Web Signatures

FortiADC delivers signature-based protection against known attacks with flexible scanning and severity-based actions.

• Web Attack Signature Policy

  Uses FortiGuard signature database to detect known web attacks

• Scans traffic at multiple points:

  • HTTP headers (always enabled)

  • Request body

  • Response body

• Supports severity-based actions:

  • High → Deny

  • Medium → Deny or Alert

  • Low → Allow + Log

• Provides predefined security levels (High / Medium / Alert-only)

• Allows enabling/disabling attack categories and scan points

For more information, see WAF Signature in FortiADC Administration Guide.