Fortinet white logo
Fortinet white logo

User Guide

WAF Settings

WAF Settings

Fabric Connector

Connect to the Security Fabric with FortiGate version 7.0 or newer (except 7.2). For configuration instructions, see Connecting WAF to the Fortinet Security Fabric.

Preferred Platform

Enable Preferred Platform to allow choosing the preferred Cloud Platform and geographical Region during WAF Onboarding.

Consumption Report

This feature is disabled by default. Enabling this feature will result in the automatic generation and delivery of monthly Consumption Reports to the email addresses entered in the Recipients box.

Consumption reports encompass usage details for all applications within the user's account, providing data on metrics like throughput and bandwidth. Consumption data for each month is generated on the 5th of the following month. For instance, data for October will be generated on November 5th.

Please refer to the table below on levels of access for different user types:

User Type

Level of Access

Organization root account Can enable or disable consumption report for itself and all tenants.
Organization user, not root account Cannot enable nor disable consumption report.
Non-OU user, excluding Tenants Can enable or disable consumption report for itself.
Tenant Cannot enable nor disable consumption report.

SOCaaS

Enable Security Operations Center-as-a-Service (SOCaaS) for your WAF applications and view your SOC service status. SOCaaS is available to customers with the Enterprise bundle or those who have purchased the SOCaaS SKU separately.

To avoid contract synchronization issues, we recommend enabling SOCaaS from the FortiAppSec Cloud portal before onboarding. If onboarding begins without first logging into the portal, SOC contract information may not be available to FortiAppSec, which can lead to SOC status update failures.

To enable SOCaaS for WAF applications, click the Enable SOCaaS button. This opens the SOCaaS portal to complete onboarding. For onboarding instructions within the SOCaaS portal, please refer to SOCaaS documentation.

If SOCaaS is enabled, switching the WAF license (e.g., activating a new license) must be coordinated by submitting a Service request from the SOC portal.

  1. Log into FortiCloud.

  2. Navigate to Services > Cloud Services > SOCaaS.

  3. Navigate to Service Requests.

  4. Click Service Request to add a service request.

    For the Type, select License Renewal. For additional information on the configuration options on this page, please refer to SOCaaS documentation.

SOCaaS for WAF applications currently does not support changing data regions through the FortiAppSec Cloud Portal. To request a region change, contact the SOC team at socaas@fortinet-us.com

For information on enabling SOCaaS for Gateways, please refer to Security Operations Center-as-a-Service (SOCaaS).

WAF Settings

WAF Settings

Fabric Connector

Connect to the Security Fabric with FortiGate version 7.0 or newer (except 7.2). For configuration instructions, see Connecting WAF to the Fortinet Security Fabric.

Preferred Platform

Enable Preferred Platform to allow choosing the preferred Cloud Platform and geographical Region during WAF Onboarding.

Consumption Report

This feature is disabled by default. Enabling this feature will result in the automatic generation and delivery of monthly Consumption Reports to the email addresses entered in the Recipients box.

Consumption reports encompass usage details for all applications within the user's account, providing data on metrics like throughput and bandwidth. Consumption data for each month is generated on the 5th of the following month. For instance, data for October will be generated on November 5th.

Please refer to the table below on levels of access for different user types:

User Type

Level of Access

Organization root account Can enable or disable consumption report for itself and all tenants.
Organization user, not root account Cannot enable nor disable consumption report.
Non-OU user, excluding Tenants Can enable or disable consumption report for itself.
Tenant Cannot enable nor disable consumption report.

SOCaaS

Enable Security Operations Center-as-a-Service (SOCaaS) for your WAF applications and view your SOC service status. SOCaaS is available to customers with the Enterprise bundle or those who have purchased the SOCaaS SKU separately.

To avoid contract synchronization issues, we recommend enabling SOCaaS from the FortiAppSec Cloud portal before onboarding. If onboarding begins without first logging into the portal, SOC contract information may not be available to FortiAppSec, which can lead to SOC status update failures.

To enable SOCaaS for WAF applications, click the Enable SOCaaS button. This opens the SOCaaS portal to complete onboarding. For onboarding instructions within the SOCaaS portal, please refer to SOCaaS documentation.

If SOCaaS is enabled, switching the WAF license (e.g., activating a new license) must be coordinated by submitting a Service request from the SOC portal.

  1. Log into FortiCloud.

  2. Navigate to Services > Cloud Services > SOCaaS.

  3. Navigate to Service Requests.

  4. Click Service Request to add a service request.

    For the Type, select License Renewal. For additional information on the configuration options on this page, please refer to SOCaaS documentation.

SOCaaS for WAF applications currently does not support changing data regions through the FortiAppSec Cloud Portal. To request a region change, contact the SOC team at socaas@fortinet-us.com

For information on enabling SOCaaS for Gateways, please refer to Security Operations Center-as-a-Service (SOCaaS).