Fortinet 479 FortiWeb 5.0 Patch 6 Administration Guide
4. Configure these settings:
Setting name Description
Name Type a unique name that can be referenced in other parts of the
configuration. Do not use spaces or special characters. The maximum
length is 35 characters.
Session
Management
Enable to use your web application’s session IDs in order for FortiWeb to
be able to track the state of web applications across multiple requests.
Also configure Session Timeout.
Note: When FortiWeb is deployed in an offline topology or
asynchronous operation mode, this feature requires that your web
applications have session IDs in their URL. For details, see “HTTP
sessions & security” on page 34 and “Supported features in each
operation mode” on page 62.
Note: Enabling this option is required if:
• you select features requiring session cookies, such as Hidden Fields
Protection Rule
• in any policy, you will select an auto-learning profile with this profile
• you want to include this profile’s traffic in the traffic log