Welcome
Getting Started
Basic Job Setup
You configure a job by choosing the settings that best enable AppScan® Enterprise to access to your application and run tests on it.
- URL and Servers
  URL and Servers view of the ADAC.
- Login Management
  Login Management view in Basic Job Setup.
- One-Time Password (OTP)
  If required by your application, configure AppScan® to use OTP when logging in.
- Manual Explore
  Manual Explore enables you to focus the scan on specific parts of your application.
  - Using a browser
    Manual Explore enables you to focus the scan on specific parts of your application.
  - Using an external client
    Manual Explore enables you to focus the scan on specific parts of your web services.
  - External Traffic Recorder
    When you manually explore using AppScan as recording proxy, this recorder displays domains detected and traffic received, and enables you to control which of these will be tested. A limited version of the recorder is used to record the login sequence.
  - Traffic recorder troubleshooting
    If your external device is configured correctly, AppScan's external login recorder and external traffic recorder will show the traffic sent from the device as you send it. This section offers suggestions if it does not.
  - SSL with SoapUI
    To use SoapUI with SSL you must first install the AppScan SSL certificate in SoapUI.
  - SSL with other external client
    To use SSL when recording from an external client, you must first install the AppScan SSL certificate on the ADAC machine. If the client is on a different machine to ADAC, you must also install the certificate on the client machine.
- Communication and Proxy
  Communication and Proxy view of AppScan® Dynamic Analysis Client (ADAC).
- HTTP Authentication
  HTTP Authentication view of the ADAC.
- Job Properties
  The final stage of the setup is defining Job properties.
Additional Job Setup
AppScan® Enterprise users with additional privileges assigned by the Administrator see Additional setup options below the Basic options in the left pane. Other users do not see these options.
Notices

SSL with SoapUI

To use SoapUI with SSL you must first install the AppScan SSL certificate in SoapUI.

Procedure

Close any open instance of SoapUI.
In AppScan, click Options > Recording Proxy > Export, and save the ZIP file to your machine.

Note: If the Export button is disabled, the certificate is not installed, and you must first install it by clicking the Add button located above it.
Extract the SSL certificate file appScanRootCert.crt and save it to:
```
[SoapUI home dir]\jre\lib\security
```
Important: Do not change the filename.
Open the command line as administrator, and go to:
```
cd [SoapUI home dir]\jre\lib\security
```

Run command:

"[SoapUI home dir]\jre\bin\keytool" -import -trustcacerts -keystore cacerts -storepass 
changeit -noprompt -alias AppScanCertificate -file appScanRootCert.crt

The certificate has now been added to the SoapUI key store, and will allow you to use SSL in SoapUI.

What to do next

Troubleshooting

If you are still unable to send requests, try these troubleshooting steps:

Close SoapUI.
Uninstall the AppScan SSL Certificate by clicking Options > Recording Proxy tab > Remove.
Repeat Steps 2 - 5 above.

Delete the AppScan KeyStore entry in SoapUI by running:

"[SoapUI home dir]\jre\bin\keytool" -delete -alias AppScanCertificate -storetype JKS 
-keystore cacerts -storepass changeit

Note: Ignore the warning that appears.

Repeat Steps 6 - 7 above.

Related topic:

Traffic recorder troubleshooting