How can I configure FortiGate's rate limiting features to prevent HTTP flood attacks?

To configure rate limiting for HTTP flood protection on FortiGate, create a firewall policy for HTTP traffic. In the policy settings, enable 'Traffic Shaping' and define a 'Shared Shaper' or 'Per-IP Shaper' that limits the number of HTTP requests from a single IP address or a group of IP addresses within a specified timeframe. Monitor the number of dropped packets and adjust the rate limits accordingly to avoid blocking legitimate users.