Installing the glass box agent

This section describes how to install the glass box agent on a .NET server.

Before you begin

The AppScan® glass box agent must be installed on your application server (or servers), by copying certain files from the AppScan installation to the server. To do this you will need access to your application server. The following systems and technologies are supported:
Table 1. .NET platform requirements

Software Requirement
Operating System 32 - bit and 64 - bit editions:
  • Microsoft™ Windows™ Server 2008
  • Microsoft Windows Server 2008 R2
  • Microsoft Windows Server 2012
  • Microsoft Windows Server 2012 R2
Other Microsoft IIS version 7.0 or later

Microsoft .NET4 Framework must be installed, and IIS must be configured at the root level to work with this version of ASP.net

Procedure

  1. On the Glass Box page of a content scan job, expand the Download glass box agent installer section, locate GB_DotNET_Setup.exe and copy it to your web server machine.
  2. Double-click on it to start the wizard. Follow the wizard steps.
  3. When you are asked whether to install on a new or existing website, select the recommended option (unless you are sure the alternative is better).
    Note: Which of the two options is recommended depends on your system. Where possible an "existing website" will be recommended, but this is not always possible, and "new website" may be recommended in some cases. In general "existing website" is preferred because it does not require a new port, which would then need to be configured in AppScan, and might also require additional firewall configuration to be accessible to AppScan.
  4. This step depends on your choice in the previous step:
    1. Existing site: If you chose "Existing site", you are now asked to select a site from a list of existing sites.
      Note: When there is more than one site, the wizard will list them in order of preference. If the wizard identifies some sites as potentially problematic, it will list them lower down, and label them "not recommended". However, the order, and even the "not recommended" label are only suggestions, and in some cases you may decide to select a site that is labeled "not recommended".
      Tip: Whichever selection you make will enable monitoring of all sites, but where possible try to select the site which you plan to configure as the starting URL of your first scan.
    2. New site: If you chose "New site" you are now asked to assign a port. You must define a port that will allow access to AppScan when scanning from a remote machine.
      Important: You will need to supply the port number when configuring AppScan.
      Note: You can use the Test button to verify that the selected port is currently available. However, this will automatically be done when you click Next.
  5. Set the Agent Username and Password for the glass box web application agent.
    Important: You will need to supply these credentials when configuring a scan with glass box.
  6. The summary screen appears before the actual installation takes place.
    Important: Before clicking Install make sure you have a record of the Username, Password and Port, as you will need these when configuring AppScan.
  7. Click Install.
    Note: The installation includes a restart of your IIS.
    When the process completes a final message appears indicating its success or failure.
    Note: If the installation fails for any reason, the final dialog will provide a link to the installation log for use in troubleshooting. It may be worth attempting to install on a different or new site on the server, even a different site that was labeled "not recommended". In all cases you must uninstall before attempting installation again. The location of the two installation logs is the %temp% folder. The names of the two installation logs are:
    glassbox_setup_api.txt
    glassbox_setup_msi.txt
    Note that the uninstall process includes a restart of your IIS.