Fortinet 178 FortiWeb 5.0 Patch 6 Administration Guide
1. Before creating an auto-learning profile, you must configure its components:
• a data type group (see “Grouping predefined data types” on page 170)
• suspicious request URLs (see “Grouping all suspicious request URLs” on page 175)
• if required, URL interpreters (see “Grouping URL interpreters” on page 165)
2. Go to Auto Learn > Auto Learn Profile > Auto Learn Profile.
To access this part of the web UI, your administrator’s account access profile must have
Read and Write permission to items in the Autolearn Configuration category. For details, see
“Permissions” on page 47.
3. Click Create New.
A dialog appears.
4. Configure these settings:
Setting name Description
Name Type a unique name that can be referenced by other parts of the
configuration. Do not use spaces or special characters. The maximum
length is 35 characters.
Data Type
Group
Select the name of a data type group to use, if any.
Auto-learning will learn about the names, length, and required presence
of these types of parameters in HTTP requests. For details, see
“Grouping predefined data types” on page 170.
Suspicious URL Select the name of a suspicious URL pattern to use, if any.
Auto-learning will consider HTTP requests for these URLs as either
malicious vulnerability scanning, data harvesting (a type of web
scraping), or administrative login attacks. For details, see “Grouping all
suspicious request URLs” on page 175.