What can a FortiWeb administrator do if a client has been incorrectly period blocked?

When a client's IP address is incorrectly blocked by FortiWeb's period block feature, the administrator can manually intervene. The FortiWeb GUI provides a monitoring page specifically for this purpose, typically called "Banned IP." From this page, an administrator can view the list of all currently blocked IP addresses, the reason for the block, and the remaining block duration. The administrator can then select the specific IP address that was incorrectly blocked and manually delete it from this list, immediately restoring access for the client without waiting for the block period to expire.

A. This is incorrect. FortiWeb provides a direct administrative function to view and manually release IPs from the temporary blocklist.

C. This is an improper and disruptive method. While it might clear the block, it would interrupt service for all legitimate users of the application protected by that policy.

D. FortiWeb is a security appliance and does not have the functionality to manage or assign IP addresses to clients on the network.

1. FortiWeb Administration Guide 7.0.3

Page 648

Section: "Monitoring system status > Banned IP".

The guide states: "The Banned IP page displays a list of IP addresses that are currently blocked by FortiWeb... To release a banned IP address

select it and click Delete." This directly confirms that an administrator can manually release a blocked IP.

2. FortiWeb Administration Guide 7.2.0

Page 721

Section: "Log & Report > Monitor > Banned IP".

This section details the "Banned IP" monitor

explaining its function is to display temporarily blocked IPs. The presence of a "Delete" option in the GUI screenshot and description confirms the ability to manually remove an entry.