Home
Managing application risk
Follow this workflow to manage application security risks in your organization.
Step 2: Testing applications for vulnerabilities
Learn how to test vulnerabilities identified in an application.
Running and scheduling jobs
Learn how to run and schedule a job in AppScan Enterprise.
Scheduling a scan to run automatically
A schedule is a property of a scan. Each scan can only have one schedule, and can be scheduled by the minute, hour, day, week, or month. Having a schedule does not prevent you from manually running the scan at any time. Additionally, you can exclude a scan activity from running between a defined period. In a schedule scan, specify time frame during which the scan job is not initiated or momentarily pause any active scan job in process.

Managing application risk
Follow this workflow to manage application security risks in your organization.
- Step 1: Creating an application inventory
  Learn how to create an application inventory.
- Step 2: Testing applications for vulnerabilities
  Learn how to test vulnerabilities identified in an application.
  - Importing issues from third-party scanners
    Learn how to import issues from 3rd-party scanners.
  - Scenarios for creating scans
    These scenarios are targeted at developers and the security team. Choose the user role that most closely matches your situation.
  - Running and scheduling jobs
    Learn how to run and schedule a job in AppScan Enterprise.
    - Adding an alert to a job
      When you add an alert to a job, you control the events you will be notified about when the status changes.
    - Scheduling a scan to run automatically
      A schedule is a property of a scan. Each scan can only have one schedule, and can be scheduled by the minute, hour, day, week, or month. Having a schedule does not prevent you from manually running the scan at any time. Additionally, you can exclude a scan activity from running between a defined period. In a schedule scan, specify time frame during which the scan job is not initiated or momentarily pause any active scan job in process.
    - Scheduling blackout periods for a domain
      If you have regularly scheduled site maintenance periods, use a blackout period to suspend the content scan job so your site is not scanned while you are performing maintenance tasks. You can also use a blackout period for those times when your website is subject to heavy visitor traffic. Job and system administrators can schedule and override blackout periods if necessary.
  - Copying a scan between two Enterprise Consoles
    Export scan properties and creating a new scan based on those properties. This is the method you use to copy a scan between two Enterprise Console instances.
  - Stopping a job and then resuming it
    There are three methods you can use to stop a job while it is running. Each method is used for a different reason, which largely depends on whether you want to keep the data or you want to continue running the job from the point where it left off. You can resume a suspended job to continue the scan from where it stopped. A resumed job is handled by the next free agent on any available agent server.
- Step 3: Determining risks and prioritizing vulnerabilities
  Learn how to determine risks and prioritize vulnerabilities identified in an application.
- Step 4: Remediating risks
  Learn how to remediate risks identified in an application.
- Step 5: Measuring progress and demonstrating compliance
  Learn how to measure progress and demonstrate compliance.

Scheduling a scan to run automatically

A schedule is a property of a scan. Each scan can only have one schedule, and can be scheduled by the minute, hour, day, week, or month. Having a schedule does not prevent you from manually running the scan at any time. Additionally, you can exclude a scan activity from running between a defined period. In a schedule scan, specify time frame during which the scan job is not initiated or momentarily pause any active scan job in process.

Procedure

From an app in the Monitor view, click View details and scroll to the Scans section of the dialog.
Find the scan you want to schedule and click the Job Properties icon.
1. For an import scan, click Advanced Scan Configuration > Schedule
2. For a scan created with the AppScan Dynamic Analysis Client, click Additional Settings > Schedule.
On the Schedule page, select the Run automatically as per the schedule below check box.
In the Exclusions section, select the Do not run between the following times check box.
Set the schedule and exclusion time frame.
Click Apply and Save to save the configuration.

Results

The schedule will be reflected in the Next Run column of the Folder Content Summary.

Note: Resuming a scan with a scheduled blackout period for a domain will take precedence over a regularly scheduled scan.