URL Access Parameter Optional Support (8.0.3)

FortiWeb 8.0.3 introduces an option that allows URL Access Parameters to be treated as optional. Previously, any parameter defined in a URL Access rule had to appear in the request for the rule to match. With this enhancement, administrators can allow a rule to match even when a parameter is absent, while still applying type or pattern checks when the parameter is present.

Configuration Update

Web Protection > Access > URL Access > URL Access Parameter:

Parameter	Description
Optional	Specifies whether the parameter must appear in the request for the URL Access rule to match. When enabled, the rule matches regardless of parameter presence, but still validates the parameter if it appears. Disabled by default.