web application firewall and exchange 2016

[fortinetuser2020]

i want to implement the fortigate's (900d cluster with 5.4.5 fw) fortigate web application firewall (not FortiWeb) on exchange 2016 dag environment

i know from past experience that the wrong settings of the profile may cause problems (phones not connecting, outlooks disconnecting on and of and such).

does anywhere have a recommended settings for the profile so it will work best with exchange 2016? for services like rpc/outlook anywhere/activesync/mapi/owa

thank you

[jintrah_FTNT]

Hi,

A good option would be to turn the profiles in detection mode, run for a period of time and identify any false positives. These signatures can be disabled or set to alert only while rest of them in alert and deny action.

[fortinetuser2020]

you mean turn on the waf profile and set everything to monitor?

[Marcde_J]

How do you view the events that it would have blocked to verify false positives etc?