Technical Tip: How to upload FortiDAST scanned report to WAF

The FortiDAST scanned report can be uploaded to FortiWeb. Once uploaded, the FortiWeb device will automatically create security rules in the Web-protection profile to address the issues identified during the FortiDAST application scan.

To upload the report, follow the steps below:

1. Navigate to Web Vulnerability Scan -> Scanner integration.

2. Select Scanner File Import -> Select type as FortiWeb Scanner.

3. Give a name to the profile and set the actions for High, Medium, and Low category attacks, and select OK.

    

4. Once the file is uploaded, the profile will look like below:

    

5. This can be further checked in the Web-Protection profile; a new profile will be created by the same name:

    

Note: Web-Protection profile can be edited as well.

Check the article below to see how to download the scan report from FortiDAST:

Technical Tip: How to download the scan report for WAF