Technical Tip: How to enable WAF in policy

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 338350

Description

This article describes how to enable the WAF in policy.

Scope

FortiGate.

Solution

In the GUI, go to System -> Feature Visibility -> Search for WAF.

By default, the Web Application Firewall option will be greyed out as below:

It must be enabled via CLI first:

config system settings

set gui-proxy-inspection enable

end

Now it is available to use in the policy.

Note:

This feature is not supported in the models with less than 2GB RAM starting from v7.4.4.

Related document:

Web application firewall

760

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: How to enable WAF in policy

You are leaving our website