config spamfilter bwl
end

config spamfilter profile
end

config firewall policy
   edit [Policy ID]
      set spamfilter-profile [Profile Name]
   next
end

config dlp fp-sensitivity
end

config firewall policy
   edit [Policy ID]
      set utm-inspection-mode [proxy | flow]
   next
end

config firewall internet-service-group
   edit [Internet Service Group Name]
      set member 65537 65538
   next
end

config system admin
 edit [User Name]
  config gui
   edit [Dashboard ID]
     config widget
       edit [Widget ID]
         set type fortiview 
         set report-by source <- removed
         set timeframe realtime <- removed
         set sort-by "bytes" <- removed
         set visualization table <- removed
       next
     end
   next
  end
 next
end

execute ha manage [ID]

config system interface
   edit [Interface Name]
      set scan-botnet-connections [disable | block | monitor]
   next
end

config firewall policy
   edit [Policy ID]
      set scan-botnet-connections [disable | block | monitor]
   next
end

config firewall proxy-policy
   edit [Policy ID]
      set scan-botnet-connections [disable | block | monitor]
   next
end

config firewall interface-policy
   edit [Policy ID]
      set scan-botnet-connections [disable | block | monitor]
   next
end

config firewall sniffer
   edit [Policy ID]
      set scan-botnet-connections [disable | block | monitor]
   next
end

config vpn ipsec phase1-interface
   edit [Tunnel Name]
      set type [static | ddns]
   next
end

config log threat-weight
   config malware
      set botnet-connection [critical | high | medium | low | disable]
   end
end 

config log threat-weight
   config malware
      set botnet-connection [critical | high | medium | low | disable]
   end
end 

config log fortianalyzer setting
   set status enable
   set server [FortiAnalyzer IP address]
end

config firewall ssl-ssh-profile
  edit [Profile Name]
    config ssh
      set ssh-policy-check [enable | disable] 
    end
  next
end

config firewall profile-protocol-option
  edit [Profile Name]
    config http
      set http-policy [enable | disable]
    end
  next
end

config system setting
  set inspection-mode [proxy | flow]
end

config antivirus profile
  edit [Profile Name]
    set inspection-mode [proxy | flow-based]
  next
end

config webfilter profile
  edit [Profile Name]
    set inspection-mode [proxy | flow-based]
  next
end

config spamfilter profile
   edit [Profile Name]
     set flow-based [enable | disable]
   next
end

config dlp sensor
  edit [Sensor Name]
    set flow-based [enable | disable]
  next
end

config router ospf
  config ospf-interface
    edit [Interface Entry Name]
      set interface [Interface]
      set authentication md5 
      set md5-key [Key ID] [Key String Value] 
    next
  end
end

config system virtual-wan-link
   config service
      edit [Priority Rule ID]
         set internet-service enable
         set internet-service-ctrl [Application ID]
         set internet-service-ctrl-group [Group Name]
      next
   end
end

config system virtual-wan-link
   config member
      edit [Sequence Number]
      next
   end
end

config system virtual-wan-link
   config service
      edit [Priority Rule ID]
         set mode [auto | manual | priority | sla]
      next
   end
end

config firewall address
 edit [Address Name]
   set type dynamic
   set comment ''
   set visibility enable
   set associated-interface ''
   set sdn aws
   set filter "tag.Name=publicftp"
 next
end

config system csf
  config fabric-device
    edit [Device Name]
       set device-ip [Device IP]
       set device-type fortimail
       set login [Login Name]
       set password [Login Password]
    next
  end
end

config firewall address
   edit [Address Name]
      set type dynamic
      set color 2
      set sdn azure
      set filter "location=NorthEurope"
   next
end

config global
   set vdom-admin [enable | disable]
end

config wireless-controller wtp-profile
  edit [WTP Profile Name]
    set allowaccess http | https | telnet | ssh
  next
end

config wireless-controller wtp
  edit [WTP ID]
    set override-allowaccess enable 
    set allowaccess http | https | telnet | ssh
  next
end