Fortinet Managed Rules for AWS WAF - SQLi/XSS

Overview

Fortinet's WAF rulesets are based on the FortiWeb web application firewall security service signatures, and are updated on a regular basis to include the latest threat information from FortiGuard Labs. The SQLi/XSS Ruleset provides protection from the two primary web application attack types identified in the OWASP Top 10, SQL Injection and Cross-Site Scripting. Please see our other rulesets for additional protections.

Highlights

• Detects SQL Injection and Cross-Site Scripting Attacks

• Can be configured to log, alert and/or block

• Regular updates from FortiGuard Labs