Debug commands enhancements
FortiWeb has introduced two debug commands in this release.
diagnose debug nowaf
This command is to disable all or some of security modules in a policy to narrow down the root cause.
diagnose debug nowaf enable
diagnose debug nowaf set <adom name>.< policy name> <module name1> <module name2> … <module nameN>
diagnose debug flow filter module-bypass-info
If a certain security module doesn't block the request as expected, it might be due to the request being allowed by a precedent module, causing it to skip all the following modules. To check which modules might have such an effect, allowing a request to pass before reaching the current one, you can run the following command:
diagnose debug flow filter module-bypass-info <module name>
Below is an example of the command and its printout:
