NSE5-FWB-AD-8-0: Fortinet NSE 5 - FortiWeb 8.0 Administrator

By Fortinet · Question Mode

QuestionQ7

VerifiedWeb application and API security with botnet mitigation

You have configured parameter validation, file security, and machine-learning (ML) anomaly detection for a web form, yet some server-side request forgery tests are still successful. You need to advise the team on the next priority to improve SSRF protection without compromising other parts of the application.

Which recommendation would most strengthen FortiWeb's ability to block the remaining SSRF attempts?

Explanation

SSRF occurs when a backend fetches a user-supplied resource without adequately validating its destination. Tightening validation logic—especially by allowlisting permitted URL schemes, hosts, and destination patterns—closes filter-bypass paths while preserving FortiWeb’s other protections. Fortinet documents that FortiWeb’s input validation can enforce strict parameter rules and block untrusted destinations, including cloud metadata endpoints.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!