Technical Tip: SQL/XSS Syntax Based Detection injection exception

Certain application functionalities or data inputs from client could inadvertently trigger SQL/XSS Syntax Based Detection. If the triggers verified as false positive, an exception can be made to allow it(depending to trigger factor). In this example, exception by Client IP is made.

Sample Attack Log:

Steps to make exceptions:

1. Select the Message field value.
   
   

2. Configure exception elements.

    

   

    

   Note: Other element type can be configured depending on the matching criteria required.
   
   

3. Exception will be applied in respective SQL/XSS Syntax Based Detection profile and subtype.

    

    

4. Alternatively, exceptions also can be done directly in the SQL/XSS Syntax-Based Detection profile.

   Web Protection -> Advanced Protection -> SQL/XSS Syntax Based Detection.
   

For more information, refer to FortiWeb SQL/XSS Syntax Based Detection injection documentation:

Syntax-based SQL/XSS injection detection