CSRF Protection

A cross-site request forgery (CSRF) is an attack that exploits the trust that a site has in a user's browser to transmit unauthorized commands. FortiWeb Cloud uses a dedicated, per user token to track access to protected pages. To protect back-end servers from CSRF attacks, you create two lists of items, a list of web pages to protect against CSRF attacks, and a corresponding list of the URLs found in the requests that the pages generate.

To configure CSRF Protection, you must have already enabled this module in Add Modules. See How to add or remove a module.

To create a page list

1. Click +Create Page List Table.
2. Configure these settings.
   

   Full URL	Enter a literal URL, for example, /www.test.com.
   Parameter Filter	Enable to specify a parameter name and value to match. The parameter can be located in either the URL or the HTTP body of a request.
   Parameter Name	Enter the parameter name to match.
   Parameter Value	Enter a value for the parameter.

3. Click OK.
   

You can continue creating multiple page lists.

To create a URL list

1. Under URL List Table, click +Add URL List Table, configure these same settings as for adding a page list.
2. Click SAVE.

You can continue creating multiple URL lists.

To configure actions

1. Select the action that FortiWeb Cloud takes when it detects a violation of the rule from the top right corner.
   To configure the actions, you must first enable the Advanced Configuration in Global > System Settings > Settings.

   Alert	Accept the request and generate an alert email and/or log message.
   Alert & Deny	Block the request (or reset the connection) and generate an alert email and/or log message.
   Deny(no log)	Block the request (or reset the connection).

2. Click SAVE.