Technical Tip: Apply the apache.log4j IPS signature in IPS profile using Fortimanager

[hmodi]

Description	This article describes how to correctly configure apache.log4j IPS signature in IPS profile using FortiManager.
Scope
Solution	- The IPS signature for apache.log4j was added in IPS database version 19.00215. Verify there is IPS database version equal to or higher than 19.00215. - From the IPS profile in FortiManager add the signature as shown below: Policy & Object -> Intrusion Prevention -> Edit Profile and select 'Add signature'. - Search for apache.log4j and select -> change action per the requirement. (For e.g here its selected block). - Edit the policy and verify correct IPS profile is selected. And then install the policy package to FortiGate.