Fim1 27nov

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2020.11.
27 08:28:05 =~=~=~=~=~=~=~=~=~=~=~=
FW-GI-TBS-1 [FIM01] # d##[Kconf global
FW-GI-TBS-1 [FIM01] (global) # fnsysctl -s -l /tmp

can not find command -s
FW-GI-TBS-1 [FIM01] (global) # fnsysctl -s -l /tmp############[P-##[1@l-#

Unknown action 0
FW-GI-TBS-1 [FIM01] (global) # fnsysctll-s -l /tmp##########[P ###[P ###[P # #[1@

-###[1@l ##[1@s #
drwxr-xr-x 2 0 0 Fri Jun 12 16:46:30 2020 40 $$auto-
script$$
-rw------- 1 0 0 Fri Nov 27 01:50:15 2020 0
_data2_mmdb
lrwxrwxrwx 1 0 0 Fri Jun 12 16:45:49 2020 14
admin_server.crt -> /tmp/fgt_b.crt
lrwxrwxrwx 1 0 0 Fri Jun 12 16:45:49 2020 14 KEY-FILE
-> /tmp/fgt_b.key
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:32 2020 0
authd_svr_socket
-rw-r--r-- 1 0 0 Thu Sep 17 01:06:30 2020 37
avatar_css_etag
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:30 2020 0
bwl_gui_to_url_unix_sock
drwx------ 3 0 0 Fri Aug 14 00:44:25 2020 60 cid
drw-r--r-- 2 0 0 Wed Nov 25 22:52:11 2020 40
cli_cmd_dir
-rw-r--r-- 1 0 0 Fri Jun 12 16:45:47 2020 4
cmdb_lock
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:24 2020 0
cmdbsocket
drw-r--r-- 2 0 0 Fri Jun 12 16:45:47 2020 40 config
drw-r--r-- 2 0 0 Fri Jun 12 16:45:47 2020 40
confstatus
drwxr-xr-x 2 0 0 Wed Jun 17 01:28:25 2020 40 confsync
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:30 2020 0
confsync_local_server.socket
-rw-r--r-- 1 0 0 Fri Jun 12 16:46:39 2020 5958 KEY-FILE
-rw-r--r-- 1 0 0 Fri Jun 12 16:46:39 2020 5958
cw_ac_key_bak.pem
-rw-r--r-- 1 0 0 Fri Jun 12 16:46:39 2020 216033
cw_ca_list.pem
-rw-r--r-- 1 0 0 Fri Jun 12 16:46:39 2020 216033
cw_ca_list_bak.pem
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:30 2020 0
cwCwAcHlpSocket
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:39 2020 0
cwCwAcSocket
srwxr-xr-x 1 0 0 Fri Jun 12 16:51:04 2020 0
cwHapdSocket
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:39 2020 0 cwTptWc
srwxr-xr-x 1 0 0 Fri Jun 12 16:51:04 2020 0
dasHapdSocket
-rw-r--r-- 1 0 0 Fri Jun 12 19:50:46 2020 0
dhcp6_ipduid.dat
-rw-r--r-- 1 0 0 Fri Jun 12 19:50:46 2020 0
dhcp_ipmac.dat
drwx------ 2 0 0 Fri Jun 12 16:46:32 2020 40 dynamic
drwx------ 2 0 0 Fri Jun 12 16:46:30 2020 40 fas
-rw-r--r-- 1 0 0 Fri Jun 12 16:45:49 2020 0
fc_uid_lic
srwxr-xr-x 1 0 0 Fri Nov 27 07:55:51 2020 0
fcgi.sock
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:49 2020 0
fcp_ipc_rx
srwxr-xr-x 1 0 0 Wed Jun 17 23:06:13 2020 0
fcp_ipc_tx
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:14 2020 7613100
ffdb_fast_shm_file0
-rw-r--r-- 1 0 0 Thu Nov 26 01:50:15 2020 7454772
ffdb_fast_shm_file1
-rw-r--r-- 1 0 0 Fri Jun 12 16:45:44 2020 4283
fgt_b.crt
drwxr-xr-x 9 0 0 Thu Jun 18 13:43:11 2020 180
fortiguard_resources
-rw-r--r-- 1 0 0 Fri Oct 23 00:54:11 2020 241 fsa_ext
-rw-r--r-- 1 0 0 Sun Oct 25 18:26:03 2020 46
fsa_urldb
-rw-r--r-- 1 0 0 Mon Oct 26 00:44:04 2020 61
fsa_virdb
drwxr-xr-x 2 0 0 Fri Jun 12 16:46:32 2020 40 fsb
dr----x--t 2 0 0 Fri Nov 20 15:40:32 2020 80 fsvr
-rw-r--r-- 1 0 0 Thu Nov 26 01:50:23 2020 10063872 geoip.13
drwxr-xr-x 7 0 0 Sun Nov 22 19:39:03 2020 140 hadiff
drwxr-xr-x 2 0 0 Fri Jun 12 16:46:30 2020 40 hasync
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:34 2020 0
hatalk_slbc_ipc_rx
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:34 2020 0
hatalk_worker_ipc_rx
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:30 2020 0
httpcli.msg
-rw------- 1 0 0 Fri Jun 12 16:46:30 2020 0
httpsd_api_authorization_local_tokena3c3b7943d69d362279debafc6a76469
-rw------- 1 0 0 Fri Jun 12 16:46:30 2020 0
httpsd_api_authorization_lock_out_historya3c3b7943d69d362279debafc6a76469
-rw-r--r-- 1 0 0 Wed Nov 25 23:26:34 2020 2063
ia_fcpvd_w0_cbkttbl.hex
-rw-r--r-- 1 0 0 Wed Nov 25 23:26:34 2020 2328
ia_fcpvd_w0_idxtbl.hex
-rw-r--r-- 1 0 0 Wed Nov 25 23:26:34 2020 27
ia_fcpvd_w0_seeds.hex
-rw-r--r-- 1 0 0 Wed Nov 25 23:26:34 2020 2063
-rw-r--r-- 1 0 0 Wed Nov 25 23:26:34 2020 2448
-rw-r--r-- 1 0 0 Wed Nov 25 23:26:34 2020 27
-rw-r--r-- 1 0 0 Wed Nov 25 23:26:34 2020 2063
-rw-r--r-- 1 0 0 Wed Nov 25 23:26:34 2020 2241
-rw-r--r-- 1 0 0 Wed Nov 25 23:26:34 2020 27
-rw-r--r-- 1 0 0 Wed Nov 25 23:26:34 2020 2063
-rw-r--r-- 1 0 0 Wed Nov 25 23:26:34 2020 2098
-rw-r--r-- 1 0 0 Wed Nov 25 23:26:34 2020 27
drwxr-x--- 2 0 0 Fri Jun 12 16:46:30 2020 40
image_cache
drwxr-xr-x 2 0 0 Fri Jun 12 16:46:52 2020 40 ips-
lcates
-rw-r--r-- 1 0 0 Tue Nov 10 12:25:46 2020 1440
ips_cfgfile_customrules
-rw-r--r-- 1 0 0 Fri Jun 12 16:46:55 2020 0
ips_cfgsem.file
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:22 2020 495616
ips_cfgshm.file
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:49 2020 0
ips_cfgsvr
srwxr-xr-x 1 0 0 Fri Jun 12 16:47:02 2020 0
ips_e.sock1
-rw-r--r-- 1 0 0 Sun Oct 25 18:26:03 2020 28
ips_fsa_urldb
srwxr-xr-x 1 0 0 Fri Jun 12 16:47:02 2020 0
ips_s.sock1
-rw-r--r-- 1 0 0 Fri Jun 12 16:46:30 2020 4096
ips_shm_asyncfg.file
-rw-r--r-- 1 0 0 Fri Jun 12 16:46:30 2020 4096
ips_shm_htmlpagectr.file
drwxr-xr-- 2 0 0 Fri Jun 12 16:46:52 2020 80
ipsdb_ccert_cache
drwxr-xr-- 2 0 0 Fri Jun 12 16:46:52 2020 80
ipsdb_dac_cache
drwxr-xr-- 2 0 0 Fri Jun 12 16:46:52 2020 80
ipsdb_dns-any-client
drwxr-xr-- 2 0 0 Fri Jun 12 16:46:52 2020 80
ipsdb_dns-client-ip
drwxr-xr-- 2 0 0 Fri Jun 12 16:46:52 2020 80
ipsdb_dns-server-ip
drwxr-xr-- 2 0 0 Fri Jun 12 16:46:52 2020 80
ipsdb_exp_bt
drwxr-xr-- 2 0 0 Fri Jun 12 16:46:52 2020 80
ipsdb_exp_p2p
drwxr-xr-- 2 0 0 Fri Jun 12 16:46:52 2020 80
ipsdb_exp_skype
drwxr-xr-- 2 0 0 Fri Jun 12 16:46:52 2020 100
ipsdb_expect-0
drwxr-xr-- 2 0 0 Fri Jun 12 16:46:52 2020 100
ipsdb_expect-1
drwxr-xr-- 2 0 0 Fri Jun 12 16:46:52 2020 80
ipsdb_rating_cache
drwxr-xr-- 2 0 0 Fri Jun 12 16:46:52 2020 80
ipsdb_sid_cache
drwxr-xr-- 2 0 0 Fri Jun 12 16:46:52 2020 80
ipsdb_sni_cache
drwxr-xr-- 2 0 0 Fri Jun 12 16:46:52 2020 80
ipsdb_tag_cset_db
drwxr-xr-- 2 0 0 Fri Jun 12 16:46:52 2020 80
ipsdb_URLVirusCache
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.ccert_cache
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.dac_cache
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:22 2020 0
ipssem.dfa_chunk.major
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:22 2020 0
ipssem.dfa_chunk.minor
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.dns-any-client
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.dns-client-ip
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.dns-server-ip
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.dsakey
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.eckey
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.exp_bt
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.exp_p2p
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.exp_skype
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.expect-0
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.expect-1
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.ips_bot_lock
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:26 2020 0
ipssem.ips_urldb_0
-rw-r--r-- 1 0 0 Wed Oct 28 04:02:44 2020 0
ipssem.ips_urldb_1
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:14 2020 0
ipssem.ips_urldb_2
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.rating_cache
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.rsakey
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.sid_cache
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.sni_cache
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.tag_cset_db
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.track_DHCP_client
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.track_DNS_domain
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.track_dst_IP
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.track_none
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.track_src_IP
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:15 2020 0
ipssem.URLVirusCache
-r----x--- 1 0 0 Fri Jun 12 16:47:02 2020 44000
ipsshm.av_stats
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:25 2020 29687880
ipsshm.dfa_chunk.major
-rw-r--r-- 1 0 0 Fri Jun 12 16:46:55 2020 32
ipsshm.dfa_chunk.minor
-rw-r--r-- 1 0 0 Fri Jun 12 16:46:52 2020 1244
ipsshm.track_DHCP_client
-rw-r--r-- 1 0 0 Fri Jun 12 16:46:52 2020 1244
ipsshm.track_DNS_domain
-rw-r--r-- 1 0 0 Fri Jun 12 16:46:52 2020 1244
ipsshm.track_dst_IP
-rw-r--r-- 1 0 0 Fri Jun 12 16:46:52 2020 1244
ipsshm.track_none
-rw-r--r-- 1 0 0 Fri Jun 12 16:46:52 2020 1244
ipsshm.track_src_IP
-rw-r--r-- 1 0 0 Sun Oct 25 18:26:03 2020 1216
ipsshm.urldb-blacklist
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:22 2020 21466996
ipsshm.urldb-malicious
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:14 2020 730984
ipsshm.urldb-whitelist
drwxr--r-- 2 0 0 Fri Jun 12 16:46:30 2020 40 kt
-rw-r--r-- 1 0 0 Fri Nov 27 08:27:20 2020 36
login_lockdb
dr----x--t 3 0 0 Fri Nov 20 15:40:32 2020 100 nst
drwx------ 2 0 0 Fri Nov 27 00:18:55 2020 80 ocvpn
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:30 2020 0
ovrd_proxy_socket
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:30 2020 0
ovrd_redir_socket
-rw-r--r-- 1 0 0 Fri Jun 12 16:46:27 2020 0
policy_stats-1
drw------- 4 0 0 Fri Jun 12 16:46:30 2020 80 proxy
srwxr-xr-x 1 0 0 Fri Oct 23 11:51:52 2020 0 radc-
srv.sock
drw------- 4 0 0 Fri Jun 12 16:46:31 2020 80 scanunit
-rw-r--r-- 1 0 0 Fri Jun 12 16:45:47 2020 3 shm_lock
-rw-r--r-- 1 0 0 Fri Nov 20 16:10:49 2020 70
slb.rtinfo
-rw-r--r-- 1 0 0 Fri Nov 20 16:10:49 2020 1935
slb.vdinfo
drwxr-xr-x 2 0 0 Fri Nov 20 16:11:20 2020 40 slb_cli
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:30 2020 0
slb_ipc_rx
srwxr-xr-x 1 0 0 Fri Nov 20 14:57:59 2020 0
slb_ipc_tx-21506
srwxr-xr-x 1 0 0 Wed Jun 17 23:10:01 2020 0
slb_ipc_tx-288
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:50 2020 0
slb_ipc_tx-314
srwxr-xr-x 1 0 0 Fri Nov 20 15:40:28 2020 0
slb_ipc_tx-360
srwxr-xr-x 1 0 0 Fri Nov 20 14:58:23 2020 0
slb_ipc_tx-418
-rw-r--r-- 1 0 0 Fri Nov 20 16:10:48 2020 6820
slbc_intf_mgr_dump
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:30 2020 0
slbrpc_srv
-rw-r--r-- 1 0 0 Fri Jun 12 16:44:45 2020 11
slot_port_split_list.conf
-rw-r--r-- 1 0 0 Fri Jun 12 16:46:30 2020 0
smc_lan_mutex
srwxr-xr-x 1 0 0 Fri Nov 20 15:40:28 2020 0
snmpd.traps
srwxr-xr-x 1 0 0 Fri Aug 14 00:44:25 2020 0
src_vis_socket
-rw-r--r-- 1 0 0 Fri Jun 12 16:46:30 2020 388
ssh_host_rsa_key.pub
-rw-r--r-- 1 0 0 Fri Jun 12 16:46:30 2020 51
ssh_host_rsa_key.pub.fp
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:30 2020 0
sys_lnkmt_socket
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:30 2020 0
sys_vwl_ctrl_socket
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:30 2020 0
sys_vwl_socket
-rw-r--r-- 1 0 0 Fri Jun 12 16:45:44 2020 15355 termcap
-rw-r--r-- 1 0 0 Fri Jun 12 16:44:45 2020 1
tmp_lr_port.bmp
drwxr-xr-x 2 0 0 Fri Jun 12 16:46:27 2020 40 tmp_mnt
-rw-r--r-- 1 0 0 Thu Nov 26 00:02:07 2020 2555 upfile
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:30 2020 0
uploadd.req
-rw-r--r-- 1 0 0 Mon Sep 7 14:02:45 2020 1352065024
ur_cache_file
-rw-r--r-- 1 0 0 Mon Sep 7 14:02:45 2020 1600
ur_reader_file
lrwxrwxrwx 1 0 0 Fri Jun 12 16:45:49 2020 14
user_server.crt -> /tmp/fgt_b.crt
lrwxrwxrwx 1 0 0 Fri Jun 12 16:45:49 2020 14 KEY-FILE
-> /tmp/fgt_b.key
drw------- 3 0 0 Fri Jun 12 16:46:30 2020 60 vd
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:02 2020 2116200
vir.lastgood
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:30 2020 0
voipd_monitor_socket
drwx------ 4 0 0 Fri Jun 12 16:46:30 2020 80 vsd
drwx------ 4 0 0 Fri Jun 12 16:46:30 2020 80 wad
srwxr-xr-x 1 0 0 Fri Jun 12 16:46:30 2020 0
wad_informer_user_dgram
-rw-r--r-- 1 0 0 Sun Oct 25 18:26:03 2020 46
wad_urlblack_gz_1
-rw-r--r-- 1 0 0 Fri Nov 27 01:50:14 2020 169391
wad_urlwhite_gz_1
-rw-r--r-- 1 0 0 Fri Jun 12 16:46:39 2020 13284
wcha_cfg_clr.conf
FW-GI-TBS-1 [FIM01] (global) # dia ips packet status

==========================================================================
Slot: 2 Module SN: FIM20E3E17000222
==========================================================================
Slot: 3 Module SN: FPM20E3E17900723
==========================================================================
Slot: 4 Module SN: FPM20ET018900285
==========================================================================
==========================================================================
==========================================================================
Current slot: 1 Module SN: FIM01E3E17000223
PID: 428
PACKET STATISTICS:
total packets 0
tcp packets 0
udp packets 0
icmp packets 0
other packets 0
fast path bad packets 0
fast path other packets 0
fast path nocfg packets 0
fast path invcfg packets 0
fast path config changed packets 0
slow path invcfg packets 0
tcp PAWS packets 0
huge packets 0
PACKET ACTION STATISTICS:

PASS 0
DROP 0
RESET 0
RESET_CLIENT 0
RESET_SERVER 0
DROP_SESSION 0
PASS_SESSION 0
CLEAR_SESSION 0
EXEMPT 0
PACKET ERROR STATISTICS:

flowav file open 0
flowav file write 0
flowav external error 0
TCP asm buffer limit 0
TCP packets lost 0
flowav incomplete files 0
flowav complete files 0
dropped in conserve mode 0
SMB2 OOO buffer limit 0
SMB2 read response status error 0
SMB2 read response pending 0
SMB2 read request timeout 0
FW-GI-TBS-1 [FIM01] (global) #

FW-GI-TBS-1 [FIM01] (global) # ge##[K##[K#get sys
accprofiles##[K##[K##[K##[K##[K##[K##[K##[K##[K##[K##[Kstartup-error-log#[14Dtus#[K
Version: FortiCarrier-7060E v6.0.6,build8853,200422 (GA)

Virus-DB: 82.00116(2020-11-26 10:19)
Extended DB: 82.00116(2020-11-26 10:19)
Extreme DB: 1.00000(2018-04-09 18:07)
IPS-DB: 16.00969(2020-11-26 01:06)
IPS-ETDB: 15.00754(2020-01-08 01:17)
APP-DB: 16.00969(2020-11-26 01:06)
INDUSTRIAL-DB: 6.00741(2015-12-01 02:30)
Serial-Number: FG76E83E17000174
Module Serial-Number: FIM01E3E17000223
IPS Malicious URL Database: 2.00840(2020-11-26 04:58)
Botnet DB: 4.00667(2020-11-21 00:02)
BIOS version: 00000002
Module BIOS version: 05000005
System Part-Number: P20943-03
Module Part-Number: P17241-04
Log hard disk: Not available
Hostname: FW-GI-TBS-1
Operation Mode: NAT
Current virtual domain: mgmt-vdom
Max number of virtual domains: 25
Virtual domains status: 9 in NAT mode, 0 in TP mode
Virtual domain configuration: enable
FIPS-CC mode: disable
Current HA mode: a-p, master
Cluster uptime: 206 days, 6 hours, 51 minutes, 12 seconds
Cluster state change time: 2020-11-20 15:40:28
Config-Sync: Master
FPM Master: slot-3
FortiCarrier License Status: Carrier
Branch point: 0272
Release Version Information: GA
FortiOS x86-64: Yes
System time: Fri Nov 27 08:31:04 2020
FW-GI-TBS-1 [FIM01] (global) # d automation#[6Dupdate ver

==========================================================================
AV Engine
---------
Version: 6.00019
Contract Expiry Date: Sun Nov 6 2022
Last Updated using manual update on Wed Oct 17 22:37:00 2018
Last Update Attempt: Fri Nov 27 01:50:13 2020
Result: No Updates
Virus Definitions
---------
Version: 82.00116
Last Updated using manual update on Thu Nov 26 10:19:00 2020
Result: No Updates
Extended set
---------
Version: 82.00116
Last Updated using manual update on Fri Nov 27 01:50:13 2020
Result: Updates Installed
Extreme set
---------
Version: 1.00000
Last Updated using manual update on Mon Apr 9 18:07:00 2018
Last Update Attempt: n/a
Mobile Malware Definitions

---------
Version: 82.00116
IPS Attack Engine

---------
Version: 4.00035
Last Updated using manual update on Wed Apr 29 23:14:41 2020
Result: No Updates
Attack Definitions
---------
Version: 16.00969
Last Update Attempt: Fri Jan 10 10:10:05 2020
Result: No Updates
Attack Extended Definitions

---------
Version: 15.00754
Last Updated using manual update on Wed Jan 8 01:17:00 2020
Application Definitions
---------
Version: 16.00969
Result: No Updates
Industrial Attack Definitions

---------
Version: 6.00741
Contract Expiry Date: n/a
Last Updated using manual update on Tue Dec 1 02:30:00 2015
IPS Malicious URL Database

---------
Version: 2.00840
Result: No Updates
Flow-based Virus Definitions

---------
Version: 82.00115
Botnet Definitions
---------
Version: 4.00667
Botnet Domain Database

---------
Version: 2.00629
Internet-service Database Apps

---------
Version: 7.01182
Internet-service Database Maps

---------
Version: 7.01182
Device and OS Identification

---------
Version: 1.00109
Last Update Attempt: Thu Nov 26 01:50:57 2020
URL White list

---------
Version: 2.00968
Last Updated using manual update on Wed Nov 25 11:05:00 2020
IP Geography DB
---------
Version: 2.00065
Certificate Bundle
---------
Version: 1.00019
Last Updated using manual update on Wed Aug 5 14:20:00 2020
Modem List
---------
Version: 0.000
FortiGuard Security Rating

---------
Version: 0.00000
Last Updated using manual update on Mon Jan 1 00:00:00 2001
FDS Address
---------
10.41.234.161:8890
==========================================================================
AV Engine
---------
Version: 6.00019
Last Update Attempt: Sun Oct 25 20:23:37 2020
Result: No Updates
Virus Definitions
---------
Version: 82.00116
Last Updated using manual update on Sun Oct 25 20:23:37 2020
Extended set
---------
Version: 82.00116
Extreme set
---------
Version: 1.00000

---------
Version: 82.00116
IPS Attack Engine

---------
Version: 4.00035
Result: No Updates
Attack Definitions
---------
Version: 16.00969
Last Updated using manual update on Fri Jan 10 10:09:14 2020

---------
Version: 15.00754
---------
Version: 16.00969

---------
Version: 6.00741
---------
Version: 2.00840
Result: No Updates

---------
Version: 82.00115
Botnet Definitions
---------
Version: 4.00667
Last Updated using manual update on Sat Nov 21 00:02:00 2020
Result: No Updates

---------
Version: 2.00629
Result: No Updates

---------
Version: 7.01182

---------
Version: 7.01182

---------
Version: 1.00109
URL White list

---------
Version: 2.00968
IP Geography DB
---------
Version: 2.00065
Certificate Bundle
---------
Version: 1.00019
Modem List
---------
Version: 0.000

---------
Version: 0.00000
FDS Address
---------
10.41.234.161:8890
==========================================================================
AV Engine
---------
Version: 6.00019
Result: No Updates
Virus Definitions
---------
Version: 82.00116
Extended set
---------
Version: 82.00116
Extreme set
---------
Version: 1.00000

---------
Version: 82.00116
IPS Attack Engine

---------
Version: 4.00035
Result: No Updates
Attack Definitions
---------
Version: 16.00969

---------
Version: 15.00754
---------
Version: 16.00969

---------
Version: 6.00741

---------
Version: 2.00840
Result: No Updates

---------
Version: 82.00115
Botnet Definitions
---------
Version: 4.00667
Last Updated using manual update on Fri Sep 11 01:51:14 2020
Result: No Updates

---------
Version: 2.00629
Result: No Updates

---------
Version: 7.01182

---------
Version: 7.01182

---------
Version: 1.00109
URL White list
---------
Version: 2.00968
IP Geography DB
---------
Version: 2.00065
Certificate Bundle
---------
Version: 1.00019
Modem List
---------
Version: 0.000

---------
Version: 0.00000
FDS Address
---------
10.41.234.161:8890
==========================================================================
AV Engine
---------
Version: 6.00019
Result: No Updates
Virus Definitions
---------
Version: 82.00116
Extended set
---------
Version: 82.00116
Extreme set
---------
Version: 1.00000

---------
Version: 82.00116
IPS Attack Engine

---------
Version: 4.00035
Result: No Updates
Attack Definitions
---------
Version: 16.00969

---------
Version: 15.00754
---------
Version: 16.00969

---------
Version: 6.00741

---------
Version: 2.00840
Result: No Updates

---------
Version: 82.00115
Botnet Definitions
---------
Version: 4.00667
Last Updated using manual update on Wed May 6 01:27:14 2020
Result: No Updates

---------
Version: 2.00629
Result: No Updates

---------
Version: 7.01182

---------
Version: 7.01182

---------
Version: 1.00109
URL White list

---------
Version: 2.00968
IP Geography DB
---------
Version: 2.00065
Certificate Bundle
---------
Version: 1.00019
Modem List
---------
Version: 0.000

---------
Version: 0.00000
FDS Address
---------
10.41.234.161:8890
==========================================================================
AV Engine
---------
Version: 6.00019
Result: No Updates
Virus Definitions
---------
Version: 82.00116
Result: No Updates
Extended set
---------
Version: 82.00116
Extreme set
---------
Version: 1.00000

---------
Version: 82.00116
IPS Attack Engine

---------
Version: 4.00035
Result: No Updates
Attack Definitions
---------
Version: 16.00969

---------
Version: 15.00754
---------
Version: 16.00969
---------
Version: 6.00741

---------
Version: 2.00840
Result: No Updates

---------
Version: 82.00115
Botnet Definitions
---------
Version: 4.00667
Last Updated using manual update on Wed May 6 01:27:14 2020
Result: No Updates

---------
Version: 2.00629

---------
Version: 7.01182

---------
Version: 7.01182

---------
Version: 1.00109
URL White list

---------
Version: 2.00968
IP Geography DB
---------
Version: 2.00065
Certificate Bundle
---------
Version: 1.00019
Modem List
---------
Version: 0.000

---------
Version: 0.00000
FDS Address
---------
10.41.234.161:8890
==========================================================================
AV Engine
---------
Version: 6.00019
Result: No Updates
Virus Definitions
---------
Version: 82.00116
Last Updated using scheduled update on Fri Nov 27 01:50:19 2020
Extended set
---------
Version: 82.00116
Extreme set
---------
Version: 1.00000
Last Update Attempt: Fri Apr 3 00:27:54 2020
Result: Connectivity failure

---------
Version: 82.00116
IPS Attack Engine

---------
Version: 4.00035
Result: No Updates
Attack Definitions
---------
Version: 16.00969

---------
Version: 15.00754
Last Updated using scheduled update on Fri Jan 10 01:27:26 2020
Last Update Attempt: Fri Apr 3 00:27:54 2020
Result: Connectivity failure
---------
Version: 16.00969

---------
Version: 6.00741
Result: Unauthorized

---------
Version: 2.00840

---------
Version: 82.00115
Botnet Definitions
---------
Version: 4.00667

---------
Version: 2.00629

---------
Version: 7.01182

---------
Version: 7.01182
---------
Version: 1.00109
Last Updated using scheduled update on Thu Nov 26 01:50:20 2020
Result: No Updates
URL White list

---------
Version: 2.00968
IP Geography DB
---------
Version: 2.00065
Last Updated using scheduled update on Thu Nov 26 01:50:20 2020
Result: No Updates
Certificate Bundle
---------
Version: 1.00019
Last Updated using scheduled update on Wed Aug 19 01:51:19 2020
Result: No Updates
Modem List
---------
Version: 0.000

---------
Version: 0.00000
FDS Address
---------
10.41.234.161:8890

FW-GI-TBS-1 [FIM01] (global) # d sys top 2
#[H#[JRun Time: 167 days, 15 hours and 48 minutes
2U, 0N, 3S, 92I, 0WA, 0HI, 3SI, 0ST; 64471T, 55659F
bcm.user 187 S < 29.8 0.1
authd 276 S 23.8 0.0
confsyncd 319 S 18.9 0.1
miglogd 344 R 3.4 0.1
authd 358 S 1.9 0.0
slbrpcd 297 S 1.4 0.0
authd 357 S 1.4 0.0
authd 359 S 1.4 0.0
authd 356 S 0.9 0.0
forticron 274 S 0.4 0.0
foauthd 277 S 0.4 0.0
miglogd 264 S 0.0 0.1
ipsengine 428 S < 0.0 0.1
miglogd 349 S 0.0 0.1
miglogd 346 S 0.0 0.1
miglogd 348 S 0.0 0.1
miglogd 345 S 0.0 0.1
miglogd 347 S 0.0 0.1
dnsproxy 22086 S 0.0 0.1
cmdbsvr 228 S 0.0 0.0
2U, 0N, 3S, 93I, 0WA, 0HI, 2SI, 0ST; 64471T, 55655F
bcm.user 187 S < 27.3 0.1
authd 276 S 22.8 0.0
quard 301 S 6.9 0.0
miglogd 344 R 3.4 0.1
slbrpcd 297 S 1.9 0.0
authd 358 S 1.9 0.0
authd 357 S 1.4 0.0
authd 359 S 1.4 0.0
authd 356 S 1.4 0.0
foauthd 277 S 0.9 0.0
elbcd 418 S 0.4 0.0
miglogd 264 S 0.0 0.1
miglogd 349 S 0.0 0.1
miglogd 346 S 0.0 0.1
miglogd 348 S 0.0 0.1
miglogd 345 S 0.0 0.1
miglogd 347 S 0.0 0.1
dnsproxy 22086 S 0.0 0.1
2U, 0N, 3S, 93I, 0WA, 0HI, 2SI, 0ST; 64471T, 55655F
bcm.user 187 S < 25.8 0.1
authd 276 S 23.8 0.0
confsyncd 319 R 17.9 0.1
miglogd 344 R 3.4 0.1
authd 358 S 1.9 0.0
slbrpcd 297 S 1.4 0.0
authd 357 S 1.4 0.0
authd 359 S 1.4 0.0
authd 356 S 1.4 0.0
miglogd 264 S 0.4 0.1
newcli 25895 R 0.4 0.0
hatalk 288 S < 0.4 0.0
foauthd 277 S 0.4 0.0
miglogd 349 S 0.0 0.1
miglogd 346 S 0.0 0.1
miglogd 348 S 0.0 0.1
miglogd 345 S 0.0 0.1
miglogd 347 S 0.0 0.1
dnsproxy 22086 S 0.0 0.1
2U, 0N, 4S, 92I, 0WA, 0HI, 2SI, 0ST; 64471T, 55655F
bcm.user 187 S < 27.8 0.1
authd 276 S 23.3 0.0
miglogd 344 R 2.9 0.1
authd 357 S 1.9 0.0
authd 359 S 1.9 0.0
slbrpcd 297 S 1.4 0.0
authd 358 S 1.4 0.0
authd 356 S 1.4 0.0
foauthd 277 S 0.9 0.0
forticron 274 S 0.4 0.0
confsynchbd 318 S 0.4 0.0
lnkmtd 302 S 0.4 0.0
miglogd 264 S 0.0 0.1
miglogd 349 S 0.0 0.1
miglogd 346 S 0.0 0.1
miglogd 348 S 0.0 0.1
miglogd 345 S 0.0 0.1
miglogd 347 S 0.0 0.1
FW-GI-TBS-1 [FIM01] (global) # d##[Kd de ra

==========================================================================
Locale : english
Service : Web-filter
Status : Enable
License : Contract
Service : Antispam
Status : Disable
Service : Virus Outbreak Prevention

Status : Enable
License : Contract
-=- Server List (Fri Nov 27 01:32:05 2020) -=-
IP Weight RTT Flags TZ Packets Curr Lost Total Lost

10.37.208.161 0 0 I 7 4934 0 86
10.41.234.161 0 1 7 4927 0 90
==========================================================================
Locale : english
Status : Enable
License : Contract
Service : Antispam
Status : Disable

Status : Enable
License : Contract

10.41.234.161 675664 4 I 7 3283321369 8 3362695299
10.37.208.161 3841067 4 7 3567956947 0 2126664816
==========================================================================
Locale : english
Status : Enable
License : Contract
Service : Antispam
Status : Disable

Status : Enable
License : Contract

10.41.234.161 175380 4 I 7 3248990969 2 3325820527
10.37.208.161 4394819 4 7 3569554863 11 2128636728
==========================================================================
Locale : english
Status : Enable
License : Contract
Service : Antispam
Status : Disable

Status : Enable
License : Contract

10.41.234.161 1270204 4 I 7 3296042229 11 3352047030
10.37.208.161 4648634 4 7 3553960166 5 2133902342
==========================================================================
Locale : english
Status : Enable
License : Contract
Service : Antispam
Status : Disable
Status : Enable
License : Contract

10.41.234.161 1469096 4 I 7 3269656618 15 3319744979
10.37.208.161 4202926 4 7 3529165757 4 2099818613
==========================================================================
Locale : english
Status : Enable
License : Contract
Service : Antispam
Status : Disable

Status : Enable
License : Contract

10.37.208.161 0 0 I 7 4930 0 80
10.41.234.161 0 1 7 4927 0 91
FW-GI-TBS-1 [FIM01] (global) # end
FW-GI-TBS-1 [FIM01] # c v
FW-GI-TBS-1 [FIM01] (vdom) # ed

<vdom> Virtual Domain Name
DMZ_NO
Egress
Egress-2
Ingress-1
Ingress-2
Ingress-3
OAM
mgmt-vdom
root
FW-GI-TBS-1 [FIM01] (vdom) # ed Egress

current vf=Egress:3
FW-GI-TBS-1 [FIM01] (Egress) # sh fir policy 3

config firewall policy
edit 3
set name "DNS-Outbound-Traffic"
set uuid 74e386ec-008e-51ea-a5c8-39817ea51291
set srcintf "GW-EgressVDOM"
set dstintf "To-EBR-Egress"
set srcaddr "DNS-TBS"
set dstaddr "all"
set action accept
set schedule "always"
set service "DNS" "PING" "TRACEROUTE"
set utm-status enable
set logtraffic all
set ippool enable
set poolname "NAT-DNS-Outbound"
set fsso disable
set av-profile "AV-Harden-General"
set ips-sensor "IPS-Default-Action"
set application-list "Apps-Harden-Specific"
set ssl-ssh-profile "certificate-inspection"
set nat enable
next
end
FW-GI-TBS-1 [FIM01] (Egress) # ge##[K##[K##end
FW-GI-TBS-1 [FIM01] # c g
FW-GI-TBS-1 [FIM01] (global) # get sys perf status

==========================================================================
CPU states: 3% user 4% system 0% nice 93% idle 0% iowait 0% irq 0% softirq
CPU0 states: 0% user 1% system 0% nice 99% idle 0% iowait 0% irq 0% softirq
Memory: 66018736k total, 8326700k used (12.6%), 57512404k free (87.1%), 179632k
freeable (0.3%)
Average network usage: 6199 / 1363 kbps in 1 minute, 6211 / 1373 kbps in 10
minutes, 6181 / 1397 kbps in 30 minutes
Average sessions: 103 sessions in 1 minute, 102 sessions in 10 minutes, 102
sessions in 30 minutes
Average session setup rate: 0 sessions per second in last 1 minute, 0 sessions per
second in last 10 minutes, 0 sessions per second in last 30 minutes
Average NPU sessions: 0 sessions in last 1 minute, 0 sessions in last 10 minutes, 0
sessions in last 30 minutes
Average nTurbo sessions: 0 sessions in last 1 minute, 0 sessions in last 10
minutes, 0 sessions in last 30 minutes
Virus caught: 0 total in 1 minute
IPS attacks blocked: 0 total in 1 minute
Uptime: 167 days, 15 hours, 49 minutes
Dataplane CPU states: 47%
Dataplane memory states: 40%
Dataplane average sessions: 9492975 sessions in 1 minute
Dataplane average session setup rate: 86256 sessions per second in last 1 minute
==========================================================================
freeable (0.3%)
Average network usage: 10101970 / 10133475 kbps in 1 minute, 9485169 / 9517167 kbps
in 10 minutes, 9265530 / 9304093 kbps in 30 minutes
Average sessions: 2364280 sessions in 1 minute, 2268690 sessions in 10 minutes,
2240218 sessions in 30 minutes
Average session setup rate: 22806 sessions per second in last 1 minute, 21311
sessions per second in last 10 minutes, 21024 sessions per second in last 30
minutes
Average NPU sessions: 872281 sessions in last 1 minute, 848744 sessions in last 10
Average nTurbo sessions: 753445 sessions in last 1 minute, 733498 sessions in last
10 minutes, 723459 sessions in last 30 minutes
==========================================================================
freeable (0.3%)
minutes
==========================================================================
freeable (0.2%)
minutes
==========================================================================
freeable (0.2%)
minutes
==========================================================================
freeable (1.4%)
Average network usage: 227833 / 240474 kbps in 1 minute, 225354 / 238120 kbps in 10
minutes, 224438 / 237508 kbps in 30 minutes
Average sessions: 4417 sessions in 1 minute, 4172 sessions in 10 minutes, 4171
sessions in 30 minutes
Average session setup rate: 48 sessions per second in last 1 minute, 49 sessions
per second in last 10 minutes, 49 sessions per second in last 30 minutes
Average NPU sessions: 0 sessions in last 1 minute, 0 sessions in last 10 minutes, 0
sessions in last 30 minutes
Average nTurbo sessions: 0 sessions in last 1 minute, 0 sessions in last 10
Dataplane CPU states: 47%
Dataplane memory states: 40%
Dataplane average sessions: 9492975 sessions in 1 minute
Dataplane average session setup rate: 86256 sessions per second in last 1 minute

FW-GI-TBS-1 [FIM01] (global) # #end
FW-GI-TBS-1 [FIM01] # ed
command parse error before 'ed'
FW-GI-TBS-1 [FIM01] # ed ####[K##[K#####c v
FW-GI-TBS-1 [FIM01] (vdom) # ed

<vdom> Virtual Domain Name
DMZ_NO
Egress
Egress-2
Ingress-1
Ingress-2
Ingress-3
OAM
mgmt-vdom
root
FW-GI-TBS-1 [FIM01] (vdom) # ed ###[K##[K###############################ed Egress

current vf=Egress:3
FW-GI-TBS-1 [FIM01] (Egress) # sh if##[K##[K# fir policy 3

config firewall policy
edit 3
set name "DNS-Outbound-Traffic"
set uuid 74e386ec-008e-51ea-a5c8-39817ea51291
set srcintf "GW-EgressVDOM"
set dstintf "To-EBR-Egress"
set srcaddr "DNS-TBS"
set dstaddr "all"
set action accept
set schedule "always"
set service "DNS" "PING" "TRACEROUTE"
set utm-status enable
set logtraffic all
set ippool enable
set poolname "NAT-DNS-Outbound"
set fsso disable
set av-profile "AV-Harden-General"
set ips-sensor "IPS-Default-Action"
set application-list "Apps-Harden-Specific"
set ssl-ssh-profile "certificate-inspection"
set nat enable
next
end
FW-GI-TBS-1 [FIM01] (Egress) # Timeout

exit

Fim1 27nov

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Fim1 27nov

Uploaded by

Copyright:

Available Formats

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2020.11.

FW-GI-TBS-1 [FIM01] # d##[Kconf global

FW-GI-TBS-1 [FIM01] (global) # fnsysctl -s -l /tmp

FW-GI-TBS-1 [FIM01] (global) # fnsysctl -s -l /tmp############[P-##[1@l-#

FW-GI-TBS-1 [FIM01] (global) # fnsysctll-s -l /tmp##########[P ###[P ###[P # #[1@

FW-GI-TBS-1 [FIM01] (global) # dia ips packet status

PACKET ACTION STATISTICS:

PACKET ERROR STATISTICS:

FW-GI-TBS-1 [FIM01] (global) #

Version: FortiCarrier-7060E v6.0.6,build8853,200422 (GA)

FW-GI-TBS-1 [FIM01] (global) # d automation#[6Dupdate ver

Mobile Malware Definitions

IPS Attack Engine

Attack Extended Definitions

Industrial Attack Definitions

IPS Malicious URL Database

Flow-based Virus Definitions

Botnet Domain Database

Internet-service Database Apps

Internet-service Database Maps

Device and OS Identification

URL White list

FortiGuard Security Rating

Mobile Malware Definitions

IPS Attack Engine

Attack Extended Definitions

Industrial Attack Definitions

Flow-based Virus Definitions

Botnet Domain Database

Internet-service Database Apps

Internet-service Database Maps

Device and OS Identification

URL White list

FortiGuard Security Rating

Mobile Malware Definitions

IPS Attack Engine

Attack Extended Definitions

Industrial Attack Definitions

IPS Malicious URL Database

Flow-based Virus Definitions

Botnet Domain Database

Internet-service Database Apps

Internet-service Database Maps

Device and OS Identification

FortiGuard Security Rating

Mobile Malware Definitions

IPS Attack Engine

Attack Extended Definitions

Industrial Attack Definitions

IPS Malicious URL Database

Flow-based Virus Definitions

Botnet Domain Database

Internet-service Database Apps

Internet-service Database Maps

Device and OS Identification

URL White list

FortiGuard Security Rating

Mobile Malware Definitions

IPS Attack Engine

Attack Extended Definitions

IPS Malicious URL Database

Flow-based Virus Definitions

Botnet Domain Database