Technical Tip: How to search signature based on CVE ID in FortiWeb signature database

In the event of a new CVE reported that is classified as a web attack, administrators usually will research whether FortiWeb has signature patterns to mitigate such an attack vector.

To easily identify whether FortiWeb has the relevant signature for mitigation, search the signature database by using the CVE ID.

1. Navigate to Web Protection -> Known Attacks -> Signature -> Edit the respective signature profile.
                                                           
   

    

2. Select the respective signature profile and the Signature Details button.
                                                                               
3. Select Search in the Dictionaries pane.
   
   

    

4. Enter CVE ID and select Search.
                                                                                   
   

    

The administrator will be able to understand the details of the signature and determine the next step of the attack mitigation.

Related article:
Technical Tip: CVE lookup and other important features in FortiGuard Labs