Enabling machine learning policy
To take advantage of FortiWeb's machine-learning feature, you must enable it first. You can start the process by creating a machine-learning profile.
To create a machine-learning profile:
- Click Policy >Server Policy.
- Select an existing server policy or create a new one by clicking Create New > Create HTTP Policy.
- Scroll down to the Machine Learning section at the bottom of the page, click the Anomaly Detection tab or the Bot Detection tab, then click Create. The New Machine Learning dialog opens.
Note: If you are creating a new server policy, you must complete the Network Configuration on this page first, then create a machine learning policy. - If you want to create an anomaly detection profile:
- Click the + (Add) sign after the Domain filed to add the desired domains, so that the system collects samples and builds up a machine learning model for the domains.
- Click the + (Add) sign after the IP Range field to add IP/Range, then select Trust or Black to limit the system to collect data only from the trusted IP range, or exclude the IP range when collecting data. Leave this field empty to collect data from all sources.
- If you want to create a bot detection profile:
- Click the + (Add) sign after the IP Range field to add IP/Range, so as to limit the system to collect data only from the specified IP range. Leave this field empty to collect data from all sources.
- Click the + (Add) sign after the IP Range field to add IP/Range, so as to limit the system to collect data only from the specified IP range. Leave this field empty to collect data from all sources.
- Click Create to enable Machine Learning.
Once enabled, the Machine Learning section will show the following control buttons. You can go to Machine Leaning > Anomaly Detection or Machine Leaning > Bot Detection to configure the machine learning profiles you have created.
| Button | Function |
|---|---|
| View |
Click to view and edit machine learning policies and their learning results. Note: You can also access the Machine Learning page by clicking Machine Learning>Machine Learning Policy, and then selecting a specific profile. |
| Start/Stop |
Click to start/stop Machine Learning for the policy. |
| Refresh |
Click to restart machine learning for all URLs in the policy. Note: This will discard all existing learning results and then relearn all data. |
| Discard |
Click to remove all learned URLs from the profile. Note: FortiWeb will not re-learn those URLs. |
| Export |
Click to export all the data generated by the machine learning policy. |
| Import |
Click to import the machine learning data from your local directory to FortiWeb. Note: The machine learning data generated in FortiWeb 6.0 cannot be imported in FortiWeb 6.0.1, and vice versa. |