Home
Reference
Review reference information for the product.
Triage with reports
Reports are automatically generated after a job has run. They provide a way of managing issues so that you can helps you manage issues that are important to your organization and do so in a way that is supported both by the Enterprise Console's workflow and the workflows of other processes within your organization.
Organizing report and dashboard results for analysis
A tremendous amount of powerful data is delivered through the reports. But not every organization wants to review their data in exactly the same way as everybody else. Flexible viewing mechanisms help you organize how you review your issues in whatever way makes the most sense to you.
Reports
Inventory Reports
Learn more about Inventory Reports.
Hosts report
This report provides you with the number and type of hosts that have web servers. The hosts are categorized by domain and by operating system. The Hosts report tells you what machines are publicly accessible through your Internet or Intranet.

Reference
Review reference information for the product.
- Configuring Wizard topics
  Learn about configuring wizard topics.
- Folder Explorer topics
  Learn about folder explorer topics.
- Triage with reports
  Reports are automatically generated after a job has run. They provide a way of managing issues so that you can helps you manage issues that are important to your organization and do so in a way that is supported both by the Enterprise Console's workflow and the workflows of other processes within your organization.
  - Summarizing issues in report packs
    A report pack is a bundle of reports that summarizes the issues discovered within its reports and provides a window into those reports. The reports themselves contain the details of the issues found on your website or application.
  - Organizing report and dashboard results for analysis
    A tremendous amount of powerful data is delivered through the reports. But not every organization wants to review their data in exactly the same way as everybody else. Flexible viewing mechanisms help you organize how you review your issues in whatever way makes the most sense to you.
    - Grouping report data
      Grouping report results by different data sets (such as page, or context or IP address) helps make the report data more relevant to your analysis needs.
    - Searching report data
      You can search for specific issues or information within each report's results. For example, you might want to find all the issues within a certain directory of the Page URL. Or you might want to track a particular issue throughout your remediation process; enter the Issue ID in the Search tab to locate it within the relevant report.
    - Identifying pages with identical URLs in reports
      When your report contains a list of identical URLs, it is likely because your site uses static URLs. In these cases, the page content can be determined through the use of either POST data or cookie information.
    - Managing issues in a report
      All issues are classified as open by default. You can see an issue classification by grouping by Issue Status.
    - Exporting data for offline analysis
      Exporting report data is useful if you have team members that do not directly access the Enterprise Console; you can export the report data to an XML file, Excel spreadsheet, pdf or CSV file for them to use.
    - Correlating static analysis data with dynamic analysis data
      Import data from AppScan® Source to correlate its findings with an existing dynamic analysis security scan (AppScan Enterprise Server content scan job or an AppScan Standard import job).
    - Reports
      - Security Reports
        Learn more about Security Reports.
      - Inventory Reports
        Learn more about Inventory Reports.
        Authentication Points report
        This report shows you where the authentication points (the applications that validate a user's credentials) are located on your website. It provides a summary of the authentication points found, including a total for all the types found, and the number of each authentication type found.
        Broken Links report
        This report provides information about broken links found on the site.
        File Inventory report
        This report displays an inventory of the distinct URLs and the PageComponents that use them. A PageComponent is a file that makes up part of a web page, such as an HTML file, an image or an MS Word document. Many web pages can use the same PageComponent; for example, a corporate logo that can display throughout the site or a navigation toolbar inside a frame. For each URL in the list, information is provided about the rendered file size, Mime type and last modified date. You can use this report to identify files that do not conform to your corporate standards or that might cause searchability or accessibility problems.
        Filtered Links report
        This report displays the links that were filtered from the scan and provides an explanation. It displays the same information as the scan log, but in a format that can be searched and sorted after the scan has completed.
        Hosts report
        This report provides you with the number and type of hosts that have web servers. The hosts are categorized by domain and by operating system. The Hosts report tells you what machines are publicly accessible through your Internet or Intranet.
        Local Files report
        This report provides information about any links on your website that point to files on your local server. There are two ways you can refer to a document within an HREF attribute: absolutely or relatively. An absolute link defines the location of the document, including the protocol to use to get the document, the server to get it from, the directory it is located in, and the name of the document itself. A relative link takes advantage of the fact that the server knows where the current document is.
        Pages report
        This report provides an inventory of the pages found during a content scan, including the page name, size, title and Mime type.
        Pages with Unfilled Forms
        This report shows you the forms that were not completed by the automatic form fill. Do a manual explore to complete them in so that the scan can continue through the site to discover as much content as possible.
        Web Servers report
        This report categorizes the web servers in your organization by their role and type.
        Website Architecture report
        This report provides an inventory of the unique internal domains found during a content scan to help you understand the overall size and scope of your website.
    - Track progress with executive dashboards
      Use the dashboard to track and consolidate the severity metrics and trends of your web applications or website over time. You can combine data from different business areas (such as sales, marketing, or products), specific issue types, or developers so you can see a complete picture of your web properties or applications. Security analysts or web managers can use this high-level view to quickly study interactive reports about the issues.
- Configuration Manager

Hosts report

This report provides you with the number and type of hosts that have web servers. The hosts are categorized by domain and by operating system. The Hosts report tells you what machines are publicly accessible through your Internet or Intranet.

Why it matters

Because you might not know the physical topography of your web properties, this report will be useful when you are conducting a security assessment. Some hosts might be located in a facility where physical security is poor. This report can also help you identify rogue websites on an intranet.

Information you should know about this report

Hosts with no domain name are hosts that are only referred to by the IP address. Only when a host has reverse DNS information is it counted as a named host.
A host location shown in the report is likely that of the IP address block owner, and not the physical location of the host, unless they happen to be the same.
The address information provided uses WHOIS. There are some limitations with this tool and, to some extent, the information shown in this report:
- WHOIS service might be unavailable.
- WHOIS data might be incomplete or inaccurate; for example, Akamai uses the address of their headquarters for all the IP addresses that they support. Any Akamai host reported here would have an incorrect physical address.
- The amount of information shown for the physical location depends on the amount of information entered in the WHOIS registry.
Sometimes the host name that is displayed in this report is not what you would expect. What is displayed in the report depends on whether a host name or an IP address was entered on the What to Scan page of content scan jobs. Here are the possible situations and how the display of the host name is impacted:
- If a host name was entered whose IP address resolves to the same host name, the host name is displayed in the report.
- If a host name was entered whose IP address resolves to a different host name, the correct host name is displayed in the report in the Reverse DNS Name column.
- If an IP address was entered, but not a host name, and it resolves to a host name, that host name is displayed in the report.
- If an IP address was entered that does not resolve to a host name, nothing is displayed in the report for the host name.