Fortinet white logo
Fortinet white logo

Administration Guide

DoS Protection Exception Policy (7.6.0)

DoS Protection Exception Policy (7.6.0)

You can create an exception policy to omit DDoS attack scans when you know that some source IPs may trigger false positives during normal use. The exception policy can be applied in Dos Protection Policy, HTTP Access Limit, Malicious IPs, HTTP Flood, and TCP Flood policy.

To create an exception policy:

  1. Go to DoS Protection > Exception Policy.
  2. Click Create New.
  3. Enter a name for the policy.
  4. Click OK.
  5. Click Create New.
  6. On the New DoS Protection Exception Policy page, select the type of element to exempt from DDoS attack scans.

    Client IP

    Specify the client IP address or IP range that FortiWeb uses to determine whether or not to perform a DDoS attack scan for the request.

    IP GroupSelect the IP group which you have created in Server Objects > IP Group.
  7. Click OK.

You can later reference the Exception policy in Dos Protection Policy, HTTP Access Limit, Malicious IPs, HTTP Flood, and TCP Flood policy.

For more information on DoS Protection, see DoS Protection.

DoS Protection Exception Policy (7.6.0)

DoS Protection Exception Policy (7.6.0)

You can create an exception policy to omit DDoS attack scans when you know that some source IPs may trigger false positives during normal use. The exception policy can be applied in Dos Protection Policy, HTTP Access Limit, Malicious IPs, HTTP Flood, and TCP Flood policy.

To create an exception policy:

  1. Go to DoS Protection > Exception Policy.
  2. Click Create New.
  3. Enter a name for the policy.
  4. Click OK.
  5. Click Create New.
  6. On the New DoS Protection Exception Policy page, select the type of element to exempt from DDoS attack scans.

    Client IP

    Specify the client IP address or IP range that FortiWeb uses to determine whether or not to perform a DDoS attack scan for the request.

    IP GroupSelect the IP group which you have created in Server Objects > IP Group.
  7. Click OK.

You can later reference the Exception policy in Dos Protection Policy, HTTP Access Limit, Malicious IPs, HTTP Flood, and TCP Flood policy.

For more information on DoS Protection, see DoS Protection.