Cross scripting security feature in Fortinet Firewall is blocking the devices in the dashboard

General
,
1

Hai CheckMK community,

It is noticed that the cross scripting security feature in Fortinet Firewall is blocking the devices in the dashboard from listing to global users, which means no devices is listing in the dashboard. If we disabled the security feature the same starts listing all devices to all global users. Disabling the security feature in firewall make the server more vulnerable. So please suggest a solution.

Regards,

Rojy Sam raju

2

Hi @itrojy
can you provide a bit more information on this topic maybe some logs from the firewall?

Is it this feature in the Fortinet? https://docs.fortinet.com/document/fortiweb/6.4.1/administration-guide/413696/cross-origin-resource-sharing-cors-protection

Looks like you have to create some rules/policy to allow access.

Greetings Norm

3

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed. Contact an admin if you think this should be re-opened.