Overview
Learn general information about the product.
- Application security management
  Security is about protecting your valuable assets. Some of the most important assets your organization owns are in the form of information, such as intellectual property, strategic plans, and customer data. Protecting this information is critical for your organization to continue to operate, be competitive, and meet regulatory requirements.
- AppScan® Enterprise components
  HCL® AppScan® Enterprise enables organizations to mitigate application security risk, strengthen application security program management initiatives and achieve regulatory compliance. Security and development teams can collaborate, establish policies and scale testing throughout the application lifecycle. Enterprise dashboards classify and prioritize application assets based on business impact and identify high-risk areas, permitting you to maximize your remediation efforts. Performance metrics are provided that help you monitor the progress of your application security programs.
- AppScan Standard components shipped with AppScan Enterprise
  The following table tracks the product versions of AppScan Standard components that are shipped with AppScan Enterprise.
- Getting started with application security management
  Depending on your role, you can get started with different areas of the product.
- What's new in HCL AppScan® Enterprise
- Interactive Application Security Testing (IAST) in AppScan Enterprise
  - Licensing for IAST agent
  - Configuring IAST Communication Service in AppScan Enterprise Server
    The IAST Communication service is automatically configured while running the Configuration Wizard.
  - Downloading and deploying Java IAST agent on Web server
    You have to download and deploy an IAST agent on the tested application's web server to monitor traffic sent during runtime and report vulnerabilities it finds.
  - Downloading and deploying .NET IAST agent type
    You can deploy an IAST agent on the tested application's web server that supports Java, .NET, or Node.js based applications. This section explains about creating .NET IAST agent type on your web server.
  - Downloading and deploying Node.js IAST agent type
    You can deploy an IAST agent on the tested application's web server that supports Java, .NET, or Node.js based applications. This section explains about creating Node.js agent type on your web server.
  - Managing IAST agents in AppScan Enterprise
    AppScan Enterprise can support multiple IAST agents for a single application.
- Supported technologies
- Known issues and workarounds
  These are known issues and their workarounds.
- Deprecated features
  If you are migrating from an earlier release of AppScan® Enterprise, you should be aware of the various features that have been deprecated in this release.
- AppScan Enterprise Legal Notices
- Statement of Good Security Practices

Licensing for IAST agent

AppScan Enterprise requires a license to enable interactive application security testing (IAST).

A single license can support up to a maximum of Four IAST sessions. To create an additional IAST session, you must either obtain an additional license or disable an active IAST session.

From AppScan Enterprise Server v10.0.5 onwards, using IAST requires you to purchase a license depending on the number of IAST sessions you intend to use in parallel. In AppScan Enterprise v10.0.4 and earlier versions, IAST was available as a Tech Preview. When you upgrade your AppScan Enterprise Server to V10.0.5, you must have proper license to use IAST.

Note:

From AppScan Enterprise V10.0.5 and later, the AppScan Enterprise IAST feature requires a valid License to be functional. Hence, the functionality of the IAST agents depends on the following licensing scenarios:

If you do not subscribe to (or install) IAST license while upgrading to AppScan Enterprise V10.0.5 and later, then all the deployed IAST agents are disabled irrespective of their predefined status.
If you have deployed more number of IAST agents than the number of IAST licenses purchased in AppScan Enterprise V10.0.5 and later versions you are upgrading, then the extra IAST agents are Disabled due to insufficient licenses.

License Expiration

When a license expires, a message is presented to the user stating the license expiry status. The IAST agents associated with an expired license are disabled.