Fortinet white logo
Fortinet white logo

CLI Reference

waf url-access-parameter

waf url-access-parameter

Use this command to add URL access parameter rules. It should be referred in an URL access rule.

To use this command, your administrator account’s access control profile must have either w or rw permission to the wafgrp area. For details, see Permissions.

Syntax

config waf url-access-parameter

edit waf url-access-parameter

config waf url-access-parameter-list

edit <index>

set argument-name-type {plain | regular}

set argument-name <string>

set optional {enable | disable}

set type-checked {enable | disable}

set argument-type {data-type | regular-expression | custom-data-type}

set data-type <data_type>

set argument-expression <string>

set custom-data-type <datasource>

next

end

next

end

Variable Description Default

"<url-access-parameter-rule_name>"

Enter the name of a new or existing rule. The maximum length is 63 characters.

To display the list of existing rules, enter:

edit ?

No default.

argument-name-type {plain | regular}

Select whether the parameter name field must contain either:

  • plain —The field is a string that the name must match exactly.

  • regular —The field is a regular expression that defines a set of matching names.

plain

argument-name <string>

Depending on your selection in Type, enter either:

  • The literal name that the HTTP request must contain in order to match the rule.
  • A regular expression.

To create and test a regular expression, click the >> (test) icon. This opens the Regular Expression Validator window where you can fine-tune the expression. For details, see "Regular expression syntax" on page 1.

No default.

optional {enable | disable}

Specifies whether the parameter must appear in the request for the URL Access rule to match. When enabled, the rule matches regardless of parameter presence, but still validates the parameter if it appears.

disable

type-checked {enable | disable}

If type-checked is enabled, parameter value must match the argument specified.

disable

argument-type {data-type | regular-expression | custom-data-type}

The argument-type option is available if type-checked is enabled.

Select the type of the parameter value:

  • data-type

  • regular-expression

  • custom-data-type

data-type

data-type <data_type>

If data-type is selected as the argument-type, select the specific data type.

No default.

argument-expression <string>

If regular-expression is selected as the argument-type, enter the regular expression.

No default.

custom-data-type <datasource>

If custom-data-type is selected as the argument-type, select the custom data type.

No default.

waf url-access-parameter

waf url-access-parameter

Use this command to add URL access parameter rules. It should be referred in an URL access rule.

To use this command, your administrator account’s access control profile must have either w or rw permission to the wafgrp area. For details, see Permissions.

Syntax

config waf url-access-parameter

edit waf url-access-parameter

config waf url-access-parameter-list

edit <index>

set argument-name-type {plain | regular}

set argument-name <string>

set optional {enable | disable}

set type-checked {enable | disable}

set argument-type {data-type | regular-expression | custom-data-type}

set data-type <data_type>

set argument-expression <string>

set custom-data-type <datasource>

next

end

next

end

Variable Description Default

"<url-access-parameter-rule_name>"

Enter the name of a new or existing rule. The maximum length is 63 characters.

To display the list of existing rules, enter:

edit ?

No default.

argument-name-type {plain | regular}

Select whether the parameter name field must contain either:

  • plain —The field is a string that the name must match exactly.

  • regular —The field is a regular expression that defines a set of matching names.

plain

argument-name <string>

Depending on your selection in Type, enter either:

  • The literal name that the HTTP request must contain in order to match the rule.
  • A regular expression.

To create and test a regular expression, click the >> (test) icon. This opens the Regular Expression Validator window where you can fine-tune the expression. For details, see "Regular expression syntax" on page 1.

No default.

optional {enable | disable}

Specifies whether the parameter must appear in the request for the URL Access rule to match. When enabled, the rule matches regardless of parameter presence, but still validates the parameter if it appears.

disable

type-checked {enable | disable}

If type-checked is enabled, parameter value must match the argument specified.

disable

argument-type {data-type | regular-expression | custom-data-type}

The argument-type option is available if type-checked is enabled.

Select the type of the parameter value:

  • data-type

  • regular-expression

  • custom-data-type

data-type

data-type <data_type>

If data-type is selected as the argument-type, select the specific data type.

No default.

argument-expression <string>

If regular-expression is selected as the argument-type, enter the regular expression.

No default.

custom-data-type <datasource>

If custom-data-type is selected as the argument-type, select the custom data type.

No default.