CSRF Protection
A cross-site request forgery (CSRF) is an attack that exploits the trust that a site has in a user's browser to transmit unauthorized commands. FortiWeb Cloud uses a dedicated, per user token to track access to protected pages. To protect back-end servers from CSRF attacks, you create two lists of items, a list of web pages to protect against CSRF attacks, and a corresponding list of the URLs found in the requests that the pages generate.
To configure CSRF Protection, you must have already enabled this module in Add Modules. See How to add or remove a module.
To create a page list
- Click +Create Page List Table.
- Configure these settings.
Full URL
Enter a literal URL, for example,
/www.test.com
.Parameter Filter
Enable to specify a parameter name and value to match. The parameter can be
located in either the URL or the HTTP body of a request.
Parameter Name
Enter the parameter name to match.
Parameter Value
Enter a value for the parameter.
- Click OK.
You can continue creating multiple page lists.
To create a URL list
- Under URL List Table, click +Add URL List Table, configure these same settings as for adding a page list.
- Click SAVE.
You can continue creating multiple URL lists.
To configure actions
- Select the action that FortiWeb Cloud takes when it detects a violation of the rule from the top right corner.
To configure the actions, you must first enable the Advanced Configuration in Global > System Settings > Settings.Alert
Accept the request and generate an alert email and/or log message.
Alert & Deny
Block the request (or reset the connection) and generate an alert email and/or log message.
Deny(no log)
Block the request (or reset the connection).
- Click SAVE.