Fortinet black logo

CLI Reference

system decoding enhancement

system decoding enhancement

Use this command to configure decoding enhancement. You can decode cookies and parameters using base64 or CSS for specified URLs.

To configure decoding enhancement, you must first enable the feature. For details, see system advanced.

To use this command, your administrator account’s access control profile must have either w or rw permission to the sysgrp area. For details, see Permissions.

Syntax

config system decoding-enhancement

edit <entry_index>

set url-type {plain | regular}

set url-pattern "<url_string>"

set b64arg enable

config field-list

edit <entry_index>

set base64-decoding {enable | disable}

set css-decoding {enable | disable}

set field-name "<parameter_cookie_str>"

set field-name-type {plain | regular}

set field-type {parameter | cookie}

next

end

next

end

Variable Description Default

<entry_index>

Enter the index number of the decoding rule that you want to create or modify.

No default.

url-type {plain | regular}

Enter to select between:

  • plain—A simple string; a string of text that contains a literal URL.
  • regular—A regular expression; a string of text that defines a search pattern for a URL that may come in many variations.

No default.

url-pattern "<url_string>"

Enter the URL path for which you want the decoding rule to apply.

No default.

b64arg {enable | disable}

  • When it’s enabled, all the parameters in the URL will be decoded before being parsed.
    If you only want to decode certain parameters instead of all, you can disable this option and then enable the base64-decoding to apply the decoding for specified parameters.
  • enable

    <entry_index>

    Enter the index number of the field that you want to create or modify.

    No default.

    base64-decoding {enable | disable}

    Configure to enable Base64 decoding for the field.

    disable

    css-decoding {enable | disable}

    Configure to enable CSS decoding for the field.

    disable

    field-name "<parameter_cookie_str>"

    Enter the parameter or cookie string for the field.

    No default.

    field-name-type {plain | regular}

    Enter to select between:

    • plain—A simple string; a string of text that contains a literal URL.
    • regular—A regular expression; a string of text that defines a search pattern for a URL that may come in many variations.

    No default.

    field-type {parameter | cookie}

    Enter to select between:

    • parameter—Enter to set a parameter field for the field.
    • cookie—Enter to set a cookie field for the field.

    No default.

    Example

    This example enables decoding enhancement and creates a decoding rule with a parameter field type.

    config system advanced

    set decoding-enhancement enable

    end

    config system decoding-enhancement

    edit 1

    set url-type plain

    set url-pattern "/decoding"

    config field-list

    edit 1

    set base64-decoding enable

    set css-decoding enable

    set field-type parameter

    set field-name-type plain

    set field-name key

    next

    end

    next

    end

    Related Topic(s)

    system decoding enhancement

    Use this command to configure decoding enhancement. You can decode cookies and parameters using base64 or CSS for specified URLs.

    To configure decoding enhancement, you must first enable the feature. For details, see system advanced.

    To use this command, your administrator account’s access control profile must have either w or rw permission to the sysgrp area. For details, see Permissions.

    Syntax

    config system decoding-enhancement

    edit <entry_index>

    set url-type {plain | regular}

    set url-pattern "<url_string>"

    set b64arg enable

    config field-list

    edit <entry_index>

    set base64-decoding {enable | disable}

    set css-decoding {enable | disable}

    set field-name "<parameter_cookie_str>"

    set field-name-type {plain | regular}

    set field-type {parameter | cookie}

    next

    end

    next

    end

    Variable Description Default

    <entry_index>

    Enter the index number of the decoding rule that you want to create or modify.

    No default.

    url-type {plain | regular}

    Enter to select between:

    • plain—A simple string; a string of text that contains a literal URL.
    • regular—A regular expression; a string of text that defines a search pattern for a URL that may come in many variations.

    No default.

    url-pattern "<url_string>"

    Enter the URL path for which you want the decoding rule to apply.

    No default.

    b64arg {enable | disable}

  • When it’s enabled, all the parameters in the URL will be decoded before being parsed.
    If you only want to decode certain parameters instead of all, you can disable this option and then enable the base64-decoding to apply the decoding for specified parameters.
  • enable

    <entry_index>

    Enter the index number of the field that you want to create or modify.

    No default.

    base64-decoding {enable | disable}

    Configure to enable Base64 decoding for the field.

    disable

    css-decoding {enable | disable}

    Configure to enable CSS decoding for the field.

    disable

    field-name "<parameter_cookie_str>"

    Enter the parameter or cookie string for the field.

    No default.

    field-name-type {plain | regular}

    Enter to select between:

    • plain—A simple string; a string of text that contains a literal URL.
    • regular—A regular expression; a string of text that defines a search pattern for a URL that may come in many variations.

    No default.

    field-type {parameter | cookie}

    Enter to select between:

    • parameter—Enter to set a parameter field for the field.
    • cookie—Enter to set a cookie field for the field.

    No default.

    Example

    This example enables decoding enhancement and creates a decoding rule with a parameter field type.

    config system advanced

    set decoding-enhancement enable

    end

    config system decoding-enhancement

    edit 1

    set url-type plain

    set url-pattern "/decoding"

    config field-list

    edit 1

    set base64-decoding enable

    set css-decoding enable

    set field-type parameter

    set field-name-type plain

    set field-name key

    next

    end

    next

    end

    Related Topic(s)