Using an external client

You can manually explore RESTful or other non-SOAP web APIs - or SOAP APIs that do not require security envelopes - using a mobile phone, simulator, or emulator. AppScan displays the domains and requests in its External Traffic Recorder, and create appropriate tests from the input.

Note: If your application uses man-in-the-middle protection, it is not possible to scan it with AppScan as proxy.

Recording with an external client

See also:

External Traffic Recorder

Traffic recorder troubleshooting