FortiAppSec Cloud
FortiAppSec Cloud delivers unified application security and performance with WAF, bot protection, GSLB, DDoS mitigation, threat analytics, and CDN.
guptas
Staff
Staff
Article Id 348132
Description This article shares information about custom rule filter length limitation when using the filter.
Scope FortiAppSec Cloud.
Solution

For example, an application requires 'Source IP' as a filter. In this filter, one can also define IP address or Subnet range. 

The filter value has a length limitation (<=255 characters), so the amount depends on the length of each IP/IP range.

 

All IPs are like 1.1.1.1, 1 holding 1 character, then at most 31 IP addresses can be added and if all IPs are like 123.123.123.123, 1 holding 3 characters, then at most 16 IP addresses can be added in one custom rule filter.


'1' is 1 character, '123' is 3 characters, '.' is a character, Separator symbol ',' is also counted as a character.

Each filter calculated its own 255, so in one custom rule, one can have source IP <=255 characters and the URL <=255 characters.

To configure Custom rule from GUI:

 

Custom rule2025.png.jpg

 

Custom rule2026.png.jpg

 

Note:

One application can be configured with a maximum of 12 custom rules.