IPS signature query || cross site scripting ||

[Umesh]

Hi Team,

Is anybody can assist me if I can block cross site scripting signature  in IPS signature filed in fortigate firewall.

If I block cross site scripting, would be any impact as default action is pass in the IPS signature field..

Thank you

[AlexC-FTNT]

https://www.fortiguard.com/encyclopedia/ips/17702 - default action: pass
To correctly assess the impact is better to have this tested on your own server. Only you have the knowledge of what code is used, and if there is any possible production impact by blocking this vulnerability. In general, there is not a problem, but it all depends on the applications communicating over that policy/servers hosted behind the firewall.