waf openapi-validation-policy

Use this command to create new openapi validation policy and configure related settings.

Syntax

config waf openapi-validation-policy

edit openapi-validation-policy_name

set action {alert | alert_deny | block-period | redirect | send_403_forbidden | deny_no_log}

set block-period "<seconds_int>"

set severity {Low | Medium | High | Info}

set trigger "<trigger-policy>"

config schema-file

edit schema-file_id

set openapi-file <datasource>

end

Variable	Description	Default
openapi-validation-policy_name	Enter the name for the OpenAPI validation policy.	No default
action {alert | alert_deny | block-period | redirect | send_403_forbidden | deny_no_log}	Select which action FortiWeb will take when it detects a violation of the policy.	alert
block-period "<seconds_int>"	Type the number of seconds that you want to block subsequent requests from the client after the FortiWeb appliance detects that the client has violated the rule. The valid range is 1–3600 seconds.	600
severity {Low | Medium | High | Info}	Select which severity level the FortiWeb appliance will use when it logs a violation of the rule.	Low
trigger "<trigger-policy>"	Select which trigger, if any, that the FortiWeb appliance will use when it logs and/or sends an alert email about a violation of the rule.	No default
schema-file_id	The scheme file by the sequence number.	No default.
openapi-file <datasource>	Select the created OpenAPI file.	No default.

Related topics

• waf openapi-file