From bbdea92b10e2208fbc9b4a4eb00dd5ccbb1db017 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Mon, 19 Sep 2016 14:18:21 -0700 Subject: [PATCH] new art --- windows/keep-secure/images/vpn-app-rules.png | Bin 0 -> 21773 bytes .../keep-secure/images/vpn-app-trigger.PNG | Bin 0 -> 23365 bytes .../keep-secure/images/vpn-traffic-rules.png | Bin 0 -> 13764 bytes .../keep-secure/vpn-auto-trigger-profile.md | 30 ++++++--- windows/keep-secure/vpn-name-resolution.md | 6 +- windows/keep-secure/vpn-security-features.md | 60 +++++++++++++----- 6 files changed, 67 insertions(+), 29 deletions(-) create mode 100644 windows/keep-secure/images/vpn-app-rules.png create mode 100644 windows/keep-secure/images/vpn-app-trigger.PNG create mode 100644 windows/keep-secure/images/vpn-traffic-rules.png diff --git a/windows/keep-secure/images/vpn-app-rules.png b/windows/keep-secure/images/vpn-app-rules.png new file mode 100644 index 0000000000000000000000000000000000000000..edc4a2420939136f949cda382dad4c3aa872be6c GIT binary patch literal 21773 zcmce-XIN9)+wd8rDGI2FNaxs)F1>`JqN36~fFLcP2+~_P|cbIumjp+z921eMC!M%u?psrJbv@#f99s{Y^NxV7U95|q) zp<#U<0QkfU^2Am-#ilU<0L2^ENLTD`DnDUibO`z;$H#fJTu^A6sPD_zbikd95w1!vx z@yrI?bFC}t5#|TEwWd4WV?dr=)19cYzV|l6edlBJ`)JzucC>ggtNv@Vk_Gbg%wA7a z+f3rd%b%$_)<~i+2rQaIyg`*fvLM=s!%K@pHQ7Z_{=?-ETq!4ODT+ z1;_O0Aiv^re1wPOh5FHU>*6k#enbujR(%;h*#}+hd+p;#f=;dYsJeMNGKw6!iJ34F zTOVgUa33j=&z5ghKq_T+M|srQN#8TS2>4zxcw7@$sdr0!>1`)rM6c^d-cZ^5Oa`u- zy4P(d^Xrng=3?GIa41}xM-srnr8H7}r_nP9^_rk+yFF5L&s6>^>eMLNm@qC8Kut6% zbE@9Shv@Y~M@fpBshm+$M;ri^3I!}!S;IqL3kMDHA{ea7Mt2Z`NQ=-^6MyxznTaX8 zgY0|5r%A@`TXDNZz3uQR+!1EFi5x^uhj3LwdqMm>x~2Zfn39R(4Kn<^`G z9pJg>s8$DS=~}^mIAL?sU6AQhKjyX!yDK!sLHy+6?N4MIsC>|$Tq8ep>+v3OQ9zkf z!)FJv(uQ-&KbU4c`Egu1gg&;4cjMCSU3Vl`SR%r{v?>L^`8qU#7p~O6&ce?vGKf$= zb8PUXZnq6StvcRf^!1XXy|kuFX4Hd}%Aee(J+0Pqz=#P>&Ph@QiG7D0!xD;B{uY`Y zHa+Vb8lX?vUpIubSd9s7cb1#OY|ES<+N~mP0TOVO`>p3q#tU$ZdXy zqs6~UPXwhv@7E-Q8e{2CpvrgtIri;+Z}%bgnlackmnRuWk*k+K1A^+&Crw%^EG`}nMXyPIe6kY`dHogX+@ zd|2Djxgb*|7Njcmbi*CrPu8@@ZAhcR1FMrVBa}{4mwK2Rg4m*&hV_3UkV2{J6q=5* z=wSd%jOMlk4d?3TZs=GzmcopnYaF6X!3Bx5V_QzZtf%D&ww@92YWMPQ6_m5Y0Qh+c z`oGmozgmO<0RUcYPga14-Tz*V{ikv4Q4fvO|k zEL;#x+i0M+Z{vyXvF(_UC2^jfdp(xNKmSVmkS!@4p)F?keJ;kS65XOwQfNlXjI07%~C6-asX0_jx#BBJU(B%(T z$@&;``rRI%^X?hnw2=Iiu!DxIvD(;N8INf6{Dwq9Qxz+h8SFjoN0jTT*Y6*(%b6t4y^0qHE>oV5y3JIK|I{F^6QWb={WmJQ=5rQd-hSc+{EY4O z5a6|;^eJ&cu(o24vDF@R-lo(R?h^?&&j*d+rHrdf-Iin(EYn*lBuz4qjFyt2?b+0& zGJK5Rm~|IVnEr;9xFj42WjL_i)qgZ@cZn#=X?5@5agM*I-gd4KpHPM@UjJd9<~!>k zKMQ#ljUjGWodkr+_c@lgu~aCzin@wV!ufLK2F<)JHlZH3%SktRqE8 zfPb(1eXvw@Ak{g({6RLk$r#$pXp(w{L`dARGAvDt9L7iE9czs>5e5;vm_lqKb2^%D zFZAU(U!7_@#{%_a{5X1vWj)JjHXPbh70$t3GeP;jt?TdUKNO5d--{1pF$@X_z37E~ ze0$mTnl*aeUFPehaG)tZId11fb-qBzhhhCE%h2s*3f4_L{2`G6{lO&I1$AiE$2P!z zKoA`C7u0lAP;q2lN{5Am`=Guy?e%39T}!a%xH)n~RrEZW)+918VF|XX*?{vaG{T}1 zyM3d|pC*Ni|FF^t2p4Yv(Y(TL|6Cn(vil-iDQDK(HP$kV@##)dQVDlJ>GwolI0WUp zyWD{dFO;R>(G%Y5tbbuzZWE_@tecB1>?McxHH4>~A5}{cE&BV~&H_)ZR59UdQ>K0Ce#0`4}{vCG-!f7O(- z`3M}#%h-Ojy?hdUH)CrekrL0;ZJcHQ;fR9G3hK~QFmwQp~%R6p|iUbtDXcRtY$ z`OyrM&0n*_ld$iIF`wrNe1N%YrDsh%362xNKX$v6c<}NLLE*y4gc(=#-Q#eNum7S+q@mX+2OrK~71#}AR3qUN?;S503Emm%{gKt}@v`wNy>&q?2E+BSa+TjxD70p^LmuZ|9pflFgEfQBtJ$`tPO8z7qyV;( zb87H{*R8+|2Cg{5A)ABnWcit>JarCLF&%a__tGEwU)J`U{e_mvRrBo2cq()DC{)gu zRET~6^KbEZpfj@Ln+RcOKa5nq?@mmM3|7K|w_$xP9v9|WxddOvlf^o69kTGQ-TIBB zyF3lKit#hY1@oO2K9he;UOLmA1>a3~yz*shn?Up9dYv^0a~FJ+t(b`*LkloGm9-8T z=r<#cHK!9I-gFzAWrU+XIqRrZ=^Gj*D!EO*5RGQbWgQrM@+tXx=VF!ez>}oXgZU`Z z`O`au9FfGhW-$$s?C`V`50VoE!6-iR8)*W=nW(7qH;oLAFBG@=;Oh(lLt*K^PfpbT z!s@3Vmq~ZA3CFA8W3fh|q-fFfgXlCyfFrYnA>_?rKYxFmjoQXjAgfc1qbC+l)aqHT zJ*-JP@#+l$i?lHKeiX8>mdiSKz2a2weO7Rl0vn`Cah8EaZaJnoVtX$*quTf~S?i`KkE*{_ds&4D(?M}l%j zTO4OsYV*wKlSlnpGHmbJWA2R$SPEUL{_fUufH!;}NG{LBxt%zerC@3mC2Zy*kjxA2 zd1)1`$ImSY)IKG&4OdmKM_gxLXmets$17JStsa*VYQ%BpB0uN*CQ9ls;-0(p7vH`q z@6u@NM!&9&PQ9hgkt@%R!uX%G(+!J+8WxyGQ)xg~xP7^a*espV*RoKn>57PsdI*Vxd7U~mn(>*w#j+i)5^ zq2Z5xLPRIx{l>+j5!B!tg$9r}X+vZC3{=FQc|F~+oIiP-!*Ps1BlmEJJQK&nO3))( zQDuJxc$A@DD-gXbTVJ{Vt~T&!RkUY;vtB#sTUa^_`jz@d&8)H6N_4v}t@mgSa(Q`f zXV}62XZO9`>C%RNVY|~t9!oM)3_m{%FX_`)09_xL`?ZFaiY{c}G zX1#45`PMf4ah5}5Seo~6m@oJgxMBL%Bibi=^ItFh1IzDCG?Inm06e`w-%ayx)BxY- ze+kP9W;3fJNJEBs^Crarw0yPk z#q)5>^jcX!<`eoR=ke%a1YCTpre3`d^ap&;qIZPH?w8H4SE1og8-4>AsGyHWBHoGO zBI6oM2FX6pn|DWK0j+9YQs1RQo*~H^Vo>#$>C@NIn48aVCPTjNGny`WfzZfu2&Z8Z zb~Qm`*`>WAthXCRAie!4l$YKJcb+LNI=KPf%=bqw>^8??Q3vFLCnb0dNmz{^;#u>)9A#i?3cn86 z2pEAYkGToOdCbT<S7tbnfP)$@Tix8h%u7R)!Xk zdx_EPJmjBhJ4fBXM-}$qJfuiOQ`m!)qK1GDp#M?erhxH;OxESnvCW5toYQ=1r5NHH zM~KSKBEv+0FQ(r-iA9IpPy+F}(WF`3ZDz58SV!1vs{0)UlGB&@MWO5*9@)9Znv@3* zl{S%YU4#ZTs?TrKqs4jenOD|mH$OIwo&g*FsnqtqShN%?^EBPUDc!32;=94?cOo4u!!OU^{s`oj$NvRAh$!L5#6&5cFqUv! zNl>h*wNi3K{_%0&xNi3m;j}M*e^+}*MsC0R@k(kFG$Ku*+j1XnD3;#8Yc#FApWm9v zY9c`}cY|^3cCoYpCSgI~jGsO&Hphe+Z;H<85N#0cFX|qH#)Be56JMNT&^}Ny#f^R{!c&)u> zM2kA!3*^9pc;dIB2{~gwsS+V*uq((DF%xv7wB;ZnHLW0*6f|UaGJQ}NTW$`mJ=4{1 z8P?=96D5Q;+BBN=H~hJbu7YH=;orMy#HQL= z#hW4N^|fx4di5qtzx3fhz2FQoCsoPM=EsCqeM3W?&UC3}V~8~CE&lD-AHlR{*C@lc zS3}$suL&|ouc2=n7i3i8gYo&i6D}ug3A4^8!ks=@2M3qY;!+#ywUzWx6K=f-h{=mm zHxuXN*lGfXEQQveaC-!*_u&ubdv^$y>yb|Q5N_;S-7lI&{<9}N;dI}Lx+Q#+R)GFK zT_K?5f+!h5t&*rI@7%)*5(n@_m9h7ns$)Ictxe9+k>nWKJK?h7LG7PQc^>hY_}NN* zU2u3!kx=0rkzZBG&ygjDX)5A!13R$i)%Cew|vkah- zh=BE(URU`bXvx`+;`gY%ons_DecaHe@l0g0)*r*vK6vxznwMJ{wkOd^`)+6?%N7_F zA$J)_OpE>4TfX0dK`L1!J2T#bIkhRc~FJB;UIb zFdK0v#5p5so6oVfx05e_sm4lK9M~H))M4^CcZQ13D76{eZQe(~k0+fw?h;|U;ZAM2 zZM)4t*HC%!JpNwAQ+#I{+^b#YmG~qAklfZ+_BiAP)u+Uv_Y=`NB~|v|pwdH3N7lLw zaFP8bZn2O|MSEapV!c0~B29h?m~RB<$`0_5nzdf?oibdnM4&z{(0Y0}!j9BXwZ~aNC{X0@_orhkl^1uQS#A)|Ep-Ff=2! z6BYxF!=R%(3T4>lT8-)DEbw}WxWZFbG=`f=#kz$3C;Rp9s}!e&Jj`aB_o>ph5Sfo_ zh%y_-$xrecP&d6*)%x4=-5vYFZfBX6yrWKihaOjZWllkewc~R6>^fR0bIO1a5kj+Y zCSrg8=H$>;h1==1xZwgOe6G`gGU{#aGSWF@*CSofmk9$~&>N?Y8PYVKsPQ|%tVt=k z(fO~Z@n2kQu~wh>34X$|>|sTjxO7myAehtjCL*k-c30}sVbflTg`;GTN!W4=V(ejx zGn<-{>9#}oIHUT>Ztq~_mD@kmw{baGS4I@S+p{1vK~jpgOY&FiKih6Pft#0-&$+ELX~5aDT6~8= zW)Ku85nn}`ou+2KE+BoRzU##dtNy`HbtVi?Hx`j3XLEAaV4k{^!CHFT(P|!PU8wlgrlS}F(N4&i|^aHfY>Wl;Hn*v zC#1w9d^hs(BZ{h&ZtPtu+T_4Yf5L?%wU342%G5WNk3dk3angvHf0B@YHQsC{j2zw- zq0G^PT)!F75w!epdi)%Rn5JiN3!E{*kZxd6iO?pWofG+1UlIC*awexv3k{+KalmWh zhDN^KXZWMxpgEmR)}yML$ZBVj$Wt5R%xa^rw>Q7-8O8IMTr2R5R}%75x^!q|k=%f5 zG@fj$YLafGt#PbY_w2SK@x-W(e#Ao4wSp#u?W};=u6I&!PlVABh*(S6)GM*J#oZ%dt(M;Tk_N07GH0Y*kDLKMD26|YScI@@Tpmgi~LB`$V z;Em&j9h;a=wBP12m^C3z$%J(=^a*I)O0w@p;N)&59>M5YNB_w%%EKV|A&m;7eK+_+ z-zX!2^)t_LrNr^@e#W=z28XanzR>_a!CQPeno^t!sH2^_*-9V8`0h5p;$B$f=dT*1 zH$y8b-gK+mjQ;LH)l3PW+(r~OVuu(;?O0F_<-l|;OHSfk#j32=Numm2SiO7ms_6n~@}{pZ;?Q0hB&RCd6C^DjGp za2CGV9!lZ|WRCuJSY$?`hZ$at(IWt+r;v|X{}#}G+86Mu{R`dM|7&;~0Ipl^%-$@BEKgWz8Y1bTO> zD1hJ5hhJ0li0&*&uWgPz@1;-3gONF>zbE8h$p*cwmb5`WfTQ(45H$8v?kh?xOYmmbEy9dy} zXW@4mg?+})-^|z$mUrr?b-3m-Qkr{5`>Cu%XnxI7_&@jj zm#6=oW4_8i-L(SvEkf#d#)p0f;%+6qSHG6fzn=d0G(J?Slec30dj$o2;rM&8-m?(; z@6y+F(Yj6H3;?NrmfMBXf4{B&NAv4*v;FVbe@{`>KLg{Nrbw{;)BImyvL^aMe0p_l z^PgtFS5ng5P@sp!iQhwz>7cKzk94Qq^zR(jf6Y++8eDNi4LzJyU>B*`0oR_q%4dx( zg2o@Q&=Z7sbV&vFlakx;@bFjt6s3u-HvC&dtt%PFjio=^cBtzDbk|&EC){^C{WMlw zMr+I7k7MZSAU#zNNDvCe{IB!)S7|kei;Fo&VUnw>tL0d6FI44w7<@6`9~CY6KghCC z<;<%atPNCG1At3vAk*4f-O+oF=Avm8k4#I|+A~yWSDkG7j@fp8W})_+cML@YPj2+d zag!T-@mU`Pc$bxb?7|x})*_TT!G=AD&7DU?zLor4%ezZQptbvxTcT-q+Bn}bw;&#h zrUitk9}j1I5C98slg`b5=YqXJrLXKP4x=Wn{k%+uYaPjNg{UVhRq=(uVhvO_E$+3xRvEdgNA`K$x>NH#1D~sSE>07@Pnqq?GHDMahfQBX)$PP)Yq)U+7RSTrpm%-ON(>$}RXQS%VJx5x~+K&%EUTgeOdL~kBzsQ>OSJTrE z34a`!rt&=*I@lW8&Xr7Un74l>W5{?*G3t2MNh}@|C)%s_tUyR=iNXVy))DlrB3ozd zEG)j91G_uF7H?DN>{&BQyI>DUR}m3K81eg|x;WF}rjKMaiG5h|ek@28I{L5^vZRd* zI$q7_lHlELJ13=41CKQu&y2}KGVq#}366W_2S5(TM7st1=uU9uy!#(MhSM6?>4y>k*Y zAw;{VvdIA(N|Y{zhB0~GIJvW;&CDua;d1ynGt*ea!w=N38dI!BXXHkT> z)vn{+TSevc4jWEgix#ouDw5YiqIRbWPeZro8eRmHG0~-{(Q>%%fleCXNjpCnRF~_x znwDe^4>MzPwLtu9UowQ%FDagIE!50(()5?~`{I<-21X%8bW~-YI7gNIIlVLXg*>0b z6&WM!$Tl;8J51t&tFFBf4mPs4pw;7+G6k+l7`*4B<)s>FjFv1t=$xIweyf%qI1>U3 zHBg^Zp-fb2l^c)I7w2j3@Wjt(9uE#7-w<@6hez<&q&(p6;)2$vY=cdkGN<4r8Tn<* z^Mc6w6xi`@C2O0{npgGnMswl>&tE)i7Vlt4Lp6iv2=}1=Q0i(ic#RD*N7>e-fGdbp zL!h~)v8HS8QGH&+GXT|I>A!uWsHdeX{srhS}Rn(@FVWJjuX_vah(GX#Ut zT1jqjbUy;1_jd(G*Q{UlmR+Gj`8)8>>qk~Zu-0+w>Fq+KcUIGUPGYAfeJ@m59Yu5Yto$rX4W=;a zdnB6}6_P>`iW{bbN~_+`CzL=C+Z2b!N1v;gCQLsadNwaHHd<_W4+HC-EQhg`v+z`i zZOy`GzsqBgoV0nK?T;}(G&$8bGXqz3ZDO!ALgk`AObLenW}EV;($f1ppVL7@S! zpfHEx=~Y5w0{Cv`p9iF}yjvmo;_MX2;?$_8%4C!m;cPIvQYAepbRVw*6rjd2!vu zsgk>B|RB@`n0k3fMb z+Z1=+{27&u_=n&tU=0J)_Jmk?USOP7PfH+KV1B8>6cQy|*@&RI7r*SnM+0$ONWbVM z8RfL0SY_mDQD&!UDd@J#qh=iKaECsZLh6no{$iy1)!dZDYci1chg-*rA~He>JH2Y+ zRq;U-28a(p# zzt@>hMiJ&lgIJs;3;o@yt^ChKP1!Ghria4I2fZq<;u61z)wU2my2;DC^Zm4EsMg?- z9=;D7y_|(=nkr=H?pw~rkSwmhT?f}Zro8L6FTN0*r#IoYCqFIAGu6CS`63>DYLs8H z$HslEI_11kb?;@}^PC&VGQ?K!L1%DWRN$gGgi1u}lY)=MCieC`eui>tir{>YOHv!0 ztJRO^WqP&eiuv3t9S!Wu;As(A_EpS+OoGK{^&Cr$UXLu-R80Xxh?R1<-HTI`4SL)r zyCJzkI)m#nj)R;W2kh@PcEGg2sd-^JPG~W!ag_YiQj|%UY`QG?W zsefLi!^@&jDybwPs(I~eJ)-X@zVXixN|_AMsSdj^^=TiJ;hw!xm2q{E1?o^ zu1f+bG5O3y9t(ZCA`{E&7VPR*ww=a{i3%M=6!XU_pOkC6S;kt4KbQTRN;Yn@EROC`Jsv=*~ zefU`f1pIkl`~2iW={=iU-mpt0Zp_CPPS-Bxuq)1##y_nNe@)6%tUN0asQ*vcx zkHY)0{XL%xh;3-7BNQo&JeTEL#KFqM`)TETU-yI2UEK4&N40$=j?Om5&F;jaRMNnQ z*ei18H#O?-#eK=-F-@mEBfej%GB|2%h*fZA-EJSHLRR@*8AD+>5Z~D zH@j}%mfgja=KCb|Y`X#l*$OFj@-;DG1D)HI*Q=ROM%RvKGCyPzp7wiZ`)dEf(mu$N ziyrBttlLPzkOlMYFD@mqc2U57eD!gQu=}Y_tWCh&y(y2KDN2^L6RoUDd~)F+lZu=Zu8h35CSQ!pPV*#wy?W%c*VV9{ z$QI{xp$@N~(CH@{pBKShTRWe7{%QrDUU%+1L`pZ$+QsMHcRQ`>Y-B9Y z!(Pi9L{;8Y$Wb*XYRZHOz0~;paNvWw%5}lQv4zynyqqXQVvk+~2$a2MZ7GHR6S6Az z)>i0Ft)405wPa0%7F*nl7v9J%S&OGu25rhmQF zQm=Ush{oTPw5cDIJ#1IJG+=T5SY`xqtc~u{&uF@nemE$7Eo&AdR7Y$+PKax!H@yw^;B&WW?`CbmC`-y(5!uhy443kjCV z(9~Pg(47RPd!S@0V#|GYFYSF@$cbX?k=aV8{;7lbK{f17r`to9U2G6TRM!nnL(Q$N z!ZxR4Z~@Qwo|YeYy1a9|I5ClyZ28t{X}E*gsHhUX+X2)w44Uhmh}L6-VRO!oN1c67 zo<2sd2FH}r+O(jz8_#tf4|#dtCSO-2`(qq&bXeYOo{pOXB#Y_R9zBHP^sf-kzwFxo zsR8;w1V8_Ol`PzH|Df?}WAG0H20+F0!4_*qZA(kb_2KQ;&;43~QSZ%xK_?wV?~9j2 z!7DE5Au0xDJm~SWhn9DLVWnI-VasYcCgSaybjVSz;zG2ncE`(97X^9g_SR3oQ2ehG zH&v9beWe?i%zy_L!!1EM!M8rt2aa|Jx)xjwMWp$4docZl7^_IP{&YV5(kdr<(C>CN zWfb~mDVecWf6mRN#tVj;T=_PZ63KUEIiT^N$s@?xuf7sHzV)NV@Rs1jOB7M;SIQRW4K)A)+bdP$N+f(;{CnelX5C^Ewl z8!=P)rW74QWd;bu*h4JgzessAsGiOE;Die__A<;*8LNf2LiQh4-oWJ2EzEQ~L-Ryg zbZlZhMZ>S4X4|LSAs6?{tSa0j;d0gpdFo%SKc4a~7h2o*eCxx!x}mL}*wNRWsya>b z#S?toj%NBH(6$St2IYd+_|aJWmK=aq(LKiq`2NL7x^7B#p`qnwyMpH)d*Az2ldu+3 zeu0P^oI?l6bd+6}9}TP-xgFu0pfw^z@1JOL{K5W?f20@I5Tv zid1b4-224(>e}cF6v7y)ry!|kN~~V1D~T*Du|c~-9qjGCT@P@?6}!L6f96+9dJdj< zTT{F#9%|=RAtFeaY%6UiA|g?G?ec6T&N59CkdIv|CibwJ^m`dS^CLi3A|G!1qjT90 z1usO12vPa+=iajbfU~ojl$MH;c>VJ)^GhoF{`k|D1(mg(r!A&ZwJ3ZOrkf!;)jVZu zDe(+Djg+}2_HH<%-M6y76r;&+17V@mEDNdju9c+Sq(Xc2jBo4F8yO76C*va}R*9&V zRJf2g&!d@W`=Hegu*+I6kRlTNf$0Sq&0j(iKkQ*2p?w`*xPOze+CT`-%wq58ER-K?VHXLvwrN()6dwq2_NlAZK_XLIf0v6)!=V6Ar7(Tp4f(TmCyw@g0{}h`<$CmZOjdOn zTsJ&ca5aK*XlR@Pd_U)Gj-dyY0bPGr_2lc)VVhUl+W(4W{(lw&sNkJ`DVkGU+(!-9 z>wQEo7)lDRX3-#Rz=7qvyA~^oPOA23`{y}yQo~&}u9A0^m_Um@1&n8hM(s`dkfX*` zSM$g_n*zilpQ(nHMxueW*HXOMXZyFN=^xi2=h z;uPR6iTU&TZF}W({re*hUb=1=!9H34_QpM&|F=##*$REVrCIBY@)pcfYcE1Iy4%Ef zsSAnG{qvd3C^5$njGCSuk28Du@^-sM#OO2n$vIo{8sXt+;LzLll`{$60n>Y>`4?XR zyyOPGnqx}rMgO|H*dv26;rHw{%yd>%$PNd(9GSl}jW>nUhutT--{*`p zmaZv=NiQeu^jAE?-Ey%(?rX?t6ps6PMd?J@2SGajyhqu~ zA4eJ|gun>y3m72zQem35h~IIj9f`zsR07jK(SWreV-IhwH?U46W@Nx*;-oppA~Ily zr))z8o7aSO^d^qZbUS|6a3GI6Yayc@GE}WETH%~= zmQNz6i$WQ&>C*({SjFsTmY(VD$M7Nx7Ksg~YP>*^u_jip5j~^fuhC&)|AU^13VJP+ zl&d%m3X0O}=x}BOFBcIinl3b9;KbRaq>q=ETT>|UVl}@U?=mM9FgIbEr8=dscuGHl z(y7Etu&HGC?Q~Cb<5vRyVeKH=LO~^^oe5ZosgxT~ela|>Y}apx+UVBn9RHSX(~reW z5L2tB7Sd&Tyl&_vJ3Z>nD5dfxG&5*@HNpFzfJ)Ji{8qP4*koE&{wnX%{Wh$?8vka( zXd}EFmeZ+%>`W2%jM6biS?;vSnJZ{HaEqRf!CEB8(5Ze!%ZK;WkQS;&YBW)e7O$k2 zt`()u(DK8BT@H6eEj3Y9(KfIS z4OQ^1`;^Kt^iu9{w)Z(<%>jjyV1dyv?u*jH#@;Q=JmW+f{q+6W7@39$eJDy(MhJ$sv0~@j=0ftZ`}HjQ88;gYYOcvrXMVvF6iCk{YiE#->UY% zi*-qfuYYb(!$F!{U0#G{5q8ISS(u2Yc9U6OmPnqgpLXL{Y_tq6y{<0CJ(v8Q` z;JicFlZPl7ob_q9x-(HJuUyC;1}zw31=X?JQPV80tL%J4_Zx|Cw^GDV;%cH9O1;z6 zF$F?E67_=6TUEGVwueaovigt3;2lTGnMmE9!0c{fJKX9-5!PF z8Q3ox8ykc8jvh;FuYA3O>>O19?w$n&gAaANtg@ax=o?WeI81jjKNBexczb|<*(!%` zFIq{cX(oU@z)gMMckvH&@M)*2$U?7-1W`YeV9m9e6bp_e-Z9wF&y0xc=?Q3AZ$TKF z5$Zs!w-&}-Rl_%9uO~uS^ef z2Zd76O{)YG`>~zQ{7{omB`!iQc=zwj~Sj(CCGoCO*AVDl$RGU)HF9 zD3(Meiu(<@{2`i_9}%6|nT@)$4?I|1JI!w?TVut9?iUz~+5NoRkisXcUenwKL007Z z!5z|-=9|E~*L{DsE4)j6DdH#GS09d2AiZ>$w2OUMX`2IOpkoN-jQW*UB+ z_I`~`gXXO5Vi6fCS7G}GFVsl+AzaQ3&s(R@??_lo;vZ}!Td$mMOpc})`B}LK<&e=q z_xA+Zq)-v);64rTA7DN9Q7^@f*x*220pOat@aTsA49udY&q$-KL@CG;PA|Ol+y0p) zRaDX%IGXsQj7d+Tp}0^){t3v{3VLvP>{Yl>LXcty><<}bzMiX(mjMDC`S369s*Y@` zju6O#O}0se`OP6MTPSxw|LUn>k>)sUCcr@Wm4;swz(ql?U%97>$bV|a|4TaQe2^tA z4|SBc4z<0X9d6O-UfQ87{gcV><9um53^c=sEA|96zuktADg2al}t>G zmoS?Y6QOQkwo1J*9m?Zk^j1z3VU45k-^p^V{lQ@p{}7#FfImKt(xMlO?6!WCne=#& z^1|lZl^Vw1`S{|yp|JOKGUFElfQVt=h@&F_=D&drIx+x|tp7!kyfXb&WkP36bO!&f zII+kl)Z2jD-!2yO=wzhi30LZ_C1J05Am$x_3^}YzyykZu4NFa;>TTeozY0f^P)~3@ zi5>`TzbVQsi7a(S6{{FRz4GTFCoNq#evz@lA7j8+9KIbM?pVjs`7CiQ9p(s6473Ja zsrO3@(35W5N2P%bDLyaAyVie-SKWv1EJtf4rsVl2V>i)_u8Y!*KWt3hVEW}3`;=NL zvhs7XeHS{74yRJu_NK8N=UjPvz{T6k2}{2UQM8PQX@2SOtS={yFMa5zwYsS{s81U7 zXua}zNJwgIpz&G0o>q{ssoyvctd+Gm7pX1+=Nk!>K4#~Nv*R{d?5W-OblU@=drxSR z+tf7i49%(Th+gCJE+Q6$oDqmk)~Z;NB&sYa%j}|IX+L?^;Z<2P*V5)ZnjS9m@w?o+ zE)@)c>upF1(F-{G*+X$KaJ2wjn{L^Z9<)^+euwv24?cb^M#a|c-4}f<{0Z20WGznp z=s#i4H%=@=eWY0VHd_UA5t#+@|5K;Jf}F26G1b_6FpLQORp1eoa!YVmxV>hViC9{e>$T##bi-DPI`35l7S`O2-nBEP>n0%aHWmc3F%88<2Bt zjtaOj$Web}@U3Qd@pcR3>nlCmiMV0=r7qSNWkqI4JXScmc8~H}vy57vw^-|qn_7RZ zW{pXJMXXP9D_k=Dndv6*BcYF&*r`7&T-Eu7oe8pbYgCW1BC045dM!1%&oX71oHtNlCG!Sl-?Iv#^Y0;KYei_L@Kc(vIVa=ce18wiBf>?tswhDU!x6s zw60S#EdFq56=`PDvm4WhES=uYtMLlI!b#^wjb^}{MOwH(bIPK0$`A=AN}k#!ZL9{% zYrKEtV%prg``KTzLFbDGzbfS3Qzs{4p84d*<6mV<7iKL<+tcubQ*~-T6kd*@UE_W} zn4k)M_8KZOin~1!N4w%ZW`27?UM+XLf)o#0em!^X26SU}luu@ampC41x{uSQk@*pr zuAhuraZhOCvKFsF>6Yida`xpVvpuXmmV#WJHZ^c+#-&r+beqZ#W|en`UDYm5RH-jb z1Pv1ILt+Kphx~P_WY4+cB1ThKZf!O{sG@x}_zeGDG*ci6w07U5#i6u7N1ItUK570N zfa#b*UQPt!9RGHnBZ?xCqI5Ysqsh|kh%A(l%z%QR`T!? zi_x|tfDRJT-%H*uRgiW9P!;2$e)!iS zcH&1ch3l<8T{o@QoJzK=A2VPmCL&8{zEt*~%{qPt4~~H_!i8T54s8ON{%Iz!IG&7* zWII<(%zfMZ(6jTLJy}ctr||K)7L5ox7)STUb*1NOmmvIf9PJmSwN;}Iu=V=ZX8aLJ z|51{Se(4`(ZVHUkvOf8@+A>N@K$2RO>PcazfYnvIwJ3GfgXxB#G3or5rWlxa?RvR! zU&G!9ch#L%IFQ>P#eOtc@m91~Rtm1A+X55TsaO7t>(FL8hqUimm6-g1Ud!kJ*K+-ost6 z$39yTEHR(@s}kxQT^qA8#tAS&=(#BauDX1?e9_dfUBd(OFs%Q^SF z@2`@f!(GSi0UHF;JADe>8>@v8FZmsCD<-2H@LRGHPj$2%5Va|xgOy&zA+LVg9ay55 zYJT)g&!?BfF2{ZJwz=E9cgY^iWbQ^Wtp-CpvNCBEdNszY2=(l0;aKz4Lk|Ps+z_g8 zy@~Tgf#d6^rEG6ygG-V_-Q%5lg~QB#)9~j<1YV#`__^}ATb-i&ba&07Q z?nJ>FI-+d6D0#a<0!{XJ5vIPw>T(SU6Tr~Z#blL4Q7bRHZjChVn5v?%@#;1Z^kasp zT7?lcXQH-pt9Ba>>-OvCB*Q)$zfKayOXOQJ*J&e%p^+z;aK`5yyl1J&O<4W$jQ4nd zKG-V$P0|<}78^yGn2$kMO*m>PFVng=xh6t*dJFD^s6^mI95>7Ig1YVR_m6w_#Pn;v z1L&%5Ml1f>ipQ&tTkWF#R4w6|_uZcT{dvrI$^om&V_HYUt+L42D#A&yr(cZaOE2T< zYFqMmN~U}(Bu%xI$d>wkQ(ha@nupmg5;ApIejKc5#2?}m-={jZDwQ=``NQVTFcNXA zepSRfV}6%JYtoqF(jXAbAW6!{3S&5c`f;J;8Hbj}Nn6wr0F6VAYzA8XPH3w3d>KSXc?uI&0RnuS4B>=X!h3e$-@bhL zNW?t8RB<-%2G`W=Tjf_6l;r!fw$Fwv&3;HlalOhhNe&kXKI6wK-fF|39>pInmY_?~ zey%4fiA_oaTPG2XmsSuAp#?N|e6pEwf8g(K*$TBoDY&oBl~nNg(DvD(o}`}&Ulf@h zDu;1v{kJCDi|R9Q_VdMKMU;-|PbloBA~B5;=1RYe5CjO|@jT=RIDsTehBs3hGgtx= z&#QCxhfU9s?)jyx66?C>ns?*s#9K^tk)eSORv~d4@f^lJk{?q;IR(6Tq25#=b zP1BB8`Xa+))r?2k<5LMfgQ_OiEgCl#*^KD5=ZGE~p}Yr*-a=u6=3*Dz!%wBx3v%M0 zh7SN*p!aTDB%c#v|2E>q4l}auc@tEh&1Sq1P#yfMPJCe}^AH1V&>x~3FLm({?+Gkj z&oET6jTVS8snKHUhfLp&W2<%PH~UYBB*$Vo!~8RbFd)7&p62Pec$M1MxPI z`awPJP2?H}xS4gB2~IEe44fRiX98<8nm6|SO__6;zL^r6sOxAFD@yR+{HuAS+A_h; zzOYJJq%)W89{~R999&gp3)U@o4Z768K9KEW7>rK}0MloJe9%7&Rl9P&HH67(vMpw& zr(>o;0mkZewNugy{q&ejvG!G)&ri~#_DvRgSJMS9QPC!q@VQWEdf1h^PUTY}`z)Vw zBwMlu$yW-$@G=eB>9v>D;>4S19hZ=AtGx*66`H@~@A$aC{oT7ZW$iTwE<-uu*j^>! zRwF3qDn6XZktMv zIqJl>fDeEvwY5^L?zJ@b2Pk4JuYbk{J6C$ZMD6^zNnb4y0)B~V(XLVHyqTE!rt(Yg+^>CDt zTkXgel3ijhSG-cL&w9$2B08Df`9SIo?gp?<+2GI$70F`Gl4-H_PX6$%IE}On755$r zW6q8^B#WuR9?xw5+k7E2L)OhA?}5As6vFa>7#*Y39nFiFejc-H&)`68lEG%p1-BQN z_~3mT`?r)XSLpS3f#98c2UbyxAadwhJ}ueR7gl&)fn)>gr#VyV{HNHJ%U)^81$;o; zkD1C@Sb)iwQNVw}ztHDX$8{C+n!ST^Qr$IR$yNh^jLUDm!1V)o`)vS)1~~iaQxz;n zK=_v*c30F$QAYFYG6hdPEr<5ysC6*l68xRH-z@JAIm^Ek@LyoB)2@X0y#jm$fc{@- zm+xY`fQ4WB+Jy`KE7?za6Akd-3y}jr#fXa)`=3lV*4#)DTp(8mT-pWETN%fca+2WdW$@S8LLO_K}xpuj8pa9hYzq)H=r9uK&=mkaY5m3V9ez)Qw zx-UI`B?ROneq29DwKhR-r`v^YkAN zSD9W^R1&9X7%+aMw---eY6{3T2#s5oM;1?87)ii)g0`#-MK9a|Wc0efG>HF(-TnFD z0%#m8FgF%B@|BpaTR^j)8YOLA66!32fL_EEE#7n zZ*m@NrLwGjb=wgiY%QyyvZWOg^B5a1cjSTXxBSK&^FPIne}D_OC`JsSu#au-`{URh z%^ui8=`ck4Ce}7%{w;L=rsUi$bN&WS*Vvy4;J?du6&~1@e9nVd>4>>=GZd^Yk;N7|pd4ygub~FU`v4AltO`L1Y zg;ki|^K|!4jYhYQ$I@w)M>k0as@BHNSjuXY5rz_tvv3Ng`o3_MEb5qi?R_i+)~V~4 zZHT0ZtD0I|njQv6?moy4L<>N4bi%HgdFD)fP6d; zLm3htReRi3@N#`tWTA=nOifYK8R9Fy4dpg;CC-_^(mo~2(hFb z?a=EO?HuG$sdJxM|MRvgbDu6)QvlrFcs{eqQ%&+yEIWc7d1I^t`e6qQAx0x)7M_v` ziGQ>4RJ`=IKAH-R97OT-^RH~_gmu+CKjm)YTL@@lH4g1nD!l&qdD#mc64#pe?RqPQ(Q{l(r2FBsow>)j1&jlGBMQ zr>_stbM~6}1B2RWyxuS9+_}o^uSN_}uIz5-biuaLAthNc;%g)IWb*ZL=z8riTDa8Y z>R6f68psY^y?#-;4!UK`8+Ha6p4{18VkITFA9|208k&Gwot1hyjlOdNJO@WH!Q7rS zNfS92F!lRE)aI#92^nlRsKx0t6 zyg7uA)w6EFgCzHmiWvIvtvBZ)p7{Zmr<3A;J?jbV-bo4^0pLAyO(`_ zA;N-gD#(8-*i%ma*Be)5(=EBZJ0a}7+%%g#`qJ^aVQ2j3jncL;vo7ht474Tf+HG?x z@>yGYDrL5}l1a#-Zz@4PIKsrQ)mb4$b6hog?-kiOr8eoUJ3|PemKV{jPrg*V@0R?H zDjc>YdeH`%(_tWCUA`;{7`!nD(x{ZW71O&qFe*8s>qr)Zwfi&hNMTM1| zb&i%W+zkvp1n;5cTKFp8Dh@0A$kka^MHz~M?ry7y%z3}BmKlATFKi2Wf+$H2PL$P{ z)eR+2D6BS;V8)A6d1*0iR)AN-WK=9$UZUpzj1tFa?j6SQkHO>4O4#6C1{9LMle&}2 zZEO@hL}^T&!CBTd!p*wlxjh7fYsrykXJ>zT0s1v6~m?#E+_ z7#HhbA)lKP=r-U`fc!tK$Vk{p+`ndc#IzVXDja$ri_UlQVV$+#$ZQ}1g{ zKX!OFHu>>1PMTR};FT$CbV^eZ1J&496qvxsaegqe``jcIuuI6QFr z=@yHN%N{-3CfkI@G;u9mm%M|Gw45Cvy*w*!9|12 z^L7Ws6B9Yv{;iBSq1)IuS^5$?;-^OS)WV+{v>(y)=rLM>Xh*|_jWCEv_XWZJC^pxE zI(?LhExi=qclsu2O73ORaN9He(iJGA;J(;nv3~9?8Rya~b3}k-#m{_mcyli>)Ip$c zxn>C_K|)C>XnR6Q$cz3_Xyu}O@1-|OsCkd6#VbbqG5;af>4q!{q`Feky1|a^Ws!kN z`8UBer7s^C+m=e`MD6mT^X258hI6dTdM@coOS!hEZ0{XI?f>3Q04)c-~t>1kFhp=In;XS*P!=@VnC~~A5 z?9X>g%`y0PMO@h>Pxw}fRIM!LcJ0AA&V>M|T`T{OH4X^mFYRxA47gSDW&iSx`5
lHu zVdz>f?R{t84lu9aFtXzZoGx4TOKL*Asb9F>(ZAlH2Sk$&C=?1x|Iv$b<<&RaKinfB zPKvn<_%e*!W7gkY`B_Ulq9cl&eTTNZ_471J3%KPCBIb>8TG!rjJCq)EgKv0|BYnmu zc%->89k4N%#y?mrOic7-6usTKHseEjblDaYOTGXrB<2TSO|glxK1iWNlutNGOD9~N zIsg)jzoJZH(hEjh!D z4RMlJyc3kS?AdW?O7pOr{k;cyQ*AALeQvbZTs5k5d?0%G+x(^!!E`m+ygjs+Ywr~K z7o25~Vw^&A-g=%qtH-{>HDXEY`H}-*Q zc3L&lwx;yy)>Nb3tMDCK8oxmFf#5K)g!|GJCW5zNhR;VFL;3Bf-v7vFAR(oBXrN!T z|IA3SK$b(w+I~q~We{2AZ{T*;|mTf%R~%xCSS*@%ou-3q4r~pw*UN z=b~O1+I-I#U4nE&s+;YR^q!pr=+y?GSHH83n`o~+Wg_l_y!$2nJjR3IW4?Dqaqwm3 zT%c9nv8vtyRSXJF{_eXG3prf*-=d!?b)GVE6Ij?N^bXE5siR@`3_bl#wcor=tuu{M zNc<@Yeym4aC8wj>`VCd!RH?IuOl6OiMn{*FelQwbJcMlzt5bIDgG!J4~hB{LOf41Hb>T*f=(;|!|2+sKL}C6n7c4wfyT<2? zoI2Mo%z{c=NvTTtCe?WpVmc7aRa2vb<6kG{9f~lPNZ1CqilgXy=ImUmK`&gS8{yLz zrpYs{e+-@s*rY9=j7!Wmz2her<|` zvXhK#T8p;QuJph;nG(gf{+QCBHN5IJ|xQWH$wb?MLrYPU+m-=({B+YWE0X@uDo6S7?Zp~ZW9Oeq)zm4TR8J?)!| z$wof7MKc0zx2LKQ!o}IpKkod4Moax5L?cc3Py6s^l<@7>ivdfLeD!-zzgGWQlF1@m zTu%2>X%OTm7gm^*4sx*ZX=>qLPW)@~rW2`LUBjFMvUdN@PO$ro3vFt$L2$rZ7u`DP z@{D<1(YggQgopjfwi`?R>%l0Gk5dgBS7%_xueD})7c4Bt;kLDtc@M*@ef5ykKMs?f zR2Oj(rtd~?U|Y*G%~5!^dWB_QNUu|EIu#L@mJDvsh0SYrw2~yBl-QPtakuV#DYh(J znUxwKSqPaG%Q+~Zmz=X@3w#3dzM)~^;nA?LwpPu4X@=KDZqh$?{c6DmLTjpNG*LJC zF(KWUT60Y1ckXrYXMQ&C+AEMU5fKr^-5VqjTSD$Z_PE8+NS_wVd$NU%VT^rRmHwja~d6TDu@y+p`uwm=p8xj0svIW>c z3*Or=Z$&p+AFiKiU%{<`fC!4SoUaa!r`OEw`Nn|Q6ePYz4^^lpy+~QGCHt!6{WrI{;4i0SfN|7|T}YsP^TCL; z3pet9F1t}Vp6cTr``xvN!iSSSWcv%BmJ7Fs1M=IW&}sH4EaNPnl@B2A0CvISHTlUr z!L#qTBY!8&7FQ4}a+As#azz#8XUC!Jo(FZkQ(Pu>p0`~WQ7?2QGg>bf%%nWndoGc; z`XJX)HS3znnqNZ3eDx!LeJ0AtU2knsT5M~(?^@=!cix~Rf!v+iui7|p-YQT(!riJp z-n!BfX(mw3AD?@zXUp#47TVF7){73D9=5}%Q&T+@WtS|yKO-yTeqUFmswMex_D^J- z$~P8C_kDK_L4AQs@|Q6HxwVU~>1u2=V?l+*!pkAj-7D~V7K%u4)PTaV{>sNL+gL#vh(O-V$7)t=HjACc~(y0<6UDBMw--llm*Uy(YBu zb7vox1PiD~vW7M5g3Nz=BHFpWWrQb3*R}46e6;fHes~)K?aWRIwRg#jk)UrmVM)?b z@4^y|+;*=!?{)HYSf<(cWLGE>7?XDL+<0?ZQs{?pD{%g%yITIiF37WK=jChi-pSJ= zbnZi5V=BbLwsy7kiq37+wUhP1vnw}wdS@)lMM$EYj!mDFi|gv83SBBYp$YFZ&{#d; zA*tsBBWV^DzLrFSt_>36x)oYf@RFm=`5K4k!FO=46C-}2rK@VvzJMTY+7q2VTy*!B zZY*`gopw;F7RlBAAs+(({H|-ys?Y!6=WqN*`{EuCW>G3wGh?&T zfG1p>Uc8t}tc?egXtXm$hFJ%nC_1K(}h+{I=6pzIr zx(Q{2(-zLNNAq$u#c-OEt%Fe|Rqz=b|Jm*v*K^HcXTlzHh_% zu8$&DU~zd%QEs9$Z%)}fWN)VJl;&3o+vwm80pGpm)~?ruUE$`~lQ0ykY;9hrfw|J% z3Y6FnsjYGMF!V1x%ywf=+}rI3B`U~Q<7zV1mq?BJQxDWHK;LeM z=ri)jmTz37ysmLwms}G1X8F32r4PReL=D^4e#)t(f}xl0e;uyQWil4*OiSP9s1 zTDC&5=hq7w)`ULSt?jH;C8SX!N1hc6b*4gzW_3R|@Rl;7f8^@(INxvDG+t(`t9ykC zjvV`ORax40%hI@kLc>(zsB1xgbjFIG`sNn~?rh(zQOrkt9AZly*M=4?9ZqN<=ZDtw zp0Ww?w(m!%UIDN{I6)b_4dF50c=4p@x3&cy5J)_HO|j2P8xg;vEl*HF`NEeknBkC} z$?T5)fKle3y}BrVvy;)%Wwi;}k#$ZUTcc^yO7ymCrjD#sRWHz>le47MZX|aNyw*;& zaie?TP68scMX)y8S*+^IUZ+@D4waV6;hf>T?t2@SKmA(V@`6plSk`>(?@SSIPP%nvb*W#oJa6)^0qnsJSb7*GG`l5 zX|m21Y&=}LK)^k-dXPZxWCm8cx_+c=*i_My+}gq&tW906T2nEZhPNrrTd%q2?nF0M zeemKV36a*-kH~)dh;#FJJ326^Af?oGC;5%7Qq%jQy=o{6b|T^uni)1IoJ%mpTd<^l z-xxfSYrOP*Cr8y|NML#S2xFbz)a(4&J=Ga8$ZH1e#QBCeQSj^p*(~Hoqz}Of#MJ#; z+YitRL91#y9!vmUR<_>@9XTw{C{%;AO$KZB63UlpS)HIVHh!wk5h&A=MI&8LEgF z7Xd_Tnfr(zu9u)Ee6V*I>ZY*QRJl<%Ix&NFP(-L=K|fYT<`TLoSe){Ud`yd2Uy zc+oC@?>FLcO1pA%hoWO$Ls%~MSelDl%Gn3^hUuIp9J>u~B462ikokxiviCCcw%XY= z`wz(hQF4Z!yu3tV0DhP|Ti1iUB&y+eQcAT=f4-Gj2Xca9 zk-Sn3BP+S|&1GX5tb|tGvFBA}v>G*PiX?^51$~sUbV6*ZpP}CTOi9Xg;#Rfc;51#1 zVS}}z61Efe4z-gGi~41;wOCr8$5sFLG%$k$=cvn8a`l9PEa&@+iQ$ILOsREb^BVsG z_Fo^pWKlfIE?`p@tu+Syru)j}l^IEkAIelqqgW!TI87&gTg#>~mURWlH0vxB_2Z>h z;u7kta`4mLN(%wOy6zxL^*BC8Q_V&*rbd6jCgyC>Luu79zr zz4C<#Y0RKht~LCAXB?ef?4l|V<05_VULl+t_PiDKFN{!*rIq7XE(B8iAxHW)OgMYW z*k;eb^xOAmz2Wn;TAT|f*jrD!G@_1nzr5RL8*KbV%}%8SQHT}_zGSk0UY97lcJXq` zUK~PY{xPX4`DNqYww7zYnycV2wbJ+Y8gV&1HeMB!LZvE!0A?0VF>U)~y)#U0f+@E%Pj>b$U=W@Yv7;8!ujr-dK1 z%fhQ9EX4M>O9IT^bf53jl*w+n()F5(TzW6Ie%q>h2s6yPN!RyimAVZc5*@UYw=^oq zgqmOa!V=0RX=mMoMFs2*D+~iYFyu2kCm?$s8F&6mG!zeM& zPy4fcnk&bV`ZeLoRw8m)oyL1h9_1yhvdbfAJo_7`Fdk*uRD+9USeEwsb^5ve6Xw^U zv?bfK$UG5G*fL(<#S>@CDqpBsp+8Z=svBT)L-sQq|b8y7@0kCs}} zn5a}DoBms3s^T68?$0jqk^~OEzg$j!+Zu3DaS3lt?oGy{u#ORDY(s20IH#bh z{4i&W;4VEpxuz|#|4`|Dk05&pZav${i0<-wSn#kvEh5_cm2uad?zkf8uKmdxDLliD z16Y~qW1s&P>pDw{wCg>20QR`r<}S!vtoqHT-zF$pfy;_&QsdJa!&~vj9*{xF;s*w(XCzKAiC|pcqA}tkZ*OXU_g#F#hDVknx984951d2Q0nyir zt(O)V<(j2RUqG!CXT$O<13S0w0f%Q;U?*qx;?jOiIipA#(he(Y_#w)0Y?kW;jh_tD z2j6;ZK}zwyr@cMB6P9N_U(ofOn6AFh&yc_*?2|-E7;@wvzkNf?!sp=W3eSkSr{N z$^30Scn4O;ph6Y87_8u!Oq1%J?jk?tJC6nm z<{o1e&Rj6$y<1W6{p$2VUQ@f{o>x>p4;g0ueR&t%X+Ocl7+gj z($b;LoPjLk*ZXx|5@hi9rhf=H4mbSWu?UJ06=9>olUyqvm<=T%6Ig=no50P)ekAzp zLO=Kln&(&6nw2|)PeXtq=Zr<7Q||3qZ76u@c|^BQ!U=$FW3q6Rd`DDoYNi{I$I3K1 zvDp)t4amEZ=jJcP-l-*ktrkUijvb6g25b)Z1`Q#_y|vKn6?Oa6`RKFGIq}Z`SF6CN z6?0me;wd!iiNcOw6X3=L67py{FQhZ=#SsTz&1qjO<<$<)Gu19ca-E zCkuXABYrjt1m%JO1i#0T<~yGk=fEjTmYEg)yYo`@Y|2fgm?14vf76f zIm7!?)Yw}vjN$_lXh3+f;3RQ`zxmDMo$rW65YC$SQLcmBRhK((Bv58Nsk_~IF%98& zI0-T+5h{{mf_cBe^g4d+W(LH>Ue~hWe))VGccrW8p&A^njQU7HL(na=PPeSFCvPW5 zMaDoN<)*8=$hCAFT=y3b-GPt$6hp@D*4R5>ph4is{Pp9a0PJjp4id`#kBJfw5dpXO z05X1Yyaw2`3I%Qvl3gPOcy3IO|K+qh)w92fK0f1rZ~DxhwtpO?Anv3Q-jLJ8dkCWr zn0&Rj8(+5b+*%%>mya*XlNCb*V@T5#^xrIt&sGP2uSmsSr=@}_8~XB0-8oRzv5G7Y z6UjLx@S{|H(ZSP$7yshu)h~qi>@e>Yf;HZ0SI-E3N(q?AoG=6aGSZ+r1MyX8Ta zW{27h;Y!igKp}h>se<3* zNB*a2qQfIhObNWxr(0*-?9@RwEG}97SO?QjnN1NWA$hp3@XAodL#7t`%Q}s@67rNj zeo1=&AZlYJs~}$)S-J7WMXnO@mGHUnnZA@gR-fg@FF}ob1|OVR>B=&pjUIOh{un&v z?Z{UpE&Rvb>zt@=6H(&XpPpNtSV@3+XzxqL(Qe}gz-$_Xly*N;Bq*oUHiBwOGu^){ zh7)u&UaM}1`r}2H4~EK=nU{xl_aspJ{(70G@|vl()TBbkU*glYXce7C*1q!V^{+|( zm9)d0($}})PFT_Pg+z`1q`A3Kq}JxM&qr+OfdS2GRzI?O>b&?m2x97xTP8%OlK<5w zr9V-&cxao-wb3FVwl;ZkSMgi=HiGy(CF6#}X^mRcQWD3-c+-A)*+5s!LSHe=E!n1< zM;qyHK);Bj0*89vd539>x8HS%LEcqSE-Wq|SAW$fuTOc&J0J6MEbP9SXr+%yX(red&+E3%~DT=2J|rS021KN z@cGpLTs01PG_T&%{s@(fwL~Fr<$!Ee7g1gt2)I? ze0(v1om9?))E7iMqi+1yZK^NM+}IBfV-5&k9(dlJ_HI?Mj5ghPFpowaybazk)9#wN zf@>Gu5+?ZB(sv$?KYMX%a{c@rFj=%Ec>Rj-JvB;Jr5+Rpa|sZ%W^wvC_MqI9oG{F* zLMKrnK2zD9)i6Jhl)=#`)rY(%*mP0j!{CcM;&+?fc^5lX=#{>hICrmmtJYQNsPcBs zT?Rsqq%Y4a#SbTpOQ;A{krL4cSoC1ssLt~NmwFGP<R3xMCS( zr#p}d+V~XTFPUi-B37XivV&o#es+ytZo9MiGhV*izNoe1;3-4va%dYzR6T>GoHtjQ&oj26jd4V4aYl9=(n!LS78@TZG zbX~aJ`FFRrk?(!A^8*0DQdlCi~5Gm%tEIhO9aKLVugE9H?89d`+xE(&)h z_p<5b4jea)w<)c%34hamf`6c-R=+*? zlW`#LP{3TLlpx1LEvgU~ji9YwW?1s46&rU>pXU=Kjv@a*!W11pvb@JmwC+JGWA!rS zov-_A&;cR_!TLmcZvE<3KMkGtn@-zzMM`93$8UoRIbHHlw@Oj1X`w`)cbtAw!Il-c zFAo0NXm$5X09-0K3;I+$td8oMi;EpuYmfq_$?RwQM*ec4<1LNO75C<5yQ|@|p7lFb z%;#KOR)c>#Tnh~qlnOMHRrubS>cguC=vU(nk|4>tKRBKjbZ`Tb zsU)J#k(_t+f&}36OlS;KGYgLfVO&%jTO)Zg#4bx_t?~U~2Wn4CrI`{;bq~a_QY<18 zae1?FU#KroU-^|uYHRi)({LG`3&xnQgd3Wtx)*`9&JeUP9sa+)A$4H)74A{aq?H%i z^&Kg_y?+Wzsw2cRB-9QCR8C_(uuyf1#C-RX>(+koO}^YwrJhH&b-`j45acms^TO~= zWLLLK?CpPsKgBK`jR~rmc4jAh;&io*t6_EAp5xE+?o^+HKbhg!e^^lBPG65RJRgT7 zG4IPu3h6MHc2jj*A+q3`CtqDgkw#l`j2rc?6|~e2ix!NTIpU! zR`;JyY=ct`s=rD(^lfV-5`a5gw2C8VNiIGcJLVg+*eG{Y$nA4w?qqVM2Mt*67)aB| zH#!aw@Uer%);qXt5`_6@pDWc1ATY5Fj#gV1foR2H&g|S`bjCr_7#yQk{r5pmN)+QP zc}zBQ(^zz3orm;e|2i}WyVzyr%c4v_hljT4X8oMInWNgXXUpB+2f{@AHS5==&eZ*^ zf9^Y#xZ-{*y|H+s=hR8xgT+s>xEZAkN32nH6`RKH$S)S+SRjMyAJKR?a+U#$I`hkf zjB_>zS}I>09MQy_@I~Uj=~rJ+o^Lqze}px$r$B62akMGE23z1+J&>yVD9AmnJ)T(c zMLW(-r#wAn$~fs-FpTTckk!16=9g3W^dwCnn?nR8>GS6)@<>w|lq7yVui?xP+w~lC z5w6TD6b&OVLrO7$4Ua)e&H?Km^p|CfiXMyr@Y+pmpDbzA4@uck@X0;Xo}u^T6p#kxr1ERgzW7IXC4HUpJrG zY-0Gsr?Oo$0@qC(nxw4hL+rS)@bf!X7D#U+uu)NUd2s5I!?Sx9`o$;^7C`~2Qh4Kk|xM9;u1cNfMM=gmqgCY?IGe9@l*eW=r7--k_?a zWB(Zav|?6HfixQj=iLF>SJLL$mt?ARb2gq@4MxA^weYBB^U&5W?ds)!Uf#Rzqz1ib zozv5mjvL9lAr(}dbHKVS9mIWYEY!B6b>J%#&GK<>^XsX#4yAw??vPKVI(Ti?et5w^ z2KU^qic)(a4mZJDC*VIX?Bh*oFKNFYh0LMUSt&4;K%W;gZ5(dH39xx_~g>K*w?gF zh%VE#SH#YEq;$fdboJlKo2E4x{K1nO1{QU?GQpjr^UXOG)efx&*ej1kdmlV9X=|`- zD;bw;+%wy@xCIIfvgjEnqfS?aKmiV;2S#Am29SfU^O7*s-F3l2GOl6b({F_~a0Cbb zD0!)b`=~Z-urBEbx`{cT@VgfpooTWawdrrDM~VLlC4YBCg?pOSr!$qv&Jay-Gw)`} zn?b@D65CrNgVT)v<)n0`w;=`Yp%c%(L~!BSyy@yLu(PCMu07*A(6VD_T@(%r44K(Z z8MMtcch!M%40LD-g4l>#IXNvRX}uMXb5UnjbwibORVG8CaXmmL?q@!)*mq&zl0;91 zZqQ{uJh_zp{3_wBeGkfk+xu2 ziuSBjRQy>)Y+OU1H3Y5dFgE?pP;G!=F4A-zVp^?*WpyL^0w)W{>axi$YXcc%V7eK+@}I~@0b++ zLi0)c-Rl9uaK<|X%;Y=-@`#ol6tZ!!0sQ9mfd5FEpA)R4d`>oTSG|)!R6G*pVl4mV zgtt3k+cp9Y&pkSjK!k4|@mu?t_&>EF$c*8)mpJmD?;ue4a{wfRzP(5A67K5)%r{?s zAW+B40a5+lh=gf6;0)X284!kHmhJB9`+rn6*1x($<_U-|kAWI69&13eGzR{fDE+(m z^J6)m{*h!BLfg_s(S@A9TyoV;_+Rs!v+oQ~7Oa|NTb_W>>debpR9cdW{>$34Pag*N zXgxS1gOmV8$!p-@fOa0iDTt6Dod?i_vp>Re&}sn~=q3Gs&2>G(*Gw}nL}d2GemcVJ z6X+jU&5Q)FmD14)*|Ly!-F>EAC7=m7C;g`th(0|{_-O$^*)O}80F(vW?Fv89o$-E+?ATD0#YMBIxq93vB&BmxG-}&^UO=C&`%@i6)DD4N!xR5&VO0J(# z5!DB(GS19N|A`W2M*)p#0hriFmloj6S5qujNp;AVmW220lgXokh$k8~zUw6dy6ehZ zpNDB@Ew6x`>GQq0p{>&$DFKT3qF#z9Y!NCHp^ckP{8k}+ZTqkNHY*;m0(pP3TL68x zhs9C@jluh6Lny$X6m9vWA0g%RL{bo#Izd%m^hV1EH;p;TM!~&3xr|FLi8L=MPDjVr zZoSR_Rwk<3LQ7dMGSV22&47{_H1<~DvOs?P558`3&!<@}2$r_voT1sLyMM#PXh?F30M^kbQQ1hIuY!+4|M^p+%}o4<`h57G=1>vppp80_|qd0mR0WFe`3 z9%ekf1IipHc3QM$V`37rc3W83%}udV1QVhDtCv8IL+7unGpRuMM_?JgJS}SaVUi{$ z(9CvNRG5^-E6HVx=mR9N6)i2=;Q?JWoSsQm@I#uZxBeaXet{(;1e$$wUzZJHC`gY8OZ<914gj1{5{Yh z6(mnc5ifY5CSS2WvT7;GO&cc_CBeJtUO6hRH@1uoGLhSYDp&bIhu37-tX>B9TuQKQ z57ef)?Rt44i1{l$SuOuw;PS&e2km#qzVo#s;+PWxL^%q)-zC|`#Pvxxa^;;Oi?d zx#^3e1?As<@DK?W(6@Q_hY?^V4`BdizrU}5J{)_EKOj<|lO%HvY&TPb7Ylh#{o5~z z0pZRRZZsfIp-?oQ8$UN|{2#*GD>h*@g4JQF1i>nCW3z#1KS;jxC zmkrD;w%uE3aYWtbxp`6HhAmYe#C=xk{*L0U?r(q$`sRsl9FFp2HQ8meV3?)jdcW;1 zIz4Ui3!~Lir~p2Q$@tNa43YhE-=CrpfH_@kje01Cci1Dq_c*sI_ssKWnw}xC$!MUL zPnPq(vQIp^DncYuYa&o^&ybC77*Xpf*!AR8_Tny=ADAmbfQql@^TYXhz+<9ECXaKo zCEmJVEv(}H`|X_H==*+xTi(cJB z6z`MC{vN?FflvV;Uq%*1KFthQ@O}$C#p_JQuk4(JecXGB?A_DR-!nOS_>0}|AvgC? zxz`TPO9lz5@7F@_Ir({SK9UId`=Nrusq94k<3I5S%y`rTf3=sFU+|cL@zaEj$!fIO=tRf$ij()Wjv17>woAET z-NcZSLqnRK3uwKn&`h&@G8+iJPUDFA&r?)SI9Y&;5+za0Sb+UgFtC;KnaT^EmN726 z_GKQiFUo#N%*Z*=7CZCN_Mq6D$Mp(FsjJSuKDN|)D9Xsy=` zx23059bop@+n)x&i(&-kz?kF5v0CvebZN(#lw+6{<>T- zVd(oO1%JkBh#s}uIkqyGc|=(%xlI%zU3g~QY|Nh`JOa5`Yr1#l)N}d7+?W3_F)?{- zeDYR*`5ywHu4vq5_tqjg!0J$0zy1DPb#zR3gmUa+q*T|i0j-_-@}C@-@xUd7u#T=kaHg~6i#aU_Km?}(dgzv_gWBIa!OkHQL= z$?UWV2pJ<3lH`@?fw&YyPwVE!9b`2q^SCD(!I?@(oFUcg9g`Zb^yB;~h`kGDL`jIX z?#Jno@Hj(Bc$nbB0}*`GA~en0A2gghqpD%;NIV-gG!x_E^qG@hJEA-X)iG0ffYh!2 zp!dLJ0TTD%JgQ{QV#Gc^rj&&f*-M)-3g(-Zr|^sObSoC6VAuIg`=>~PZJ@|4i+T7Q z1vD8Tnk_t}Y}qr85t%v5z#T8=bwu8Hv998};8K>C6DqF&ebVlJ5wTpRD#MmLsbzMB zhm~hUPUkB>-~g^<1UDFEX|)&nZYhO)h^g4;yEv<7)0QQV8qfdsSDRO_Y@v$S`UxfS zzCi|I)wZ;P9LgN+z~6&4#Kc11aHsPFr5hqgYeCYM_heSMdF9MyZk>Kvt%h;LU8ni( z+IyJ+cHguOmdwnZeceoQY^dJ*>3#0yn75jd9Ho(mE6VbN57!shvnyL0GO#hPfr$9m z3iFwYm;-Y2g`o`$P|o!-@kE~7FV^}!=>1mP-pz1Tf&sCEg}37F)uMo081j0OXfP^j<@y70`yTW15iojS|CP zU?aTkubS2VALv5xR{;t?=k)j^{9o4!8gkq3cxW95H6ooE-_MYYy)d-tz74Ah`*3Nm zIrx)rQ2vU`gZM1T7j3r$)~$Jb^W@}Sd|KdD@6ELdxv7Frv*)N*!h>gzi4d`Ml4#K0 zvi=M&*Sm<;xDTf{Bcc&HNTM9g8K$Ocwzf7#7>yS=-gd@~y(;M=^G1UJD*e}9hC z{5aK3n@9Q?zs;1uBL}*4(Gb~;-2V)uBs*)6>e5-NKtu3pW=_)2kD}B&*6(mYHt&<; z%VLzgHCrG{4AjrgN2oIm4b2DbejvBZGYh_&r&aqi{^+x@cxJk|=G8JWNR z#IqJ}51!AD?j@^@_L9q6nzc0;buHe%f)>%v1ph|Pl#*Z*vD)m&+ub^XPpKhnylrli zdMDjBmv#fg*dSy_!q8qr()S^oVnG|1GIc3^B5&bU zFKOTc2}$?-_-Q$WZP>Z0v!X>*Qtgcd_19VtcZd(?X;GafSP#(Q~J3IUI* z)Vn}~3_CIF{y<36emzSmpCtO#2aL*leE7ugySz#fcSCw@|6bpIX5QmTPD z`BP0*l3oaX`GIe1N=&`xxm2;T#h3JeFiV+GeK2F?Hf;uTa+|Um8H@}^Fts&u?->Yx z%EbR~H|r?)RKXvctPnbSH8F`lk>RK%)aJFOZuT62D$SBT?l_C$6hg(|EA5}dkf{~x zx5NbaNn#l-VFp%}`-<@8(pX?eZ@RHTKJXCy-5NqP9-?wt+Oa6cyxHs$Fn(89_R?WG z#D+Y3g-#S+$vk!$==0A_l9Ybx(48&aGnSEIDl_6)Qg_)^e83c)*yxH}E6Hg-ZJ z%bt=g^6tfE@5Mk7+KYM66$!kWh2p#Q@AdX4hh;}< zWdb2ri9F$a8B}81ILe8bfH=Er4EVy@KVT2bf ziv-HY1~xrG`6%f;uNCiLtXIbcx>W^#+902_UG}5^0yq#j@>>9%@0VAB)5^?>zyE|P0Q%?4 ze`YfQ18a(|2{y6z`SPY>*=-eM_K#}JEd9ScuPCi7%a?lAgZ5K!P_V+DP2h>cRANlw|ux*fYN#_C>Qd=I#zU})Xh`oMVfmuP$ybm zsP3GUS8`ZUMFY;fsQ#tyvPhkmX9;0S24JL6b~3=@e#H%6XgjBHy_?#yU*H{41$wk| zYd%9j%-Y?PqQvuocRIGA17`G?O90BB_{D?ppa6MmJRfX%{+IwP6o*YBP^_a)9(8-y z0(_BlvRt(N{1MrBe1rjTkjwaa4%oIr7I#J-q(;SC z_fW-c@At0|9Fj}dOH(2ysHWxs(X1(Uu|-q%z%$Yh4s8jq7aOm1F~O3!xykQbBkNp- zIz2JDea@`N-6;lSW2Is&{P}s&m8Z4dtah9 zIpE08!AHBkS?9TCW5!uff9d3T?Q*I;*6YT%An(ziK0lK`OfJWA`~2%{g|vdzh&dhN z=~9sq(f{`L>H~fUxZo8)4&S)yafy%n2kBrP=YmyCa~W`Iq+&`;mzD}IRO2dBaypFq z3+j~S`)!NAjS;3&D=zU%o<8u^1n&Vr9_Nx0-fbf0IZ`LeF(X;voNljE@x4+Ay+Zy< zpmgP(-t^OczAg(Ms@awIS6#H1?0(LWrWT~4ht@M&+p8{%EQ*Aj86sysE&GxYfbEnr zhQ7Nj+^3$k3rof>dZmlG-@@6lCrds~j>A?rcW`dy2bNytt}BHVn|CFZ-5OaQC;MU( zl983|tHn|5FxO79znIkuZs%FZP{iY-22$U!BDi{aXOhbCY?eKt%$xe(bs}9CdG320 z3QJibx|fZYJI)zPvr!Q3U45`=gT;@L+&^ya{Sj_vP*+s(!+ELm)WpFpgiVAwYReWq z*_#zHAgPXhg9LgNyu|MJ$30gF*$htVdHp>qD9WRldo0Z1O5-4*i|h4mv|M@LMZ@cbUi3)M z(3I)D8$cVd&y2hRTHg3`&i@)`R{4*9PCjJ}s%j>E&{B0B&6lJ?bGO1IYc77#8)qeI z($rO#$oFIz_oS!I#MSs&h_l3>v9-@}H5RqN1G2 z!Q+`YyO5LY{?#!wSKL$o=fvFCwNjrAneY#)r8c>LzUlX4NK44+CC@Bok^A(BmNs9L z*W(VpR{xPmK126JLPtj+!Pc@!6G&Pk5-rbDuX%@P^-%VOO-ngba~3CbkkgnDcb{?C z(1+GwA@%Bq0BQ2HPast{iQ0bP05I=3HL_-mN3&juV}Za1NEsC|%^`h8%7{Jh(nLo_ zC%|{?FJZu6`nz35LgTt!rC`F{@tw{u!O_(|uB~Xx*rBMXr@hzaUp{{v-xigHzJO}# z9Qp|ac#wCj>$lJPl*Vl&*ITGiI-e!ut_a&26rU3}FBW`s!eS+5l%CO2gSVrXr93!= zB-MP#wFAa6AaMhHu~{4~)g~xH+9Z!CU*-qHvpn}mOs1jeNsToikIik8Tx~)a7qyaT z=Eb0aY3;4CP5UVN3)E0|i<0DcwqUK^<$%J7K+Kc0?Qbu>e=I4(XPItYphxHT_ zhsRc)w7RTMF|HDa@Dh@&VZB&~gbUG%dj=RN0qKhBTy z{W$B-T(kEzd!B3UYpwM>_kBM%6#5B5$M$GBg-@s)^T;fI%CIA(yq+ZrUj0$%2XVwN z=`co3w5de?nSKL%FXpBR&6E+}UgYCx45KKC1~i=5ByZ0e8vSM#pO+x)u2qehob^O~ z86N3?pYr8J&Q_pJF2_zMYe)Otyz1zdM@YrjW_ofpiYlBr-tmspNAO0W$I~foVM%S*C$IX-s=G7tc*@Dz z@R=6n8d^z}J2$MQ3&qXD>+~X$x)a$GZM$maOXU&?aPc;2+l_+ic3Hkf-*?Qeg@|ZD zHX)_9){axtlUD_BcrJR+ZCi9&Uya|krAS$&H+{_hN?k`6@-k+H1xLNPw}JV&4L47_ zr?hbsdn~nmU1cK1`)f(55v=Dsin&6@S172*Hd#5LuN%5Ko82}Q-^JwAw1xW;ujPMG zk^CDy{}Wxbb^lItr)&b;y|m!fzkr}=frm6ZbQZ_K@aIAPswAA_q$g;^*jXfKT6br7 z2Ld>Yq*nvE6X$WdC`2+yohz>a79C9W>Euy#IA&r9uDADYo)4w?r3^|iM2vt)U z527|_R#=uoMh0sb(`JYL`I~K@TuXW_=nQvC_vE4*f-ZN?t9RzxwC=`2}D$FynOt zUji99)CZPAWU8IzBUy?YZyWXtFrj23M#s7jNvCQ>NfC8Jc)x&LNuaBOH7%MKOGkbj zzs%F3{3p{(mEJ9DK4g_Xq&wzRrJ=aW)P59v-{N#?N&!I)EH=RG<%P;;gU}fsAG?}7Vs?gaR^mRX?Jv>x6d!L#dprV-= z9OSuCSqEG``H%$Q(~87~&E#udeVomaT4r9M=qK#tJk$Ybo}{(Sq$JZK+cZG>^8#Rz z?7Uw83E=AF}B9Jh0p}lkT$6DR)nCWQYlkJmaNulKJgS;sz zx=>&SDa4s&5kSnqAe;l{ie2fAZQlbqDsu_)B}F-|!HfCZ5sc-2djEQjd=C&({%__v z9m1waPqZPwQNi6|^*X5(zL}bIOJ1YWoFrUHwTdC1K;X8?Dx{b3xUuQ!G0+Y9>{KaJ zSBN`&!M<}+iC6rtkif#WGwtc6Y)e?2e`$TYf1euY+yIrXf0I+nof3@_6$T($O`uMT zx;f)P>wK_Vii#6f-GFMpoo-Y)ZIP0jN`>X&L+or)Nk@_UYm(a#+q(?VaY{d&JBbY_7HIG0_{n#`1 z0B;O1Jwueq)s|L<33apdli65S#{(%>T~}l09W1PJSoG3#dEsY#*}2$$Tz4E&)%P%;N*!J9J^ZVASot(OZk;fJ*Boom$pH{*mo9(R5B|8twZxG3wl_6lAsXwV^y4YsK2cYN~66d zH?))oHs7AMxM08!0p3E?IaJ5n;_Su8OhZGGm4!E2;pY(jrZEJ78CS7S^}k2NV_;GA zz&lM4+H6?dEAsEma4Ore_eYjyr6=p-+;vSm;@5A2#VYR|Fl83k9mImyIkI?r zupdYY&4GD?AK|6X?mm3$87b`crK%)ueqK{1-QP1VuQ&fCJrH#hCvxkk|hl@Y2nem_#k@oqti@(O4 z@lGXdlbFTTe{!O|R+-cwOxG>eww(Gy{nur@V()e%TnYo{`Hd{W<{kHbBJLcE;p-w0 zUel5!Nw`A$ZidN&;vT#xiA7e^n~E9NIc?pXD_Lpb7`$iWk3YNvtkJOWx6#o|lVmd7 z*R792oRc;obT(O%|DRQUPeMXv_(TNV)c|Z_oB+>DK4^jQZ~9x&5a*pKfz|qz{DG$7 z_{aPO5kk(x5F9z*z?~lkcI}i=t%`dYRjwP zlgRzw!P6zjLj}@t;Nf@V?LzqPuZzUWSxnT9MRTB<2-zQw zg5b&v^IB)9JL3>@G*;c8I{QoHX;3uS2T(PsbpU%#Nv^mM!mP0`v|W8^sRC$6rC4{W>y=X1#`e0T&JwH(xZz>yX00^nqKt_WeXUsWch-pz8foEF0}ikRK} zW(DGBVNPiX^E|lUy=+mnTrI6G;lnGHJClexwDx zcKr_l0S?!qriOpe=Ca2cRQhft)HP{gJf~B2M8BtlpHshdY_NZtkn`vklgN}Nk9Tk+!i$FAnLA&~ zd}?*FR38F1s*bfnal#|-`8g1OkshNRWp zike93Ko+Ad5QR<^0z2Sh^2pvlbK;YIs(K|dZ~A$-jFN@VG{VsF=#5M2_Kn*0bJ39< zRWeg7<~WDvp>FosCmp(=7c{pD=!; zSI8U>QG)baiN7b-1UJ~C(tlfy15?@;-g<>un|$L~K9x#N~|li+k4l$<(z= zpWr>`t!;~NdiPy8n76OjS5G3=*pCz6Lfr$oFD+uF@+|Ld82{)hu%9`GgRN37MJ$Vz zI0*q>euDHy)-EZsau#23I0h1+_Qvi{?93yHwbjGp@gBGbIV9DMGK2*#pr{U6E8>_s z0az}1q%2~VH?<^7Kg@=P0=`6yEZWzrGzrox5+!sbpQqZA`z?VmDi~?qSz>v4kt#6W zM)Osf!n*bH=Q9Ljma@9=@NWuNQ_K-H#S3fplPy$nYOb`vbO z#+FT1!ONnU4&0^WR4>`rUEij8&La7EFl|1jpF_-dW6iU?^ODz=l{IK2;HQX_JblsA zKHZ{~`SHJs_f3m`o0*nt6BU9>(j+!O)+rulbZo~7ldyEAU3@LncoZ}O2DJelDvifQ z&}R)7Q(eX!EB;W_r?=O z1!;{K3`fVmIdy1(G?RSPHt~$dv3Z9Ul0qhJ*M1`V09LAlJ^8>+Qs&mCj1r#sg_J3gsuGeeUar)9xaP7BeyP-C{QY2vjm zcm#Eg*DM+vM9eg##WiJ2n`5_Pi?P_80Y2~>1Cdw1i8&`Ax*p54yK4#y4NKTNa@b0i z5Vck6YlBF)u1wk&Qc!xw*V=a&dxb-uqX;-g{X6P|JRcU}&ur}|S;;ST=1sZOhsH%vogMv{@)>l{8 zcBju!yR2=;Cws_aj5)+=4C+PPXf`*rHB)%GNMPFCmS{Q zui`jAVd#zR*5z1i#cfcc$#&d(mNs?n^qQLC zytXt0)55!^guv(a52}uy1@kXH8+H2*rq9YPZC+xo9(aiZa!K);4S<+}W$9+0e=~Jn zGX7rY0eRc#R;TT?Q{om+=b(Q9s&W_YBtR2CQdWqvq_Pz5;4f3W9(GLBaa(D={Lz*| z&V^sYtY953!Oajc`(nmXq65OERJ&dDbPEpdHtvi#FF0KpmSp3uxM&pn4MJl!pDBr2 z9-d@=M;LM|-gC318q$;gn;uBblZv4nRcD40Z7!_eBeRp>`;~$;Ragl?a=canG0P#K{uRfR>}yPmJXcMChE=Oy-C$zbS`W z1&J>AiM?H7N`@xp)Y=UTyR2e6Ba)KbVr={8k(b;3rGAV};^TU|zJ|w&+bbZUAT-tX z50zW4ZQE1FJ&vJv&XW9LY|pynZ*`RY4btda?8s@#Nof(H$0=7nD>WM9#&F2bc1$J$ zhGX7hTe8|9S9>Y5)^AEVc)sg%HbjoW^}++Ae&ADvGv(1|(Nls2Vmadd1laX3Uf(O7RrO1LN@ZJBYL1m-;HG5wXG z(D2p;*?B-{^q=GJ-5F2}Q%Fm5VgZ_Tn)-xm?QV#The}Kg)bhQ4m>J`K8vWWQAnxOl zsC#jX&0{$F0!LNrgdXDc|LWmgP6-YH$V*}_tE*1wi@>D{T%plu%cf^i_oivU zmf9Ac4GF*){;W?OItrpoD)y9+2Guhv6};$Xun^83+%SOD~Z~Z z?A$(}L>m^xF3iM!&Qx)ipTEhIm?fp{4WLm6FUwWtC$(i&O(k4&LchPaK7OyyP_eel)ytv>^vAf6u${0groZNjWgOB1 z3iNG(-rTqx{=qX`xtAdvsAST;{}^q((;)+8cbduWUJe`?>;IHdQCG+$Dlq=dD)WCq zl!D0uPM`pPMd~A~^PcthiT`)W`E7QsBF+T$8Vu0>31VVu;!V57uK9O? zcOFI;v=R2V05u$VNcx;xraM+{|MQ<4LM655$U%xrXaSGA@jU!AIAi+YvGrc$5IJzQ Mhg!-d_n(FS2jkBrl>h($ literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/vpn-traffic-rules.png b/windows/keep-secure/images/vpn-traffic-rules.png new file mode 100644 index 0000000000000000000000000000000000000000..fa7b526e8014594155c0bab17c01798000fe7acb GIT binary patch literal 13764 zcmdseXH-+|w(bH{5Tyx-A`nCcrHVA^NL708y?3NTAQY7pwy~)b^t~HIS0(JcMndA!I^VvEBzXK3>YAQ$r75xmW_?=63&s3fPKvn#;Q;W;^{i`pZ8+ZZ$ zdHcmikiNUdTSv_A}j_4tQrY1_5n@lILW!?bmrfKkO*HS4L++&~=|nz$fXp z`x9;{ebkRv35`{DoE;zdb`wJq9(=iqi*PcCE3BO$oJi&VC>wjAXj!^hOt>LSNH_OT zR{=VrUuaET{N_M9cH_DAZ$*yY!uly`-ce9lL_1g0K=;h zZJR{7#;eX5kF)0wbJF29^E_s@=-=k(b^09WW zSI_Jj2(c-6(y<;sa*HPz^pKDSAY9~$!`*E`Pm8X0-U*KVQenZ=*Rn$mUJDM2uw9Ol z*irB;tuiH12S{qp_Zxy$#?^4FVKe^e$^CG}VPj3LEB5x+$V~Q3)2`tNaoy*|13y7@ z!!lk68=sP`Kl+Fb965NvEy$|mU*|oz#AX~fcsn;@HGvrB#7A!aGVR(m**&^;<_Q#6c=p*TeTAdWs9#t=f4bKuw&tBP?^c2WI+qxprh^1@$1iL6_akc=eZp?8 zf@Tapfmbve_suoQJrN!uXD7AUsElI6bH&quAnRJzKbAv>{uT6~A z2;qK-U3Pxy;bu|#;buOynpj~cA#lrHjNbJ@Q8)MtMDwBEN_Oyk-HI9HjKl-Dy_(&J&GwctlPrk)LQu1L93Ilr0hx>&TCR4k66}wvV49p z#cJyJJ}d<@t-9Ze^N=|AV)Ru=%nnu&zt@QCj}Y%d;q>b%_IpS74qK$N8`hmhV|w7f z?Zih)`VpI|*i}he3A4bgdiF)n&gHGM-MyNC^RCrW1xcF&8%L}q66tq4YwRYeiOiVU zx#`K4@40GhRVQTiTfmAzRXh?E~ELe`*V58$G^Y6ad8jpxO%JQ3)U9tKeu<9 zM4Xi}`J2xiloG^qR5!UA_-q^3g=EZ?JfcIW(!tR)zMI2Ht|63X$^csB_sWn-(@MF} zOb+q+wD^9LZ;*zB8D*#+8XY@$R**de+nUHrc66JJID3TaLV(lGeyPQm@|qGIQ%1S% zqO-?UK<|Y%y=#JJUBS)!WKMaO#N-I|dQfb{SXQN}mj` z{vuQJUbQy-yx&G;iLS>ie;w`jydU*QOqgNAd)gn{wR+a%T2M4RYq)x#&oKAeBMUP2 z#`@*%g3nwxLDyYNSV~=AmxbFTdPNVEH<^I7q1-(MSMr+$WM$>AFZzjoXL=;A;0yKM z+rA49g};P(m%E;5>t+dcc40zD%6}|NBAks&t2>uBLaFU)y=Ue0N*y*c{C>HgOuZhh z-A0UKddRi0ejDpEo3CGxd|A3Yn2`+0$&C0uDmNjsygGR9e0in`R{u)k9CX%lT@5ov zA@&?Ca?W=$!uXae<&eUo38J3_KrjKw-lZm7>&f?sL)1837G2d6yM#vaTrNUAF6f}Q zMwCVqImLXIp<8S0yRG$vS;T+sPW<5bG`4vpj)co}3(F%`B(Go3zIJ4(18F#e{MruK zGT?{_5WZ<;i8y%Kvh_=05p0IjI1l|gV%bACoGq4iaOu|p7Be_r?ON+3o55G{(GB~7 zsbXw!FnOeCT_(cS^>$}VKq?a*-TD{Nn&hab!QHsAfxTI596iDM;D+RBWPiW%A^-L4 za@4v1*=4ZJNrcCE?p==2nJma#_@0p3&`kDe<)TOVl^It_-Mdm|h0A77WrX6_LiaQ@ zAS)o&7G*nRB;C5ggtkdfyeXuQy1fN_@WbF_0KPuLH>LujT4?7N2jk;OIe2)YR}!3* z);G4oeQ-|{^Gh%xKs1?l&h|_7rs$;Jm+1|7<6^^a$3fHJ!!@|5gq<qHY;&jI5zooNiN%L$1`LHu`gG~@@JSOhR3q`0VP;QqiTP*~Tcgh5 zvo4)4GY>2%%CV*v)08^D2jY|($zf(YO8fyM*cG!gQ+e)ANLI)BuD~%5wr>{4$z|-# z)dF6`8gZjReoZ)i_YjH0)@!PWEQy!1jECP=A-+D;KXchhG7+oD`qqu#h8hmX>1#2; zPjXCXNBh0eO+Mp6bwj;X`$*{0u?!_j;+yJG;C6bOV}ufHxs1*Z*$ibesMi_N^^1oU z5ZwuXNG~nw9--rH^RoU#-XlsIu;Rg`$_j|ZcRwDozL^E#-I0rdgf9QL9c=~?O+3* z!Fxje^=xMwPL>d(V(=pI!(mJDlgdKcm3swUq8P{yG0m*xPJMI3F}0~H_nHcB9lagA z-6|P)W^-0NmAb5kP!Q+mOX0B-daV+a5hgjlq*j#a9W_@wJ@&R-A1s=@C?O24zD|;b zn5Gy8wJiAD?#F;v+k|{gcn}5<`@`GgZj-CTYyJ}NajNHAE{EcEjw*g<-@uURsaVgx z2uWxmCj2n|^-l>{bMVxMRqJCPw}LLDG2c5+U4W{)CtZC6k|?cGX}b zkiu<}qURJ|i@JI7S$lEI$MQ?Fp9&a7jVh2#_>1Z*h?*coYA%}y*PfN>wWV;b7i)0m zu12x(u2R4X;(R5u7ALF@gpAy96m+n#c>l%3-@Dfq!yL|)_hg#=i?2mc=ofW#whgls z0kb;y?9Mf>li0oCW@|Q+-I+sJccqMW))dz^PH1@rYLfS8_8$Kn{nTNlY! zr8GWe0%ZPQ4dk-@qwM#=7>UG6xHJu5&bQ7Xr4U~3wid0h9cuyr;+O1WZ*W0Xo9O#~ zD>?pHn?Im%oCbi>+<=hLNY*qJN7eR6$@D4t>|yRu^^7#jQ)?gXI46}bm>@F^fqDK4 zQ_kQ+xe=M0@m-6EgU*=KI=T)hi8=Y4ZPMDpBlaluD}X*4yg@{pWX<^iRKQkP{86cw zoqyK%hWsOzU0>S?!~R)iq}>e{4(%*ky{af>)7XQOq;{_=au-uy5M-os^uagm`{(t& z+ck!d&|-(K$R;Kn!*^G*z^_*-9rkH*YKQpchTNlzJo(vs1_w9pM-^#TB#tnM-yqN{ zZhzFxu}Va&mHGi1?Gml9NIqwh`!Z0vUyp0azS%tZSx{o(@UGZz7H>6uy@&J4N?M_v z?AGG2n;q$LsR2(uDYM9TTk7-~6?i!QNWB82E2$CCGcp!*cRxx?`vK*ZP0&(7?x||> z>Qr@*YP+cVH(mnsqKbQ?$0|-buhBaGP%bSAa+Ok02wy}98r*eUA2<&F%zRtTkRtD% zWi0LI=q37*4$Fm-kA`Z>%2h=MZk&B3FV?RD&VJ&8b9$X?MCCoqBCbbwHAVEab+QG# z&bA$eT|X3cuCshCU-UGVzT<)QD$hl}q6Y*c1+J=J6Ur^8c)!0?hqcg-?SVrF1R3Jg zEt-D`COJKLeWrJp$sIa-CFKL8`sC%cu4#!uO$qb{-H8-|V2Z$Xbyn#b!$cMHtzd>e zCMpMOp}sC_Nhgje{{Dg}OXx9Ubb-C!C&XtSk+dX8x(_v+d(DD6K}*LaTPBfR=w#~y z5E4r;+jA8dU<>461HO{pl_CJH|NDk)KRzlWsN|WXU)8g{Yu6mF15%aFlZ{E3E_r+O zHj_Z1C^kOoI=>VMynkuhG&00}p$jNU$^zaL(}L;ze$anL3Ea#b>ZR*LXq2sHGHeRWhe(Vy|q zZ&!+sC;;Y_KVQpkX(A2)B$dp%Ij2e|0PxH%O=ksvpb7=#f=dyO6GxNM0Hd$Xb#pG< z-e37k)k6ut7DnLjeLx29`s*xu2PnDb)g}m}Lfqvyf5KJ7*O5|)q`e)s>|D3Zz_cZ9 zV|6P4cxAKvKy+n0_w|0&9XEBWMxz9nz!l(U}FUznwHxtMtf~w<>XG*G=cA zuT@AA>zZ&07OtP{LuVJNxk+*XUw;`Xb4CaPWQyM;N)=%{;@5H0}5( z`GooQvKyv)xj*cbHJ0;naNw)qx}=oNcS^GOVviS>lmlC#Ijq(BEXr0iRU8}|<%O2I z`nGIrkqaGA>mu3xNJm&-v*o?S$c7|lHK!lSz2?fXV>KF87r!@>^pk0-`ETFBpiCP4p3jKxzKD z#DMoUOIF5bOai;rlZ|A(5=K9$1iAl#`epr6&#!Z-?9>9aOU>CESGO9LPSN&nzq85t(f$u z*)ic)xpp)5LpusFmT0ICRE0`IMI)5^URsvQ;2S-p^XRGNh{r$*wMAiPSBG&KuGw<2 z-w%@3MDEy$5_bCZPN^$hSU^i;i+kDCN!T<6PF~XIW3=1nL{Wa&)>NU2x`j5vhhXHT z+VVIo5#aQSFQM8qA((^hoJJ~U2%PQ8yd4xf_~xXN40v^Uw&#(Y!>iy?zMG#4t7zA{ z=P$KVGyf9w5Amq86Ep|K?6|QA=qfCzYm7QtHks< z6yo4luEGpOxp!$A0ZL^hC8hlXx2#WUMS;P3`L6|zRX#Nw`@dlWF45Z!H|%+?83bQR zbA79HddP#18-4txR~T}X)~Eofm#MZRQbb-BR0O2JH+--vmLf1m$y_D{%pbm^T{&&d z1789tjSCF~27t^=h|=G&(V04k2@!hf&k!Oq^)n^(U$O2rUP1{=zz1Age844Br&?db zi%}t$s|Xj(hKKC_LPrDtL$-AdKO2?83NQ{F#&TjCjf8>yY)|D1P6$SM)>xC8sFQ__GKK#!vCn zey{0K(`kX_yuera8dfu>>pb0IkQ7(?5LWdO->0w&6!g3k{q`J>DP$MMp75ijp$Nkt6sj$AQ zDn~#sh(}!{Mc(fUO@#d?3HaUUYmcix14-zmy8?c*Bjv1d;(bta+`^ON4{1%*rG)*~ z^^ckYg^?oEw*^LBU8A0#I=L{J{hB_hgS;ytf32Zl#NXxwv+uq8<;GPsKg84yp>2~qfGO9m?r%Am5{Cy> z^3Isk)WP zj&&Nl&Eb(v%G)o<%Bpf^sSXu7C5;OGq*=DszSNJ9g~&T1$@E2*wIzj%_O^|zvsK3p z0@@`KS&p}@xxyAkJw{k)Hx>gYshWQ6Yg8%bs!}@!6sczBd1Yka7+thRqvXmqBj>i~ z+V~5Y_TIf67PrWSnbAah8LKSN4f=`Cb9PPE?p#a%AZJIPG@0>wf?sFe0Uh*372iihA9K$Q-mbeq%UZVmrTTJ=-^1qaUHFO9Lgmy?jGA z9~S(SK_k8$F0jU;9$#!{8Vi;S|Jb5x`T(TFGm)uxj;UuKdd({)md8}}^uY+}QHNQH z&~GcH4EY-BLXg?h8%3QzYQUqD-Z634_nKlpc0nI2R2wu%NRX3@8C;GIl~J6fz|n74 zJtcTR*eBuE9Fr1Ytl8!7EpQ{H-62)KOY1KD{@LF2+rf=b)ITbB${j!t^~?^Q_xl$e z%Ij>uylexBw9;V~Zb>vIXd?YWjP0{&SveMo77}&Jx=OEQv7`;1@6(eco|fsFo$oH$ zDc|RVbyPgrw8%8MQUCl05x)ovhiX%aK1Wg}E1Mou(yPga{%6)mx~p%YZ`?0CiLYIQ zm8w@k$H|p?6kTc{19Pc)Am|BT|?ogWF`yV zuh<~f?WZYzC&skmo*sJCJHDravT4y=uMjLGBQd*%+DI!NZRvVarucjHc8iB=d7Xd$ zeeSEYaZQsvQIPimT*$h~yg9|$__585YXp#-bR{G~TC@S}8}UTPc{vR(5f#vQk&PZz z-tIe`s^jgf&d?O`4?gKIt1vjby06I;TR~7+R~=*3?eX)GeyTx+_5HgaKtk^uC{(v# zx7NhBc!d^@PzFv7ysjo9^=_(WY}t2O#y6rhHSfor5y&;|^-M0D83bfbb%}h3ei>W; zZo=-0($A38sO`aNcIB!$y}KjrN~aLRB8=6~+hx14Va1b}5|LWk)@(UBl~fWO$uF$4 z7z=gTg$%#kf?0CUdkNG`+(#H3ORl``vtq>O?ZMLY`8D>IWRIz@*k8sXaeh^;g(t%5 zTTJ$EQ2eQ6K@Z)pnJXvGX3o@DShd!9kbl4sgqz6S4nt@W_y^09a!Zh_xe_QdiwOw? z@`&MU2KaOqD5Jy|0>1t;GawZlv%0TDcJl2lS(=&tUs>$rXnBpKpmadQVKMLYxMU~) z003DTr1t8adrC%@J8(I~+|bZ44;H+4A0je>66sTNsGmK603kVeE`i6bzjOJ}4I()_jIKX>%%Oha7BT-DTrXhl z?jM9BwZ7bFV;^~QhiwyJ{`xfE$9c9e>%cB&w&(aL0Xa~oDxu;@$6d^e$J5Vy9~ixk z2A-Y#j1|JqQhE0n9`c-Jopx(G0pQNLC#Yz_Xi&+9e&A|DOugW|%hwvM(jmiOJg zUA3A_V>U#qcQ0@+tXE-OhgC$^QwzsNugf# zjIU>Dw}VP`x~N!%`dvI%7~b`$v71q6v5GbBoX}-m=r7gl*VS@77AadwzBOD!L`+^Y zMVuLYyF&NCGY?c6Ykb3#*2c)%Bx zYTrK-x3(py+Gu|5@z$G@?z0EVqb{~(;(iE&9RIlOIfR6Bg?H}`pe;yOFHKS?5>S?PSLGV3ZF|)_#mf~ zDHzoQ_BPDje<7gr#HELB$=xhaI1ZOxyj>Z7o}3HsEzMlfbs9s~#!yRiaJBm`dX`B~4*WPg0{{6E++p`ELX&Rn+u)?PEm+`t*MOpz zwZ4f}X)8mY?c&MN)2G|kv=6V4KY~aO&5KMN>1SZ2FQv7pn0EGxbHCNq>8xLKE|Q=B z@RTb-{UIx+Ogiwz>2ed@lX{)UZ6||vAbXuDSK1=W&*LMh;@fXM-yJOt*L5Yy>kEz`ji{QSJ7-((<3q;UC0dO58$nMweKj+R+{~4hQKU8 zu!yy}6>H-w{xU2dmVX~=k^rsdt7BhKgwYwtHqz$k%>4vQAP1?U->#`-FG-r3Cc{8( zYG!r?#_vYXnLF-T9DEN56d^ZUKbyz)ks4Nf+3eAF!z}NWpJ+Jk1`WmA=$l+0f3@0L z(Oe!~$GBb{((3MueNe^Y0b4xwG2$<;kVGro=ZsT$23k3>-oHDPxN#@CTY`1VZ2pY3 zE=n82zYPASqPWFYlWuFHIAlHQ2nJD&6rK^p3Gf_N8|-82bsP_yZj0AhHrvRXqMwik7ZL8BMba1t zGGt8=ew6ZaB{?$n141M&lqvmxsp8~@p4~#NrqJ)drn|$BsLa8G!KL0WfjiM9DD+6;x0;$7S+nz{7bjlOKJ?AHN>)i?5h2O=?Moq2 z3o##0=A@I4^p*OLqNYo(P14>+%oe~VXm&h}NEnPcEMOzuAv zHW5*5^55j~C+n$L5Yg2?L$1*0oC?7HH(lHT{e`VkMB43*U;v;re^w@SoU%^+2ogqMoN`bY0n~DH zR;+ivyM4i#3O4MuV?&eH_B*GW9;yhGYOBVU*S`y?ea(8xs>!ifBIWSL&Rp(M=G%cC z+6dmVq@>Hmj^u`~>#p|m==!GVd^_nnIH~CCbMqBO`zRjA@VPXrYglm^-~Nf(f6)wA z?le^`M|yG^c5L2p6RO(ZJUQ&nO|!pU3yM;nsmqwLu4ae$A_AAY>Oi@&@+!YxocOy` z^GG*n7J5CY$Qm!(oahyuboO*v#Pdg&+q^2-dXqd7=T~`Q;(fuVCp+GaolGtj5$8`c zcHmBxfoV(sNTKcj@+(|rmivFj{;Iz zX*)#sKl=$m!4xtUYhGw(wmMEE`pwqGbVtXoUyiSBaLO7G1zqHxq80x$END2(`6C1F2!Br6mhI& zHV7f#B7KoU*mmEyr0J#|k%(Gw`Vm>hSiwaNLtm|JF;06ZsOz2_uSYuLME^nr)lLv4 zSH7@dHSjubS^(qZFYed;H13n&%p{EujKFP7czIAm03jf|wqVE{fPUW=K~a~Hf_8wT zht?Q8ym`>QpAW=E#UfG5%?5t`b@iRSvI_0OWlmV~XSPf^7cf4(WbVbk+U)0u;-gVp z{_gr{SH%{&tV_=u#E6lFRcf+mJEQo>+!qSv0B#{v@!LDtNbncqC)`_(cR+8C*l1Dg zMBda9_uO}0y)B`WO8jgcS@t-sA-*cl%k!5qro!h%$3!H?7$}>0 znpJ}qpu=}Y+bbNkVeP9VpahzN7gW2M73DPXe*FzbBl0gYxZgW$^-A7g(v9cD?8qs! z`*A&-FtI`;kI66*ckhgf9L+%O-5j?B-gV`vIE^V*m}MSs`pyV>yjc4WO)hXIjZq3n3~qvH%SuT#s) zG}oy)w?4hw)u#8si$gEQNZa3#i25Qr9t)JPmQh2D7e>e0=4+UT2e`Z%Yc;)aKYHs! zDwh{SjX;$nd_`6!&HYs9EvgDGF%P&?+tee7Xd=fd+ zzw4Ry(=8_77a2r{G4*(*Jj*Idp>_1N>tW=;dUK%J+My&eTaT768~qt#YGe{@fODdS z`+3d@k#6ovhwL-tsP5^K6{HonT7$AioIl`R`Yhf{V+{11?A_*fm9~lhl-Z9N(0|r! z4Q3vFfE^$9>78&=!br-kjh?itkBxrkdAwEhxiEHTy_#rUKLfI``8@_tON|g^A6Qv! z_}*dNHg}9ul`%g#MOoOXu^F+n8zE>`Me2!TPCvC*Yh%^vu)B`$>c*WHSWA|PNG&{i z*4}2nhaH1nX{gxgxqGfsn185u8;PNnN+H^%Iai6NBQN4ovqk?9Fx@;{3WzC#A)_F3`V zwc?lMWhj(8)qLS>hc`{14%^r;XCyp!8%K1#B9HYtc6fvIx!bM`W z?INMAAZ1m7sGdiyz1Eut#-TS$RgU%2)BD&*y4~|Qk?D8IX9!}IkT6zt!81$f<>85?{iQ^Y5}8eAhv7@IGQx?*4z%J zadLKYBB)c-F@r-S?LK?r^nxCCg@N_DES|@5E9c%Q`UI6fvMsXK&?!1AlnooA9zC+; zRw?;;OQraDXooauBqorr;12?S&`#$0fY%2<##^J_ckQt*HruR=D*py|Ko+iEClhkX zIQF2T*Ai+B4iKJ+Y!%wR&~J-WK9G9*PUdU4YrRb$FX=CpQ;anbf=KYmzt0FTZRNk$ zIcm=-u$5{Sd~X-3{#4@ba(dd29#0F{+mt(MvHoo=48Dc5coLpg8;m(Fz3J&ucE7?( zIpaB&LAxWW1{rUbZ<_1pp)Fo*eS>%N2x`f?e$+gvq^V3nuw!d&7VIvn?p!v{34+ly z^I)D2rLvMg=X7KQfn;(w;H9-qok2cyZ>sxK9i0BaH+(}Fwk7auQ)F381iDlg{v2X_ z%{s5Keqyxd(aA4j$>&-V%?-~@W?+MZWzBzK`RwWpCd17=Hf5o;P};?f?N($K5kGD9 zERJ+uPUr!5N|>23rs*MtaaBVuWf4{R2%Q>R=3;AJj7xF4AGq+Y>!%t%uG?y0)B7S> zDeZ6jW=s{|$eFu8SLwJ}m?j8m;(j zO129^n~m*vCEJv-@NP#5BQf>TM)JD)uC-mX+ve?=?EUm*LUc`*8I<3c%_yNasySGp zG2J_xP&>pHZ6pDe&sNY|3r9^AeYTVOPJBinOficHoH?+qL$RpK)J@hIambC8)S?vC z4h1jCXR90)+sEmHSjJUu9{2xY%Ww-Zl`5u~>k+lKc1;pO*N{e3Dk8pj1bXW59FTCS zXNa|~NT=RdZnECv_omSW<{NDK&#LeGuZN|+(8sw?X(xoTK?}Q>0)CV~@3@v`w!H~m z*8Lmw3DDWP1U;k*RqPF~idG%aO(3%cMFYt$UC%-BEqa@y`eDq5_o$+c!FzHHuI4}h zb7Q0lOtc^*=o)7<@EEJ?<~IJ6aTn;cN8svz#M+@hG%la zlE-GDnwd92CsJc?1|yzpeWvJlBzLF$)a~N)5|K9JjJ_Ok{m^W@ulvaZ2TcLJBa|FY z=Dw5ZmRjx7qAgvC`3|MZE$-(T-i|P?@pGDz(nT3^}kWAxs zbDynIDR)x$qxINfLqU0qac6Hd857SR_U%*OX{w>lj+y2HRDvNZhlZHQk9qxf5vyK}b!==?dlPFXd+ABVA~leR+7P$J zDcSl}1N%3zX9C%ew9a=uU1+ zTfp$gtqqVBzHdZgf8}c9;>(QiaP<{JsmEMgT!Ui>{|^$GYexZ-OisI=Ii7oaBx(Q& ze}A#(^73%?*>(Qun<;637i2?-yk7iWX|)gG=48RQnjI-ulj7;GGx*{Z@no1V(@bAG z9$(Du#TRqwbE>P|O8(L4^4g^pxghioxEO-(bm=kcCH+gY{t3{Y0cqm_o(1oVJQBvd90KMUbO~O{vf5faFc(urDazKe(wL_*(85; zvlxWB-lor!JAEMvkUZ`$W}K`mvBTY7sq>IH`^~pso}h-B3j3>{XQSDgm{G#(orKQ< znWM7rKV<8{f0Ss$FM8hI{12Gl$A(sCP*ni1NA~yF%w9Y1Os{sliQip}?&WDaY$XE9 zX#OoJJt&EKwBQ`K;X8cK9D#Ws4^?P6&WBCmyN0lJW{q0nYvc%ggH$Eye>_R?U*1)^ z7HmD0@7j7^V&_CbKsxaHJ&};+lT@#8qI-HJk7V^?8FFM0?)hL_;g<_;oOkM|+(V`V z&@KJ%5ZI4tpM~))h>gFtubathbEk}KGnm{wdpzxDF55TPG3S4~Zzzf_Tf<6_l^mIl z*~*KEXDY~d^jo9N6V)UhX1D_)q{+!IU1>p&%f+I=x8SNpcg~+TaeJ1k--+OgSWZA@ zXj%zEiM-loN>@uH&skO#44ctRjj)HE4A1@9QBCpFxl7Cw7nQ#+=Wx|Jt1QWFtXF|&SYzN*PBx6UlEC)4LRpk1E|S~n#-8>C;3o^wN~ zAZTMM2roVS%1+`EOxJSwd9wy*qL(l#-dHm2zTsMAIR$Ze9$VYIJ2YFOP_(k?xt2@P zVO!NausX>JMbPV|1$R z-f|Xv)EQrDeOZNHA`x(A&}qDz*3s(|wl%#$;x=?{9c~khIpK%Ec$Gji+u2{U^U!d= zWY@+;SG5PMfPDhV&P)ILvj4|JMgQei0K&yCZWUnK0MXNs aekOT276?i`7?1|=uNQKvvK7+iul^SS3`4a5 literal 0 HcmV?d00001 diff --git a/windows/keep-secure/vpn-auto-trigger-profile.md b/windows/keep-secure/vpn-auto-trigger-profile.md index e6d3fd33ea..d2559a3ceb 100644 --- a/windows/keep-secure/vpn-auto-trigger-profile.md +++ b/windows/keep-secure/vpn-auto-trigger-profile.md @@ -15,7 +15,7 @@ localizationpriority: high - Windows 10 - Windows 10 Mobile -In Windows 10, a number of “auto-triggering” features were added to VPN so users won’t have to manually connect when VPN is needed to access necessary resources. There are three different types of auto-trigger rules: +In Windows 10, a number of features were added to auto-trigger VPN so users won’t have to manually connect when VPN is needed to access necessary resources. There are three different types of auto-trigger rules: - App trigger - Name-based trigger @@ -23,7 +23,7 @@ In Windows 10, a number of “auto-triggering” features were added to VPN so u ## App trigger -You can configure apps (desktop or Universal Windows Platform) to trigger a VPN connection. You can also configure per-app VPN and specify traffic rules for each app. See [Traffic filters](vpn-security-features.md#traffic-filters) for more details. +VPN profiles in Windows 10 can be configured to connect automatically on the launch of a specified set of applications. You can configure desktop or Universal Windows Platform (UWP) apps to trigger a VPN connection. You can also configure per-app VPN and specify traffic rules for each app. See [Traffic filters](vpn-security-features.md#traffic-filters) for more details. The app identifier for a desktop app is a file path. The app identifier for a UWP app is a package family name. @@ -32,6 +32,12 @@ The app identifier for a desktop app is a file path. The app identifier for a UW ## Name-based trigger +You can configure a domain name-based rule so that a specific domain name triggers the VPN connection. + +Name-based auto-trigger can be configured using the VPNv2//*ProfileName*/DomainNameInformationList/dniRowId/AutoTrigger setting in the [VPNv2 Configuration Service Provider (CSP)](https://msdn.microsoft.com/library/windows/hardware/dn914776.aspx). + +Domain names can even be configured such that VPN must be used to access that resource. If VPN is not connected, that resource will be inaccessible if the persistent node is configured to be true. + ## Always On @@ -41,27 +47,31 @@ Always On is a new feature in Windows 10 which enables the active VPN profile to - Network change - Device screen on -When the trigger occurs, VPN tries to connect. If an error occurs or anyuUser input is needed, the user is shown a toast notification for additional interaction. +When the trigger occurs, VPN tries to connect. If an error occurs or any user input is needed, the user is shown a toast notification for additional interaction. + +Currently, this can only be configured in [custom XML in the ProfileXML node](vpn-profile-options.md). When a device has multiple profiles with Always On triggers, the user can specify the active profile in **Settings** > **Network & Internet** > **VPN** > *VPN profile* by selecting the **Let apps automatically use this VPN connection** checkbox. By default, the first MDM-configured profile is marked as **Active**. ## Trusted network detection +This feature configures the VPN such that it would not get triggered if a user is on a trusted corporate network. The value of this setting is a list of DNS suffices. The VPN stack will look at the DNS suffix on the physical interface and if it matches any in the configured list and the network is private or provisioned by MDM, then VPN will not get triggered. +Trusted network detection can be configured using the VPNv2//*ProfileName*/TrustedNetworkDetection setting in the [VPNv2 CCSP](https://msdn.microsoft.com/library/windows/hardware/dn914776.aspx). -## Configure ,,, +Currently, this can only be configured in [custom XML in the ProfileXML node](vpn-profile-options.md). + +## Configure app-triggered VPN See [VPN profile options](vpn-profile-options.md) and [VPNv2 CSP](https://msdn.microsoft.com/library/windows/hardware/dn914776.aspx) for XML configuration. -The following image shows name resolution options in a VPN Profile configuration policy using Microsoft Intune. +The following image shows associating an app to a VPN connection in a VPN Profile configuration policy using Microsoft Intune. -![Add DNS rule](images/vpn-name-intune.png) +![Add an app for the VPN connection](images/vpn-app-trigger.png) -The fields in **Add or edit DNS rule*- in the Intune profile correspond to the XML settings shown in the following table. +After you add an associated app, if you select the **Only these apps can use this VPN connection (per-app VPN)** checkbox, the app becomes available in **Corporate Boundaries**, where you can configure rules for the app. See [Traffic filters](vpn-security-features.md#traffic-filters) for more details. -| Field | XML | -| --- | --- | -| **Name*- | **VPNv2//*ProfileName*/DomainNameInformationList//*dniRowId*/DomainName*- | +![Configure rules for the app](images/vpn-app-rules.png) ## Related topics diff --git a/windows/keep-secure/vpn-name-resolution.md b/windows/keep-secure/vpn-name-resolution.md index b759641480..88e5b76467 100644 --- a/windows/keep-secure/vpn-name-resolution.md +++ b/windows/keep-secure/vpn-name-resolution.md @@ -23,13 +23,13 @@ When the VPN client connects to the VPN server, the VPN client receives the foll The VPN client can access intranet resources by using names, which can be resolved to IP addresses using DNS-based and WINS-based resolution. DNS and WINS name resolution require a server address to be provisioned on the VPN client. -The name resolution setting in the VPN profile configures how name resolution should work on the system when VPN is connected. The networking stack first looks at the Name Resolution Policy table (NRPT) for any matches and tries a resolution in the case of a match. If no match is found, the DNS Suffix is appended to the name and a DNS query is sent out on all interfaces. +The name resolution setting in the VPN profile configures how name resolution should work on the system when VPN is connected. The networking stack first looks at the Name Resolution Policy table (NRPT) for any matches and tries a resolution in the case of a match. If no match is found, the DNS suffix is appended to the name and a DNS query is sent out on all interfaces. ## Name Resolution Policy table (NRPT) The NRPT is a table of namespaces that determines the DNS client’s behavior when issuing name resolution queries and processing responses. It is the first place that the stack will look after the DNSCache. -There are 3 types of Name matches that can be set up for NRPT +There are 3 types of name matches that can be set up for NRPT: - Fully qualified domain name (FQDN) that can be used for direct matching to a name @@ -37,8 +37,6 @@ There are 3 types of Name matches that can be set up for NRPT - Any resolution should attempt to first resolve with the proxy server/DNS server with this entry -Examples of the following in VPNv2 CSP can be found here. - NRPT is set using the **VPNv2//*ProfileName*/DomainNameInformationList** node. This node also configures Web proxy server or domain name servers. [Learn more about NRPT](https://technet.microsoft.com/library/ee649207%28v=ws.10%29.aspx) diff --git a/windows/keep-secure/vpn-security-features.md b/windows/keep-secure/vpn-security-features.md index 6723cbde34..c5bcb7ec30 100644 --- a/windows/keep-secure/vpn-security-features.md +++ b/windows/keep-secure/vpn-security-features.md @@ -16,31 +16,61 @@ localizationpriority: high - Windows 10 Mobile -## Lockdown VPN +## LockDown VPN -Lockdown VPN is a setting in VPN which can enforce an Always On force tunneled VPN. The system will attempt to keep this VPN connection connected, and networking data will only be allowed to go over the VPN Interface. The only exceptions here are for getting underlying network connectivity going as well as for MDM configuration. Deploy this feature with caution as the resultant connection will not be able to send/receive any network traffic without the VPN being connected. -This can be configured using -VPNv2/ProfileName/LockDown -This is not currently supported to be configured via Intune/SCCM. This can be configured via a custom XML in the ProfileXML node. +A VPN profile configured with LockDown secures the device to only allow network traffic over the VPN interface. It has the following features: +- The system attempts to keep the VPN connected at all times. +- The user cannot disconnect the VPN connection. +- The user cannot delete or modify the VPN profile. +- The VPN LockDown profile uses forced tunnel connection. +- If the VPN connection is not available, outbound network traffic is blocked. +- Only one VPN LockDown profile is allowed on a device. -## Traffic filters +>[!NOTE] +>For inbox VPN, Lockdown VPN is only available for the Internet Key Exchange version 2 (IKEv2) tunnel type. -Traffic filters is a feature that enables admins to effectively add interface specific firewall rules on the VPN Interface. With this feature, admins can specify networking 5 Tuple policies (IP, Port and Protocol based) to allow through the VPN interface. In addition, these rules can be applied at a per app level or a per device level. For eg. An admin could say that the Contoso HR App must be allowed to go through the VPN and only access port 4545 additionally the Contoso finance apps is allowed to go over the VPN and only access the Remote IP ranges of 10.10.0.40 - 10.10.0.201 on port 5889, apart from this all other apps on the device should be able to access only ports 80 or 443. +Deploy this feature with caution as the resultant connection will not be able to send or receive any network traffic without the VPN being connected. + +Currently, this can only be configured in [custom XML in the ProfileXML node](vpn-profile-options.md). ## Windows Information Protection (WIP) integration with VPN -Windows Information Protection provides capabilities allowing the separation and protection of enterprise data against disclosure across both company and personally owned devices without requiring additional changes to the environments or the apps themselves. Additionally, when used with Rights Management Services (RMS), WIP can help to protect enterprise data locally. -In Windows 10, the Policy CSP was updated allowing administrators to enforce WIP policy. The VPNv2 CSP EdpModeId node allows a Windows 10 VPN client to integrate with WIP, extending its functionality to remote devices. Use case scenarios for WIP include: -• Core Functionality: File encryption and file access blocking -• UX Policy Enforcement: Restricting copy/paste, drag/drop, and sharing operations -• EDP Network Policy Enforcement: Protecting intranet resources over corpnet and VPN -• Network Policy Enforcement: Protecting SMB and Internet cloud resources over corpnet and VPN -The value of the EdpModeId is an Enterprise ID. The networking stack will look for this ID in the app token to determine whether VPN should be triggered for that particular app. +Windows Information Protection provides capabilities allowing the separation and protection of enterprise data against disclosure across both company and personally owned devices without requiring additional changes to the environments or the apps themselves. Additionally, when used with Rights Management Services (RMS), WIP can help to protect enterprise data locally. -This is not currently supported to be configured via Intune/SCCM. This can be configured via a custom XML in the ProfileXML node. +The [VPNv2 Configuration Service Provider (CSP)](https://msdn.microsoft.com/library/windows/hardware/dn914776.aspx) **EdpModeId** node allows a Windows 10 VPN client to integrate with WIP, extending its functionality to remote devices. Use case scenarios for WIP include: +- Core Functionality: File encryption and file access blocking +- UX Policy Enforcement: Restricting copy/paste, drag/drop, and sharing operations +- WIP Network Policy Enforcement: Protecting intranet resources over the corporate network and VPN +- Network Policy Enforcement: Protecting SMB and Internet cloud resources over the corporate network and VPN +The value of the **EdpModeId** is an Enterprise ID. The networking stack will look for this ID in the app token to determine whether VPN should be triggered for that particular app. + +Currently, this can only be configured in [custom XML in the ProfileXML node](vpn-profile-options.md). + +## Traffic filters + +Traffic Filters give enterprises the ability to decide what traffic is allowed into the corporate network based on policy. Network admins to effectively add interface specific firewall rules on the VPN Interface.There are two types of Traffic Filter rules: + +- App-based rules. With app-based rules, a list of applications can be marked such that only traffic originating from these apps is allowed to go over the VPN interface. +- Traffic-based rules. Traffic-based rules are 5-tuple policies (ports, addresses, protocol) that can be specified such that only traffic matching these rules is allowed to go over the VPN interface. + +There can be many sets of rules which are linked by OR. Within each set, there can be app-based rules and traffic-based rules; all the properties within the set will be linked by AND. In addition, these rules can be applied at a per-app level or a per-device level. + +For example, an admin could define rules that specify: + +- The Contoso HR App must be allowed to go through the VPN and only access port 4545. +- The Contoso finance apps is allowed to go over the VPN and only access the Remote IP ranges of 10.10.0.40 - 10.10.0.201 on port 5889. +- All other apps on the device should be able to access only ports 80 or 443. + +## Configure traffic filters + +See [VPN profile options](vpn-profile-options.md) and [VPNv2 CSP](https://msdn.microsoft.com/library/windows/hardware/dn914776.aspx) for XML configuration. + +The following image shows the interface to configure traffic rules in a VPN Profile configuration policy using Microsoft Intune. + +![Add a traffic rule](images/vpn-traffic-rules.png) ## Related topics