Original URL Match Support in URL Filtering (8.0.3)

FortiWeb 8.0.3 adds a new CLI option under config server-policy policy to support matching against the original, unnormalized request URL. This improves accuracy for URL filtering rules when paths contain relative segments such as ../ or other components that are removed during normalization.

CLI Update

A new setting, unnormalized-url-match, allows FortiWeb to fall back to the original URL if the normalized URL does not match any configured pattern. This enhances detection for cases where administrators need rules to match the user-supplied path rather than the normalized version.

config server-policy policy
    edit <name>
        set unnormalized-url-match {enable | disable}
    next
end

• disable (default): Only the normalized URL is evaluated for matching.

• enable: If the normalized URL fails to match, FortiWeb evaluates the original, unnormalized URL.

  This benefits modules that rely on URL filtering, including URL Access, Global URL Whitelist, JSON/XML Validation, and other components that typically operate on normalized paths.