Hi there
i have problem for poison Forti-cookie in traffic and check validity. until now, i config "cookie security policy" in web protection>cookie security>cookie security policy , and create new with recommended setting and assign them to "inline protection profile". but when i check cookies in web browser on client i don't see Forti-cookie Name and value.
The FortiWeb session cookie is named cookiesession1
To prevent tampering need use Security Mode = Singed
"When FortiWeb receives the first HTTP or HTTPS request from a client, it uses a cookie to track the session.
When you select this option, the session-tracking cookie includes a hash value that FortiWeb uses to detect tampering with the cookie from the back-end server response."
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.