Importing XML schema files

XML schema files specify the acceptable structure of and elements in an XML document. When you use XML schema files to check XML content in HTTP requests, FortiWeb can determine acceptable content and validate that the content is well-formed.

To configure FortiWeb to enforce XML schema files, create an XML protection rule and select an XML schema file for that rule. You can select only one XML schema file for each XML protection rule, but you can configure FortiWeb to enforce multiple rules in XML protection policies.

This section provides instructions to:

• Import an XML schema file
• Select an XML schema file in an XML protection rule

The acceptable file extension for XML schema files is .xsd.

To import an XML schema file

1. Go to API Protection > XML Protection.

To access this part of the web UI, your administrator's account access profile must have Read and Write permission to items in the Web Protection Configuration category. For details, see Permissions.

2. Select the XML Schema tab.
3. Click Create New.
4. For Upload File, click Choose File.
5. Select an acceptable XML schema file.

Note: If you upload an XML schema file that references other XML schema files, the other XML schema files must also be uploaded to FortiWeb.

6. Click OK.

FortiWeb uses the XML schema file name to reference the file in other parts of the configuration. For example, if you upload an XML schema file named attr0_0.xsd, select that XML schema file in a protection rule with the name attr0_0.xsd in the list of available XML schema files.

To select an XML schema file in an XML protection rule

For details about creating a XML protection rule, see Creating XML protection rules.

1. Go to API Protection > XML Protection.

To access this part of the web UI, your administrator's account access profile must have Read and Write permission to items in the Web Protection Configuration category. For details, see Permissions.

2. Select the XML Protection Rule tab.
3. Select an existing XML protection rule to which you want to add the XML schema file.
4. For Schema Validation, select the XML schema file from the drop down menu.
5. Click OK.