Home
Configuring
You configure a scan by choosing settings that best describe your application, and the kind of testing you want.
Scan Configuration Wizards
You can quickly configure basic scans using the wizards.
Wizard: Scan web application
Lists the steps of this wizard.
Complete
Having completed the steps of the wizard, you now decide how and when to start the scan that you have configured.

Configuring
You configure a scan by choosing settings that best describe your application, and the kind of testing you want.
- Scan Configuration Wizards
  You can quickly configure basic scans using the wizards.
  - Launching the Scan Configuration Wizard
  - Wizard: Scan web application
    Lists the steps of this wizard.
    - URL and Servers
      Define the starting URL for the scan and any additional servers and domains that need to be included.
    - Connection Settings
      (Optional:) Configure proxy settings and server-level authentication if needed.
    - Login Management
      Configure the login method, and record the login procedure if needed.
    - Login Management Details
      (Optional:) Review and edit the login sequence you recorded.
    - Test Policy
      Limiting the scan to the specific types of tests you want can reduce scan time.
    - Test Optimization
      Test Optimization lets you take advantage of our ongoing statistical analysis for a faster scan.
    - Complete
      Having completed the steps of the wizard, you now decide how and when to start the scan that you have configured.
  - Wizard: Scan web services
    Lists the steps of this wizard.
  - Wizard: Incremental scan
    Lists the steps of this wizard.
- Scan Configuration Dialog Box
- Scan file structure
  Explains the basic structure of an AppScan Standard SCAN file.
- Scan templates
  A scan template is simply a scan configuration that has been saved so that you can use it again.
- Changing the configuration during a scan

Complete

Having completed the steps of the wizard, you now decide how and when to start the scan that you have configured.

About this task

If you select one of the options that starts a scan right away, you can also elect to run Scan Expert before the main scan starts. Scan Expert logs into your application and performs a short, preliminary scan to evaluate the settings you have configured. It then suggests configuration changes if necessary. Incorporating these suggestions (automatically or manually) can greatly increase the efficiency of the main scan.

Procedure

Select one of the options:
- Start scan: Start a full scan of the application (Explore stage followed by Test stage).
- Start with automatic Explore only: Explore the application, but do not proceed to the Test stage. You can start the Test stage later by clicking Scan > Test only.
- Start with Manual Explore: The browser will open and you can manually explore your site by clicking on links and completing fields. AppScan will record the results to use in the Test stage, which you can start by clicking Scan > Test only.
- I will start the scan later: Close the wizard without starting a scan. The next time you start a scan, this template will be used.
Start Scan Expert when Scan Configuration is Complete: (Active only if one of the first three scan options has been selected.) Select this check box in you want Scan Expert to evaluate your configuration before starting the main scan.

What to do next

See: Scan progress

See also:

Security Issues