<?xml version="1.0" encoding="UTF-8"?>
<defender>
	<version>21.8</version>
	<lastchange/>
	<system>
		<optimization>normal</optimization>
		<hostname>Anybus-Defender</hostname>
		<domain>localdomain</domain>
		<dnsserver/>
		<dnsallowoverride/>
		<disableconsolemenu/>
		<interface_names_migrated/>
		<group>
			<name>all</name>
			<description>All Users</description>
			<scope>system</scope>
			<gid>1998</gid>
			<member>0</member>
		</group>
		<group>
			<name>admins</name>
			<description>System Administrators</description>
			<scope>system</scope>
			<gid>1999</gid>
			<member>0</member>
			<priv>page-all</priv>
		</group>
		<user>
			<name>admin</name>
			<descr>System Administrator</descr>
			<scope>system</scope>
			<groupname>admins</groupname>
			<bcrypt-hash>$2y$10$XRnCAj7oU6x8iVzf77A1y.7EOTMX3QOKwOpkVbOseTMOs1oE1UvgC</bcrypt-hash>
			<uid>0</uid>
			<priv>user-shell-access</priv>
		</user>
		<nextuid>2000</nextuid>
		<nextgid>2000</nextgid>
		<timeservers>pool.ntp.org</timeservers>
		<webgui>
			<protocol>https</protocol>
			<loginshowhost/>
			<ssl-certref>6aa8f0b220cb3</ssl-certref>
			<port/>
			<max_procs>2</max_procs>
		</webgui>
		<maximumtableentries>400000</maximumtableentries>
		<disablenatreflection>yes</disablenatreflection>
		<disablesegmentationoffloading/>
		<disablelargereceiveoffloading/>
		<prefer_ipv4/>
		<firmware>
			<disablecheck/>
		</firmware>
		<crypto_hardware>aesni</crypto_hardware>
		<thermal_hardware>coretemp</thermal_hardware>
		<powerd_ac_mode>hadp</powerd_ac_mode>
		<powerd_battery_mode>hadp</powerd_battery_mode>
		<powerd_normal_mode>hadp</powerd_normal_mode>
		<bogons>
			<interval>never</interval>
		</bogons>
		<hn_altq_enable/>
		<already_run_config_upgrade/>
		<disclaimaccepted>2026-09-15 07:23:01</disclaimaccepted>
		<earlyshellcmd>service wireguardd start</earlyshellcmd>
		<ssh/>
		<sshguard_threshold/>
		<sshguard_blocktime/>
		<sshguard_detection_time/>
		<sshguard_whitelist/>
	</system>
	<interfaces>
		<wan>
			<enable/>
			<if>igb0</if>
			<mtu/>
			<ipaddr>dhcp</ipaddr>
			<subnet/>
			<gateway/>
			<dhcphostname/>
			<media/>
			<mediaopt/>
			<dhcp6-duid/>
			<dhcp6-ia-pd-len>0</dhcp6-ia-pd-len>
		</wan>
		<lan>
			<enable/>
			<if>igb1</if>
			<ipaddr>192.168.200.1</ipaddr>
			<subnet>24</subnet>
			<media/>
			<mediaopt/>
		</lan>
		<opt1>
			<if>igb2</if>
			<media/>
			<mediaopt/>
		</opt1>
		<opt2>
			<if>igb3</if>
			<media/>
			<mediaopt/>
		</opt2>
	</interfaces>
	<staticroutes/>
	<snmpd>
		<syslocation/>
		<syscontact/>
		<rocommunity>public</rocommunity>
	</snmpd>
	<diag>
		<ipv6nat>
			<ipaddr/>
		</ipv6nat>
	</diag>
	<syslog>
		<format>rfc5424</format>
		<reverse>
			<bool>true</bool>
		</reverse>
		<nentries>2000</nentries>
	</syslog>
	<nat>
		<outbound>
			<mode>automatic</mode>
		</outbound>
	</nat>
	<filter>
		<rule>
			<type>pass</type>
			<ipprotocol>inet</ipprotocol>
			<descr>Default allow LAN to any rule</descr>
			<interface>lan</interface>
			<tracker>0100000101</tracker>
			<source>
				<network>lan</network>
			</source>
			<destination>
				<any/>
			</destination>
		</rule>
		<rule>
			<type>pass</type>
			<ipprotocol>inet6</ipprotocol>
			<descr>Default allow LAN IPv6 to any rule</descr>
			<interface>lan</interface>
			<tracker>0100000102</tracker>
			<source>
				<network>lan</network>
			</source>
			<destination>
				<any/>
			</destination>
		</rule>
	</filter>
	<shaper/>
	<ipsec>
		<vtimaps/>
	</ipsec>
	<aliases/>
	<proxyarp/>
	<cron>
		<item>
			<minute>*/1</minute>
			<hour>*</hour>
			<mday>*</mday>
			<month>*</month>
			<wday>*</wday>
			<who>root</who>
			<command>/usr/sbin/newsyslog</command>
		</item>
		<item>
			<minute>1</minute>
			<hour>3</hour>
			<mday>*</mday>
			<month>*</month>
			<wday>*</wday>
			<who>root</who>
			<command>/etc/rc.periodic daily</command>
		</item>
		<item>
			<minute>15</minute>
			<hour>4</hour>
			<mday>*</mday>
			<month>*</month>
			<wday>6</wday>
			<who>root</who>
			<command>/etc/rc.periodic weekly</command>
		</item>
		<item>
			<minute>30</minute>
			<hour>5</hour>
			<mday>1</mday>
			<month>*</month>
			<wday>*</wday>
			<who>root</who>
			<command>/etc/rc.periodic monthly</command>
		</item>
		<item>
			<minute>1,31</minute>
			<hour>0-5</hour>
			<mday>*</mday>
			<month>*</month>
			<wday>*</wday>
			<who>root</who>
			<command>/usr/bin/nice -n20 adjkerntz -a</command>
		</item>
		<item>
			<minute>*/60</minute>
			<hour>*</hour>
			<mday>*</mday>
			<month>*</month>
			<wday>*</wday>
			<who>root</who>
			<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshguard</command>
		</item>
		<item>
			<minute>1</minute>
			<hour>1</hour>
			<mday>*</mday>
			<month>*</month>
			<wday>*</wday>
			<who>root</who>
			<command>/usr/bin/nice -n20 /etc/rc.dyndns.update</command>
		</item>
		<item>
			<minute>30</minute>
			<hour>12</hour>
			<mday>*</mday>
			<month>*</month>
			<wday>*</wday>
			<who>root</who>
			<command>/usr/bin/nice -n20 /etc/rc.update_urltables</command>
		</item>
		<item>
			<minute>1</minute>
			<hour>0</hour>
			<mday>*</mday>
			<month>*</month>
			<wday>*</wday>
			<who>root</who>
			<command>/usr/bin/nice -n20 /etc/rc.update_pkg_metadata</command>
		</item>
	</cron>
	<wol/>
	<rrd>
		<enable/>
	</rrd>
	<widgets>
		<sequence>system_information:col1:open,interfaces:col2:open,thermal_sensors:col2:open</sequence>
	</widgets>
	<openvpn/>
	<dnshaper/>
	<unbound>
		<enable/>
		<dnssec/>
		<active_interface/>
		<outgoing_interface/>
		<custom_options/>
		<hideidentity/>
		<hideversion/>
		<dnssecstripped/>
	</unbound>
	<revision>
		<time>1789457128</time>
		<description>admin@192.168.200.100 (Local Database): Admin Access Advanced Settings saved</description>
		<username>admin@192.168.200.100 (Local Database)</username>
		<version>2.5.2-RELEASE-2026091408</version>
	</revision>
	<installedpackages>
		<package>
			<name>API</name>
			<internal_name>apicore</internal_name>
			<descr>Provide modular RESTful APIs for access by a remote server.</descr>
			<version>1.3.6_7</version>
			<configurationfile>apicore.xml</configurationfile>
		</package>
		<package>
			<name>AssetMgmt</name>
			<internal_name>identifyasset</internal_name>
			<descr>A package to scan hosts on the network and identify OS and/or Industrial Protocol information.</descr>
			<version>1.1.1_5</version>
			<configurationfile>identifyasset.xml</configurationfile>
			<include_file>/usr/local/pkg/identifyasset.inc</include_file>
		</package>
		<package>
			<name>Remote Management</name>
			<internal_name>RemoteMgmt</internal_name>
			<descr>Integrate with a Remote Management Console to allow remote control/visibility of this instance.</descr>
			<version>0.6.0_5</version>
			<configurationfile>remote_management.xml</configurationfile>
			<include_file>/usr/local/pkg/remote_management.inc</include_file>
		</package>
		<package>
			<name>WireGuard</name>
			<descr>WireGuard is an extremely simple yet fast and modern VPN&amp;lt;br /&amp;gt;
				that utilizes state-of-the-art cryptography. It aims to be&amp;lt;br /&amp;gt;
				faster, simpler, leaner, and more useful than IPSec, while&amp;lt;br /&amp;gt;
				avoiding the massive headache. It intends to be considerably&amp;lt;br /&amp;gt;
				more performant than OpenVPN. WireGuard is designed as a&amp;lt;br /&amp;gt;
				general purpose VPN for running on embedded interfaces and&amp;lt;br /&amp;gt;
				super computers alike, fit for many different circumstances.&amp;lt;br /&amp;gt;
				Initially released for the Linux kernel, it is now&amp;lt;br /&amp;gt;
				cross-platform and widely deployable. It is currently under&amp;lt;br /&amp;gt;
				heavy development, but already it might be regarded as the&amp;lt;br /&amp;gt;
				most secure, easiest to use, and simplest VPN solution in&amp;lt;br /&amp;gt;
				the industry.</descr>
			<pkginfolink>https://github.com/pfsense/FreeBSD-ports/commits/devel/net/pfSense-pkg-WireGuard</pkginfolink>
			<version>0.2.1</version>
			<configurationfile>wireguard.xml</configurationfile>
		</package>
		<menu>
			<name>Asset Management</name>
			<section>Services</section>
			<configfile>identifyasset.xml</configfile>
			<url>/pkg_identify_asset.php</url>
		</menu>
		<menu>
			<name>Remote Management</name>
			<section>System</section>
			<configfile>remote_management.xml</configfile>
			<url>/pkg_edit.php?xml=remote_management.xml</url>
		</menu>
		<menu>
			<name>WireGuard</name>
			<section>VPN</section>
			<url>/wg/vpn_wg_tunnels.php</url>
		</menu>
		<menu>
			<name>WireGuard </name>
			<section>Status</section>
			<url>/wg/status_wireguard.php</url>
		</menu>
		<service>
			<name>identifyasset</name>
			<descr>Asset Management</descr>
			<description>Asset Management</description>
			<startcmd>if (file_exists('/usr/local/pkg/identifyasset.inc')) { require_once('identifyasset.inc'); identifyasset_start_service(); }</startcmd>
			<stopcmd>if (file_exists('/usr/local/pkg/identifyasset.inc')) { require_once('identifyasset.inc'); identifyasset_stop_service(); }</stopcmd>
			<custom_php_service_status_command>
			false; if (!function_exists('_identifyasset_status')) {function _identifyasset_status() {if (!file_exists('/usr/local/pkg/identifyasset.inc')) return false; require_once('identifyasset.inc');return identifyasset_is_running();}} $rc=_identifyasset_status();</custom_php_service_status_command>
		</service>
		<service>
			<name>RemoteMgmt</name>
			<descr>Remote Management</descr>
			<description>Remote Management</description>
			<startcmd>if (file_exists('/usr/local/pkg/remote_management.inc')) { require_once('remote_management.inc'); remote_management_start_service(); } </startcmd>
			<stopcmd>if (file_exists('/usr/local/pkg/remote_management.inc')) { require_once('remote_management.inc'); remote_management_stop_service(); } </stopcmd>
			<custom_php_service_status_command>function () { if (!file_exists('/usr/local/pkg/remote_management.inc')) { return false; } require_once('remote_management.inc');return remote_management_is_running();}</custom_php_service_status_command>
		</service>
		<service>
			<name>wireguard</name>
			<rcfile>wireguardd</rcfile>
			<executable>php_wg</executable>
			<description>WireGuard</description>
		</service>
		<wireguard>
			<config>
				<enable>off</enable>
				<keep_conf>yes</keep_conf>
				<resolve_interval>300</resolve_interval>
				<resolve_interval_track>no</resolve_interval_track>
				<interface_group>all</interface_group>
				<hide_secrets>yes</hide_secrets>
			</config>
			<tunnels/>
			<peers/>
		</wireguard>
		<shellcmdsettings>
			<config>
				<cmd>service wireguardd start</cmd>
				<cmdtype>earlyshellcmd</cmdtype>
				<description>WireGuard earlyshellcmd (DO NOT EDIT/DELETE!)</description>
			</config>
		</shellcmdsettings>
	</installedpackages>
	<ifgroups>
		<ifgroupentry>
			<ifname>WireGuard</ifname>
			<descr>WireGuard Interface Group (DO NOT EDIT/DELETE!)</descr>
			<members/>
		</ifgroupentry>
	</ifgroups>
	<ppps/>
	<gateways/>
	<cert>
		<refid>6aa8f0b220cb3</refid>
		<descr>webConfigurator default (6aa8f0b220cb3)</descr>
		<type>server</type>
		<crt>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</crt>
		<prv>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</prv>
	</cert>
</defender>
