Fortinet black logo

Handbook

Configuring WAF Exception objects

Configuring WAF Exception objects

Exceptions identify specific hosts or URL patterns that are not subject to processing by WAF rules.

Before you begin:

  • You must have Read-Write permission for Security settings.

After you have created an exception object, you can specify it in WAF profiles and individual WAF feature rules.

To configure an exception object:
  1. Go to Web Application Firewall > WAF Profile.
  2. Click the Exceptions tab.
  3. Click Create New to display the configuration editor.
  4. Complete the configuration as described in WAF Exception objects.
  5. Save the configuration.

WAF Exception objects

Settings Guidelines

Name

Configuration name. Valid characters are A-Z, a-z, 0-9, _, and -. No spaces.

After you initially save the configuration, you cannot edit the name.

Exception Host Status

Enable/disable setting exceptions by host pattern.
Host Pattern Matching string. Regular expressions are supported. For example, you can specify www.example.com, *.example.com, or www.example.* to match a literal host pattern or a wildcard host pattern.
URL Pattern

Matching string. Must begin with a URL path separator (/). Regular expressions are supported. For example, you can specify path names and files with expressions like \/admin, .*\/data\/1.html, or \/data.*.

Source IP

Matching source IP string

IPv4/Netmask

Specify the IP address and netmask. For example: 192.0.2.5/24

Configuring WAF Exception objects

Exceptions identify specific hosts or URL patterns that are not subject to processing by WAF rules.

Before you begin:

  • You must have Read-Write permission for Security settings.

After you have created an exception object, you can specify it in WAF profiles and individual WAF feature rules.

To configure an exception object:
  1. Go to Web Application Firewall > WAF Profile.
  2. Click the Exceptions tab.
  3. Click Create New to display the configuration editor.
  4. Complete the configuration as described in WAF Exception objects.
  5. Save the configuration.

WAF Exception objects

Settings Guidelines

Name

Configuration name. Valid characters are A-Z, a-z, 0-9, _, and -. No spaces.

After you initially save the configuration, you cannot edit the name.

Exception Host Status

Enable/disable setting exceptions by host pattern.
Host Pattern Matching string. Regular expressions are supported. For example, you can specify www.example.com, *.example.com, or www.example.* to match a literal host pattern or a wildcard host pattern.
URL Pattern

Matching string. Must begin with a URL path separator (/). Regular expressions are supported. For example, you can specify path names and files with expressions like \/admin, .*\/data\/1.html, or \/data.*.

Source IP

Matching source IP string

IPv4/Netmask

Specify the IP address and netmask. For example: 192.0.2.5/24