TikMan v1.9.24

Firewall detection: generic across vendors, and no longer blind

Two fixes, one of which was quietly disabling the other:

• The classifier never actually saw the model. It was handed Model.Model, while
  the model read over SNMP, WMI or the web UI lands elsewhere and is folded into the
  model shown in the list. For a device known only over SNMP — which is every Zyxel
  firewall — that field is empty, so the model-based rules had nothing to match. The
  classifier is now given the same model text the list displays.

• Series names are matched as whole tokens, not substrings. The model is split on
  non-alphanumerics and on letter/digit boundaries ("USG40" → usg, 40), so "atp"
  no longer fires inside "STRATPOINT" nor "usg" inside "BUSGATE". Matching runs in
  three tiers:

  1. Firewall-only vendors — Fortinet, Palo Alto, SonicWall, WatchGuard,
     Check Point, Sophos, Stormshield, Clavister, Hillstone, Forcepoint, Netgate,
     Endian, Untangle.
  2. Unambiguous series — USG, USG FLEX, ZyWALL, ATP, NSG, FortiGate,
     FortiWiFi, Firebox, XTM, Firepower, SRX, pfSense, OPNsense, IPFire, UDM/UXG,
     CloudGen.
  3. Short series, scoped to their maker — Sophos XG/XGS/SG/UTM, Cisco ASA/FTD,
     Meraki MX, Palo Alto PA, SonicWall TZ/NSA, Fortinet FG, Zyxel VPN.

  The scoping matters: XGS is a Sophos firewall but a Zyxel switch, and SG is a
  Sophos firewall but a TP-Link switch. Zyxel switches, TP-Link TL-SG, Cisco Catalyst
  and Juniper EX all stay switches.