fortigate 100d web application firewall and exchange 2016

hi

how can i harden urls for the exchange server?

i mean, i know the paths of everything, ex/ecp, ex/owa, ex/ews and so on

but where can i find some documentation on how the fortigate's waf is working in terms of syntax

some wafs work by ex/ecp*

some wafs work by hardening ex/ecp<>*

and so on...

where is the reference guide for http policy hardening, is there such a thing?

thank you