Fortinet white logo
Fortinet white logo

User Guide

WAF Application Dashboard

WAF Application Dashboard

This dashboard displays general security insights from the WAF service.

Please see the table below for a description on each of the widgets displayed on this page.

Widget

Description

Monthly Counts

Shows the total number of the following transactions for the current calendar month:

  • Blocked Requests

  • Allowed Requests

  • Data

  • 95th Percentile Bandwidth

Security

OWASP Top 10 Threats

The OWASP Top 10 risk(s) observed in your application traffic.

The OWASP Top 10 is a list of the most critical security risks to web applications, published by the Open Web Application Security Project (OWASP).

Threat Level History

This graph shows the Threat Level of your application traffic over the adjustable time frame (default = last 24 hours).

You can adjust the time frame, and choose to view the Threat Level (y-axis) as either a score (0-700) or a percentage.

Attacks are assigned a score based on its severity:

  • Critical: 50
  • High: 30
  • Medium: 10
  • Low: 5

The system calculates a threat score every 5 minutes by aggregating attack scores based on their severity.

For instance, if there are two critical attacks (score of 50 each) and one high-level attack (score of 30) within this timeframe, the total threat score is calculated as 50*2+30=130.

Threat Scores and their corresponding severity levels:

  • 1 (low)
  • 100 (medium)
  • 400 (high)
  • 700 (critical)

Threat Level

The threat level in the last hour on a scale from low to critical, followed by an ordered table with more information on the detected threats.

Incidents

A line graph displaying the number of incidents falling under low, moderate, and high threat levels over the adjustable time frame (default = last hour).

Top Incidents by Severity

A ranked list of incidents from the selected time frame (default: last hour), ordered by their threat level, starting with the highest.

To view additional details, click on an incident in the list.

Top Known Threats

A ranked list of threats from the selected time frame (default: last hour), ordered by their threat level, starting with the highest.

To view additional details, click on an incident in the list.

Vulnerability Scan

Insights from Vulnerability Scan.

The Vulnerability Scan module integrates FortiDAST's web vulnerability scanner (WVS) to help identify OWASP Top 10 vulnerabilities in web applications and provides a detailed report with remediation recommendations to enhance security.

The Vulnerability Scan report reflects your current WAF configuration, highlighting vulnerabilities that remain exposed to attackers. This helps you fine-tune WAF settings to improve security.

Traffic

Throughput

A line chart displaying the level of throughput of HTTP, HTTPS, and Cached traffic.

Incoming Requests

A line chart displaying blocked, allowed, and cached incoming requests.

Traffic Statistics by Country

A world map that highlights the countries with the highest traffic.

Other

Server Status

Displays the numbers of servers that are Healthy, Unhealthy, and Health Check Disabled with a condensed list of all servers. Click All Servers to navigate to Origin Servers.

Subscription Services

Lists the WAF services available to you based on your license tier, along with their expiration date and status.

WAF Application Dashboard

WAF Application Dashboard

This dashboard displays general security insights from the WAF service.

Please see the table below for a description on each of the widgets displayed on this page.

Widget

Description

Monthly Counts

Shows the total number of the following transactions for the current calendar month:

  • Blocked Requests

  • Allowed Requests

  • Data

  • 95th Percentile Bandwidth

Security

OWASP Top 10 Threats

The OWASP Top 10 risk(s) observed in your application traffic.

The OWASP Top 10 is a list of the most critical security risks to web applications, published by the Open Web Application Security Project (OWASP).

Threat Level History

This graph shows the Threat Level of your application traffic over the adjustable time frame (default = last 24 hours).

You can adjust the time frame, and choose to view the Threat Level (y-axis) as either a score (0-700) or a percentage.

Attacks are assigned a score based on its severity:

  • Critical: 50
  • High: 30
  • Medium: 10
  • Low: 5

The system calculates a threat score every 5 minutes by aggregating attack scores based on their severity.

For instance, if there are two critical attacks (score of 50 each) and one high-level attack (score of 30) within this timeframe, the total threat score is calculated as 50*2+30=130.

Threat Scores and their corresponding severity levels:

  • 1 (low)
  • 100 (medium)
  • 400 (high)
  • 700 (critical)

Threat Level

The threat level in the last hour on a scale from low to critical, followed by an ordered table with more information on the detected threats.

Incidents

A line graph displaying the number of incidents falling under low, moderate, and high threat levels over the adjustable time frame (default = last hour).

Top Incidents by Severity

A ranked list of incidents from the selected time frame (default: last hour), ordered by their threat level, starting with the highest.

To view additional details, click on an incident in the list.

Top Known Threats

A ranked list of threats from the selected time frame (default: last hour), ordered by their threat level, starting with the highest.

To view additional details, click on an incident in the list.

Vulnerability Scan

Insights from Vulnerability Scan.

The Vulnerability Scan module integrates FortiDAST's web vulnerability scanner (WVS) to help identify OWASP Top 10 vulnerabilities in web applications and provides a detailed report with remediation recommendations to enhance security.

The Vulnerability Scan report reflects your current WAF configuration, highlighting vulnerabilities that remain exposed to attackers. This helps you fine-tune WAF settings to improve security.

Traffic

Throughput

A line chart displaying the level of throughput of HTTP, HTTPS, and Cached traffic.

Incoming Requests

A line chart displaying blocked, allowed, and cached incoming requests.

Traffic Statistics by Country

A world map that highlights the countries with the highest traffic.

Other

Server Status

Displays the numbers of servers that are Healthy, Unhealthy, and Health Check Disabled with a condensed list of all servers. Click All Servers to navigate to Origin Servers.

Subscription Services

Lists the WAF services available to you based on your license tier, along with their expiration date and status.