FortiAppSec Cloud
FortiAppSec Cloud delivers unified application security and performance with WAF, bot protection, GSLB, DDoS mitigation, threat analytics, and CDN.
guptas
Staff
Staff
Article Id 348132
Description This article shares information about custom rule filter length limitation when using the filter.
Scope FortiWeb-Cloud.
Solution

For example, an application requires 'Source IP' as a filter. In this filter, one can define IP address or Subnet range as well. 

There is a length limitation for the filter value (<=255 characters) so the amount depends on the length of each IP/IP range.

 

All IPs are like 1.1.1.1, 1 holding 1 character, then at most 31 IP addresses can be added and if all IPs are like 123.123.123.123, 1 holding 3 characters, then at most 16 IP addresses can be added in one custom rule filter.


'1' is 1 character, '123' is 3 characters, '.' is a character, Separator symbol ',' is also counted as a character.

Each filter calculated their own 255, so in one custom rule, one can have source IP <=255 characters and the URL <=255 characters.

To configure Custom rule from GUI:

 

Custom rule2025.png.jpg

 

Custom rule2026.png.jpg

 

Note:

One application can be configured with a maximum of 12 custom rules.

Contributors