Tree-5.4.2

Aus Fortinet Wiki
Zur Navigation springen Zur Suche springen

FortiGate-5.4-5.6:FAQ

 --------------- output Tree-5.4.2 --------------- 
 
--  -- system -- [vdom] --*name         (12)
                        |- vcluster-id  (0,4294967295)
                        +- temporary    (0,4294967295)
              |- <global> -- language 
                          |- gui-ipv6 
                          |- gui-certificates 
                          |- gui-custom-language 
                          |- gui-wireless-opensecurity 
                          |- gui-display-hostname 
                          |- gui-lines-per-page         (20,1000)
                          |- admin-https-ssl-versions 
                          |- admin-https-banned-cipher 
                          |- admintimeout       (1,480)
                          |- admin-console-timeout      (0,4294967295)
                          |- admin-concurrent 
                          |- admin-lockout-threshold    (1,10)
                          |- admin-lockout-duration     (1,2147483647)
                          |- refresh    (0,2147483647)
                          |- interval   (0,4294967295)
                          |- failtime   (0,4294967295)
                          |- daily-restart 
                          |- restart-time 
                          |- radius-port        (0,4294967295)
                          |- admin-login-max    (1,100)
                          |- remoteauthtimeout  (0,300)
                          |- ldapconntimeout    (0,2147483647)
                          |- batch-cmdb 
                          |- max-dlpstat-memory         (0,4294967295)
                          |- dst 
                          |- timezone 
                          |- ntpserver  (64)
                          |- ntpsync 
                          |- syncinterval       (1,1440)
                          |- traffic-priority 
                          |- traffic-priority-level 
                          |- anti-replay 
                          |- send-pmtu-icmp 
                          |- honor-df 
                          |- revision-image-auto-backup 
                          |- revision-backup-on-logout 
                          |- management-vdom    (12)
                          |- hostname   (36)
                          |- alias      (36)
                          |- strong-crypto 
                          |- ssh-cbc-cipher 
                          |- ssh-hmac-md5 
                          |- snat-route-change 
                          |- cli-audit-log 
                          |- dh-params 
                          |- fds-statistics 
                          |- fds-statistics-period      (1,1440)
                          |- multicast-forward 
                          |- mc-ttl-notchange 
                          |- asymroute 
                          |- tcp-option 
                          |- phase1-rekey 
                          |- lldp-transmission 
                          |- explicit-proxy-auth-timeout        (1,600)
                          |- sys-perf-log-interval      (0,4294967295)
                          |- check-protocol-header 
                          |- vip-arp-range 
                          |- optimize 
                          |- reset-sessionless-tcp 
                          |- allow-traffic-redirect 
                          |- strict-dirty-session-check 
                          |- tcp-halfclose-timer        (0,4294967295)
                          |- tcp-halfopen-timer         (0,4294967295)
                          |- tcp-timewait-timer         (0,300)
                          |- udp-idle-timer     (0,4294967295)
                          |- block-session-timer        (1,300)
                          |- ip-src-port-range 
                          |- pre-login-banner 
                          |- post-login-banner 
                          |- tftp 
                          |- av-failopen 
                          |- av-failopen-session 
                          |- check-reset-range 
                          |- vdom-admin 
                          |- admin-port         (1,65535)
                          |- admin-sport        (1,65535)
                          |- admin-https-redirect 
                          |- admin-ssh-password 
                          |- admin-ssh-port     (1,65535)
                          |- admin-ssh-grace-time       (10,3600)
                          |- admin-ssh-v1 
                          |- admin-telnet-port  (1,65535)
                          |- admin-maintainer 
                          |- admin-reset-button 
                          |- admin-server-cert  (36)
                          |- user-server-cert   (36)
                          |- admin-https-pki-required 
                          |- wifi-certificate   (36)
                          |- wifi-ca-certificate        (36)
                          |- auth-http-port     (1,65535)
                          |- auth-https-port    (1,65535)
                          |- auth-keepalive 
                          |- policy-auth-concurrent     (0,100)
                          |- auth-cert  (36)
                          |- clt-cert-req 
                          |- fortiservice-port  (1,65535)
                          |- endpoint-control-portal-port       (1,65535)
                          |- endpoint-control-fds-access 
                          |- tp-mc-skip-policy 
                          |- cfg-save 
                          |- cfg-revert-timeout         (10,2147483647)
                          |- reboot-upon-config-restore 
                          |- admin-scp 
                          |- registration-notification 
                          |- service-expire-notification 
                          |- wireless-controller 
                          |- wireless-controller-port   (1024,49150)
                          |- fortiextender-data-port    (1024,49150)
                          |- fortiextender 
                          |- switch-controller 
                          |- switch-controller-reserved-network 
                          |- proxy-worker-count         (1,4)
                          |- scanunit-count     (1,4)
                          |- ssl-worker-count   (0,4294967295)
                          |- fgd-alert-subscription 
                          |- ipsec-hmac-offload 
                          |- ipv6-accept-dad    (0,2)
                          |- csr-ca-attribute 
                          |- wimax-4g-usb 
                          |- cert-chain-max     (0,4294967295)
                          |- sslvpn-max-worker-count    (1,4)
                          |- sslvpn-kxp-hardware-acceleration 
                          |- sslvpn-cipher-hardware-acceleration 
                          |- sslvpn-plugin-version-check 
                          |- two-factor-ftk-expiry      (60,600)
                          |- two-factor-email-expiry    (30,300)
                          |- two-factor-sms-expiry      (30,300)
                          |- two-factor-fac-expiry      (10,3600)
                          |- two-factor-ftm-expiry      (1,168)
                          |- virtual-server-count       (1,4)
                          |- wad-worker-count   (1,4)
                          |- login-timestamp 
                          |- miglogd-children   (0,15)
                          |- special-file-23-support 
                          |- log-uuid 
                          |- arp-max-entry      (131072,2147483647)
                          |- av-affinity        (20)
                          |- miglog-affinity    (20)
                          |- ndp-max-entry      (0,4294967295)
                          |- br-fdb-max-entry   (8192,2147483647)
                          |- max-route-cache-size       (0,2147483647)
                          |- ipsec-asic-offload 
                          |- device-idle-timeout        (30,31536000)
                          |- device-identification-active-scan-delay    (20,3600)
                          |- compliance-check 
                          |- compliance-check-time 
                          |- gui-device-latitude        (20)
                          |- gui-device-longitude       (20)
                          |- private-data-encryption 
                          |- auto-auth-extension-device 
                          |- gui-theme 
                          +- igmp-state-limit   (96,64000)
              |- [accprofile] --*name   (36)
                              |- scope 
                              |- comments 
                              |- mntgrp 
                              |- admingrp 
                              |- updategrp 
                              |- authgrp 
                              |- sysgrp 
                              |- netgrp 
                              |- loggrp 
                              |- routegrp 
                              |- fwgrp 
                              |- vpngrp 
                              |- utmgrp 
                              |- endpoint-control-grp 
                              |- wifi 
                              |- <fwgrp-permission> -- policy 
                                                    |- address 
                                                    |- service 
                                                    |- schedule 
                                                    |- packet-capture 
                                                    +- others 
                              |- <loggrp-permission> -- config 
                                                     |- data-access 
                                                     |- report-access 
                                                     +- threat-weight 
                              +- <utmgrp-permission> -- antivirus 
                                                     |- ips 
                                                     |- webfilter 
                                                     |- spamfilter 
                                                     |- data-loss-prevention 
                                                     |- application-control 
                                                     |- icap 
                                                     |- casi 
                                                     |- voip 
                                                     |- waf 
                                                     +- dnsfilter 
              |- <npu> -- enc-offload-antireplay 
                       |- dec-offload-antireplay 
                       +- offload-ipsec-host 
              |- [vdom-link] --*name    (12)
                             |- vcluster 
                             +- type 
              |- [switch-interface] --*name     (16)
                                    |- vdom     (12)
                                    |- span-dest-port   (16)
                                    |- [span-source-port] --*interface-name     (65)
                                    |- [member] --*interface-name       (65)
                                    |- type 
                                    |- intra-switch-policy 
                                    |- span 
                                    +- span-direction 
              |- [object-tag] --*name   (64)
              |- <lte-modem> -- status 
                             |- extra-init      (128 xss)
                             |- authtype 
                             |- username        (64 xss)
                             |- passwd 
                             |- apn     (128 xss)
                             |- modem-port      (0,10)
                             |- mode 
                             |- holddown-timer  (10,60)
                             +- interface       (64)
              |- [interface] --*name    (16)
                             |- vdom    (12)
                             |- cli-conn-status         (0,4294967295)
                             |- mode 
                             |- distance        (1,255)
                             |- priority        (0,4294967295)
                             |- dhcp-relay-service 
                             |- dhcp-relay-ip 
                             |- dhcp-relay-type 
                             |- ip 
                             |- allowaccess 
                             |- gwdetect 
                             |- ping-serv-status        (0,4294967295)
                             |- detectserver 
                             |- detectprotocol 
                             |- ha-priority     (1,50)
                             |- fail-detect 
                             |- fail-detect-option 
                             |- fail-alert-method 
                             |- fail-action-on-extender 
                             |- [fail-alert-interfaces] --*name         (65)
                             |- dhcp-client-identifier  (49)
                             |- ipunnumbered 
                             |- username        (65 xss)
                             |- pppoe-unnumbered-negotiate 
                             |- password 
                             |- idle-timeout    (0,4294967295)
                             |- detected-peer-mtu       (0,4294967295)
                             |- disc-retry-timeout      (0,4294967295)
                             |- padt-retry-timeout      (0,4294967295)
                             |- service-name    (64)
                             |- ac-name         (64)
                             |- lcp-echo-interval       (0,4294967295)
                             |- lcp-max-echo-fails      (0,4294967295)
                             |- defaultgw 
                             |- dns-server-override 
                             |- auth-type 
                             |- pptp-client 
                             |- pptp-user       (65)
                             |- pptp-password 
                             |- pptp-server-ip 
                             |- pptp-auth-type 
                             |- pptp-timeout    (0,4294967295)
                             |- arpforward 
                             |- ndiscforward 
                             |- broadcast-forward 
                             |- bfd 
                             |- bfd-desired-min-tx      (0,4294967295)
                             |- bfd-detect-mult         (0,4294967295)
                             |- bfd-required-min-rx     (0,4294967295)
                             |- l2forward 
                             |- icmp-redirect 
                             |- vlanforward 
                             |- stpforward 
                             |- stpforward-mode 
                             |- ips-sniffer-mode 
                             |- ident-accept 
                             |- ipmac 
                             |- subst 
                             |- macaddr 
                             |- substitute-dst-mac 
                             |- speed 
                             |- status 
                             |- netbios-forward 
                             |- wins-ip 
                             |- type 
                             |- dedicated-to 
                             |- trust-ip-1 
                             |- trust-ip-2 
                             |- trust-ip-3 
                             |- trust-ip6-1 
                             |- trust-ip6-2 
                             |- trust-ip6-3 
                             |- mtu-override 
                             |- mtu     (0,4294967295)
                             |- wccp 
                             |- netflow-sampler 
                             |- sflow-sampler 
                             |- drop-overlapped-fragment 
                             |- drop-fragment 
                             |- scan-botnet-connections 
                             |- sample-rate     (10,99999)
                             |- polling-interval        (1,255)
                             |- sample-direction 
                             |- explicit-web-proxy 
                             |- explicit-ftp-proxy 
                             |- tcp-mss         (0,4294967295)
                             |- mediatype 
                             |- fp-anomaly 
                             |- inbandwidth     (0,16776000)
                             |- outbandwidth    (0,16776000)
                             |- spillover-threshold     (0,16776000)
                             |- ingress-spillover-threshold     (0,16776000)
                             |- weight  (0,255)
                             |- interface       (16)
                             |- external 
                             |- vlanid  (0,4294967295)
                             |- forward-domain  (0,2147483647)
                             |- remote-ip 
                             |- [managed-device] --*name        (65)
                             |- devindex        (0,4294967295)
                             |- vindex  (0,4294967295)
                             |- switch  (16)
                             |- description 
                             |- alias   (26)
                             |- l2tp-client 
                             |- <l2tp-client-settings> -- user  (128)
                                                       |- password 
                                                       |- peer-host     (256)
                                                       |- peer-mask 
                                                       |- peer-port     (1,65535)
                                                       |- auth-type 
                                                       |- mtu   (40,65535)
                                                       |- distance      (1,255)
                                                       |- priority      (0,4294967295)
                                                       |- defaultgw 
                                                       +- ip 
                             |- security-mode 
                             |- security-mac-auth-bypass 
                             |- security-8021x-mode 
                             |- security-8021x-master   (16)
                             |- security-8021x-dynamic-vlan-id  (0,4094)
                             |- security-external-web   (128)
                             |- security-external-logout        (128)
                             |- replacemsg-override-group       (36)
                             |- security-redirect-url   (128)
                             |- security-exempt-list    (36)
                             |- [security-groups] --*name       (65)
                             |- stp 
                             |- stp-ha-slave 
                             |- device-identification 
                             |- device-user-identification 
                             |- device-identification-active-scan 
                             |- device-access-list      (36)
                             |- device-netscan 
                             |- lldp-transmission 
                             |- fortiheartbeat 
                             |- broadcast-forticlient-discovery 
                             |- endpoint-compliance 
                             |- estimated-upstream-bandwidth    (0,4294967295)
                             |- estimated-downstream-bandwidth  (0,4294967295)
                             |- vrrp-virtual-mac 
                             |- [vrrp] --*vrid  (1,255)
                                       |- vrgrp         (1,65535)
                                       |- vrip 
                                       |- priority      (1,255)
                                       |- adv-interval  (1,255)
                                       |- start-time    (1,255)
                                       |- preempt 
                                       |- vrdst 
                                       +- status 
                             |- role 
                             |- snmp-index      (0,4294967295)
                             |- secondary-IP 
                             |- [secondaryip] --*id     (0,4294967295)
                                              |- ip 
                                              |- allowaccess 
                                              |- gwdetect 
                                              |- ping-serv-status       (0,4294967295)
                                              |- detectserver 
                                              |- detectprotocol 
                                              +- ha-priority    (1,50)
                             |- auto-auth-extension-device 
                             |- ap-discover 
                             |- fortilink 
                             |- fortilink-stacking 
                             |- fortilink-split-interface 
                             |- internal        (0,4294967295)
                             |- fortilink-backup-link   (0,4294967295)
                             |- color   (0,32)
                             +- <ipv6> -- ip6-mode 
                                       |- ip6-dns-server-override 
                                       |- ip6-address 
                                       |- [ip6-extra-addr] --*prefix 
                                       |- ip6-allowaccess 
                                       |- ip6-send-adv 
                                       |- ip6-manage-flag 
                                       |- ip6-other-flag 
                                       |- ip6-max-interval      (0,4294967295)
                                       |- ip6-min-interval      (0,4294967295)
                                       |- ip6-link-mtu  (0,4294967295)
                                       |- ip6-reachable-time    (0,4294967295)
                                       |- ip6-retrans-time      (0,4294967295)
                                       |- ip6-default-life      (0,4294967295)
                                       |- ip6-hop-limit         (0,4294967295)
                                       |- autoconf 
                                       |- ip6-upstream-interface        (16)
                                       |- ip6-subnet 
                                       |- [ip6-prefix-list] --*prefix 
                                                            |- autonomous-flag 
                                                            |- onlink-flag 
                                                            |- valid-life-time  (0,4294967295)
                                                            +- preferred-life-time      (0,4294967295)
                                       |- [ip6-delegated-prefix-list] --*prefix-id      (0,4294967295)
                                                                      |- upstream-interface     (16)
                                                                      |- autonomous-flag 
                                                                      |- onlink-flag 
                                                                      +- subnet 
                                       |- dhcp6-relay-service 
                                       |- dhcp6-relay-type 
                                       |- dhcp6-relay-ip 
                                       |- dhcp6-client-options 
                                       |- dhcp6-prefix-delegation 
                                       |- dhcp6-prefix-hint 
                                       |- dhcp6-prefix-hint-plt         (0,4294967295)
                                       +- dhcp6-prefix-hint-vlt         (0,4294967295)
              |- [physical-switch] --*name      (16)
                                   |- age-enable 
                                   |- age-val   (0,4294967295)
                                   +- [port] --*name    (16)
                                             |- speed 
                                             +- status 
              |- [virtual-switch] --*name       (16)
                                  |- physical-switch    (16)
                                  |- [port] --*name     (16)
                                            |- speed 
                                            |- status 
                                            +- alias    (26)
                                  |- span 
                                  |- span-source-port   (16)
                                  |- span-dest-port     (16)
                                  +- span-direction 
              |- <stp> -- region-name   (32)
                       |- status 
                       |- config-revision       (0,4294967295)
                       |- switch-priority 
                       |- hello-time    (0,4294967295)
                       |- forward-delay         (0,4294967295)
                       |- max-age       (0,4294967295)
                       +- max-hops      (0,4294967295)
              |- <password-policy> -- status 
                                   |- apply-to 
                                   |- minimum-length    (8,128)
                                   |- min-lower-case-letter     (0,128)
                                   |- min-upper-case-letter     (0,128)
                                   |- min-non-alphanumeric      (0,128)
                                   |- min-number        (0,128)
                                   |- change-4-characters 
                                   |- expire-status 
                                   |- expire-day        (1,999)
                                   +- reuse-password 
              |- <password-policy-guest-admin> -- status 
                                               |- apply-to 
                                               |- minimum-length        (8,128)
                                               |- min-lower-case-letter         (0,128)
                                               |- min-upper-case-letter         (0,128)
                                               |- min-non-alphanumeric  (0,128)
                                               |- min-number    (0,128)
                                               |- change-4-characters 
                                               |- expire-status 
                                               |- expire-day    (1,999)
                                               +- reuse-password 
              |- [sms-server] --*name   (36)
                              +- mail-server    (64 xss)
              |- [custom-language] --*name      (36)
                                   |- filename  (64)
                                   +- comments 
              |- [admin] --*name        (36)
                         |- wildcard 
                         |- remote-auth 
                         |- remote-group        (36)
                         |- password 
                         |- peer-auth 
                         |- peer-group  (36)
                         |- trusthost1 
                         |- trusthost2 
                         |- trusthost3 
                         |- trusthost4 
                         |- trusthost5 
                         |- trusthost6 
                         |- trusthost7 
                         |- trusthost8 
                         |- trusthost9 
                         |- trusthost10 
                         |- ip6-trusthost1 
                         |- ip6-trusthost2 
                         |- ip6-trusthost3 
                         |- ip6-trusthost4 
                         |- ip6-trusthost5 
                         |- ip6-trusthost6 
                         |- ip6-trusthost7 
                         |- ip6-trusthost8 
                         |- ip6-trusthost9 
                         |- ip6-trusthost10 
                         |- accprofile  (36)
                         |- allow-remove-admin-session 
                         |- comments 
                         |- hidden      (0,4294967295)
                         |- [vdom] --*name      (65)
                         |- is-admin    (0,4294967295)
                         |- ssh-public-key1 
                         |- ssh-public-key2 
                         |- ssh-public-key3 
                         |- ssh-certificate     (36)
                         |- schedule    (36)
                         |- accprofile-override 
                         |- radius-vdom-override 
                         |- password-expire 
                         |- force-password-change 
                         |- [dashboard] --*id   (0,4294967295)
                                        |- widget-type 
                                        |- name         (36)
                                        |- column       (1,2)
                                        |- refresh-interval     (0,4294967295)
                                        |- time-period  (0,4294967295)
                                        |- chart-color  (0,32)
                                        |- top-n        (10,100)
                                        |- sort-by 
                                        |- report-by 
                                        |- ip-version 
                                        |- resolve-host 
                                        |- resolve-service 
                                        |- aggregate-hosts 
                                        |- resolve-apps 
                                        |- display-format 
                                        |- view-type 
                                        |- cpu-display-type 
                                        |- interface    (16)
                                        |- dst-interface        (16)
                                        |- tr-history-period1   (0,4294967295)
                                        |- tr-history-period2   (0,4294967295)
                                        |- tr-history-period3   (0,4294967295)
                                        |- vdom         (12)
                                        |- refresh 
                                        |- status 
                                        |- protocols    (0,4294967295)
                                        |- show-system-restart 
                                        |- show-conserve-mode 
                                        |- show-firmware-change 
                                        |- show-fds-update 
                                        |- show-device-update 
                                        |- show-fds-quota 
                                        |- show-disk-failure 
                                        |- show-power-supply 
                                        |- show-admin-auth 
                                        |- show-fgd-alert 
                                        |- show-fcc-license 
                                        +- show-policy-overflow 
                         |- two-factor 
                         |- fortitoken  (17)
                         |- email-to    (64)
                         |- sms-server 
                         |- sms-custom-server   (36)
                         |- sms-phone   (16)
                         |- guest-auth 
                         |- [guest-usergroups] --*name  (65 xss)
                         |- guest-lang  (36)
                         |- history0 
                         |- history1 
                         |- [login-time] --*usr-name    (36)
                                         |- last-login 
                                         +- last-failed-login 
                         |- [gui-global-menu-favorites] --*id   (65 xss)
                         +- [gui-vdom-menu-favorites] --*id     (65 xss)
              |- <settings> -- comments 
                            |- opmode 
                            |- inspection-mode 
                            |- http-external-dest 
                            |- firewall-session-dirty 
                            |- manageip 
                            |- gateway 
                            |- ip 
                            |- manageip6 
                            |- gateway6 
                            |- ip6 
                            |- device   (36)
                            |- bfd 
                            |- bfd-desired-min-tx       (1,100000)
                            |- bfd-required-min-rx      (1,100000)
                            |- bfd-detect-mult  (1,50)
                            |- bfd-dont-enforce-src-port 
                            |- utf8-spam-tagging 
                            |- wccp-cache-engine 
                            |- vpn-stats-log 
                            |- vpn-stats-period         (60,86400)
                            |- v4-ecmp-mode 
                            |- mac-ttl  (300,8640000)
                            |- fw-session-hairpin 
                            |- snat-hairpin-traffic 
                            |- dhcp-proxy 
                            |- dhcp-server-ip 
                            |- dhcp6-server-ip 
                            |- central-nat 
                            |- [gui-default-policy-columns] --*name     (65 xss)
                            |- lldp-transmission 
                            |- asymroute 
                            |- asymroute-icmp 
                            |- tcp-session-without-syn 
                            |- ses-denied-traffic 
                            |- strict-src-check 
                            |- asymroute6 
                            |- asymroute6-icmp 
                            |- sip-helper 
                            |- sip-nat-trace 
                            |- status 
                            |- sip-tcp-port     (0,65535)
                            |- sip-udp-port     (0,65535)
                            |- sccp-port        (0,65535)
                            |- multicast-forward 
                            |- multicast-ttl-notchange 
                            |- multicast-skip-policy 
                            |- allow-subnet-overlap 
                            |- deny-tcp-with-icmp 
                            |- ecmp-max-paths   (0,4294967295)
                            |- discovered-device-timeout        (1,365)
                            |- email-portal-check-dns 
                            |- default-voip-alg-mode 
                            |- gui-icap 
                            |- gui-nat46-64 
                            |- gui-implicit-policy 
                            |- gui-dns-database 
                            |- gui-load-balance 
                            |- gui-multicast-policy 
                            |- gui-dos-policy 
                            |- gui-object-colors 
                            |- gui-replacement-message-groups 
                            |- gui-voip-profile 
                            |- gui-ap-profile 
                            |- gui-dynamic-profile-display 
                            |- gui-ipsec-manual-key 
                            |- gui-local-in-policy 
                            |- gui-explicit-proxy 
                            |- gui-dynamic-routing 
                            |- gui-dlp 
                            |- gui-sslvpn-personal-bookmarks 
                            |- gui-sslvpn-realms 
                            |- gui-policy-based-ipsec 
                            |- gui-threat-weight 
                            |- gui-multiple-utm-profiles 
                            |- gui-spamfilter 
                            |- gui-application-control 
                            |- gui-casi 
                            |- gui-ips 
                            |- gui-endpoint-control 
                            |- gui-endpoint-on-net 
                            |- gui-dhcp-advanced 
                            |- gui-vpn 
                            |- gui-wireless-controller 
                            |- gui-switch-controller 
                            |- gui-fortiap-split-tunneling 
                            |- gui-webfilter-advanced 
                            |- gui-traffic-shaping 
                            |- gui-wan-load-balancing 
                            |- gui-antivirus 
                            |- gui-webfilter 
                            |- gui-dnsfilter 
                            |- gui-waf-profile 
                            |- gui-fortiextender-controller 
                            |- gui-advanced-policy 
                            |- gui-allow-unnamed-policy 
                            |- gui-email-collection 
                            |- gui-domain-ip-reputation 
                            |- gui-multiple-interface-policy 
                            |- gui-policy-learning 
                            |- compliance-check 
                            |- ike-session-resume 
                            +- ike-quick-crash-detect 
              |- [sit-tunnel] --*name   (16)
                              |- source 
                              |- destination 
                              |- ip6 
                              |- interface      (16)
                              +- auto-asic-offload 
              |- <fsso-polling> -- status 
                                |- listening-port       (1,65535)
                                |- authentication 
                                +- auth-password 
              |- <ha> -- group-id       (0,255)
                      |- group-name     (33)
                      |- mode 
                      |- password 
                      |- key 
                      |- hbdev 
                      |- session-sync-dev 
                      |- route-ttl      (5,3600)
                      |- route-wait     (0,3600)
                      |- route-hold     (0,3600)
                      |- load-balance-all 
                      |- sync-config 
                      |- encryption 
                      |- authentication 
                      |- hb-interval    (1,20)
                      |- hb-lost-threshold      (1,60)
                      |- helo-holddown  (5,300)
                      |- gratuitous-arps 
                      |- arps   (1,60)
                      |- arps-interval  (1,20)
                      |- session-pickup 
                      |- session-pickup-connectionless 
                      |- session-pickup-expectation 
                      |- session-pickup-nat 
                      |- session-pickup-delay 
                      |- session-sync-daemon-number     (1,15)
                      |- link-failed-signal 
                      |- uninterruptible-upgrade 
                      |- standalone-mgmt-vdom 
                      |- ha-mgmt-status 
                      |- ha-mgmt-interface      (16)
                      |- ha-mgmt-interface-gateway 
                      |- ha-mgmt-interface-gateway6 
                      |- ha-eth-type    (5)
                      |- hc-eth-type    (5)
                      |- l2ep-eth-type  (5)
                      |- ha-uptime-diff-margin  (1,65535)
                      |- standalone-config-sync 
                      |- vcluster2 
                      |- vcluster-id    (0,4294967295)
                      |- override 
                      |- priority       (0,255)
                      |- override-wait-time     (0,3600)
                      |- schedule 
                      |- weight 
                      |- cpu-threshold 
                      |- memory-threshold 
                      |- http-proxy-threshold 
                      |- ftp-proxy-threshold 
                      |- imap-proxy-threshold 
                      |- nntp-proxy-threshold 
                      |- pop3-proxy-threshold 
                      |- smtp-proxy-threshold 
                      |- monitor 
                      |- pingserver-monitor-interface 
                      |- pingserver-failover-threshold  (0,50)
                      |- pingserver-slave-force-reset 
                      |- pingserver-flip-timeout        (6,2147483647)
                      |- vdom 
                      |- <secondary-vcluster> -- vcluster-id    (0,4294967295)
                                              |- override 
                                              |- priority       (0,255)
                                              |- override-wait-time     (0,3600)
                                              |- monitor 
                                              |- pingserver-monitor-interface 
                                              |- pingserver-failover-threshold  (0,50)
                                              |- pingserver-slave-force-reset 
                                              +- vdom 
                      +- ha-direct 
              |- <ha-monitor> -- monitor-vlan 
                              |- vlan-hb-interval       (1,30)
                              +- vlan-hb-lost-threshold         (1,60)
              |- [storage] --*name      (36)
                           |- partition         (17)
                           |- media-type        (5)
                           |- device    (13)
                           +- size      (0,4294967295)
              |- <dedicated-mgmt> -- status 
                                  |- interface  (16)
                                  |- default-gateway 
                                  |- dhcp-server 
                                  |- dhcp-netmask 
                                  |- dhcp-start-ip 
                                  +- dhcp-end-ip 
              |- [arp-table] --*id      (0,4294967295)
                             |- interface       (16)
                             |- ip 
                             +- mac 
              |- [ipv6-neighbor-cache] --*id    (0,4294967295)
                                       |- interface     (16)
                                       |- ipv6 
                                       +- mac 
              |- <dns> -- primary 
                       |- secondary 
                       |- domain        (128)
                       |- ip6-primary 
                       |- ip6-secondary 
                       |- dns-cache-limit       (0,4294967295)
                       |- dns-cache-ttl         (60,86400)
                       |- cache-notfound-responses 
                       +- source-ip 
              |- [ddns] --*ddnsid       (0,4294967295)
                        |- ddns-server 
                        |- ddns-server-ip 
                        |- ddns-zone    (65)
                        |- ddns-ttl     (60,86400)
                        |- ddns-auth 
                        |- ddns-keyname         (65)
                        |- ddns-key 
                        |- ddns-domain  (65)
                        |- ddns-username        (65)
                        |- ddns-sn      (65)
                        |- ddns-password 
                        |- use-public-ip 
                        |- clear-text 
                        |- ssl-certificate      (36)
                        |- bound-ip 
                        +- [monitor-interface] --*interface-name        (65)
              |- <sflow> -- collector-ip 
                         |- collector-port      (0,65535)
                         +- source-ip 
              |- <vdom-sflow> -- vdom-sflow 
                              |- collector-ip 
                              |- collector-port         (0,65535)
                              +- source-ip 
              |- <netflow> -- collector-ip 
                           |- collector-port    (0,65535)
                           |- source-ip 
                           |- active-flow-timeout       (1,60)
                           |- inactive-flow-timeout     (10,600)
                           |- template-tx-timeout       (1,1440)
                           +- template-tx-counter       (10,6000)
              |- <vdom-netflow> -- vdom-netflow 
                                |- collector-ip 
                                |- collector-port       (0,65535)
                                +- source-ip 
              |- <vdom-dns> -- vdom-dns 
                            |- primary 
                            |- secondary 
                            |- ip6-primary 
                            |- ip6-secondary 
                            +- source-ip 
              |- [replacemsg-image] --*name     (24)
                                    |- image-type 
                                    +- image-base64 
              |- replacemsg -- [mail] --*msg-type       (29)
                                      |- buffer 
                                      |- header 
                                      +- format 
                            |- [http] --*msg-type       (29)
                                      |- buffer 
                                      |- header 
                                      +- format 
                            |- [webproxy] --*msg-type   (29)
                                          |- buffer 
                                          |- header 
                                          +- format 
                            |- [ftp] --*msg-type        (29)
                                     |- buffer 
                                     |- header 
                                     +- format 
                            |- [nntp] --*msg-type       (29)
                                      |- buffer 
                                      |- header 
                                      +- format 
                            |- [fortiguard-wf] --*msg-type      (29)
                                               |- buffer 
                                               |- header 
                                               +- format 
                            |- [spam] --*msg-type       (29)
                                      |- buffer 
                                      |- header 
                                      +- format 
                            |- [alertmail] --*msg-type  (29)
                                           |- buffer 
                                           |- header 
                                           +- format 
                            |- [admin] --*msg-type      (29)
                                       |- buffer 
                                       |- header 
                                       +- format 
                            |- [auth] --*msg-type       (29)
                                      |- buffer 
                                      |- header 
                                      +- format 
                            |- [sslvpn] --*msg-type     (29)
                                        |- buffer 
                                        |- header 
                                        +- format 
                            |- [ec] --*msg-type         (29)
                                    |- buffer 
                                    |- header 
                                    +- format 
                            |- [device-detection-portal] --*msg-type    (29)
                                                         |- buffer 
                                                         |- header 
                                                         +- format 
                            |- [nac-quar] --*msg-type   (29)
                                          |- buffer 
                                          |- header 
                                          +- format 
                            |- [traffic-quota] --*msg-type      (29)
                                               |- buffer 
                                               |- header 
                                               +- format 
                            +- [utm] --*msg-type        (29)
                                     |- buffer 
                                     |- header 
                                     +- format 
              |- [replacemsg-group] --*name     (36)
                                    |- comment 
                                    |- group-type 
                                    |- [mail] --*msg-type       (29)
                                              |- buffer 
                                              |- header 
                                              +- format 
                                    |- [http] --*msg-type       (29)
                                              |- buffer 
                                              |- header 
                                              +- format 
                                    |- [webproxy] --*msg-type   (29)
                                                  |- buffer 
                                                  |- header 
                                                  +- format 
                                    |- [ftp] --*msg-type        (29)
                                             |- buffer 
                                             |- header 
                                             +- format 
                                    |- [nntp] --*msg-type       (29)
                                              |- buffer 
                                              |- header 
                                              +- format 
                                    |- [fortiguard-wf] --*msg-type      (29)
                                                       |- buffer 
                                                       |- header 
                                                       +- format 
                                    |- [spam] --*msg-type       (29)
                                              |- buffer 
                                              |- header 
                                              +- format 
                                    |- [alertmail] --*msg-type  (29)
                                                   |- buffer 
                                                   |- header 
                                                   +- format 
                                    |- [admin] --*msg-type      (29)
                                               |- buffer 
                                               |- header 
                                               +- format 
                                    |- [auth] --*msg-type       (29)
                                              |- buffer 
                                              |- header 
                                              +- format 
                                    |- [sslvpn] --*msg-type     (29)
                                                |- buffer 
                                                |- header 
                                                +- format 
                                    |- [ec] --*msg-type         (29)
                                            |- buffer 
                                            |- header 
                                            +- format 
                                    |- [device-detection-portal] --*msg-type    (29)
                                                                 |- buffer 
                                                                 |- header 
                                                                 +- format 
                                    |- [nac-quar] --*msg-type   (29)
                                                  |- buffer 
                                                  |- header 
                                                  +- format 
                                    |- [traffic-quota] --*msg-type      (29)
                                                       |- buffer 
                                                       |- header 
                                                       +- format 
                                    |- [utm] --*msg-type        (29)
                                             |- buffer 
                                             |- header 
                                             +- format 
                                    +- [custom-message] --*msg-type     (29)
                                                        |- buffer 
                                                        |- header 
                                                        +- format 
              |- snmp -- <sysinfo> -- status 
                                   |- engine-id         (25)
                                   |- description       (36)
                                   |- contact-info      (36)
                                   |- location  (128 xss)
                                   |- trap-high-cpu-threshold   (0,4294967295)
                                   |- trap-low-memory-threshold         (0,4294967295)
                                   +- trap-log-full-threshold   (0,4294967295)
                      |- [community] --*id      (0,4294967295)
                                     |- name    (36)
                                     |- status 
                                     |- [hosts] --*id   (0,4294967295)
                                                |- source-ip 
                                                |- ip 
                                                |- interface    (36)
                                                |- ha-direct 
                                                +- host-type 
                                     |- [hosts6] --*id  (0,4294967295)
                                                 |- source-ipv6 
                                                 |- ipv6 
                                                 |- ha-direct 
                                                 |- interface   (36)
                                                 +- host-type 
                                     |- query-v1-status 
                                     |- query-v1-port   (0,4294967295)
                                     |- query-v2c-status 
                                     |- query-v2c-port  (0,4294967295)
                                     |- trap-v1-status 
                                     |- trap-v1-lport   (0,4294967295)
                                     |- trap-v1-rport   (0,4294967295)
                                     |- trap-v2c-status 
                                     |- trap-v2c-lport  (0,4294967295)
                                     |- trap-v2c-rport  (0,4294967295)
                                     +- events 
                      +- [user] --*name         (33)
                                |- status 
                                |- trap-status 
                                |- trap-lport   (0,4294967295)
                                |- trap-rport   (0,4294967295)
                                |- queries 
                                |- query-port   (0,4294967295)
                                |- notify-hosts 
                                |- notify-hosts6 
                                |- source-ip 
                                |- source-ipv6 
                                |- ha-direct 
                                |- events 
                                |- security-level 
                                |- auth-proto 
                                |- auth-pwd 
                                |- priv-proto 
                                +- priv-pwd 
              |- autoupdate -- <push-update> -- status 
                                             |- override 
                                             |- address 
                                             +- port    (0,65535)
                            |- <schedule> -- status 
                                          |- frequency 
                                          |- time 
                                          +- day 
                            +- <tunneling> -- status 
                                           |- address   (64)
                                           |- port      (0,65535)
                                           |- username  (50)
                                           +- password 
              |- <session-ttl> -- default 
                               +- [port] --*id  (0,65535)
                                         |- protocol    (0,255)
                                         |- start-port  (0,65535)
                                         |- end-port    (0,65535)
                                         +- timeout 
              |- dhcp -- [server] --*id         (0,4294967295)
                                  |- status 
                                  |- lease-time         (0,4294967295)
                                  |- mac-acl-default-action 
                                  |- forticlient-on-net-status 
                                  |- dns-service 
                                  |- dns-server1 
                                  |- dns-server2 
                                  |- dns-server3 
                                  |- wifi-ac1 
                                  |- wifi-ac2 
                                  |- wifi-ac3 
                                  |- ntp-service 
                                  |- ntp-server1 
                                  |- ntp-server2 
                                  |- ntp-server3 
                                  |- domain     (36)
                                  |- wins-server1 
                                  |- wins-server2 
                                  |- default-gateway 
                                  |- next-server 
                                  |- netmask 
                                  |- interface  (16)
                                  |- [ip-range] --*id   (0,4294967295)
                                                |- start-ip 
                                                +- end-ip 
                                  |- timezone-option 
                                  |- timezone 
                                  |- tftp-server        (64)
                                  |- filename   (128)
                                  |- [options] --*id    (0,4294967295)
                                               |- code  (0,4294967295)
                                               |- type 
                                               |- value         (313)
                                               +- ip 
                                  |- server-type 
                                  |- ip-mode 
                                  |- conflicted-ip-timeout      (0,4294967295)
                                  |- ipsec-lease-hold   (0,4294967295)
                                  |- auto-configuration 
                                  |- ddns-update 
                                  |- ddns-update-override 
                                  |- ddns-server-ip 
                                  |- ddns-zone  (65)
                                  |- ddns-auth 
                                  |- ddns-keyname       (65)
                                  |- ddns-key 
                                  |- ddns-ttl   (60,86400)
                                  |- vci-match 
                                  |- [vci-string] --*vci-string         (256)
                                  |- [exclude-range] --*id      (0,4294967295)
                                                     |- start-ip 
                                                     +- end-ip 
                                  +- [reserved-address] --*id   (0,4294967295)
                                                        |- ip 
                                                        |- mac 
                                                        |- action 
                                                        +- description 
              |- dhcp6 -- [server] --*id        (0,4294967295)
                                   |- status 
                                   |- rapid-commit 
                                   |- lease-time        (0,4294967295)
                                   |- dns-service 
                                   |- dns-server1 
                                   |- dns-server2 
                                   |- dns-server3 
                                   |- domain    (36)
                                   |- subnet 
                                   |- interface         (16)
                                   |- option1 
                                   |- option2 
                                   |- option3 
                                   |- upstream-interface        (16)
                                   |- ip-mode 
                                   +- [ip-range] --*id  (0,4294967295)
                                                 |- start-ip 
                                                 +- end-ip 
              |- [virtual-wire-pair] --*name    (36)
                                     |- [member] --*interface-name      (65)
                                     +- wildcard-vlan 
              |- <modem> -- status 
                         |- pin-init    (128 xss)
                         |- network-init        (128 xss)
                         |- lockdown-lac        (128 xss)
                         |- mode 
                         |- auto-dial 
                         |- dial-on-demand 
                         |- idle-timer  (0,4294967295)
                         |- redial 
                         |- reset       (0,10)
                         |- holddown-timer      (1,60)
                         |- connect-timeout     (30,255)
                         |- interface   (64)
                         |- wireless-port       (0,4294967295)
                         |- dont-send-CR1 
                         |- phone1      (64 xss)
                         |- dial-cmd1   (64)
                         |- username1   (64 xss)
                         |- passwd1 
                         |- extra-init1         (128 xss)
                         |- peer-modem1 
                         |- ppp-echo-request1 
                         |- authtype1 
                         |- dont-send-CR2 
                         |- phone2      (64 xss)
                         |- dial-cmd2   (64)
                         |- username2   (64 xss)
                         |- passwd2 
                         |- extra-init2         (128 xss)
                         |- peer-modem2 
                         |- ppp-echo-request2 
                         |- authtype2 
                         |- dont-send-CR3 
                         |- phone3      (64 xss)
                         |- dial-cmd3   (64)
                         |- username3   (64 xss)
                         |- passwd3 
                         |- extra-init3         (128 xss)
                         |- peer-modem3 
                         |- ppp-echo-request3 
                         |- altmode 
                         |- authtype3 
                         |- traffic-check 
                         |- action 
                         |- distance    (1,255)
                         +- priority    (0,4294967295)
              |- 3g-modem -- [custom] --*id     (0,4294967295)
                                      |- vendor         (36)
                                      |- model  (36)
                                      |- vendor-id 
                                      |- product-id 
                                      |- class-id 
                                      +- init-string    (128)
              |- <dialinsvr> -- status 
                             |- server-ip 
                             |- client-ip 
                             |- usrgrp  (36)
                             +- allowaccess 
              |- <status> 
              |- performance -- <status> 
                             |- <top> -- <delay> -- <lines>     (0)
                             +- firewall -- <packet-distribution> 
                                         +- <statistics> 
              |- <session> 
              |- <cmdb> 
              |- <fortiguard-service> 
              |- <fortianalyzer-connectivity> 
              |- checksum -- <status> 
              |- <mgmt-csum> 
              |- <ha-nonsync-csum> 
              |- <fortiguard-log-service> 
              |- <central-mgmt> 
              |- [auto-script] --*name  (36)
                               |- interval      (0,31557600)
                               |- repeat        (0,65535)
                               |- start 
                               +- script 
              |- info -- admin -- <status> 
                               +- <ssh> 
              |- <management-tunnel> -- status 
                                     |- allow-config-restore 
                                     |- allow-push-configuration 
                                     |- allow-push-firmware 
                                     |- allow-collect-statistics 
                                     |- authorized-manager-only 
                                     +- serial-number 
              |- <fortimanager> -- ip 
                                |- vdom         (12)
                                |- ipsec 
                                |- central-management 
                                |- central-mgmt-auto-backup 
                                |- central-mgmt-schedule-config-restore 
                                +- central-mgmt-schedule-script-restore 
              |- <fm> -- status 
                      |- id     (36)
                      |- ip 
                      |- vdom   (12)
                      |- auto-backup 
                      |- scheduled-config-restore 
                      +- ipsec 
              |- <central-management> -- mode 
                                      |- type 
                                      |- schedule-config-restore 
                                      |- schedule-script-restore 
                                      |- allow-push-configuration 
                                      |- allow-pushd-firmware 
                                      |- allow-remote-firmware-upgrade 
                                      |- allow-monitor 
                                      |- serial-number 
                                      |- fmg    (256)
                                      |- fmg-source-ip 
                                      |- fmg-source-ip6 
                                      |- vdom   (12)
                                      |- [server-list] --*id    (0,4294967295)
                                                       |- server-type 
                                                       |- addr-type 
                                                       |- server-address 
                                                       |- server-address6 
                                                       +- fqdn  (256)
                                      |- include-default-servers 
                                      +- enc-algorithm 
              |- [zone] --*name         (36)
                        |- intrazone 
                        +- [interface] --*interface-name        (65)
              |- [geoip-country] --*id  (3)
                                 +- name        (64)
              |- [ipv6-tunnel] --*name  (16)
                               |- source 
                               |- destination 
                               |- interface     (16)
                               +- auto-asic-offload 
              |- [ips-urlfilter-dns] --*address 
                                     +- status 
              |- <network-visibility> -- destination-visibility 
                                      |- source-location 
                                      |- destination-hostname-visibility 
                                      |- hostname-ttl   (60,86400)
                                      |- hostname-limit         (0,50000)
                                      +- destination-location 
              |- [gre-tunnel] --*name   (16)
                              |- interface      (16)
                              |- remote-gw 
                              |- local-gw 
                              |- dscp-copying 
                              |- keepalive-interval     (0,32767)
                              +- keepalive-failtimes    (1,255)
              |- [ipip-tunnel] --*name  (16)
                               |- interface     (16)
                               |- remote-gw 
                               |- local-gw 
                               +- auto-asic-offload 
              |- [mobile-tunnel] --*name        (16)
                                 |- status 
                                 |- roaming-interface   (16)
                                 |- home-agent 
                                 |- home-address 
                                 |- renew-interval      (5,60)
                                 |- lifetime    (180,65535)
                                 |- reg-interval        (5,300)
                                 |- reg-retry   (1,30)
                                 |- n-mhae-spi  (0,4294967295)
                                 |- n-mhae-key-type 
                                 |- n-mhae-key 
                                 |- hash-algorithm 
                                 |- tunnel-mode 
                                 +- [network] --*id     (0,4294967295)
                                              |- interface      (16)
                                              +- prefix 
              |- [dns-database] --*name         (36)
                                |- status 
                                |- domain       (256)
                                |- allow-transfer 
                                |- type 
                                |- view 
                                |- ip-master 
                                |- primary-name         (256)
                                |- contact      (256)
                                |- ttl  (0,2147483647)
                                |- authoritative 
                                |- forwarder 
                                |- source-ip 
                                +- [dns-entry] --*id    (0,4294967295)
                                               |- status 
                                               |- type 
                                               |- ttl   (0,2147483647)
                                               |- preference    (0,65535)
                                               |- ip 
                                               |- ipv6 
                                               |- hostname      (256)
                                               +- canonical-name        (256)
              |- [dns-server] --*name   (16)
                              |- mode 
                              +- dnsfilter-profile      (36)
              |- <resource-limits> -- session   (0,4294967295)
                                   |- ipsec-phase1      (0,4294967295)
                                   |- ipsec-phase2      (0,4294967295)
                                   |- dialup-tunnel     (0,4294967295)
                                   |- firewall-policy   (0,4294967295)
                                   |- firewall-address  (0,4294967295)
                                   |- firewall-addrgrp  (0,4294967295)
                                   |- custom-service    (0,4294967295)
                                   |- service-group     (0,4294967295)
                                   |- onetime-schedule  (0,4294967295)
                                   |- recurring-schedule        (0,4294967295)
                                   |- user      (0,4294967295)
                                   |- user-group        (0,4294967295)
                                   |- sslvpn    (0,4294967295)
                                   |- proxy     (0,4294967295)
                                   +- log-disk-quota    (0,4294967295)
              |- [vdom-property] --*name        (12)
                                 |- description         (128)
                                 |- snmp-index  (0,4294967295)
                                 |- session 
                                 |- ipsec-phase1 
                                 |- ipsec-phase2 
                                 |- dialup-tunnel 
                                 |- firewall-policy 
                                 |- firewall-address 
                                 |- firewall-addrgrp 
                                 |- custom-service 
                                 |- service-group 
                                 |- onetime-schedule 
                                 |- recurring-schedule 
                                 |- user 
                                 |- user-group 
                                 |- sslvpn 
                                 |- proxy 
                                 +- log-disk-quota 
              |- <virtual-wan-link> -- status 
                                    |- load-balance-mode 
                                    |- fail-detect 
                                    |- [fail-alert-interfaces] --*name  (65)
                                    |- [members] --*seq-num     (0,255)
                                                 |- interface   (16)
                                                 |- gateway 
                                                 |- weight      (0,255)
                                                 |- priority    (0,4294967295)
                                                 |- spillover-threshold         (0,16776000)
                                                 |- ingress-spillover-threshold         (0,16776000)
                                                 |- volume-ratio        (0,255)
                                                 +- status 
                                    |- [health-check] --*name   (36)
                                                      |- server         (64)
                                                      |- protocol 
                                                      |- port   (1,65535)
                                                      |- security-mode 
                                                      |- password 
                                                      |- packet-size    (64,1024)
                                                      |- http-get       (1025)
                                                      |- http-match     (1025)
                                                      |- interval       (1,3600)
                                                      |- timeout        (1,255)
                                                      |- failtime       (1,10)
                                                      |- recoverytime   (1,10)
                                                      |- update-cascade-interface 
                                                      |- update-static-route 
                                                      |- threshold-warning-packetloss   (0,100)
                                                      |- threshold-alert-packetloss     (0,100)
                                                      |- threshold-warning-latency      (0,4294967295)
                                                      |- threshold-alert-latency        (0,4294967295)
                                                      |- threshold-warning-jitter       (0,4294967295)
                                                      +- threshold-alert-jitter         (0,4294967295)
                                    +- [service] --*name        (36)
                                                 |- id  (0,255)
                                                 |- mode 
                                                 |- quality-link        (0,255)
                                                 |- member      (0,4294967295)
                                                 |- tos 
                                                 |- tos-mask 
                                                 |- protocol    (0,255)
                                                 |- start-port  (0,65535)
                                                 |- end-port    (0,65535)
                                                 |- [dst] --*name       (65)
                                                 |- [src] --*name       (65)
                                                 |- [users] --*name     (65)
                                                 |- [groups] --*name    (65)
                                                 |- internet-service 
                                                 |- [internet-service-custom] --*name   (65)
                                                 |- [internet-service-id] --*id         (0,4294967295)
                                                 |- health-check        (36)
                                                 |- link-cost-factor 
                                                 |- link-cost-threshold         (0,10000000)
                                                 |- [priority-members] --*seq-num       (0,4294967295)
                                                 +- status 
              |- <csf> -- status 
                       |- upstream-ip 
                       |- upstream-port         (1,65535)
                       |- group-name    (36)
                       +- group-password 
              |- [cluster-sync] --*sync-id      (0,4294967295)
                                |- peervd       (12)
                                |- peerip 
                                |- [syncvd] --*name     (65)
                                +- <session-sync-filter> -- srcintf     (16)
                                                         |- dstintf     (16)
                                                         |- srcaddr 
                                                         |- dstaddr 
                                                         |- srcaddr6 
                                                         |- dstaddr6 
                                                         +- [custom-service] --*id      (0,4294967295)
                                                                             |- src-port-range 
                                                                             +- dst-port-range 
              |- <fortiguard> -- port 
                              |- service-account-id     (51 xss)
                              |- load-balance-servers   (1,266)
                              |- auto-join-forticloud 
                              |- antispam-force-off 
                              |- antispam-cache 
                              |- antispam-cache-ttl     (0,4294967295)
                              |- antispam-cache-mpercent        (1,15)
                              |- antispam-license       (0,4294967295)
                              |- antispam-expiration    (0,4294967295)
                              |- antispam-timeout       (1,30)
                              |- avquery-force-off 
                              |- avquery-cache 
                              |- avquery-cache-ttl      (0,4294967295)
                              |- avquery-cache-mpercent         (0,4294967295)
                              |- avquery-license        (0,4294967295)
                              |- avquery-timeout        (0,4294967295)
                              |- webfilter-force-off 
                              |- webfilter-cache 
                              |- webfilter-cache-ttl    (0,4294967295)
                              |- webfilter-license      (0,4294967295)
                              |- webfilter-expiration   (0,4294967295)
                              |- webfilter-timeout      (1,30)
                              |- sdns-server-ip 
                              |- sdns-server-port       (0,4294967295)
                              |- source-ip 
                              |- source-ip6 
                              |- ddns-server-ip 
                              +- ddns-server-port       (0,4294967295)
              |- <arp> 
              |- <email-server> -- type 
                                |- reply-to     (64)
                                |- server       (64)
                                |- port         (0,4294967295)
                                |- source-ip 
                                |- source-ip6 
                                |- authenticate 
                                |- validate-server 
                                |- username     (36)
                                |- password 
                                +- security 
              |- <alarm> -- status 
                         |- audible 
                         |- sequence    (0,4294967295)
                         +- [groups] --*id      (0,4294967295)
                                     |- period  (0,4294967295)
                                     |- admin-auth-failure-threshold    (0,4294967295)
                                     |- admin-auth-lockout-threshold    (0,4294967295)
                                     |- user-auth-failure-threshold     (0,4294967295)
                                     |- user-auth-lockout-threshold     (0,4294967295)
                                     |- replay-attempt-threshold        (0,4294967295)
                                     |- self-test-failure-threshold     (0,1)
                                     |- log-full-warning-threshold      (0,4294967295)
                                     |- encryption-failure-threshold    (0,4294967295)
                                     |- decryption-failure-threshold    (0,4294967295)
                                     |- [fw-policy-violations] --*id    (0,4294967295)
                                                               |- threshold     (0,4294967295)
                                                               |- src-ip 
                                                               |- dst-ip 
                                                               |- src-port      (0,65535)
                                                               +- dst-port      (0,65535)
                                     |- fw-policy-id    (0,4294967295)
                                     +- fw-policy-id-threshold  (0,4294967295)
              |- [mac-address-table] --*mac 
                                     |- interface       (36)
                                     +- reply-substitute 
              |- [session-helper] --*id         (0,4294967295)
                                  |- name 
                                  |- protocol   (0,255)
                                  +- port       (1,65535)
              |- [proxy-arp] --*id      (0,4294967295)
                             |- interface       (16)
                             |- ip 
                             +- end-ip 
              |- <fips-cc> -- status 
                           |- entropy-token 
                           |- error-flag 
                           |- error-cause 
                           |- self-test-period  (1,1440)
                           +- key-generation-self-test 
              |- [tos-based-priority] --*id     (0,4294967295)
                                      |- tos    (0,15)
                                      +- priority 
              |- [dscp-based-priority] --*id    (0,4294967295)
                                       |- ds    (0,63)
                                       +- priority 
              |- <probe-response> -- port       (1,65535)
                                  |- http-probe-value   (1025)
                                  |- ttl-mode 
                                  |- mode 
                                  |- security-mode 
                                  |- password 
                                  +- timeout    (10,3600)
              |- [link-monitor] --*name         (36 xss)
                                |- srcintf      (16)
                                |- [server] --*address  (65)
                                |- protocol 
                                |- port         (1,65535)
                                |- gateway-ip 
                                |- source-ip 
                                |- http-get     (1025)
                                |- http-match   (1025)
                                |- interval     (1,3600)
                                |- timeout      (1,255)
                                |- failtime     (1,10)
                                |- recoverytime         (1,10)
                                |- security-mode 
                                |- password 
                                |- packet-size  (64,1024)
                                |- ha-priority  (1,50)
                                |- update-cascade-interface 
                                |- update-static-route 
                                +- status 
              |- <auto-install> -- auto-install-config 
                                |- auto-install-image 
                                |- default-config-file  (128)
                                +- default-image-file   (128)
              |- <console> -- mode 
                           |- baudrate 
                           |- output 
                           |- login 
                           +- fortiexplorer 
              |- <ntp> -- ntpsync 
                       |- type 
                       |- syncinterval  (1,1440)
                       |- [ntpserver] --*id     (0,4294967295)
                                      |- server         (64)
                                      |- ntpv3 
                                      |- authentication 
                                      |- key 
                                      +- key-id         (0,4294967295)
                       |- source-ip 
                       |- server-mode 
                       +- [interface] --*interface-name         (65)
              |- [wccp] --*service-id   (4)
                        |- router-id 
                        |- cache-id 
                        |- group-address 
                        |- server-list 
                        |- router-list 
                        |- ports-defined 
                        |- ports 
                        |- authentication 
                        |- password 
                        |- forward-method 
                        |- cache-engine-method 
                        |- service-type 
                        |- primary-hash 
                        |- priority     (0,255)
                        |- protocol     (0,255)
                        |- assignment-weight    (0,255)
                        |- assignment-bucket-format 
                        |- return-method 
                        +- assignment-method 
              |- <nat64> -- status 
                         |- nat64-prefix 
                         |- always-synthesize-aaaa-record 
                         +- generate-ipv6-fragment-header 
              |- [vdom-radius-server] --*name   (12)
                                      |- status 
                                      +- radius-server-vdom     (12)
              |- <startup-error-log> 
              |- source-ip -- <status> 
              |- auto-update -- <status> 
                             +- <versions> 
              |- session-info -- <list> 
                              |- <expectation> 
                              |- <full-stat> 
                              |- <statistics> 
                              +- <ttl> 
              |- session-helper-info -- <list> 
              |- ip-conflict -- <status> 
              |- [geoip-override] --*name       (64)
                                  |- description        (128)
                                  |- country-id         (3)
                                  +- [ip-range] --*id   (0,4294967295)
                                                |- start-ip 
                                                +- end-ip 
              +- <fortisandbox> -- status 
                                |- server 
                                |- source-ip 
                                |- enc-algorithm 
                                +- email        (64)
    |- wireless-controller -- <global> -- name  (36)
                                       |- location      (36)
                                       |- max-retransmit        (0,64)
                                       |- data-ethernet-II 
                                       |- link-aggregation 
                                       |- mesh-eth-type         (0,65535)
                                       |- fiapp-eth-type        (0,65535)
                                       |- discovery-mc-addr 
                                       |- max-clients   (0,4294967295)
                                       |- rogue-scan-mac-adjacency      (0,31)
                                       |- ap-log-server 
                                       |- ap-log-server-ip 
                                       +- ap-log-server-port    (0,4294967295)
                           |- [vap] --*name     (16)
                                    |- vdom     (12)
                                    |- fast-roaming 
                                    |- external-fast-roaming 
                                    |- mesh-backhaul 
                                    |- max-clients      (0,4294967295)
                                    |- max-clients-ap   (0,4294967295)
                                    |- ssid     (33 xss)
                                    |- broadcast-ssid 
                                    |- security-obsolete-option 
                                    |- security 
                                    |- pmf 
                                    |- pmf-assoc-comeback-timeout       (1,20)
                                    |- pmf-sa-query-retry-timeout       (1,5)
                                    |- okc 
                                    |- tkip-counter-measure 
                                    |- external-web     (128)
                                    |- external-logout  (128)
                                    |- radius-mac-auth 
                                    |- radius-mac-auth-server   (36)
                                    |- auth 
                                    |- encrypt 
                                    |- keyindex         (1,4)
                                    |- key 
                                    |- passphrase 
                                    |- radius-server    (36)
                                    |- acct-interim-interval    (60,86400)
                                    |- [usergroup] --*name      (65)
                                    |- portal-message-override-group    (36)
                                    |- <portal-message-overrides> -- auth-disclaimer-page       (36)
                                                                  |- auth-reject-page   (36)
                                                                  |- auth-login-page    (36)
                                                                  +- auth-login-failed-page     (36)
                                    |- portal-type 
                                    |- [selected-usergroups] --*name    (65)
                                    |- security-exempt-list     (36)
                                    |- security-redirect-url    (128)
                                    |- intra-vap-privacy 
                                    |- schedule         (36)
                                    |- local-standalone 
                                    |- local-standalone-nat 
                                    |- ip 
                                    |- local-bridging 
                                    |- split-tunneling 
                                    |- local-authentication 
                                    |- vlanid   (0,4094)
                                    |- vlan-auto 
                                    |- dynamic-vlan 
                                    |- alias    (26)
                                    |- multicast-rate 
                                    |- multicast-enhance 
                                    |- broadcast-suppression 
                                    |- me-disable-thresh        (2,256)
                                    |- probe-resp-suppression 
                                    |- probe-resp-threshold     (8)
                                    |- vlan-pooling 
                                    |- [vlan-pool] --*id        (0,4094)
                                                   +- wtp-group         (36)
                                    |- ptk-rekey 
                                    |- ptk-rekey-intv   (1800,864000)
                                    |- gtk-rekey 
                                    |- gtk-rekey-intv   (1800,864000)
                                    |- eap-reauth 
                                    |- eap-reauth-intv  (1800,864000)
                                    |- rates-11a 
                                    |- rates-11bg 
                                    |- rates-11n-ss12 
                                    |- rates-11n-ss34 
                                    |- rates-11ac-ss12 
                                    |- rates-11ac-ss34 
                                    |- mac-filter 
                                    |- mac-filter-policy-other 
                                    +- [mac-filter-list] --*id  (0,4294967295)
                                                         |- mac 
                                                         +- mac-filter-policy 
                           |- <timers> -- echo-interval         (1,255)
                                       |- discovery-interval    (2,180)
                                       |- client-idle-timeout   (0,4294967295)
                                       |- rogue-ap-log  (0,1440)
                                       |- fake-ap-log   (1,1440)
                                       |- darrp-optimize        (0,86400)
                                       |- darrp-day 
                                       |- [darrp-time] --*time  (6)
                                       |- sta-stats-interval    (1,255)
                                       |- vap-stats-interval    (1,255)
                                       |- radio-stats-interval  (1,255)
                                       |- sta-capability-interval       (1,255)
                                       +- sta-locate-timer      (0,86400)
                           |- <setting> -- account-id   (64)
                                        +- country 
                           |- [vap-group] --*name       (36)
                                          |- comment 
                                          +- [vaps] --*name     (36)
                           |- [wids-profile] --*name    (36)
                                             |- comment         (64)
                                             |- ap-scan 
                                             |- ap-bgscan-period        (60,3600)
                                             |- ap-bgscan-intv  (1,600)
                                             |- ap-bgscan-duration      (10,1000)
                                             |- ap-bgscan-idle  (0,1000)
                                             |- ap-bgscan-report-intv   (15,600)
                                             |- ap-bgscan-disable-day 
                                             |- ap-bgscan-disable-start 
                                             |- ap-bgscan-disable-end 
                                             |- ap-fgscan-report-intv   (15,600)
                                             |- ap-scan-passive 
                                             |- rogue-scan 
                                             |- ap-auto-suppress 
                                             |- wireless-bridge 
                                             |- deauth-broadcast 
                                             |- null-ssid-probe-resp 
                                             |- long-duration-attack 
                                             |- long-duration-thresh    (1000,32767)
                                             |- invalid-mac-oui 
                                             |- weak-wep-iv 
                                             |- auth-frame-flood 
                                             |- auth-flood-time         (5,120)
                                             |- auth-flood-thresh       (1,100)
                                             |- assoc-frame-flood 
                                             |- assoc-flood-time        (5,120)
                                             |- assoc-flood-thresh      (1,100)
                                             |- spoofed-deauth 
                                             |- asleap-attack 
                                             |- eapol-start-flood 
                                             |- eapol-start-thresh      (2,100)
                                             |- eapol-start-intv        (1,3600)
                                             |- eapol-logoff-flood 
                                             |- eapol-logoff-thresh     (2,100)
                                             |- eapol-logoff-intv       (1,3600)
                                             |- eapol-succ-flood 
                                             |- eapol-succ-thresh       (2,100)
                                             |- eapol-succ-intv         (1,3600)
                                             |- eapol-fail-flood 
                                             |- eapol-fail-thresh       (2,100)
                                             |- eapol-fail-intv         (1,3600)
                                             |- eapol-pre-succ-flood 
                                             |- eapol-pre-succ-thresh   (2,100)
                                             |- eapol-pre-succ-intv     (1,3600)
                                             |- eapol-pre-fail-flood 
                                             |- eapol-pre-fail-thresh   (2,100)
                                             |- eapol-pre-fail-intv     (1,3600)
                                             +- deauth-unknown-src-thresh       (0,65535)
                           |- [wtp-profile] --*name     (36)
                                            |- comment 
                                            |- <platform> -- type 
                                            |- wan-port-mode 
                                            |- <lan> -- port-mode 
                                                     |- port-ssid       (16)
                                                     |- port1-mode 
                                                     |- port1-ssid      (16)
                                                     |- port2-mode 
                                                     |- port2-ssid      (16)
                                                     |- port3-mode 
                                                     |- port3-ssid      (16)
                                                     |- port4-mode 
                                                     |- port4-ssid      (16)
                                                     |- port5-mode 
                                                     |- port5-ssid      (16)
                                                     |- port6-mode 
                                                     |- port6-ssid      (16)
                                                     |- port7-mode 
                                                     |- port7-ssid      (16)
                                                     |- port8-mode 
                                                     +- port8-ssid      (16)
                                            |- led-state 
                                            |- dtls-policy 
                                            |- dtls-in-kernel 
                                            |- max-clients      (0,4294967295)
                                            |- handoff-rssi     (20,30)
                                            |- handoff-sta-thresh       (5,35)
                                            |- handoff-roaming 
                                            |- [deny-mac-list] --*id    (0,4294967295)
                                                               +- mac 
                                            |- ap-country 
                                            |- ip-fragment-preventing 
                                            |- tun-mtu-uplink   (0,4294967295)
                                            |- tun-mtu-downlink         (0,4294967295)
                                            |- split-tunneling-acl-local-ap-subnet 
                                            |- [split-tunneling-acl] --*id      (0,4294967295)
                                                                     +- dest-ip 
                                            |- allowaccess 
                                            |- login-passwd-change 
                                            |- login-passwd 
                                            |- lldp 
                                            |- <radio-1> -- radio-id    (0,2)
                                                         |- mode 
                                                         |- band 
                                                         |- protection-mode 
                                                         |- powersave-optimize 
                                                         |- transmit-optimize 
                                                         |- amsdu 
                                                         |- coexistence 
                                                         |- short-guard-interval 
                                                         |- channel-bonding 
                                                         |- auto-power-level 
                                                         |- auto-power-high     (0,4294967295)
                                                         |- auto-power-low      (0,4294967295)
                                                         |- power-level         (0,100)
                                                         |- dtim        (1,255)
                                                         |- beacon-interval     (0,4294967295)
                                                         |- rts-threshold       (256,2346)
                                                         |- frag-threshold      (800,2346)
                                                         |- ap-sniffer-bufsize  (1,32)
                                                         |- ap-sniffer-chan     (0,4294967295)
                                                         |- ap-sniffer-addr 
                                                         |- ap-sniffer-mgmt-beacon 
                                                         |- ap-sniffer-mgmt-probe 
                                                         |- ap-sniffer-mgmt-other 
                                                         |- ap-sniffer-ctl 
                                                         |- ap-sniffer-data 
                                                         |- spectrum-analysis 
                                                         |- wids-profile        (36)
                                                         |- darrp 
                                                         |- max-clients         (0,4294967295)
                                                         |- max-distance        (0,54000)
                                                         |- frequency-handoff 
                                                         |- ap-handoff 
                                                         |- vap-all 
                                                         |- [vaps] --*name      (36)
                                                         +- [channel] --*chan   (4)
                                            |- <radio-2> -- radio-id    (0,2)
                                                         |- mode 
                                                         |- band 
                                                         |- protection-mode 
                                                         |- powersave-optimize 
                                                         |- transmit-optimize 
                                                         |- amsdu 
                                                         |- coexistence 
                                                         |- short-guard-interval 
                                                         |- channel-bonding 
                                                         |- auto-power-level 
                                                         |- auto-power-high     (0,4294967295)
                                                         |- auto-power-low      (0,4294967295)
                                                         |- power-level         (0,100)
                                                         |- dtim        (1,255)
                                                         |- beacon-interval     (0,4294967295)
                                                         |- rts-threshold       (256,2346)
                                                         |- frag-threshold      (800,2346)
                                                         |- ap-sniffer-bufsize  (1,32)
                                                         |- ap-sniffer-chan     (0,4294967295)
                                                         |- ap-sniffer-addr 
                                                         |- ap-sniffer-mgmt-beacon 
                                                         |- ap-sniffer-mgmt-probe 
                                                         |- ap-sniffer-mgmt-other 
                                                         |- ap-sniffer-ctl 
                                                         |- ap-sniffer-data 
                                                         |- spectrum-analysis 
                                                         |- wids-profile        (36)
                                                         |- darrp 
                                                         |- max-clients         (0,4294967295)
                                                         |- max-distance        (0,54000)
                                                         |- frequency-handoff 
                                                         |- ap-handoff 
                                                         |- vap-all 
                                                         |- [vaps] --*name      (36)
                                                         +- [channel] --*chan   (4)
                                            +- <lbs> -- ekahau-blink-mode 
                                                     |- ekahau-tag 
                                                     |- erc-server-ip 
                                                     |- erc-server-port         (1024,65535)
                                                     |- aeroscout 
                                                     |- aeroscout-server-ip 
                                                     |- aeroscout-server-port   (1024,65535)
                                                     |- aeroscout-mu-factor     (0,4294967295)
                                                     |- aeroscout-mu-timeout    (0,65535)
                                                     |- fortipresence 
                                                     |- fortipresence-server 
                                                     |- fortipresence-port      (300,65535)
                                                     |- fortipresence-secret 
                                                     |- fortipresence-project   (17)
                                                     |- fortipresence-frequency         (5,65535)
                                                     |- fortipresence-rogue 
                                                     |- fortipresence-unassoc 
                                                     +- station-locate 
                           |- [wtp] --*wtp-id   (36)
                                    |- index    (0,4294967295)
                                    |- admin 
                                    |- name     (36)
                                    |- location         (36)
                                    |- wtp-mode 
                                    |- wtp-profile      (36)
                                    |- override-led-state 
                                    |- led-state 
                                    |- override-wan-port-mode 
                                    |- wan-port-mode 
                                    |- override-ip-fragment 
                                    |- ip-fragment-preventing 
                                    |- tun-mtu-uplink   (0,4294967295)
                                    |- tun-mtu-downlink         (0,4294967295)
                                    |- override-split-tunnel 
                                    |- split-tunneling-acl-local-ap-subnet 
                                    |- [split-tunneling-acl] --*id      (0,4294967295)
                                                             +- dest-ip 
                                    |- override-lan 
                                    |- <lan> -- port-mode 
                                             |- port-ssid       (16)
                                             |- port1-mode 
                                             |- port1-ssid      (16)
                                             |- port2-mode 
                                             |- port2-ssid      (16)
                                             |- port3-mode 
                                             |- port3-ssid      (16)
                                             |- port4-mode 
                                             |- port4-ssid      (16)
                                             |- port5-mode 
                                             |- port5-ssid      (16)
                                             |- port6-mode 
                                             |- port6-ssid      (16)
                                             |- port7-mode 
                                             |- port7-ssid      (16)
                                             |- port8-mode 
                                             +- port8-ssid      (16)
                                    |- override-allowaccess 
                                    |- allowaccess 
                                    |- override-login-passwd-change 
                                    |- login-passwd-change 
                                    |- login-passwd 
                                    |- <radio-1> -- radio-id    (0,2)
                                                 |- override-band 
                                                 |- band 
                                                 |- override-analysis 
                                                 |- spectrum-analysis 
                                                 |- override-txpower 
                                                 |- auto-power-level 
                                                 |- auto-power-high     (0,4294967295)
                                                 |- auto-power-low      (0,4294967295)
                                                 |- power-level         (0,100)
                                                 |- override-vaps 
                                                 |- vap-all 
                                                 |- [vaps] --*name      (36)
                                                 |- override-channel 
                                                 +- [channel] --*chan   (4)
                                    |- <radio-2> -- radio-id    (0,2)
                                                 |- override-band 
                                                 |- band 
                                                 |- override-analysis 
                                                 |- spectrum-analysis 
                                                 |- override-txpower 
                                                 |- auto-power-level 
                                                 |- auto-power-high     (0,4294967295)
                                                 |- auto-power-low      (0,4294967295)
                                                 |- power-level         (0,100)
                                                 |- override-vaps 
                                                 |- vap-all 
                                                 |- [vaps] --*name      (36)
                                                 |- override-channel 
                                                 +- [channel] --*chan   (4)
                                    |- image-download 
                                    |- mesh-bridge-enable 
                                    |- coordinate-enable 
                                    |- coordinate-x     (16)
                                    +- coordinate-y     (16)
                           |- [wtp-group] --*name       (36)
                                          |- platform-type 
                                          +- [wtp-list] --*wtp-id       (36)
                           |- <scan> 
                           |- [ap-status] --*id         (0,4294967295)
                                          |- bssid 
                                          |- ssid       (33 xss)
                                          +- status 
                           |- <wlchanlistlic> 
                           |- <status> -- [1|2]         (0)
                           |- <wtp-status> -- <wtp-id>  (0)
                           |- <client-info> -- <vfid> -- <intf> -- <ip>         (0)
                           |- <vap-status> -- [1]       (0)
                           |- <rf-analysis> -- <wtp-id>         (0)
                           +- <spectral-info> -- [wtp-id] -- <radio-id>         (0)
    |- extender-controller -- [extender] --*id  (20)
                                         |- admin 
                                         |- ifname      (16)
                                         |- vdom        (0,4294967295)
                                         |- role 
                                         |- mode 
                                         |- dial-mode 
                                         |- redial 
                                         |- redundant-intf      (16)
                                         |- dial-status         (0,4294967295)
                                         |- conn-status         (0,4294967295)
                                         |- ext-name    (32)
                                         |- description         (32)
                                         |- quota-limit-mb      (0,10485760)
                                         |- billing-start-day   (1,28)
                                         |- at-dial-script      (128 xss)
                                         |- modem-passwd 
                                         |- initiated-update 
                                         |- modem-type 
                                         |- ppp-username        (32)
                                         |- ppp-password 
                                         |- ppp-auth-protocol 
                                         |- ppp-echo-request 
                                         |- wimax-carrier       (32)
                                         |- wimax-realm         (32)
                                         |- wimax-auth-protocol 
                                         |- sim-pin 
                                         |- access-point-name   (32)
                                         |- multi-mode 
                                         |- roaming 
                                         |- cdma-nai    (32)
                                         |- aaa-shared-secret 
                                         |- ha-shared-secret 
                                         |- primary-ha  (32)
                                         |- secondary-ha        (32)
                                         |- cdma-aaa-spi        (32)
                                         +- cdma-ha-spi         (32)
    |- ipsec -- <tunnel> 
    |- firewall -- [address] --*name    (64)
                             |- uuid 
                             |- subnet 
                             |- type 
                             |- start-ip 
                             |- end-ip 
                             |- fqdn    (256)
                             |- country         (3)
                             |- wildcard-fqdn   (256)
                             |- cache-ttl       (0,86400)
                             |- wildcard 
                             |- comment 
                             |- visibility 
                             |- associated-interface    (36)
                             |- color   (0,32)
                             |- [tags] --*name  (65)
                             +- allow-routing 
                |- [multicast-address] --*name  (64)
                                       |- type 
                                       |- subnet 
                                       |- start-ip 
                                       |- end-ip 
                                       |- comment 
                                       |- visibility 
                                       |- associated-interface  (36)
                                       |- color         (0,32)
                                       +- [tags] --*name        (65)
                |- [address6] --*name   (64)
                              |- uuid 
                              |- type 
                              |- ip6 
                              |- start-ip 
                              |- end-ip 
                              |- visibility 
                              |- color  (0,32)
                              |- [tags] --*name         (65)
                              +- comment 
                |- [multicast-address6] --*name         (140)
                                        |- ip6 
                                        |- comment 
                                        |- visibility 
                                        |- color        (0,32)
                                        +- [tags] --*name       (65)
                |- [addrgrp] --*name    (64)
                             |- uuid 
                             |- [member] --*name        (65)
                             |- comment 
                             |- visibility 
                             |- color   (0,32)
                             |- [tags] --*name  (65)
                             +- allow-routing 
                |- [addrgrp6] --*name   (64)
                              |- uuid 
                              |- visibility 
                              |- color  (0,32)
                              |- comment 
                              |- [member] --*name       (65)
                              +- [tags] --*name         (65)
                |- service -- [category] --*name        (64)
                                         +- comment 
                           |- [custom] --*name  (64)
                                       |- explicit-proxy 
                                       |- category      (64)
                                       |- protocol 
                                       |- iprange 
                                       |- fqdn  (256)
                                       |- protocol-number       (0,4294967295)
                                       |- icmptype      (0,4294967295)
                                       |- icmpcode      (0,4294967295)
                                       |- tcp-portrange 
                                       |- udp-portrange 
                                       |- sctp-portrange 
                                       |- tcp-halfclose-timer   (0,86400)
                                       |- tcp-halfopen-timer    (0,86400)
                                       |- tcp-timewait-timer    (0,300)
                                       |- udp-idle-timer        (0,86400)
                                       |- session-ttl   (0,4294967295)
                                       |- check-reset-range 
                                       |- comment 
                                       |- color         (0,32)
                                       +- visibility 
                           +- [group] --*name   (36)
                                      |- [member] --*name       (65)
                                      |- explicit-proxy 
                                      |- comment 
                                      +- color  (0,32)
                |- shaper -- [traffic-shaper] --*name   (36)
                                              |- guaranteed-bandwidth   (0,16776000)
                                              |- maximum-bandwidth      (0,16776000)
                                              |- bandwidth-unit 
                                              |- priority 
                                              |- per-policy 
                                              |- diffserv 
                                              +- diffservcode 
                          |- [per-ip-shaper] --*name    (36)
                                             |- max-bandwidth   (0,16776000)
                                             |- bandwidth-unit 
                                             |- max-concurrent-session  (0,2097000)
                                             |- diffserv-forward 
                                             |- diffserv-reverse 
                                             |- diffservcode-forward 
                                             +- diffservcode-rev 
                          |- <traffic> 
                          +- <per-ip> 
                |- schedule -- [onetime] --*name        (32)
                                         |- start 
                                         |- end 
                                         |- color       (0,32)
                                         +- expiration-days     (0,100)
                            |- [recurring] --*name      (32)
                                           |- start 
                                           |- end 
                                           |- day 
                                           +- color     (0,32)
                            +- [group] --*name  (32)
                                       |- [member] --*name      (65)
                                       +- color         (0,32)
                |- [ippool] --*name     (36)
                            |- type 
                            |- startip 
                            |- endip 
                            |- source-startip 
                            |- source-endip 
                            |- block-size       (64,4096)
                            |- num-blocks-per-user      (1,128)
                            |- permit-any-host 
                            |- arp-reply 
                            |- arp-intf         (16)
                            +- comments 
                |- [ippool6] --*name    (36)
                             |- startip 
                             |- endip 
                             +- comments 
                |- [ldb-monitor] --*name        (36)
                                 |- type 
                                 |- interval    (5,65535)
                                 |- timeout     (1,255)
                                 |- retry       (1,255)
                                 |- port        (0,65535)
                                 |- http-get    (256)
                                 |- http-match  (256)
                                 +- http-max-redirects  (0,5)
                |- [vip] --*name        (64)
                         |- id  (0,65535)
                         |- uuid 
                         |- comment 
                         |- type 
                         |- dns-mapping-ttl     (0,604800)
                         |- ldb-method 
                         |- [src-filter] --*range       (65)
                         |- extip 
                         |- [mappedip] --*range         (65)
                         |- mapped-addr         (64)
                         |- extintf     (36)
                         |- arp-reply 
                         |- server-type 
                         |- persistence 
                         |- nat-source-vip 
                         |- portforward 
                         |- protocol 
                         |- extport 
                         |- mappedport 
                         |- gratuitous-arp-interval     (0,4294967295)
                         |- [srcintf-filter] --*interface-name  (65)
                         |- portmapping-type 
                         |- [realservers] --*id         (0,4294967295)
                                          |- ip 
                                          |- port       (1,65535)
                                          |- status 
                                          |- weight     (1,255)
                                          |- holddown-interval  (0,4294967295)
                                          |- healthcheck 
                                          |- http-host  (64)
                                          |- max-connections    (0,2147483647)
                                          |- monitor    (65)
                                          +- client-ip 
                         |- http-cookie-domain-from-host 
                         |- http-cookie-domain  (36)
                         |- http-cookie-path    (36)
                         |- http-cookie-generation      (0,4294967295)
                         |- http-cookie-age     (0,525600)
                         |- http-cookie-share 
                         |- http-multiplex 
                         |- http-ip-header 
                         |- http-ip-header-name         (36)
                         |- outlook-web-access 
                         |- weblogic-server 
                         |- websphere-server 
                         |- monitor     (65)
                         |- max-embryonic-connections   (0,100000)
                         +- color       (0,32)
                |- [vip46] --*name      (64)
                           |- id        (0,65535)
                           |- uuid 
                           |- comment 
                           |- [src-filter] --*range     (80)
                           |- extip 
                           |- mappedip 
                           |- arp-reply 
                           |- portforward 
                           |- protocol 
                           |- extport 
                           |- mappedport 
                           +- color     (0,32)
                |- [vip6] --*name       (64)
                          |- id         (0,65535)
                          |- uuid 
                          |- comment 
                          |- type 
                          |- [src-filter] --*range      (80)
                          |- extip 
                          |- mappedip 
                          |- arp-reply 
                          |- portforward 
                          |- protocol 
                          |- extport 
                          |- mappedport 
                          +- color      (0,32)
                |- [vip64] --*name      (64)
                           |- id        (0,65535)
                           |- uuid 
                           |- comment 
                           |- [src-filter] --*range     (80)
                           |- extip 
                           |- mappedip 
                           |- arp-reply 
                           |- portforward 
                           |- protocol 
                           |- extport 
                           |- mappedport 
                           +- color     (0,32)
                |- [vipgrp] --*name     (64)
                            |- uuid 
                            |- interface        (36)
                            |- color    (0,32)
                            |- comments 
                            +- [member] --*name         (65)
                |- [vipgrp46] --*name   (64)
                              |- uuid 
                              |- color  (0,32)
                              |- comments 
                              +- [member] --*name       (65)
                |- [vipgrp6] --*name    (64)
                             |- uuid 
                             |- color   (0,32)
                             |- comments 
                             +- [member] --*name        (65)
                |- [vipgrp64] --*name   (64)
                              |- uuid 
                              |- color  (0,32)
                              |- comments 
                              +- [member] --*name       (65)
                |- ipmacbinding -- <setting> -- bindthroughfw 
                                             |- bindtofw 
                                             +- undefinedhost 
                                +- [table] --*seq-num   (0,4294967295)
                                           |- ip 
                                           |- mac 
                                           |- name      (36)
                                           +- status 
                |- [profile-protocol-options] --*name   (36)
                                              |- comment 
                                              |- replacemsg-group       (36)
                                              |- oversize-log 
                                              |- switching-protocols-log 
                                              |- <http> -- ports        (1,65535)
                                                        |- status 
                                                        |- inspect-all 
                                                        |- options 
                                                        |- comfort-interval     (1,900)
                                                        |- comfort-amount       (1,10240)
                                                        |- range-block 
                                                        |- post-lang 
                                                        |- fortinet-bar 
                                                        |- fortinet-bar-port    (0,4294967295)
                                                        |- streaming-content-bypass 
                                                        |- switching-protocols 
                                                        |- oversize-limit       (1,186)
                                                        |- uncompressed-oversize-limit  (0,186)
                                                        |- uncompressed-nest-limit      (2,100)
                                                        |- scan-bzip2 
                                                        |- block-page-status-code       (100,599)
                                                        +- retry-count  (0,100)
                                              |- <ftp> -- ports         (1,65535)
                                                       |- status 
                                                       |- inspect-all 
                                                       |- options 
                                                       |- comfort-interval      (1,900)
                                                       |- comfort-amount        (1,10240)
                                                       |- oversize-limit        (1,186)
                                                       |- uncompressed-oversize-limit   (0,186)
                                                       |- uncompressed-nest-limit       (2,100)
                                                       +- scan-bzip2 
                                              |- <imap> -- ports        (1,65535)
                                                        |- status 
                                                        |- inspect-all 
                                                        |- options 
                                                        |- oversize-limit       (1,186)
                                                        |- uncompressed-oversize-limit  (0,186)
                                                        |- uncompressed-nest-limit      (2,100)
                                                        +- scan-bzip2 
                                              |- <mapi> -- ports        (1,65535)
                                                        |- status 
                                                        |- options 
                                                        |- oversize-limit       (1,186)
                                                        |- uncompressed-oversize-limit  (0,186)
                                                        |- uncompressed-nest-limit      (2,100)
                                                        +- scan-bzip2 
                                              |- <pop3> -- ports        (1,65535)
                                                        |- status 
                                                        |- inspect-all 
                                                        |- options 
                                                        |- oversize-limit       (1,186)
                                                        |- uncompressed-oversize-limit  (0,186)
                                                        |- uncompressed-nest-limit      (2,100)
                                                        +- scan-bzip2 
                                              |- <smtp> -- ports        (1,65535)
                                                        |- status 
                                                        |- inspect-all 
                                                        |- options 
                                                        |- oversize-limit       (1,186)
                                                        |- uncompressed-oversize-limit  (0,186)
                                                        |- uncompressed-nest-limit      (2,100)
                                                        |- scan-bzip2 
                                                        +- server-busy 
                                              |- <nntp> -- ports        (1,65535)
                                                        |- status 
                                                        |- inspect-all 
                                                        |- options 
                                                        |- oversize-limit       (1,186)
                                                        |- uncompressed-oversize-limit  (0,186)
                                                        |- uncompressed-nest-limit      (2,100)
                                                        +- scan-bzip2 
                                              |- <dns> -- ports         (1,65535)
                                                       +- status 
                                              |- <mail-signature> -- status 
                                                                  +- signature  (1024 xss)
                                              +- rpc-over-http 
                |- [ssl-ssh-profile] --*name    (36)
                                     |- comment 
                                     |- <ssl> -- inspect-all 
                                              |- client-cert-request 
                                              |- unsupported-ssl 
                                              |- allow-invalid-server-cert 
                                              +- untrusted-cert 
                                     |- <https> -- ports        (1,65535)
                                                |- status 
                                                |- client-cert-request 
                                                |- unsupported-ssl 
                                                |- allow-invalid-server-cert 
                                                +- untrusted-cert 
                                     |- <ftps> -- ports         (1,65535)
                                               |- status 
                                               |- client-cert-request 
                                               |- unsupported-ssl 
                                               |- allow-invalid-server-cert 
                                               +- untrusted-cert 
                                     |- <imaps> -- ports        (1,65535)
                                                |- status 
                                                |- client-cert-request 
                                                |- unsupported-ssl 
                                                |- allow-invalid-server-cert 
                                                +- untrusted-cert 
                                     |- <pop3s> -- ports        (1,65535)
                                                |- status 
                                                |- client-cert-request 
                                                |- unsupported-ssl 
                                                |- allow-invalid-server-cert 
                                                +- untrusted-cert 
                                     |- <smtps> -- ports        (1,65535)
                                                |- status 
                                                |- client-cert-request 
                                                |- unsupported-ssl 
                                                |- allow-invalid-server-cert 
                                                +- untrusted-cert 
                                     |- whitelist 
                                     |- [ssl-exempt] --*id      (0,4294967295)
                                                     |- type 
                                                     |- fortiguard-category     (0,4294967295)
                                                     |- address         (64)
                                                     +- address6        (64)
                                     |- server-cert-mode 
                                     |- use-ssl-server 
                                     |- caname  (36)
                                     |- untrusted-caname        (36)
                                     |- certname        (36)
                                     |- server-cert     (36)
                                     |- [ssl-server] --*id      (0,4294967295)
                                                     |- ip 
                                                     |- https-client-cert-request 
                                                     |- smtps-client-cert-request 
                                                     |- pop3s-client-cert-request 
                                                     |- imaps-client-cert-request 
                                                     |- ftps-client-cert-request 
                                                     +- ssl-other-client-cert-request 
                                     |- ssl-invalid-server-cert-log 
                                     |- rpc-over-https 
                                     +- mapi-over-https 
                |- [profile-group] --*name      (36)
                                   |- av-profile        (36)
                                   |- webfilter-profile         (36)
                                   |- dnsfilter-profile         (36)
                                   |- spamfilter-profile        (36)
                                   |- dlp-sensor        (36)
                                   |- ips-sensor        (36)
                                   |- application-list  (36)
                                   |- casi-profile      (36)
                                   |- voip-profile      (36)
                                   |- icap-profile      (36)
                                   |- waf-profile       (36)
                                   |- profile-protocol-options  (36)
                                   +- ssl-ssh-profile   (36)
                |- [ssl-server] --*name         (36)
                                |- ip 
                                |- port         (1,65535)
                                |- ssl-mode 
                                |- add-header-x-forwarded-proto 
                                |- mapped-port  (1,65535)
                                |- ssl-cert     (36)
                                |- ssl-dh-bits 
                                |- ssl-algorithm 
                                |- ssl-client-renegotiation 
                                |- ssl-min-version 
                                |- ssl-max-version 
                                |- ssl-send-empty-frags 
                                +- url-rewrite 
                |- [identity-based-route] --*name       (36)
                                          |- comments   (128 xss)
                                          +- [rule] --*id       (0,4294967295)
                                                    |- gateway 
                                                    |- device   (36)
                                                    +- [groups] --*name         (65)
                |- <auth-portal> -- [groups] --*name    (65)
                                 |- portal-addr         (64)
                                 |- portal-addr6        (64)
                                 +- identity-based-route        (36)
                |- [policy] --*policyid         (0,4294967294)
                            |- name     (36 xss)
                            |- uuid 
                            |- [srcintf] --*name        (65)
                            |- [dstintf] --*name        (65)
                            |- [srcaddr] --*name        (65)
                            |- [dstaddr] --*name        (65)
                            |- rtp-nat 
                            |- [rtp-addr] --*name       (65)
                            |- learning-mode 
                            |- action 
                            |- send-deny-packet 
                            |- firewall-session-dirty 
                            |- status 
                            |- schedule         (36)
                            |- schedule-timeout 
                            |- [service] --*name        (65)
                            |- utm-status 
                            |- profile-type 
                            |- profile-group    (36)
                            |- av-profile       (36)
                            |- webfilter-profile        (36)
                            |- dnsfilter-profile        (36)
                            |- spamfilter-profile       (36)
                            |- dlp-sensor       (36)
                            |- ips-sensor       (36)
                            |- application-list         (36)
                            |- casi-profile     (36)
                            |- voip-profile     (36)
                            |- icap-profile     (36)
                            |- waf-profile      (36)
                            |- profile-protocol-options         (36)
                            |- ssl-ssh-profile  (36)
                            |- logtraffic 
                            |- logtraffic-start 
                            |- capture-packet 
                            |- auto-asic-offload 
                            |- traffic-shaper   (36)
                            |- traffic-shaper-reverse   (36)
                            |- per-ip-shaper    (36)
                            |- nat 
                            |- permit-any-host 
                            |- permit-stun-host 
                            |- fixedport 
                            |- ippool 
                            |- [poolname] --*name       (65)
                            |- session-ttl      (0,4294967295)
                            |- vlan-cos-fwd     (0,4294967295)
                            |- vlan-cos-rev     (0,4294967295)
                            |- inbound 
                            |- outbound 
                            |- natinbound 
                            |- natoutbound 
                            |- wccp 
                            |- ntlm 
                            |- ntlm-guest 
                            |- [ntlm-enabled-browsers] --*user-agent-string     (65)
                            |- fsso 
                            |- wsso 
                            |- rsso 
                            |- fsso-agent-for-ntlm      (36)
                            |- [groups] --*name         (65)
                            |- [users] --*name  (65)
                            |- [devices] --*name        (36)
                            |- auth-path 
                            |- disclaimer 
                            |- vpntunnel        (36)
                            |- natip 
                            |- match-vip 
                            |- diffserv-forward 
                            |- diffserv-reverse 
                            |- diffservcode-forward 
                            |- diffservcode-rev 
                            |- tcp-mss-sender   (0,65535)
                            |- tcp-mss-receiver         (0,65535)
                            |- comments 
                            |- label    (64 xss)
                            |- global-label     (64 xss)
                            |- auth-cert        (36)
                            |- auth-redirect-addr       (64)
                            |- redirect-url     (256)
                            |- identity-based-route     (36)
                            |- block-notification 
                            |- [custom-log-fields] --*field-id  (36)
                            |- [tags] --*name   (65)
                            |- replacemsg-override-group        (36)
                            |- srcaddr-negate 
                            |- dstaddr-negate 
                            |- service-negate 
                            |- timeout-send-rst 
                            |- captive-portal-exempt 
                            |- ssl-mirror 
                            |- [ssl-mirror-intf] --*name        (65)
                            |- scan-botnet-connections 
                            |- dsri 
                            +- delay-tcp-npu-sessoin 
                |- [shaping-policy] --*id       (0,4294967295)
                                    |- status 
                                    |- ip-version 
                                    |- [srcaddr] --*name        (65)
                                    |- [dstaddr] --*name        (65)
                                    |- [srcaddr6] --*name       (65)
                                    |- [dstaddr6] --*name       (65)
                                    |- [service] --*name        (65)
                                    |- [users] --*name  (65)
                                    |- [groups] --*name         (65)
                                    |- [application] --*id      (0,4294967295)
                                    |- [app-category] --*id     (0,4294967295)
                                    |- [url-category] --*id     (0,4294967295)
                                    |- [dstintf] --*name        (65)
                                    |- traffic-shaper   (36)
                                    |- traffic-shaper-reverse   (36)
                                    +- per-ip-shaper    (36)
                |- [local-in-policy] --*policyid        (0,4294967295)
                                     |- ha-mgmt-intf-only 
                                     |- intf    (36)
                                     |- [srcaddr] --*name       (65)
                                     |- [dstaddr] --*name       (65)
                                     |- action 
                                     |- [service] --*name       (65)
                                     |- schedule        (36)
                                     +- status 
                |- [policy6] --*policyid        (0,4294967294)
                             |- name    (36 xss)
                             |- uuid 
                             |- [srcintf] --*name       (65)
                             |- [dstintf] --*name       (65)
                             |- [srcaddr] --*name       (65)
                             |- [dstaddr] --*name       (65)
                             |- action 
                             |- firewall-session-dirty 
                             |- status 
                             |- vlan-cos-fwd    (0,4294967295)
                             |- vlan-cos-rev    (0,4294967295)
                             |- schedule        (36)
                             |- [service] --*name       (65)
                             |- utm-status 
                             |- profile-type 
                             |- profile-group   (36)
                             |- av-profile      (36)
                             |- webfilter-profile       (36)
                             |- spamfilter-profile      (36)
                             |- dlp-sensor      (36)
                             |- ips-sensor      (36)
                             |- application-list        (36)
                             |- casi-profile    (36)
                             |- voip-profile    (36)
                             |- icap-profile    (36)
                             |- profile-protocol-options        (36)
                             |- ssl-ssh-profile         (36)
                             |- logtraffic 
                             |- logtraffic-start 
                             |- auto-asic-offload 
                             |- traffic-shaper  (36)
                             |- traffic-shaper-reverse  (36)
                             |- per-ip-shaper   (36)
                             |- nat 
                             |- fixedport 
                             |- ippool 
                             |- [poolname] --*name      (65)
                             |- session-ttl     (0,4294967295)
                             |- inbound 
                             |- outbound 
                             |- natinbound 
                             |- natoutbound 
                             |- send-deny-packet 
                             |- vpntunnel       (36)
                             |- diffserv-forward 
                             |- diffserv-reverse 
                             |- diffservcode-forward 
                             |- diffservcode-rev 
                             |- tcp-mss-sender  (0,65535)
                             |- tcp-mss-receiver        (0,65535)
                             |- comments 
                             |- label   (64 xss)
                             |- global-label    (64 xss)
                             |- rsso 
                             |- [custom-log-fields] --*field-id         (36)
                             |- [tags] --*name  (65)
                             |- replacemsg-override-group       (36)
                             |- srcaddr-negate 
                             |- dstaddr-negate 
                             |- service-negate 
                             |- [groups] --*name        (65)
                             |- [users] --*name         (65)
                             |- [devices] --*name       (36)
                             |- timeout-send-rst 
                             |- ssl-mirror 
                             |- [ssl-mirror-intf] --*name       (65)
                             +- dsri 
                |- [local-in-policy6] --*policyid       (0,4294967295)
                                      |- intf   (36)
                                      |- [srcaddr] --*name      (65)
                                      |- [dstaddr] --*name      (65)
                                      |- action 
                                      |- [service] --*name      (65)
                                      |- schedule       (36)
                                      +- status 
                |- [ttl-policy] --*id   (0,4294967295)
                                |- status 
                                |- action 
                                |- srcintf      (36)
                                |- [srcaddr] --*name    (65)
                                |- [service] --*name    (65)
                                |- schedule     (36)
                                +- ttl 
                |- [policy64] --*policyid       (0,4294967295)
                              |- uuid 
                              |- srcintf        (36)
                              |- dstintf        (36)
                              |- [srcaddr] --*name      (65)
                              |- [dstaddr] --*name      (65)
                              |- action 
                              |- status 
                              |- schedule       (36)
                              |- [service] --*name      (65)
                              |- logtraffic 
                              |- permit-any-host 
                              |- traffic-shaper         (36)
                              |- traffic-shaper-reverse         (36)
                              |- per-ip-shaper  (36)
                              |- fixedport 
                              |- ippool 
                              |- [poolname] --*name     (65)
                              |- tcp-mss-sender         (0,4294967295)
                              |- tcp-mss-receiver       (0,4294967295)
                              |- comments 
                              +- [tags] --*name         (65)
                |- [policy46] -- permit-any-host 
                              |-*policyid       (0,4294967295)
                              |- uuid 
                              |- srcintf        (36)
                              |- dstintf        (36)
                              |- [srcaddr] --*name      (65)
                              |- [dstaddr] --*name      (65)
                              |- action 
                              |- status 
                              |- schedule       (36)
                              |- [service] --*name      (65)
                              |- logtraffic 
                              |- traffic-shaper         (36)
                              |- traffic-shaper-reverse         (36)
                              |- per-ip-shaper  (36)
                              |- fixedport 
                              |- tcp-mss-sender         (0,4294967295)
                              |- tcp-mss-receiver       (0,4294967295)
                              |- comments 
                              +- [tags] --*name         (65)
                |- [explicit-proxy-address] --*name     (36)
                                            |- uuid 
                                            |- type 
                                            |- host     (36)
                                            |- host-regex       (256 xss)
                                            |- path     (256 xss)
                                            |- [category] --*id         (0,4294967295)
                                            |- method 
                                            |- ua 
                                            |- header-name      (80)
                                            |- header   (256 xss)
                                            |- case-sensitivity 
                                            |- [header-group] --*id     (0,4294967295)
                                                              |- header-name    (80)
                                                              |- header         (256 xss)
                                                              +- case-sensitivity 
                                            |- color    (0,32)
                                            |- [tags] --*name   (65)
                                            |- comment 
                                            +- visibility 
                |- [explicit-proxy-addrgrp] --*name     (64)
                                            |- type 
                                            |- uuid 
                                            |- [member] --*name         (65)
                                            |- color    (0,32)
                                            |- [tags] --*name   (65)
                                            |- comment 
                                            +- visibility 
                |- [explicit-proxy-policy] -- uuid 
                                           |-*policyid  (0,4294967295)
                                           |- proxy 
                                           |- [dstintf] --*name         (65)
                                           |- [srcaddr] --*name         (65)
                                           |- [dstaddr] --*name         (65)
                                           |- [service] --*name         (65)
                                           |- srcaddr-negate 
                                           |- dstaddr-negate 
                                           |- service-negate 
                                           |- action 
                                           |- status 
                                           |- schedule  (36)
                                           |- logtraffic 
                                           |- [srcaddr6] --*name        (65)
                                           |- [dstaddr6] --*name        (65)
                                           |- identity-based 
                                           |- ip-based 
                                           |- active-auth-method 
                                           |- sso-auth-method 
                                           |- require-tfa 
                                           |- web-auth-cookie 
                                           |- transaction-based 
                                           |- [identity-based-policy] --*id     (0,4294967295)
                                                                      |- schedule       (36)
                                                                      |- logtraffic 
                                                                      |- logtraffic-start 
                                                                      |- scan-botnet-connections 
                                                                      |- utm-status 
                                                                      |- profile-type 
                                                                      |- profile-group  (36)
                                                                      |- av-profile     (36)
                                                                      |- webfilter-profile      (36)
                                                                      |- spamfilter-profile     (36)
                                                                      |- dlp-sensor     (36)
                                                                      |- ips-sensor     (36)
                                                                      |- application-list       (36)
                                                                      |- casi-profile   (36)
                                                                      |- icap-profile   (36)
                                                                      |- waf-profile    (36)
                                                                      |- profile-protocol-options       (36)
                                                                      |- ssl-ssh-profile        (36)
                                                                      |- [groups] --*name       (65)
                                                                      |- [users] --*name        (65)
                                                                      |- disclaimer 
                                                                      +- replacemsg-override-group      (36)
                                           |- webproxy-forward-server   (64)
                                           |- webproxy-profile  (64)
                                           |- transparent 
                                           |- disclaimer 
                                           |- utm-status 
                                           |- profile-type 
                                           |- profile-group     (36)
                                           |- av-profile        (36)
                                           |- webfilter-profile         (36)
                                           |- spamfilter-profile        (36)
                                           |- dlp-sensor        (36)
                                           |- ips-sensor        (36)
                                           |- application-list  (36)
                                           |- casi-profile      (36)
                                           |- icap-profile      (36)
                                           |- waf-profile       (36)
                                           |- profile-protocol-options  (36)
                                           |- ssl-ssh-profile   (36)
                                           |- replacemsg-override-group         (36)
                                           |- logtraffic-start 
                                           |- [tags] --*name    (65)
                                           |- label     (64 xss)
                                           |- global-label      (64 xss)
                                           |- scan-botnet-connections 
                                           +- comments 
                |- [dnstranslation] --*id       (0,4294967295)
                                    |- src 
                                    |- dst 
                                    +- netmask 
                |- [multicast-policy] --*id     (0,4294967295)
                                      |- status 
                                      |- logtraffic 
                                      |- srcintf        (36)
                                      |- dstintf        (36)
                                      |- [srcaddr] --*name      (65)
                                      |- [dstaddr] --*name      (65)
                                      |- snat 
                                      |- snat-ip 
                                      |- dnat 
                                      |- action 
                                      |- protocol       (0,255)
                                      |- start-port     (0,65535)
                                      |- end-port       (0,65535)
                                      +- auto-asic-offload 
                |- [multicast-policy6] --*id    (0,4294967295)
                                       |- status 
                                       |- logtraffic 
                                       |- srcintf       (36)
                                       |- dstintf       (36)
                                       |- [srcaddr] --*name     (80)
                                       |- [dstaddr] --*name     (80)
                                       |- action 
                                       |- protocol      (0,255)
                                       |- start-port    (0,65535)
                                       |- end-port      (0,65535)
                                       +- auto-asic-offload 
                |- [interface-policy] --*policyid       (0,4294967295)
                                      |- status 
                                      |- logtraffic 
                                      |- address-type 
                                      |- interface      (36)
                                      |- [srcaddr] --*name      (65)
                                      |- [dstaddr] --*name      (65)
                                      |- [service] --*name      (65)
                                      |- application-list-status 
                                      |- application-list       (36)
                                      |- casi-profile-status 
                                      |- casi-profile   (36)
                                      |- ips-sensor-status 
                                      |- ips-sensor     (36)
                                      |- dsri 
                                      |- av-profile-status 
                                      |- av-profile     (36)
                                      |- webfilter-profile-status 
                                      |- webfilter-profile      (36)
                                      |- spamfilter-profile-status 
                                      |- spamfilter-profile     (36)
                                      |- dlp-sensor-status 
                                      |- dlp-sensor     (36)
                                      |- scan-botnet-connections 
                                      +- label  (64 xss)
                |- [interface-policy6] --*policyid      (0,4294967295)
                                       |- status 
                                       |- logtraffic 
                                       |- address-type 
                                       |- interface     (36)
                                       |- [srcaddr6] --*name    (65)
                                       |- [dstaddr6] --*name    (65)
                                       |- [service6] --*name    (65)
                                       |- application-list-status 
                                       |- application-list      (36)
                                       |- casi-profile-status 
                                       |- casi-profile  (36)
                                       |- ips-sensor-status 
                                       |- ips-sensor    (36)
                                       |- dsri 
                                       |- av-profile-status 
                                       |- av-profile    (36)
                                       |- webfilter-profile-status 
                                       |- webfilter-profile     (36)
                                       |- spamfilter-profile-status 
                                       |- spamfilter-profile    (36)
                                       |- dlp-sensor-status 
                                       |- dlp-sensor    (36)
                                       |- scan-botnet-connections 
                                       +- label         (64 xss)
                |- [DoS-policy] --*policyid     (0,9999)
                                |- status 
                                |- interface    (36)
                                |- [srcaddr] --*name    (65)
                                |- [dstaddr] --*name    (65)
                                |- [service] --*name    (65)
                                +- [anomaly] --*name    (64)
                                             |- status 
                                             |- log 
                                             |- action 
                                             |- quarantine 
                                             |- quarantine-expiry 
                                             |- quarantine-log 
                                             |- threshold       (1,2147483647)
                                             +- threshold(default)      (0,4294967295)
                |- [DoS-policy6] --*policyid    (0,9999)
                                 |- status 
                                 |- interface   (36)
                                 |- [srcaddr] --*name   (65)
                                 |- [dstaddr] --*name   (65)
                                 |- [service] --*name   (65)
                                 +- [anomaly] --*name   (64)
                                              |- status 
                                              |- log 
                                              |- action 
                                              |- quarantine 
                                              |- quarantine-expiry 
                                              |- quarantine-log 
                                              |- threshold      (1,2147483647)
                                              +- threshold(default)     (0,4294967295)
                |- [sniffer] --*id      (0,9999)
                             |- status 
                             |- logtraffic 
                             |- ipv6 
                             |- non-ip 
                             |- interface       (36)
                             |- host    (64 xss)
                             |- port    (64 xss)
                             |- protocol        (64 xss)
                             |- vlan    (64 xss)
                             |- application-list-status 
                             |- application-list        (36)
                             |- casi-profile-status 
                             |- casi-profile    (36)
                             |- ips-sensor-status 
                             |- ips-sensor      (36)
                             |- dsri 
                             |- av-profile-status 
                             |- av-profile      (36)
                             |- webfilter-profile-status 
                             |- webfilter-profile       (36)
                             |- spamfilter-profile-status 
                             |- spamfilter-profile      (36)
                             |- dlp-sensor-status 
                             |- dlp-sensor      (36)
                             |- ips-dos-status 
                             |- [anomaly] --*name       (64)
                                          |- status 
                                          |- log 
                                          |- action 
                                          |- quarantine 
                                          |- quarantine-expiry 
                                          |- quarantine-log 
                                          |- threshold  (1,2147483647)
                                          +- threshold(default)         (0,4294967295)
                             |- scan-botnet-connections 
                             +- max-packet-count        (1,10000)
                |- [central-snat-map] --*policyid       (0,4294967295)
                                      |- status 
                                      |- [orig-addr] --*name    (65)
                                      |- [dst-addr] --*name     (65)
                                      |- [nat-ippool] --*name   (65)
                                      |- protocol       (0,255)
                                      |- orig-port      (0,65535)
                                      +- nat-port 
                |- ssl -- <setting> -- proxy-connect-timeout    (1,60)
                                    |- ssl-dh-bits 
                                    |- ssl-send-empty-frags 
                                    |- no-matching-cipher-action 
                                    |- cert-cache-capacity      (0,500)
                                    |- cert-cache-timeout       (1,120)
                                    |- session-cache-capacity   (0,1000)
                                    +- session-cache-timeout    (1,60)
                |- [ip-translation] --*transid  (0,4294967295)
                                    |- type 
                                    |- startip 
                                    |- endip 
                                    +- map-startip 
                |- <ipv6-eh-filter> -- hop-opt 
                                    |- dest-opt 
                                    |- hdopt-type       (0,4294967295)
                                    |- routing 
                                    |- routing-type     (0,4294967295)
                                    |- fragment 
                                    |- auth 
                                    +- no-next 
                |- iprope -- <list> -- <group_number>   (0)
                          +- appctrl -- <list> 
                                     +- <status> 
                |- <proute> -- <policy route id>        (0)
                +- <proute6> 
    |- webfilter -- [ftgd-local-cat] -- id      (0,4294967295)
                                     +-*desc    (80)
                 |- [content] --*id     (0,4294967295)
                              |- name   (36)
                              |- comment 
                              +- [entries] --*name      (128 xss)
                                           |- pattern-type 
                                           |- status 
                                           |- lang 
                                           |- score     (0,4294967295)
                                           +- action 
                 |- [content-header] --*id      (0,4294967295)
                                     |- name    (36)
                                     |- comment 
                                     +- [entries] --*pattern    (32 xss)
                                                  |- action 
                                                  +- category 
                 |- [urlfilter] --*id   (0,4294967295)
                                |- name         (36)
                                |- comment 
                                |- one-arm-ips-urlfilter 
                                |- ip-addr-block 
                                +- [entries] --*id      (0,4294967295)
                                             |- url     (512 xss)
                                             |- type 
                                             |- action 
                                             |- status 
                                             |- exempt 
                                             |- web-proxy-profile       (64)
                                             +- referrer-host   (256)
                 |- <ips-urlfilter-setting> -- device   (36)
                                            |- distance         (1,255)
                                            +- gateway 
                 |- <ips-urlfilter-cache-setting> -- dns-retry-interval         (0,2147483)
                                                  +- extended-ttl       (0,2147483)
                 |- [profile] --*name   (36)
                              |- comment 
                              |- replacemsg-group       (36)
                              |- inspection-mode 
                              |- options 
                              |- https-replacemsg 
                              |- ovrd-perm 
                              |- post-action 
                              |- <override> -- ovrd-cookie 
                                            |- ovrd-scope 
                                            |- profile-type 
                                            |- ovrd-dur-mode 
                                            |- ovrd-dur 
                                            |- profile-attribute 
                                            |- [ovrd-user-group] --*name        (65)
                                            +- [profile] --*name        (65)
                              |- <web> -- bword-threshold       (0,2147483647)
                                       |- bword-table   (0,4294967295)
                                       |- urlfilter-table       (0,4294967295)
                                       |- content-header-list   (0,4294967295)
                                       |- blacklist 
                                       |- whitelist 
                                       |- safe-search 
                                       |- youtube-edu-filter-id         (45)
                                       |- log-search 
                                       +- [keyword-match] --*pattern    (65)
                              |- <ftgd-wf> -- options 
                                           |- category-override 
                                           |- exempt-quota 
                                           |- ovrd 
                                           |- [filters] --*id   (0,4294967295)
                                                        |- category     (0,4294967295)
                                                        |- action 
                                                        |- warn-duration 
                                                        |- [auth-usr-grp] --*name       (65)
                                                        |- log 
                                                        |- override-replacemsg  (29)
                                                        |- warning-prompt 
                                                        +- warning-duration-type 
                                           |- [quota] --*id     (0,4294967295)
                                                      |- category 
                                                      |- type 
                                                      |- unit 
                                                      |- value  (0,4294967295)
                                                      |- duration 
                                                      +- override-replacemsg    (29)
                                           |- max-quota-timeout         (1,86400)
                                           |- rate-image-urls 
                                           |- rate-javascript-urls 
                                           |- rate-css-urls 
                                           +- rate-crl-urls 
                              |- wisp 
                              |- [wisp-servers] --*name         (65)
                              |- wisp-algorithm 
                              |- log-all-url 
                              |- web-content-log 
                              |- web-filter-activex-log 
                              |- web-filter-command-block-log 
                              |- web-filter-cookie-log 
                              |- web-filter-applet-log 
                              |- web-filter-jscript-log 
                              |- web-filter-js-log 
                              |- web-filter-vbs-log 
                              |- web-filter-unknown-log 
                              |- web-filter-referer-log 
                              |- web-filter-cookie-removal-log 
                              |- web-url-log 
                              |- web-invalid-domain-log 
                              |- web-ftgd-err-log 
                              +- web-ftgd-quota-usage 
                 |- <fortiguard> -- cache-mode 
                                 |- cache-prefix-match 
                                 |- cache-mem-percent   (1,15)
                                 |- ovrd-auth-port-http         (0,4294967295)
                                 |- ovrd-auth-port-https        (0,4294967295)
                                 |- ovrd-auth-port-warning      (0,4294967295)
                                 |- ovrd-auth-https 
                                 |- warn-auth-https 
                                 |- close-ports 
                                 |- request-packet-size-limit   (0,4294967295)
                                 +- ovrd-auth-port      (0,4294967295)
                 |- <categories> 
                 |- [override] --*id    (0,4294967295)
                               |- status 
                               |- scope 
                               |- ip 
                               |- user  (65)
                               |- user-group    (64)
                               |- old-profile   (36)
                               |- new-profile   (36)
                               |- ip6 
                               |- expires 
                               +- initiator     (65)
                 |- [override-user] --*id       (0,4294967295)
                                    |- status 
                                    |- scope 
                                    |- ip 
                                    |- user     (65)
                                    |- user-group       (64)
                                    |- old-profile      (36)
                                    |- new-profile      (36)
                                    |- ip6 
                                    |- expires 
                                    +- initiator        (65)
                 |- [ftgd-warning] --*id        (0,4294967295)
                                   |- status 
                                   |- scope 
                                   |- ip 
                                   |- user      (65)
                                   |- user-group        (64)
                                   |- old-profile       (36)
                                   |- expires 
                                   +- rating    (0,4294967295)
                 |- [ftgd-local-rating] --*url  (512 xss)
                                        |- status 
                                        +- rating 
                 |- [search-engine] --*name     (36)
                                    |- hostname         (128 xss)
                                    |- url      (128 xss)
                                    |- query    (16 xss)
                                    |- safesearch 
                                    |- charset 
                                    +- safesearch-str   (80 xss)
                 |- <cookie-ovrd> -- redir-host         (256)
                                  +- redir-port         (0,4294967295)
                 |- <ftgd-statistics> 
                 |- <status> -- <refresh-rate>  (0)
                 +- <override-usr> 
    |- ips -- [sensor] --*name  (36)
                       |- comment 
                       |- replacemsg-group      (36)
                       |- block-malicious-url 
                       |- [entries] --*id       (0,4294967295)
                                    |- [rule] --*id     (0,4294967295)
                                    |- location 
                                    |- severity 
                                    |- protocol 
                                    |- os 
                                    |- application 
                                    |- [tags] --*name   (65)
                                    |- status 
                                    |- log 
                                    |- log-packet 
                                    |- log-attack-context 
                                    |- action 
                                    |- rate-count       (0,65535)
                                    |- rate-duration    (1,65535)
                                    |- rate-mode 
                                    |- rate-track 
                                    |- [exempt-ip] --*id        (0,4294967295)
                                                   |- src-ip 
                                                   +- dst-ip 
                                    |- quarantine 
                                    |- quarantine-expiry 
                                    +- quarantine-log 
                       |- [filter] --*name      (32)
                                   |- location 
                                   |- severity 
                                   |- protocol 
                                   |- os 
                                   |- application 
                                   |- status 
                                   |- log 
                                   |- log-packet 
                                   |- action 
                                   |- quarantine 
                                   |- quarantine-expiry         (1,2147483647)
                                   +- quarantine-log 
                       +- [override] --*rule-id         (0,4294967295)
                                     |- status 
                                     |- log 
                                     |- log-packet 
                                     |- action 
                                     |- quarantine 
                                     |- quarantine-expiry       (1,2147483647)
                                     |- quarantine-log 
                                     +- [exempt-ip] --*id       (0,4294967295)
                                                    |- src-ip 
                                                    +- dst-ip 
           |- [attr-map] --*id  (0,4294967295)
                         |- name        (32)
                         +- [children] --*map-id        (0,4294967295)
           |- [metadata-map] --*id      (0,4294967295)
                             |- type    (0,4294967295)
                             |- name    (32)
                             +- [values] --*subid       (0,4294967295)
                                         +- subname     (32)
           |- [view-map] --*id  (0,4294967295)
                         |- vdom-id     (0,4294967295)
                         |- policy-id   (0,4294967295)
                         |- id-policy-id        (0,4294967295)
                         +- which 
           |- [decoder] --*name         (64)
                        +- [parameter] --*name  (32)
                                       +- value         (200)
           |- [rule] --*name    (64)
                     |- status 
                     |- log 
                     |- log-packet 
                     |- action 
                     |- group   (64)
                     |- severity 
                     |- location 
                     |- os 
                     |- application 
                     |- service 
                     |- rule-id         (0,4294967295)
                     |- rev     (0,4294967295)
                     |- date    (0,4294967295)
                     +- [metadata] --*id        (0,4294967295)
                                   |- metaid    (0,4294967295)
                                   +- valueid   (0,4294967295)
           |- [rule-settings] --*id     (0,4294967295)
                              +- [tags] --*name         (65)
           |- [custom] --*tag   (64)
                       |- signature     (1024 xss)
                       |- sig-name      (64)
                       |- rule-id       (0,4294967295)
                       |- severity 
                       |- location 
                       |- os 
                       |- application 
                       |- protocol 
                       |- status 
                       |- log 
                       |- log-packet 
                       |- action 
                       +- comment       (64 xss)
           |- <global> -- fail-open 
                       |- database 
                       |- traffic-submit 
                       |- anomaly-mode 
                       |- session-limit-mode 
                       |- intelligent-mode 
                       |- socket-size   (0,4294967295)
                       |- engine-count  (0,4294967295)
                       |- algorithm 
                       |- sync-session-ttl 
                       |- np-accel-mode 
                       |- cp-accel-mode 
                       |- skype-client-public-ipaddr 
                       |- default-app-cat-mask 
                       |- deep-app-insp-timeout         (0,4294967295)
                       |- deep-app-insp-db-limit        (0,4294967295)
                       +- exclude-signatures 
           |- <settings> -- packet-log-history  (1,255)
                         |- packet-log-post-attack      (0,255)
                         |- packet-log-memory   (0,4294967295)
                         +- ips-packet-quota    (0,4294967295)
           |- <dbinfo> -- version       (0,4294967295)
           +- <session> 
    |- web-proxy -- [profile] --*name   (64)
                              |- header-client-ip 
                              |- header-via-request 
                              |- header-via-response 
                              |- header-x-forwarded-for 
                              |- header-front-end-https 
                              +- [headers] --*id        (0,4294967295)
                                           |- name      (80)
                                           |- action 
                                           +- content   (256)
                 |- <global> -- proxy-fqdn      (256)
                             |- max-request-length      (2,64)
                             |- max-message-length      (16,256)
                             |- strict-web-check 
                             |- forward-proxy-auth 
                             |- tunnel-non-http 
                             |- unknown-http-version 
                             |- forward-server-affinity-timeout         (6,60)
                             |- max-waf-body-cache-length       (10,1024)
                             +- webproxy-profile        (64)
                 |- <explicit> -- status 
                               |- ftp-over-http 
                               |- socks 
                               |- http-incoming-port    (1,65535)
                               |- https-incoming-port   (0,65535)
                               |- ftp-incoming-port     (0,65535)
                               |- socks-incoming-port   (0,65535)
                               |- incoming-ip 
                               |- outgoing-ip 
                               |- ipv6-status 
                               |- incoming-ip6 
                               |- outgoing-ip6 
                               |- strict-guest 
                               |- pref-dns-result 
                               |- unknown-http-version 
                               |- realm         (64)
                               |- sec-default-action 
                               |- https-replacement-message 
                               |- message-upon-server-error 
                               |- pac-file-server-status 
                               |- pac-file-server-port  (0,65535)
                               |- pac-file-name         (64)
                               |- pac-file-data 
                               |- pac-file-url 
                               +- ssl-algorithm 
                 |- [forward-server] --*name    (64)
                                     |- ip 
                                     |- fqdn    (256)
                                     |- addr-type 
                                     |- port    (1,65535)
                                     |- healthcheck 
                                     |- monitor         (256)
                                     |- server-down-option 
                                     +- comment         (64 xss)
                 |- [forward-server-group] --*name      (64)
                                           |- affinity 
                                           |- ldb-method 
                                           |- group-down-option 
                                           +- [server-list] --*name     (64)
                                                            +- weight   (1,100)
                 |- [debug-url] --*name         (64)
                                |- url-pattern  (512)
                                |- status 
                                +- exact 
                 |- [wisp] --*name      (36)
                           |- comment 
                           |- outgoing-ip 
                           |- server-ip 
                           |- server-port       (1,65535)
                           |- max-connections   (4,4096)
                           +- timeout   (1,15)
                 +- [url-match] --*name         (64)
                                |- status 
                                |- url-pattern  (512)
                                |- forward-server       (36)
                                |- cache-exemption 
                                +- comment 
    |- ftp-proxy -- <explicit> -- status 
                               |- incoming-port         (1,65535)
                               |- incoming-ip 
                               |- outgoing-ip 
                               +- sec-default-action 
    |- application -- [internet-service] --*id  (0,4294967295)
                                         |- name        (64 xss)
                                         |- reputation  (0,4294967295)
                                         |- offset      (0,4294967295)
                                         +- [entry] --*id       (0,4294967295)
                                                    |- protocol         (0,255)
                                                    |- port     (0,65535)
                                                    |- ip-range-number  (0,4294967295)
                                                    +- ip-number        (0,4294967295)
                   |- [internet-service-custom] --*name         (64 xss)
                                                |- master-service-id    (0,4294967295)
                                                |- comment      (64 xss)
                                                |- [entry] --*id        (0,255)
                                                           |- protocol  (0,255)
                                                           |- [port-range] --*id        (0,4294967295)
                                                                           |- start-port        (1,65535)
                                                                           +- end-port  (1,65535)
                                                           +- [dst] --*name     (65)
                                                +- [disable-entry] --*id        (0,4294967295)
                                                                   |- protocol  (0,255)
                                                                   |- port      (0,65535)
                                                                   +- [ip-range] --*id  (0,4294967295)
                                                                                 |- start-ip 
                                                                                 +- end-ip 
                   |- <internet-service-summary> 
                   |- [name] --*name    (64)
                             |- id      (0,4294967295)
                             |- category        (0,4294967295)
                             |- sub-category    (0,4294967295)
                             |- popularity      (0,4294967295)
                             |- risk    (0,4294967295)
                             |- protocol 
                             |- technology 
                             |- behavior 
                             |- vendor 
                             |- parameter       (36)
                             +- [metadata] --*id        (0,4294967295)
                                           |- metaid    (0,4294967295)
                                           +- valueid   (0,4294967295)
                   |- [custom] --*tag   (64)
                               |- name  (64)
                               |- id    (0,4294967295)
                               |- comment       (64 xss)
                               |- signature     (1024 xss)
                               |- category      (0,4294967295)
                               |- protocol 
                               |- technology 
                               |- behavior 
                               +- vendor 
                   |- [rule-settings] --*id     (0,4294967295)
                                      +- [tags] --*name         (65)
                   |- [list] --*name    (36)
                             |- comment 
                             |- replacemsg-group        (36)
                             |- other-application-action 
                             |- app-replacemsg 
                             |- other-application-log 
                             |- unknown-application-action 
                             |- unknown-application-log 
                             |- p2p-black-list 
                             |- deep-app-inspection 
                             |- options 
                             +- [entries] --*id         (0,4294967295)
                                          |- [risk] --*level    (0,4294967295)
                                          |- [category] --*id   (0,4294967295)
                                          |- [sub-category] --*id       (0,4294967295)
                                          |- [application] --*id        (0,4294967295)
                                          |- protocols 
                                          |- vendor 
                                          |- technology 
                                          |- behavior 
                                          |- popularity 
                                          |- [tags] --*name     (65)
                                          |- [parameters] --*id         (0,4294967295)
                                                          +- value      (64 xss)
                                          |- action 
                                          |- log 
                                          |- log-packet 
                                          |- rate-count         (0,65535)
                                          |- rate-duration      (1,65535)
                                          |- rate-mode 
                                          |- rate-track 
                                          |- session-ttl        (0,4294967295)
                                          |- shaper     (36)
                                          |- shaper-reverse     (36)
                                          |- per-ip-shaper      (36)
                                          |- quarantine 
                                          |- quarantine-expiry 
                                          +- quarantine-log 
                   +- casi -- <application> 
                           +- [profile] --*name         (36)
                                        |- comment 
                                        |- replacemsg-group     (36)
                                        |- app-replacemsg 
                                        +- [entries] --*id      (0,4294967295)
                                                     |- [application] --*id     (0,4294967295)
                                                     |- action 
                                                     +- log 
    |- dlp -- [filepattern] --*id       (0,4294967295)
                            |- name     (36)
                            |- comment 
                            +- [entries] -- filter-type 
                                         |-*pattern     (80 xss)
                                         +- file-type 
           |- [fp-sensitivity] --*name  (36)
           +- [sensor] --*name  (36)
                       |- comment 
                       |- replacemsg-group      (36)
                       |- [filter] --*id        (0,4294967295)
                                   |- name      (36)
                                   |- severity 
                                   |- type 
                                   |- proto 
                                   |- filter-by 
                                   |- file-size         (0,4294967295)
                                   |- company-identifier        (36)
                                   |- [fp-sensitivity] --*name  (36)
                                   |- file-type         (0,4294967295)
                                   |- regexp    (256 xss)
                                   |- archive 
                                   |- action 
                                   +- expiry 
                       |- dlp-log 
                       |- nac-quar-log 
                       |- flow-based 
                       |- options 
                       |- full-archive-proto 
                       +- summary-proto 
    |- spamfilter -- [bword] --*id      (0,4294967295)
                             |- name    (36)
                             |- comment 
                             +- [entries] -- status 
                                          |-*id         (0,4294967295)
                                          |- pattern    (128 xss)
                                          |- pattern-type 
                                          |- action 
                                          |- where 
                                          |- language 
                                          +- score      (1,99999)
                  |- [bwl] --*id        (0,4294967295)
                           |- name      (36)
                           |- comment 
                           +- [entries] -- status 
                                        |-*id   (0,4294967295)
                                        |- type 
                                        |- action 
                                        |- addr-type 
                                        |- ip4-subnet 
                                        |- ip6-subnet 
                                        |- pattern-type 
                                        +- email-pattern        (128 xss)
                  |- [mheader] --*id    (0,4294967295)
                               |- name  (36)
                               |- comment 
                               +- [entries] -- status 
                                            |-*id       (0,4294967295)
                                            |- fieldname        (64 xss)
                                            |- fieldbody        (128 xss)
                                            |- pattern-type 
                                            +- action 
                  |- [dnsbl] --*id      (0,4294967295)
                             |- name    (36)
                             |- comment 
                             +- [entries] -- status 
                                          |-*id         (0,4294967295)
                                          |- server     (128)
                                          +- action 
                  |- [iptrust] --*id    (0,4294967295)
                               |- name  (36)
                               |- comment 
                               +- [entries] -- status 
                                            |-*id       (0,4294967295)
                                            |- addr-type 
                                            |- ip4-subnet 
                                            +- ip6-subnet 
                  |- [profile] --*name  (36)
                               |- comment 
                               |- flow-based 
                               |- replacemsg-group      (36)
                               |- spam-log 
                               |- spam-log-fortiguard-response 
                               |- spam-filtering 
                               |- external 
                               |- options 
                               |- <imap> -- log 
                                         |- action 
                                         |- tag-type 
                                         +- tag-msg     (64)
                               |- <pop3> -- log 
                                         |- action 
                                         |- tag-type 
                                         +- tag-msg     (64)
                               |- <smtp> -- log 
                                         |- action 
                                         |- tag-type 
                                         |- tag-msg     (64)
                                         |- hdrip 
                                         +- local-override 
                               |- <mapi> -- log 
                                         +- action 
                               |- <msn-hotmail> -- log 
                               |- <yahoo-mail> -- log 
                               |- <gmail> -- log 
                               |- spam-bword-threshold  (0,2147483647)
                               |- spam-bword-table      (0,4294967295)
                               |- spam-bwl-table        (0,4294967295)
                               |- spam-mheader-table    (0,4294967295)
                               |- spam-rbl-table        (0,4294967295)
                               +- spam-iptrust-table    (0,4294967295)
                  |- <fortishield> -- spam-submit-srv   (64)
                                   |- spam-submit-force 
                                   +- spam-submit-txt2htm 
                  +- <options> -- dns-timeout   (1,30)
    |- log -- <threat-weight> -- status 
                              |- <level> -- low         (1,100)
                                         |- medium      (1,100)
                                         |- high        (1,100)
                                         +- critical    (1,100)
                              |- blocked-connection 
                              |- failed-connection 
                              |- malware-detected 
                              |- url-block-detected 
                              |- botnet-connection-detected 
                              |- <ips> -- info-severity 
                                       |- low-severity 
                                       |- medium-severity 
                                       |- high-severity 
                                       +- critical-severity 
                              |- [web] --*id    (0,4294967295)
                                       |- category      (0,4294967295)
                                       +- level 
                              |- [geolocation] --*id    (0,4294967295)
                                               |- country       (3)
                                               +- level 
                              +- [application] --*id    (0,4294967295)
                                               |- category      (0,4294967295)
                                               +- level 
           |- [custom-field] --*id      (36)
                             |- name    (16)
                             +- value   (16)
           |- syslogd -- <setting> -- status 
                                   |- server    (64)
                                   |- reliable 
                                   |- port      (0,4294967295)
                                   |- csv 
                                   |- facility 
                                   +- source-ip         (64)
                      |- <override-setting> -- override 
                                            |- status 
                                            |- server   (64)
                                            |- reliable 
                                            |- port     (0,4294967295)
                                            |- csv 
                                            |- facility 
                                            +- source-ip        (64)
                      |- <filter> -- severity 
                                  |- forward-traffic 
                                  |- local-traffic 
                                  |- multicast-traffic 
                                  |- sniffer-traffic 
                                  |- anomaly 
                                  |- netscan-discovery 
                                  |- netscan-vulnerability 
                                  |- voip 
                                  |- filter     (512 xss)
                                  +- filter-type 
                      +- <override-filter> -- severity 
                                           |- forward-traffic 
                                           |- local-traffic 
                                           |- multicast-traffic 
                                           |- sniffer-traffic 
                                           |- anomaly 
                                           |- netscan-discovery 
                                           |- netscan-vulnerability 
                                           |- voip 
                                           |- filter    (512 xss)
                                           +- filter-type 
           |- syslogd2 -- <setting> -- status 
                                    |- server   (64)
                                    |- reliable 
                                    |- port     (0,4294967295)
                                    |- csv 
                                    |- facility 
                                    +- source-ip        (64)
                       +- <filter> -- severity 
                                   |- forward-traffic 
                                   |- local-traffic 
                                   |- multicast-traffic 
                                   |- sniffer-traffic 
                                   |- anomaly 
                                   |- netscan-discovery 
                                   |- netscan-vulnerability 
                                   |- voip 
                                   |- filter    (512 xss)
                                   +- filter-type 
           |- syslogd3 -- <setting> -- status 
                                    |- server   (64)
                                    |- reliable 
                                    |- port     (0,4294967295)
                                    |- csv 
                                    |- facility 
                                    +- source-ip        (64)
                       +- <filter> -- severity 
                                   |- forward-traffic 
                                   |- local-traffic 
                                   |- multicast-traffic 
                                   |- sniffer-traffic 
                                   |- anomaly 
                                   |- netscan-discovery 
                                   |- netscan-vulnerability 
                                   |- voip 
                                   |- filter    (512 xss)
                                   +- filter-type 
           |- syslogd4 -- <setting> -- status 
                                    |- server   (64)
                                    |- reliable 
                                    |- port     (0,4294967295)
                                    |- csv 
                                    |- facility 
                                    +- source-ip        (64)
                       +- <filter> -- severity 
                                   |- forward-traffic 
                                   |- local-traffic 
                                   |- multicast-traffic 
                                   |- sniffer-traffic 
                                   |- anomaly 
                                   |- netscan-discovery 
                                   |- netscan-vulnerability 
                                   |- voip 
                                   |- filter    (512 xss)
                                   +- filter-type 
           |- webtrends -- <setting> -- status 
                                     +- server  (64)
                        +- <filter> -- severity 
                                    |- forward-traffic 
                                    |- local-traffic 
                                    |- multicast-traffic 
                                    |- sniffer-traffic 
                                    |- anomaly 
                                    |- netscan-discovery 
                                    |- netscan-vulnerability 
                                    |- voip 
                                    |- filter   (512 xss)
                                    +- filter-type 
           |- memory -- <global-setting> -- max-size    (0,4294967295)
                                         |- full-first-warning-threshold        (1,98)
                                         |- full-second-warning-threshold       (2,99)
                                         +- full-final-warning-threshold        (3,100)
                     |- <setting> -- status 
                                  +- diskfull 
                     +- <filter> -- severity 
                                 |- forward-traffic 
                                 |- local-traffic 
                                 |- multicast-traffic 
                                 |- sniffer-traffic 
                                 |- anomaly 
                                 |- netscan-discovery 
                                 |- netscan-vulnerability 
                                 |- voip 
                                 |- event 
                                 |- system 
                                 |- radius 
                                 |- ipsec 
                                 |- dhcp 
                                 |- ppp 
                                 |- admin 
                                 |- ha 
                                 |- auth 
                                 |- pattern 
                                 |- sslvpn-log-auth 
                                 |- sslvpn-log-adm 
                                 |- sslvpn-log-session 
                                 |- ldb-monitor 
                                 |- wan-opt 
                                 |- wireless-activity 
                                 |- cpu-memory-usage 
                                 |- filter      (512 xss)
                                 +- filter-type 
           |- disk -- <setting> -- status 
                                |- ips-archive 
                                |- max-log-file-size    (0,4294967295)
                                |- max-policy-packet-capture-size       (0,4294967295)
                                |- roll-schedule 
                                |- roll-day 
                                |- roll-time 
                                |- diskfull 
                                |- log-quota    (0,4294967295)
                                |- dlp-archive-quota    (0,4294967295)
                                |- maximum-log-age      (0,4294967295)
                                |- upload 
                                |- upload-destination 
                                |- uploadip 
                                |- uploadport   (0,4294967295)
                                |- source-ip 
                                |- uploaduser   (36)
                                |- uploadpass 
                                |- uploaddir    (64)
                                |- uploadtype 
                                |- uploadzip 
                                |- uploadsched 
                                |- uploadtime   (0,4294967295)
                                |- upload-delete-files 
                                |- upload-ssl-conn 
                                |- full-first-warning-threshold         (1,98)
                                |- full-second-warning-threshold        (2,99)
                                +- full-final-warning-threshold         (3,100)
                   +- <filter> -- severity 
                               |- forward-traffic 
                               |- local-traffic 
                               |- multicast-traffic 
                               |- sniffer-traffic 
                               |- anomaly 
                               |- netscan-discovery 
                               |- netscan-vulnerability 
                               |- voip 
                               |- event 
                               |- system 
                               |- radius 
                               |- ipsec 
                               |- dhcp 
                               |- ppp 
                               |- admin 
                               |- ha 
                               |- auth 
                               |- pattern 
                               |- sslvpn-log-auth 
                               |- sslvpn-log-adm 
                               |- sslvpn-log-session 
                               |- ldb-monitor 
                               |- wan-opt 
                               |- wireless-activity 
                               |- cpu-memory-usage 
                               |- filter        (512 xss)
                               +- filter-type 
           |- <eventfilter> -- event 
                            |- system 
                            |- vpn 
                            |- user 
                            |- router 
                            |- wireless-activity 
                            |- wan-opt 
                            |- endpoint 
                            |- ha 
                            +- compliance-check 
           |- fortiguard -- <setting> -- status 
                                      |- upload-option 
                                      |- upload-interval 
                                      |- upload-day 
                                      |- upload-time 
                                      |- enc-algorithm 
                                      +- source-ip 
                         |- <override-setting> -- override 
                                               |- status 
                                               |- upload-option 
                                               |- upload-interval 
                                               |- upload-day 
                                               +- upload-time 
                         |- <filter> -- severity 
                                     |- forward-traffic 
                                     |- local-traffic 
                                     |- multicast-traffic 
                                     |- sniffer-traffic 
                                     |- anomaly 
                                     |- netscan-discovery 
                                     |- netscan-vulnerability 
                                     |- voip 
                                     |- dlp-archive 
                                     |- filter  (512 xss)
                                     +- filter-type 
                         +- <override-filter> -- severity 
                                              |- forward-traffic 
                                              |- local-traffic 
                                              |- multicast-traffic 
                                              |- sniffer-traffic 
                                              |- anomaly 
                                              |- netscan-discovery 
                                              |- netscan-vulnerability 
                                              |- voip 
                                              |- dlp-archive 
                                              |- filter         (512 xss)
                                              +- filter-type 
           |- null-device -- <setting> -- status 
                          +- <filter> -- severity 
                                      |- forward-traffic 
                                      |- local-traffic 
                                      |- multicast-traffic 
                                      |- sniffer-traffic 
                                      |- anomaly 
                                      |- netscan-discovery 
                                      |- netscan-vulnerability 
                                      |- voip 
                                      |- filter         (512 xss)
                                      +- filter-type 
           |- <setting> -- resolve-ip 
                        |- resolve-port 
                        |- log-user-in-upper 
                        |- fwpolicy-implicit-log 
                        |- fwpolicy6-implicit-log 
                        |- log-invalid-packet 
                        |- local-in-allow 
                        |- local-in-deny-unicast 
                        |- local-in-deny-broadcast 
                        |- local-out 
                        |- daemon-log 
                        |- neighbor-event 
                        |- brief-traffic-format 
                        +- user-anonymize 
           |- <gui-display> -- resolve-hosts 
                            |- resolve-apps 
                            |- fortiview-unscanned-apps 
                            |- fortiview-local-traffic 
                            +- location 
           |- fortianalyzer -- <setting> -- status 
                                         |- ips-archive 
                                         |- server      (64)
                                         |- hmac-algorithm 
                                         |- enc-algorithm 
                                         |- conn-timeout        (1,3600)
                                         |- monitor-keepalive-period    (1,120)
                                         |- monitor-failure-retry-period        (1,86400)
                                         |- mgmt-name   (36)
                                         |- faz-type    (0,4294967295)
                                         |- source-ip   (64)
                                         |- __change_ip         (0,4294967295)
                                         |- upload-option 
                                         |- upload-interval 
                                         |- upload-day 
                                         |- upload-time 
                                         +- reliable 
                            |- <override-setting> -- override 
                                                  |- use-management-vdom 
                                                  |- status 
                                                  |- ips-archive 
                                                  |- server     (64)
                                                  |- hmac-algorithm 
                                                  |- enc-algorithm 
                                                  |- conn-timeout       (1,3600)
                                                  |- monitor-keepalive-period   (1,120)
                                                  |- monitor-failure-retry-period       (1,86400)
                                                  |- mgmt-name  (36)
                                                  |- faz-type   (0,4294967295)
                                                  |- source-ip  (64)
                                                  |- __change_ip        (0,4294967295)
                                                  |- upload-option 
                                                  |- upload-interval 
                                                  |- upload-day 
                                                  |- upload-time 
                                                  +- reliable 
                            |- <filter> -- severity 
                                        |- forward-traffic 
                                        |- local-traffic 
                                        |- multicast-traffic 
                                        |- sniffer-traffic 
                                        |- anomaly 
                                        |- netscan-discovery 
                                        |- netscan-vulnerability 
                                        |- voip 
                                        |- dlp-archive 
                                        |- filter       (512 xss)
                                        +- filter-type 
                            +- <override-filter> -- severity 
                                                 |- forward-traffic 
                                                 |- local-traffic 
                                                 |- multicast-traffic 
                                                 |- sniffer-traffic 
                                                 |- anomaly 
                                                 |- netscan-discovery 
                                                 |- netscan-vulnerability 
                                                 |- voip 
                                                 |- dlp-archive 
                                                 |- filter      (512 xss)
                                                 +- filter-type 
           |- fortianalyzer2 -- <setting> -- status 
                                          |- ips-archive 
                                          |- server     (64)
                                          |- hmac-algorithm 
                                          |- enc-algorithm 
                                          |- conn-timeout       (1,3600)
                                          |- monitor-keepalive-period   (1,120)
                                          |- monitor-failure-retry-period       (1,86400)
                                          |- mgmt-name  (36)
                                          |- faz-type   (0,4294967295)
                                          |- source-ip  (64)
                                          |- __change_ip        (0,4294967295)
                                          |- upload-option 
                                          |- upload-interval 
                                          |- upload-day 
                                          |- upload-time 
                                          +- reliable 
                             +- <filter> -- severity 
                                         |- forward-traffic 
                                         |- local-traffic 
                                         |- multicast-traffic 
                                         |- sniffer-traffic 
                                         |- anomaly 
                                         |- netscan-discovery 
                                         |- netscan-vulnerability 
                                         |- voip 
                                         |- dlp-archive 
                                         |- filter      (512 xss)
                                         +- filter-type 
           +- fortianalyzer3 -- <setting> -- status 
                                          |- ips-archive 
                                          |- server     (64)
                                          |- hmac-algorithm 
                                          |- enc-algorithm 
                                          |- conn-timeout       (1,3600)
                                          |- monitor-keepalive-period   (1,120)
                                          |- monitor-failure-retry-period       (1,86400)
                                          |- mgmt-name  (36)
                                          |- faz-type   (0,4294967295)
                                          |- source-ip  (64)
                                          |- __change_ip        (0,4294967295)
                                          |- upload-option 
                                          |- upload-interval 
                                          |- upload-day 
                                          |- upload-time 
                                          +- reliable 
                             +- <filter> -- severity 
                                         |- forward-traffic 
                                         |- local-traffic 
                                         |- multicast-traffic 
                                         |- sniffer-traffic 
                                         |- anomaly 
                                         |- netscan-discovery 
                                         |- netscan-vulnerability 
                                         |- voip 
                                         |- filter      (512 xss)
                                         +- filter-type 
    |- netscan -- [assets] --*asset-id  (0,4294967295)
                           |- name      (64)
                           |- scheduled 
                           |- addr-type 
                           |- start-ip 
                           |- end-ip 
                           |- auth-windows 
                           |- auth-unix 
                           |- win-username      (128 xss)
                           |- win-password 
                           |- unix-username     (128 xss)
                           +- unix-password 
               +- <settings> -- scan-mode 
                             |- scheduled-pause 
                             |- time 
                             |- pause-from 
                             |- pause-to 
                             |- recurrence 
                             |- day-of-week 
                             |- day-of-month    (1,31)
                             |- tcp-ports 
                             |- udp-ports 
                             |- tcp-scan 
                             |- udp-scan 
                             |- service-detection 
                             +- os-detection 
    |- icap -- [server] --*name         (36)
                        |- ip-version 
                        |- ip-address 
                        |- ip6-address 
                        |- port         (1,65535)
                        +- max-connections      (1,65535)
            +- [profile] -- replacemsg-group    (36)
                         |-*name        (36)
                         |- request 
                         |- response 
                         |- streaming-content-bypass 
                         |- request-server      (36)
                         |- response-server     (36)
                         |- request-failure 
                         |- response-failure 
                         |- request-path        (128)
                         |- response-path       (128)
                         +- methods 
    |- vpn -- certificate -- [ca] --*name       (80)
                                  |- ca 
                                  |- range 
                                  |- source 
                                  |- trusted 
                                  |- scep-url   (256 xss)
                                  |- auto-update-days   (0,4294967295)
                                  |- auto-update-days-warning   (0,4294967295)
                                  +- source-ip 
                          |- [local] --*name    (36)
                                     |- password 
                                     |- comments        (512 xss)
                                     |- private-key 
                                     |- certificate 
                                     |- csr 
                                     |- state 
                                     |- scep-url        (256 xss)
                                     |- range 
                                     |- source 
                                     |- auto-regenerate-days    (0,4294967295)
                                     |- auto-regenerate-days-warning    (0,4294967295)
                                     |- scep-password 
                                     |- ca-identifier   (256)
                                     |- name-encoding 
                                     |- source-ip 
                                     |- ike-localid     (64)
                                     +- ike-localid-type 
                          |- [crl] --*name      (36)
                                   |- crl 
                                   |- range 
                                   |- source 
                                   |- update-vdom       (12)
                                   |- ldap-server       (36)
                                   |- ldap-username     (64)
                                   |- ldap-password 
                                   |- http-url  (256 xss)
                                   |- scep-url  (256 xss)
                                   |- scep-cert         (36)
                                   |- update-interval   (0,4294967295)
                                   +- source-ip 
                          |- [remote] --*name   (36)
                                      |- remote 
                                      |- range 
                                      +- source 
                          |- [ocsp-server] --*name      (36)
                                           |- url       (128)
                                           |- cert      (36)
                                           |- secondary-url     (128)
                                           |- secondary-cert    (36)
                                           |- unavail-action 
                                           +- source-ip 
                          +- <setting> -- ocsp-status 
                                       |- ocsp-default-server   (36)
                                       |- check-ca-cert 
                                       |- strict-crl-check 
                                       +- strict-ocsp-check 
           |- ssl -- web -- [realm] --*url-path         (36)
                                    |- max-concurrent-user      (0,65535)
                                    |- login-page 
                                    +- virtual-host 
                         |- [virtual-desktop-app-list] --*name  (36)
                                                       |- action 
                                                       +- [apps] --*name        (36)
                                                                 +- [md5s] --*id        (33)
                         |- [host-check-software] --*name       (64)
                                                  |- type 
                                                  |- version    (36)
                                                  |- guid 
                                                  +- [check-item-list] --*id    (0,4294967295)
                                                                       |- action 
                                                                       |- type 
                                                                       |- target        (256 xss)
                                                                       |- version       (36)
                                                                       +- [md5s] --*id  (33)
                         |- [portal] --*name    (36)
                                     |- tunnel-mode 
                                     |- ip-mode 
                                     |- auto-connect 
                                     |- keep-alive 
                                     |- save-password 
                                     |- [ip-pools] --*name      (65)
                                     |- exclusive-routing 
                                     |- service-restriction 
                                     |- split-tunneling 
                                     |- [split-tunneling-routing-address] --*name       (65)
                                     |- dns-server1 
                                     |- dns-server2 
                                     |- wins-server1 
                                     |- wins-server2 
                                     |- ipv6-tunnel-mode 
                                     |- [ipv6-pools] --*name    (65)
                                     |- ipv6-exclusive-routing 
                                     |- ipv6-service-restriction 
                                     |- ipv6-split-tunneling 
                                     |- [ipv6-split-tunneling-routing-address] --*name  (65)
                                     |- ipv6-dns-server1 
                                     |- ipv6-dns-server2 
                                     |- ipv6-wins-server1 
                                     |- ipv6-wins-server2 
                                     |- web-mode 
                                     |- display-bookmark 
                                     |- user-bookmark 
                                     |- user-group-bookmark 
                                     |- [bookmark-group] --*name        (36)
                                                         +- [bookmarks] --*name         (36)
                                                                        |- apptype 
                                                                        |- url 
                                                                        |- host 
                                                                        |- folder 
                                                                        |- additional-params 
                                                                        |- listening-port       (0,65535)
                                                                        |- remote-port  (0,65535)
                                                                        |- show-status-window 
                                                                        |- description 
                                                                        |- server-layout 
                                                                        |- security 
                                                                        |- port         (0,65535)
                                                                        |- logon-user 
                                                                        |- logon-password 
                                                                        |- sso 
                                                                        |- [form-data] --*name  (36)
                                                                                       +- value 
                                                                        |- sso-credential 
                                                                        |- sso-username 
                                                                        +- sso-password 
                                     |- display-connection-tools 
                                     |- display-history 
                                     |- display-status 
                                     |- heading         (32)
                                     |- redir-url 
                                     |- theme 
                                     |- custom-lang     (36)
                                     |- host-check 
                                     |- host-check-interval     (0,4294967295)
                                     |- [host-check-policy] --*name     (65)
                                     |- limit-user-logins 
                                     |- mac-addr-check 
                                     |- mac-addr-action 
                                     |- [mac-addr-check-rule] --*name   (36)
                                                              |- mac-addr-mask  (1,48)
                                                              +- [mac-addr-list] --*addr 
                                     |- os-check 
                                     |- [os-check-list] --*name         (16)
                                                        |- action 
                                                        |- tolerance    (0,255)
                                                        +- latest-patch-level 
                                     |- virtual-desktop 
                                     |- virtual-desktop-app-list        (36)
                                     |- virtual-desktop-clipboard-share 
                                     |- virtual-desktop-desktop-switch 
                                     |- virtual-desktop-logout-when-browser-close 
                                     |- virtual-desktop-network-share-access 
                                     |- virtual-desktop-printing 
                                     |- virtual-desktop-removable-media-access 
                                     |- skip-check-for-unsupported-os 
                                     +- skip-check-for-unsupported-browser 
                         |- [user-group-bookmark] --*name       (65 xss)
                                                  +- [bookmarks] --*name        (36)
                                                                 |- apptype 
                                                                 |- url 
                                                                 |- host 
                                                                 |- folder 
                                                                 |- additional-params 
                                                                 |- listening-port      (0,65535)
                                                                 |- remote-port         (0,65535)
                                                                 |- show-status-window 
                                                                 |- description 
                                                                 |- server-layout 
                                                                 |- security 
                                                                 |- port        (0,65535)
                                                                 |- logon-user 
                                                                 |- logon-password 
                                                                 |- sso 
                                                                 |- [form-data] --*name         (36)
                                                                                +- value 
                                                                 |- sso-credential 
                                                                 |- sso-username 
                                                                 +- sso-password 
                         +- [user-bookmark] --*name     (102 xss)
                                            |- custom-lang      (36)
                                            +- [bookmarks] --*name      (36)
                                                           |- apptype 
                                                           |- url 
                                                           |- host 
                                                           |- folder 
                                                           |- additional-params 
                                                           |- listening-port    (0,65535)
                                                           |- remote-port       (0,65535)
                                                           |- show-status-window 
                                                           |- description 
                                                           |- server-layout 
                                                           |- security 
                                                           |- port      (0,65535)
                                                           |- logon-user 
                                                           |- logon-password 
                                                           |- sso 
                                                           |- [form-data] --*name       (36)
                                                                          +- value 
                                                           |- sso-credential 
                                                           |- sso-username 
                                                           +- sso-password 
                  |- <settings> -- reqclientcert 
                                |- sslv3 
                                |- tlsv1-0 
                                |- tlsv1-1 
                                |- tlsv1-2 
                                |- banned-cipher 
                                |- ssl-big-buffer 
                                |- ssl-insert-empty-fragment 
                                |- https-redirect 
                                |- ssl-client-renegotiation 
                                |- force-two-factor-auth 
                                |- unsafe-legacy-renegotiation 
                                |- servercert   (36)
                                |- algorithm 
                                |- idle-timeout         (0,4294967295)
                                |- auth-timeout         (0,4294967295)
                                |- [tunnel-ip-pools] --*name    (65)
                                |- [tunnel-ipv6-pools] --*name  (65)
                                |- dns-suffix 
                                |- dns-server1 
                                |- dns-server2 
                                |- wins-server1 
                                |- wins-server2 
                                |- ipv6-dns-server1 
                                |- ipv6-dns-server2 
                                |- ipv6-wins-server1 
                                |- ipv6-wins-server2 
                                |- route-source-interface 
                                |- url-obscuration 
                                |- http-compression 
                                |- http-only-cookie 
                                |- deflate-compression-level    (0,9)
                                |- deflate-min-data-size        (200,65535)
                                |- port         (1,65535)
                                |- port-precedence 
                                |- auto-tunnel-static-route 
                                |- header-x-forwarded-for 
                                |- [source-interface] --*name   (36)
                                |- [source-address] --*name     (65)
                                |- source-address-negate 
                                |- [source-address6] --*name    (65)
                                |- source-address6-negate 
                                |- default-portal       (36)
                                |- [authentication-rule] --*id  (0,4294967295)
                                                         |- [source-interface] --*name  (36)
                                                         |- [source-address] --*name    (65)
                                                         |- source-address-negate 
                                                         |- [source-address6] --*name   (65)
                                                         |- source-address6-negate 
                                                         |- [users] --*name     (65)
                                                         |- [groups] --*name    (65)
                                                         |- portal      (36)
                                                         |- realm       (36)
                                                         |- client-cert 
                                                         |- cipher 
                                                         +- auth 
                                |- dtls-tunnel 
                                +- check-referer 
                  +- <monitor> 
           |- ipsec -- [phase1] --*name         (36)
                                |- type 
                                |- interface    (36)
                                |- ike-version 
                                |- remote-gw 
                                |- local-gw 
                                |- remotegw-ddns        (64)
                                |- keylife      (120,172800)
                                |- [certificate] --*name        (65)
                                |- authmethod 
                                |- mode 
                                |- peertype 
                                |- peerid       (256)
                                |- usrgrp       (36)
                                |- peer         (36)
                                |- peergrp      (36)
                                |- autoconfig 
                                |- mode-cfg 
                                |- assign-ip 
                                |- assign-ip-from 
                                |- ipv4-start-ip 
                                |- ipv4-end-ip 
                                |- ipv4-netmask 
                                |- dns-mode 
                                |- ipv4-dns-server1 
                                |- ipv4-dns-server2 
                                |- ipv4-dns-server3 
                                |- ipv4-wins-server1 
                                |- ipv4-wins-server2 
                                |- [ipv4-exclude-range] --*id   (0,4294967295)
                                                        |- start-ip 
                                                        +- end-ip 
                                |- ipv4-split-include   (64)
                                |- split-include-service        (64)
                                |- ipv6-start-ip 
                                |- ipv6-end-ip 
                                |- ipv6-prefix  (1,128)
                                |- ipv6-dns-server1 
                                |- ipv6-dns-server2 
                                |- ipv6-dns-server3 
                                |- [ipv6-exclude-range] --*id   (0,4294967295)
                                                        |- start-ip 
                                                        +- end-ip 
                                |- ipv6-split-include   (64)
                                |- unity-support 
                                |- domain       (64)
                                |- banner 
                                |- include-local-lan 
                                |- save-password 
                                |- client-auto-negotiate 
                                |- client-keep-alive 
                                |- [backup-gateway] --*address  (65)
                                |- proposal 
                                |- add-route 
                                |- exchange-interface-ip 
                                |- add-gw-route 
                                |- psksecret 
                                |- keepalive    (10,900)
                                |- distance     (1,255)
                                |- priority     (0,4294967295)
                                |- localid      (64)
                                |- localid-type 
                                |- auto-negotiate 
                                |- negotiate-timeout    (1,300)
                                |- fragmentation 
                                |- dpd 
                                |- dpd-retrycount       (0,10)
                                |- dpd-retryinterval 
                                |- forticlient-enforcement 
                                |- comments 
                                |- npu-offload 
                                |- send-cert-chain 
                                |- dhgrp 
                                |- suite-b 
                                |- eap 
                                |- eap-identity 
                                |- acct-verify 
                                |- wizard-type 
                                |- xauthtype 
                                |- reauth 
                                |- authusr      (65)
                                |- authpasswd 
                                |- authusrgrp   (36)
                                |- mesh-selector-type 
                                |- idle-timeout 
                                |- idle-timeoutinterval         (10,43200)
                                |- ha-sync-esp-seqno 
                                +- nattraversal 
                    |- [phase2] --*name         (36)
                                |- phase1name   (36)
                                |- dhcp-ipsec 
                                |- use-natip 
                                |- selector-match 
                                |- proposal 
                                |- pfs 
                                |- dhgrp 
                                |- replay 
                                |- keepalive 
                                |- auto-negotiate 
                                |- add-route 
                                |- keylifeseconds       (120,172800)
                                |- keylifekbs   (5120,4294967295)
                                |- keylife-type 
                                |- single-source 
                                |- route-overlap 
                                |- encapsulation 
                                |- l2tp 
                                |- comments 
                                |- protocol     (0,255)
                                |- src-name     (64)
                                |- src-name6    (64)
                                |- src-addr-type 
                                |- src-start-ip 
                                |- src-start-ip6 
                                |- src-end-ip 
                                |- src-end-ip6 
                                |- src-subnet 
                                |- src-subnet6 
                                |- src-port     (0,65535)
                                |- dst-name     (64)
                                |- dst-name6    (64)
                                |- dst-addr-type 
                                |- dst-start-ip 
                                |- dst-start-ip6 
                                |- dst-end-ip 
                                |- dst-end-ip6 
                                |- dst-subnet 
                                |- dst-subnet6 
                                +- dst-port     (0,65535)
                    |- [manualkey] --*name      (36)
                                   |- interface         (16)
                                   |- remote-gw 
                                   |- local-gw 
                                   |- authentication 
                                   |- encryption 
                                   |- authkey 
                                   |- enckey 
                                   |- localspi 
                                   |- remotespi 
                                   +- npu-offload 
                    |- [concentrator] --*name   (36)
                                      |- src-check 
                                      +- [member] --*name       (65)
                    |- [phase1-interface] --*name       (16)
                                          |- type 
                                          |- interface  (36)
                                          |- ip-version 
                                          |- ike-version 
                                          |- local-gw 
                                          |- local-gw6 
                                          |- remote-gw 
                                          |- remote-gw6 
                                          |- remotegw-ddns      (64)
                                          |- keylife    (120,172800)
                                          |- [certificate] --*name      (65)
                                          |- authmethod 
                                          |- mode 
                                          |- peertype 
                                          |- peerid     (256)
                                          |- default-gw 
                                          |- default-gw-priority        (0,4294967295)
                                          |- usrgrp     (36)
                                          |- peer       (36)
                                          |- peergrp    (36)
                                          |- monitor    (36)
                                          |- monitor-hold-down-type 
                                          |- monitor-hold-down-delay    (0,31536000)
                                          |- monitor-hold-down-weekday 
                                          |- monitor-hold-down-time 
                                          |- mode-cfg 
                                          |- assign-ip 
                                          |- assign-ip-from 
                                          |- ipv4-start-ip 
                                          |- ipv4-end-ip 
                                          |- ipv4-netmask 
                                          |- dns-mode 
                                          |- ipv4-dns-server1 
                                          |- ipv4-dns-server2 
                                          |- ipv4-dns-server3 
                                          |- ipv4-wins-server1 
                                          |- ipv4-wins-server2 
                                          |- [ipv4-exclude-range] --*id         (0,4294967295)
                                                                  |- start-ip 
                                                                  +- end-ip 
                                          |- ipv4-split-include         (64)
                                          |- split-include-service      (64)
                                          |- ipv6-start-ip 
                                          |- ipv6-end-ip 
                                          |- ipv6-prefix        (1,128)
                                          |- ipv6-dns-server1 
                                          |- ipv6-dns-server2 
                                          |- ipv6-dns-server3 
                                          |- [ipv6-exclude-range] --*id         (0,4294967295)
                                                                  |- start-ip 
                                                                  +- end-ip 
                                          |- ipv6-split-include         (64)
                                          |- unity-support 
                                          |- domain     (64)
                                          |- banner 
                                          |- include-local-lan 
                                          |- save-password 
                                          |- client-auto-negotiate 
                                          |- client-keep-alive 
                                          |- [backup-gateway] --*address        (65)
                                          |- proposal 
                                          |- add-route 
                                          |- exchange-interface-ip 
                                          |- add-gw-route 
                                          |- psksecret 
                                          |- keepalive  (10,900)
                                          |- distance   (1,255)
                                          |- priority   (0,4294967295)
                                          |- localid    (64)
                                          |- localid-type 
                                          |- auto-negotiate 
                                          |- negotiate-timeout  (1,300)
                                          |- fragmentation 
                                          |- dpd 
                                          |- dpd-retrycount     (0,10)
                                          |- dpd-retryinterval 
                                          |- forticlient-enforcement 
                                          |- comments 
                                          |- npu-offload 
                                          |- send-cert-chain 
                                          |- dhgrp 
                                          |- suite-b 
                                          |- eap 
                                          |- eap-identity 
                                          |- acct-verify 
                                          |- wizard-type 
                                          |- xauthtype 
                                          |- reauth 
                                          |- authusr    (65)
                                          |- authpasswd 
                                          |- authusrgrp         (36)
                                          |- mesh-selector-type 
                                          |- idle-timeout 
                                          |- idle-timeoutinterval       (10,43200)
                                          |- ha-sync-esp-seqno 
                                          |- auto-discovery-sender 
                                          |- auto-discovery-receiver 
                                          |- auto-discovery-forwarder 
                                          |- auto-discovery-psk 
                                          |- encapsulation 
                                          |- encapsulation-address 
                                          |- encap-local-gw4 
                                          |- encap-local-gw6 
                                          |- encap-remote-gw4 
                                          |- encap-remote-gw6 
                                          +- nattraversal 
                    |- [phase2-interface] --*name       (36)
                                          |- phase1name         (16)
                                          |- dhcp-ipsec 
                                          |- proposal 
                                          |- pfs 
                                          |- dhgrp 
                                          |- replay 
                                          |- keepalive 
                                          |- auto-negotiate 
                                          |- add-route 
                                          |- auto-discovery-sender 
                                          |- auto-discovery-forwarder 
                                          |- keylifeseconds     (120,172800)
                                          |- keylifekbs         (5120,4294967295)
                                          |- keylife-type 
                                          |- single-source 
                                          |- route-overlap 
                                          |- encapsulation 
                                          |- l2tp 
                                          |- comments 
                                          |- protocol   (0,255)
                                          |- src-name   (64)
                                          |- src-name6  (64)
                                          |- src-addr-type 
                                          |- src-start-ip 
                                          |- src-start-ip6 
                                          |- src-end-ip 
                                          |- src-end-ip6 
                                          |- src-subnet 
                                          |- src-subnet6 
                                          |- src-port   (0,65535)
                                          |- dst-name   (64)
                                          |- dst-name6  (64)
                                          |- dst-addr-type 
                                          |- dst-start-ip 
                                          |- dst-start-ip6 
                                          |- dst-end-ip 
                                          |- dst-end-ip6 
                                          |- dst-subnet 
                                          |- dst-subnet6 
                                          +- dst-port   (0,65535)
                    |- [manualkey-interface] --*name    (16)
                                             |- interface       (16)
                                             |- ip-version 
                                             |- addr-type 
                                             |- remote-gw 
                                             |- remote-gw6 
                                             |- local-gw 
                                             |- local-gw6 
                                             |- auth-alg 
                                             |- enc-alg 
                                             |- auth-key 
                                             |- enc-key 
                                             |- local-spi 
                                             |- remote-spi 
                                             +- npu-offload 
                    |- [forticlient] --*realm   (36)
                                     |- usergroupname   (36)
                                     |- phase2name      (36)
                                     +- status 
                    |- stats -- <crypto> 
                             +- <tunnel> 
                    +- tunnel -- <details> 
                              |- <summary> 
                              +- <name> 
           |- <pptp> -- status 
                     |- ip-mode 
                     |- eip 
                     |- sip 
                     |- local-ip 
                     +- usrgrp  (36)
           |- <l2tp> -- eip 
                     |- sip 
                     |- status 
                     +- usrgrp  (36)
           |- ike -- <gateway> -- <name>        (0)
           +- status -- <l2tp> 
                     |- <pptp> 
                     +- ssl -- <list> 
                            +- <hw-acceleration-status> 
    |- certificate -- [ca] --*name      (80)
                           |- ca 
                           |- range 
                           |- source 
                           |- trusted 
                           |- scep-url  (256 xss)
                           |- auto-update-days  (0,4294967295)
                           |- auto-update-days-warning  (0,4294967295)
                           +- source-ip 
                   |- [local] --*name   (36)
                              |- password 
                              |- comments       (512 xss)
                              |- private-key 
                              |- certificate 
                              |- csr 
                              |- state 
                              |- scep-url       (256 xss)
                              |- range 
                              |- source 
                              |- auto-regenerate-days   (0,4294967295)
                              |- auto-regenerate-days-warning   (0,4294967295)
                              |- scep-password 
                              |- ca-identifier  (256)
                              |- name-encoding 
                              |- source-ip 
                              |- ike-localid    (64)
                              +- ike-localid-type 
                   +- [crl] --*name     (36)
                            |- crl 
                            |- range 
                            |- source 
                            |- update-vdom      (12)
                            |- ldap-server      (36)
                            |- ldap-username    (64)
                            |- ldap-password 
                            |- http-url         (256 xss)
                            |- scep-url         (256 xss)
                            |- scep-cert        (36)
                            |- update-interval  (0,4294967295)
                            +- source-ip 
    |- user -- [radius] --*name         (36)
                        |- server       (64)
                        |- secret 
                        |- secondary-server     (64)
                        |- secondary-secret 
                        |- tertiary-server      (64)
                        |- tertiary-secret 
                        |- timeout      (0,300)
                        |- all-usergroup 
                        |- use-management-vdom 
                        |- nas-ip 
                        |- acct-interim-interval        (600,86400)
                        |- radius-coa 
                        |- radius-port  (0,4294967295)
                        |- h3c-compatibility 
                        |- auth-type 
                        |- source-ip 
                        |- username-case-sensitive 
                        |- [class] --*name      (65)
                        |- password-renewal 
                        |- rsso 
                        |- rsso-radius-server-port      (0,4294967295)
                        |- rsso-radius-response 
                        |- rsso-validate-request-secret 
                        |- rsso-secret 
                        |- rsso-endpoint-attribute 
                        |- rsso-endpoint-block-attribute 
                        |- sso-attribute 
                        |- sso-attribute-key    (36)
                        |- sso-attribute-value-override 
                        |- rsso-context-timeout         (0,4294967295)
                        |- rsso-log-period      (0,4294967295)
                        |- rsso-log-flags 
                        |- rsso-flush-ip-session 
                        +- [accounting-server] --*id    (0,4294967295)
                                               |- status 
                                               |- server        (64)
                                               |- secret 
                                               |- port  (0,4294967295)
                                               +- source-ip 
            |- [tacacs+] --*name        (36)
                         |- server      (64)
                         |- secondary-server    (64)
                         |- tertiary-server     (64)
                         |- port        (1,65535)
                         |- key 
                         |- secondary-key 
                         |- tertiary-key 
                         |- authen-type 
                         |- authorization 
                         +- source-ip 
            |- [ldap] --*name   (36)
                      |- server         (64)
                      |- secondary-server       (64)
                      |- tertiary-server        (64)
                      |- source-ip 
                      |- cnid   (21)
                      |- dn     (512)
                      |- type 
                      |- username       (512)
                      |- password 
                      |- group-member-check 
                      |- group-object-filter    (2048 xss)
                      |- group-object-search-base       (512)
                      |- secure 
                      |- ca-cert        (64)
                      |- port   (1,65535)
                      |- password-expiry-warning 
                      |- password-renewal 
                      |- member-attr    (64)
                      +- search-type 
            |- [krb-keytab] --*name     (36)
                            |- principal        (512)
                            |- ldap-server      (36)
                            +- keytab 
            |- [pop3] --*name   (36)
                      |- server         (64)
                      |- port   (0,65535)
                      +- secure 
            |- [fsso] --*name   (36)
                      |- server         (64)
                      |- port   (0,4294967295)
                      |- password 
                      |- server2        (64)
                      |- port2  (0,4294967295)
                      |- password2 
                      |- server3        (64)
                      |- port3  (0,4294967295)
                      |- password3 
                      |- server4        (64)
                      |- port4  (0,4294967295)
                      |- password4 
                      |- server5        (64)
                      |- port5  (0,4294967295)
                      |- password5 
                      |- ldap-server    (36)
                      +- source-ip 
            |- [adgrp] --*name  (512 xss)
                       |- server-name   (36)
                       +- polling-id    (0,4294967295)
            |- [fsso-polling] --*id     (0,4294967295)
                              |- status 
                              |- server         (64)
                              |- default-domain         (36)
                              |- port   (0,65535)
                              |- user   (36)
                              |- password 
                              |- ldap-server    (36)
                              |- logon-history  (0,48)
                              |- polling-frequency      (1,30)
                              +- [adgrp] --*name        (512 xss)
            |- [fortitoken] --*serial-number    (17)
                            |- status 
                            |- seed     (201 xss)
                            |- comments 
                            |- license  (32)
                            |- activation-code  (33)
                            +- activation-expire        (0,4294967295)
            |- [password-policy] --*name        (36)
                                 |- expire-days         (0,999)
                                 +- warn-days   (0,30)
            |- [local] --*name  (65)
                       |- status 
                       |- type 
                       |- passwd 
                       |- ldap-server   (36)
                       |- radius-server         (36)
                       |- tacacs+-server        (36)
                       |- two-factor 
                       |- fortitoken    (17)
                       |- email-to      (64)
                       |- sms-server 
                       |- sms-custom-server     (36)
                       |- sms-phone     (16)
                       |- passwd-policy         (36)
                       |- passwd-time 
                       |- authtimeout   (0,1440)
                       |- workstation   (36)
                       |- auth-concurrent-override 
                       +- auth-concurrent-value         (0,100)
            |- <setting> -- auth-type 
                         |- auth-cert   (36)
                         |- auth-ca-cert        (36)
                         |- auth-secure-http 
                         |- auth-http-basic 
                         |- auth-multi-group 
                         |- auth-timeout        (1,1440)
                         |- auth-timeout-type 
                         |- auth-portal-timeout         (1,30)
                         |- radius-ses-timeout-act 
                         |- auth-blackout-time  (0,3600)
                         |- auth-invalid-max    (1,100)
                         |- auth-lockout-threshold      (1,10)
                         |- auth-lockout-duration       (0,4294967295)
                         +- [auth-ports] --*id  (0,4294967295)
                                         |- type 
                                         +- port        (1,65535)
            |- [peer] --*name   (36)
                      |- mandatory-ca-verify 
                      |- ca     (128)
                      |- subject        (256 xss)
                      |- cn     (256)
                      |- cn-type 
                      |- ldap-server    (36)
                      |- ldap-username  (36)
                      |- ldap-password 
                      |- ldap-mode 
                      |- ocsp-override-server   (36)
                      |- two-factor 
                      +- passwd 
            |- [peergrp] --*name        (36)
                         +- [member] --*name    (36)
            |- [group] --*name  (36)
                       |- group-type 
                       |- authtimeout   (0,1440)
                       |- auth-concurrent-override 
                       |- auth-concurrent-value         (0,100)
                       |- http-digest-realm     (36)
                       |- sso-attribute-value   (512)
                       |- [member] --*name      (512 xss)
                       |- [match] --*id         (0,4294967295)
                                  |- server-name        (36)
                                  +- group-name         (512 xss)
                       |- user-id 
                       |- password 
                       |- user-name 
                       |- sponsor 
                       |- company 
                       |- email 
                       |- mobile-phone 
                       |- sms-server 
                       |- sms-custom-server     (36)
                       |- expire-type 
                       |- expire        (1,31536000)
                       |- max-accounts  (0,500)
                       |- multiple-guest-add 
                       +- [guest] --*user-id    (65)
                                  |- name       (65)
                                  |- group      (65)
                                  |- password 
                                  |- mobile-phone       (36)
                                  |- sponsor    (36)
                                  |- company    (36)
                                  |- email      (65)
                                  |- expiration 
                                  +- comment 
            |- [device-category] --*name        (36)
                                 |- desc 
                                 +- comment 
            |- [device] --*alias        (36)
                        |- mac 
                        |- user         (65)
                        |- master-device        (36)
                        |- comment 
                        |- avatar 
                        +- type 
            |- [device-group] --*name   (36)
                              |- [member] --*name       (36)
                              +- comment 
            |- [device-access-list] --*name     (36)
                                    |- default-action 
                                    +- [device-list] --*id      (0,4294967295)
                                                     |- device  (36)
                                                     +- action 
            +- [security-exempt-list] --*name   (36)
                                      |- description    (128)
                                      +- [rule] --*id   (0,4294967295)
                                                |- [srcaddr] --*name    (65)
                                                |- [devices] --*name    (36)
                                                |- [dstaddr] --*name    (65)
                                                +- [service] --*name    (65)
    |- voip -- [profile] --*name        (36)
                         |- comment 
                         |- <sip> -- status 
                                  |- rtp 
                                  |- open-register-pinhole 
                                  |- open-contact-pinhole 
                                  |- strict-register 
                                  |- register-rate      (0,4294967295)
                                  |- invite-rate        (0,4294967295)
                                  |- max-dialogs        (0,4294967295)
                                  |- max-line-length    (78,4096)
                                  |- block-long-lines 
                                  |- block-unknown 
                                  |- call-keepalive     (0,10080)
                                  |- block-ack 
                                  |- block-bye 
                                  |- block-cancel 
                                  |- block-info 
                                  |- block-invite 
                                  |- block-message 
                                  |- block-notify 
                                  |- block-options 
                                  |- block-prack 
                                  |- block-publish 
                                  |- block-refer 
                                  |- block-register 
                                  |- block-subscribe 
                                  |- block-update 
                                  |- register-contact-trace 
                                  |- open-via-pinhole 
                                  |- open-record-route-pinhole 
                                  |- rfc2543-branch 
                                  |- log-violations 
                                  |- log-call-summary 
                                  |- nat-trace 
                                  |- subscribe-rate     (0,4294967295)
                                  |- message-rate       (0,4294967295)
                                  |- notify-rate        (0,4294967295)
                                  |- refer-rate         (0,4294967295)
                                  |- update-rate        (0,4294967295)
                                  |- options-rate       (0,4294967295)
                                  |- ack-rate   (0,4294967295)
                                  |- prack-rate         (0,4294967295)
                                  |- info-rate  (0,4294967295)
                                  |- publish-rate       (0,4294967295)
                                  |- bye-rate   (0,4294967295)
                                  |- cancel-rate        (0,4294967295)
                                  |- preserve-override 
                                  |- no-sdp-fixup 
                                  |- contact-fixup 
                                  |- max-idle-dialogs   (0,4294967295)
                                  |- block-geo-red-options 
                                  |- hosted-nat-traversal 
                                  |- hnt-restrict-source-ip 
                                  |- max-body-length    (0,4294967295)
                                  |- unknown-header 
                                  |- malformed-request-line 
                                  |- malformed-header-via 
                                  |- malformed-header-from 
                                  |- malformed-header-to 
                                  |- malformed-header-call-id 
                                  |- malformed-header-cseq 
                                  |- malformed-header-rack 
                                  |- malformed-header-rseq 
                                  |- malformed-header-contact 
                                  |- malformed-header-record-route 
                                  |- malformed-header-route 
                                  |- malformed-header-expires 
                                  |- malformed-header-content-type 
                                  |- malformed-header-content-length 
                                  |- malformed-header-max-forwards 
                                  |- malformed-header-allow 
                                  |- malformed-header-p-asserted-identity 
                                  |- malformed-header-sdp-v 
                                  |- malformed-header-sdp-o 
                                  |- malformed-header-sdp-s 
                                  |- malformed-header-sdp-i 
                                  |- malformed-header-sdp-c 
                                  |- malformed-header-sdp-b 
                                  |- malformed-header-sdp-z 
                                  |- malformed-header-sdp-k 
                                  |- malformed-header-sdp-a 
                                  |- malformed-header-sdp-t 
                                  |- malformed-header-sdp-r 
                                  |- malformed-header-sdp-m 
                                  |- provisional-invite-expiry-time     (10,3600)
                                  +- ips-rtp 
                         +- <sccp> -- status 
                                   |- block-mcast 
                                   |- verify-header 
                                   |- log-call-summary 
                                   |- log-violations 
                                   +- max-calls         (0,65535)
    |- dnsfilter -- [urlfilter] --*id   (0,4294967295)
                                |- name         (36)
                                |- comment 
                                +- [entries] --*id      (0,4294967295)
                                             |- url     (512 xss)
                                             |- type 
                                             |- action 
                                             +- status 
                 +- [profile] --*name   (36)
                              |- comment 
                              |- <urlfilter> -- urlfilter-table         (0,4294967295)
                              |- <ftgd-dns> -- options 
                                            +- [filters] --*id  (0,4294967295)
                                                         |- category    (0,4294967295)
                                                         |- action 
                                                         +- log 
                              |- log-all-url 
                              |- sdns-ftgd-err-log 
                              |- sdns-url-log 
                              |- block-action 
                              |- redirect-portal 
                              +- block-botnet 
    |- antivirus -- <settings> -- default-db 
                               +- grayware 
                 |- <heuristic> -- mode 
                 |- <quarantine> -- agelimit    (0,479)
                                 |- maxfilesize         (0,500)
                                 |- quarantine-quota    (0,4294967295)
                                 |- drop-infected 
                                 |- store-infected 
                                 |- drop-blocked 
                                 |- store-blocked 
                                 |- drop-heuristic 
                                 |- store-heuristic 
                                 |- lowspace 
                                 +- destination 
                 +- [profile] --*name   (36)
                              |- comment 
                              |- replacemsg-group       (36)
                              |- inspection-mode 
                              |- ftgd-analytics 
                              |- analytics-max-upload   (1,186)
                              |- analytics-wl-filetype  (0,4294967295)
                              |- analytics-bl-filetype  (0,4294967295)
                              |- analytics-db 
                              |- mobile-malware-db 
                              |- <http> -- options 
                                        |- archive-block 
                                        |- archive-log 
                                        +- emulator 
                              |- <ftp> -- options 
                                       |- archive-block 
                                       |- archive-log 
                                       +- emulator 
                              |- <imap> -- options 
                                        |- archive-block 
                                        |- archive-log 
                                        |- emulator 
                                        +- executables 
                              |- <pop3> -- options 
                                        |- archive-block 
                                        |- archive-log 
                                        |- emulator 
                                        +- executables 
                              |- <smtp> -- options 
                                        |- archive-block 
                                        |- archive-log 
                                        |- emulator 
                                        +- executables 
                              |- <mapi> -- options 
                                        |- archive-block 
                                        |- archive-log 
                                        |- emulator 
                                        +- executables 
                              |- <nntp> -- options 
                                        |- archive-block 
                                        |- archive-log 
                                        +- emulator 
                              |- <smb> -- options 
                                       |- archive-block 
                                       |- archive-log 
                                       +- emulator 
                              |- <nac-quar> -- infected 
                                            |- expiry 
                                            +- log 
                              |- av-virus-log 
                              |- av-block-log 
                              +- scan-mode 
    |- waf -- [main-class] -- name      (128)
                           +-*id        (0,4294967295)
           |- [sub-class] -- name       (128)
                          +-*id         (0,4294967295)
           |- [signature] -- desc       (512)
                          +-*id         (0,4294967295)
           +- [profile] --*name         (36)
                        |- external 
                        |- <signature> -- [main-class] --*id    (0,4294967295)
                                                       |- status 
                                                       |- action 
                                                       |- log 
                                                       +- severity 
                                       |- [disabled-sub-class] --*id    (0,4294967295)
                                       |- [disabled-signature] --*id    (0,4294967295)
                                       |- credit-card-detection-threshold       (0,128)
                                       +- [custom-signature] --*name    (36)
                                                             |- status 
                                                             |- action 
                                                             |- log 
                                                             |- severity 
                                                             |- direction 
                                                             |- case-sensitivity 
                                                             |- pattern         (512 xss)
                                                             +- target 
                        |- <constraint> -- <header-length> -- status 
                                                           |- length    (0,2147483647)
                                                           |- action 
                                                           |- log 
                                                           +- severity 
                                        |- <content-length> -- status 
                                                            |- length   (0,2147483647)
                                                            |- action 
                                                            |- log 
                                                            +- severity 
                                        |- <param-length> -- status 
                                                          |- length     (0,2147483647)
                                                          |- action 
                                                          |- log 
                                                          +- severity 
                                        |- <line-length> -- status 
                                                         |- length      (0,2147483647)
                                                         |- action 
                                                         |- log 
                                                         +- severity 
                                        |- <url-param-length> -- status 
                                                              |- length         (0,2147483647)
                                                              |- action 
                                                              |- log 
                                                              +- severity 
                                        |- <version> -- status 
                                                     |- action 
                                                     |- log 
                                                     +- severity 
                                        |- <method> -- status 
                                                    |- action 
                                                    |- log 
                                                    +- severity 
                                        |- <hostname> -- status 
                                                      |- action 
                                                      |- log 
                                                      +- severity 
                                        |- <malformed> -- status 
                                                       |- action 
                                                       |- log 
                                                       +- severity 
                                        |- <max-cookie> -- status 
                                                        |- max-cookie   (0,2147483647)
                                                        |- action 
                                                        |- log 
                                                        +- severity 
                                        |- <max-header-line> -- status 
                                                             |- max-header-line         (0,2147483647)
                                                             |- action 
                                                             |- log 
                                                             +- severity 
                                        |- <max-url-param> -- status 
                                                           |- max-url-param     (0,2147483647)
                                                           |- action 
                                                           |- log 
                                                           +- severity 
                                        |- <max-range-segment> -- status 
                                                               |- max-range-segment     (0,2147483647)
                                                               |- action 
                                                               |- log 
                                                               +- severity 
                                        +- [exception] --*id    (0,4294967295)
                                                       |- pattern       (512 xss)
                                                       |- regex 
                                                       |- address       (64)
                                                       |- header-length 
                                                       |- content-length 
                                                       |- param-length 
                                                       |- line-length 
                                                       |- url-param-length 
                                                       |- version 
                                                       |- method 
                                                       |- hostname 
                                                       |- malformed 
                                                       |- max-cookie 
                                                       |- max-header-line 
                                                       |- max-url-param 
                                                       +- max-range-segment 
                        |- <method> -- status 
                                    |- log 
                                    |- severity 
                                    |- default-allowed-methods 
                                    +- [method-policy] --*id    (0,4294967295)
                                                       |- pattern       (512 xss)
                                                       |- regex 
                                                       |- address       (64)
                                                       +- allowed-methods 
                        |- <address-list> -- status 
                                          |- blocked-log 
                                          |- severity 
                                          |- [trusted-address] --*name  (65)
                                          +- [blocked-address] --*name  (65)
                        |- [url-access] --*id   (0,4294967295)
                                        |- address      (64)
                                        |- action 
                                        |- log 
                                        |- severity 
                                        +- [access-pattern] --*id       (0,4294967295)
                                                            |- srcaddr  (64)
                                                            |- pattern  (512)
                                                            |- regex 
                                                            +- negate 
                        +- comment 
    |- diagnose__tree__ -- waf -- info 
                               +- dump 
                        |- netlink -- backlog -- get 
                                              +- set -- backlog         (0)
                                   |- device -- list 
                                   |- interface -- list 
                                                +- clear 
                                   |- qlen -- get -- intf-name  (0)
                                           +- set -- intf-name -- <len_integer>         (0)
                                   |- brctl -- domain -- <name> -- <id>         (0)
                                            |- list 
                                            +- name -- <type> -- <name>         (0)
                                   +- dstmac -- flush 
                                             +- list -- [name]  (0)
                        |- ips -- anomaly -- config 
                                          |- status 
                                          |- list 
                                          |- clear 
                                          +- filter -- clear 
                                                    |- id -- <xx>       (0)
                                                    |- ip -- xxx.xxx.xxx.xxx -- xxx.xxx.xxx.xxx         (0)
                                                    |- pps -- <xx> -- <xx>      (0)
                                                    +- freq -- <xx> -- <xx>     (0)
                               |- raw -- status 
                                      +- clear 
                               |- anomaly6 -- config 
                                           |- status 
                                           |- list 
                                           |- clear 
                                           +- filter -- clear 
                                                     |- id -- <xx>      (0)
                                                     |- ip -- xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx       (0)
                                                     |- pps -- <xx> -- <xx>     (0)
                                                     +- freq -- <xx> -- <xx>    (0)
                               |- global -- rule -- reload 
                               |- memory -- status 
                                         |- compact 
                                         |- profiling -- <enable/disable/dump>  (0)
                                         |- track -- enable/disable/clear       (0)
                                         |- track-size -- <min size> -- <max size>      (0)
                                         +- track-print -- <record count>       (0)
                               |- session -- status 
                                          |- list 
                                          |- clear 
                                          |- performance 
                                          +- content 
                               |- packet -- status 
                                         +- clear 
                               |- dissector -- status 
                                            +- dump 
                               |- signature -- status -- <severity mask>        (0)
                                            |- hit -- <top N>   (0)
                                            +- cycle -- <top N>         (0)
                               |- filter -- status 
                                         |- clear 
                                         |- ip -- <ip> -- <mask>        (0)
                                         |- ipv6 -- <ip> -- <prefix size>       (0)
                                         |- port -- <port>      (0)
                                         |- protocol -- <protocol number>       (0)
                                         |- session -- <session id>     (0)
                                         |- asm -- <assembled packets>  (0)
                                         |- length -- <session length>  (0)
                                         +- l7 -- <0:all 1:l7 2:non-l7>         (0)
                               |- config -- enable -- log-verbose 
                                         +- disable -- log-verbose 
                               |- debug -- enable -- init 
                                                  |- packet 
                                                  |- packet_detail 
                                                  |- error 
                                                  |- warn 
                                                  |- parse 
                                                  |- detect 
                                                  |- session 
                                                  |- log 
                                                  |- timeout 
                                                  |- dissector 
                                                  |- tcp 
                                                  |- http 
                                                  |- mail 
                                                  |- rpc 
                                                  |- dns 
                                                  |- im 
                                                  |- p2p 
                                                  |- ssh 
                                                  |- ssl 
                                                  |- voip 
                                                  |- smb 
                                                  |- content 
                                                  |- urlfilter 
                                                  |- av 
                                                  |- mime 
                                                  |- content_detail 
                                                  |- ipsa 
                                                  |- proxy 
                                                  |- packet_dump 
                                                  |- state 
                                                  |- dac 
                                                  +- all 
                                        +- disable -- init 
                                                   |- packet 
                                                   |- packet_detail 
                                                   |- error 
                                                   |- warn 
                                                   |- parse 
                                                   |- detect 
                                                   |- session 
                                                   |- log 
                                                   |- timeout 
                                                   |- dissector 
                                                   |- tcp 
                                                   |- http 
                                                   |- mail 
                                                   |- dns 
                                                   |- rpc 
                                                   |- im 
                                                   |- p2p 
                                                   |- ssh 
                                                   |- ssl 
                                                   |- voip 
                                                   |- smb 
                                                   |- content 
                                                   |- urlfilter 
                                                   |- av 
                                                   |- mime 
                                                   |- content_detail 
                                                   |- ipsa 
                                                   |- proxy 
                                                   |- packet_dump 
                                                   |- state 
                                                   |- dac 
                                                   +- all 
                               |- share -- pool 
                                        |- list -- <pool>       (0)
                                        +- clear -- <pool>      (0)
                               |- urlfilter -- status 
                                            +- clear 
                               |- ssl -- status 
                                      |- bypass -- enable | disable     (0)
                                      |- resume -- enable | disable     (0)
                                      |- noscan -- enable | disable     (0)
                                      |- debug -- none|err|warn|info|dbg|noise  (0)
                                      +- clear 
                               |- av -- cache -- list 
                                              |- status 
                                              |- clear 
                                              |- delete -- <ID>         (0)
                                              +- set-age -- <ID> -- <age>       (0)
                               +- dac -- info 
                                      +- clear -- <age>         (0)
                        |- test -- application -- http -- <Integer>     (0)
                                               |- smtp -- <Integer>     (0)
                                               |- ftpd -- <Integer>     (0)
                                               |- pop3 -- <Integer>     (0)
                                               |- imap -- <Integer>     (0)
                                               |- nntp -- <Integer>     (0)
                                               |- proxy -- <Integer>    (0)
                                               |- scanunit -- <Integer>         (0)
                                               |- harelay -- <Integer>  (0)
                                               |- hasync -- <Integer>   (0)
                                               |- hatalk -- <Integer>   (0)
                                               |- sessionsync -- <Integer>      (0)
                                               |- forticldd -- <Integer>        (0)
                                               |- miglogd -- <Integer> -- <Integer>     (0)
                                               |- urlfilter -- <Integer>        (0)
                                               |- ovrd -- <Integer>     (0)
                                               |- ipsmonitor -- <Integer>       (0)
                                               |- ipsengine -- <Integer>        (0)
                                               |- ipldbd -- <Integer>   (0)
                                               |- ddnscd -- <Integer>   (0)
                                               |- snmpd -- <Integer>    (0)
                                               |- dnsproxy -- <Integer>         (0)
                                               |- sflowd -- <Integer>   (0)
                                               |- init -- <Integer>     (0)
                                               |- l2tpcd -- <Integer>   (0)
                                               |- dhcprelay -- <Integer>        (0)
                                               |- pptpcd -- <Integer>   (0)
                                               |- wccpd -- <Integer>    (0)
                                               |- wad -- <Integer>      (0)
                                               |- radiusd -- <Integer>  (0)
                                               |- wpad -- <Integer>     (0)
                                               |- fsd -- <Integer>      (0)
                                               |- ipsufd -- <Integer>   (0)
                                               |- lted 
                                               |- swctrl_authd -- <Integer>     (0)
                                               |- forticron -- <Integer>        (0)
                                               |- uploadd -- <Integer>  (0)
                                               |- quarantined -- <Integer>      (0)
                                               |- dhcp6c -- <Integer>   (0)
                                               |- info-sslvpnd -- <Integer>     (0)
                                               |- dsd -- <Integer>      (0)
                                               |- lnkmtd -- <Integer>   (0)
                                               |- dhcp6r -- <Integer>   (0)
                                               |- fnbamd -- <Integer>   (0)
                                               |- mrd -- <Integer>      (0)
                                               |- zebos_launcher -- <Integer>   (0)
                                               |- radius-das -- <Integer>       (0)
                                               |- csfd -- <Integer>     (0)
                                               +- fsvrd -- <Integer>    (0)
                                |- authserver -- radius 
                                              |- tacacs+ 
                                              |- radius-direct 
                                              |- ldap-direct 
                                              |- tacacs+-direct 
                                              |- ldap 
                                              |- ldap-digest 
                                              |- ldap-search 
                                              |- ldap-group 
                                              |- cert 
                                              |- pop3 
                                              |- local 
                                              +- user 
                                |- guest -- list 
                                         |- del 
                                         +- add 
                                +- update -- info 
                                          +- term 
                        |- vpn -- ike -- gateway -- list -- name -- <name>      (0)
                                                 |- clear -- name -- <name>     (0)
                                                 +- flush -- name -- <name>     (0)
                                      |- status -- detailed 
                                                +- summary 
                                      |- log -- terminal -- clear 
                                                         |- reset 
                                                         +- stats 
                                             +- filter -- list 
                                                       |- clear 
                                                       |- name -- <name>        (0)
                                                       |- src-addr4 -- <ipv4-address> -- <ipv4-address>         (0)
                                                       |- dst-addr4 -- <ipv4-address> -- <ipv4-address>         (0)
                                                       |- src-addr6 -- <ipv6-address> -- <ipv4-address>         (0)
                                                       |- dst-addr6 -- <ipv6-address> -- <ipv6-address>         (0)
                                                       |- src-port -- <port> -- <port>  (0)
                                                       |- dst-port -- <port>    (0)
                                                       |- vd -- <index>         (0)
                                                       |- interface -- <index>  (0)
                                                       +- negate -- vd 
                                                                 |- src-addr4 
                                                                 |- dst-addr4 
                                                                 |- src-addr6 
                                                                 |- dst-addr6 
                                                                 |- src-port 
                                                                 |- dst-port 
                                                                 |- name 
                                                                 +- interface 
                                      |- log-filter -- list 
                                                    |- clear 
                                                    |- name -- <name>   (0)
                                                    |- src-addr4 -- <ipv4-address> -- <ipv4-address>    (0)
                                                    |- dst-addr4 -- <ipv4-address> -- <ipv4-address>    (0)
                                                    |- src-addr6 -- <ipv6-address> -- <ipv4-address>    (0)
                                                    |- dst-addr6 -- <ipv6-address> -- <ipv6-address>    (0)
                                                    |- src-port -- <port> -- <port>     (0)
                                                    |- dst-port -- <port>       (0)
                                                    |- vd -- <index>    (0)
                                                    |- interface -- <index>     (0)
                                                    +- negate -- vd 
                                                              |- src-addr4 
                                                              |- dst-addr4 
                                                              |- src-addr6 
                                                              |- dst-addr6 
                                                              |- src-port 
                                                              |- dst-port 
                                                              |- name 
                                                              +- interface 
                                      |- routes -- list 
                                      |- config -- list -- summary 
                                      |- restart 
                                      |- errors 
                                      |- stats 
                                      |- counts 
                                      |- crypto -- stats 
                                      +- filter -- list 
                                                |- clear 
                                                |- name -- <name>       (0)
                                                |- src-addr4 -- <ipv4-address> -- <ipv4-address>        (0)
                                                |- dst-addr4 -- <ipv4-address> -- <ipv4-address>        (0)
                                                |- src-addr6 -- <ipv6-address> -- <ipv4-address>        (0)
                                                |- dst-addr6 -- <ipv6-address> -- <ipv6-address>        (0)
                                                |- src-port -- <port> -- <port>         (0)
                                                |- dst-port -- <port>   (0)
                                                |- vd -- <index>        (0)
                                                |- interface -- <index>         (0)
                                                +- negate -- vd 
                                                          |- src-addr4 
                                                          |- dst-addr4 
                                                          |- src-addr6 
                                                          |- dst-addr6 
                                                          |- src-port 
                                                          |- dst-port 
                                                          |- name 
                                                          +- interface 
                               |- ipsec -- status 
                                        +- debug -- debug       (0)
                               |- tunnel -- down -- phase2 -- phase1 -- serial  (0)
                                         |- up -- phase2 -- phase1 -- serial    (0)
                                         |- list -- name 
                                                 +- number -- <begin-index> -- <end-index>      (0)
                                         |- dialup-list 
                                         |- reset 
                                         |- flush 
                                         |- delinbsa -- <name> -- <spi> -- <spi> -- <spi> -- <spi> -- <spi> -- <spi> -- <spi> -- <spi>      (0)
                                         |- deloutbsa -- <name> -- <spi> -- <spi> -- <spi> -- <spi> -- <spi> -- <spi> -- <spi> -- <spi>     (0)
                                         +- stat -- flush 
                               |- concentrator -- list 
                               |- l2tp -- status 
                               |- pptp -- status 
                               +- ssl -- list 
                                      |- mux 
                                      |- statistics -- <all|vdom-name|vfid>     (0)
                                      |- hw-acceleration-status 
                                      |- tunnel-test -- enable  (0)
                                      |- web-mode-test -- enable        (0)
                                      +- debug-filter -- clear 
                                                      |- list 
                                                      |- src-addr4 -- <ipv4-address> -- <ipv4-address>  (0)
                                                      |- src-addr6 -- <ipv6-address> -- <ipv6-address>  (0)
                                                      |- vd -- <vdom name>      (0)
                                                      +- negate -- vd 
                                                                |- src-addr4 
                                                                +- src-addr6 
                        |- sys -- vdom-property 
                               |- last-modified-files -- [path] -- [number]     (0)
                               |- top -- <value> -- <value> -- <value>  (0)
                               |- mpstat -- <value> -- <value>  (0)
                               |- nmi-watchdog -- enable 
                                               +- disable 
                               |- modem -- detect 
                                        |- history 
                                        |- com 
                                        |- cmd -- <at>  (0)
                                        |- external-modem 
                                        |- query -- <[0|1]>     (0)
                                        +- reset 
                               |- lte-modem -- info 
                               |- heap 
                               |- kill -- <signal> -- <pid>     (0)
                               |- csum -- <file>        (0)
                               |- dayst-info -- timezone-index -- [year]        (0)
                               |- ntp -- status 
                               |- process -- dump -- <pid>      (0)
                                          |- trace 
                                          +- daemon-auto-restart -- <action> -- <daemon>        (0)
                               |- top-summary -- <options>      (0)
                               |- vd -- list 
                                     |- stats 
                                     |- add -- vdname   (0)
                                     |- delete -- vdname        (0)
                                     +- set -- vdname   (0)
                               |- device -- add -- vdname -- devname    (0)
                                         |- delete -- vdname -- devname         (0)
                                         +- list -- vdname      (0)
                               |- ha -- stats 
                                     |- status 
                                     |- mac 
                                     |- checksum -- show -- <Enter> or <global/vdom-name> -- <Enter> or <object-fullpath> -- <Enter> or <entry-name>        (0)
                                                 |- recalculate -- <Enter> or <global/vdom-name>        (0)
                                                 |- cached -- <global/vdom-name>        (0)
                                                 |- cluster 
                                                 |- log -- enable 
                                                        +- disable 
                                                 +- test 
                                     |- checksync 
                                     |- dump-by -- xdb 
                                                |- group 
                                                |- vcluster 
                                                |- rcache 
                                                |- memory 
                                                |- debug-zone 
                                                |- vdom 
                                                |- kernel 
                                                |- device 
                                                |- stat 
                                                |- sesync 
                                                +- frup 
                                     |- vcinfo 
                                     |- syncinfo 
                                     |- fib 
                                     |- hadiff -- status 
                                               |- log -- enable 
                                                      |- disable 
                                                      +- clear 
                                               |- max-sync-turns -- <integer>   (0)
                                               +- max-unsync-wait -- <integer>  (0)
                                     |- reset-uptime 
                                     |- session-sync-dev -- clear 
                                                         +- set 
                                     |- recalculate-extfile-signature 
                                     |- sync-stats 
                                     |- extfile-sig 
                                     |- set-as-master -- enable 
                                                      |- disable -- <date> -- <time>    (0)
                                                      +- status 
                                     |- vlan-hb-monitor 
                                     +- bypass-pingsvr-flip-timeout -- enable 
                                                                    +- disable 
                               |- profile -- start 
                                          |- stop 
                                          |- show -- order 
                                                  +- detail 
                                          |- sysmap 
                                          |- cpumask 
                                          +- module 
                               |- session -- sync -- reset 
                                          |- list -- expectation 
                                          |- clear 
                                          |- stat 
                                          |- full-stat 
                                          |- exp-stat 
                                          |- ttl 
                                          |- filter -- vd -- <xxx>      (0)
                                                    |- sintf -- <xxxx>  (0)
                                                    |- dintf -- <xxxx>  (0)
                                                    |- src -- <xxx.xxx.xxx.xxx> -- <xxx.xxx.xxx.xxx>    (0)
                                                    |- nsrc -- <xxx.xxx.xxx.xxx> -- <xxx.xxx.xxx.xxx>   (0)
                                                    |- dst -- <xxx.xxx.xxx.xxx> -- <xxx.xxx.xxx.xxx>    (0)
                                                    |- proto -- <xx> -- <xx>    (0)
                                                    |- sport -- <xxxx> -- <xxxx>        (0)
                                                    |- nport -- <xxxx> -- <xxxx>        (0)
                                                    |- dport -- <xxxx> -- <xxxx>        (0)
                                                    |- policy -- <xxx> -- <xxx>         (0)
                                                    |- expire -- <xxx> -- <xxx>         (0)
                                                    |- duration -- <xxx> -- <xxx>       (0)
                                                    |- proto-state -- <x> -- <x>        (0)
                                                    |- session-state1 -- <x> -- <x>     (0)
                                                    |- session-state2 -- <x> -- <x>     (0)
                                                    |- clear -- vd 
                                                             |- sintf 
                                                             |- dintf 
                                                             |- src 
                                                             |- nsrc 
                                                             |- dst 
                                                             |- proto 
                                                             |- proto-state 
                                                             |- sport 
                                                             |- nport 
                                                             |- dport 
                                                             |- policy 
                                                             |- expire 
                                                             |- duration 
                                                             |- session-state1 
                                                             +- session-state2 
                                                    +- negate -- vd 
                                                              |- sintf 
                                                              |- dintf 
                                                              |- src 
                                                              |- nsrc 
                                                              |- dst 
                                                              |- proto 
                                                              |- proto-state 
                                                              |- sport 
                                                              |- nport 
                                                              |- dport 
                                                              |- policy 
                                                              |- expire 
                                                              |- duration 
                                                              |- session-state1 
                                                              +- session-state2 
                                          +- help -- list 
                                                  |- add -- name -- protocol -- port    (0)
                                                  +- delete -- protocol -- port         (0)
                               |- mcast-session -- list 
                                                |- clear 
                                                |- stat 
                                                +- filter -- vd -- <xxx>        (0)
                                                          |- sintf -- <xxxx>    (0)
                                                          |- src -- <xxx.xxx.xxx.xxx> -- <xxx.xxx.xxx.xxx>      (0)
                                                          |- dst -- <xxx.xxx.xxx.xxx> -- <xxx.xxx.xxx.xxx>      (0)
                                                          |- proto -- <xx> -- <xx>      (0)
                                                          |- sport -- <xxxx> -- <xxxx>  (0)
                                                          |- dport -- <xxxx> -- <xxxx>  (0)
                                                          |- clear -- vd 
                                                                   |- sintf 
                                                                   |- src 
                                                                   |- dst 
                                                                   |- proto 
                                                                   |- sport 
                                                                   +- dport 
                                                          +- negate -- vd 
                                                                    |- sintf 
                                                                    |- src 
                                                                    |- dst 
                                                                    |- proto 
                                                                    |- sport 
                                                                    +- dport 
                               |- session6 -- sync 
                                           |- list -- expectation 
                                           |- clear 
                                           |- stat 
                                           |- full-stat 
                                           |- exp-stat 
                                           |- filter -- vd -- <xxx>     (0)
                                                     |- sintf -- <xxxxx>        (0)
                                                     |- dintf -- <xxxxx>        (0)
                                                     |- src -- <xxx:xxx::xxx:xxx> -- <xxx:xxx::xxx:xxx>         (0)
                                                     |- dst -- <xxx:xxx::xxx:xxx> -- <xxx:xxx::xxx:xxx>         (0)
                                                     |- proto -- <xx> -- <xx>   (0)
                                                     |- proto-state -- <xx> -- <xx>     (0)
                                                     |- sport -- <xxxx> -- <xxxx>       (0)
                                                     |- dport -- <xxxx> -- <xxxx>       (0)
                                                     |- policy -- <xxx> -- <xxx>        (0)
                                                     |- expire -- <xxx> -- <xxx>        (0)
                                                     |- duration -- <xxx> -- <xxx>      (0)
                                                     |- session-state1 -- <x> -- <x>    (0)
                                                     |- session-state2 -- <x> -- <x>    (0)
                                                     |- clear -- vd 
                                                              |- sintf 
                                                              |- dintf 
                                                              |- src 
                                                              |- dst 
                                                              |- proto 
                                                              |- proto-state 
                                                              |- sport 
                                                              |- dport 
                                                              |- policy 
                                                              |- expire 
                                                              |- duration 
                                                              |- session-state1 
                                                              +- session-state2 
                                                     +- negate -- vd 
                                                               |- sintf 
                                                               |- dintf 
                                                               |- src 
                                                               |- dst 
                                                               |- proto 
                                                               |- proto-state 
                                                               |- sport 
                                                               |- dport 
                                                               |- policy 
                                                               |- expire 
                                                               |- duration 
                                                               |- session-state1 
                                                               +- session-state2 
                                           +- help -- list 
                                                   |- add -- name -- protocol -- port   (0)
                                                   +- delete -- protocol -- port        (0)
                               |- mcast-session6 -- list 
                                                 |- clear 
                                                 |- stat 
                                                 +- filter -- vd -- <xxx>       (0)
                                                           |- sintf -- <xxxxx>  (0)
                                                           |- src -- <xxx.xxx.xxx.xxx> -- <xxx.xxx.xxx.xxx>     (0)
                                                           |- dst -- <xxx.xxx.xxx.xxx> -- <xxx.xxx.xxx.xxx>     (0)
                                                           |- proto -- <xx> -- <xx>     (0)
                                                           |- sport -- <xxxx> -- <xxxx>         (0)
                                                           |- dport -- <xxxx> -- <xxxx>         (0)
                                                           |- clear -- vd 
                                                                    |- sintf 
                                                                    |- src 
                                                                    |- dst 
                                                                    |- proto 
                                                                    |- sport 
                                                                    +- dport 
                                                           +- negate -- vd 
                                                                     |- sintf 
                                                                     |- src 
                                                                     |- dst 
                                                                     |- proto 
                                                                     |- sport 
                                                                     +- dport 
                               |- tcp-option -- enable 
                                             +- disable 
                               |- tcpsock 
                               |- vlan -- list 
                               |- cmdb 
                               |- slab -- <path or shmid> -- <object>   (0)
                               |- shm -- <address>      (0)
                               |- sem -- <semid>        (0)
                               |- checkused -- <path.object.mkey> -- <tablename>        (0)
                               |- allow-set -- enable 
                                            +- disable 
                               |- uuid -- generate 
                                       +- allow-manual-set -- enable 
                                                           +- disable 
                               |- flash -- list -- <file>       (0)
                                        +- format 
                               |- h323 -- debug-mask -- mask    (0)
                                       |- status 
                                       |- peer -- list 
                                       +- call -- list 
                               |- logdisk -- status -- monitor 
                                          |- test 
                                          |- usage 
                                          |- smart 
                                          +- quota 
                               |- sccp-proxy -- stats -- list 
                                                      |- proto 
                                                      |- clear 
                                                      +- mem -- summary 
                                                             +- full 
                                             |- phone -- list 
                                             |- redirect -- list 
                                             |- debug-console 
                                             +- restart 
                               |- sip -- debug-mask -- mask     (0)
                                      |- status 
                                      |- dialog -- list 
                                                +- clear 
                                      +- mapping -- list 
                               |- fullcone 
                               |- sip-proxy -- calls -- list 
                                                     |- idle 
                                                     |- invite 
                                                     +- clear 
                                            |- config -- list 
                                                      +- profile 
                                            |- redirect -- list 
                                            |- vip -- real-server 
                                            |- scheduler-times -- start 
                                                               |- stop 
                                                               +- display 
                                            |- session -- list 
                                            |- stats -- mem -- summary 
                                                            +- full 
                                                     |- list 
                                                     |- call 
                                                     |- ha 
                                                     |- proto 
                                                     |- udp 
                                                     |- ssl-auth 
                                                     +- clear 
                                            |- restart 
                                            |- debug-console 
                                            |- filter -- list 
                                                      |- clear 
                                                      |- src-addr4 -- <ipv4-address> -- <ipv4-address>  (0)
                                                      |- dst-addr4 -- <ipv4-address> -- <ipv4-address>  (0)
                                                      |- vd -- <index>  (0)
                                                      |- src-addr6 -- <ipv6-address> -- <ipv6-address>  (0)
                                                      |- dst-addr6 -- <ipv6-address> -- <ipv6-address>  (0)
                                                      |- src-port -- <port>     (0)
                                                      |- dst-port -- <port>     (0)
                                                      |- policy -- <policy>     (0)
                                                      |- policy-type -- ipv4 
                                                                     +- ipv6 
                                                      |- voip-profile -- <voip-profile>         (0)
                                                      +- negate -- vd 
                                                                |- policy 
                                                                |- policy-type 
                                                                |- src-addr4 
                                                                |- dst-addr4 
                                                                |- src-addr6 
                                                                |- dst-addr6 
                                                                |- src-port 
                                                                |- dst-port 
                                                                +- voip-profile 
                                            |- log-filter -- list 
                                                          |- clear 
                                                          |- vd -- <index>      (0)
                                                          |- src-addr4 -- <ipv4-address> -- <ipv4-address>      (0)
                                                          |- dst-addr4 -- <ip-address> -- <ip-address>  (0)
                                                          |- src-addr6 -- <ipv6-address> -- <ipv6-address>      (0)
                                                          |- dst-addr6 -- <ipv6-address> -- <ipv6-address>      (0)
                                                          |- src-port -- <port>         (0)
                                                          |- dst-port -- <port>         (0)
                                                          |- policy -- <policy>         (0)
                                                          |- policy-type -- ipv4 
                                                                         +- ipv6 
                                                          |- voip-profile -- <voip-profile>     (0)
                                                          +- negate -- vd 
                                                                    |- policy 
                                                                    |- policy-type 
                                                                    |- src-addr4 
                                                                    |- dst-addr4 
                                                                    |- src-addr6 
                                                                    |- dst-addr6 
                                                                    |- src-port 
                                                                    |- dst-port 
                                                                    +- voip-profile 
                                            +- meters -- list 
                               |- proxy -- bypass -- http -- on|off     (0)
                                                  |- smtp -- on|off     (0)
                                                  |- imap -- on|off     (0)
                                                  |- pop3 -- on|off     (0)
                                                  |- nntp -- on|off     (0)
                                                  +- ftp -- on|off      (0)
                                        |- debug-filter -- list 
                                                        |- clear 
                                                        +- src -- <ip-address> -- <ip-address>  (0)
                                        |- stats -- list 
                                                 |- all 
                                                 |- vdom -- list 
                                                         +- all 
                                                 +- clear 
                                        |- filter -- list 
                                                  |- clear 
                                                  |- negate -- vd 
                                                            +- worker 
                                                  |- vd -- <index>      (0)
                                                  +- worker -- <id>     (0)
                                        |- log -- filter -- list 
                                                         |- clear 
                                                         |- negate -- vd 
                                                                   +- worker 
                                                         |- vd -- <index>       (0)
                                                         +- worker -- <id>      (0)
                                        |- log-debug -- <integer>       (0)
                                        |- memory -- status 
                                                  |- malloc 
                                                  +- jemalloc 
                                        +- restart 
                               |- fips -- error-mode 
                               |- cc -- error-mode -- <cause>   (0)
                               |- pair 
                               |- traffic-priority -- list 
                               |- dashboard -- reset 
                               |- cpuset -- process -- <xxx> -- <xxx>   (0)
                                         +- interrupt -- <xxx> -- <xxx>         (0)
                               |- swnet -- list -- <name>       (0)
                               |- wccp -- list 
                                       |- flush 
                                       +- delete -- <xxx>       (0)
                               |- stp -- bridge -- info 
                                                +- filter -- list 
                                                          |- clear 
                                                          |- vd -- <name>       (0)
                                                          |- bridge -- <name>   (0)
                                                          +- port -- <name>     (0)
                                      |- info 
                                      |- time -- enable 
                                              +- disable 
                                      |- log -- terminal -- stats 
                                             +- filter -- list 
                                                       |- clear 
                                                       |- vd -- <name>  (0)
                                                       |- bridge -- <name>      (0)
                                                       +- port -- <name>        (0)
                                      +- restart 
                               |- 802-1x -- status 
                               |- server-probe -- response 
                               |- link-monitor -- status -- <name | all>        (0)
                                               |- gui-summary -- <name>         (0)
                                               |- interface -- <name>   (0)
                                               |- launch -- <entry name>        (0)
                                               |- vwl-status 
                                               +- vwl-health-check-status -- <health-check name>        (0)
                               |- gre -- list 
                                      +- keepalive -- <name | all>      (0)
                               |- scanunit -- stats -- list 
                                                    |- all 
                                                    +- clear 
                                           |- filter -- list 
                                                     |- clear 
                                                     |- negate -- vd 
                                                               +- worker 
                                                     |- vd -- <index>   (0)
                                                     +- worker -- <id>  (0)
                                           |- log -- filter -- list 
                                                            |- clear 
                                                            |- negate -- vd 
                                                                      +- worker 
                                                            |- vd -- <index>    (0)
                                                            +- worker -- <id>   (0)
                                           |- reload-avdb 
                                           |- reload-aveng 
                                           +- restart 
                               |- botnet -- stat 
                                         |- list -- <offset>    (0)
                                         |- find -- <ip> -- <port> -- <proto>   (0)
                                         |- flush 
                                         |- reload 
                                         +- file -- stat 
                                                 |- list -- <offset> -- <proto>         (0)
                                                 +- botnet-name -- <name ID>    (0)
                               |- csf -- downstream 
                                      +- query -- <path>        (0)
                               +- traffic -- statistics -- show 
                                                        +- clear 
                        |- endpoint -- record-list -- <ipv4-address> -- <mac-address> -- <forticlient-uid>      (0)
                                    |- record-summary 
                                    |- record-delete -- <ipv4-address>  (0)
                                    |- information 
                                    |- ec-feature-list 
                                    |- registration -- summary 
                                                    |- list -- <ipv4-address> -- <mac-address> -- <forticlient-uid> -- <registration-fortigate>     (0)
                                                            |- registered-forticlients 
                                                            |- blocked-forticlients 
                                                            +- quarantined-forticlients 
                                                    |- cmdb-list -- <ipv4-address> -- <mac-address> -- <forticlient-uid>    (0)
                                                    |- block -- <id>    (0)
                                                    |- unblock -- <id>  (0)
                                                    |- quarantine -- <id>       (0)
                                                    |- unquarantine -- <id>     (0)
                                                    |- deregister -- <id>       (0)
                                                    |- sync-peer-list -- <1/0>  (0)
                                                    |- force-peer-resync 
                                                    |- keepalive-timestamp -- <uid> -- <1/0>    (0)
                                                    |- recalculate-registered-forticlients 
                                                    |- forticlient-licence-key-expiration-check 
                                                    |- ssl-session-timeout -- <ssl-session-timeout>     (0)
                                                    |- skip-forticlient-system-update -- <1/0>  (0)
                                                    +- generate-ems-xml-conf -- <vdom> -- <profile-name> -- <type> (0)
                                    +- filter -- list 
                                              |- clear 
                                              |- src-ip -- <ipv4-address>       (0)
                                              |- ses-ip -- <ipv4-address>       (0)
                                              |- mac -- <mac-address>   (0)
                                              +- ftcl-uid -- <uid>      (0)
                        |- autoupdate -- status 
                                      |- versions 
                                      +- downgrade -- status    (0)
                        |- debug -- enable 
                                 |- disable 
                                 |- info 
                                 |- reset 
                                 |- report -- reset 
                                 |- crashlog -- get 
                                             |- clear 
                                             |- write -- <String>       (0)
                                             +- read 
                                 |- config-error-log -- clear 
                                                     +- read 
                                 |- application -- http -- <Integer>    (0)
                                                |- smtp -- <Integer>    (0)
                                                |- ftpd -- <Integer>    (0)
                                                |- pop3 -- <Integer>    (0)
                                                |- imap -- <Integer>    (0)
                                                |- nntp -- <Integer>    (0)
                                                |- proxy -- <Integer>   (0)
                                                |- radvd -- <Integer>   (0)
                                                |- miglogd -- <Integer>         (0)
                                                |- kmiglogd -- <Integer>        (0)
                                                |- forticldd -- <Integer>       (0)
                                                |- alertmail -- <Integer>       (0)
                                                |- ppp -- <Integer>     (0)
                                                |- l2tp -- <Integer>    (0)
                                                |- pptp -- <Integer>    (0)
                                                |- pptpc -- <Integer>   (0)
                                                |- authd -- <Integer> -- <xxx.xxx.xxx.xxx>      (0)
                                                |- foauthd -- <Integer>         (0)
                                                |- fcnacd -- <Integer>  (0)
                                                |- fssod -- <Integer>   (0)
                                                |- dhcps -- <Integer>   (0)
                                                |- dhcp6s -- <Integer>  (0)
                                                |- update -- <Integer>  (0)
                                                |- vpd -- <Integer>     (0)
                                                |- fnbamd -- <Integer>  (0)
                                                |- eap_proxy -- <Integer>       (0)
                                                |- ipsmonitor -- <Integer>      (0)
                                                |- ipsengine -- <Integer>       (0)
                                                |- urlfilter -- <Integer>       (0)
                                                |- ddnscd -- <Integer>  (0)
                                                |- dhcprelay -- <Integer>       (0)
                                                |- dhcp6r -- <Integer>  (0)
                                                |- snmpd -- <Integer>   (0)
                                                |- chassis -- <Integer>         (0)
                                                |- scanunit -- <Integer>        (0)
                                                |- spamfilter -- <Integer>      (0)
                                                |- wpad -- <Integer>    (0)
                                                |- wpad_dump -- <Integer>       (0)
                                                |- wifi -- <Integer>    (0)
                                                |- dnsproxy -- <Integer>        (0)
                                                |- sflowd -- <Integer>  (0)
                                                |- hatalk -- <Integer>  (0)
                                                |- hasync -- <Integer>  (0)
                                                |- harelay -- <Integer>         (0)
                                                |- hamonitord -- <Integer>      (0)
                                                |- quarantine -- <Integer>      (0)
                                                |- dhcpc -- <Integer>   (0)
                                                |- zebos-launcher -- <Integer>  (0)
                                                |- zebos -- <Integer>   (0)
                                                |- modemd -- <Integer>  (0)
                                                |- radiusd -- <Integer>         (0)
                                                |- sshd -- <Integer>    (0)
                                                |- sslvpn -- <Integer>  (0)
                                                |- guacd -- <Integer>   (0)
                                                |- info-sslvpn -- <Integer>     (0)
                                                |- sessionsync -- <Integer>     (0)
                                                |- l2tpcd -- <Integer>  (0)
                                                |- ipldbd -- <Integer>  (0)
                                                |- crl-update -- <Integer>      (0)
                                                |- alarmd -- <Integer>  (0)
                                                |- forticron -- <Integer>       (0)
                                                |- uploadd -- <Integer>         (0)
                                                |- smbcd -- <Integer>   (0)
                                                |- vs -- <Integer>      (0)
                                                |- sip -- <Integer>     (0)
                                                |- sccp -- <Integer>    (0)
                                                |- netscan -- <Integer>         (0)
                                                |- ike -- <Integer>     (0)
                                                |- fgfmd -- <Integer>   (0)
                                                |- wccpd -- <Integer>   (0)
                                                |- wad -- <Integer>     (0)
                                                |- garpd -- <Integer>   (0)
                                                |- scep -- <Integer>    (0)
                                                |- dialinsvr -- <Integer>       (0)
                                                |- ipsufd -- <Integer>  (0)
                                                |- cw_acd -- <Integer>  (0)
                                                |- cw_acd_wpad -- <Integer>     (0)
                                                |- cu_acd -- <Integer>  (0)
                                                |- fortilinkd -- <Integer>      (0)
                                                |- swctrl_authd -- <Integer>    (0)
                                                |- swctrl_authd_dump -- <Integer>       (0)
                                                |- flcfgd -- <Integer>  (0)
                                                |- rsyslogd -- <Integer>        (0)
                                                |- dlp -- <Integer>     (0)
                                                |- vrrpd -- <Integer>   (0)
                                                |- fgd_alert -- <Integer>       (0)
                                                |- ntpd -- <Integer>    (0)
                                                |- fsd -- <Integer>     (0)
                                                |- dlpfingerprint -- <Integer>  (0)
                                                |- httpsd -- <Integer>  (0)
                                                |- stp -- <Integer>     (0)
                                                |- spareblock -- <Integer>      (0)
                                                |- lted -- <Integer>    (0)
                                                |- lldptx -- <Integer>  (0)
                                                |- src-vis -- <Integer>         (0)
                                                |- wiredap -- <Integer>         (0)
                                                |- dhcp6c -- <Integer>  (0)
                                                |- server-probe -- <Integer>    (0)
                                                |- link-monitor -- <Integer>    (0)
                                                |- pppoed -- <Integer>  (0)
                                                |- ovrd -- <Integer>    (0)
                                                |- extenderd -- <Integer>       (0)
                                                |- init -- <Integer>    (0)
                                                |- mrd -- <Integer>     (0)
                                                |- dssccd -- <Integer>  (0)
                                                |- radius-das -- <Integer>      (0)
                                                |- csfd -- <Integer>    (0)
                                                +- fsvrd -- <Integer>   (0)
                                 |- kernel -- level -- <Integer>        (0)
                                           +- ha -- <Integer>   (0)
                                 |- remote-extender -- extenderd -- <Integer>   (0)
                                                    +- modem-manager -- <Integer>       (0)
                                 |- console -- send -- <AT command> -- <character> -- <integer>         (0)
                                            |- timestamp -- enable 
                                                         +- disable 
                                            |- no-user-log-msg -- enable 
                                                               +- disable 
                                            +- retry-log-msg -- enable 
                                                             +- disable 
                                 |- cli -- <Integer>    (0)
                                 |- cmdb-trace -- <Integer>     (0)
                                 |- cmdb-walk -- <Integer>      (0)
                                 |- rating -- <refresh-rate>    (0)
                                 |- authd -- clear 
                                          |- memory 
                                          +- fsso -- filter -- clear 
                                                            |- source -- <xxx.xxx.xxx.xxx> -- <xxx.xxx.xxx.xxx>    (0)
                                                            |- user -- <name>   (0)
                                                            |- group -- <name>  (0)
                                                            +- server -- <name>         (0)
                                                  |- list 
                                                  |- refresh-groups 
                                                  |- summary 
                                                  |- clear-logons 
                                                  |- refresh-logons 
                                                  +- server-status 
                                 |- fsso-polling -- summary 
                                                 |- detail -- <id>      (0)
                                                 |- client 
                                                 |- user -- <id>        (0)
                                                 |- refresh-user -- <id>        (0)
                                                 +- set-log-source -- <id> -- <src>     (0)
                                 |- flow -- filter -- clear 
                                                   |- vd -- <xxx>       (0)
                                                   |- proto -- <xxx>    (0)
                                                   |- addr -- <xxx.xxx.xxx.xxx> -- <xxx.xxx.xxx.xxx>    (0)
                                                   |- saddr -- <xxx.xxx.xxx.xxx> -- <xxx.xxx.xxx.xxx>   (0)
                                                   |- daddr -- <xxx.xxx.xxx.xxx> -- <xxx.xxx.xxx.xxx>   (0)
                                                   |- port -- <xxx> -- <xxx>    (0)
                                                   |- sport -- <xxx> -- <xxx>   (0)
                                                   |- dport -- <xxx> -- <xxx>   (0)
                                                   +- negate -- vd 
                                                             |- proto 
                                                             |- addr 
                                                             |- saddr 
                                                             |- daddr 
                                                             |- port 
                                                             |- sport 
                                                             +- dport 
                                         |- filter6 -- clear 
                                                    |- vd -- <xxx>      (0)
                                                    |- proto -- <xxx>   (0)
                                                    |- addr -- <xxx:xxx::xxx:xxx> -- <xxx:xxx::xxx:xxx>         (0)
                                                    |- saddr -- <xxx:xxx::xxx:xxx> -- <xxx:xxx::xxx:xxx>        (0)
                                                    |- daddr -- <xxx:xxx::xxx:xxx> -- <xxx:xxx::xxx:xxx>        (0)
                                                    |- port -- <xxx> -- <xxx>   (0)
                                                    |- sport -- <xxx> -- <xxx>  (0)
                                                    |- dport -- <xxx> -- <xxx>  (0)
                                                    +- negate -- vd 
                                                              |- proto 
                                                              |- addr 
                                                              |- saddr 
                                                              |- daddr 
                                                              |- port 
                                                              |- sport 
                                                              +- dport 
                                         |- trace -- start -- <xxx>     (0)
                                                  |- stop 
                                                  |- start6 -- <xxx>    (0)
                                                  +- stop6 
                                         +- show -- console -- enable 
                                                            +- disable 
                                                 |- function-name -- enable 
                                                                  +- disable 
                                                 +- iprope -- enable 
                                                           +- disable 
                                 |- urlfilter -- src-addr -- <IP address>       (0)
                                              +- test-url -- <url>      (0)
                                 +- admin -- error-log 
                        |- settings -- reset 
                                    +- info 
                        |- geoip -- ip2country -- ip    (0)
                                 +- geoip-query -- ip   (0)
                        |- log -- test 
                               |- wireless-controller 
                               |- show 
                               |- alertmail -- test -- <level> -- <number>      (0)
                                            +- authcode -- <recipient>  (0)
                               |- list 
                               |- del 
                               |- read 
                               |- rlist 
                               |- rdel 
                               |- rread 
                               |- rolls 
                               |- display 
                               |- virus-stats 
                               |- attack-stats 
                               |- virus-global-stats 
                               |- attack-global-stats 
                               |- kernel-stats 
                               +- clear-kernel-stats 
                        |- alertconsole -- test 
                                        |- list 
                                        |- clear 
                                        +- fgd-retrieve 
                        |- antivirus -- quarantine -- list -- <value>   (0)
                                                   |- delete -- <checksum>      (0)
                                                   +- purge 
                                     |- bypass -- on|off        (0)
                                     +- database-info 
                        |- wad -- console-log -- enable or disable      (0)
                               |- debug-url -- enable or disable        (0)
                               |- stats -- list 
                                        |- clear 
                                        |- summary -- list 
                                                   +- clear 
                                        |- mem -- list 
                                               +- clear 
                                        |- crypto -- list 
                                                  +- clear 
                                        |- scan -- list 
                                                +- clear 
                                        |- scripts -- list 
                                                   +- clear 
                                        |- filter -- list 
                                                  +- clear 
                                        +- policy -- list -- <vdom>     (0)
                                                  +- clear -- <vdom> -- <pid>   (0)
                               |- filter -- list 
                                         |- clear 
                                         |- src -- <ip-address> -- <ip-address>         (0)
                                         |- dst -- <ip-address> -- <ip-address>         (0)
                                         |- sport -- <port> -- <port>   (0)
                                         |- dport -- <port> -- <port>   (0)
                                         |- vd -- <index>       (0)
                                         |- drop-unknown-session -- Drop unknown sessions       (0)
                                         |- negate -- <parm>    (0)
                                         +- protocol -- <http> -- <mapi> -- <cifs> -- <ftp> -- <tcp>    (0)
                               +- user -- list 
                                       +- clear -- id -- ip -- vdom     (0)
                        |- webfilter -- fortiguard -- statistics -- list 
                                                                 +- flush 
                                     +- bword -- matchfilter -- <filter string>         (0)
                        |- spamfilter -- bword -- matchfilter -- <filter string>        (0)
                                      +- fortishield -- servers -- <refresh-rate>       (0)
                                                     +- statistics -- list 
                                                                   +- flush 
                        |- firewall -- ipmac -- add -- <xxx.xxx.xxx.xxx> -- <xx:xx:xx:xx:xx:xx> -- <drop|accept>   (0)
                                             |- delete -- <xxx.xxx.xxx.xxx> -- <xx:xx:xx:xx:xx:xx>      (0)
                                             |- flush 
                                             |- list 
                                             +- status 
                                    |- ippool -- list -- pba 
                                                      |- nat-ip 
                                                      +- user 
                                              |- flush 
                                              +- stats 
                                    |- ippool-fixed-range -- list -- natip -- <xxx.xxx.xxx.xxx> -- <Enter>|<port>  (0)
                                    |- iplist -- list -- optimized 
                                              +- flush 
                                    |- iplist6 -- list -- optimized 
                                               +- flush 
                                    |- iprope -- lookup -- <src_ip> -- <src_port> -- <dst_ip> -- <dst_port> -- <protocol> -- <device>       (0)
                                              |- list -- <No.>  (0)
                                              |- appctrl -- list 
                                                         |- status 
                                                         |- stats -- list 
                                                                  +- clear 
                                                         +- shaper -- list 
                                              |- show 
                                              |- clear 
                                              |- flush -- <No.>         (0)
                                              +- state 
                                    |- iprope6 -- lookup -- <src_ip> -- <src_port> -- <dst_ip> -- <dst_port> -- <protocol> -- <device>      (0)
                                               |- list -- <No.>         (0)
                                               |- flush -- <No.>        (0)
                                               |- state 
                                               |- show 
                                               +- clear 
                                    |- shaper -- traffic-shaper -- list 
                                                                |- state 
                                                                +- stats -- list 
                                                                         +- clear -- <name>     (0)
                                              +- per-ip-shaper -- list 
                                                               |- stats 
                                                               |- state 
                                                               +- clear 
                                    |- schedule -- list 
                                    |- fqdn -- list 
                                            |- flush -- name    (0)
                                            +- purge 
                                    |- ipgeo -- country-list 
                                             |- ip-list -- name         (0)
                                             |- ip2country -- <xxx.xxx.xxx.xxx>         (0)
                                             |- override 
                                             +- copyright-notice 
                                    |- proute -- list -- <number>       (0)
                                    |- proute6 -- list 
                                    |- packet -- distribution 
                                    |- vip -- realserver -- flush 
                                                         |- list 
                                                         |- up -- <name> -- <xxx.xxx.xxx.xxx>   (0)
                                                         |- down -- <name> -- <xxx.xxx.xxx.xxx>         (0)
                                                         +- healthcheck -- stats -- show 
                                                                                 +- clear 
                                           +- virtual-server -- log -- terminal -- clear 
                                                                                |- reset 
                                                                                +- stats 
                                                                    |- console -- enable 
                                                                               +- disable 
                                                                    +- filter -- list 
                                                                              |- clear 
                                                                              |- name -- <name>         (0)
                                                                              |- src -- <ip-address> -- <ip-address>        (0)
                                                                              |- dst -- <ip-address> -- <ip-address>        (0)
                                                                              |- src-port -- <port>     (0)
                                                                              |- dst-port -- <port>     (0)
                                                                              |- vd -- <index>  (0)
                                                                              |- worker -- <index>      (0)
                                                                              +- negate -- vd 
                                                                                        |- src-addr 
                                                                                        |- dst-addr 
                                                                                        |- src-port 
                                                                                        |- dst-port 
                                                                                        |- name 
                                                                                        +- worker 
                                                             |- session -- list 
                                                                        |- clear 
                                                                        |- client -- list 
                                                                                  +- clear 
                                                                        +- server -- list 
                                                                                  +- clear 
                                                             |- real-server -- list 
                                                             |- stats -- list 
                                                                      |- clear 
                                                                      |- http -- all 
                                                                              |- list 
                                                                              +- clear 
                                                                      |- operational -- list 
                                                                                     +- all 
                                                                      +- summary -- list 
                                                                                 |- all 
                                                                                 +- clear 
                                                             |- config -- list 
                                                                       |- session 
                                                                       |- log 
                                                                       +- log-vd 
                                                             |- filter -- list 
                                                                       |- clear 
                                                                       |- name -- <name>        (0)
                                                                       |- src -- <ip-address> -- <ip-address>   (0)
                                                                       |- dst -- <ip-address> -- <ip-address>   (0)
                                                                       |- src-port -- <port> -- <port>  (0)
                                                                       |- dst-port -- <port> -- <port>  (0)
                                                                       |- vd -- <index>         (0)
                                                                       |- worker -- <index>     (0)
                                                                       +- negate -- vd 
                                                                                 |- src-addr 
                                                                                 |- dst-addr 
                                                                                 |- src-port 
                                                                                 |- dst-port 
                                                                                 |- name 
                                                                                 +- worker 
                                                             |- test -- ssl -- sync 
                                                                            +- async 
                                                                     |- rsa-blinding -- disable 
                                                                                     +- enable 
                                                                     |- key-exchange -- sync 
                                                                                     +- async 
                                                                     +- rc4-hw -- disable 
                                                                               +- enable 
                                                             +- restart 
                                    |- auth -- list 
                                            |- clear 
                                            |- ipv6 -- list 
                                                    +- clear 
                                            +- filter -- clear 
                                                      |- source -- <xxx.xxx.xxx.xxx> -- <xxx.xxx.xxx.xxx>       (0)
                                                      |- source6 -- <xxxx::xxxx> -- <xxxx::xxxx>        (0)
                                                      |- policy -- <xxx>        (0)
                                                      |- user -- <name>         (0)
                                                      |- group -- <name>        (0)
                                                      +- method -- <method> -- <method> -- <method> -- <method> -- <method> -- <method>     (0)
                                    |- blocking -- list -- <xxx.xxx.xxx.xxx>    (0)
                                    |- ip-translation -- list 
                                                      +- flush 
                                    |- ipv6-ehf -- list 
                                    |- dns-xlate -- mapping -- list 
                                                            +- flush 
                                                 +- pool -- list 
                                                         +- flush 
                                    +- uuid -- list -- <type>   (0)
                        |- user -- device -- list 
                                          |- get -- <mac>       (0)
                                          |- del -- <mac>       (0)
                                          |- join -- <mac> -- <master_mac>      (0)
                                          |- bind-ip -- <mac> -- <ip>   (0)
                                          |- clear 
                                          |- os-summary 
                                          |- host-type-summary 
                                          |- stats 
                                          +- filter -- vd -- <index>    (0)
                                                    |- os-name -- <name>        (0)
                                                    |- type -- <name>   (0)
                                                    |- list 
                                                    |- addr -- <from> -- <to>   (0)
                                                    |- type-src -- <source>     (0)
                                                    |- generation -- <from> -- <to>     (0)
                                                    |- type-generation -- <from> -- <to>        (0)
                                                    |- joined -- <value>        (0)
                                                    |- index -- <value>         (0)
                                                    |- negate -- vd 
                                                              |- addr 
                                                              |- os-name 
                                                              |- type 
                                                              |- type-src 
                                                              |- generation 
                                                              |- type-generation 
                                                              |- joined 
                                                              +- index 
                                                    +- clear -- vd 
                                                             |- addr 
                                                             |- os-name 
                                                             |- type 
                                                             |- type-src 
                                                             |- generation 
                                                             |- type-generation 
                                                             |- joined 
                                                             +- index 
                                +- quarantine -- list -- src4 
                                                      |- src6 
                                                      +- all 
                                              |- add -- src4 -- <src-ipv4> -- <expiry> -- <ban-source>  (0)
                                                     +- src6 -- <src-ipv6> -- <expiry> -- <ban-source>  (0)
                                              |- delete -- src4 -- <src-ipv4>   (0)
                                                        +- src6 -- <src-ipv6>   (0)
                                              |- clear 
                                              +- stat 
                        |- ip -- router -- command -- show 
                                                   +- show-vrf 
                                        |- rip -- all 
                                               |- events 
                                               |- packet-send 
                                               |- packet-receive 
                                               |- show 
                                               +- level -- critical 
                                                        |- error 
                                                        |- info 
                                                        |- none 
                                                        +- warn 
                                        |- ospf -- all 
                                                |- events 
                                                |- ifsm 
                                                |- lsa 
                                                |- nfsm 
                                                |- nsm 
                                                |- packet 
                                                |- route 
                                                |- show 
                                                +- level -- critical 
                                                         |- error 
                                                         |- info 
                                                         |- none 
                                                         +- warn 
                                        |- bgp -- all 
                                               |- dampening 
                                               |- events 
                                               |- filters 
                                               |- fsm 
                                               |- keepalives 
                                               |- nsm 
                                               |- updates 
                                               |- show 
                                               +- level -- critical 
                                                        |- error 
                                                        |- info 
                                                        |- none 
                                                        +- warn 
                                        |- isis -- all 
                                                |- ifsm 
                                                |- nfsm 
                                                |- pdu 
                                                |- lsp 
                                                |- spf 
                                                |- events 
                                                |- nsm 
                                                |- show 
                                                +- level -- critical 
                                                         |- error 
                                                         |- info 
                                                         |- none 
                                                         +- warn 
                                        |- igmp -- all 
                                                |- decode 
                                                |- encode 
                                                |- events 
                                                |- fsm 
                                                |- tib 
                                                |- show 
                                                +- level -- critical 
                                                         |- error 
                                                         |- info 
                                                         |- none 
                                                         +- warn 
                                        |- pim-dm -- all 
                                                  |- context 
                                                  |- decode 
                                                  |- encode 
                                                  |- fsm 
                                                  |- mrt 
                                                  |- nexthop 
                                                  |- nsm 
                                                  |- vif 
                                                  |- show 
                                                  +- level -- critical 
                                                           |- error 
                                                           |- info 
                                                           |- none 
                                                           +- warn 
                                        |- pim-sm -- all 
                                                  |- events 
                                                  |- mfc 
                                                  |- mib 
                                                  |- nexthop 
                                                  |- nsm 
                                                  |- state 
                                                  |- show 
                                                  |- packet -- all 
                                                            |- in 
                                                            +- out 
                                                  |- timer -- all 
                                                           |- assert -- all 
                                                                     +- at 
                                                           |- bsr -- all 
                                                                  |- bst 
                                                                  +- crp 
                                                           |- hello -- all 
                                                                    |- ht 
                                                                    |- nlt 
                                                                    +- tht 
                                                           |- joinprune -- all 
                                                                        |- et 
                                                                        |- jt 
                                                                        |- kat 
                                                                        |- ot 
                                                                        +- ppt 
                                                           +- register -- all 
                                                                       +- rst 
                                                  +- level -- critical 
                                                           |- error 
                                                           |- info 
                                                           |- none 
                                                           +- warn 
                                        |- imi -- vty 
                                        +- bfd -- all 
                                               |- events 
                                               |- packet 
                                               |- fsm 
                                               |- nsm 
                                               |- show 
                                               +- level -- critical 
                                                        |- error 
                                                        |- info 
                                                        |- none 
                                                        +- warn 
                              |- address -- list 
                                         |- flush 
                                         |- add -- intf-name -- XXX.XXX.XXX.XXX -- XXX.XXX.XXX.XXX      (0)
                                         +- delete -- intf-name -- XXX.XXX.XXX.XXX      (0)
                              |- arp -- list 
                                     |- flush -- intf-name      (0)
                                     |- add -- intf-name -- XXX.XXX.XXX.XXX -- XX:XX:XX:XX:XX:XX        (0)
                                     +- delete -- intf-name -- XXX.XXX.XXX.XXX  (0)
                              |- route -- list 
                                       |- flush 
                                       |- add -- intf-name -- XXX.XXX.XXX.XXX -- XXX.XXX.XXX.XXX -- XXX.XXX.XXX.XXX -- <1-255> -- <0-4294967295> -- verify  (0)
                                       |- delete -- intf-name -- XXX.XXX.XXX.XXX -- XXX.XXX.XXX.XXX -- XXX.XXX.XXX.XXX -- <1-255> -- <0-4294967295> -- verify       (0)
                                       +- verify -- intf-name -- XXX.XXX.XXX.XXX -- XXX.XXX.XXX.XXX -- XXX.XXX.XXX.XXX -- <1-255> -- <0-4294967295>         (0)
                              |- ipip-tunnel -- list 
                                             |- add -- <name_str> -- intf-name -- XXX.XXX.XXX.XXX -- XXX.XXX.XXX.XXX        (0)
                                             +- delete -- <name_str>    (0)
                              |- gre-tunnel -- list 
                                            |- add -- <name_str> -- intf-name -- XXX.XXX.XXX.XXX -- XXX.XXX.XXX.XXX(0)
                                            +- delete -- <name_str>     (0)
                              |- rtcache -- list 
                                         +- flush 
                              |- multicast -- mroute 
                                           |- vif 
                                           |- group-membership 
                                           |- mac 
                                           |- status 
                                           |- get-igmp-limit 
                                           |- mfc-add -- <in-port> -- <src-ip> -- <group-ip> -- <out-ports-map>    (0)
                                           +- mfc-del -- <src-ip> -- <group-ip>         (0)
                              |- tcp -- list 
                                     +- flush 
                              |- udp -- list 
                                     +- flush 
                              +- framed-ip -- list 
                                           |- delete -- XXX.XXX.XXX.XXX         (0)
                                           +- delete-all -- <service>   (0)
                        |- hardware -- deviceinfo -- disk 
                                                  |- flash 
                                                  +- nic 
                                    |- ioport -- byte 
                                              |- word 
                                              +- long 
                                    |- pciconfig 
                                    |- setpci 
                                    |- lspci 
                                    |- sysinfo -- cpu 
                                               |- memory 
                                               |- interrupts 
                                               |- iomem 
                                               |- ioports 
                                               |- mtrr 
                                               |- slab 
                                               +- shm 
                                    |- smartctl 
                                    |- certificate 
                                    |- ipsec 
                                    +- test -- bios -- sysid 
                                                    |- checksum 
                                                    +- license 
                                            |- system -- cpu-config 
                                                      |- memory-config 
                                                      |- storage-config 
                                                      +- network-config 
                                            |- pci -- list 
                                                   +- device-check 
                                            |- usb -- 2.0 
                                                   +- 3.0 
                                            |- button -- reset 
                                            |- cpu -- model 
                                                   |- function 
                                                   |- stress 
                                                   +- performance 
                                            |- memory -- random 
                                                      |- sequence 
                                                      |- bit-flip 
                                                      |- bit-shift 
                                                      +- stress 
                                            |- network -- detect 
                                                       |- loopback 
                                                       +- stress 
                                            |- disk -- file-data 
                                                    |- file-data2 
                                                    +- stress 
                                            |- led -- sys-led 
                                                   +- nic-led 
                                            |- suite -- <all|pcba|stress|rack-burn-in> -- <arg> -- <arg> -- <arg> -- <arg> -- <arg> -- <arg> -- <arg> -- <arg>      (0)
                                            |- setting -- log-level -- <value>  (0)
                                            |- show 
                                            |- json 
                                            |- info 
                                            +- skip -- <clear|show|interface>   (0)
                        |- disktest -- device 
                                    |- block -- 1 
                                             |- 4 
                                             |- 16 
                                             |- 64 
                                             +- 256 
                                    |- time -- <Integer>        (0)
                                    |- size -- <Integer>        (0)
                                    +- run -- <Integer>         (0)
                        |- sniffer -- packet -- <interface> -- <filter> -- <verbose> -- <count> -- <tsformat>   (0)
                        |- npu -- np6lite -- fastpath -- enable -- <dev_id>     (0)
                                                      +- disable -- <dev_id>    (0)
                                          |- dce -- <dev_id>    (0)
                                          |- anomaly-drop -- <dev_id>   (0)
                                          |- session-stats -- <dev_id>  (0)
                                          |- sse-stats -- <dev_id>      (0)
                                          |- session -- <dev_id>        (0)
                                          |- register -- <dev_id>       (0)
                                          +- debug -- <param1> -- <param2> -- <param3> -- <param4> -- <param5>  (0)
                        |- ipv6 -- multicast -- mroute 
                                             |- vif 
                                             +- status 
                                |- address -- list 
                                           |- flush 
                                           |- add -- intf-name -- xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx   (0)
                                           |- delete -- intf-name -- xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx   (0)
                                           |- anycast 
                                           +- multicast -- intf-name -- xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx(0)
                                |- neighbor-cache -- list 
                                                  |- flush -- intf-name         (0)
                                                  |- add -- intf-name -- xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx -- XX:XX:XX:XX:XX:XX       (0)
                                                  +- delete -- intf-name -- xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx(0)
                                |- route -- list 
                                         +- flush 
                                |- sit-tunnel -- list 
                                              |- add -- <name_str> -- intf-name -- XXX.XXX.XXX.XXX -- XXX.XXX.XXX.XXX       (0)
                                              +- delete -- <name_str>   (0)
                                |- ipv6-tunnel -- list 
                                               |- add -- <name_str> -- intf-name -- xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx -- xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx      (0)
                                               +- delete -- <name_str>  (0)
                                |- router -- rip -- all 
                                                 |- events 
                                                 |- packet-send 
                                                 |- packet-receive 
                                                 |- show 
                                                 +- level -- critical 
                                                          |- error 
                                                          |- info 
                                                          |- none 
                                                          +- warn 
                                          +- ospf -- all 
                                                  |- events 
                                                  |- ifsm 
                                                  |- lsa 
                                                  |- nfsm 
                                                  |- nsm 
                                                  |- packet 
                                                  |- route 
                                                  |- show 
                                                  +- level -- critical 
                                                           |- error 
                                                           |- info 
                                                           |- none 
                                                           +- warn 
                                +- devconf -- accept-dad -- 0, 1 or 2   (0)
                                           +- disable_ipv6 -- 0 or 1    (0)
                        |- rsso -- query -- carrier-endpoint -- <endpoint> -- <ip>      (0)
                                         |- ip -- <ip> -- <ip>  (0)
                                         +- rsso-key -- <name> -- <ip>  (0)
                        |- radiusd -- test -- <level>   (0)
                        |- snmp -- ip -- frags 
                                +- trap -- send 
                        |- central-mgmt -- script-history -- test 
                                                          |- list 
                                                          |- clear 
                                                          +- del -- <id>        (0)
                        |- forticare -- protocol -- protocol    (0)
                                     +- server -- <IP>  (0)
                        |- internet-service -- id -- <id>       (0)
                                            |- id-summary -- <id>       (0)
                                            +- info -- <vdname> -- <proto> -- <port> -- <ip>    (0)
                        |- wireless-controller -- wlac -- <-c|-d|-k|-h> -- <value1> -- <value2> -- <value3> -- <value4> -- <value5>         (0)
                        |- switch-controller -- dump -- vlan_config 
                                                     |- switch_config 
                                                     |- mac_hosts 
                                                     |- mac_hosts_switch_port 
                                                     |- device_access_list 
                                                     |- client 
                                                     |- port-stats -- switch -- port    (0)
                                                     |- trunk-state -- switch -- trunk-port     (0)
                                                     +- mac-addr -- switch -- vlan_id   (0)
                                             |- kick -- vdom -- device-id -- vlanid -- portid -- mac    (0)
                                             +- trigger-mac-sync 
                        |- fortitoken -- info -- <id>   (0)
                                      |- test -- <id> -- <code> -- <next code> -- <screen size>         (0)
                                      +- debug -- enable 
                                               +- disable 
                        |- forticlient -- add-connection -- <name> -- <user> -- <id> -- <host os> -- <ip>       (0)
                                       |- close-connection -- <handle>  (0)
                                       +- close-all-connection 
                        |- web-ui -- debug -- enable 
                                           +- disable 
                                  |- cache -- enable 
                                           +- disable 
                                  |- app-icon-info 
                                  |- app-icon-update -- timeout         (0)
                                  +- cli-schema -- path -- name         (0)
                        |- src-vis -- stats -- list 
                                            +- count 
                                   |- log -- terminal -- clear 
                                                      |- reset 
                                                      +- stats 
                                   |- analysis-level -- full 
                                                     |- bypass 
                                                     |- ignore 
                                                     |- skip-tcpfp 
                                                     +- ignore-tcpfp 
                                   |- scheduler-times -- start 
                                                      |- stop 
                                                      +- display 
                                   |- ring -- <start> -- <length>       (0)
                                   |- save 
                                   |- restore 
                                   |- save 
                                   +- restart 
                        |- lldptx -- stats -- list 
                                           |- objects 
                                           +- counts 
                                  |- log -- terminal -- clear 
                                                     |- reset 
                                                     +- stats 
                                  |- scheduler-times -- start 
                                                     |- stop 
                                                     +- display 
                                  +- restart 
                        |- cp -- soc3 -- register -- <dev_id> -- <block_id>     (0)
                                      |- vpn-stats -- <dev_id>  (0)
                                      +- pkce-stats -- <dev_id>         (0)
                        |- fdsm -- fds-update 
                                |- log-controller-update 
                                |- account-info 
                                |- message-update 
                                |- forticlient-update 
                                |- forticlient-net-info 
                                |- modem-list 
                                |- contract-controller-update 
                                |- image-list 
                                |- image-download -- <id>       (0)
                                |- fc-installer-download -- <id>        (0)
                                |- sslvpn-package-download -- <id>      (0)
                                |- sslvpn-man-upgrade-package-download -- <id>  (0)
                                |- report-list -- <vdom>        (0)
                                |- report-download -- <oid>     (0)
                                |- cfg-list -- <type>   (0)
                                |- cfg-upload -- <comments>     (0)
                                |- cfg-download -- <type> -- <revision>         (0)
                                |- cfg-diff -- <revision1> -- <revision2>       (0)
                                |- ftk-activiate 
                                |- fortiap-latest-ver -- <model>        (0)
                                |- fortiap-download -- <id>     (0)
                                +- central-mgmt-status 
                        |- extender -- atcmd -- <at-command> -- <mark> -- <sn>  (0)
                                    |- cmd -- <Integer> -- <sn>         (0)
                                    +- modem-list 
                        +- traffictest -- show 
                                       |- run -- [-h/arg] -- [arg] -- [arg] -- [arg] -- [arg] -- [arg] -- [arg] -- [arg] -- [arg] -- [arg] -- [arg] -- [arg] -- [arg] -- [arg] -- [arg] -- [arg] -- [arg] -- [arg] -- [arg] -- [arg]   (0)
                                       |- server-intf -- <string>       (0)
                                       |- client-intf -- <string>       (0)
                                       |- port -- <port>        (0)
                                       +- proto -- 0 
                                                +- 1 
    |- execute__tree__ -- set-next-reboot -- <primary/secondary>        (0)
                       |- ping -- <ip>  (0)
                       |- ping-options -- data-size -- <integer>        (0)
                                       |- df-bit -- <string>    (0)
                                       |- pattern -- <string>   (0)
                                       |- repeat-count -- <string>      (0)
                                       |- source -- <string>    (0)
                                       |- timeout -- <integer>  (0)
                                       |- adaptive-ping -- <string>     (0)
                                       |- interval -- <integer>         (0)
                                       |- tos -- <string>       (0)
                                       |- ttl -- <integer>      (0)
                                       |- validate-reply -- <string>    (0)
                                       |- view-settings 
                                       +- reset 
                       |- ping6 
                       |- ping6-options -- data-size -- <integer>       (0)
                                        |- pattern -- <string>  (0)
                                        |- repeat-count -- <string>     (0)
                                        |- source -- <string>   (0)
                                        |- timeout -- <integer>         (0)
                                        |- adaptive-ping -- <string>    (0)
                                        |- interval -- <integer>        (0)
                                        |- tos -- <string>      (0)
                                        |- ttl -- <integer>     (0)
                                        |- validate-reply -- <string>   (0)
                                        |- view-settings 
                                        +- reset 
                       |- update-now 
                       |- update-av 
                       |- update-ips 
                       |- update-src-vis 
                       |- update-geo-ip 
                       |- send-fds-statistics 
                       |- update-list 
                       |- reboot -- comment -- <string>         (0)
                       |- shutdown -- comment -- <string>       (0)
                       |- factoryreset 
                       |- factoryreset2 
                       |- router -- restart 
                                 +- clear -- bgp -- all 
                                                 |- as 
                                                 |- ip 
                                                 |- ipv6 
                                                 |- dampening 
                                                 |- external 
                                                 +- flap-statistics 
                                          |- bfd -- session -- <xxx.xxx.xxx.xxx> -- <xxx.xxx.xxx.xxx> -- <string>  (0)
                                          |- ospf -- process 
                                          +- ospf6 -- process 
                       |- mrouter -- clear -- multicast-routes -- <xxx.xxx.xxx.xxx> -- <xxx.xxx.xxx.xxx>        (0)
                                           |- dense-routes -- <xxx.xxx.xxx.xxx> -- <xxx.xxx.xxx.xxx>    (0)
                                           |- sparse-routes -- <xxx.xxx.xxx.xxx> -- <xxx.xxx.xxx.xxx>   (0)
                                           |- statistics -- <xxx.xxx.xxx.xxx> -- <xxx.xxx.xxx.xxx>      (0)
                                           |- sparse-mode-bsr 
                                           |- igmp-interface -- <string>        (0)
                                           +- igmp-group -- <xxx.xxx.xxx.xxx> -- <string>       (0)
                       |- disconnect-admin-session -- <integer>         (0)
                       |- fsso -- refresh 
                       |- restore -- image -- tftp -- <string> -- <ip>  (0)
                                           |- ftp -- <string> -- <ftp server>[:ftp port] -- <Enter>|<user> -- <passwd>      (0)
                                           |- usb -- <string>   (0)
                                           |- management-station -- <string>    (0)
                                           +- flash -- <revision>       (0)
                                  |- secondary-image -- tftp -- <string> -- <ip>        (0)
                                                     |- ftp -- <string> -- <ftp server>[:ftp port] -- <Enter>|<user> -- <passwd>    (0)
                                                     +- usb -- <string>         (0)
                                  |- config -- tftp -- <string> -- <ip> -- <Enter>|<passwd>     (0)
                                            |- flash -- <revision>      (0)
                                            |- ftp -- <string> -- <ftp server>[:ftp port] -- <Enter>|<user> -- <passwd> -- <Enter>|<passwd>         (0)
                                            |- dhcp -- <port> -- <Enter> | <vlanid>     (0)
                                            |- usb -- <string> -- <Enter>|<passwd>      (0)
                                            |- usb-mode -- <Enter>|<passwd>     (0)
                                            +- management-station -- normal -- <revision>       (0)
                                                                  |- template -- <revision>     (0)
                                                                  +- script -- <revision>       (0)
                                  |- ipsuserdefsig -- tftp -- <string> -- <ip>  (0)
                                                   +- ftp -- <string> -- <ftp server>[:ftp port] -- <Enter>|<user> -- <passwd>      (0)
                                  |- av -- tftp -- <string> -- <ip>     (0)
                                        +- ftp -- <string> -- <ftp server>[:ftp port] -- <Enter>|<user> -- <passwd>(0)
                                  |- ips -- tftp -- <string> -- <ip>    (0)
                                         +- ftp -- <string> -- <ftp server>[:ftp port] -- <Enter>|<user> -- <passwd>        (0)
                                  |- src-vis -- tftp -- <string> -- <ip>        (0)
                                             +- ftp -- <string> -- <ftp server>[:ftp port] -- <Enter>|<user> -- <passwd>    (0)
                                  +- uwdb -- tftp -- <string> -- <ip>   (0)
                                          +- ftp -- <string> -- <ftp server>[:ftp port] -- <Enter>|<user> -- <passwd>       (0)
                       |- revision -- list -- config 
                                           +- image 
                                   +- delete -- config -- <revision>    (0)
                                             +- image -- <revision>     (0)
                       |- upload -- config -- tftp -- <string> -- <comment> -- <ip>     (0)
                                           |- ftp -- <string> -- <comment> -- <ftp server>[:ftp port] -- <Enter>|<user> -- <passwd> -- <Enter>|<passwd>     (0)
                                           +- usb -- <string> -- <comment>      (0)
                                 +- image -- tftp -- <string> -- <comment> -- <ip>      (0)
                                          |- ftp -- <string> -- <comment> -- <ftp server>[:ftp port] -- <Enter>|<user> -- <passwd>  (0)
                                          +- usb -- <string> -- <comment>       (0)
                       |- backup -- memory -- log -- tftp -- <ip> -- <string>   (0)
                                                  +- ftp -- <ftp server>[:ftp port] -- <user> -- <passwd> -- <string>       (0)
                                           +- alllogs -- tftp -- <ip>   (0)
                                                      +- ftp -- <ftp server>[:ftp port] -- <Enter>|<user> -- <passwd>       (0)
                                 |- disk -- alllogs -- usb 
                                         |- log -- usb -- <string>      (0)
                                         +- ipsarchives -- usb 
                                 |- config -- usb -- <string> -- <Enter>|<passwd>       (0)
                                           |- usb-mode -- <Enter>|<passwd>      (0)
                                           |- tftp -- <string> -- <ip> -- <Enter>|<passwd>      (0)
                                           |- ftp -- <string> -- <ftp server>[:ftp port] -- <Enter>|<user> -- <passwd> -- <Enter>|<passwd>  (0)
                                           |- flash -- <comment>        (0)
                                           +- management-station -- <comment>   (0)
                                 |- full-config -- usb -- <string> -- <Enter>|<passwd>  (0)
                                                |- usb-mode -- <Enter>|<passwd>         (0)
                                                |- tftp -- <string> -- <ip> -- <Enter>|<passwd>         (0)
                                                +- ftp -- <string> -- <ftp server>[:ftp port] -- <Enter>|<user> -- <passwd> -- <Enter>|<passwd>     (0)
                                 |- config-with-forticlient-info -- usb -- <string> -- <Enter>|<passwd>         (0)
                                                                 |- usb-mode -- <Enter>|<passwd>        (0)
                                                                 |- tftp -- <string> -- <ip> -- <Enter>|<passwd>   (0)
                                                                 +- ftp -- <string> -- <ftp server>[:ftp port] -- <Enter>|<user> -- <passwd> -- <Enter>|<passwd>    (0)
                                 +- ipsuserdefsig -- tftp -- <string> -- <ip>   (0)
                                                  +- ftp -- <string> -- <ftp server>[:ftp port] -- <Enter>|<user> -- <passwd>       (0)
                       |- enter -- <name>       (0)
                       |- formatlogdisk 
                       |- vpn -- certificate -- local -- generate -- rsa -- <string> -- <number> -- <string> -- <string> -- <string> -- <string> -- <string> -- <string> -- <string> -- <string> -- <string> -- <string> -- <ip> -- <string> -- <string>        (0)
                                                                  |- ec -- <string> -- <string> -- <string> -- <string> -- <string> -- <string> -- <string> -- <string> -- <string> -- <string> -- <string> -- <string> -- <ip> -- <string> -- <string>         (0)
                                                                  |- default-ssl-ca 
                                                                  |- default-ssl-serv-key 
                                                                  +- default-ssl-ca-untrusted 
                                                      |- export -- tftp -- <string> -- <string> -- <string> -- <ip>(0)
                                                      +- import -- tftp -- <string> -- <ip> -- <string> -- <Enter>|<passwd>         (0)
                                             |- crl -- import -- auto -- <string>       (0)
                                             |- ca -- export -- tftp -- <string> -- <string> -- <ip>    (0)
                                                   +- import -- tftp -- <string> -- <ip>        (0)
                                                             +- auto -- <string> -- <string> -- <ip>    (0)
                                             +- remote -- export -- tftp -- <string> -- <string> -- <ip>        (0)
                                                       +- import -- tftp -- <string> -- <ip>    (0)
                              |- ipsec -- tunnel -- down -- <phase2> -- <phase1> -- <serial>    (0)
                                                 +- up -- <phase2> -- <phase1> -- <serial>      (0)
                              +- sslvpn -- list -- <web|tunnel>         (0)
                                        |- del-all -- <tunnel>  (0)
                                        |- del-tunnel -- <index>        (0)
                                        |- del-web -- <index>   (0)
                                        |- rlist -- <vdom>      (0)
                                        |- guirlist -- <vdom>   (0)
                                        |- rdel-web -- <vdom> -- <index>        (0)
                                        |- rdel-tunnel -- <vdom> -- <index>     (0)
                                        |- rdel-all -- <vdom>   (0)
                                        +- rdel-all-tunnel -- <vdom>    (0)
                       |- factory-license -- <key>      (0)
                       |- traceroute -- <dest>  (0)
                       |- traceroute-options -- queries -- <integer>    (0)
                                             |- source -- <string>      (0)
                                             |- device -- <string>      (0)
                                             +- view-settings 
                       |- tracert6 
                       |- telnet -- <dest> -- <port>    (0)
                       |- ssh -- <user@host> -- <port>  (0)
                       |- dhcp -- lease-list -- <interface>     (0)
                               +- lease-clear -- <xxx.xxx.xxx.xxx>      (0)
                                              +- all    (0)
                       |- dhcp6 -- lease-list -- <interface>    (0)
                                +- lease-clear -- <xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx>     (0)
                                               +- all   (0)
                       |- webfilter -- quota-reset -- wf-profile -- endpoint    (0)
                       |- ha -- synchronize -- <string>         (0)
                             |- manage -- <string>      (0)
                             +- disconnect -- <string> -- <string> -- <ip> -- <netmask>         (0)
                       |- modem -- dial 
                                |- hangup 
                                +- trigger 
                       |- log -- fortianalyzer -- test-connectivity 
                              |- fortiguard -- test-connectivity 
                              |- upload 
                              |- upload-progress 
                              |- list -- <category>     (0)
                              |- display 
                              |- detail -- <category> -- <utmref>       (0)
                              |- filter -- reset -- <enter|all|field>   (0)
                                        |- dump 
                                        |- category -- <category>       (0)
                                        |- device -- <device>   (0)
                                        |- start-line -- number         (0)
                                        |- view-lines -- number         (0)
                                        |- max-checklines -- number     (0)
                                        |- ha-member -- sn      (0)
                                        |- field -- <name> -- <argument 1> -- <argument 2> -- <argument 3> -- <argument 4> -- <argument 5> -- <argument 6> -- <argument 7>  (0)
                                        +- show-utm-ref -- number       (0)
                              |- roll 
                              |- delete 
                              |- delete-all 
                              |- backup -- <path>       (0)
                              |- flush-cache 
                              +- flush-cache-all 
                       |- policy-packet-capture -- delete-all 
                       |- time -- <hh:mm:ss>    (0)
                       |- date -- <yyyy-mm-dd>  (0)
                       |- usb-disk -- list 
                                   |- delete -- <filename>      (0)
                                   |- format 
                                   |- rename -- <old> -- <new>  (0)
                                   +- eject 
                       |- usb-device -- list 
                                     +- disconnect 
                       |- upd-vd-license -- <license key>       (0)
                       |- batch -- start 
                                |- end 
                                |- status 
                                +- lastlog 
                       |- cfg -- save 
                              +- reload 
                       |- cli -- status-msg-only -- <enable/disable>    (0)
                              +- check-template-status 
                       |- interface -- dhcpclient-renew -- <interface>  (0)
                                    |- pppoe-reconnect -- <interface>   (0)
                                    +- dhcp6client-renew -- <interface>         (0)
                       |- clear -- system -- arp -- table 
                       |- fortiguard-log -- update 
                                         |- create-account -- <id> -- <password> -- <email confirm>     (0)
                                         |- login -- <id> -- <password> -- <email confirm>      (0)
                                         |- try -- <id> -- <password> -- <email confirm>        (0)
                                         |- join 
                                         |- agreement 
                                         +- certificate-activation -- <code>    (0)
                       |- central-mgmt -- set-mgmt-id -- <management id>        (0)
                                       |- register-device -- <fmg-serial-no> -- <fmg-register-password> -- <fgt-usrname> -- <fgt-password>  (0)
                                       +- unregister-device -- <fmg-serial-no>  (0)
                       |- fortiguard-message -- info 
                                             |- update 
                                             +- add -- <activation code>        (0)
                       |- wireless-controller -- reset-wtp -- <all>|<SN>        (0)
                                              |- list-wtp-image 
                                              |- delete-wtp-image 
                                              |- upload-wtp-image -- tftp -- <string> -- <ip>   (0)
                                                                  +- ftp -- <string> -- <ftp server>[:ftp port] -- <Enter>|<user> -- <passwd>       (0)
                                              +- restart-acd 
                       |- switch-controller -- push-swtp-image -- <vdom> -- <fortiswitch-id> -- <filename>      (0)
                                            |- stage-swtp-image -- <vdom> -- <fortiswitch-id> -- <filename>     (0)
                                            |- upload-swtp-image -- tftp -- <string> -- <ip>    (0)
                                                                 +- ftp -- <string> -- <ftp server>[:ftp port] -- <Enter>|<user> -- <passwd>        (0)
                                            |- list-swtp-image 
                                            |- delete-swtp-image -- <filename>  (0)
                                            |- restart-acd 
                                            |- poe-reset -- <fortiswitch-id> -- <port>  (0)
                                            |- restart-swtpd -- <vdom> -- <fortiswitch-id>      (0)
                                            |- restart-swtp -- <vdom> -- <fortiswitch-id>       (0)
                                            |- get-conn-status -- <vdom> -- <fortiswitch-id>    (0)
                                            |- get-physical-conn -- <vdom> -- <FortiSwitch-Stack-ID>    (0)
                                            +- custom-command -- <cmd-name> -- <target-switch>  (0)
                       |- sfp-mode-sgmii -- <port>      (0)
                       |- disk -- list 
                               |- format 
                               +- scan 
                       |- erase-disk 
                       |- tac -- report 
                       |- fortitoken -- activate -- <id> -- <id> -- <id> -- <id> -- <id> -- <id> -- <id> -- <id> -- <id> -- <id> -- <id> -- <id> -- <id> -- <id> -- <id> -- <id> -- <id> -- <id> -- <id> -- <id>    (0)
                                     |- sync -- <id> -- <code> -- <next code>   (0)
                                     |- import -- <file name>   (0)
                                     +- import-sn-file -- <FTK_200 Serial Number>       (0)
                       |- fortitoken-mobile -- import -- <code>         (0)
                                            |- provision -- <sn>        (0)
                                            |- poll 
                                            +- renew -- <sn>    (0)
                       |- forticlient -- info 
                                      +- list -- <connection type> -- <start line> -- <max result>      (0)
                       |- FortiClient-NAC -- update-registration-license -- <license key/activation-code>       (0)
                       |- sync-session 
                       |- system -- fortisandbox -- test-connectivity 
                                 +- custom-language -- import -- <string> -- <string> -- <ip>   (0)
                       |- auto-script -- start -- <name>        (0)
                                      |- stop -- <name>         (0)
                                      |- stopall 
                                      |- status 
                                      |- result -- <name>       (0)
                                      |- delete -- <name>       (0)
                                      +- backup -- tftp -- <name> -- <ip>       (0)
                                                +- ftp -- <name> -- <ftp server>[:ftp port] -- <Enter>|<user> -- <passwd>   (0)
                       |- extender -- push-fortiextender-image -- filename -- sn        (0)
                                   |- reset-fortiextender -- <all>|<SN>         (0)
                                   |- list-fortiextender-image 
                                   |- delete-fortiextender-image 
                                   |- upload-fortiextender-image -- tftp -- <string> -- <ip>    (0)
                                                                 +- ftp -- <string> -- <ftp server>[:ftp port] -- <Enter>|<user> -- <passwd>        (0)
                                   |- restart-fortiextender-daemon 
                                   |- dial -- <SN>      (0)
                                   +- hangup -- <SN>    (0)
                       |- dsscc 
                       +- set -- system -- session -- filter -- list 
                                                             |- vd -- <xxx>     (0)
                                                             |- src -- <xxx.xxx.xxx.xxx> -- <xxx.xxx.xxx.xxx>   (0)
                                                             |- dst -- <xxx.xxx.xxx.xxx> -- <xxx.xxx.xxx.xxx>   (0)
                                                             |- proto -- <xx> -- <xx>   (0)
                                                             |- sport -- <xxxx> -- <xxxx>       (0)
                                                             |- dport -- <xxxx> -- <xxxx>       (0)
                                                             |- policy -- <xxx> -- <xxx>        (0)
                                                             |- expire -- <xxx> -- <xxx>        (0)
                                                             |- duration -- <xxx> -- <xxx>      (0)
                                                             |- clear -- all 
                                                                      |- vd 
                                                                      |- src 
                                                                      |- dst 
                                                                      |- proto 
                                                                      |- sport 
                                                                      |- dport 
                                                                      |- policy 
                                                                      |- expire 
                                                                      +- duration 
                                                             +- negate -- vd 
                                                                       |- src 
                                                                       |- dst 
                                                                       |- proto 
                                                                       |- sport 
                                                                       |- dport 
                                                                       |- policy 
                                                                       |- expire 
                                                                       +- duration 
    |- endpoint-control -- <settings> -- forticlient-reg-key-enforce 
                                      |- forticlient-reg-key 
                                      |- forticlient-reg-timeout        (0,180)
                                      |- download-custom-link   (128)
                                      |- download-location 
                                      |- forticlient-keepalive-interval         (20,86400)
                                      |- forticlient-sys-update-interval        (30,1440)
                                      +- forticlient-avdb-update-interval       (0,24)
                        |- [profile] --*profile-name    (36)
                                     |- <forticlient-winmac-settings> -- compliance-action 
                                                                      |- forticlient-av 
                                                                      |- av-realtime-protection 
                                                                      |- av-signature-up-to-date 
                                                                      |- sandbox-analysis 
                                                                      |- sandbox-address        (256)
                                                                      |- forticlient-application-firewall 
                                                                      |- forticlient-application-firewall-list  (36)
                                                                      |- forticlient-system-compliance 
                                                                      |- forticlient-minimum-software-version 
                                                                      |- forticlient-win-ver    (64)
                                                                      |- forticlient-mac-ver    (64)
                                                                      |- os-av-software-installed 
                                                                      |- [forticlient-operating-system] --*id   (0,4294967295)
                                                                                                        |- os-type 
                                                                                                        +- os-name (128)
                                                                      |- [forticlient-running-app] --*id        (0,4294967295)
                                                                                                   |- app-name  (128)
                                                                                                   |- process-name (128)
                                                                                                   |- app-sha256-signature  (65)
                                                                                                   |- process-name2(128)
                                                                                                   |- app-sha256-signature2         (65)
                                                                                                   |- process-name3(128)
                                                                                                   |- app-sha256-signature3         (65)
                                                                                                   |- process-name4(128)
                                                                                                   +- app-sha256-signature4         (65)
                                                                      |- [forticlient-registry-entry] --*id     (0,4294967295)
                                                                                                      +- registry-entry     (128 xss)
                                                                      |- [forticlient-own-file] --*id   (0,4294967295)
                                                                                                +- file         (128 xss)
                                                                      |- forticlient-log-upload 
                                                                      |- forticlient-log-upload-level 
                                                                      |- forticlient-log-upload-server  (256)
                                                                      |- forticlient-wf 
                                                                      |- forticlient-wf-profile         (36)
                                                                      |- forticlient-vuln-scan 
                                                                      |- forticlient-vuln-scan-enforce 
                                                                      +- forticlient-vuln-scan-enforce-grace    (0,30)
                                     |- <forticlient-android-settings> -- forticlient-wf 
                                                                       |- forticlient-wf-profile        (36)
                                                                       |- disable-wf-when-protected 
                                                                       |- forticlient-vpn-provisioning 
                                                                       |- forticlient-advanced-vpn 
                                                                       |- forticlient-advanced-vpn-buffer 
                                                                       +- [forticlient-vpn-settings] --*name    (36)
                                                                                                     |- type 
                                                                                                     |- remote-gw  (256)
                                                                                                     |- sslvpn-access-port  (1,65535)
                                                                                                     |- sslvpn-require-certificate 
                                                                                                     |- auth-method 
                                                                                                     +- preshared-key 
                                     |- <forticlient-ios-settings> -- forticlient-wf 
                                                                   |- forticlient-wf-profile    (36)
                                                                   |- disable-wf-when-protected 
                                                                   |- client-vpn-provisioning 
                                                                   |- [client-vpn-settings] --*name     (36)
                                                                                            |- type 
                                                                                            |- vpn-configuration-name       (36 xss)
                                                                                            |- vpn-configuration-content 
                                                                                            |- remote-gw        (256)
                                                                                            |- sslvpn-access-port  (1,65535)
                                                                                            |- sslvpn-require-certificate 
                                                                                            |- auth-method 
                                                                                            +- preshared-key 
                                                                   |- distribute-configuration-profile 
                                                                   |- configuration-name        (36 xss)
                                                                   +- configuration-content 
                                     |- description 
                                     |- [src-addr] --*name      (65)
                                     |- [device-groups] --*name         (65)
                                     |- [users] --*name         (65)
                                     |- [user-groups] --*name   (65)
                                     |- [on-net-addr] --*name   (65)
                                     +- replacemsg-override-group       (36)
                        |- [forticlient-registration-sync] --*peer-name         (36)
                                                           +- peer-ip 
                        |- [client] --*id       (0,4294967295)
                                    |- ftcl-uid         (33)
                                    |- src-ip 
                                    |- src-mac 
                                    |- info 
                                    +- ad-groups 
                        +- [registered-forticlient] --*uid      (33)
                                                    |- vdom     (12)
                                                    |- ip 
                                                    |- mac 
                                                    |- status   (0,4294967295)
                                                    |- flag     (0,4294967295)
                                                    +- reg-fortigate    (20)
    |- switch-controller -- [vlan] --*name      (16)
                                   |- vdom      (13)
                                   |- vlanid    (1,4094)
                                   |- comments  (64)
                                   |- color     (0,32)
                                   |- security 
                                   |- auth 
                                   |- radius-server     (36)
                                   |- usergroup         (36)
                                   |- portal-message-override-group     (36)
                                   |- <portal-message-overrides> -- auth-disclaimer-page        (36)
                                                                 |- auth-reject-page    (36)
                                                                 |- auth-login-page     (36)
                                                                 +- auth-login-failed-page      (36)
                                   +- [selected-usergroups] --*name     (65)
                         |- [custom-command] --*command-name    (36)
                                             |- description     (36)
                                             +- command 
                         |- [managed-switch] --*switch-id       (17)
                                             |- name    (36)
                                             |- description     (64)
                                             |- fsw-wan1-peer   (36)
                                             |- fsw-wan1-admin 
                                             |- fsw-wan2-peer   (36)
                                             |- fsw-wan2-admin 
                                             |- poe-pre-standard-detection 
                                             |- directly-connected      (0,1)
                                             |- connected       (0,4294967295)
                                             |- dynamically-discovered  (0,1)
                                             |- [ports] --*port-name    (16)
                                                        |- port-owner   (16)
                                                        |- switch-id    (17)
                                                        |- speed 
                                                        |- status 
                                                        |- poe-status 
                                                        |- poe-pre-standard-detection 
                                                        |- dot1x-enable 
                                                        |- dot1x-status 
                                                        |- port-number  (1,64)
                                                        |- port-prefix-type     (0,1)
                                                        |- fortilink-port       (0,1)
                                                        |- poe-capable  (0,1)
                                                        |- stacking-port        (0,1)
                                                        |- fiber-port   (0,1)
                                                        |- flags        (0,4294967295)
                                                        |- isl-local-trunk-name         (16)
                                                        |- isl-peer-port-name   (16)
                                                        |- isl-peer-device-name         (17)
                                                        |- fgt-peer-port-name   (16)
                                                        |- fgt-peer-device-name         (17)
                                                        |- vlan         (16)
                                                        |- allowed-vlans-all 
                                                        |- [allowed-vlans] --*vlan-name         (80)
                                                        |- type 
                                                        |- dhcp-snooping 
                                                        |- stp-state 
                                                        |- loop-guard 
                                                        |- loop-guard-timeout   (0,120)
                                                        |- port-selection-criteria 
                                                        |- description  (64 xss)
                                                        |- lacp-speed 
                                                        |- mode 
                                                        |- bundle 
                                                        |- member-withdrawal-behavior 
                                                        |- min-bundle   (0,4294967295)
                                                        |- max-bundle   (0,4294967295)
                                                        |- max-miss-heartbeats  (0,4294967295)
                                                        +- [members] --*member-name     (65)
                                             |- <switch-stp-settings> -- status 
                                             +- [custom-command] --*command-entry       (36)
                                                                 +- command-name        (36 xss)
                         |- <stp-settings> -- name      (32)
                                           |- status 
                                           |- revision  (0,4294967295)
                                           |- hello-time        (0,4294967295)
                                           |- forward-time      (0,4294967295)
                                           |- max-age   (0,4294967295)
                                           |- max-hops  (0,4294967295)
                                           +- pending-timer     (0,4294967295)
                         |- <storm-control> -- rate     (0,4294967295)
                                            |- unknown-unicast 
                                            |- unknown-multicast 
                                            +- broadcast 
                         |- <global> -- mac-aging-interval      (10,600)
                                     +- allow-multiple-interfaces 
                         |- <mac-sync-settings> -- mac-sync-interval    (0,4294967295)
                         |- <poe> -- <VDOM> -- <fortiswitch-id> -- <port>       (0)
                         +- <switch-log> -- status 
                                         +- severity 
    |- alertemail -- <setting> -- username      (36)
                               |- mailto1       (64)
                               |- mailto2       (64)
                               |- mailto3       (64)
                               |- filter-mode 
                               |- email-interval        (1,99999)
                               |- IPS-logs 
                               |- firewall-authentication-failure-logs 
                               |- HA-logs 
                               |- IPsec-errors-logs 
                               |- FDS-update-logs 
                               |- PPP-errors-logs 
                               |- sslvpn-authentication-errors-logs 
                               |- antivirus-logs 
                               |- webfilter-logs 
                               |- configuration-changes-logs 
                               |- violation-traffic-logs 
                               |- admin-login-logs 
                               |- FDS-license-expiring-warning 
                               |- log-disk-usage-warning 
                               |- fortiguard-log-quota-warning 
                               |- amc-interface-bypass-mode 
                               |- FIPS-CC-errors 
                               |- FDS-license-expiring-days     (1,100)
                               |- local-disk-usage      (1,99)
                               |- emergency-interval    (1,99999)
                               |- alert-interval        (1,99999)
                               |- critical-interval     (1,99999)
                               |- error-interval        (1,99999)
                               |- warning-interval      (1,99999)
                               |- notification-interval         (1,99999)
                               |- information-interval  (1,99999)
                               |- debug-interval        (1,99999)
                               +- severity 
    |- gui -- <console> -- preferences 
    |- router -- [access-list] --*name  (36)
                               |- comments      (128 xss)
                               +- [rule] --*id  (0,4294967295)
                                         |- action 
                                         |- prefix 
                                         |- wildcard 
                                         |- exact-match 
                                         +- flags       (0,4294967295)
              |- [access-list6] --*name         (36)
                                |- comments     (128 xss)
                                +- [rule] --*id         (0,4294967295)
                                          |- action 
                                          |- prefix6 
                                          |- exact-match 
                                          +- flags      (0,4294967295)
              |- [aspath-list] --*name  (36)
                               +- [rule] --*id  (0,4294967295)
                                         |- action 
                                         +- regexp      (64 xss)
              |- [prefix-list] --*name  (36)
                               |- comments      (128 xss)
                               +- [rule] --*id  (0,4294967295)
                                         |- action 
                                         |- prefix 
                                         |- ge  (0,32)
                                         |- le  (0,32)
                                         +- flags       (0,4294967295)
              |- [prefix-list6] --*name         (36)
                                |- comments     (128 xss)
                                +- [rule] --*id         (0,4294967295)
                                          |- action 
                                          |- prefix6 
                                          |- ge         (0,128)
                                          |- le         (0,128)
                                          +- flags      (0,4294967295)
              |- [key-chain] --*name    (36)
                             +- [key] --*id     (0,2147483647)
                                      |- accept-lifetime 
                                      |- send-lifetime 
                                      +- key-string     (36)
              |- [community-list] --*name       (36)
                                  |- type 
                                  +- [rule] --*id       (0,4294967295)
                                            |- action 
                                            |- regexp   (256 xss)
                                            +- match    (256)
              |- [route-map] --*name    (36)
                             |- comments        (128 xss)
                             +- [rule] --*id    (0,4294967295)
                                       |- action 
                                       |- match-as-path         (36)
                                       |- match-community       (36)
                                       |- match-community-exact 
                                       |- match-origin 
                                       |- match-interface       (16)
                                       |- match-ip-address      (36)
                                       |- match-ip6-address     (36)
                                       |- match-ip-nexthop      (36)
                                       |- match-ip6-nexthop     (36)
                                       |- match-metric  (0,4294967295)
                                       |- match-route-type 
                                       |- match-tag     (0,4294967295)
                                       |- set-aggregator-as     (1,4294967295)
                                       |- set-aggregator-ip 
                                       |- set-aspath-action 
                                       |- [set-aspath] --*as    (65)
                                       |- set-atomic-aggregate 
                                       |- set-community-delete  (36)
                                       |- [set-community] --*community  (65)
                                       |- set-community-additive 
                                       |- set-dampening-reachability-half-life  (0,4294967295)
                                       |- set-dampening-reuse   (0,4294967295)
                                       |- set-dampening-suppress        (0,4294967295)
                                       |- set-dampening-max-suppress    (0,4294967295)
                                       |- set-dampening-unreachability-half-life        (0,4294967295)
                                       |- [set-extcommunity-rt] --*community    (65)
                                       |- [set-extcommunity-soo] --*community   (65)
                                       |- set-ip-nexthop 
                                       |- set-ip6-nexthop 
                                       |- set-ip6-nexthop-local 
                                       |- set-local-preference  (0,4294967295)
                                       |- set-metric    (0,4294967295)
                                       |- set-metric-type 
                                       |- set-originator-id 
                                       |- set-origin 
                                       |- set-tag       (0,4294967295)
                                       |- set-weight    (0,4294967295)
                                       |- set-flags     (0,4294967295)
                                       +- match-flags   (0,4294967295)
              |- <rip> -- default-information-originate 
                       |- default-metric        (0,2147483647)
                       |- max-out-metric        (0,15)
                       |- recv-buffer-size      (8129,2147483647)
                       |- [distance] --*id      (0,4294967295)
                                     |- prefix 
                                     |- distance        (0,4294967295)
                                     +- access-list     (36)
                       |- [distribute-list] --*id       (0,4294967295)
                                            |- status 
                                            |- direction 
                                            |- listname         (36)
                                            +- interface        (16)
                       |- [neighbor] --*id      (0,4294967295)
                                     +- ip 
                       |- [network] --*id       (0,4294967295)
                                    +- prefix 
                       |- [offset-list] --*id   (0,4294967295)
                                        |- status 
                                        |- direction 
                                        |- access-list  (36)
                                        |- offset       (0,2147483647)
                                        +- interface    (16)
                       |- [passive-interface] --*name   (65)
                       |- [redistribute] --*name        (36)
                                         |- status 
                                         |- metric      (0,2147483647)
                                         |- routemap    (36)
                                         +- flags       (0,4294967295)
                       |- update-timer  (0,4294967295)
                       |- timeout-timer         (0,4294967295)
                       |- garbage-timer         (0,4294967295)
                       |- version 
                       +- [interface] --*name   (36)
                                      |- auth-keychain  (36)
                                      |- auth-mode 
                                      |- auth-string 
                                      |- receive-version 
                                      |- send-version 
                                      |- send-version2-broadcast 
                                      |- split-horizon-status 
                                      |- split-horizon 
                                      +- flags  (0,4294967295)
              |- <ripng> -- default-information-originate 
                         |- default-metric      (0,2147483647)
                         |- max-out-metric      (0,15)
                         |- [distance] --*id    (0,4294967295)
                                       |- distance      (1,255)
                                       |- prefix6 
                                       +- access-list6  (36)
                         |- [distribute-list] --*id     (0,4294967295)
                                              |- status 
                                              |- direction 
                                              |- listname       (36)
                                              +- interface      (16)
                         |- [neighbor] --*id    (0,4294967295)
                                       |- ip6 
                                       +- interface     (16)
                         |- [network] --*id     (0,4294967295)
                                      +- prefix 
                         |- [aggregate-address] --*id   (0,4294967295)
                                                +- prefix6 
                         |- [offset-list] --*id         (0,4294967295)
                                          |- status 
                                          |- direction 
                                          |- access-list6       (36)
                                          |- offset     (0,2147483647)
                                          +- interface  (16)
                         |- [passive-interface] --*name         (65)
                         |- [redistribute] --*name      (36)
                                           |- status 
                                           |- metric    (0,2147483647)
                                           |- routemap  (36)
                                           +- flags     (0,4294967295)
                         |- update-timer        (0,4294967295)
                         |- timeout-timer       (0,4294967295)
                         |- garbage-timer       (0,4294967295)
                         +- [interface] --*name         (36)
                                        |- split-horizon-status 
                                        |- split-horizon 
                                        +- flags        (0,4294967295)
              |- [static] --*seq-num    (0,4294967295)
                          |- status 
                          |- dst 
                          |- gateway 
                          |- distance   (0,4294967295)
                          |- weight     (0,255)
                          |- priority   (0,4294967295)
                          |- device     (36)
                          |- comment 
                          |- blackhole 
                          |- dynamic-gateway 
                          |- virtual-wan-link 
                          |- dstaddr    (64)
                          |- internet-service   (0,4294967295)
                          +- internet-service-custom    (65)
              |- [policy] --*seq-num    (0,4294967295)
                          |- [input-device] --*name     (65)
                          |- [src] --*subnet    (65)
                          |- [srcaddr] --*name  (65)
                          |- src-negate 
                          |- [dst] --*subnet    (65)
                          |- [dstaddr] --*name  (65)
                          |- dst-negate 
                          |- action 
                          |- protocol   (0,255)
                          |- start-port         (0,65535)
                          |- end-port   (0,65535)
                          |- start-source-port  (0,65535)
                          |- end-source-port    (0,65535)
                          |- gateway 
                          |- output-device      (36)
                          |- tos 
                          |- tos-mask 
                          |- status 
                          +- comments 
              |- [policy6] --*seq-num   (0,4294967295)
                           |- input-device      (36)
                           |- src 
                           |- dst 
                           |- protocol  (0,255)
                           |- start-port        (1,65535)
                           |- end-port  (1,65535)
                           |- gateway 
                           |- output-device     (36)
                           |- tos 
                           |- tos-mask 
                           |- status 
                           +- comments 
              |- [static6] --*seq-num   (0,4294967295)
                           |- status 
                           |- dst 
                           |- gateway 
                           |- device    (36)
                           |- devindex  (0,4294967295)
                           |- distance  (1,255)
                           |- priority  (0,4294967295)
                           |- comment 
                           +- blackhole 
              |- <ospf> -- abr-type 
                        |- auto-cost-ref-bandwidth      (1,1000000)
                        |- distance-external    (0,4294967295)
                        |- distance-inter-area  (0,4294967295)
                        |- distance-intra-area  (0,4294967295)
                        |- database-overflow 
                        |- database-overflow-max-lsas   (0,2147483647)
                        |- database-overflow-time-to-recover    (0,4294967295)
                        |- default-information-originate 
                        |- default-information-metric   (0,4294967295)
                        |- default-information-metric-type 
                        |- default-information-route-map        (36)
                        |- default-metric       (0,4294967295)
                        |- distance     (0,4294967295)
                        |- rfc1583-compatible 
                        |- router-id 
                        |- spf-timers 
                        |- bfd 
                        |- log-neighbour-changes 
                        |- distribute-list-in   (36)
                        |- distribute-route-map-in      (36)
                        |- restart-mode 
                        |- restart-period       (1,3600)
                        |- [area] --*id 
                                  |- shortcut 
                                  |- authentication 
                                  |- default-cost       (0,2147483647)
                                  |- nssa-translator-role 
                                  |- stub-type 
                                  |- type 
                                  |- nssa-default-information-originate 
                                  |- nssa-default-information-originate-metric  (0,4294967295)
                                  |- nssa-default-information-originate-metric-type 
                                  |- nssa-redistribution 
                                  |- [range] --*id      (0,4294967295)
                                             |- prefix 
                                             |- advertise 
                                             |- substitute 
                                             +- substitute-status 
                                  |- [virtual-link] --*name     (36)
                                                    |- authentication 
                                                    |- authentication-key 
                                                    |- md5-key 
                                                    |- dead-interval    (0,4294967295)
                                                    |- hello-interval   (0,4294967295)
                                                    |- retransmit-interval      (0,4294967295)
                                                    |- transmit-delay   (0,4294967295)
                                                    +- peer 
                                  +- [filter-list] --*id        (0,4294967295)
                                                   |- list      (36)
                                                   +- direction 
                        |- [ospf-interface] --*name     (36)
                                            |- interface        (16)
                                            |- ip 
                                            |- authentication 
                                            |- authentication-key 
                                            |- md5-key 
                                            |- prefix-length    (0,4294967295)
                                            |- retransmit-interval      (0,4294967295)
                                            |- transmit-delay   (0,4294967295)
                                            |- cost     (0,4294967295)
                                            |- priority         (0,4294967295)
                                            |- dead-interval    (0,4294967295)
                                            |- hello-interval   (0,4294967295)
                                            |- hello-multiplier         (0,4294967295)
                                            |- database-filter-out 
                                            |- mtu      (0,4294967295)
                                            |- mtu-ignore 
                                            |- network-type 
                                            |- bfd 
                                            |- status 
                                            +- resync-timeout   (1,3600)
                        |- [network] --*id      (0,4294967295)
                                     |- prefix 
                                     +- area 
                        |- [neighbor] --*id     (0,4294967295)
                                      |- ip 
                                      |- poll-interval  (0,4294967295)
                                      |- cost   (0,4294967295)
                                      +- priority       (0,4294967295)
                        |- [passive-interface] --*name  (65)
                        |- [summary-address] --*id      (0,4294967295)
                                             |- prefix 
                                             |- tag     (0,2147483647)
                                             +- advertise 
                        |- [distribute-list] --*id      (0,4294967295)
                                             |- access-list     (36)
                                             +- protocol 
                        +- [redistribute] --*name       (36)
                                          |- status 
                                          |- metric     (0,2147483647)
                                          |- routemap   (36)
                                          |- metric-type 
                                          +- tag        (0,2147483647)
              |- <ospf6> -- abr-type 
                         |- auto-cost-ref-bandwidth     (1,1000000)
                         |- default-information-originate 
                         |- log-neighbour-changes 
                         |- default-information-metric  (0,4294967295)
                         |- default-information-metric-type 
                         |- default-information-route-map       (36)
                         |- default-metric      (0,4294967295)
                         |- router-id 
                         |- spf-timers 
                         |- [area] --*id 
                                   |- default-cost      (0,16777215)
                                   |- nssa-translator-role 
                                   |- stub-type 
                                   |- type 
                                   |- nssa-default-information-originate 
                                   |- nssa-default-information-originate-metric         (0,4294967295)
                                   |- nssa-default-information-originate-metric-type 
                                   |- nssa-redistribution 
                                   |- [range] --*id     (0,4294967295)
                                              |- prefix6 
                                              +- advertise 
                                   +- [virtual-link] --*name    (36)
                                                     |- dead-interval   (0,4294967295)
                                                     |- hello-interval  (0,4294967295)
                                                     |- retransmit-interval     (0,4294967295)
                                                     |- transmit-delay  (0,4294967295)
                                                     +- peer 
                         |- [ospf6-interface] --*name   (36)
                                              |- area-id 
                                              |- interface      (16)
                                              |- retransmit-interval    (0,4294967295)
                                              |- transmit-delay         (0,4294967295)
                                              |- cost   (0,4294967295)
                                              |- priority       (0,4294967295)
                                              |- dead-interval  (0,4294967295)
                                              |- hello-interval         (0,4294967295)
                                              |- status 
                                              |- network-type 
                                              +- [neighbor] --*ip6 
                                                            |- poll-interval    (0,4294967295)
                                                            |- cost     (0,4294967295)
                                                            +- priority         (0,4294967295)
                         |- [passive-interface] --*name         (65)
                         |- [redistribute] --*name      (36)
                                           |- status 
                                           |- metric    (0,2147483647)
                                           |- routemap  (36)
                                           +- metric-type 
                         +- [summary-address] --*id     (0,4294967295)
                                              |- prefix6 
                                              |- advertise 
                                              +- tag    (0,2147483647)
              |- <bgp> -- as    (0,4294967295)
                       |- router-id 
                       |- keepalive-timer       (0,4294967295)
                       |- holdtime-timer        (0,4294967295)
                       |- always-compare-med 
                       |- bestpath-as-path-ignore 
                       |- bestpath-cmp-confed-aspath 
                       |- bestpath-cmp-routerid 
                       |- bestpath-med-confed 
                       |- bestpath-med-missing-as-worst 
                       |- client-to-client-reflection 
                       |- dampening 
                       |- deterministic-med 
                       |- ebgp-multipath 
                       |- ibgp-multipath 
                       |- enforce-first-as 
                       |- fast-external-failover 
                       |- log-neighbour-changes 
                       |- network-import-check 
                       |- ignore-optional-capability 
                       |- cluster-id 
                       |- confederation-identifier      (0,4294967295)
                       |- [confederation-peers] --*peer         (65)
                       |- dampening-route-map   (36)
                       |- dampening-reachability-half-life      (0,4294967295)
                       |- dampening-reuse       (0,4294967295)
                       |- dampening-suppress    (0,4294967295)
                       |- dampening-max-suppress-time   (0,4294967295)
                       |- dampening-unreachability-half-life    (0,4294967295)
                       |- default-local-preference      (0,4294967295)
                       |- scan-time     (0,4294967295)
                       |- distance-external     (0,4294967295)
                       |- distance-internal     (0,4294967295)
                       |- distance-local        (0,4294967295)
                       |- synchronization 
                       |- graceful-restart 
                       |- graceful-restart-time         (0,4294967295)
                       |- graceful-stalepath-time       (0,4294967295)
                       |- graceful-update-delay         (0,4294967295)
                       |- [aggregate-address] --*id     (0,4294967295)
                                              |- prefix 
                                              |- as-set 
                                              +- summary-only 
                       |- [aggregate-address6] --*id    (0,4294967295)
                                               |- prefix6 
                                               |- as-set 
                                               +- summary-only 
                       |- [neighbor] --*ip      (46)
                                     |- advertisement-interval  (0,4294967295)
                                     |- allowas-in-enable 
                                     |- allowas-in-enable6 
                                     |- allowas-in      (0,4294967295)
                                     |- allowas-in6     (0,4294967295)
                                     |- attribute-unchanged 
                                     |- attribute-unchanged6 
                                     |- activate 
                                     |- activate6 
                                     |- bfd 
                                     |- capability-dynamic 
                                     |- capability-orf 
                                     |- capability-orf6 
                                     |- capability-graceful-restart 
                                     |- capability-graceful-restart6 
                                     |- capability-route-refresh 
                                     |- capability-default-originate 
                                     |- capability-default-originate6 
                                     |- dont-capability-negotiate 
                                     |- ebgp-enforce-multihop 
                                     |- next-hop-self 
                                     |- next-hop-self6 
                                     |- override-capability 
                                     |- passive 
                                     |- remove-private-as 
                                     |- remove-private-as6 
                                     |- route-reflector-client 
                                     |- route-reflector-client6 
                                     |- route-server-client 
                                     |- route-server-client6 
                                     |- shutdown 
                                     |- soft-reconfiguration 
                                     |- soft-reconfiguration6 
                                     |- as-override 
                                     |- as-override6 
                                     |- strict-capability-match 
                                     |- default-originate-routemap      (36)
                                     |- default-originate-routemap6     (36)
                                     |- description     (64)
                                     |- distribute-list-in      (36)
                                     |- distribute-list-in6     (36)
                                     |- distribute-list-out     (36)
                                     |- distribute-list-out6    (36)
                                     |- ebgp-multihop-ttl       (0,4294967295)
                                     |- filter-list-in  (36)
                                     |- filter-list-in6         (36)
                                     |- filter-list-out         (36)
                                     |- filter-list-out6        (36)
                                     |- interface       (16)
                                     |- maximum-prefix  (0,4294967295)
                                     |- maximum-prefix6         (0,4294967295)
                                     |- maximum-prefix-threshold        (0,4294967295)
                                     |- maximum-prefix-threshold6       (0,4294967295)
                                     |- maximum-prefix-warning-only 
                                     |- maximum-prefix-warning-only6 
                                     |- prefix-list-in  (36)
                                     |- prefix-list-in6         (36)
                                     |- prefix-list-out         (36)
                                     |- prefix-list-out6        (36)
                                     |- remote-as       (1,4294967295)
                                     |- retain-stale-time       (0,4294967295)
                                     |- route-map-in    (36)
                                     |- route-map-in6   (36)
                                     |- route-map-out   (36)
                                     |- route-map-out6  (36)
                                     |- send-community 
                                     |- send-community6 
                                     |- keep-alive-timer        (0,4294967295)
                                     |- holdtime-timer  (0,4294967295)
                                     |- connect-timer   (0,4294967295)
                                     |- unsuppress-map  (36)
                                     |- unsuppress-map6         (36)
                                     |- update-source   (16)
                                     |- weight  (0,4294967295)
                                     |- restart-time    (0,4294967295)
                                     |- password 
                                     +- [conditional-advertise] --*advertise-routemap   (36)
                                                                |- condition-routemap   (36)
                                                                +- condition-type 
                       |- [neighbor-group] --*name      (46)
                                           |- advertisement-interval    (0,4294967295)
                                           |- allowas-in-enable 
                                           |- allowas-in-enable6 
                                           |- allowas-in        (0,4294967295)
                                           |- allowas-in6       (0,4294967295)
                                           |- attribute-unchanged 
                                           |- attribute-unchanged6 
                                           |- activate 
                                           |- activate6 
                                           |- bfd 
                                           |- capability-dynamic 
                                           |- capability-orf 
                                           |- capability-orf6 
                                           |- capability-graceful-restart 
                                           |- capability-graceful-restart6 
                                           |- capability-route-refresh 
                                           |- capability-default-originate 
                                           |- capability-default-originate6 
                                           |- dont-capability-negotiate 
                                           |- ebgp-enforce-multihop 
                                           |- next-hop-self 
                                           |- next-hop-self6 
                                           |- override-capability 
                                           |- passive 
                                           |- remove-private-as 
                                           |- remove-private-as6 
                                           |- route-reflector-client 
                                           |- route-reflector-client6 
                                           |- route-server-client 
                                           |- route-server-client6 
                                           |- shutdown 
                                           |- soft-reconfiguration 
                                           |- soft-reconfiguration6 
                                           |- as-override 
                                           |- as-override6 
                                           |- strict-capability-match 
                                           |- default-originate-routemap        (36)
                                           |- default-originate-routemap6       (36)
                                           |- description       (64)
                                           |- distribute-list-in        (36)
                                           |- distribute-list-in6       (36)
                                           |- distribute-list-out       (36)
                                           |- distribute-list-out6      (36)
                                           |- ebgp-multihop-ttl         (0,4294967295)
                                           |- filter-list-in    (36)
                                           |- filter-list-in6   (36)
                                           |- filter-list-out   (36)
                                           |- filter-list-out6  (36)
                                           |- interface         (16)
                                           |- maximum-prefix    (0,4294967295)
                                           |- maximum-prefix6   (0,4294967295)
                                           |- maximum-prefix-threshold  (0,4294967295)
                                           |- maximum-prefix-threshold6         (0,4294967295)
                                           |- maximum-prefix-warning-only 
                                           |- maximum-prefix-warning-only6 
                                           |- prefix-list-in    (36)
                                           |- prefix-list-in6   (36)
                                           |- prefix-list-out   (36)
                                           |- prefix-list-out6  (36)
                                           |- remote-as         (1,4294967295)
                                           |- retain-stale-time         (0,4294967295)
                                           |- route-map-in      (36)
                                           |- route-map-in6     (36)
                                           |- route-map-out     (36)
                                           |- route-map-out6    (36)
                                           |- send-community 
                                           |- send-community6 
                                           |- keep-alive-timer  (0,4294967295)
                                           |- holdtime-timer    (0,4294967295)
                                           |- connect-timer     (0,4294967295)
                                           |- unsuppress-map    (36)
                                           |- unsuppress-map6   (36)
                                           |- update-source     (16)
                                           |- weight    (0,4294967295)
                                           +- restart-time      (0,4294967295)
                       |- [neighbor-range] --*id        (0,4294967295)
                                           |- prefix 
                                           |- max-neighbor-num  (1,1000)
                                           +- neighbor-group    (64)
                       |- [network] --*id       (0,4294967295)
                                    |- prefix 
                                    |- backdoor 
                                    +- route-map        (36)
                       |- [network6] --*id      (0,4294967295)
                                     |- prefix6 
                                     |- backdoor 
                                     +- route-map       (36)
                       |- [redistribute] --*name        (36)
                                         |- status 
                                         +- route-map   (36)
                       |- [redistribute6] --*name       (36)
                                          |- status 
                                          +- route-map  (36)
                       +- [admin-distance] --*id        (0,4294967295)
                                           |- neighbour-prefix 
                                           |- route-list        (36)
                                           +- distance  (0,4294967295)
              |- <isis> -- is-type 
                        |- auth-mode-l1 
                        |- auth-mode-l2 
                        |- auth-password-l1 
                        |- auth-password-l2 
                        |- auth-keychain-l1     (36)
                        |- auth-keychain-l2     (36)
                        |- auth-sendonly-l1 
                        |- auth-sendonly-l2 
                        |- ignore-lsp-errors 
                        |- lsp-gen-interval-l1  (1,120)
                        |- lsp-gen-interval-l2  (1,120)
                        |- lsp-refresh-interval         (1,65535)
                        |- max-lsp-lifetime     (350,65535)
                        |- spf-interval-exp-l1 
                        |- spf-interval-exp-l2 
                        |- dynamic-hostname 
                        |- adjacency-check 
                        |- overload-bit 
                        |- overload-bit-suppress 
                        |- overload-bit-on-startup      (0,4294967295)
                        |- default-originate 
                        |- metric-style 
                        |- redistribute-l1 
                        |- redistribute-l1-list         (36)
                        |- redistribute-l2 
                        |- redistribute-l2-list         (36)
                        |- [isis-net] --*id     (0,4294967295)
                                      +- net 
                        |- [isis-interface] --*name     (16)
                                            |- status 
                                            |- network-type 
                                            |- circuit-type 
                                            |- csnp-interval-l1         (1,65535)
                                            |- csnp-interval-l2         (1,65535)
                                            |- hello-interval-l1        (0,65535)
                                            |- hello-interval-l2        (0,65535)
                                            |- hello-multiplier-l1      (2,100)
                                            |- hello-multiplier-l2      (2,100)
                                            |- hello-padding 
                                            |- lsp-interval     (1,4294967295)
                                            |- lsp-retransmit-interval  (1,65535)
                                            |- metric-l1        (1,63)
                                            |- metric-l2        (1,63)
                                            |- wide-metric-l1   (1,16777214)
                                            |- wide-metric-l2   (1,16777214)
                                            |- auth-password-l1 
                                            |- auth-password-l2 
                                            |- auth-keychain-l1         (36)
                                            |- auth-keychain-l2         (36)
                                            |- auth-send-only-l1 
                                            |- auth-send-only-l2 
                                            |- auth-mode-l1 
                                            |- auth-mode-l2 
                                            |- priority-l1      (0,127)
                                            |- priority-l2      (0,127)
                                            |- mesh-group 
                                            +- mesh-group-id    (0,4294967295)
                        |- [summary-address] --*id      (0,4294967295)
                                             |- prefix 
                                             +- level 
                        +- [redistribute] --*protocol   (36)
                                          |- status 
                                          |- metric     (0,4261412864)
                                          |- metric-type 
                                          |- level 
                                          +- routemap   (36)
              |- [multicast-flow] --*name       (36)
                                  |- comments   (128 xss)
                                  +- [flows] --*id      (0,4294967295)
                                             |- group-addr 
                                             +- source-addr 
              |- <multicast> -- route-threshold         (1,2147483647)
                             |- route-limit     (1,2147483647)
                             |- multicast-routing 
                             |- <pim-sm-global> -- message-interval     (0,4294967295)
                                                |- join-prune-holdtime  (0,4294967295)
                                                |- accept-register-list         (36)
                                                |- bsr-candidate 
                                                |- bsr-interface        (16)
                                                |- bsr-priority         (0,4294967295)
                                                |- bsr-hash     (0,4294967295)
                                                |- bsr-allow-quick-refresh 
                                                |- cisco-register-checksum 
                                                |- cisco-register-checksum-group        (36)
                                                |- cisco-crp-prefix 
                                                |- cisco-ignore-rp-set-priority 
                                                |- register-rp-reachability 
                                                |- register-source 
                                                |- register-source-interface    (16)
                                                |- register-source-ip 
                                                |- register-supression  (0,4294967295)
                                                |- null-register-retries        (0,4294967295)
                                                |- rp-register-keepalive        (0,4294967295)
                                                |- spt-threshold 
                                                |- spt-threshold-group  (36)
                                                |- ssm 
                                                |- ssm-range    (36)
                                                |- register-rate-limit  (0,4294967295)
                                                +- [rp-address] --*id   (0,4294967295)
                                                                |- ip-address 
                                                                +- group        (36)
                             +- [interface] --*name     (16)
                                            |- ttl-threshold    (0,4294967295)
                                            |- pim-mode 
                                            |- passive 
                                            |- bfd 
                                            |- neighbour-filter         (36)
                                            |- hello-interval   (0,4294967295)
                                            |- hello-holdtime   (0,4294967295)
                                            |- cisco-exclude-genid 
                                            |- dr-priority      (0,4294967295)
                                            |- propagation-delay        (0,4294967295)
                                            |- state-refresh-interval   (0,4294967295)
                                            |- rp-candidate 
                                            |- rp-candidate-group       (36)
                                            |- rp-candidate-priority    (0,4294967295)
                                            |- rp-candidate-interval    (0,4294967295)
                                            |- multicast-flow   (36)
                                            |- static-group     (36)
                                            |- [join-group] --*address 
                                            +- <igmp> -- access-group   (36)
                                                      |- version 
                                                      |- immediate-leave-group  (36)
                                                      |- last-member-query-interval     (0,4294967295)
                                                      |- last-member-query-count        (0,4294967295)
                                                      |- query-max-response-time        (0,4294967295)
                                                      |- query-interval         (0,4294967295)
                                                      |- query-timeout  (0,4294967295)
                                                      +- router-alert-check 
              |- <multicast6> -- multicast-routing 
                              |- [interface] --*name    (16)
                                             |- hello-interval  (0,4294967295)
                                             +- hello-holdtime  (0,4294967295)
                              +- <pim-sm-global> -- register-rate-limit         (0,4294967295)
                                                 +- [rp-address] --*id  (0,4294967295)
                                                                 +- ip6-address 
              |- <info> 
              |- <info6> 
              |- [auth-path] --*name    (16)
                             |- device  (36)
                             +- gateway 
              |- <setting> -- show-filter       (36)
                           +- hostname  (15)
              +- <bfd> -- [neighbor] --*ip 
                                     +- interface       (16)
    |- hardware -- <status> 
                |- <cpu> 
                |- <memory> 
                |- <nic> -- <nic>       (0)
                +- npu -- legacy -- <list> 
                                 |- <session> -- <dev_name>     (0)
                                 +- <setting> -- <dev_name>     (0)
                       |- np1 -- <list> 
                              +- <status> 
                       |- np2 -- <list> 
                              |- <status> -- <dev_id>   (0)
                              +- <performance> -- <dev_id>      (0)
                       +- np4 -- <list> 
                              +- <stats> -- <dev_id>    (0)
    |- mgmt-data -- <status> 
    |- test -- <http> -- <Integer>      (0)
            |- <smtp> -- <Integer>      (0)
            |- <ftpd> -- <Integer>      (0)
            |- <pop3> -- <Integer>      (0)
            |- <imap> -- <Integer>      (0)
            |- <nntp> -- <Integer>      (0)
            |- <proxy> -- <Integer>     (0)
            |- <scanunit> -- <Integer>  (0)
            |- <harelay> -- <Integer>   (0)
            |- <hasync> -- <Integer>    (0)
            |- <hatalk> -- <Integer>    (0)
            |- <sessionsync> -- <Integer>       (0)
            |- <forticldd> -- <Integer>         (0)
            |- <miglogd> -- <Integer>   (0)
            |- <urlfilter> -- <Integer>         (0)
            |- <ovrd> -- <Integer>      (0)
            |- <ipsmonitor> -- <Integer>        (0)
            |- <ipsengine> -- <Integer>         (0)
            |- <ipldbd> -- <Integer>    (0)
            |- <ddnscd> -- <Integer>    (0)
            |- <snmpd> -- <Integer>     (0)
            |- <dnsproxy> -- <Integer>  (0)
            |- <sflowd> -- <Integer>    (0)
            |- <init> -- <Integer>      (0)
            |- <l2tpcd> -- <Integer>    (0)
            |- <dhcprelay> -- <Integer>         (0)
            |- <pptpcd> -- <Integer>    (0)
            |- <wccpd> -- <Integer>     (0)
            |- <wad> -- <Integer>       (0)
            |- <radiusd> -- <Integer>   (0)
            |- <wpad> -- <Integer>      (0)
            |- <fsd> -- <Integer> -- <Integer> -- <Integer>     (0)
            |- <ipsufd> -- <Integer>    (0)
            |- <lted> -- <Integer> -- <Integer> -- <Integer>    (0)
            |- <swctrl_authd> -- <Integer>      (0)
            |- <forticron> -- <Integer>         (0)
            |- <uploadd> -- <Integer>   (0)
            |- <quarantined> -- <Integer>       (0)
            |- <dhcp6c> -- <Integer>    (0)
            |- <info-sslvpnd> -- <Integer>      (0)
            |- <dsd> -- <Integer>       (0)
            |- <lnkmtd> -- <Integer>    (0)
            |- <dhcp6r> -- <Integer>    (0)
            |- <fnbamd> -- <Integer>    (0)
            |- <mrd> -- <Integer>       (0)
            |- <zebos_launcher> -- <Integer>    (0)
            |- <radius-das> -- <Integer>        (0)
            |- <csfd> -- <Integer>      (0)
            +- <fsvrd> -- <Integer>     (0)
    +- extender -- <sys-info> -- <sn>   (0)
                +- <modem-status> -- <sn>       (0)
  
 --------------- output Tree-5.4.2 ---------------