WAF Workflow and Dashboard Overview
This section provides an introduction to the primary web portal pages for configuring settings and monitoring application activity in FortiAppSec Cloud's WAF service.
Application Page
Many WAF configurations specific to each application, making the Application page your central hub for configuring and monitoring individual applications.
On the Application page, you can perform actions like creating an application, adjusting the IP allowlist, and editing the name, CDN, and region for each application. For detailed instructions on these tasks, refer to WAF Applications.
To access WAF's security features, select one of your applications. This brings you to the selected application's WAF security dashboard, and updates the WAF side navigation menu to display the selected application's dashboard, FortiView, network settings, and enabled modules.
Individual Application pages
The pages in this section are accessed by clicking into an application as described above.
Dashboard
This dashboard displays general security insights from the WAF service. For details on the widgets on this page, please refer to WAF Application Dashboard.
FortiView
FortiAppSec Cloud WAF detects attacks to your application and displays the threats in FortiView. Navigate to any page within this section to explore detailed information on the available threat categories.
Network
After you complete onboarding applications, you can navigate to the pages under Network if you want to change the network settings, or configure advanced settings, such as specifying the SSL certificate for HTTPS connections, adding origin servers, etc.
Modules
Navigate to Add Module to enable additional WAF features. Please note that feature availability may vary based on your FortiAppSec Cloud license.
Vulnerability Scan
The Vulnerability Scan module identifies OWASP Top 10 vulnerabilities in web applications and provides a detailed report with remediation recommendations to enhance security.
Log Settings
Adjust the export, alert, and sensitive data masking settings for your WAF logs.
Templates
A template is a collection of pre-defined WAF configurations. Assigning a template to an application automatically applies its WAF configurations to that application.
Templates are ideal if you're unsure which WAF configurations to use, providing a quick and effective way to set up protection. For details, please see Templates.
System Settings
Configure settings that apply to all WAF applications.