Fortinet black logo

Administration Guide

Waiting room

Waiting room

You can use Waiting Room to manage visitor traffic and avoid server overload delays, you can enable a virtual holding space and queuing system, allowing new users to enter a Waiting Room where they can view estimated wait times before accessing your application.

This feature may be configured for your entire website, or specific URL paths.

Here is an example of the message displayed to your users when they are queued to access your application.

To configure a Waiting Room policy:

  1. Go to Application Delivery > Waiting Room.
  2. Click Create New.

    Configure these settings:

    Please note, you are required to configure at least one of Total Active Users and New Users Per Minute. In addition, Path and Session Duration cannot be empty.

    Name

    Enter a name for the Waiting Room policy.

    Path Type

    Select whether to use a Simple String or a Regular Expression to specify the URLs for the Waiting Room. When users access the URL, FortiWeb will queue their requests according to the Waiting Room policy.

    Path

    The waiting room will only be enabled for the configured URL. Use /.* to match all.

    • If Path Type is Simple String, enter the literal URL.

    • If Path Type is Regular Expression, enter a regular expression to match the URLs.

    This value cannot be empty.

    Total Active Users

    Control the size of traffic accessing your application.

    If the number of active users reaches the configured value, additional users will enter the Waiting Room.

    New Users per Minute

    Prevent your application from being flooded by new users in a short time span.

    If the number of new users per minute reaches the configured value, additional users will enter the Waiting Room.

    At least specify one of Total Active Users and New Users per Minute.

    If you choose to configure both, make sure that Total Active Users is set to a value greater than or equal to New Users Per Minute.

    Session Duration

    Users who have remained idle for the configured time will be considered as a new user.

    Users who have ended and restarted the session will also be considered as a new user.

    This value cannot be empty.

    Description

    Enter a brief description for the Waiting Room Policy.

    Bypass Rules

    Allow users with certain IP addresses to access your application directly, even if they trigger the above limiting conditions.

    Click Create New and enter an IP address or range in the Value field to configure a new Bypass rule.

  3. Click OK.
  4. Click Create New to create a bypass rule to allow users from certain IP addresses to access your application directly, even if they trigger the above limiting conditions.
  5. Enter an IP address or range in the Source IPv4/IPv6/IP Range field.
  6. Click OK.

You can later on reference the Waiting Room policy in Web Protection Profile.

Waiting room

You can use Waiting Room to manage visitor traffic and avoid server overload delays, you can enable a virtual holding space and queuing system, allowing new users to enter a Waiting Room where they can view estimated wait times before accessing your application.

This feature may be configured for your entire website, or specific URL paths.

Here is an example of the message displayed to your users when they are queued to access your application.

To configure a Waiting Room policy:

  1. Go to Application Delivery > Waiting Room.
  2. Click Create New.

    Configure these settings:

    Please note, you are required to configure at least one of Total Active Users and New Users Per Minute. In addition, Path and Session Duration cannot be empty.

    Name

    Enter a name for the Waiting Room policy.

    Path Type

    Select whether to use a Simple String or a Regular Expression to specify the URLs for the Waiting Room. When users access the URL, FortiWeb will queue their requests according to the Waiting Room policy.

    Path

    The waiting room will only be enabled for the configured URL. Use /.* to match all.

    • If Path Type is Simple String, enter the literal URL.

    • If Path Type is Regular Expression, enter a regular expression to match the URLs.

    This value cannot be empty.

    Total Active Users

    Control the size of traffic accessing your application.

    If the number of active users reaches the configured value, additional users will enter the Waiting Room.

    New Users per Minute

    Prevent your application from being flooded by new users in a short time span.

    If the number of new users per minute reaches the configured value, additional users will enter the Waiting Room.

    At least specify one of Total Active Users and New Users per Minute.

    If you choose to configure both, make sure that Total Active Users is set to a value greater than or equal to New Users Per Minute.

    Session Duration

    Users who have remained idle for the configured time will be considered as a new user.

    Users who have ended and restarted the session will also be considered as a new user.

    This value cannot be empty.

    Description

    Enter a brief description for the Waiting Room Policy.

    Bypass Rules

    Allow users with certain IP addresses to access your application directly, even if they trigger the above limiting conditions.

    Click Create New and enter an IP address or range in the Value field to configure a new Bypass rule.

  3. Click OK.
  4. Click Create New to create a bypass rule to allow users from certain IP addresses to access your application directly, even if they trigger the above limiting conditions.
  5. Enter an IP address or range in the Source IPv4/IPv6/IP Range field.
  6. Click OK.

You can later on reference the Waiting Room policy in Web Protection Profile.