create access_profile profile_id 1 profile_name 1 ip udp src_port_mask 0xFFFF
config access_profile profile_id 1 add access_id 2 ip udp src_port 67 port 1-24 deny
config access_profile profile_id 1 add access_id 1 ip udp src_port 67 port 25-26 permit

create access_profile profile_id 2 profile_name 2 ethernet ethernet_type
config access_profile profile_id 2 add access_id 1 ethernet ethernet_type 0x86DD port 1-26 deny

create access_profile profile_id 3 profile_name netbios_off_1 ip tcp dst_port_mask 0xffff
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port 135 port 1-24 deny
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port 137 port 1-24 deny
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port 138 port 1-24 deny
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port 139 port 1-24 deny
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port 369 port 1-24 deny
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port 445 port 1-24 deny
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port 593 port 1-24 deny
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port 1900 port 1-24 deny
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port 2869 port 1-24 deny
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port 5000 port 1-24 deny

create access_profile profile_id 4 profile_name netbios_off_2 ip udp dst_port_mask 0xffff
config access_profile profile_id 4 add access_id auto_assign ip udp dst_port 135 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip udp dst_port 137 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip udp dst_port 138 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip udp dst_port 139 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip udp dst_port 369 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip udp dst_port 445 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip udp dst_port 593 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip udp dst_port 1900 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip udp dst_port 2869 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip udp dst_port 5000 port 1-24 deny

config traffic control 1-24 broadcast enable multicast enable action drop threshold 64 countdown 5 time_interval 5