Custom Header tab

The Custom Headers tab of Parameters and Cookies view in the Configuration dialog box.

About this task

The third tab of Explore: Parameters and Cookies view lets you define non-standard (custom) HTTP header formats. AppScan® must be able to identify parameters in response content and correctly add them to headers it sends to the site, in order to be able to test the site effectively. It attempts to recognize custom headers automatically, but you can use this tab to add and modify the definitions. You can also activate or deactivate existing definitions (when deactivated the definition is saved with the scan but not used).


To create new definition, click the plus button; to modify an existing definition, select the header in the table and click the edit button

The Add/Edit Custom Header dialog box opens. Its fields and options are described in the table following.



Header Name

The HTTP header name.

Header Value


Select Fixed for values that do not change, or Dynamic for values that do change.


(Fixed only) Enter the value.

Header Validation

Indicates whether or not the header definition has been successfully validated for use when scanning.


When you add a custom header definition, it appears in the Custom Headers list, and the check box next to it is selected, indicating that the definition is activated. Deactivated entries are saved with the scan but not used.