Import scan results into Imperva SecureSphere

Once you have exported the scan results from Invicti Platform, follow this document to import them to Imperva Secure Sphere.

Pre-requisites

• Your SecureSphere system configuration needs to be completed according to the networking environment surrounding your web application.
• You completed a scan in Invicti Platform and created a WAF export file in SecureSphere format.

Import vulnerability export data into SecureSphere

1. In the Risk Management tab, select Web Scanner Integration.
2. In the Scanner Integration Policies panel, click the  icon to create a new policy - the Create New Policy window is presented.

• Set a Name and Description for the new policy.
• Click Create; the new policy is created with its details showing in the Details pane.

3. Click the Upload File button in the Policy Parameters section of the Details pane to upload the Invicti WAF export file. This will display a list of vulnerabilities extracted from the file.

4. Select a vulnerability from the list.
5. In the Create Mitigation dialog:

• Select Automatic in the Mitigation Method option.
• Select Block in the Immediate Action drop-down.
• Click the Ok button.

6. Repeat the above actions for each vulnerability you want to mitigate.