Technical Tip: How to verify Custom Rule parameter filter

Configuration:
To block specific HTTP URL parameter names and values.

Note:

The parameter name and value can be either plain and/or regular expression.

Steps to verify:

1. Use curl or a browser to include the blocked parameter name or value in the HTTP request.

2. The attack log will be generated in the FortiAppSec Cloud portal under Threat Analytics -> Attack Log.

Related article:
Custom Rule