Fortinet FortiWeb WAF Administrator Training

Download the ng community edition ISO and install it on VMware Workstation Pro by creating an Ubuntu VM with 16 GB RAM, then access the IP-based web UI.

upload ios switches images to eve-ng via ftp using winscp, extract from google drive zips, apply the license file in opt/unetlab, and configure L2 and L3 operation.

Learn to build an EVE-NG lab topology by uploading required images—FortiGate firewall, FortiWeb, Kali Linux, Metasploitable 2, Linux Mint, and Linux Ubuntu Desktop—and apply the fixed permission command.

Learn how to upload FortiWeb to Eve-NG using WinSCP, download the FortiWeb KVM image, prepare the lab directory, rename and set permissions, and boot FortiWeb for initial admin access.

Set up the FortiWeb lab behind a FortiGate firewall with three web servers, defined subnets, management cloud access, and virtual IP mappings.

Learn to export and import labs in EVE-NG, including sharing ready-made topologies, uploading from desktop, adjusting the management subnet, and starting or wiping nodes to reproduce the lab.

Configure three web servers (server one, two, and three) with static IPs, subnet mask, and gateway, editing network interfaces and verifying settings with ifconfig.

In fortinet fortiweb waf training, configure external pcs including Linux Mint and Kali Linux using static ip addresses (10.0.1.1–10.0.1.3), gateway 10.0.1.254, and dns 8.8.8.8 and 1.1.1.1, then verify via ping.

Configure a Fortigate firewall in a lab for Fortinet FortiWeb WAF Administrator Training, including interface setup, DNS, static routes, virtual IPs, and firewall policies, with backup/import for quick deployment.

Set up FortiWeb by logging in as admin, setting the password to 123, configuring hostname, admin timeout, time zone, and static management IP on port 1 with http, https, ssh.

Configure FortiWeb basics by setting the system time and NTP to Asia pool.ntp.org, and enable comprehensive logs for event, attack, and traffic via CLI and the logs and report settings.

Configure Fortiweb network settings by creating interfaces for management, outside, and inside, assigning IPs and DNS, and applying static or default routes via CLI or GUI.

Configure FortiWeb policy flow by creating a virtual IP, linking a virtual server, optionally adding a protected hostname, building a server pool, and binding these components in a server policy.

Explore how FortiWeb handles a client http request through ips, virtual servers, a protected hostname check, and a server pool to reach the real server, then returns the response.

Master the FortiWeb server policy workflow by linking signatures, URL rewrite rules, DOS policies, and web protection profiles to virtual servers and server pools to streamline traffic handling.

Configure virtual IPs on the FortiWeb external interface and create three VIPs named 100, 200, and 250 with IPs 192.168.2.100, 192.168.2.200, and 192.168.2.250 on port 2.

Configure virtual servers in FortiWeb by creating new virtual servers and mapping them to the pre-defined virtual IPs, enabling each to complete the lab topology.

Configure FortiWeb server pools SP 100, SP 200, and SP 250 with the corresponding members. Use HTTP reverse proxy and round-robin, noting that health checks and persistence aren't enabled yet.

Configure FortiWeb's signature policy by cloning the standard protection signature to create SG 100, SG 200, and SG 250, then enable edits on user-defined signatures, including cross site scripting.

Configure web protection profiles by cloning the default inline standard protection, create profiles 100, 200, and 250, then map signatures SG 100, SG 200, SG 250 to each profile.

Configure server policies by linking virtual server, virtual IP, server pool, http, and web protection profile with signatures across three policies (100, 200, 250).

Test and verify FortiWeb WAF configurations by mapping virtual IPs, server pools with round robin, and policies, generate traffic, monitor sessions, and enable traffic logs.

Fortiweb health checks monitor backend server availability and route traffic only to healthy servers. Learn the available checks: icmp, tcp, http, tcp half-open, and ssl, and how to enable them.

Configure icmp health checks on Fortiweb to monitor three backend servers in a nat topology, using predefined server pools, while noting icmp checks may miss service failures.

Configure tcp health checks to monitor server availability in a three-server lab. Verify with tcpdump and a three-way handshake, and note that tcp health checks may miss resource unavailability.

Configure a user-defined http health check in Fortiweb by cloning the default, setting the path to index, and validating 200 responses for backend availability.

Explore how FortiWeb provides basic load balancing alongside its web application firewall, including round robin, least connection, least response time, and various hash-based methods to distribute traffic among multiple servers.

Configure round robin load balancing in Fortiweb by creating a three-server pool and mapping a virtual server to an external IP, then verify even traffic distribution via logs and dashboards.

Configure weighted round robin load balancing in Fortinet FortiWeb by assigning weights one, two, and three to the servers in SP100, and test traffic distribution via logs and the dashboard.

Understand FortiWeb persistence and its rule types, like source IP and HTTP header hash, to route a client to the same backend server via cookies for carts and calls.

Configure source IP based persistence in FortiWeb, set a 10-second timeout, apply to the server pool, and verify behavior via traffic logs showing client routing to the same server.

Configure insert cookie persistence in FortiWeb to maintain user sessions by using NZ cookie persistence, apply to server pools, test with browser tools and verify cookies in HTTP headers.

Explore content routing in FortiWeb, routing requests to backend servers based on HTTP header and URL. Learn content rewrite, dynamically modifying HTTP headers, URLs, and response content before forwarding.

Configure http content routing on FortiWeb by defining server pools, creating http content routing policies, testing with debug mode, and validating traffic routing to specific servers.

Configure a FortiWeb HTTP rewrite rule to perform a 301 redirect, using a host regex and URL rule, applied via a URL rewrite policy, and verify with curl.

Configure the x-forwarded-for header on FortiWeb to reveal the real client IP behind net translation; attach the x-forwarded-for object to the web protection profile and verify via logs and headers.

Enable Fortiweb web vulnerability scan, configure a scan profile from a template, run against a target like 192.168.1.3, and review html reports for vulnerabilities such as sql injection and xss.

Create a custom vulnerability scan in FortiWeb by building an ID template with OS, server, and PHP version fingerprints, then run it under a web vulnerability policy and review results.

Discover how SSL offloading with FortiWeb reduces server load by decrypting HTTPS traffic and then re-encrypting for clients, while centralizing SSL certificate management.

Enable https in the server policy and import a certificate for FortiWeb ssl offloading; verify with logs that client traffic uses tls to FortiWeb and http to the backend.