WAF modules

When you onboard a new application on FortiWeb Cloud, the system will automatically assign a security policy for your application, with the Security Rules and Access Rules modules enabled. You can select additional protection rules using the Modules tab.

For information on adding and removing a module, refer to How to add or remove a module.

The following modules are available for FortiWeb Cloud:

• Security Rules
• Client Security
• Access Rules
• Bot Mitigation
• DDoS Prevention
• Advanced Applications
• API Protection
• Account Takeover
• Application Delivery
• Global Trustlist

For any configuration you made in a module, it may take several minutes for the configuration to take effect.