Fortinet white logo
Fortinet white logo

CLI Reference

config waf staging-signature-list

config waf staging-signature-list

Use this command to manage the enforcement status of specific WAF signatures currently in the staging list. This command interacts with the WAF Signature Staging feature, allowing administrators to manually promote signatures to active enforcement ("applied"), disable them, or keep them in the default observation mode ("unapplied").

Note: While you can modify the status of specific signatures via the CLI, it does not support displaying the full, dynamically populated staging list. It is recommended to manage WAF Signature Staging using the GUI, where you can view the complete list and filter by status. For detailed feature descriptions and usage, see the FortiADC Administration Guide.

Syntax

config waf staging-signature-list

edit <signature_id>

set status {applied|disabled|unapplied}

end

end

edit <signature_id>

Specifies the unique ID of the WAF signature you want to configure (e.g., 1002013569).

status

Defines the action/state for the staged signature:

  • unapplied: (Default) The signature operates in alert-only mode. It is active in the rulescan core but only logs violations without blocking traffic, regardless of the WAF profile's action setting. This allows for false-positive testing.

  • applied: The signature is fully enforced. It executes the action configured in the WAF profile (e.g., Deny or Block).

  • disable: The signature is deactivated and does not participate in rule matching.

config waf staging-signature-list

config waf staging-signature-list

Use this command to manage the enforcement status of specific WAF signatures currently in the staging list. This command interacts with the WAF Signature Staging feature, allowing administrators to manually promote signatures to active enforcement ("applied"), disable them, or keep them in the default observation mode ("unapplied").

Note: While you can modify the status of specific signatures via the CLI, it does not support displaying the full, dynamically populated staging list. It is recommended to manage WAF Signature Staging using the GUI, where you can view the complete list and filter by status. For detailed feature descriptions and usage, see the FortiADC Administration Guide.

Syntax

config waf staging-signature-list

edit <signature_id>

set status {applied|disabled|unapplied}

end

end

edit <signature_id>

Specifies the unique ID of the WAF signature you want to configure (e.g., 1002013569).

status

Defines the action/state for the staged signature:

  • unapplied: (Default) The signature operates in alert-only mode. It is active in the rulescan core but only logs violations without blocking traffic, regardless of the WAF profile's action setting. This allows for false-positive testing.

  • applied: The signature is fully enforced. It executes the action configured in the WAF profile (e.g., Deny or Block).

  • disable: The signature is deactivated and does not participate in rule matching.