Fortinet black logo

Administration Guide

What's new

What's new

FortiWeb 7.2.2 offers the following new features and enhancements.

Threat Analytics 14-day eval license

A new 14-day eval license is now available for customers that want to try out the powerful AI-based Threat Analytics service that helps identify significant threats and helps you zoom in on the threats that matter. Eval license can be enabled directly from the UI.

For more information, see Analyzing attack logs in FortiWeb Cloud Threat Analytics.

Firewall Admin policy

Firewall Admin policy is introduced in System > Firewall. It has the ability to granularly restrict the admin access to FortiWeb by combining multiple matching conditions, e.g. the source and destination addresses of the traffic, the ingress interface, and services.

For more information, see Configuring the integrated firewall.

IP Group – uploading an IP List in batch

In IP Group, instead of configuring IPs one by one, you can now upload a CSV file with a list of IPs instead.

For more information, see Creating IP groups.

IP group in IP reputation

It is now possible to reference an IP group when configuring the exception list in IP reputation.

Site publish rule configuration maximum increased

The maximum number of site publish rules has been increased from 216 to 512.

TLS settings for ADFS proxy server pool

When FortiWeb is deployed as an ADFS proxy, it is now possible to configure the SSL protocols and SSL/TLS encryption level of the server pool.

FortiWeb HA on AliCloud and SCCC AliCloud.

FortiWeb-VM instances can now be deployed in active-passive HA and high volume active-active HA modes on AliCloud and SCCC AliCloud.

For more information, see Use Case: High Availability for FortiWeb on AliCloud.

FortiWeb HA on AliCloud

FortiWeb-VM instances can now be deployed in active-passive HA and high volume active-active HA modes on AliCloud (including Saudi Arabia SCCC).

For more information, see Use Case: High Availability for FortiWeb on AliCloud.

FortiWeb-VM on AWS support IMDSv2

From 7.2.2, FortiWeb-VM on AWS supports Instance Metadata Service Version 2. If you use the cloud-init feature to upload license or run CLI commands while deploying the image, it's recommended to enable IMDSv2 on AWS to ensure better security. See this article for how to enable IMDSv2.

What's new

FortiWeb 7.2.2 offers the following new features and enhancements.

Threat Analytics 14-day eval license

A new 14-day eval license is now available for customers that want to try out the powerful AI-based Threat Analytics service that helps identify significant threats and helps you zoom in on the threats that matter. Eval license can be enabled directly from the UI.

For more information, see Analyzing attack logs in FortiWeb Cloud Threat Analytics.

Firewall Admin policy

Firewall Admin policy is introduced in System > Firewall. It has the ability to granularly restrict the admin access to FortiWeb by combining multiple matching conditions, e.g. the source and destination addresses of the traffic, the ingress interface, and services.

For more information, see Configuring the integrated firewall.

IP Group – uploading an IP List in batch

In IP Group, instead of configuring IPs one by one, you can now upload a CSV file with a list of IPs instead.

For more information, see Creating IP groups.

IP group in IP reputation

It is now possible to reference an IP group when configuring the exception list in IP reputation.

Site publish rule configuration maximum increased

The maximum number of site publish rules has been increased from 216 to 512.

TLS settings for ADFS proxy server pool

When FortiWeb is deployed as an ADFS proxy, it is now possible to configure the SSL protocols and SSL/TLS encryption level of the server pool.

FortiWeb HA on AliCloud and SCCC AliCloud.

FortiWeb-VM instances can now be deployed in active-passive HA and high volume active-active HA modes on AliCloud and SCCC AliCloud.

For more information, see Use Case: High Availability for FortiWeb on AliCloud.

FortiWeb HA on AliCloud

FortiWeb-VM instances can now be deployed in active-passive HA and high volume active-active HA modes on AliCloud (including Saudi Arabia SCCC).

For more information, see Use Case: High Availability for FortiWeb on AliCloud.

FortiWeb-VM on AWS support IMDSv2

From 7.2.2, FortiWeb-VM on AWS supports Instance Metadata Service Version 2. If you use the cloud-init feature to upload license or run CLI commands while deploying the image, it's recommended to enable IMDSv2 on AWS to ensure better security. See this article for how to enable IMDSv2.