WAF Configuration

Configure the FortiWeb details in this tab to generate WAF rules. Provide the WAF URL (FortiWeb IP address/URL), FortiWeb Username and Password, and the Administrative Domain (VDOM name). Click Validate to authenticate the FortiWeb credentials. After the scan is complete, the XML is generated and rules are created in FortiWeb dynamically based on the Actions configured and the WAF supported Vulnerability Selection.

Note: WAF is supported for FortiWeb on-prem only.

Notifications for the newly created rules are sent through email and through the notification icon in FortiDAST.

You can generate WAF reports manually from Scans Overview > Summary > Overview section. See Exporting Scan Result to FortiWeb WAF.