Fortinet 449 FortiWeb 5.0 Patch 6 Administration Guide
URL Pattern Depending on your selection in the Request Type field, enter either:
• the literal URL, such as /index.php, that the HTTP request
must contain in order to match the input rule. The URL must
begin with a backslash ( / ).
• a regular expression, such as ^/*.php, matching all and only
the URLs to which the input rule should apply. The pattern does
not require a slash ( / ); however, it must at match URLs that
begin with a backslash, such as /index.cfm.
Do not include the domain name, such as www.example.com,
which is configured separately in the Host drop-down list.
To create and test a regular expression, click the >> (test) icon. This
opens the Regular Expression Validator window where you can
fine-tune the expression (see “Regular expression syntax” on
page 673)n.
Header Length Enable to omit the constraint on the maximum acceptable size in
bytes of the HTTP header.
Content Length Enable to omit the constraint on the maximum acceptable size in
bytes of the request body.
Body Length Enable to omit the constraint on the maximum acceptable size in
bytes of the HTTP body.
Parameter Length Enable to omit the constraint on the maximum acceptable size in
bytes of parameters in the URL or, for HTTP POST requests.
Header Line Length Enable to omit the constraint on the maximum acceptable size in
bytes of each line in the HTTP header.
HTTP Request
Length
Enable to omit the constraint on the maximum acceptable length in
bytes of the HTTP request.
URL Parameter
Length
Enable to omit the constraint on the maximum acceptable size of an
URL parameter (including the name and value).
Number of Cookies
In Request
Enable to omit the constraint on the maximum acceptable number
of cookies in an HTTP request.
Number of Header
Lines In Request
Enable to omit the constraint on the maximum acceptable number
of lines in the HTTP header.
Illegal HTTP
Request Method
Enable to omit the constraint on to check for invalid HTTP version
numbers.
Number of URL
Parameters
Enable to omit the constraint on the maximum number of
parameters in the URL.
Illegal Host Name Enable to omit the constraint on invalid charac ters in the Host: line
of the HTTP header, such as null characters or encoded characters.
Setting name Description