Technical Tip: How to protect against JSON attacks...

faical · 09-27-2024

Description This article describes how to troubleshoot the issue of accessibility to FortiWeb via HTTPS when getting the following browser error: Scope FortiWeb. Solution Make sure there are no network issues (bandwidth, connectivity etc..) impacting...

faical · 09-27-2024

Description The article explains how to send the original IP coming from a Proxy (with Proxy Protocol) to a backend server that does not support Proxy protocol while using Fortiweb. Scope FortiWeb. Solution Enable Proxy protocol on Server policy on F...

faical · 08-30-2024

Description The article describes how to import an IP list (.txt) to an HTTP content routing policy when using Match Object with a 'Source IP'. Scope FortiWeb. Solution Follow the steps described below. In the FortiWeb GUI, go to Server Object -> Ser...

faical · 08-30-2024

Description The article describes how to enable FortiWeb to block a specific browser from accessing web applications (Edge as an example). Scope FortiWeb. Solution Follow the steps clarified below: Make sure the backend-server is supporting the Sec-C...

faical · 08-21-2024

Description The article describes how to enable FortiWeb to block SQL injections (using JSON in the HTTP body). Scope FortiWeb. Solution The signature profile does not detect SQL injections in a JSON body. For FortiWeb to scan and block JSON requests...

User Statistics

User Activity

Troubleshooting Tip: FortiWeb accessible via SSH but not via graphical user interface (GUI)

Technical Tip: How to send the original IP from a Proxy (with Proxy protocol) to the backend server that does not support Proxy protocol

Technical Tip: How to import IP list (.txt) to HTTP content routing policy

Technical Tip: How to block a specific browser from accessing web application

Technical Tip: How to protect against JSON attacks in the body (SQL injection)

Technical Tip: How to protect against JSON attacks...

KCS