Fortinet 509 FortiWeb 5.0 Patch 6 Administration Guide
4. Configure these settings:
Setting name Description
Name Type a unique name that can be referenced in other parts of the
configuration. Do not use spaces or special characters. The
maximum length is 35 characters.
Hostname/IP
or URL
Type the fully qualified domain name (FQDN), IP address, or full
URL to indicate which directory of the web site you want to scan.
Behavior of the scan varies by the type of the entry:
• A FQDN/IP such as www.example.com. Assume HTTP and
scan the entire web site located on this host.
• A partial URL such as https://webmail.example.com/dir1/. Use
the protocol specified in the URL, and scan the web pages
located in this directory of the web site. Other directories will be
ignored.
• A full URL such as http://example.com/dir1/start.jsp. Use the
protocol specified in the URL, starting from the web page in the
URL, and scan all local URLs reachable via links from this web
page that are located within the same subdirectory.
Links to external web sites and redirects using HTTP 301 Moved
Permanently or 302 Moved Temporarily or Found will not be
followed.
Unless you will enter an IP address for the host, you must have
configured a DNS server that the FortiWeb appliance can use to
query for the FQDN. For details, see “Configuring DNS settings”
on page 130.
Note: This starting point for the scan can be overridden if the web
server automatically redirects the request after authentication. See
Login with HTTP Authentication and Login with specified
URL/data.