Export scan results for WAFs – introduction

The detection of vulnerabilities in a web application is the first step. Ideally, these vulnerabilities are fixed rapidly after they are identified, however, experience shows that this is not always the case. If vulnerabilities cannot be fixed in a timely fashion, the next best option is to mitigate the risk.

An Invicti Platform scan can be exported to a format supported by the most popular Web Application Firewalls (WAFs), including:

• Citrix Web App Firewall
• F5 Big-IP ASM (Application Security Manager)
• Fortinet Fortiweb
• Imperva SecureSphere WAF

This document explains how to export a scan result as a Web Application Firewall rule.

How to export a scan result as a WAF rule

1. Select Scans > All Scans from the left-side menu.
2. Access the scan results by clicking the numbers of found issues.
3. On the Scan Details page, click the Export to drop-down.
4. Choose the type of WAF file you wish to export.

Wait for a while, so Invicti can generate the file. After the export is completed, you can import the file into the WAF.