diff --git a/ai_suggestions.conf b/ai_suggestions.conf
new file mode 100644
index 0000000..8674947
--- /dev/null
+++ b/ai_suggestions.conf
@@ -0,0 +1,9 @@
+# MANDATORY: Address-set definitions
+set security address-book global address-set INTERNAL-NETS address 192.168.100.0/24
+set security address-book global address-set EXTERNAL-NETS address 0.0.0.0/8
+set security address-book global address-set DMZ-NETS address 10.0.0.0/8
+
+# DDoS Protection - Fixed thresholds (no XML!)
+set security screen ids-option WAN-screen icmp flood threshold 20
+set security screen ids-option WAN-screen tcp syn-flood attack-threshold 20
+set security zones security-zone WAN screen WAN-screen