Fortinet 414 FortiWeb 5.0 Patch 6 Administration Guide
7. Configure these settings:
8. Click OK.
9. Repeat the previous steps for each individual rule that you want to add to page access.
Setting
name
Description
ID Type the index number of the individual rule within the page access rule, or
keep the field’s default value of auto to let the FortiWeb appliance
automatically assign the next available index number.
Page access rules should be added to the set in the order which clients will
be permitted to access them.
For example, if a client must access /login.asp before /account.asp,
add the rule for /login.asp first.
Host Select the name of a protected host that the Host: field of an HTTP request
must be in to match the page access rule.
This option is available only if Host Status is enabled.
Host Status Enable if you want the page access rule to apply only to HTTP requests for a
specific web host. Also configure Host.
URL Pattern Depending on your selection in Type , enter either:
• the literal URL, such as /cart.php, that the HTTP request must contain
in order to match the page access rule. The URL must begin with a slash
( / ).
• a regular expression, such as ^/*.php, matching all and only the URLs
to which the page access rule should apply. The pattern does not require
a slash ( / ); however, it must at match URLs that begin with a slash, such
as /cart.cfm.
Do not include the domain name, such as www.example.com, which is
configured separately in the Host drop-down list.
To create and test a regular expression, click the >> (test) icon. This opens
the Regular Expression Validator window where you can fine-tune the
expression (see “Regular expression syntax” on page 673).
Type Indicate whether URL Pattern is a Simple String (that is, a literal URL) or a
Regular Expression.