Using an external client

Procedure

  1. Click the record button > External client > and then select the client you want to use:.
    OptionDescription
    Postman ADAC will open and automatically configure Postman to work with ADAC as recording proxy (IP and port). ADAC will then open its traffic recorder to record the requests you send from Postman.
    SoapUI ADAC will open and automatically configure SoapUI to work with ADAC as recording proxy (IP and port). ADAC will then open its traffic recorder to record the requests you send from SoapUI.
    Note: The configuration change affects any other instances that are open during the session. Therefore it is recommended that you close any open instances before you start, and do not open any while you record. When you close ADAC, SoapUI is also closed, and the settings changed back to what they were before.
    For SSL, see SSL with SoapUI.
    Other Select this option if the client you want to use is installed on a different machine, or if you are using a client other than Postman or SoapUI on the same machine as ADAC. You will be asked to open and configure your client manually, to use ADAC as proxy.

    For SSL, see SSL with other external client.

    The External Traffic Recorder opens, recording requests you send to your web service from the client. For details see External Traffic Recorder

    If you seleted Postman or SoapUI, it also opens, and is configured to use ADAC as recording proxy.
    Note: ADAC can automatically configure Postman or SoapUI only if installed on the same machine as AppScan, otherwise you must select Other, and configure the client yourself in the next step.
    Note: If using SSL, you must also follow these steps: SSL with SoapUI.
  2. If you selected External client > Other, open your client and configure it to use the port and IP shown at the top of the traffic recorder. If the client is on the same machine as ADAC, use the "Local IP" shown, otherwise use the "Remote IP".
    Note: If using SSL, you must also follow these steps: SSL with other external client
  3. With the External Traffic Recorder open with status "Waiting for incoming connections", send your sequence of requests from the client to the web service. As you explore, domains detected are listed in the left pane of the traffic recorder, and requests in the right pane. When finished, click Stop Recording.
    Note: If the traffic does not appear in the traffic recorder, refer to Traffic recorder troubleshooting.
  4. Review the multi-step operation data, and in the left column, select the domains you want to include.
    Note: If the total number of requests is more than 200, deleting some of them may produce a more efficient scan.
  5. Click Save to close the traffic recorder.

    The sequence appears in the Sequence pane (upper right). Sequences are automatically named in order: "Sequence 1", "Sequence 2" etc., but you can rename by typing into the name field (top).


    Sample sequence
  6. To edit the sequence:
    • Give the sequence an easily recognizable name
    • View any step by selecting it and clicking the Show in browser button
    • Remove any unnecessary step by selecting it and clicking the minus button