Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

CLI Reference

waf exclude-url

Use this command to configure URLs that are exempt from a file compression or file decompression rule.

To apply an exclusion, include it in a compression or decompression rule. For details, see waf file-compress-rule.

To use this command, your administrator account’s access control profile must have either w or rw permission to the wafgrp area. For details, see Permissions.

Syntax

config waf exclude-url

edit "<rule_name>"

config exclude-rules

edit <entry_index>

set host "<protected-host_name>"

set host-status {enable | disable}

set request-file "<url_str>"

next

end

next

end

Variable Description Default

"<rule_name>"

Enter the name of a new or existing exception. The maximum length is 63 characters.

To display a list of the existing exceptions, enter:

edit ?

No default.

<entry_index>

Enter the index number of the individual entry in the table. The valid range is 1–9,999,999,999,999,999,999. No default.

host "<protected-host_name>"

Enter the name of a protected host that the Host: field of an HTTP request must be in order to match the exception. The maximum length is 256 characters.

This setting applies only if host-status {enable | disable} is enable.

No default.

host-status {enable | disable}

Enable to apply this exception only to HTTP requests for specific web hosts. Also configure host "<protected-host_name>".

Disable to match the exception based upon the other criteria, such as the URL, but regardless of the Host: field.

disable

request-file "<url_str>"

Enter the literal URL, such as /archives, to which the exception applies. The URL must begin with a slash ( / ). Do not include the name of the host, such as www.example.com, which is configured separately using host. The maximum length is 256 characters. No default.

Example

This example configures two exclusion rules, one for compression and the other for decompression. Either rule can be referenced by name in a file compression or file decompression rule.

config waf exclude-url

edit "Compression Exclusion"

config exclude-rules

edit 1

set host "192.0.2.2"

set host-status enable

set request-file "/archives"

next

end

next

edit "Decompression Exclusion"

config exclude-rules

edit 1

set host "www.example.com"

set host-status enable

set request-file "/products.cfm"

next

end

next

end

Related topics

waf exclude-url

Use this command to configure URLs that are exempt from a file compression or file decompression rule.

To apply an exclusion, include it in a compression or decompression rule. For details, see waf file-compress-rule.

To use this command, your administrator account’s access control profile must have either w or rw permission to the wafgrp area. For details, see Permissions.

Syntax

config waf exclude-url

edit "<rule_name>"

config exclude-rules

edit <entry_index>

set host "<protected-host_name>"

set host-status {enable | disable}

set request-file "<url_str>"

next

end

next

end

Variable Description Default

"<rule_name>"

Enter the name of a new or existing exception. The maximum length is 63 characters.

To display a list of the existing exceptions, enter:

edit ?

No default.

<entry_index>

Enter the index number of the individual entry in the table. The valid range is 1–9,999,999,999,999,999,999. No default.

host "<protected-host_name>"

Enter the name of a protected host that the Host: field of an HTTP request must be in order to match the exception. The maximum length is 256 characters.

This setting applies only if host-status {enable | disable} is enable.

No default.

host-status {enable | disable}

Enable to apply this exception only to HTTP requests for specific web hosts. Also configure host "<protected-host_name>".

Disable to match the exception based upon the other criteria, such as the URL, but regardless of the Host: field.

disable

request-file "<url_str>"

Enter the literal URL, such as /archives, to which the exception applies. The URL must begin with a slash ( / ). Do not include the name of the host, such as www.example.com, which is configured separately using host. The maximum length is 256 characters. No default.

Example

This example configures two exclusion rules, one for compression and the other for decompression. Either rule can be referenced by name in a file compression or file decompression rule.

config waf exclude-url

edit "Compression Exclusion"

config exclude-rules

edit 1

set host "192.0.2.2"

set host-status enable

set request-file "/archives"

next

end

next

edit "Decompression Exclusion"

config exclude-rules

edit 1

set host "www.example.com"

set host-status enable

set request-file "/products.cfm"

next

end

next

end

Related topics