Enabling machine learning policy

To take advantage of FortiWeb's machine-learning feature, you must enable it first. You can start the process by creating a machine-learning profile.

To create a machine-learning profile:

1. Click Policy > Server Policy.
2. Select an existing server policy or create a new one by clicking Create New > Create HTTP Policy.
3. Scroll down to the Machine Learning section at the bottom of the page, click the Anomaly Detection tab or the Bot Detection tab, then click Create. The New Machine Learning dialog opens.
   Note: If you are creating a new server policy, you must complete the Network Configuration on this page first, then create a machine learning policy.
4. If you want to create an anomaly detection policy:
   • Click the + (Add) sign after the Domain filed to add the desired domains, so that the system collects samples and builds up a machine learning model for the domains.
   • Click the + (Add) sign after the IP Range field to add IP/Range, then select Trust or Black to limit the system to collect data only from the trusted IP range, or exclude the IP range when collecting data. Leave this field empty to collect data from all sources.
5. If you want to create a bot detection policy:
   • Click the + (Add) sign after the IP Range field to add IP/Range, so as to limit the system to collect data only from the specified IP range. Leave this field empty to collect data from all sources.
     
6. Click Create to enable Machine Learning.

You can go to Machine Leaning > Anomaly Detection or Machine Leaning > Bot Detection to edit the machine learning policies you have created.

Button	Function
View	Click to view and edit machine learning policies and their learning results. Note: You can also access the Machine Learning page by clicking Machine Learning > Machine Learning Policy, and then selecting a specific profile.
Start/Stop	Click to start/stop Machine Learning for the policy.
Refresh	Click to restart machine learning for all URLs in the policy. Note: This will discard all existing learning results and then relearn all data.
Discard	Click to remove all learned URLs from the profile. Note: FortiWeb will not re-learn those URLs.
Export	Click to export all the data generated by the machine learning policy.
Import	Click to import the machine learning data from your local directory to FortiWeb. Note: The machine learning data generated in FortiWeb 6.0 cannot be imported in FortiWeb 6.0.1, and vice versa.