Home
Managing application risk
Follow this workflow to manage application security risks in your organization.
Step 2: Testing applications for vulnerabilities
Learn how to test vulnerabilities identified in an application.
Importing issues from internal or third-party scanners
Learn how to import issues from internal and 3rd-party scanners.
Importing DAST issues from another AppScan Enterprise instance
Import DAST issues from another AppScan Enterprise instance so that you can triage them.

Managing application risk
Follow this workflow to manage application security risks in your organization.
- Step 1: Creating an application inventory
  Learn how to create an application inventory.
- Step 2: Testing applications for vulnerabilities
  Learn how to test vulnerabilities identified in an application.
  - Importing issues from internal or third-party scanners
    Learn how to import issues from internal and 3rd-party scanners.
    - Issue attributes
      This table describes a few of the predefined issue attributes in AppScan Enterprise.
    - Creating an issue profile template
      If you are a Product Administrator, you can create customized attributes for the issue profile template. These customized attributes are used whenever a new issue is imported.
    - Creating third-party scanners
      AppScan Enterprise offers several ways to import issues into the portfolio for triaging.
    - Preparing a CSV file for import
      CSV files of issues must be configured properly to ensure that the issues are successfully imported.
    - Importing issues from an internal or a third-party scanner
      Import issues from an internal or a third-party scanner or from manual pen testing so that you can triage them. These issues are marked as 'New' so that you can easily identify them in the list of issues that you must address.
    - Importing DAST issues from another AppScan Enterprise instance
      Import DAST issues from another AppScan Enterprise instance so that you can triage them.
    - Importing issues from an exported report from AppScan Standard
      Import issues from AppScan® Standard v9.0.3 so that you can triage them. These issues are marked as 'New' so that you can easily identify them in the list of issues that you must triage.
  - Scenarios for creating scans
    These scenarios are targeted at developers and the security team. Choose the user role that most closely matches your situation.
  - Running and scheduling jobs
    Learn how to run and schedule a job in AppScan Enterprise.
  - Copying a scan between two Enterprise Consoles
    Export scan properties and creating a new scan based on those properties. This is the method you use to copy a scan between two Enterprise Console instances.
  - Stopping a job and then resuming it
    There are three methods you can use to stop a job while it is running. Each method is used for a different reason, which largely depends on whether you want to keep the data or you want to continue running the job from the point where it left off. You can resume a suspended job to continue the scan from where it stopped. A resumed job is handled by the next free agent on any available agent server.
- Step 3: Determining risks and prioritizing vulnerabilities
  Learn how to determine risks and prioritize vulnerabilities identified in an application.
- Step 4: Remediating risks
  Learn how to remediate risks identified in an application.
- Step 5: Measuring progress and demonstrating compliance
  Learn how to measure progress and demonstrate compliance.

Importing DAST issues from another AppScan Enterprise instance

Import DAST issues from another AppScan Enterprise instance so that you can triage them.

Procedure

In the first instance of AppScan Enterprise, go to the application and export the security report issues in an XML file. For more information, see Exporting issues as reports.

Note: To include all the issue details in the import, ensure that you select the appropriate checkboxes in the Select the contents to include in the report dialog box when you export the security issues.
In the second instance of AppScan Enterprise, import the XML file:
1. From an application tab in the Monitor view, click Import Issues.
  
  Note: AppScan Enterprise supports only DAST issues import.
2. Create a scan or use an existing one. Select the AppScan Enterprise scanner, and follow the instructions in the wizard to complete the process.
3. Check the log file to investigate whether any issues weren't imported.
  Note:
  - If the attribute contributes to the issue uniqueness, but has an error in the file, the issue is not imported.
  - If the attribute does not contribute to issue uniqueness, and has an error, then these behaviors are logged in the import log file:
    
    For dropdown attributes, AppScan Enterprise replaces the error with the default value specified in the scanner profile, and imports the issue.
    
    For all other attribute types, AppScan Enterprise does not import the attribute value that has the error, but does import the issue.