FortiWeb User Tracking not matching the requested URL

[Mohammedsalhi]

Dear Team ,

Using the following http://testasp.vulnweb.com/, I'm attempting to set up user tracking so that I can see the username in the logs and use brute force based on the username attampts rather than the session. However, it is not working, so I'm not sure what the problem might be.

This screen shot may be helpful.

[funkylicious]

hi,

did you follow the guide as for setting user tracking like for example described here, https://docs.fortinet.com/document/fortiweb/7.0.3/administration-guide/902681/tracking ?

[Mohammedsalhi]

Yes but it did not match the username.

[funkylicious]

i would try with Authentication URL as /login , Logoff path as /logout and for Auth Result condition table, i would configure as per https://help.fortinet.com/fweb/561/Content/FortiWeb/fortiweb-admin/user_tracking.htm