Explorer III

Solved

Fortigate waf

Forum|Forum|2 years ago
December 26, 2023
1 reply
1598 views

Hi

We have a vip server facing outside of our company. I created a policy and enabled waf with all high severity enabled. When a user from outside submits a form, FGT waf recognizes it as sql injection extended and won't let the user submit the form and webpage crashes after. What should i do?

FortiGate

Best answer by hbac

Hi @rezafathi,

There is no option to exempt IP address for WAF profile. You can create a new WAF profile and disable that signature.

Regards,

Staff

Hello,

You can find the forms below in order to contact specific teams regarding UTM databases:

https://www.fortiguard.com/contactus

However I cannot find WAF related team. Therefore, you may consider to use generic form in order to check whether it is false positive:

https://www.fortiguard.com/faq/general-contact

rezafathiAuthor

Explorer III

No i want to exclude a web server from extended sql injection. How can i do that?

hbacAnswer

Staff

Hi @rezafathi,

There is no option to exempt IP address for WAF profile. You can create a new WAF profile and disable that signature.

Regards,