Skip to main content
New Member
August 15, 2026
Question

DDoS Custom Policy

  • August 15, 2026
  • 1 reply
  • 45 views

Issue: my domain xyz.com is build on next js when webiste is loaded xyz.com/_next/static urls are loaded which loads multiple js files , waf ddos policy has threshold 50 req. and multiple js files are when loaded waf suspects it as DDOS attack.... now i cant increse threshold for whole domain xyz.com

what is the solution ?

1 reply

farhanahmed
Staff
Staff
August 15, 2026

I assume you are using FortiWeb, have you tried using custom policy with regular expression request type and URL set to something like `^/_next/static(?:/
https://docs.fortinet.com/document/fortiweb/8.0.6/administration-guide/146637/custom-policy

 

www.farhan.ch
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!