7.2.5 - WAF Exchange Server Profile

[Marcde_J]

Hi All.

Have an issue with our WAF on our Forti 200E which we just upgraded. on 7.2.3 we had no issues. However on 7.2.5 the WAF coming in keeps causing havock.

We've evnetually turned off all constraints, and a few of the profiles however Android still cannot authenticate, and you cannot SEND emails, receiving fine. No errors at all in logs though. Once you disable WAF it works perfectly

Is there a profile you can import specifically for Exchange/OWA servers?

[Anthony_E]

Hello,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Anthony_E]

Hello,

Could you please upgrade your FortiGate to the 7.4 version and tell us if it fixed your issue?

https://support.fortinet.com/welcome/#/

Thanks a lot in advance.

Regards,

[pminarik]

As far as I am aware, the WAF feature isn't really actively maintained anymore and the official recommendation is to use a dedicated WAF appliance (e.g. FortiWeb).

With that said, if there is a regression in functionality after an upgrade, that certainly warrants a TAC ticket. If you can cooperate with TAC to gather relevant traffic and debug samples, they should be able to submit a bug report for this, which will hopefully lead to a fix.