Fortinet Document Library

Version:


Table of Contents

User Guide

Download PDF
Copy Link

CSRF Protection

A cross-site request forgery (CSRF) is an attack that exploits the trust that a site has in a user's browser to transmit unauthorized commands. FortiWeb Cloud uses a dedicated, per user token to track access to protected pages. To protect back-end servers from CSRF attacks, you create two lists of items, a list of web pages to protect against CSRF attacks, and a corresponding list of the URLs found in the requests that the pages generate.

To configure CSRF Protection, you must have already enabled this module in Add Modules. See How to add or remove a module.

To create a page list

  1. Click +Create Page List Table.
  2. Configure these settings.

    Full URL

    Enter a literal URL, for example, /www.test.com.

    Parameter Filter

    Enable to specify a parameter name and value to match. The parameter can be

    located in either the URL or the HTTP body of a request.

    Parameter Name

    Enter the parameter name to match.

    Parameter Value

    Enter a value for the parameter.

  3. Click OK.

You can continue creating multiple page lists.

To create a URL list

  1. Under URL List Table, click +Add URL List Table, configure these same settings as for adding a page list.
  2. Click SAVE.

You can continue creating multiple URL lists.

To configure actions

  1. Select the action that FortiWeb Cloud takes when it detects a violation of the rule from the top right corner.
    To configure the actions, you must first enable the Advanced Configuration in Global > Settings.

    Alert

    Accept the request and generate an alert email and/or log message.

    Alert & Deny

    Block the request (or reset the connection) and generate an alert email and/or log message.

    Deny(no log)

    Block the request (or reset the connection).

  2. Click SAVE.

CSRF Protection

A cross-site request forgery (CSRF) is an attack that exploits the trust that a site has in a user's browser to transmit unauthorized commands. FortiWeb Cloud uses a dedicated, per user token to track access to protected pages. To protect back-end servers from CSRF attacks, you create two lists of items, a list of web pages to protect against CSRF attacks, and a corresponding list of the URLs found in the requests that the pages generate.

To configure CSRF Protection, you must have already enabled this module in Add Modules. See How to add or remove a module.

To create a page list

  1. Click +Create Page List Table.
  2. Configure these settings.

    Full URL

    Enter a literal URL, for example, /www.test.com.

    Parameter Filter

    Enable to specify a parameter name and value to match. The parameter can be

    located in either the URL or the HTTP body of a request.

    Parameter Name

    Enter the parameter name to match.

    Parameter Value

    Enter a value for the parameter.

  3. Click OK.

You can continue creating multiple page lists.

To create a URL list

  1. Under URL List Table, click +Add URL List Table, configure these same settings as for adding a page list.
  2. Click SAVE.

You can continue creating multiple URL lists.

To configure actions

  1. Select the action that FortiWeb Cloud takes when it detects a violation of the rule from the top right corner.
    To configure the actions, you must first enable the Advanced Configuration in Global > Settings.

    Alert

    Accept the request and generate an alert email and/or log message.

    Alert & Deny

    Block the request (or reset the connection) and generate an alert email and/or log message.

    Deny(no log)

    Block the request (or reset the connection).

  2. Click SAVE.