Fortinet 5.0 Patch 6 Auto-learning performance

Fortinet 619 FortiWeb 5.0 Patch 6 Administration Guide
Figure 77:Log&Report > Report Config > Report Config
Keep in mind that most reports are based upon log messages. All caveats regarding log
performance also apply.
Auto-learning performance
• Each URL in an auto-learning report includes the right-click menu option Stop Learning. If a
URL is dynamic or hard to predict effectively and may generate inaccurate data, you can
improve performance by pausing or stopping auto-learning for that URL. See “Pausing
auto-learning for a URL” on page 181.
• Once you have collected enough auto-learning data for generating protection profiles,
consider turning off the auto-learning function to save resources. To do so, deselect the
auto-learning profile in applicable server policies. See “How operation mode affects server
policy behavior” on page 463.
• Use less computationally intensive data types and suspicious URLs, and disable unneeded
ones, where possible. See “Regular expression performance tips” on page 615.
• Reduce the list of predefined data type groups to include just those the FortiWeb appliance
is likely to encounter when gathering data for an auto-learning report. By pruning the list, you
reduce the resources used to recognize data types, freeing them to improve the throughput
of the FortiWeb appliance. See “Grouping predefined data types” on page 170.