| Description | This article describes how to troubleshoot a non-working vulnerability scan with zero results. |
| Scope | FortiWeb. |
| Solution |
Step 1: Enable the vulnerability scan feature at System -> Config -> Feature Visibility. Step 2: At the Scan Profile make sure to include http:// Or https:// in the domain. 
Step 3: Make sure the domain is resolving to the real server IP and not the public IP, or use the real server IP address instead of the domain.
Step 4: Packet captures the connection between FortiWeb and the real server at Network -> Packet Capture:
Related document: |
