Fortinet 5.0 Patch 6

Fortinet 197 FortiWeb 5.0 Patch 6 Administration Guide

Buttons and drop-down lists in the report display pane may vary. For most URLs, they

enable you to adjust the profile that will be generated.

Auto-learning suggests an appropriate configuration based upon the traffic that it observed.

If auto-learning has not suggested appropriately, however, you can manually override each

of auto-learning’s suggestions. Configure these settings:

Setting name Description

Overview tab

Edit

Protected

Servers

Click to open a pop-up dialog. Enable or disable the IP

addresses and/or domain names that will be members of

the generated protected servers group. For details, see

“Defining your protected/allowed HTTP “Host:” header

names” on page 249.

This appears only if you have selected the name of the

auto-learning profile in the navigation pane.

Edit URL

Page

Click to open a pop-up dialog. Enable or disable whether

the currently selected URL will be included in start pages

and white/black IP list rules in the generated profile. This

appears only if you have selected a URL in the navigation

pane.

For more information on those rule types, see “Specifying

URLs allowed to initiate sessions” on page 415 and

“Access control” on page 321.

Attacks tab

Action and

Enable

Select from the Enable drop-down list to enable or disable

detection of each type of attack, and select from Action

which action that the generated profile will take. The

availability of these lists varies with the level of the item

selected in the navigation pane.

For details, see the actions in “Configuring a protection

profile for inline topologies” on page 468 or “Configuring a

protection profile for an out-of-band topology or

asynchronous mode of operation” on page 477.

Visits tab

Edit Allow

Method

Click to open a pop-up dialog. Change the Status option

to select which HTTP request methods to allow in the

generated profile. This appears only if you have selected a

profile in the navigation pane.

For details, see “Configuring a protection profile for inline

topologies” on page 468 and “Configuring a protection

profile for an out-of-band topology or asynchronous mode

of operation” on page 477.

Edit URL

Access

Click to open a pop-up dialog. This appears only if you

have selected a profile in the navigation pane.

For details, see “Access control” on page 321.

Edit Start

Page

Click to open a pop-up dialog. This appears only if you

have selected a profile in the navigation pane.

For details, see “Specifying URLs allowed to initiate

sessions” on page 415.