How to fix WAF blocks file download and shows Error Event:60140003

This article describes how to resolve cases where a WAF(Web Application Firewall) blocks file downloads and provides the error code 60140003.

Scope

FortiGate.

First, verify the signature details using the following command:

diagnose waf dump | grep '90300017'
#90300017 - This signature prevents attackers from obtaining file and folder names using a tilde character "~"

First, verify the signature details using the following command.

Use one of the following solutions to pass the traffic:

Solution 1:

Set the action to Monitor for Generic Attacks in the WAF profile to pass the traffic through.

Solution 2:

Use a Custom signature to allow specific traffic. Refer to this document for instructions.