What to Scan Settings
1. To launch the wizard do one of the following:
2. In the New Scan dialog box, verify that the Launch Scan Configuration Wizard check box is selected.
3. In the Predefined Templates list, select a scan template by clicking on it. If you do not need a specific template, select the Default template.
4. In the Scan Configuration Wizard Welcome screen, select the required scanning option:
Note:The web Service Scan option is only available if GSC (Generic Service Client) is installed on your machine. You can click the blue link to download GSC to your computer, and then double-click on the .EXE file to install it.
Web Application Scan Configuration Wizard
1. Starting URL:Type the URL of your application. The scan will start at this URL.
2. Case Sensitive Path:When this check box is selected (default), links that differ from each other by case only are treated as different pages.
3. Additional Servers and Domains:If your application includes servers or domains other than those of the Starting URL, and your AppScan license includes them, you must add them here so that they will be included in the scan:
a. Click the plus icon to open the Add Servers and Domains dialog box
b. Type in the hostname or IP address of the server, or the domain name (e.g. sitetoscan.com), then click OK. The new item is added to the list.
4. I need to configure additional connectivity settings:By default AppScan uses Internet Explorer proxy settings. Select this check box only if you want AppScan to use a different proxy. This will open an additional step, “URL and Servers: Additional settings,” when you click the Next button.
5. Click Next to continue to the next step of the wizard.
Login Management Settings
1. Select the radio button for the required Login method.
2. Do one of the following:
If the key icon turns red , AppScan attempted to but was unable to identify any pattern in the in-session page that it can use during scanning to verify that it has not been logged out. To remedy this you should open the extra step of the wizard and either provide AppScan with an identifier manually, or deactivate In-Session Detection
Test Policy Settings
1. To load a different Test Policy, click on one of the Pre-Defined Policies or Recent Policies in the Policy Filespane.
2. Send tests on login and logout pages:
3. Clear session identifiers before testing login pages
Complete the Scan configuration Wizard
Select one of the options:
1. To launch the wizard do one of the following:
- Click Create New Scan.
- If AppScan is already open, click the New Scan icon on the toolbar.
2. In the New Scan dialog box, verify that the Launch Scan Configuration Wizard check box is selected.
3. In the Predefined Templates list, select a scan template by clicking on it. If you do not need a specific template, select the Default template.
4. In the Scan Configuration Wizard Welcome screen, select the required scanning option:
- web Application Scan:
- web Service Scan:
Note:The web Service Scan option is only available if GSC (Generic Service Client) is installed on your machine. You can click the blue link to download GSC to your computer, and then double-click on the .EXE file to install it.
Web Application Scan Configuration Wizard
1. Starting URL:Type the URL of your application. The scan will start at this URL.
2. Case Sensitive Path:When this check box is selected (default), links that differ from each other by case only are treated as different pages.
3. Additional Servers and Domains:If your application includes servers or domains other than those of the Starting URL, and your AppScan license includes them, you must add them here so that they will be included in the scan:
a. Click the plus icon to open the Add Servers and Domains dialog box
b. Type in the hostname or IP address of the server, or the domain name (e.g. sitetoscan.com), then click OK. The new item is added to the list.
4. I need to configure additional connectivity settings:By default AppScan uses Internet Explorer proxy settings. Select this check box only if you want AppScan to use a different proxy. This will open an additional step, “URL and Servers: Additional settings,” when you click the Next button.
5. Click Next to continue to the next step of the wizard.
Login Management Settings
1. Select the radio button for the required Login method.
2. Do one of the following:
- For Recorded Login or Prompt, click Record or Import set the a login sequence
- For Automatic Login, simply type inUsername and Password.
If the key icon turns red , AppScan attempted to but was unable to identify any pattern in the in-session page that it can use during scanning to verify that it has not been logged out. To remedy this you should open the extra step of the wizard and either provide AppScan with an identifier manually, or deactivate In-Session Detection
Test Policy Settings
1. To load a different Test Policy, click on one of the Pre-Defined Policies or Recent Policies in the Policy Filespane.
2. Send tests on login and logout pages:
3. Clear session identifiers before testing login pages
Complete the Scan configuration Wizard
Select one of the options:
- Start a full automatic scan:Start a full scan of the application (Explore followed immediately by Test).
- Start with automatic Explore only:Explore the application, but do not proceed to the Test stage. (You can run the Test stage later.)
- Start with Manual Explore:The browser will open and you can manually explore your site by clicking on links and completing fields. AppScan will record the results to use in the Test stage.
- I will start the scan later: Close the wizard without starting a scan. The next time you start a scan, this template will be used. (Schedule the scan option available)
We shall take on the test policies in a different post
No comments:
Post a Comment