Fortinet 483 FortiWeb 5.0 Patch 6 Administration Guide
To view or modify a component without leaving the page, next to the drop-down menu
where you have selected the component, click Detail.
5. Click OK.
6. If you will use this offline protection profile in conjunction with an auto-learning profile in
order to indicate which attacks and other aspects should be discovered, also configure the
auto-learning profile. For details, see “Configuring an auto-learning profile” on page 177.
7. To apply the offline protection profile, select it in a policy. For details, see “How operation
mode affects server policy behavior” on page 463.
See also
•How operation mode affects server policy behavior
•HTTP sessions & security
•Configuring a server policy
Configuring a server policy
Configure server policies by combining your rules, profiles, and sub-policies.
Allow Known
Search Engines
Enable to exempt popular search engines’ spiders from DoS sensors,
brute force login sensors, HTTP protocol constraints, and combination
rate & access control (called “advanced protection” and “custom
policies” in the web UI).
This option improves access for search engines. Rapid access rates,
unusual HTTP usage, and other characteristics that may be abnormal
for web browsers are often normal with search engines. If you block
them, your web sites’ rankings and visibility may be affected.
By default, this option allows all popular predefined search engines. To
specify which search engines will be exempt, click the Details link. A
new frame will appear on the right side of the protection profile. Enable
or disable each search engine, then click Apply. See also “Blacklisting
content scrapers, search engines, web crawlers, & other robots” on
page 337.
File
Uncompress
Rule
Select the name of a file decompression policy, if any, that will be
applied to matching requests. See “Configuring decompression to
enable scanning & rewriting” on page 460.
Data Analytics Enable to gather hit, attack, and traffic volume statistics for each server
policy that includes this profile. See “Configuring policies to gather
data” on page 598 and “Viewing web site statistics” on page 599.
Note: This option cannot be enabled until you have uploaded a
geography-to-IP mapping database. See “Updating data analytics
definitions” on page 598.
Setting name Description