Vulnerability Scanner (DAST)

A Dynamic Application Security Testing (DAST) scanner is a tool to identify potential security issues in applications.

The NSX Advanced Load Balancer SDK provides a script called avi-iwaf-vpatch.py that imports DAST scanner results. The imported results are used to construct WAF Policy that protects from the security threats found by the scanner. The technique is also called virtual patching.

The NSX Advanced Load Balancer SDK supports the following DAST scanners:

• OWASP ZAP Attack Proxy.

• Qualys Web App Scanning.

The supported format for DAST scanners is an XML file containing scanner results report.