Technical Tip: How to enable WAF in policy
| Description | This article describes how to enable the WAF in policy. |
| Scope | FortiGate. |
| Solution | In the GUI, go to System -> Feature Visibility -> Search for WAF.
It must be enabled via CLI first: config system settings set gui-proxy-inspection enable end  It is now available to use in the policy, provided the 'Inspection Mode' is set to 'Proxy-based' to enable Web Application Firewall (WAF).  From the CLI: config firewall policy edit 1 set srcintf "port3" set dstintf "port1" set action accept set srcaddr "all" set dstaddr "all" set schedule "always" set service "ALL" set utm-status enable set inspection-mode proxy set ssl-ssh-profile "certificate-inspection" set waf-profile "default" set logtraffic all set nat enable next end Note: This feature is not supported in the models with less than 2GB RAM starting from v7.4.4. Related documents: |
