Optimizing your scan with advanced configuration options

Use this task to configure an advanced scan with complex configuration. Use this method for web applications that require a lot of user interaction to navigate the application or if you would like to just test a specific area of your application.

Procedure

  1. Go to the content scan job that you want to optimize.
  2. Add additional servers and domains to the scan. See Adding additional servers and domains to the scan.
  3. Find more content using XRules. See Creating XRules from templates.
  4. Set scan limits. See Setting scan limits.
  5. Exclude URLs from the scan. See Excluding URLs from a scan.
  6. Identify unique URLs and forms. See Normalizing URLs and forms.
  7. Define parameters and cookies, such as Session IDs. See Defining parameters and cookies.
  8. Configure login and logout pages. See Handling login and logout pages.
  9. Connect to the web server. See Connecting to a web server.
  10. Provide usernames and passwords for the website. See Authenticating to the website.
  11. Complete web forms automatically. See Completing web forms automatically.
  12. Identify custom error pages so the scan recognizes them. See Identifying custom error pages so the scan recognizes them.