnt
subtype

threatid
app
proto
severity

repeatcnt

50
10
last-7-calendar-days
(severity neq low) or (severity neq informational)
daily
Top Threats

repeatcnt

category

repeatcnt

25
10
(addr.dst notin '192.168.0.0/16') and (addr.dst notin '172.16.0.0/12') and (addr.dst notin
'10.0.0.0/8')
last-7-calendar-days
daily
Top External URLs

repeatcnt
category

misc

repeatcnt
last-7-calendar-days
50
5
(category eq society) or (category eq online-personal-storage)
URL category usage
daily

bytes
natdst

dst
to
subcategory-of-app
app
risk-of-app
proto
dport
rule

bytes
repeatcnt

last-30-calendar-days
100
50
(action eq allow) and (zone.src eq Internet) and !(zone.dst eq Internet) and ((app eq ms-rdp) or
(app eq ssh) or (app eq telnet) or (app eq r-exec) or (app eq r-services) or (app eq radmin) or (app
eq rlogin) or (app eq rsh) or (app eq vnc-base) or (app eq vnc-http) or (app eq X11))
Internet Inbound - HighRiskApps
daily

bytes
natdst

dst
to
subcategory-of-app
app
risk-of-app
proto
dport
rule
bytes
repeatcnt

last-30-calendar-days
100
50
(action eq allow) and (zone.src eq Internet) and !(zone.dst eq Internet) and (app neq incomplete)
and (app neq insufficient-data)
Internet Inbound
daily

bytes
subcategory-of-app

app
from
rule

sessions
bytes

100
50
(zone.dst eq Internet) and (app neq incomplete) and (app neq insufficient-data) and (app neq
nosytcp)
Internet Outbound-Applications
last-30-calendar-days
daily

repeatcnt
category

app
risk-of-app
rule

repeatcnt

100
50
(zone.dst eq Internet) and (action neq block-url) and ((category eq adult-and-pornography) or
(category eq bot-nets) or (category eq confirmed-spam-sources) or (category eq dead-sites) or
(category eq hacking) or (category eq illegal) or (category eq keyloggers-and-monitoring) or
(category eq malware-sites) or (category eq opehttp-proxies) or (category eq parked-domains) or
(category eq pay-to-surf) or (category eq peer-to-peer) or (category eq phishing-and-other-frauds)
or (category eq proxy-avoidance-and-anonymizers) or (category eq spam-urls) or (category eq
spyware-and-adware) or (category eq unconfirmed-spam-sources))
URL - High Risk Categories
last-30-calendar-days
daily

repeatcnt

app
risk-of-app
dstloc
category
misc
referer

repeatcnt

100
50
(zone.dst eq Internet) and (category eq unknown)
URL - Top 100 Unknown URLs
last-30-calendar-days
daily

bytes
src

from
to
dst
dstuser
dstloc
app
proto
dport

bytes_sent
bytes_received
bytes
repeatcnt
50
50
((app eq unknown-udp) or (app eq unknown-tcp) or (app eq unknown-p2p)) and (action eq allow)
Unknown Applications
last-30-calendar-days
daily

repeatcnt
dst

dstuser
srcloc
app
filetype
misc
category
sender
recipient
subject
filedigest

repeatcnt

last-calendar-day
10
50
IOC - Wildfire
daily

IOC - DNS Sinkhole

IOC - Wildfire

no

IOC - Suspicious URLs

IOC - User Threats from iNet


IOC - User Threats to iNet

IOC - Suspicious iNet Traffic

Top Applications

Top External URLs

Daily Threat Report


IT Team

Weekly FireWall Summary Report


IT Team

friday

auto
auto
auto

1500

no

no

no

no
Ping-Only

no

Internet

auto
auto
auto

1500
Ping-Response Page

no

no

no

no

no

Internal Network

no

no

no
Ping-Response Page

DMZ

no

no

no

Ping-Response Page

Public Guest Network

no

no

no

Ping-Response Page

Datacentre

HA1

HA2
Remote Access VPN

3
5
wait-recover

no
no
no
no
no
no
yes
no
no

no
no
no
no
no
no
yes
yes
no

no
yes
no
yes
no
no
yes
yes
no

800
1000
8000

yes

90
100
1000

yes

10000
10000
40000

no

100
200
2000

yes

400
500
4000

yes

source
3600
2
100

source
3600

10
100

source
3600

2
100

yes
yes
yes
yes
yes
yes
yes
yes
yes
yes
yes
yes
yes
yes
yes
yes
no
yes
yes
yes
yes

real-time
high

high

medium

medium

low

low

low

ethernet1/1
ethernet1/2
ethernet1/3
ethernet1/4
ethernet1/5
tunnel.10

no
any
2

203.0.113.1

None

10
0.0.0.0/0
no
yes
no

1
30
30
120

no
yes
no
no

no
no

2-byte

no

100

no
120
120
120

yes

10
30
110
200
20
120
aes-128-cbc
3des

sha1

group2

aes-128-cbc

sha256

group19

aes-256-cbc

sha384

group20

sha1

group2

8
aes-256-cbc

sha512

group5

aes-256-cbc

aes-128-cbc
3des

sha1

group2

aes-128-gcm

none

group19

aes-256-gcm

none
group20

sha1

aes-256-cbc
aes-256-gcm

group2

sha512

aes-256-cbc
aes-256-gcm

group5

aes-128-cbc

sha1
no

8.8.8.8
8.8.4.4

lab.local

ethernet1/1

tunnel.10

enabled

10.0.17.1

4320

10.0.17.1
255.255.255.0

10.0.17.10-10.0.17.250

yes

8.8.8.8
8.8.4.4

yes

no
no

lab.local
*.lab.local

192.168.1.20
yes

ethernet1/5

Training Lab
Instructor

.1
include
0x80

-
AQ==zPJb3ngM1sGjXlfX2+Qk6rbdv1I=ucInIpBmFcnkQK7
zF4VO1w==
-
AQ==zPJb3ngM1sGjXlfX2+Qk6rbdv1I=ucInIpBmFcnkQK7
zF4VO1w==
All-OiDs
!! User: fwadmin Pass: paloalto !! This system is for the use of authorized users only.
Individuals using this system are subject to having all of their activities on this system
monitored and recorded by system personnel. Anyone using this system expressly consents to
such monitoring and is advised that if such monitoring reveals possible evidence of criminal
activity, system personnel may provide the evidence of such monitoring to law enforcement
officials.
auto-negotiate
lab-firewall
lab.local
192.168.1.254
255.255.255.0
192.168.1.1

192.168.1.20

Europe/Dublin
updates.paloaltonetworks.com

yes
no
yes
no
no
yes

00:30
download-and-install

13
download-and-install

03:00
saturday
download-and-install
yes
yes
yes
yes
yes
yes
yes
yes

download-and-install

ptbtime1.ptb.de

ptbtime2.ptb.de

yes

53.3440331
-6.2621601

lab-firewall_mgmt

logo_pan.gif
/9j/4AAQSkZJRgABAQIAOwA7AAD/2wBDAAUDBAQEAwUEBAQFBQUGBw
wIBwcHBw8L
CwkMEQ8SEhEPERETFhwXExQaFRERGCEYGh0dHx8fExciJCIeJBweHx7/2wB
DAQUF
BQcGBw4ICA4eFBEUHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4e
Hh4e
Hh4eHh4eHh4eHh4eHh7/wAARCAHqAkgDASIAAhEBAxEB/8QAHwAAAQUB
AQEBAQEA
AAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQAAAF9A
QIDAAQRBRIh
MUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3
ODk6
Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJW
Wl5iZ
mqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx
8vP09fb3+Pn6/8QAHwEAAwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQ
oL/8QAtREA
AgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJBUQdhcRMiMoEIFEKRobH
BCSMzUvAV
YnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpjZ
GVmZ2hp
anN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6ws
PE
xcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAP
wD7
LooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKA
Ciiig
AooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACuU+IPxD8J+BbUS6
/qaxz
uu6K0iG+eT6KOg9zge9ed/tB/GyPwgZfDfhh459eK4nnIDJZg+3RpPY8DvnpXyPq
d/e6nfzX+o3U13dzsXlmmcs7n1JNd2HwbqLmlojzcXmCpPkhqz3rxh+09rt1I8Ph
bRLTToegmuyZpT7hRhV+h3V51qXxl+Jt+5ebxffR57W6pCB/3worgaK9KOHpR2i
e
PPFVpvWTOv8A+Fn/ABE/6HXXf/A1/wDGj/hZ/wARP+h113/wNf8AxrkKKv2cO
yM/
a1P5mdf/AMLP+In/AEOuu/8Aga/+NH/Cz/iJ/wBDrrv/AIGv/jXIUUezh2Qe1qfz
M6//AIWf8RP+h113/wADX/xo/wCFn/ET/oddd/8AA1/8a5Cij2cOyD2tT+ZnX/8A
Cz/iJ/0Ouu/+Br/40f8ACz/iJ/0Ouu/+Br/41yFFHs4dkHtan8zOv/4Wf8RP+h11
3/wNf/Gj/hZ/xE/6HXXf/A1/8a5Cij2cOyD2tT+ZnX/8LP8AiJ/0Ouu/+Br/AONH
/Cz/AIif9Drrv/ga/wDjXIUUezh2Qe1qfzM6/wD4Wf8AET/oddd/8DX/AMaP+Fn/
ABE/6HXXf/A1/wDGuQoo9nDsg9rU/mZ1/wDws/4if9Drrv8A4Gv/AI0f8LP+In/Q
667/AOBr/wCNchRR7OHZB7Wp/Mzr/wDhZ/xE/wCh113/AMDX/wAaP+Fn/ET/A
KHX
Xf8AwNf/ABrkKKPZw7IPa1P5mdf/AMLP+In/AEOuu/8Aga/+NH/Cz/iJ/wBDrrv/
AIGv/jXIUUezh2Qe1qfzM6//AIWf8RP+h113/wADX/xo/wCFn/ET/oddd/8AA1/8
a5Cij2cOyD2tT+ZnX/8ACz/iJ/0Ouu/+Br/40q/FD4iqcjxrrn43jn+tcfRR7OHZ
B7Wp/M/vPS9F+OvxO0yRT/wkZvYx1ju7eOQH8cbvyNer+Bv2nrOeSO28ZaIbMn
hr
ywJeMe5jb5gPoWPtXy7RWc8LSnujanjK1N6S+8/R/wAO65pHiLS49U0PUbe/s5P
u
ywvkZ9COoPscEVo1+eXgDxr4h8D60uqaBetCxwJoW+aKdf7rr3Hv1HYivtj4RfEb
R/iL4f8At1j/AKPfQYW9smbLQse49UPOG/kQRXl4jCyparVHtYTGxr+69GdrRRR
X
IdwUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQA
UUUUAFFFFABRR
RQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFeb/ALQfxDHg
DwW0lm6f2zqB
MNip52HHzSkeigj8SvbNekV8MftI+LH8VfFPUjHLvsdNY2NqAeMISHb3y+459M
el dWEo+1qa7I48dXdGlpuzzq4mluLiS4uJXlmlYvI7tlmYnJJJ6kmo6KK9w+aCiiig
QUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUU
UUAFFFFABRRRQ
AUUUUAFdF8OvF2qeCPFdpr+lv88J2zQk4WeI/eRvY/oQD2rnaKTSkrMqMnF3W
5+j
3hbW9P8AEnh6x13S5fNs72ESxnuM9VPoQcgj1Bor5/8A2LPFjy2+reDLqXIhH26z
BPRSQsqj2yUOPdqK+fr0/ZTcT6nDVvbU1M+kqKKKyNwooooAKKKKACiiigAo
oooA
KKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAo
oooA
KKKKACiiigDN8U6j/ZHhjVdW4/0KymuOf9hC39K/OOR3kkaSRizsSzMTkknvX
6Bf
GRivwn8VkHH/ABKLkfnGwr8+69XLl7smeJmz96KCiiivRPICiiigAooooAKKKK
AC
iiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKK
KAP
RP2b9UfSvjP4fkDYS4ma1cf3hIhUD/voqfworD+EbFfir4TIOP8AidWg/OZaK8nM
F76fke9lT/dyXmfoRRRRXnnqBRRRQAUUUUAFFFFABRRRQAUUUUAFFFFA
BRRRQAUU
UUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUA
FFFFAHJfGb/kk
3iv/ALBNx/6LNfn5X6B/Gb/kk3iv/sE3H/os1+fletl3wM8PNvjj6BRRRXoHkhRR
RQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQA
UUUUAFFFFABRR
RQAUUUUAFFFFAHT/AAm/5Kp4T/7Ddn/6PSij4Tf8lU8J/wDYbs//AEelFeVmPx
RP
cyn4Jep+hNFFFecesFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABR
RRQAUUUU
AFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAcl8
Zv8Akk3iv/sE
3H/os1+flfoH8Zv+STeK/wDsE3H/AKLNfn5XrZd8DPDzb44+gUUUV6B5IUUUU
AFF
FFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFTWd
tPeXUdraxNLNI
21FHc16XoXgHTbaFX1Qm8nI5UMVjX6YwT9T+VeRm+e4PKYKWIlq9ktW/68z
WnSlU
2PLqK9jvvBvh66iKCxEDYwHhYqR+HQ/iK8u8SaRPomqvYzsHAAaOQDAdD0O
O3Qj6
g1zZNxLgs3k4UbqS1s9HburNodSjKnqzNooor6AxCiiigAooooA6f4Tf8lU8J/8A
Ybs//R6UUfCb/kqnhP8A7Ddn/wCj0orysx+KJ7mU/BL1P0Jooorzj1gooooAKKKK
ACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAK
KKK
ACiiigAooooAKKKKACiiigDkvjN/ySbxX/2Cbj/0Wa/Pyv0D+M3/ACSbxX/2Cbj/
ANFmvz8r1su+Bnh5t8cfQKKKK9A8kKKKKACiiigAooooAKKKKACiiigAooooA
KKK
KACiivfv2XfhJZeJUPjDxNbC40yKUpZWjj5Lh1+87jugPGO5BzwMHOrVjSjzSNq
N
GVafJE8i8PeCPF/iGD7RovhrVL6DtNFbMYz/AMCxj9apeIfDuveHbhbfXdHvtNkb
lBcwNHv91JGD+Ffo1FGkUaxRIqRoAqqowFA6ACsnxj4b0jxZ4eudD1q1We1uFI5
H
zRt2dT2YdjXnrMXzarQ9SWUrl0lqfnPRWh4l0ubQ/EWpaLcMGlsLqW2dgOGKM
VJ/
HFZ9eonfU8Zqzsz0D4RaejPeanIgLJiGI+ndv/Zf1r0OuX+F9uIfCcUgPNxK8h/A
7f8A2Wuor8F4txTxObVnfSL5V8tPzuepQjamgrzn4wtF9r05RjzRG5b125GP5GvR
q8m+KNwJ/Fbxgf8AHvCkZ985b/2avQ4Douea8y+zFv8AJfqRiXamcrRRRX7UeaF
F
FFABRRRQB0/wm/5Kp4T/AOw3Z/8Ao9KKPhN/yVTwn/2G7P8A9HpRXlZj8UT
3Mp+C
XqfoTRRRXnHrBRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUU
UUAFFFFABRRR
QAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAHJfGb/kk3i
v/ALBNx/6L
Nfn5X6B/Gb/kk3iv/sE3H/os1+fletl3wM8PNvjj6BRRRXoHkhRRRQAUUUUAFFF
F
ABRRRQAUUUUAFFFFABRRRQAV+hPwn0pdF+GfhzTQgRotOhMgx/y0ZQz/A
PjzGvgb
w1pzav4j0zSVzuvbuK3GPV3C/wBa/R9FVEVEAVVGAB2FebmMtIxPYymGspC0
UVie
PtT/ALG8D67qwba1pp88yn/aVCVH54rzErux7MnZXZ8B+OtRGseNdc1VSCt5qE
86
49GkYj9DWNRU9hbtd31vaqcNNKsYPuSB/WvpNIx8kfINuTue2eGbf7L4e0+Aps
Zb
dNw9GIyf1JrQoAAGBwKK/mrF13iK86r+02/vdz10rKwV4f4ruGuvEuozFg2bh1U/
7KnA/QCva7ydLW0muZOEijaRvoBk14ExLEsSSTySa/RvDnD616z8l+bf6HJi3okJ
XpnwU+EWr/EW5e7eU6dokD7JrsplpG6lIx3Pqegz36V5xawSXN1FbQrullcIg9ST
gCv0V8HaDZeGPC+naBp6KtvZQLECBje38TH3Y5J9zX6Li67pRSjux4DCqvNuW
yOC
0r9n/wCF9lZiCbQ57+TGGnuL2Xe3/fDKo/ACvKfjz8BbLw9oVx4n8HPcG0tRvvL
G
V95jj7ujdSB1IOeMnPGK+qay/FzW6+E9Ya7ANsLGczA9Nnltu/TNebTxNSMk73P
Y
q4OjKDXKkfnHRRRXunzB0/wm/wCSqeE/+w3Z/wDo9KKPhN/yVTwn/wBhuz/9
HpRX
lZj8UT3Mp+CXqfoTRRRXnHrBRRRQAUUUUAFFFFABRRRQAUUUUAFFFF
ABRRRQAUUU
UAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAF
FFFAHJfGb/kk3
iv8A7BNx/wCizX5+V+gfxm/5JN4r/wCwTcf+izX5+V62XfAzw82+OPoFFFFegeS
F
FFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAHon7N+mf2p8aPD0RXK
QTPcsfTy0Z
wf8AvoL+dfdlfJH7FemfaPiBquqMuVs9OMYPo8jrj9EavrevGx8r1bdj6HLI2o37
sK8v/ak1P+zfgtq6q22S8eG2T/gUgLD/AL5Vq9Qr56/bc1PyvC3h/Rw3NzeyXJHt
Em3/ANq1jho81WKOjFz5KEn5HypW54Ct1ufFtgjDKq5k+hVSw/UCsOu0+Eduz6
5c
3O0FIrfbn0ZmGP0BrrzzEfV8ur1O0X97Vl+J81SV5pHp9FFFfzqesYvjq5Nr4T1C
QdWi8v8A77IU/oa8Wr1L4tXHl+H4IA+DNcDI9VAJP67a8tr9q4Cw/ssq5/55N/dZ
foedinedjsPgppn9r/FnwzZFdy/2hHK49VjPmMPyU1+gFfGn7Humfbfi59sK5Gn6
fNOD6M22Mfo5r7Lr3Mwleol2R62VxtSb7sK4P9oPU/7K+DXiW4DbWltPsw9/NY
Rn
9HNd5Xh37Z2p/ZfhpY6crYe+1JNw9URGY/8Aj2yuahHmqRXmdmJlyUZPyPkCiii
v oT5Q6f4Tf8lU8J/9huz/APR6UUfCb/kqnhP/ALDdn/6PSivKzH4onuZT8EvU/Qmi
iivOPWCiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAoo
oo
AKKKKACiiigAooooAKKKKACiiigAooooAKKKKAOS+M3/ACSbxX/2Cbj/ANF
mvz8r
9A/jN/ySbxX/ANgm4/8ARZr8/K9bLvgZ4ebfHH0CiiivQPJCiiigAooooAKKKKAC
iiigAoor6Z/Za+Emn3WmQ+OfE1ol0ZWJ0y1lXKKoOPOZT1JIO0HgAZ5yMZ1qsa
Ue
Zm9ChKvPlieI6B8OPHeu2i3mleFdUuLZhlJTCURx6qWwG/CsjxF4e1zw7di013Sb
3TZmGVW4hKbh6qTwR7iv0crn/iF4S0rxr4Wu9C1WFGSVCYZduWgkx8sinsQfz
GQe
DXnxzB83vLQ9OeVLl92Wp+d9FTXtvLZ3k9pOMSwSNG49GU4P8qhr1Dxj6u/Y
k0zy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Fe3/ALM3wltvGVxL4l8RRM+i2kvlw2+SBdSjk5PXYuRn1Jx2Ir16lSNOPNI8KjSl
VmoROI+Cug65qPxF8N39ho+oXVpbavayTzw2zvHEqzKWLMBgADnmivvOztba
ytY7
Szt4ra3iXbHFEgREHoAOAKK8TEV/bSvax9HhML9Xi1e9yWiiiuc6gooooAKKK
KAC
iiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKK
KAC
iiigAooooAKKKKACiiigDkvjN/ySbxX/ANgm4/8ARZr8/K/QP4zf8km8V/8AYJuP
/RZr8/K9bLvgZ4ebfHH0CiitPw94e1zxFdm10LSL3Uphyy20LPtHqxHAHua9BtLV
nlJNuyMyiuv134ZeP9EsWvtT8KalDbINzyrH5ioPVtpO0e5rkKUZKWzHKEo6SVg
o
oopkhRWloGg614gvPseh6Ve6jOBkpbQs5Uepx0Hua39a+F/xB0exa+1Dwnqcdug3
O6R+YEHq20nA9zUucU7NlqnNq6Whx1FFFUQKis7qiAszHAA7mv0e8MaamjeG
9M0i
MAJZWkVuAOnyIF/pXwN8KdM/tj4l+HNOK7km1KHzB/sBwzf+Og1+hVeXmMt
YxPay
mGkpBUV7cRWlnPdzHbFDG0jn0VRk/wAqlrjfjhqf9kfCPxPebtpOnyQqfRpf3Y/V
xXnxjzSSPWnLli5dj4I1G6kvdQuL2X/WXErSt9WJJ/nUFFbnw/0z+2fHWhaUV3Ld
6hBE4/2S4DH8s19G2oq58ik5O3c+/PA2mf2N4L0TSdu02dhBAw/2lQA/qDWxRR
Xz bd3c+vSsrIbI6RxtJIwVFBZiegAr83/EOoPq2v6jqj533l1LcNn1dy39a++vi3qf
9j/DHxJqAba8emzCM+jspVf/AB4ivz3r08ujpKR42bS1jEK950a3NnpFnatjdDAi
H6hQDXiOi263esWVq4JWadEb6FgDXvFfC+I2ItChQXVt/dZL82cmEW7Ciiq2rXJ
s
9Ku7sDJhgeQD1IUmvzKhSdapGnHdtL7zsbseJa7cLd61e3KNuSW4d1PsWOP0qlR
V
zRLGTU9ZsdNiz5l3cRwLj1dgo/nX9LwjGnBRWyPH1bPvj4OaZ/ZHwr8NWBXay
6dE
7j0d13t+rGuspkESQQRwxKFjjUKoHYAYAp9fOSfM2z6+EeWKj2Cvzv8AiTqf9s/
E
HxBqgbclzqM7of8AY3nb+mK++/GGpf2N4S1jV84+xWM1wD7ohYfyr85CSTk8m
vSy
6PxSPJzaXwxCvv34HaUujfCTw1ZBAjNYJO4x/FL+8bPvlzXwVplpLf6la2MPMtz
M
kKf7zEAfzr9I7O3jtLSG1hXbFDGsaD0AGB/KqzGWkYkZTD3pSJaKKK8o9sKK
KKAC
iiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKK
KAC
iiigAooooAKKKKACiiigAooooAKKKKAOS+M3/JJvFf8A2Cbj/wBFmvz8r9A/jN/
y SbxX/wBgm4/9Fmvz8r1su+Bnh5t8cfQ7L4PeBrn4geNrfQ4naG1VTPezqOY4VIzj
/aJIUe59Aa+6vCvh7RvC+jQ6RoVhFZWkQ4VByx7sx6sx7k814N+xDpYTSPEmt
MgJ
lnitUbHTYpZh/wCPr+Qr6Nrmx1VyqcvRHXltGMaSn1YV8aftY+C9P8LeObbUdJg
S
2s9YiaYwIMKkykB9o7A7lOPUmvsuvk/9tnUhN4z0LSgc/ZbBpz7GSQj+UYpYFtV
b
IrMlF0G2fP8AXWfCfwXd+PfGtpoFs5hibMt1OBnyYVxub68gD3Irk6+mv2INLGz
x
LrbpyTBaxNjp95nH/oH5V6mIqOnTckeJhaSq1VF7Hv3hDwzonhPRIdH0GxjtLW
Mc
7R80jd2durMfU1sUUV4Dbbuz6lJRVkfHv7XXgrT/AA14wsda0qBLa31pJGlhQYV
Z kK72A7Bg6nHrk968Rr6J/be1ISeIfDmkA829pLckf9dHCj/0Ua+dq97CtulFs+Yx
qjGvJRPW/wBkrTP7Q+MtncFdy6faT3J/758sfrIK+1a+X/2INM3aj4l1ll/1UMNs
h9dxZmH/AI4v519QV5mOlerbsezlsOWgn3CvGP2xNT+xfCZLJW+bUNQiiI9VU
NIT
+aL+dez18x/tv6nm68M6MrfcSe5kX6lVU/8Ajr1nhI81aJpjpctCTPmuvUf2WdM/
tH406S7Lujso5rl/wjKqf++mWvLq+hv2I9M83xP4h1gr/wAe1nHbA/8AXR93/tKv
YxMuWlJng4OPNXivM+qqKKK+fPqTyL9rjU/sHwbubYNg6heQWw98MZD/AOi
6+LK+
nv239T22fhnRlb78k9zIPTaFVT/489fMNe3gY2pX7nzmZT5q7XY6P4b25n8XWrb
Q
VhV5G9vlIB/MivYK82+EFvu1K+u8/wCrhWPH+8c/+yV6TX5Hx9iPaZmqf8sUvm
7v
9UXhVaAVz/xEuPs/hG8w21pNsY98sMj8s10FcP8AF+4C6VZWn8Uk5kH0Vcf+zi
vG
4Yw/1jNqEO0r/wDgOv6GlZ2g2eaV1/wV+z/8Lb8K/aiBH/akGM/3t42/+PYrkKfB
LJBMk0MjRyxsGR1OCpByCD2Nfv8AJc0Wjy4S5ZJ9j9LaK+f/AIaftI+H7nSILTxs
J9P1GJQsl3FCZIZsfxYXLKx7jBHoew2PFX7SHgLTbN20Q3muXRH7tI4Ggjz/AL
TS
AED6Ka8F4aqpW5T6dYyg483MjQ/ap8TW2g/Cm908yqL3WCLWCPPJXIMjY9A
oI+rD
1r4nrpPiJ411zx34hfWdcnDPjZDDHkRwJ2VR/Xqe9c3Xr4aj7GFnueDjMR7epzLY
6b4UyW0PxO8MS3hVYE1a2Zy3QfvV5PtX6FV+aAJBBBwRX0v8Lv2k7W10eDS
/HFle
S3ECBF1C1AcygdDIpIIb1Izn0FYY2hOpaUdTqy7EwpXjPS59MUV45a/tDeD9T8
Ra
ToeiWGqXlxqN9DaiSRFijj8xwm4kkk4znGOfUUV5c6cofErHs06sKl+R3PY6KKK
g
0CiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAK
KKK
ACiiigAooooAKKKKACiiigAooooAKKKKAOS+M3/JJvFf/YJuP/RZr8/K/QP4zf8
A
JJvFf/YJuP8A0Wa/PyvWy74GeHm3xx9D7Y/ZO0z+z/gxYTldrX9zPcsP+B+WD+
UY
r1iuF+AFza3Xwc8MvaMpRLIRNjs6kq//AI8DXdV51Zt1JN9z1sOkqUUuyCvhv9p7
U/7S+NOt7W3R2vlWye22Ndw/76LV9p+Jta07w7oN5reqziCzs4jJKx9ugHqScADu
SK/PHxNqs2u+I9S1q4G2W/upLl1znaXYtj6DOK7Mvg+ZyPPzWolCMDOr7P8A2
QtM
+w/B6K7K4Oo309xn1AIi/wDaZr4wr9BPg7pn9kfCzw1YFdrLp0TuPR3Xe36sa3zC
VqaXdnNlcb1XLsjrKKKK8c98+JP2rNT/ALR+NGpxBtyWMMNsp+iByP8Avp2ry
qug
+JGp/wBs/EDxBqgbclzqM7of9jedv6Yrn6+jpR5YJHyVefPUlLuz7F/Y30z7H8K5
79l+a/1GWQH1RVVAPzVvzr2uuJ+BGmf2T8H/AAxabdpaxW4I95SZT/6HXbV4N
eXN
Uk/M+mw0eSlFeQV8Xftdan9v+MdxahsjT7KC2+mQZT/6Mr7Rr8+fi7qf9sfFDxLq
AbckmpTLGfVFYqv/AI6orqy+N6jfkceaytSUe7OVr67/AGLtM+zfDnUtTZcPe6ky
qfVI0UD/AMeL18iV94fs66Z/ZXwY8OQFcNNbG5Y+vmu0gP5MK6sfK1K3c4srje
tf sj0CiiivGPoD44/bG1P7b8WI7FW+XT9OiiI9GYtIT+Tr+VeLV2nxy1P+1/i74nvN
24C/eBT6iLEY/RBXF19DQjy04ryPlMTPnqyfmeofCS3EehXNwUw0twRn1VVGP
1LV
2dc78N9v/CHWW3Gcybvr5jf0xXRV+B8TVXVzavJ/zW+7T9Dvoq0EFeY/F24Z9a
tL
XIKxW+/6FmOf0UV6dXinjPUI9T8S3l1C26LcEjOcghQBkexxn8a9/wAP8LKpmE
q1
tIRf3vRfhcyxUrQsY9FFFfsR5wUUUUAFFFFABRRRQB0/wm/5Kp4T/wCw3Z/+j
0oo
+E3/ACVTwn/2G7P/ANHpRXlZj8UT3Mp+CXqfoTRRRXnHrBRRRQAUUUUAF
FFFABRR
RQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQA
UUUUAFFFFABRR
RQAUUUUAFFFFAHJfGb/kk3iv/sE3H/os1+flfoH8Zv8Akk3iv/sE3H/os1+fletl
3wM8PNvjj6HpnwV+L+r/AA5klszbDUtGuH3yWjPsZH6F0bBwcAZBGDgdOte0X
P7U
fhJbPdbeHtckucf6uTykTP8AvByf/Ha+S6K6KmFpVJczRyUsbWpR5YvQ7/4tfFfx
J8RLhY74pZaXE26GwgYlAf7znq7e5wB2Aya4CiitoQjBWijnnOVSXNJ3Zc0Sxk1
T
WrHTIs+Zd3EcC49XYKP51+kMESQQpDEoWONQqgdgBgCvhD9nrTP7V+M3hq
3K5WK6
+0n28pWkH6qK+8q8zMZe9FHs5TG0JSCsrxjqX9jeEtY1fdt+xWM1wD7ohYfyrVr
z
X9pvU/7M+C2ulWxJdCO2T33yKGH/AHzurhpx5ppHpVZckJS7I+GTycmprG2lvL
2C
0hGZZ5FjQerMcD+dQ12nwN0z+1/i74Ysyu4C/Sdh6iLMh/RDX0UpcsWz5SEeaSj
3
PvXTrWKx0+2soRiK3iWJB/sqAB/Kp6KK+aPrylr9+mlaFqGqSY2WdrJcNn0RSx/l
X5vSyPLK8sjFndizE9yepr7u/aK1P+yvgx4jnDYaa3Fso9fNdYyPyY18H162XR91
s8PNpXnGI6KN5ZUijUs7sFUDuT0FfpDoFgmlaFp+lx42WdrHbrj0RQo/lXwN8Id
M
/tj4oeGtPK7kk1KFpB6orBm/8dU1+g1Z5jLWKNMpjpKQVBqN1FY6fcXsxxFbxN
K5 /wBlQSf5VPXE/HfU/wCyfg/4nu920tYtbg+8pEQ/9Drz4R5pJHrTlyxcux8F31zL
eXs93McyzyNI59WY5P8AOoaKK+kPkDpvBHiltBd7e4jaaylO5lX7yN6j1z3H0/Hu
x428NbN39oHOPu+RJn/0HFePUV81mnCeX5lW9vVTUutna/rozaGInBWR2ni7xvJ
q
Nu9jpkb29u4xJI/DuPQY6D+ftXF0UV7GX5bhsuo+xw8eVfn5t9TOc3N3YUUUV2
kB
RRRQAUUUUAFFFFAHT/Cb/kqnhP8A7Ddn/wCj0oo+E3/JVPCf/Ybs/wD0elFeV
mPx
RPcyn4Jep+hNFFFecesFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFA
BRRRQAUU
UUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUA
cl8Zv+STeK/8A
sE3H/os1+flfoH8Zv+STeK/+wTcf+izX5+V62XfAzw82+OPoFFFFegeSFFFFAHuf
7GGmfaviVf6ky5Sy019p9Hd1A/8AHQ9fXtfO37EOm+X4e8R6wV/4+LuK2B/65o
WP
/o0V9E14eNlesz6XL48tBeYV4B+2zqfkeCtD0kNhru/acj1WJCD+sgr3+vkv9tbU
/tHjrRtJVsrZ6eZSPRpHII/KNT+NGDjzVkGYS5aEvM8Dr2n9jrTPtvxYkvmX5dP0
6WUN6MxWMD8nb8q8Wr6e/Yg0zbZ+JtZZfvyQW0bem0MzD/x5K9TFy5aMjxc
DHmrx
PpKiiivBPpzwr9tHU/s3w603TFbD3upKzD1SNGJ/8eZK+RK+hv23NT83xP4e0cN/
x7WclyR/10fb/wC0q+ea9zBR5aKPm8wlzV35Hr/7Iumfb/jHb3RXI0+ynufoSBEP
/RlfaNfMf7EGmZuvE2ssv3Egtoz9SzMP/HUr6crz8dK9VrserlsOWgn3CvFP2yNT
+x/CqCxVvmv9RijI9UVWcn81X869rr5f/bf1PdqPhrRlb/VwzXLj13FVU/8Ajjfn
WeEjzVommOly0JHzfRRRXvHzAUUUUAFFFFABRRRQAUUUUAFFFFABRR
RQB0/wm/5K
p4T/AOw3Z/8Ao9KKPhN/yVTwn/2G7P8A9HpRXlZj8UT3Mp+CXqfoTRRRXnHr
BRRR
QAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAU
UUUAFFFFABRRR
QAUUUUAFFFFABRRRQAUUUUAFFFFAHJfGb/kk3iv/ALBNx/6LNfn5X6I/Eiy
fUfh7
4jsIxl7jS7mNB/tGJgP1xX53V62XP3ZHh5svfi/IKKKK9A8kKKKKAPp79ivxRYpp
2reD55kjvGuft1srHHmgoqOB6ldinHoSexr6Sr81rG7urC8ivLK5mtrmFg8UsTlX
Rh0II5Br0yy/aA+KFtZC2OtwTlRgSy2cbSD8cc/Ug152IwUpz5ovc9fCZhGnTUJr
Y+xfGPiXRvCWg3Gta5eJbWsI7n5pG7Ig/iY9h/Svgj4i+Kbvxn4z1HxHeL5bXcmY
4s5EUYAVE/BQOe5ye9QeLfFfiPxZfC98RavdajMuQnmt8qZ6hVGFX8AKxa3w2
FVH
V7nNjMY8RolZIK+0/wBkbTPsHwctrkrg6heT3J98MIx/6Lr4sr9CPhJpn9j/AAx8
N6eV2vHpsJkHo7KGb/x5jWWYStTS8zbKo3quXZHUUUUV5B7x8QftTan/AGj8a
dWR
W3R2UcNsn4RhmH/fTNXl1bnxA1P+2fHWu6qG3Ld6hPKh/wBkuSo/LFYdfR0o8
sEj
5KtLnqSl3Z9k/sd6Z9i+EzXrL82oahLMD6qoWMD80b869nrz39nBrZvgp4b+ykFB
BIGx2fzX3f8Aj2a9Crwa7vVk/M+mw0eWjFLsgr4q/a11P7f8Zby3Dbl0+0gth/3z
5h/WQ19nahd22n2M99ezpBbW8bSzSucKiKMkn2Ar88/iDrv/AAk3jfWdfAZUvryS
WNW6qhPyA+4XArry+F5uRxZrNKmo92YVFFFeseCFFFFABRRRQAUUUUAF
FFFABRRR
QAUUUUAdP8Jf+SqeE/8AsN2f/o5KKvfAqye/+MHhaBBkrqEc34R/vD+i0V5OYv
30
e7lS/dyfmffdFFFeeeqFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB
RRRQAUU
UUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUA
BAIIIyD1Ffnp8
UPDj+E/H+s6AyFY7a5byM94m+aM/98la/Quvnv8AbB8AyanpMHjfTIS9xp6eTfqo
5aDOVf8A4CSc+zZ6LXbgavJUs+p5+ZUXUpcy3R8p0UUV7J86FFFFABRRRQA
UUUUA
XvD9g2q69p+lpndeXUVuuPV3C/1r9II0SONY41CooCqB2Ar84/C2p/2L4n0rWQh
k +wXsN1tH8XluGx+lfoloup2Os6Ta6rplwlzZ3UQlhlQ8Mp/kfUdjXmZje8ex7WU2
tLvoXKxvHOp/2L4L1vV9202dhPOp/wBpUJH64rZr52/a0+JllDo0vgLRrlJ7y4Zf
7SeNsiBAQRHkfxEgZHYDB61w0abqTUUejiKqpU3JnyxRRRX0J8oetfAb4x3Pw8
Mu
lalay3+hTyeYY4yPNt3PBZM8EHAypI9QRzn3eb9oz4aJZ+et1qcsmM+Qtk2/6ZJC
/rXxdRXNUwlOpLmZ20cdVpR5VseufGr43av49gbR9Ot20rQtwLw78y3GDx5hHG
O+
0cZ6k8Y8jooreFONNcsUc1SrOrLmm7sKKKKozCiiigAooooAKKKKACiiigAoooo
A
KKKls7a4vLuG0tYXnuJnEcUaDLOxOAAO5JoGe6fsZeG3v/HN/wCJJU/caXbGO
NiP
+W0uRx9ED5/3hRX0F8FfBUfgPwBZaK2xr183F869GmYDIz3CgBR7LnvRXgYm
r7So
2tj6fB0fY0lF7na0UUVgdQUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUU
UUAFFFFA
BRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRR
RQAUyeKKeF4Zo
0kikUq6OMqykYII7in0UAfGX7Qfwdu/BWoS67oUEk/hud88ZZrJifuN/sZ6N+B5w
T45X6WzwxXEDwTxJLFIpV0dQysp4IIPUV89/FT9m6y1CWXU/A1zFp87Es+nzk
+Sx
/wCmbclPocj3UV6mHxqty1PvPFxeXO/NS+4+VqK6Dxb4K8V+FJjH4g0K9sQDgS
vH
uib6SDKn8DXP16KaaujyZRcXZoKKKKZIUUUUAFdh4C+JfjPwQjQaBrDxWjtua
1lQ
Swk+oVvun3XBNcfRSlFSVmiozlB3i7M9N8SfHX4la3ZtaPra2ELjDixhWJiP9/7w
/AivM2ZmYsxLMTkknJJpKKUYRhpFWKnUnUd5O4UUUVRmFFFFABRRRQA
UUUUAFFFF
ABRRRQAUUUUAFFFFABRQOTgV33gb4QePPF0kbWWiy2dm/W8vgYYgPUZ
G5v8AgINT
KcYK8nYuEJTdoq5waI0jqiKWdjhVAySfQV9Y/s0/BuTw75Xi/wAVW23VnXNla
OOb
VSPvuP8AnoQen8I9zx1Pwi+CXhvwK0WpXJ/tfXFGRdSphIT/ANMk7H/aOT9M4
r1S
vLxOM51yw2PaweX+zfPU37BRRRXnnqhRRRQAUUUUAFFFFABRRRQAUUU
UAFFFFABR
RRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQ
AUUUUAFFFFABR
RRQAUUUUAFFFFACOquhR1DKwwQRkEVzWpfD7wLqLmS98IaHLIer/AGG
MMfqQM101
FNSa2ZMoqW6OK/4VN8Nv+hM0j/vzR/wqb4bf9CbpP/fmu1oqvaz7sn2NP+VfccV
/
wqb4bf8AQm6T/wB+aP8AhU3w2/6E3Sf+/NdrRR7Wfdh7Gn/KvuOK/wCFTfDb/o
Td J/780f8ACpvht/0Juk/9+a7Wij2s+7D2NP8AlX3HFf8ACpvht/0Juk/9+aP+FTfD
b/oTdJ/7812tFHtZ92Hsaf8AKvuOK/4VN8Nv+hN0n/vzR/wqb4bf9CbpP/fmu1oo
9rPuw9jT/lX3HFf8Km+G3/Qm6T/35o/4VN8Nv+hN0n/vzXa0Ue1n3Yexp/yr7jiv
+FTfDb/oTdJ/780f8Km+G3/Qm6T/AN+a7Wij2s+7D2NP+VfccV/wqb4bf9CbpP8A
35o/4VN8Nv8AoTdJ/wC/NdrRR7Wfdh7Gn/KvuOK/4VN8Nv8AoTdJ/wC/NH/Cpv
ht /wBCbpP/AH5rtaKPaz7sPY0/5V9xxX/Cpvht/wBCbpP/AH5o/wCFTfDb/oTdJ/78
12tFHtZ92Hsaf8q+44r/AIVN8Nv+hN0n/vzR/wAKm+G3/Qm6T/35rtaKPaz7sPY0
/wCVfccV/wAKm+G3/Qm6T/35pV+FHw3U5HgzSPxgBrtKKPaz7sPY0/5V9xi6N4
T8
LaK4fSPDmkWDjo9vZxo35gZraooqW29y0ktEFFFFIYUUUUAFFFFABRRRQAU
UUUAF
FFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFF
ABRRRQAUUUUAF
FFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFF
ABRRRQAUUUUAF
FFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFF
ABRRRQAUUUUAF
FFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAeWftC
/FOT4c6TaQad
Zpc6tqIfyGlH7qFVxuZgOWPzDA/E9MH5dvfjB8S7u9N3J4w1FHJzthYRoP8AgCg
L +leqftw/8hXwt/1wuf8A0KOvnCvZwdGHslJrVnz+Pr1PbOKeiPqP9nv45azr/iK1
8JeLES7nusra38UYRtwUttkUYBBAOGAHPUHOR9G18Ifs5/8AJa/DX/Xw/wD6K
evu
+uLG04wqe6j0cuqzqUnzO9mFFFFcZ3hRRRQAUUUUAFFFFABRRRQAUUUU
AFFFFABR
RRQAUUUUAFFFFABRRRQAUUUUAVdXvodM0u51CcMYreJpGCjJIAzgV4br/
wARfEmp
XLNbXZ0+3z8kUHBA926k/kPavYPH/wDyJWsf9ej/AMq+bq+F4ux+Io1IUac3FN
Xd
tOpx4mck0kzsvD/xG8R6bcqbq6Oo2+fnin649m6g/mPavctKvYdS0y21CAMIriJZ
EDDBAIzzXy3X0n4D/wCRL0f/AK84/wD0EUcI4/EVpzpVZuSSur69Qw05NtNm1
RRR
X3R2BRRWR4n8R6V4dtBPqU5Uvny4kGXk+g/qeKzq1oUYOdR2S6sTaSuzXorz
MfF7
TvPwdHuhDn7wlXdj6dP1ruPDfiDS/ENmbnTLjzAvEkbDDxn0I/yK4sLm2Dxc+Sj
U
Tfb/AIcmNSMnZM1KKKK9EsKKKKACiiigAooooAKKKKACiiigAooooAKKKK
ACiiig
AooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigD5e/bh/5Cvhb/rh
c /wDoUdfOFfR/7cP/ACFfC3/XC5/9Cjr5wr3cH/BifM4//eJf10PQf2c/+S1+Gv8A
r4f/ANFPX3fXwh+zn/yWvw1/18P/AOinr7vrhzD+IvQ9PKv4T9f8gooorgPTCiii
gAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAw/H//A
CJW
sf8AXo/8q+bq+kfH/wDyJWsf9ej/AMq+bq/OeNP95p/4f1OHFfEgr6T8B/8AIl6P
/wBecf8A6CK+bK+k/Af/ACJej/8AXnH/AOginwX/ALzU/wAP6hhfiZtUUUV+incF
eF/G4k+NiCSQLaPHt1r3SvCvjb/yO7f9e0f9a+X4v/5F/wD28v1OfE/AcPXf/Akk
eMJ1BODZPkevzpXAV33wK/5HKf8A68n/APQ0r4XIv+RjR9Tjo/Gj2+iiiv2I9QKK
KKACiiigAooooAKKKKACiiigAooooAKK+fPif+0lZ6Pqk+leENNg1SSBikl7cOR
A
WHBCKuC4/wBrIHpkc1zvhf8Aaj1Zb5F8T+HbGW0Y4Z9PLxug9Qrswb6ZH1rpW
Dqu
N7HHLH0Iy5bn1LRWb4d17SfEGgW2u6VeR3Gn3EfmJN0AA65z0IIIIPQg15F8R
v2j
fDGgXEth4ctW8QXaEq0yyeXbKfZ8Ev8AgMe9ZQpTm7RRvUr06ceaT0Pb6K+Mt
X/a
P+I95IxtJdL01OywWgbH4yFqzovj/wDFRJNzeIYZRn7rWEGP0QGulYCr5HG80or
o
z7eor5M8NftP+KLWRU1/Q9N1KHu1uWgk+ucsp/IV7x8NPix4P8egQaXetbajty1h
dAJLx1K8kOP90n3ArKphqlNXa0N6OMo1XaL1O7ooornOoKKKKACiuW8f/EH
wp4Gt
RL4g1RIZnXdFaxjfPJ9EHOPc4HvXhPif9qS8aR4/DPhiCOMfdm1CUuW+qIRj/vo1
tTw9SprFHPVxVKlpJ6n0/RXxVfftE/E64YmLUbC0B7Q2SED/AL73VTX4+/FYHJ
8S ofY6fb//ABuuj+z6vdHK80o9n/XzPuGivjHTv2j/AIk2rAzzaVfAdRPZ4z/3wVru
vC37UkLOkXifww8an70+nzbv/Ib4/wDQqiWCqx6XNIZjQl1sfSlFc74I8b+F/Glk
bnw7q0F5sAMkXKyxf7yHBH1xg9jXRVytOLsztjJSV0wooopDPl79uH/kK+Fv+uF
z
/wChR184V9H/ALcP/IV8Lf8AXC5/9Cjr5wr3cH/BifM4/wD3iX9dD0H9nP8A5LX
4 a/6+H/8ART19318Ifs5/8lr8Nf8AXw//AKKevu+uHMP4i9D08q/hP1/yCiiiuA9M
KKKKACivLfiJ8dPBHhCaSyjuJNa1GMlWt7IgqjejyH5R9BkjuK8X8QftOeMrt2X
R 9K0rTIj03q08g/4ESF/8drpp4SrPVI5KuNo03ZvXyPrqiviCT4/fFVn3L4jiQf3V
sLfH6oa0tJ/aP+JFnIpupdL1FR1We0C5/GMrWrwFXyMVmlF9GfZtFeAeCf2m/D9/
Klt4p0mfSHY4+0wN58P1YYDKPoGr3PRtU07WdOi1HSb63vbSYZjmgcOrfiO/tX
LU
ozp/EjrpV6dX4HcuUUUVmbBRRRQAUVl+IfEGkaBbibU7xISw+SMcu/0Uc/j0rzv
V /i6+9l0jSVC9pLp85/4Cv+NeZjc4weCdq07Ptu/w/UznVjDdnrFFeD3HxP8AFcpJ
S4toPaOAH/0LNV/+Fj+Mc5/tVfp9mi/+Jrx5cY4BPSMn8l/mZfWoH0BRXhNt8UP
F
URBkltJ/aSADP/fOK6DSfi98yrq2kcd5LZ//AGVv8a3o8VZdVdnJx9V/lcpYmDPV
qKyfDviTRtfiL6ZepK4GXib5ZF+qnn8ela1fQUqsK0VOm00+qNk01dBRRRWgzD
8f /wDIlax/16P/ACr5ur6R8f8A/Ilax/16P/Kvm6vznjT/AHmn/h/U4cV8SCvpPwH/
AMiXo/8A15x/+givmyvpPwH/AMiXo/8A15x/+ginwX/vNT/D+oYX4mbVFFFfop3
B
XhXxt/5Hdv8Ar2j/AK12B+LmiA4/s3UfyT/4qvOfiDr1t4j8QnUrWGWKMxKm2T
Gc
jPoTXw3Eua4PFYL2dGom7r9TkxFSMo2TOdrvvgV/yOU//Xk//oaVwNdL8OfENr
4a
16TULuGaaNrdogsWM5LKc8kelfI5RWhRxtKpUdknqctNpTTZ9EUV5z/wtzRP+g
bq
P5J/8VVrSviho+o6na2EWn3ySXMyRKzBMAsQATz71+oRz7L5SUVVV36no+2h
3O8o
oor1zQKKKzPEGv6ToNsJtTvEhz9xOrv9FHJqKlWFKLnN2S6sTaWrNOivJ9Z+Lr
7m
TR9KUL2kumyT/wABX/GucuPiZ4tlbKXsEA9Et0I/8eBr52vxXl9J2TcvRf52MXiY
I97orwOH4leLo2y9/FKPR7dP6AVvaR8XbtGVdW0uGVe727FCPwOQfzFKjxZl9R
2k
3H1X+VxLEwZ69RWL4Z8U6L4hjzp12DKBloJBtkX8O/1GRW1X0NGtTrQU6ck
0+qN0
01dBRRRWoz81Lr/j6l/3z/Ooqluv+PqX/fP86ir6ZHxzO3u/iNrH/Cr9N8A6e72d
hCZXvXRsNcl5GYKT2QAjjuevauIor2n4T/s/a94tsIdZ1y7/ALE0yYB4VMe+4mU9
GCkgKp7E898YwaylKnRV3obQhVxEklrY8Wor7Gtf2afh5FCEluNcuHxy73SA/kq
A
Vg+K/wBl7R5bZ5PC/iC8trkDKxX4WWNj6blAKj3w1YrHUm7HQ8trpXsfK9S2tx
Pa
3MdzbTSQTxMHjkjYqyMOQQRyCK0/GHhrWvCWuzaLr1k9rdxc4PKup6MpHD
KfUfzB
rHrrTTV0cTTi7Pc+z/2bPiq/jnSJNF1uVf7fsIwzPwPtUXTzMf3gcBh7g98D2Gvz
v+HfiW58IeNNL8Q2pbNpOGlQH/WRHh0/FSRX6GWs8N1axXNvIJIZkEkbjoykZ
B/K
vFxlFU53WzPocvxDrU7S3RJXkP7Q3xeTwDZro2jqk3iG6i3oXXKWsZyBIw7scH
C+
2TxgH16uK+Lfw40T4iaCbPUFFvfwgmzvkXLwt6H+8h7r/I4NYUXBTTnsdOIVR0
2q
b1Pg/VtRv9X1GfUdTvJry8nbfLNM5ZmPuTVSt7x14S1vwX4hm0TXbUwzx8o45j
mT s6Hup/TocEEV3fwf+B3iDx1bx6tezf2PojH5J5I90k4/6Zpxx/tEgemea92VSEI8
zeh8zGjUnPkS1PJqK+09F/Z1+GljEq3llf6o4HL3N465P0j21pyfAn4VOm0+FFX3
W9uAf/RlcrzCl2Z2LK6zW6/r5HwzRX134q/Zm8H30DtoGoahpFzj5A7CeH8QcN+
O
78K+afiJ4J17wJrzaRrtuquRvgnjO6KdP7yH+YOCO4reliadXSL1OevhKtHWS0Mj
Q9W1PQ9Ug1TSL2ayvYG3RzRNhh/iD3B4PevtP4AfFOD4h6HJb3wjg16xUfaol4
WV
eglQehPBHY+xFfD1dR8K/FM/g3x7pWvxOwihmC3Kj+OFuJBjvwSR7gHtSxNBV
Y+Z
WDxLoT8nufoRRSIyuiujBlYZBB4Ipa8E+mPl79uH/kK+Fv8Arhc/+hR184V9H/tw
/wDIV8Lf9cLn/wBCjr5wr3cH/BifM4//AHiX9dD0H9nP/ktfhr/r4f8A9FPX3fXw
h+zn/wAlr8Nf9fD/APop6+764cw/iL0PTyr+E/X/ACCiiiuA9MSR0jRpJGVEUEsz
HAAHc18kfH/443niC5uPDfhG6e20VCY57uM7XvOxAPVY/wBW78HFd7+1749l
0Xw/
B4O02cx3mqoZLxlOClsDjb/wMgj6Kw718lV6eCwya9pL5HjZji2n7KHzCiivcfhf
+ztr/iOzh1TxJdnQrGUBo4fL3XMi+pU4CA++T7V6FSrGmryZ5dKjOq7QVzw6ivs
e
2/Zp+HcUISSfXJ3xy7XSg/kEArmPGP7L1k1s83hLxBcRzgZW31EBlc+nmIAV/w
C+
TXOsdSbtc6pZbXSvY+X6674ZfELxF4A1kXujXJa2dh9pspCTDOvuOzejDkfTIOL
4 p8P6x4Y1qfR9csZbK9hPzRv3HZlI4ZT2I4rLrpajONnqmcacqcrrRo/Q34c+MtH8
deGINd0eQ7G+SaFj88Eg6o3vz17gg10dfDH7PHj2XwP49tzcTFdI1Flt75SflUE/
LL9VJz9Cw719z14eJoexnZbH0mDxPt6d3utwrkPiR4yi8M2awW6iXUp1zErfdRem
9v6DvXX1jeLfDmn+JNNNpeptkXJhmUfNE3qPb1HevLzCGInhpxwztPodM1JxfLu
f
Omo3t3qN5JeX1xJPPIcs7nJP+A9qrVq+KNB1Dw9qbWN/Hg9Y5F+7IvqD/nFbPgn
w
JqfiRRdMws7DOPPdcl/XaO/16V+QQwWKr4h0VFufVdfn/meYoScrdTkaK920/wC
F
/ha3QC4iubxu5lmK/ouKvN8PPBxXH9jKPpcS/wDxVe9Dg7HyV3KK+b/RGywsz5
7o
r23VvhToFxGxsJ7qxl/h+bzE/EHn9a8r8WeG9S8NX4tb9AVcExTJykg9vf1FeXmG
R4zAR56sbx7rVGc6MoaszLO5uLO5jubWaSGaM7kdGwQa9z+GPjMeI7RrO+Kpq
cC5
bHAlXpuA7H1H+R4NWh4d1SbRtbtNTgJ3QSBiAfvL/Ev4jIqslzapl1dO/uPdfr6o
KVRwfkfTtFMgljngjniYNHIodSO4IyDT6/Xk7q6PTMPx/wD8iVrH/Xo/8q+bq+kf
H/8AyJWsf9ej/wAq+bq/OuNP95p/4f1OHFfEgr6T8B/8iXo//XnH/wCgivmyvpPw
H/yJej/9ecf/AKCKfBf+81P8P6hhfiZtUUUV+incfKbfeP1pK9uPwm8Nk5+16r/3
9T/4ivNPiJoVn4d8RnTrGSd4RCj5mYFsnPoBX5Bj8ixeBpe1rJWvbRnmToygrs5y
iiuo+Gvh+y8Sa/JYX8k8cS2zSgwsA2QyjuDxya83DYeeJqxpQ3eiM4xcnZHL1r+C
/wDkcNG/6/4f/QxXq3/CpvDf/P3qv/f1P/iKs6Z8MdA0/Ura/gutSaW2lWVA8qFS
VIIzhOnFfSYfhXMIVYyaVk09zojh5pnb0UVR1/U4NG0a61O4/wBXbxlsZ+8egX8
T gfjX6XOcacXOTslqd7dtTnfiP40h8NWotrYJNqcy5jQ9Ix/eb+g714XqV9d6leSX
l9cSXE8hyzucn/6w9qdq+oXWq6lPqF5Jvnncsx7D0A9gOBVSvyLOc4q5jWbvaC2
X
6vzPMq1XUfkFFbvhLwrqviW5MdjGEhQ4lnk4RPb3PsK9L074S6LFGPt19eXMnf
YV
jX8sE/rU4DI8bjo89KPu93ov+CEKM56o8Xor2y++E+gSxn7Ld31vJ2JdXX8QRn9a
868Z+CtW8NHzpgtzZE4W4jHAPow/hP6e9Vjsgx2Ch7SpG8e61/4ITozgrs5y2nmt
p0nt5XiljO5HRsMp9QRXtPwx8d/21t0nVmVdRA/dydBOB/Jv514lUlvNLbzxzwSN
HLGwdHU4KkcgissqzWtl1ZTg/d6rv/wezFTqODuj6porD8C66viLw3b6gcCf/Vzq
O0g6/nwfxor9foVoV6cakHdNXR6aaauj88Lr/j6l/wB8/wA6iqW6/wCPqX/fP86i
r6tHx7PTf2a/BcHjP4kwJfwiXTdNT7ZdIwysmCAiH2LEEjuA1fcYAAwOBXz1+x
Hp
ix+FvEGsbfnuL1LbPtGm7/2rX0LXiY2blVa7H0WXU1Cin1YUUUVyHeeR/tT+C4
PE
vw5uNYhhB1PRVNzE4HLQj/Wofbb831X3NfFdfpVf2sN9Y3FlcLuhuImikHqrAgj
8 jX5t31u9pez2kv34ZGjb6qcH+Vetl824uL6HhZrTUZqa6kNfd/7OmrtrPwa8PXEj
bpIIDaPnt5TFF/8AHVX86+EK+wv2Mroz/Cu8tyebfVpVA9jHG38yavHxvTv5kZX
K
1Zruj26iiivGPoDn/G3gzw34zs7e18RabHeJbTLLESSrKQQSARztbGCO4+gI3oY4
4YUhhjSONFCoijAUDgADsKdRT5m1YSik721CiiikMK8q/al8NW+vfCa/vDEDea
QR
eW745ABAkGfQoSceqj0r1WuW+LyhvhV4sBGf+JNdn/yC1aUpOM00ZV4qVOSf
Y/Pi
iiivoj5I/Qj4S3z6l8MPDN7IxaSTS7cOx7sEAJ/MGuorh/gHz8HPC/8A14r/ADNd
xXzlRWmz66i704vyR8vftw/8hXwt/wBcLn/0KOvnCvo/9uH/AJCvhb/rhc/+hR18
4V7WD/gxPncf/vEv66HoP7Of/Ja/DX/Xw/8A6Kevu+vhD9nP/ktfhr/r4f8A9FPX
3fXDmH8Reh6eVfwn6/5BRRVXWLsafpF5ft0trd5j/wABUn+lcB6bdj4P+OfiB/Ev
xW1/UN5eFLpraDnjy4vkXH127vxriadI7SSNI7FnYksT1JNNr6WMeWKSPkJyc5O
T
6nt37JPgW38SeL7jxDqcAmsdG2tEjjKyXDZ259QoBbHrtr7CryL9kfTEsPg5a3YU
B9Ru57hj3OG8of8AouvXa8PF1HOq/I+jwNJU6K89QooormOw8p/ab8C2/iz4fXW
p
QQA6vo8bXNvIo+Z4xzJGfUFQSB6gepr4lr9LpUSWNo5FDI4KspHBB6ivzi8T6f8
A
2T4k1TSuf9CvJbfn/Ycr/SvVy+o3FxfQ8PNaSUlNdTOr76+BXiB/Evwo0HU5n33A
t/s85J5LxExkn3O0N+NfAtfXf7Ft8Z/hxqdixJNrqjFfZXjQgfmG/OtMfG9O/Yzy
udq3L3R7rRRRXjH0Bna/omm67ZC01O2WaMMGXnDKfYjkVegiighSGGNY441
CoijA
UDoAKfRUKlBTc0tX16isr3CiiirGFcx8UNKj1TwZfBkBltkNxE3cFBk/mMj8a6eq
PiEA6BqIPQ2sv/oBrmxtKNbDzpy2af5EzV4tHzBRRRX4geSfRvw5uGuvA+kysck
W 4j/75JX+ldBXLfCb/kn2l/ST/wBGvXU1+15bJywdKT6xj+SPVp/CjD8f/wDIlax/
16P/ACr5ur6R8f8A/Ilax/16P/Kvm6vhuNP95p/4f1OTFfEgr6T8B/8AIl6P/wBe
cf8A6CK+bK+k/Af/ACJej/8AXnH/AOginwX/ALzU/wAP6hhfiZtUUUV+incFeFfG
3/kd2/69o/617rXhXxt/5Hdv+vaP+tfLcX/8i/8A7eX6nPifgOHrv/gV/wAjjP8A
9eL/APoaVwFd/wDAr/kcZ/8Arxf/ANDSvhsi/wCRjR9Tjo/Gj26iiiv2I9QK8z+P
WpNFpdhpSNj7RIZZAP7q8Afm36V6ZXiHxzuDL4wihzxBaIuPclj/AFFfPcUV3Ry
6
aX2rL+vkYYh2gzgataVZTalqdtYW4zLcSrGvsScZ+lVa7b4LWi3PjiKVhn7NBJKP
rwv/ALNX5ngMP9ZxNOj/ADNL5dTghHmkke1aFpdpo2lQadZIFihXGe7Hux9yea
u0
UV+1whGnFRirJHrJW0Cory2gvLWW1uollhlUo6MOGBqWim0mrMD5p8YaO2g
+I7vT
CSUifMTH+JDyp/I/nmsivS/j5aLHrOm3oGDNA0ZPrsbP/s9eaV+M5thVhMbUox2
T
09HqvwZ5VSPLNo9M+AupNHqt9pTt8k8QmQH+8pwfzDfpRXN/Cq4Nt490xs8Oz
Rn3 3IwH64or7/hGu6mA5X9ltfr+p24Z3hY+Wbr/AI+pf98/zqKpbr/j6l/3z/Ooq/Tk
fLM+yv2OownwidgMeZqczH3+VB/SvZq8c/Y+bd8H1H93UZx+in+tex18/if4svU+
pwn8CPoFFFFYnQFfnZ8Q4xD4/wDEUSjATVbpQPpK1fonX53/ABKbf8RfEr/3tX
uj
/wCRmr0cu+KR5ObfDE5+vrD9iVyfBWux9l1FW/ONf8K+T6+rv2JB/wAUfr7euoI
P
/IYrqxv8FnFl38dfM+gqKK+dP2p/izdaVM/gfw1dNDdMgOpXUTYaNWGREp7Eg
5J9
CB3NeRSpSqy5Ue7XrRow55HbfEz46+DvBs8un27vreqRkh7e0YbI29Hk6A+w3Ed
w
K8R8Q/tLePL6RhpVtpekxfw7ITNIPqzkg/8AfIrxKivYp4OlBaq54NXMK1R6Oy8j
0Wf43fFKZiz+LbgZ/uW0KD9EFRf8Lo+KH/Q33n/fuP8A+Jrn9D8FeMNchWfSPD
Gr
3sLdJYrRzGf+BYx+ta3/AAqb4k/9CZq//fmtHGitLL8DJTxEtU3+Ja/4XR8UP+hv
vP8Av3H/APE1X1P4tfEXU9NudOvvFN3PaXUTQzxtHHh0YEMDhe4Jpv8Awqb4
k/8A
Qm6t/wB+ag1D4ZeP9PsLi/vfCepwWttE0s0rxYVEUZZj7AA0JUelvwBvEW1v+Jy
F
FFFbHMfe/wAAv+SN+F/+vFf5mu5rhvgF/wAkb8L/APXiv8zXc185V+N+p9bQ/hx
9 EfL37cP/ACFfC3/XC5/9Cjr5wr6P/bh/5Cvhb/rhc/8AoUdfOFe1g/4MT57H/wC8
S/roeg/s5/8AJa/DX/Xw/wD6Kevu+vhD9nP/AJLX4a/6+H/9FPX3fXDmH8Reh6eV
fwn6/wCQVzvxPkMPw18UTKcFNHu2B+kLmuirmviqpf4X+K0HU6LeD/yA9cUPi
R6F
T4GfnpRRRX0h8gfeX7O8Qi+C3hlQODas35yMf6131cH+z6wf4M+GCP8Anzx+Ts
K7
yvnav8SXqz62h/Cj6IKKKKzNQr8/fjPEIvi14rQDAOrXDfm5P9a/QKvgD42sH+Ln
ioj/AKCkw/JiK9DLvjfoeVmv8OPqcdX1F+w9ITpXimHPCz2zAfVZB/Svl2vp/wDY
dXFh4rf1ltR+Ql/xrsxv8F/11ODL/wDeI/P8j6Roorzn4u+MpdLT+w9LlKXcqZnl
U8xKegHox9ew+vHy+Px1LA0HWq7L8X2PopzUFdm14s8faHoDtbF2vbxeDDCR
8p/2
m6D6cn2rz7VPitr9wxFlb2lknb5TIw/E8fpXAEkkknJPU0lfmuN4nx2Jk+SXJHsv
89zgniJy20Ool8f+L5Dk6zIP92KNf5LTP+E78W/9Buf/AL5X/CsvT9D1nUED2OlX
twh/jjhYr+eMVe/4Q3xT/wBAK9/791xRr5pUXNGVR/ORF6j7k3/Cd+Lf+g3P/wB8
r/hTJ/G3iqaF4ZdZmaORSrKVXkEYI6Uz/hDfFP8A0Ar3/vimTeEfE0MTyy6LeIiK
WZinAA6mm55rbV1P/JgvU8zDoooryTM+hPhN/wAk+0v6Sf8Ao166muW+E3/JPt
L+
kn/o166mv2rK/wDcqP8Ahj+SPVp/AvQw/H//ACJWsf8AXo/8q+bq+kfH/wDyJWsf
9ej/AMq+bq+H40/3mn/h/U5MV8SCvpPwH/yJej/9ecf/AKCK+bK+k/Af/Il6P/15
x/8AoIp8F/7zU/w/qGF+Jm1RRRX6KdwV4V8bf+R3b/r2j/rXuteFfG3/AJHdv+va
P+tfLcX/APIv/wC3l+pz4n4Dh67/AOBX/I4z/wDXi/8A6GlcBXf/AAK/5HGf/rxf
/wBDSvhsi/5GNH1OOj8aPbqKKK/Yj1ArwH4wuW8f3wP8KRAf9+1P9a9+rwD4vj
Hx
B1E+qxH/AMhLXyfGP+4x/wAS/JnNivgORr0f4CID4iv37i0x+br/AIV5xXpPwDI/
t7UV7m1B/wDHxXxnD3/Iypev6M5aP8RHslFFFfr56YUUUUAeX/tAIDZaQ/cSSj8
w v+FeRV698fz/AMS/SV9ZZD+gryGvyfij/kZ1Pl+SPNxH8Rm14FYp4z0cj/n9iH5s
BRTfBAz4x0Yf9P0J/wDHxRX0vBf+71PX9Dowvws+abr/AI+pf98/zqKpbr/j6l/3
z/Ooq/WUfMM+uP2Kr1Zfh5q1hnL2+qNJj0V4kx+qNXvFfIX7G/ieLSvHl74fuZAk
WsW48rJ4M0WSo/FWf8QBX17Xh4yPLVfmfSYCanQXloFFFFcp2iMQqlmIAAy
Se1fm
7r14NQ1y/vx0ubmSb/vpif6192fHPxNF4U+F2taiZAlxLA1rajPJlkBVcfQEt9FN
fA1erl0dJSPEzaabjEK+u/2K7cx/DXVLgjHm6u4HuFii/qTXyJX29+yvprad8FtK
d12veSTXLD2MhVT+Kqp/GtMe7UreZjlkb1r9kekazfQ6XpF5qdx/qbS3eeT/AHUU
sf0FfnNrmpXWs6ze6tfSGS6vJ3nlb1ZiSfw5r74+MRcfCjxWY85/si5/Lymz+ma/
PqssuirSZvm0nzRiFfUv7Lvwl0lvD9v428SWUd7dXRL2FvMu6OGMHAkKngsSM
jPQ
YI5PHy1X6G/C0wn4Z+Fzb48r+yLXbj08la1x1SUYJLqY5ZSjOo3LodGAAMAYA
ooo
rxj6AK5f4ucfCrxZ/wBgW7/9EtXUVwP7Q2qRaT8G/Ec0jgGe1+yoO7NKQmB+D
E/Q
GrpK80vMzrO1OTfZnwbRRRX0Z8ife/wC/wCSN+F/+vFf5mu5rhvgF/yRvwv/ANe
K /wAzXc185V+N+p9bQ/hx9EfL37cP/IV8Lf8AXC5/9Cjr5wr6P/bhB/tTwse3k3P/
AKFHXzhXtYP+DE+ex/8AvEv66HoP7Of/ACWvw1/18P8A+inr7vr4P/Z2YJ8avDJ
Y
4H2lh+cbivvCuHMP4i9D08q/hP1CszxZaNf+FtWsVGWubGaID1LIR/WtOiuFOzue
k1dWPzPore+IWjN4e8c63ojIVFneyxoPVNx2H8VwfxrBr6RO6uj5CScW0z7g/ZZv
lvPgnoyBsvavPA/sRK7D/wAdZa9Qr5l/Yq8VRIdX8G3MoV5GF9aAn7xwFkA98B
Dj
/ePavpqvBxUHGrJH02Dmp0Iten3BRRRWB1BX51/EG+XU/HniDUUbcl1qdxMp9
mlY
j9DX3N8YfFUPg74d6trTShLhYTFaAnlp3GEA9cH5j7Ka/P2vUy6HxSPFzaavGAV
9 Y/sS2jJ4J12+I+WbURED67I1P/s9fJ1fcP7L2jNo/wAGtJMqbJb9pL1x7O2EP4oq
H8a2x8rUrdzDLI3rX7I9NldYo2kc4VAWY+gFfMOt38uqavd6jMSXuJWfB7Angfg
M
D8K+kfEhYeHtSKfe+yS4+uw18w1+Uca1ZXpU+mr/ACPVxb2QV6r8IPBtndWS6/
qs
Czh2ItYXGVwDguR35BAHtn0x5VX0h8PjGfBOkeXjb9lTOPXHP65rzOFMHSxO
Mcqi
vyq6Xnczw0VKWpugBQAAABwAKKKK/UD0Aqj4g/5AOof9esv/AKCavVi+Ort
LHwdq
tw7Y/wBFdF/3mG1f1IrDEzUKM5PZJ/kKTsmfNlFFFfhx5B9CfCb/AJJ9pf0k/wDR
r11Nct8Jv+SfaX9JP/Rr11NftWV/7lR/wx/JHq0/gXoYfj//AJErWP8Ar0f+VfN1
fSPj7/kStY/69H/lXzdXw/Gn+80/8P6nJiviQV9J+A/+RL0f/rzj/wDQRXzZX0l4
CIbwXo5H/PpGP0p8F/7zU/w/qGF+Jm3RRRX6KdwV4V8bf+R3b/r2j/rXuteFfG3/
AJHdv+vaP+tfLcX/APIv/wC3l+pz4n4Dh67/AOBX/I4z/wDXi/8A6GlcBXe/AtgP
GUoJ5aycD/vpDXwuR/8AIwo+px0fjR7hRRRX7GeoFeFfGyExeOHcj/XW0bj9V/8
A
Za91ryX4/WJFxpmpqvDI0Dn0wdy/zb8q+b4roupl0mvstP8AT9TDEq8Dyyu9+Blw
IvGMsRP+vtHUfUMrfyBrgq1vCOqf2L4lsdSOdkMo8zH9w8N+hNfnOWYhYfGU
6stk
1f06nDTlyyTPpeimxSJLEksTq6OoZWU5BB6EU6v2pO56oUUUUAeS/tAXANzp
FqDy
iSyEfUqB/wCgmvLK6n4o6wms+MLmWFw8FuBbxMDwQucn/votXLV+OZ5iI4n
H1akd
r2+7T9Dy60uabZ0fw1hM/jrSUAziff8A98qW/pRW38DrE3Hi2S8I+S0t2Of9pvlA
/It+VFfccH0nDAub+1J/gkvzudeFVoXPkO6/4+pf98/zqKpbr/j6l/3z/Ooq/UUf
LsnsLu5sL6C+s53gubeRZYZUOGR1OQQfUEV9ffCX4/8AhvxBp8Fj4ruodF1hFC
vJ
L8ttOf7wbohPcNgehNfIk+n3sGn22oTW0iWl0XWCYj5XKnDAH1GRke49aq1jWo
Qr
LU6MPiamHd4n6R2uraVdwia11OyniIyHjnVlx9QawfFnxH8E+F7Z5tW8R2COo4g
i lEszH0CLk/0r8+qK5Fl0b6yO55tK2kT0f45/FG9+I+tx+XE9no1mT9jtmPzEnrI+
ONx9OgHA7k+cUUV3wgoR5Y7Hl1KkqknKW5a0mwutU1S00yyjMt1dzJBCg/idi
AB+
Zr9FfDOkwaF4c03RbbmGxtY7dDjqEULn8cZr5s/ZG+G89xqI8favblLWAMmmI4/
1
sh4aX/dUZA9yT/DX1JXlY+qpSUV0Pcyyg4Qc31/Io+IdOTV/D+o6TIQEvbWW3Y
ns
HQqf51+cd9bT2V7PZ3MZjngkaKVD1VlOCPzFfpVXyN+1p8O59G8TP4z02Atpm
pvm
72DiC47k+gfrn+9u9RTwFVRk4vqLNKLlBTXQ8Ir6c/Zk+MOkWWgweC/FV7HY
vbEr
YXkzYiZCc+W7HhSCTgnjGBxjn5jor0a1GNWPKzyKFeVCfNE/S2GWOaJZYZEk
jcZV
0bIYeoIp9fnBpWu63pIxpWsajYDOf9GuXj/9BIrQk8c+NpV2SeMfELqezanMR/6F
XA8ufSR6izaNtYn354j8QaJ4c09r/XdUtNPt1BO+eQLu9lHVj7DJr4+/aH+Lf/Cw
b2HStIjlg0GykLp5gw9zJgjzGHYAEgDrySeuB5TeXV1eTme7uZriU9Xlcsx/E0yG
KWaQRwxvI56Kikk/gK6KGDjSfM3dnJicfOsuVKyGUUUV2Hnn3v8AAL/kjfhf/rx
X +Zrua4b4Bf8AJG/C/wD14r/M13NfOVfjfqfW0P4cfRHzv+27pUk3h7w7rSqSlrdS
2zkdvNVWGf8Av0fzr5Xr9C/id4Ut/GvgfU/Ds7LG1zFmCQj/AFcqncjfTcBn2yK+
ANb0u/0XV7rSdTtntry1kMU0TjlWH8x3B7jmvVwFRSp8vVHi5nScavP0ZL4Y1e5
8
P+I9O1yzAM9hcx3CA9GKsDg+xxj8a+6fBXxT8EeKtLhu7PXrG1ndQZLS7nWKa
Nu4
KsRnHqMivgWitq+GjWtfc58Li5Ye9ldM/R3/AISLw/8A9B3TP/AuP/GtJGV0DowZ
WGQQcgivzQr9HvCv/Ir6V/15Q/8AoArzMThlRS1vc9nB4x4htNWsfM37Zfg2S01+
z8a2kJNtfItteED7syD5GP8AvIMf8A96+eq/RzxZoOm+J/D15oWrwedZ3cZRx3Xu
GU9mBwQfUV8J/FX4f618PvEb6bqUZktZCWs7xVwlwnqPRhxle3uCCe3BV1KPI
90e
dmOGcJ+0jsznNC1XUND1i11fSrl7W9tZBJDKnVSP5jsQeCCRX158Lf2gfC3iKzht
PE1xDoOrABXMpxbSn+8rnhfo2Mepr42ororYeFZanLh8VOg/d2P0kttW0u6gE9tq
VnPERkPHOrLj6g1yvjP4q+BPCls8mo+ILSedRxaWjiaZj6bVPy/ViB718C0VyLLo
31kd0s2k1pE9A+NHxP1X4j6ykk0Zs9KtSfsdmGztz1dz/E5/IDgdyfP6KnsLS6v7
2GysreW4uZ3EcUUalmdjwAAOprvjGMI2Wx5c5yqS5patmz8O/DF54x8Zab4esww
a
6lAlkA/1UQ5dz9FBP1wO9foTp9pb2Fhb2NpGIre2iWKJB0VFAAH4ACvL/wBnb4
WL
4A0N9Q1VEfxBfoPPIIIt4+oiU9+eWI4JA6gAn1evHxldVZWWyPoMBhnRheW7G
TxJ
NBJC4ykilW+hGK+XdRtZbHULiymGJYJWjf6g4r6lrx/41+GJIb3/AISK0jLQTYW
6
AH3H6BvoeB9frXwvF2BlXw0a8Fdwvf0f+VjbEwvG66HmVeofCTxtZ2FmNC1eY
QRK
xNtO33Rk5Kse3OSD05NeX0V8Hl2YVcBXValv+a7HHCbg7o+q4pI5o1kikWRGG
VZT
kEexp1fLdnf31mSbS8uLfP8AzylZP5GrbeIdfYYbXNTI9Ddv/jX2UONadvepO/r/
AMA6li12PpDUb+y063NxfXUNtEOrSOFH/wBevF/ih43XxCV03TQy6dE+5nYY
MzDo
cdlHpXD3E89xJ5lxNJK/952LH8zTY0eR1SNWd2OAqjJJrx814nrY6m6NOPLF79
Wz KpiHNWQ2iiivlznPoT4Tf8k+0v6Sf+jXrqa5b4Tf8k+0v6Sf+jXrqa/asr/3Kj/h
j+SPVp/AvQo+IbQ3+g6hZKMtPbSRr9SpA/WvmEgg4IwRX1ZXgnxX8OSaJ4iku4
oz
9hvWMkTAcKx5ZPz5Hsfavl+MsFKdOGIivh0fz2/rzOfFQulI42vXvhN4002LRo9E
1W6jtZbckQySnajoTnG7oCCT17YryGivjcszKrl1f21PXo0+qOWnUcHdH1Cuq6Y
w
BXUbMg9xOv8AjVi3uLe4UtbzxTAHBKOGx+VfK1ex/AL/AJAmpf8AXyP/AEEV
91lP
E08filQdO17637L0OyliHOVrHpVeNfHqyaPXrG/A+Se3Mef9pGJ/kwr2Wub+I3h4
+I/DcttCB9rhPm25Pdh/D+IyPrivWz7BSxmBnTh8W6+RpWhzQaR87VreEtZk0Dx
B
a6pGu8RMRIn95CMMPyP51mSxyRSvFKjJIjFWVhgqR1BFMr8jpVJ0ainHRp3+a
PNT
ad0fSmkeKfD+qW6zWuq2vzDJjkkCOvsVPNaCajp8jqiX1qzMcBRKpJPp1r5brX8F
/wDI4aN/1/w/+hivtsNxjWnKMJ0ldtK9/wBDrjim9Gj6Wrn/AIg6Idf8LXVlGoNw
o82D/fXoPxGR+NdBRX3NehCvSlSntJWOuSUlZnymysrFWBVgcEEcg0lepfFzwT
Is
8viHSYS0b/NdwqOVPeQD0Pf06+uPLa/Gsxy+rgK7pVF6Puu55c4ODsz0P4c/EI6N
AmlawJJbFeIpVGWhHoR3X9R79K9Z0zXNH1KISWOp2s4PZZBuH1HUfjXzHR
Xs5bxT
icHTVKa54ra+jXzNYYiUVZ6n1Bf6tpdhGZL3UbW3Ud5JVH/668y8f/EqO4tpdM8
O
s+2QFZbsgrx3CDr+J/D1ryyirx/FmJxNN06ceRP5v79PyCeJlJWWgUUV3vwt8FS6
zdx6rqUJXTImyqsP+Phh2/3fU9+nrjwMFgquNrKjSV2/w82Ywg5uyO8+D+hNpHh
c
XM6bbm/ImYEchMfIPyyf+BUV2g4GBRX7Jg8LDCUI0YbRVv69T1IxUVZH5qX
X/H1L
/vn+dRVLdf8AH1L/AL5/nUVfXo+QZ9a/s7eFtE8Yfs//ANi69Zrc2sl/OVPR4m4w
6N/Cw9fwOQSK8w+I37PXjDw/cS3Hh6M+INNySvkgC4QejR/xH3XOfQV7T+yD
/wAk
di/6/wCf+Yr2GvGliJ0qsrbXPoIYSnXoQ5t7bn5s6lp2oabcG31GxurKYdY7iJo2
H4MAaq1+ls0UU0ZjmjSRD1VlBBqvFpemRP5kWnWiP13LCoP8q2WY94/ic7ynt
P8A
D/gn58+G/BfizxJIqaH4e1G+DdJI4D5Y+rnCj8TXvnwq/ZtMNxDqnj24ikCEMumW
75BP/TRx2/2V/wC+u1fStFY1MdUmrR0OijltKDvLUjtoIba3jt7eKOGGJQkccahV
RQMAADgADtUlFFcR6IVX1Ows9T0+fT9RtYrq0uEKSwyqGV1PYirFFAPU+W/
if+zX
fwXEuoeA7hLm3Ylv7OuZNsieySHhh/vYI9TXh/iDwj4p8PyMmteH9TsdvVprZgh
+
jYwR9DX6KUV3U8fOKtLU82rllObvF2PzPp0UcksixxI0jscKqjJP4V+kc+mabOxa
fT7SVj1LwqT+oqW2tLS1BFtawQZ/55xhf5Vt/aP938TD+yX/AD/h/wAE+FPBfwe+
IHimZBa6DPY2zHm6v1MEYHqMjc3/AAEGvo/wn8G9E8BeBdcniVtW1+bS7iNrt
o+V
zEw2RLztB6dyfpxXsVFc1XGTqabI66OAp0td2fnT/wAIl4q/6FnWv/ACX/4mj/hE
vFX/AELOtf8AgBL/APE1+i1Fb/2jL+U5v7Jj/McX8Dbe4tPhJ4btrqCW3njsgHjl
QqynJ4IPIrtKKK8+UuZtnqwjyxUewV5x8YvhFoHxEgFzIx07WYk2xX0SZ3Dssi/x
L+II7HsfR6KITlB3ixVKcakeWSuj4d8WfAn4j6DM/l6KdXtwfln09vN3D/c4cf8A
fNcdN4M8YQuUm8Ka7Gw6htPlB/8AQa/ROiu6OYTW6POllVNv3W0fnT/wiXir/o
Wd
a/8AACX/AOJr9BvDCPH4b0uORWR1s4gysMEEIODWhRWGIxLrJXVrHRhcGs
O2073C
srxV4d0bxRo0uka9YRXtnL1Rxyp7MpHKsPUc1q0VzptO6OtpNWZ8ofEX9mnW7
GaS
78F3iapakki0uHEc6D0DHCv9Tt+hrxfxB4V8S+H5GTW9B1LT8fxT2zKp+jEYI9w
a
/Reiu2nj5x0krnm1cspyd4ux+Z9WdPsL7UZxb6fZXN3MekcETOx/ADNfo3JpWlyP
vk02zdvVoFJ/lVmGKKFAkMaRoOiooA/StXmPaP4mKynvP8P+CfE3gn4C/EHxF
Kj3
enf2HZk/NNf/ACOB7R/fz9QB719N/Cj4SeGPh9EJ7ONr/VmXbJqFwo3+4ReiD6cn
uTXoNFctbFVKuj0R20MFSou61YUUUVzHYFMniinheGaNJInUq6MMhgeoIp9FJ
q+j
A8n8X/CuQyvdeHJVKnk2krYx/usf5H86881PQda0xit/pd3AB/E0R2/g3Q19N0V8
tjeEsJiJOdJuDfbVfd/wTnnhoy1Wh8pUqgswVQST0Ar6mktbaU5ktoXJ7sgNOigg
h/1UMcf+6oFeX/qS7/xv/Jf+CZ/VPM+d9D8GeI9XkUW2mTRRnrNODGgHrk9fwz
Xq
/hHwHYeHbOW5lIvdSMTDzSvEeR0Qf16/TpXa0V7mXcNYTBPn+KXd9PRf8Oa
woRhq
fMP9i6x/0Cb/AP8AAd/8KP7F1j/oE3//AIDv/hX09RXlf6lUv+fr+7/gmf1Rdzmf
hbDNb+A9NhuIpIpFEm5HUqw/eN1BrpqKK+ww1FUKMKSd+VJfcrHVFcqSCqm
sabZa
vp8lhqECzQSDlT2PYg9j71borWcIzi4yV0xtXPF/Evwr1W0laXRZVvrfqI3YJKvt
zwfrx9K5C58NeIbZys2iaiuO4t2I/MDFfS9FfK4nhDB1Zc1OTj5br8dfxOaWFi9j
5h/sXWP+gTf/APgO/wDhXrfwNtLq00bUEuraa3ZrgECWMqSNvvXodFa5ZwzDA
YhV
1UbtfS3cdPDqEr3CiiivpzoON8deAbDxE7Xtu4stRxzIFykn+8PX3H615Xq3gLxT
pzkNpclyg6PbfvAfwHP5ivoaivn8x4bweNm6msZPquvqjGdCM3c+Ym0TWlOG0jU
A
fQ2z/wCFang/SdVi8WaRJJpl6iLewszNAwAAcZJOK+iaK8ylwdSp1FNVXo77f8Ez
WFSd7hRRRX2Z1BXAeMvhnp+qyPeaRImn3TctHj905+g+7+HHtXf0VyYzA0Mb
T9nX
jdfl6MmUFNWZ85az4N8S6UzfadKneMf8tYF8xMeuV6fjisBlZWKspVh1BGCK+r
Kj
lggm/wBbDHJ/vKDXydfgum3elVaXmr/qjmeFXRnyuAScAZJra0jwp4h1VlFnpNyy
N/y0dNif99NgV9GxW9vCcxQRRn/ZQCpaVHgqCd6tVteSt+N3+QLCLqzzTwj8LL
a1
dLrX5kupByLaPPlg/wC0erfTgfWvSY0SONY40VEUYVVGAB6AU6ivq8Dl2Hw
MOShG
35v1Z0QhGCsgooortLPzUuv+PqX/AHz/ADqKpbr/AI+pf98/zqKvpkfHM+z/ANkH
/kjsX/X/AD/zFew149+yD/yR2L/r/n/mK9hr5/EfxZep9ThP4MfQKKKKxOgKKKK
A
CiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKK
KKA
CiiigAooooAKKKKACisvxfqzaD4T1jXFgE7adYzXQiLbQ5jQttz2zjGa8U+Hf7SV
lr/im20fXtEi0a3uj5cd2LoyKsh+6HBUYU9M9jjPGSNYUZzTlFbGNTEU6clGTs2e
/wBFFc38TfEz+DvAup+JY7NbxrFEYQtJsD7nVeuDj72elZxTk7I1lJRTb6HSUV51
8C/iTN8StH1G/m0iPTTZ3CwhEnMm7K5zkqMVy3xi+Otz4B8ay+HYvDcV+scEc
vnN
dmMncM4xsP8AOtVQm5uCWpjLE0401Ub0Z7dRXy//AMNU3v8A0JVv/wCDE/8
Axuj/
AIapvf8AoSrf/wAGJ/8AjdafUq3b8jH+0MP/ADfgz6gorhvh148l8WfDB/GT6Ylo
6pcN9mExcHyt38WB1x6V4z/w1Vef9CVb/wDgxP8A8bqI4apNtJbGk8XSgk5PfY+
n
6K+YP+Gqrz/oSoP/AAYn/wCN0f8ADVV5/wBCVB/4MT/8bq/qVbt+Rn/aGH/m/B
n0
/RXA+D/Ht94l+EEvji10RBdrBcSpYC4JDmJmG0Pt6nb6dTWB8DvjQnxH12+0e40
W
PS7iC2FxFtufN81QwVuqjGNy/mfSsvYzs3bbc3+sU7xV/i2PXaKK+f8A4h/tG/8A
CM+NNU8P2PhqLUYbCbyDcNemMs4A3jbsOMNkde1KnSnUdoodavCirzdj6Aoqj
4f1
O21vQrDWLNs297bx3Ef+66hh+PNYHxb8aw+AfBNz4iktRdyJJHFBbmTZ5rs2Mb
sH
GF3N0/hqVFuXKty5TjGPM9jraK4H4I+Pr74i+HLrW7nRE0qCO5NvCFuDL5pCgs
eV
GANwH5+lZfxY+N3hfwJdPpaRyaxrCD57WBwqxegkc52n2AJ9QKv2M3PkS1M3i
Kah
7RvQ9Sor5Pn/AGn/ABhNKzWPhnR0hHJVxLIQPchgP0rofB37UNpPdR2/ivw+bO
Jj
g3VlIZAvuY25x9CT7GtXg6yV7GEcwoN2ufR9FVNH1Kw1jTLfU9Lu4ruzuEDxT
RNl
WH+e3avOPjt8WZfhncaTFHoSap/aCSsS10Ytmwp/stnO79KwhTlOXKlqdNSrGnD
n k9D1KivmH/hqq5/6EiH/AMGR/wDjdKP2qrjIz4IiI741M/8Axqt/qVbt+Rzf2hh/
5vwZ9O0V578IPiz4f+I8U0FlFLYanbpvmspmDHZnG9GH3lyQDwCMjjkZ1Pi94yf
w
F4JuPEaaeuoGGWOPyDN5YO9sZ3YPT6Vi6UlPka1OhVoOHtE9DrqK4f4K+PX+
IvhK
bXZNLXTTHePbeUs/m52qjbs7R/f6Y7V1Wvavpug6Rcatq95FZ2Vsm+WWQ4AH
9Seg
A5J4FTKEoy5XuVGpGUedPQvUV4Bo/wC0NqfiXxZ/YXhHwFLqZkkIgaS+8tig/j
cB
CEHc88ete8Qyyx2Czah5EEix7p9kmY0OMthiBkD1IH4VVSlOn8RNKvCrfkdyeivn
jx5+03p1hqEtj4S0YamsbFfttzIUicjuqAZI9yV+lcza/tQ+KYLhTqPhbSpIjzsj
eWJiPYkt/Ktlg6zV7HPLMKEXa59W0Vwfwl+KXh74jWko07zLTUbdQ1xYzkb1X
puU jhlzxntxkDIyVzyg4O0kdcJxnHmi7o+ELr/j6l/3z/Ooq+hJv2XfEjzO48TaSAzE
/wCrk/wpv/DLfiX/AKGbSf8Av3J/hXufW6P8x819Rr/ynpv7IP8AyR2L/r/n/mK9
hriPgl4LvPAPgdPD99eQXky3Mk3mQghcNjjnntXb141eSlUbR9Dh4uNKMXvYK
KKK
yNgooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKK
KACii
igAooooAKKKKACiiigAooooA5n4s/wDJLPFv/YEvP/RD18O+EPBWq+KfD2v6n
pCm
ebRUimktlXLSRNv3FfUrtBx3Ge4AP3F8Wf8Aklni3/sCXn/oh68F/Yd/5CXir/rj
bfzkr0MNUdOjKS6WPLxlJVcRCD6pnSfst/Ff+3rKLwX4huc6rbR4sZ5G5uYlH3Ce
7qPzA9QSe4/aT/5Ij4k/64xf+jo68R/aS+Gdz4N11PH3hJZLawe4WWZYODY3Gch1
x0Rj09Dx0IFdNrHxMtviH+zX4kFy0cWu2VvCt9AON/76MCVR/db07Hj0JJUoyn
Gr
T2bXyFCtKMJ0Ku6Tt5qxZ/Yj/wCRR8Qf9f6f+ixXnX7UW0/HtQ2NvlWmc9MV6
L+x
H/yKPiD/AK/0/wDRYrzX9q2E3PxxktwwUy21sgJ7ZGK1p/71L+uxjV/3KHr/AJn1
h9l8H/8APvoP/fEVH2Xwf/z7aD/3xFXzv/wyxq3/AEN9j/4Bt/8AFUn/AAyxq3/Q
32P/AIBt/wDFVzezo/8APz8Dr9tX/wCfX4o+nbKCwWyEVlDbLasDhYVXyznrwO
Kr f2BoX/QE03/wFT/Cs34YeGpfB/gTS/Dc10l3JYxsjTIhUPl2boen3q6SuV6N2Z2x
V4ptHxl8dLS1t/2k1tYLaGKD7TYDykjCpyseeBxzX13/AMI/oP8A0BNN/wDAVP8
A
Cvkr49/8nOr/ANfWn/8AoEVfY9deKb5KfocODS9pV9SK2tra1txb21vFBCM4jjQK
oz14HFfGWkA/Cv8AaZW2P7mxh1Iw88D7LOPlJ9dqup+q19pV8uftr+HPJ1XRfFc
M
eFuI2srhgP41yyE+5Bcf8AFLBy99wezKzCDUFUjvFn0b4z1uHw34T1TXrjBSxtZJ
9p/iYD5V/E4H418MaN4R1TxP4L8V+N3kkkbTJYpJCRnzmkc+Yf8AgIIY/WvXfj
b8
Rv7Z/Z58LQJPuvNcCi855P2fAkz6ZlCEe1en/AnwXbWPwMtdF1CH/kN20k96uO
SJ
1wB9RHsH1FaUm8PT5nu3+RjWSxdVRWyV/m9jH/ZA8S/2x8M30aaTdcaNcGIA
nJ8p
8uh/PePotcT+2x4hMuoaF4Tgcnyka+nUc5ZiUj/EASf99Cud/Zq1G58E/HG78Kai
+wXbS6dMDwvnRsSjfiVKj/fpdFT/AIWj+1RJdn99p1vfGcnqv2e2wE/Biqf99mtF
TUK7qdErmTrOpho0urdvu/pHtN1K3wh/ZyUwqqahZWCqARn/AEuZhk++Hcn6L
Xjn
7MXw1s/HOp6h4s8Uq99ZWtxsWKViRc3B+djIepABBI7lueAQfX/2tbaaf4MXskQ
J W3u4JJMf3d+3+bCsv9jK8t5vhfeWcbL59vqchlXvhkQq344I/wCAmsozaoSmt2ze
dOMsTCnLZLQ9osbO0sLVLWxtYLWBBhIoYwiKPYDgV5/8YvhP4f8AHOh3Tw
2FtZ66
qFrW9iQIzOOQshH3lPTnpnIr0ekdlRC7sFVRkknAArihOUJcyep6E6cZx5ZLQ+W
P
2OPFd7ZeJtQ8D3zv9nuI3uLeN/8AllMmN6gdsrkn3T3NWf24v+P/AMKf9crr+cVc
r+z2f7W/aVGp2IJtvPvro4HAjdJAv6utdV+3F/x/+FP+uV1/OKvUaSxcX3X+Z4yk
3gZJ9H+qPZvhToOhzfDDwtNNo2nSSPo9ozu9qhZiYVySSOTW9qPhXwpc2U0N9
4f0
d7ZkPmCS0j2gY5OccfXtXyx4Z+DXxX1Xw5pup6b4itobK7tIp7eM6nMhSNkDK
MBc
DAI4FN8T/BP4vWmiXNzdakmqwRIXkt4dRkkZlHJwrgBvp19KwdGLl/EOmOImo
L90
9ir+z/DHB+0lFB4ekaXS4rm9VHByGtgkgQk9wfk/HFe6fta/8kXv/wDr6t//AEYK
84/Ys1fQk1TVdFbTI4tbkh85L7cSZYQwDR4P3cEg8fe7/dFej/ta/wDJF7//AK+r
f/0YKqs28TFdrEUIpYObT3ucn+zL4o0Xwh8CdS1rXbxba1i1eYAdXkbyosIg/iY+
n4nABNed65rHjj9oHxqumaXA1po1s+5Iix8m1Tp5krD7zkZx+IA6muc+Efw58TfE
i4WwtriW00KzlZprqUFoonYDcEXIDSEBcgdgMkcVr+C/EHiX4E/Ey50rWIJHsXc
J
e26n5J4s/LNFnuBkj8VOO3R7OMZycdZnKqspU4Rmmobep9TfCz4eaD8PtDFhpU
Xm
3UoBu72RR5s7D19FHZRwPc5Jp/tBtep8GfEzWG/zvsmG29fLLqJPw2bs+1dhomq
W
Gt6Ta6tpd1HdWV1GJIZUPDKf5HsR1B4qLxFqmiaVprTeIL+wsrGU+Sz3sqpG5Y
H5
SW4OQDx9a8pTl7Tmerue04R9k4x0Vj5d/ZH1XwDpd1qcniO50+01tnT7HPfFVU
R4
5CO3CtnryCeMZ5r6gvLbQfE+lPb3MWn6vYSjDKds0Zz+Y/GvCNc/Z68GeKw+s+
A/
FUdtaSu2Ej23duGB5VGVgVA9CWxXG3/7OXxG0eQ3Wh6tpt06/dNvdPBKf++g
AP8A
vqu2oqVaXNz2fmcFKVehDk9nzLyO38AfBDxT4M+L8XiTStQ0saFFdShYTcSGc
2zh
gEI2YJAI79RmiuS+EfxT8d+FPiFa+CfG0t5eQTXSWcsV62+e1dyArBzyy8qcEkFe
R7lYYqNTmXNqdGClS5Hyaa7M+sqKKK5TtCiiigAooooAKKKKACiiigAooooA
KKKK
ACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAK
KKK
AOZ+LP8AySzxb/2BLz/0Q9eC/sO/8hLxV/1xtv5yV9K61BDc6Pe21zDHNBLbukk
c
ihldSpBBB4II7Vzfw90PRdHmvG0nR9P08yqgkNrbJFvxnGdoGcZP511U5WoSRx
VY
XxMJdrnT6lZWmpafcaff28dxa3EbRTRSDKupGCDXxB8b/h5qXw18TTRWck7aH
qSs
LWcE/MmQTDJ6lSB9cA/T7nrD8caZpuq6C9tqmn2l/AJFcR3MKyKGBwDhgRnk8
+9L
C1nTnbox43Dxq07vdHjH7Ef/ACKPiD/r/T/0WK82/aqmFt8dGuGUsIre1cgd8DNf
Uvw80jStIsbqLStMsrCOSUM620CxBjjqQoGTWN458N+HdT157vUtA0q9uDGqm
W4s
45HIA4GWBNdFOp/tEpWOWpSvhIxv/Wp53/w1L4e/6FbVP+/0dL/w1L4e/wChX1
T/ AL/R10v/AAhfg7/oU9B/8F0X/wATQfBfg7H/ACKeg/8Agui/+Jq/Y0f5fxM/rGI/
m/A7L4VeOLT4geFzr1lYz2UQuHg8uZgWyoBzx/vV1lc/4B03TtL0I22mWFrYwec
z
eVbwrGuSBk4UAZ4roK86okptI9ai3KCb3Pjj49f8nOr/ANfWn/8AoMVfY9cD4n8O
+H7zxj/aF5oWmXF5viP2iW0jeTIAwdxGeMDFd9W+IlzQguyObCw5Z1H3YVwH
7Qnh
v/hJ/hNrVpHHvubWL7bb8ZO+L5iB7ldy/wDAq7+kZQylWAKkYII4Nc8JOMlJdD
qq QU4uL6n57fDvR7rxf4z0Dwu0kj28t0F2Z4jizvlI9PlDH8K/QiNEijWONQiIAqqB
gADoK4HwP4Z8Oabr6XeneH9Js7hY2CywWccbgEYOCAD0r0CuvG1OeSRxZdR
VODfc
+Pf2stEuPDfxYtvEuns9v/aUSXMcsZ2lLiIhWI9+I2+rV3H7FPhryNF1jxXPHh7u
UWduSOdifM5HsWKj/gFewfETRtI1e2tF1bSrHUBE7GMXVukuzIGcbgcZwPyrT8
HW
Nlpvhy1s9Os7eztk3FIYIhGi5Yk4UAAZJJqp1m8Ol8iKeHSxbl8yfxLo9l4g8P3+
iaihe0vYGhlA6gMMZHoR1B9RXx3azeN/2fvH82+2+0WNx8h3Ai3v4gcghv4XGfq
p
J4IPP2pVPWdPsNU06Wz1Kxtr22dfmhuIlkQ/VWBFY4etyPlaumdGKoe0SmnZrqe
M
ab+074HmtA99pWuWs+PmjSKORc+zbxn8QK4H4r/tA33i3TZfDXg7SruygvR5Ms
8u GuZlbjy0Rchc9DySc4GK5T4g6Vpdr4nlhttNs4IxIQEjgVV/ICvof9nvQtDt/D39
o2+jadDe52/aEtUWXBHTcBnFdkqNKiudRuedCvWry9m5W+Rl/sv/AAwu/BekXG
va
9D5Os6kgRYD962gznaf9pjgkdsKOua4n9uL/AI//AAp/1yuv5xV9P1w/xQ0bR9Wl
sDqmk2F+YlkEZubdJNmducbgcZwPyrlo1nKups7cRQjDDOnH+tTQ+En/ACSvwn/
2
BbT/ANEpXUVR8PQw22g6fb28UcMMVtGkccahVRQoAAA4AA7Vermn8TOym
rRR8c/A
Hy9I/aXk044iX7RfWqqeMbQ5A/8AHK9s/a1/5Ivf/wDX1b/+jBVzUvDvh9fHbaiu
haYL37Ysv2gWkfm78g7t2M7s85612HjywsdS8OS2uo2VteW7OhMU8SyISDwcE
EV2
1Z3rQl6HnUafLQqQ9TzD9jL/AJJRd/8AYXm/9FRV1Xxz+Gll8RPDRjjEcGtWilrC
5Ixz3jc/3G/Q4PqDv/DvTdO0vQpLbTLC1sYDcM5jt4VjUsVUE4UAZ4HPtXSVhV
qO
NZyR1UaUZUFCWqsfHPwH+JOo/DLxTP4S8VpNBpD3BjuI5R81jNnBcD+6f4gO
3I9/
on45eFZfHfwvvdN0t45brCXdkQw2yMvIAPT5lJAPTkVX+IHhrw5qHiE3d/oGlXd
w
8S75Z7ON3bGQMkjJ4AFdf4Pt4LXw3Z21rDHBBEpSOONQqooY4AA4ArWvJXj
VirM5
8NB2lQk7o+Tfgl8X7v4YLd+GPEWj3U9gLhnaNRsuLWTgMNrYBBwOCRg555r
1q7/a
a8Ax2pkt7DXZ5sfLF9njXn3Jfj8M1u/tB6Hot14ZOo3Wj6fPeqdouJLZGkAx03EZ
xXzJ4K07T7jxRHDPY2ssZkwUeJWXr6EV0qlTrr2jWpySrVsM/ZRldeh0fgpNc+M
P
x+h8Urp32WzgvILq5ZcmOCKHbsQt3ZggHuSTjA4K+ufDunafpej29pplha2NuED
C K3hWNASBk4UAUVw4iq5ystEtD0sLQUI3bu3qf//Z

yes

yes

0.7
4
7
2
0.7
0.7
0.7
0.7
0.7
1
1
1
0.7
0.7
35
20
2
4

yes

10

50

1000

10000
10

10

50

yes
eu.wildfire.paloaltonetworks.com

10.10.10.2
192.168.1.253

auto

50

yes

8.8.8.8
8.8.4.4
193.70.34.254

all
2000

ethernet1/1
ethernet1/2
ethernet1/3
ethernet1/4

ethernet1/6
10.10.10.1
255.255.255.0

management

ethernet1/7

yes

Peer-to-Peer
Anonymizer
Misuse File Sharing
quic

google-update
adobe-update
firefox-update
java-update
ms-update
hp-update
apple-update

web-browsing
ssl
flash
silverlight
rtmp
rss
sharepoint-base
websocket
http-video
http-audio

facebook
linkedin
twitter
salesforce

gmail

ocsp

ocsp

ocsp

ocsp

ocsp

facebook
linkedin
youtube

gmail
google-talk-base
ocsp

ocsp

ocsp

ocsp

google-base
ocsp
google-analytics

ethernet1/1

Public DoS Protect

no

ethernet1/2

yes

ethernet1/3
ethernet1/5

Public DoS Protect

yes

ethernet1/4

tunnel.10

yes

service-http
service-https

Internal

any

any

any

any

any
any

ping

application-default

any

allow
intrazone

Internal

Wildfire E-Mail Alert

Internet

Internet

any

Lab-FireWall_inet

any

any

ciscovpn
ipsec
panos-global-protect
panos-web-interface
ssl
web-browsing

application-default

any

allow
intrazone
Internet Inbound

Internet Inbound

Wildfire E-Mail Alert

Internet

Internet

Lab-FireWall_inet

any

any

any

ciscovpn
ipsec

application-default

any

allow
intrazone

Internet Outbound

Server Web Access

Wildfire E-Mail Alert

Internet Outbound
Internet

Office

Lab-FireWall_mgmt

any

any

any

ntp
paloalto-updates
paloalto-wildfire-cloud
pan-db-cloud
ssh
ssl
web-browsing

application-default

any

allow

Server Web Access

Wildfire E-Mail Alert

no

Internet

any

OpenBL
panw-highrisk-ip-list
panw-known-ip-list

any
any

any

any

any

no
yes
no
no
deny

any

no

any

Internet

any

panw-highrisk-ip-list
panw-known-ip-list

any

any

any

any

no
yes
no
no
deny
any

Block Access to black listed IP addresses

any

any

any

any

any

any

Known Bad

any

any

deny

IPS URL Filtering

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

Log All

Forward All
Internet

Office
RemoteAccess

any

any

any

any

Trusted File Download

application-default

any

allow

Web Access
Server Web Access

Wildfire E-Mail Alert

IPS URL Filtering

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

Log All
Forward All

Internet

Office
RemoteAccess

any

any

any

Trusted File Download

URL Web Services

service-http
service-https

any

allow

Web Access
Server Web Access

Wildfire E-Mail Alert

IPS URL Filtering

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities
Log All

Forward All

Internet

Office
RemoteAccess

any

any

any

URL Web Services

service-http
service-https

any

allow

Web Access
Server Web Access

File Download Domains

Wildfire E-Mail Alert

DMZ

Internet

CN
IN
RU
UA
VN
Web Server_public

any

any

web-browsing

application-default

any

DMZ
Internet Inbound

allow
universal
yes

Internet Inbound

Wildfire E-Mail Alert

Server Internet Outbound

Internet

DMZ

Web Server

any

any

any
ms-update
symantec-av-update

application-default

any

allow

DMZ
Server Web Access

Wildfire E-Mail Alert

DMZ

Internet

IE

FTP Server_public

any

any

ftp

application-default

any

Internet Inbound
DMZ

allow
universal
no

Internet Inbound
Wildfire E-Mail Alert

Internet

Office

Active Directory

any

any

any

dns
ntp
ping

application-default

any

allow

Server Internet Outbound

Server Web Access

Wildfire E-Mail Alert

Internal

Datacentre
DMZ
Office
Datacentre
DMZ
Office

Datacentre
DMZ
User LAN

Datacentre
DMZ
User LAN

any

any

any

any

any

allow
interzone

Internal
Temporary

Wildfire E-Mail Alert

Internet Outbound

Internet

Guest-LAN

Guest LAN

any
any

any

any

any

any

Web Access

allow
Wildfire E-Mail Alert

IPS URL Filtering

Block PE

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

Forward All

Internet

Office
RemoteAccess

User LAN
Remote Access LAN
any

cn=domain users,cn=users,dc=lab,dc=local

any

application-default

any

allow

Web Access

Domain Users App

Wildfire E-Mail Alert

IPS URL Filtering

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

Block PE

Forward All

Internet

Office
RemoteAccess

User LAN
Remote Access LAN
any

cn=pa-social-media-access,cn=users,dc=lab,dc=local

any

application-default

any

allow

Web Access

Social Networking and Streaming

Wildfire E-Mail Alert

IPS URL Filtering

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

Block PE

Forward All

Internet

Office
RemoteAccess
User LAN
Remote Access LAN

any

cn=pa-social-media-access,cn=users,dc=lab,dc=local

social-networking
streaming-media
web-advertisements

URL Web Services

any

allow

Web Access

URL Web Services

Wildfire E-Mail Alert

IPS URL Filtering

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

Block PE

Forward All

Internet
Office
RemoteAccess

User LAN
Remote Access LAN

any

cn=pa-web-mail-access,cn=users,dc=lab,dc=local

any

application-default

any

allow

Web Access

Web Based E-Mail

Wildfire E-Mail Alert

IPS URL Filtering

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

Block PE

Forward All

Internet
Office
RemoteAccess

User LAN
Remote Access LAN

any

cn=pa-web-mail-access,cn=users,dc=lab,dc=local

ssl
web-browsing

any

allow

Web Access

URL Web Services

Web Mail URL

Wildfire E-Mail Alert

IPS URL Filtering

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

Confirm PE

Forward All
Internet

Office
RemoteAccess

User LAN
Remote Access LAN

any

cn=pa-full-web-access,cn=users,dc=lab,dc=local

any

application-default

any

allow

Web Access

Full Access App

Wildfire E-Mail Alert

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

Full Access

Confirm PE

Forward All
Internet

Office
RemoteAccess

User LAN
Remote Access LAN

any

cn=pa-full-web-access,cn=users,dc=lab,dc=local

any

URL Web Services

any

allow

Web Access

URL Web Services

Wildfire E-Mail Alert

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

Full Access

Confirm PE
Forward All

Internet

Office
RemoteAccess

User LAN
Remote Access LAN

any

cn=pa-full-web-access,cn=users,dc=lab,dc=local

any

any

any

allow

Web Access
Temporary

URL Web Services

Wildfire E-Mail Alert

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

Full Access
Confirm PE

Forward All

Internet

Office
RemoteAccess

User LAN
Remote Access LAN

any

cn=pa-full-web-access,cn=users,dc=lab,dc=local

any

any

any

any

allow

Web Access
Temporary

Wildfire E-Mail Alert

IPS URL Filtering

IPS AntiVirus

IPS SpyWare
IPS Vulnerabilities

Block PE

Forward All

Internet

Office
RemoteAccess

User LAN
Remote Access LAN

any

cn=pa-advanced-web-access,cn=users,dc=lab,dc=local

any

application-default

any

allow

Web Access

Advanced Access App

Wildfire E-Mail Alert

IPS AntiVirus

IPS SpyWare
IPS Vulnerabilities

Block PE

Advanced Access

Forward All

Internet

Office
RemoteAccess

User LAN
Remote Access LAN

any

cn=pa-advanced-web-access,cn=users,dc=lab,dc=local

any

URL Web Services

any

allow

Web Access

URL Web Services

Wildfire E-Mail Alert

IPS AntiVirus

IPS SpyWare
IPS Vulnerabilities

Block PE

Advanced Access

Forward All

Internet

Office
RemoteAccess

User LAN
Remote Access LAN

any

cn=pa-advanced-web-access,cn=users,dc=lab,dc=local

any

any

any

allow

Web Access
Temporary

URL Web Services

Wildfire E-Mail Alert

IPS AntiVirus
IPS SpyWare

IPS Vulnerabilities

Block PE

Advanced Access

Forward All

Internet

Office
RemoteAccess

User LAN
Remote Access LAN

any

cn=pa-advanced-web-access,cn=users,dc=lab,dc=local

any

any

any

any

allow

Web Access
Temporary

Wildfire E-Mail Alert


IPS URL Filtering

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

Confirm PE

Forward All

Internet

Office
RemoteAccess

User LAN
Remote Access LAN

any

cn=pa-it-special-web-access,cn=users,dc=lab,dc=local

any

application-default

any

allow

Web Access

IT Special Access App

Wildfire E-Mail Alert


IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

IT Special Access

Confirm PE

Forward All

Internet

Office
RemoteAccess

User LAN
Remote Access LAN

any

cn=pa-it-special-web-access,cn=users,dc=lab,dc=local

any

URL Web Services

any

allow

Web Access

URL Web Services


Wildfire E-Mail Alert

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

IT Special Access

Confirm PE

Forward All

Internet

Office
RemoteAccess

User LAN
Remote Access LAN

any

cn=pa-it-special-web-access,cn=users,dc=lab,dc=local

any

any

any

allow

Web Access
Temporary
URL Web Services

Wildfire E-Mail Alert

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

IT Special Access

Confirm PE

Forward All

Internet

Office
RemoteAccess

User LAN
Remote Access LAN

any

cn=pa-it-special-web-access,cn=users,dc=lab,dc=local

any

any

any

any
allow

Web Access
Temporary

Wildfire E-Mail Alert

IPS URL Filtering

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

Block PE

Forward All

Internet

Office
RemoteAccess

User LAN
Remote Access LAN

any

cn=pa-general-web-access,cn=users,dc=lab,dc=local

any

application-default

any
allow

Web Access

General Access App

Wildfire E-Mail Alert

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

Block PE

General Access

Forward All

Internet

Office
RemoteAccess

User LAN
Remote Access LAN

any

cn=pa-general-web-access,cn=users,dc=lab,dc=local

any

URL Web Services


any

allow

Web Access

URL Web Services

Wildfire E-Mail Alert

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

Block PE

General Access

Forward All

Internet

Office
RemoteAccess

User LAN
Remote Access LAN

any

cn=pa-general-web-access,cn=users,dc=lab,dc=local

any
any

any

allow

Web Access
Temporary

URL Web Services

Wildfire E-Mail Alert

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

Block PE

General Access

Forward All

Internet

Office
RemoteAccess

User LAN
Remote Access LAN

any

cn=pa-general-web-access,cn=users,dc=lab,dc=local
any

any

any

any

allow

Web Access
Temporary

Wildfire E-Mail Alert

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

Block PE

Domain Users Access

Forward All

Internet

Office
RemoteAccess

User LAN
Remote Access LAN

any
cn=domain users,cn=users,dc=lab,dc=local

any

URL Web Services

any

allow

Web Access

URL Web Services

Wildfire E-Mail Alert

Internet

Office
RemoteAccess

Remote Access LAN


User LAN

any

any

any

any

any

deny

cn=pa-advanced-web-access,cn=users,dc=lab,dc=local
cn=pa-full-web-access,cn=users,dc=lab,dc=local
cn=pa-general-web-access,cn=users,dc=lab,dc=local
cn=pa-it-special-web-access,cn=users,dc=lab,dc=local

Web Access
Internet

Office

any

Lab-FireWall_inet

any
Exclude communication to the external GlobalProtect Portal from NAT

yes
Web Server_public

Internet

DMZ

Web Server

any

any

yes
FTP Server_public

Internet

DMZ
FTP Server

any

any

203.0.113.20/24
ethernet1/1

Internet

any

any

any

any

deny
no
yes

deny
no
yes

any

any
Office
RemoteAccess

Internet

any

1.1.1.1

any

no-decrypt

Web Access
Server Web Access

NO SSL Decryption

any

Office
RemoteAccess

Internet

any

any

any

no-decrypt
Do not check the SSL Certificate for URL in the custom URL list

Web Access
Server Web Access
financial-services
government
health-and-medicine
shopping

any

Office
RemoteAccess

Internet

any

any

cn=pa-advanced-web-access,cn=users,dc=lab,dc=local
cn=pa-full-web-access,cn=users,dc=lab,dc=local
cn=pa-general-web-access,cn=users,dc=lab,dc=local
cn=pa-it-special-web-access,cn=users,dc=lab,dc=local

no-decrypt
no
Secure SSL

Server Web Access


Web Access

any

any

Office
RemoteAccess
Internet

any

any

cn=pa-advanced-web-access,cn=users,dc=lab,dc=local
cn=pa-full-web-access,cn=users,dc=lab,dc=local
cn=pa-general-web-access,cn=users,dc=lab,dc=local
cn=pa-it-special-web-access,cn=users,dc=lab,dc=local

decrypt
no
Secure SSL

Server Web Access


Web Access

30

180

Active Directory
Any
Enter login credentials

24
FireWall CA
yes

cn=pa-remote-access-users,cn=users,dc=lab,dc=local

192.168.100.200-192.168.100.210

any

no
no

Remote Access
yes
tunnel.10

203.0.113.20/24

ethernet1/1

Any
Active Directory
Enter login credentials

Remote Access
Disable

20
yes
192.168.1.1

203.0.113.20

no

24

FireWall CA
yes

cn=pa-remote-access-users,cn=users,dc=lab,dc=local

any

0
0

user-logon

24
allowed

manual

yes

yes

yes

no

900

15

yes

<div style="font-family:'Helvetica Neue';"><h1


style="color:red;text-align:center; margin: 0; font-size:
30px;">Notice</h1><p style="margin: 0;font-size: 15px; line-
height: 1.2em;">To access the network, you must first connect
to GlobalProtect.</p></div>

yes
no

<div style="font-family:'Helvetica Neue';"><h1


style="color:red;text-align:center; margin: 0; font-size:
30px;">Captive Portal Detected</h1><p style="margin: 0;
font-size: 15px; line-height: 1.2em;">GlobalProtect has
temporarily permitted network access for you to connect to the
Internet. Follow instructions from your internet
provider.</p><p style="margin: 0; font-size: 15px; line-
height: 1.2em;">If you let the connection time out, open
GlobalProtect and click Connect to try again.</p></div>

user-and-machine

yes

yes

yes

yes

yes
yes

no

yes

no

30

60

30

no

no
yes

no

4501

You have attempted to access a protected resource that


requires additional authentication. Proceed to authenticate at

yes

2
no
no
no
no
443

yes

-
AQ==9EIXqBFzhp4IZxdTxSVTZG/12Vs=iH76LFLerpHJ1S680bBopQ==

ethernet1/2
ethernet1/3
ethernet1/5
ethernet1/4
ethernet1/1
tunnel.10

alert
alert

alert
alert

alert
alert

alert
alert

alert
alert

alert
alert

yes

reset-both
reset-both

reset-both
reset-both

alert
alert

alert
alert
reset-both
reset-both

reset-server
reset-both

yes

critical

any
any
extended-capture

high

any
any
extended-capture

medium

any
any
extended-capture

low

any
any
single-packet

informational

any
any
disable

extended-capture

critical

any
any
single-packet

high

any
any
extended-capture

medium
any
any
extended-capture

low

any
any
single-packet

informational

any
any
disable

223.255.255.223
::1

extended-capture

any

critical
any

any
client
any
extended-capture

any

high

any

any
client
any
extended-capture

any

medium

any

any
client
any
extended-capture

any

low
any

any
client
any
single-packet

any

informational

any

any
client
any
disable

any

critical

any

any
server
any
extended-capture

any

high

any
any
server
any
extended-capture

any

medium

any

any
server
any
extended-capture

any

low

any

any
server
any
single-packet

any

informational

any

any
server
any
disable

any

critical

any

any
client
any
single-packet

any

high

any

any
client
any
extended-capture

any

medium

any
any
client
any
extended-capture

any

low

any

any
client
any
single-packet

any

informational

any

any
client
any
disable

any

critical

any

any
server
any
single-packet

any

high

any

any
server
any
extended-capture

any

medium

any

any
server
any
extended-capture

any

low

any

any
server
any
single-packet
any

informational

any

any
server
any
disable

3600
source

any

any

any

any
any
brute-force
single-packet

any

critical

any
any
client
any
single-packet

any

high

any

any
client
any
single-packet

any

medium

any

any
client
any
single-packet

any

low

any

any
client
any
single-packet

any

informational

any

any
client
any
extended-capture

any

critical

any

any
server
any
single-packet

any

high

any

any
server
any
single-packet

any

medium

any

any
server
any
single-packet

any

low

any

any
server
any
single-packet

any

informational

any

any
server
any
extended-capture
yes
yes
yes
yes
yes

medium

alert

abortion
abused-drugs
adult
alcohol-and-tobacco
auctions
business-and-economy
computer-and-internet-info
content-delivery-networks
copyright-infringement
dating
dynamic-dns
educational-institutions
entertainment-and-arts
extremism
financial-services
gambling
games
government
hacking
health-and-medicine
home-and-garden
hunting-and-fishing
insufficient-content
internet-communications-and-telephony
internet-portals
job-search
legal
malware
military
motor-vehicles
music
news
not-resolved
nudity
online-storage-and-backup
parked
peer-to-peer
personal-sites-and-blogs
philosophy-and-political-advocacy
phishing
private-ip-addresses
proxy-avoidance-and-anonymizers
questionable
real-estate
recreation-and-hobbies
reference-and-research
religion
search-engines
sex-education
shareware-and-freeware
shopping
social-networking
society
sports
stock-advice-and-tools
streaming-media
swimsuits-and-intimate-apparel
training-and-tools
translation
travel
unknown
weapons
web-advertisements
web-based-email
web-hosting

Blocklist

yes
yes
yes
yes
yes

medium

copyright-infringement
extremism
hacking
malware
parked
peer-to-peer
phishing
proxy-avoidance-and-anonymizers
unknown

block
abortion
abused-drugs
adult
alcohol-and-tobacco
auctions
business-and-economy
computer-and-internet-info
content-delivery-networks
dating
dynamic-dns
educational-institutions
entertainment-and-arts
financial-services
gambling
games
government
health-and-medicine
home-and-garden
hunting-and-fishing
internet-communications-and-telephony
internet-portals
job-search
legal
military
motor-vehicles
music
news
not-resolved
nudity
online-storage-and-backup
personal-sites-and-blogs
philosophy-and-political-advocacy
private-ip-addresses
questionable
real-estate
recreation-and-hobbies
reference-and-research
religion
search-engines
sex-education
shareware-and-freeware
shopping
social-networking
society
sports
stock-advice-and-tools
streaming-media
swimsuits-and-intimate-apparel
training-and-tools
translation
travel
weapons
web-advertisements
web-based-email
web-hosting
Domain User Whitelist
insufficient-content

copyright-infringement
extremism
hacking
malware
parked
peer-to-peer
phishing
proxy-avoidance-and-anonymizers
unknown
Blocklist

block
yes
yes
yes

computer-and-internet-info
content-delivery-networks
insufficient-content
Whitelist Domain Users

abortion
abused-drugs
adult
alcohol-and-tobacco
auctions
business-and-economy
copyright-infringement
dating
dynamic-dns
educational-institutions
entertainment-and-arts
extremism
financial-services
gambling
games
government
hacking
health-and-medicine
home-and-garden
hunting-and-fishing
internet-communications-and-telephony
internet-portals
job-search
legal
malware
military
motor-vehicles
music
news
not-resolved
nudity
online-storage-and-backup
parked
peer-to-peer
personal-sites-and-blogs
philosophy-and-political-advocacy
phishing
private-ip-addresses
proxy-avoidance-and-anonymizers
questionable
real-estate
recreation-and-hobbies
reference-and-research
religion
search-engines
sex-education
shareware-and-freeware
shopping
social-networking
society
sports
stock-advice-and-tools
streaming-media
swimsuits-and-intimate-apparel
training-and-tools
translation
travel
unknown
weapons
web-advertisements
web-based-email
web-hosting
Blocklist

yes
yes
yes
block

abortion
alcohol-and-tobacco
business-and-economy
computer-and-internet-info
content-delivery-networks
dynamic-dns
educational-institutions
entertainment-and-arts
financial-services
government
health-and-medicine
home-and-garden
hunting-and-fishing
insufficient-content
internet-communications-and-telephony
internet-portals
job-search
legal
military
motor-vehicles
music
news
not-resolved
personal-sites-and-blogs
philosophy-and-political-advocacy
private-ip-addresses
real-estate
recreation-and-hobbies
reference-and-research
religion
search-engines
sex-education
shareware-and-freeware
shopping
society
sports
stock-advice-and-tools
training-and-tools
translation
travel
unknown
web-hosting
Whitelist Domain Users
Whitelist General Access

abused-drugs
adult
auctions
copyright-infringement
dating
extremism
gambling
games
hacking
malware
nudity
online-storage-and-backup
parked
peer-to-peer
phishing
proxy-avoidance-and-anonymizers
questionable
social-networking
streaming-media
swimsuits-and-intimate-apparel
weapons
web-advertisements
web-based-email
Blocklist

yes
yes
yes
block

abortion
abused-drugs
alcohol-and-tobacco
auctions
business-and-economy
computer-and-internet-info
content-delivery-networks
dating
dynamic-dns
educational-institutions
entertainment-and-arts
financial-services
gambling
games
government
health-and-medicine
home-and-garden
hunting-and-fishing
insufficient-content
internet-communications-and-telephony
internet-portals
job-search
legal
military
motor-vehicles
music
news
not-resolved
nudity
online-storage-and-backup
personal-sites-and-blogs
philosophy-and-political-advocacy
private-ip-addresses
real-estate
recreation-and-hobbies
reference-and-research
religion
search-engines
sex-education
shareware-and-freeware
shopping
social-networking
society
sports
stock-advice-and-tools
streaming-media
training-and-tools
translation
travel
unknown
web-advertisements
web-hosting
Whitelist Domain Users
Whitelist Full Access

adult
copyright-infringement
extremism
hacking
malware
parked
peer-to-peer
phishing
proxy-avoidance-and-anonymizers
swimsuits-and-intimate-apparel
web-based-email
Blocklist

questionable
weapons

yes
yes
yes
block

abortion
alcohol-and-tobacco
auctions
business-and-economy
computer-and-internet-info
content-delivery-networks
dynamic-dns
educational-institutions
entertainment-and-arts
financial-services
government
health-and-medicine
home-and-garden
hunting-and-fishing
insufficient-content
internet-communications-and-telephony
internet-portals
job-search
legal
military
motor-vehicles
music
news
not-resolved
online-storage-and-backup
personal-sites-and-blogs
philosophy-and-political-advocacy
private-ip-addresses
real-estate
recreation-and-hobbies
reference-and-research
religion
search-engines
sex-education
shareware-and-freeware
shopping
society
sports
stock-advice-and-tools
streaming-media
training-and-tools
translation
travel
unknown
web-hosting
Whitelist Advanced Access
Whitelist Domain Users

adult
copyright-infringement
extremism
hacking
malware
parked
peer-to-peer
phishing
proxy-avoidance-and-anonymizers
questionable
social-networking
swimsuits-and-intimate-apparel
weapons
web-based-email
Blocklist

abused-drugs
dating
gambling
games
nudity
web-advertisements

yes
yes
yes
block
abortion
alcohol-and-tobacco
auctions
business-and-economy
computer-and-internet-info
content-delivery-networks
dynamic-dns
educational-institutions
entertainment-and-arts
financial-services
government
health-and-medicine
home-and-garden
hunting-and-fishing
insufficient-content
internet-communications-and-telephony
internet-portals
job-search
legal
military
motor-vehicles
music
news
not-resolved
personal-sites-and-blogs
philosophy-and-political-advocacy
private-ip-addresses
real-estate
recreation-and-hobbies
reference-and-research
religion
search-engines
sex-education
shareware-and-freeware
shopping
society
sports
stock-advice-and-tools
streaming-media
training-and-tools
translation
travel
unknown
web-hosting
Whitelist Domain Users
Whitelist IT Access

abused-drugs
adult
copyright-infringement
dating
extremism
gambling
games
malware
nudity
online-storage-and-backup
parked
peer-to-peer
phishing
proxy-avoidance-and-anonymizers
questionable
social-networking
swimsuits-and-intimate-apparel
weapons
web-based-email
Blocklist

hacking
web-advertisements

block

insufficient-content
Whitelist Domain Users

abortion
abused-drugs
adult
alcohol-and-tobacco
auctions
business-and-economy
computer-and-internet-info
content-delivery-networks
copyright-infringement
dating
dynamic-dns
educational-institutions
entertainment-and-arts
extremism
financial-services
gambling
games
government
hacking
health-and-medicine
home-and-garden
hunting-and-fishing
internet-communications-and-telephony
internet-portals
job-search
legal
malware
military
motor-vehicles
music
news
not-resolved
nudity
online-storage-and-backup
parked
peer-to-peer
personal-sites-and-blogs
philosophy-and-political-advocacy
phishing
private-ip-addresses
proxy-avoidance-and-anonymizers
questionable
real-estate
recreation-and-hobbies
reference-and-research
religion
search-engines
sex-education
shareware-and-freeware
shopping
social-networking
society
sports
stock-advice-and-tools
streaming-media
swimsuits-and-intimate-apparel
training-and-tools
translation
travel
unknown
weapons
web-advertisements
web-based-email
web-hosting
Blocklist

any

PE

both
continue

any
any

both
alert

any

any

both
alert

any

PE
encrypted-rar
encrypted-zip
Multi-Level-Encoding

both
block

any

any

both
alert

any

encrypted-zip
gzip
Multi-Level-Encoding
PE
zip

both
continue

any

any

both
alert

any

any

both
public-cloud

any

any

both
public-cloud

any
apk
email-link
flash
jar
pe

both
public-cloud

any

ms-office
pdf

upload
public-cloud

any

apk
email-link
flash
jar
pe

both
public-cloud

any

ms-office
pdf

download
public-cloud
any

apk
email-link
flash
jar
pe

both
public-cloud

Forward all files types which do not include private data e.g. excludes MS-
Office, PDF

*.paloaltonetworks.com
paloaltonetworks.com

*.adobe.com
*.autodesk.com
*.canon-europe.com
*.hp.com
*.microsoft.com
*.office.net
*.samsung.com
*.webex.com
*.windowsupdate.com
*.googleapis.com

*.force.com
*.salesforce.com/testabc?*

*.adobe.com
*.apple.com
*.citrixonline.com
*.citrixonlinecdn.com
*.firefox.com
*.getfirefox.com
*.googleapis.com
*.gotomeeting.com
*.mozilla.com
*.mozilla.org
*.webex.com
*.gototraining.com
*.microsoft.com

URLs excluded from SSL Decryption

*.gmail.com

URL Whitelist for users in the "Full Access" Active Directory Group

URL Whitelist for users in the "Advanced Access" Active Directory Group

URL Whitelist for users in the "IT Access" Active Directory Group

URL Whitelist for users in the "General Access" Active Directory Group

URL Whitelist for users in the "Domain Users" Active Directory Group

URL Blocklist for URLs which should blocked for every user and device

yes
yes
yes
yes
yes
yes
yes
yes

yes
yes
http://www.openbl.org/lists/base_30days.txt

213.0.113.60

192.168.50.10

192.168.50.11

203.0.113.61

10.0.17.0/24

192.168.1.0/24

192.168.50.0/24

10.1.17.0/24

global.gotomeeting.com

203.0.113.20

192.168.1.254

sdlc-esd.oracle.com

192.168.1.20

192.168.100.200-192.168.100.210

color15

color10
color2

color1

color6

color13

color3

IDS AntiVirus

IDS SpyWare

IDS Vulnerabilities

IDS URL Filtering

Log All

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

IPS URL Filtering

Block PE

Wildfire
IPS AntiVirus

IPS SpyWare

IPS Internet Inbound

IDS URL Filtering

Block PE

Wildfire

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

IDS URL Filtering

Log All

IPS AntiVirus

IPS SpyWare

IPS Vulnerabilities

Server URL Filtering

Block PE

Forward All
file-sharing

peer-to-peer

5
4

yes

encrypted-tunnel

4
5

yes
yes

file-sharing

browser-based

4
5

yes
yes

yes

administrator

lab\lab-user-id
-AQ==CaHEtj8wWUhMJjtCSo8m3cTNXm0=m2FUhEU5thOOOgEQzCV6Xw==
600
CLIENT.lab.local

no
include
192.168.1.0/24

group

name

member

person

sAMAccountName

mail

Active Directory

cn=pa-social-media-access,cn=users,DC=lab,DC=local
cn=pa-web-mail-access,cn=users,DC=lab,DC=local
cn=pa-full-web-access,cn=users,DC=lab,DC=local
cn=pa-advanced-web-access,cn=users,DC=lab,DC=local
cn=pa-it-special-web-access,cn=users,DC=lab,DC=local
cn=pa-general-web-access,cn=users,DC=lab,DC=local
cn=pa-remote-access-users,cn=users,DC=lab,DC=local
cn=domain users,cn=users,DC=lab,DC=local

sdlc-esd.oracle.com

You might also like