Fortinet 5.0 Patch 6 - page 400

Fortinet 400 FortiWeb 5.0 Patch 6 Administration Guide
10.Configure these settings:
11.Click Add.
12.Repeat the previous steps for each entry that you want to add to the signature exception.
Setting name Description
Host Select which protected hosts entry (either a web host name or IP
address) that the Host: field of the HTTP request must be in to
match the signature exception.
This option is available only if Host Status is enabled.
Host Status Enable to require that the Host: field of the HTTP request match a
protected hosts entry in order to match the signature exception.
Also configure Host.
Type Indicate whether Request URL is a Simple String (that is, a literal
URL) or a Regular Expression.
Request URL Depending on your selection in Type , enter either:
• the literal URL, such as /causes-false-positives.php,
that the HTTP request must contain in order to match the page
access rule. The URL must begin with a slash ( / ).
• a regular expression, such as ^/*.php, matching all and only
the URLs to which the page access rule should apply. The
pattern does not require a slash ( / ); however, it must at match
URLs that begin with a slash, such as /index.cfm.
Do not include the domain name, such as www.example.com,
which is configured separately in the Host drop-down list.
To create and test a regular expression, click the >> (test) icon.
This opens the Regular Expression Validator window where you
can fine-tune the expression (see “Regular expression syntax” on
page 673).