Question
Web Application Firewall is blocking access to URLs
Hello,
The Web Application Firewall on FortiGates is blocking access to two URLs due to the following event IDs:
1. URL: [https://web.domain.com/page.php]
Event ID: 60140003
Event Type: waf-signature
Sub Type: waf
Type: utm
FortiGate # diagnose waf dump | grep -f 60140003 60140003 - This signature prevents attackers from performing RFI attacks to include a malicious code from a remote resource. <---
2. URL: [https://web.domain.com/file.php]
Event ID: 40000141
Event Type: waf-signature
Sub Type: waf
Type: utm
FortiGate # diagnose waf dump | grep -f 40000141 40000141 - This signature prevents attackers from injecting SQL Databases using "\*". <---
Could you please guide me on how to add exceptions in WAF profile for these two URLs in FortiManager, so that access will be granted?
Thank you!
