Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Saad1
New Contributor

HTTP header injection

Hello,

how we can block http header injection in fortiOS.

if the IPS what is the name of signature.

thanks

6 REPLIES 6
AEK
SuperUser
SuperUser

Hi Saad

Do you mean this one?

https://www.fortiguard.com/encyclopedia/ips/41512

AEK
AEK
Saad1
New Contributor

Thanks for your answer.

no I mean http header injection attacks

not http sql injection

AEK

This one is HTTP header injection, protected by FortiGate but it concerns Oracle WebCenter Sites.

https://www.fortiguard.com/encyclopedia/ips/35215

The above is included in IPS signatures.

Unfortunately I couldn't check if "HTTP header injection" is included in FG's WAF signatures since it seems not documented by Fortinet.

AEK
AEK
Saad1
New Contributor

for oracle websever it does not concern us, this attack concerns our website it is qualys which detects this attack.
for my part I am looking for a solution that will protect us from this attack “HTTP header injection" whether it is IPS or WAF signature FG.

amuda
Staff
Staff

Hi @Saad1 

 

You can create a custom IPS signature. Please refer here: https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-custom-IPS-signature-for-...

Amerul
APAC TAC
Saad1
New Contributor

Hello,

what is the f-sbid for http header injection please.

 

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors