Home
Configuring
Learn how to configure the product.
Configuring the Enterprise Console
The Enterprise Console is the main user interface that supports administration, item configuration, and reporting.
Configuring defect tracking integration
If you use Rational Team Concert™ or Rational® Quality Manager, you can configure defect tracking integration so that issues can be submitted as defects from reports from the Scans view. If you want users to submit issues as defects from an application in the Monitor view, do not configure Rational Team Concert in the Administration view. Instead, configure the integration from the Monitor view.

Configuring
Learn how to configure the product.
- Configuring your user settings
  There are several settings that you can personalize for your needs.
- Configuring the Enterprise Console
  The Enterprise Console is the main user interface that supports administration, item configuration, and reporting.
  - Identifying the servers and domains in your installation
    Servers and domains are considered global properties. When you add a Starting URL to a content scan job, its domain is automatically added to the Servers and Domains page on the Administration tab. Any job that uses that domain will have the same properties and rules applied to the URLs that it finds.
  - Scheduling blackout periods for a domain
    If you have regularly scheduled site maintenance periods, use a blackout period to suspend the content scan job so your site is not scanned while you are performing maintenance tasks. You can also use a blackout period for those times when your website is subject to heavy visitor traffic. Job and system administrators can schedule and override blackout periods if necessary.
  - Configuring defect tracking integration
    If you use Rational Team Concert™ or Rational® Quality Manager, you can configure defect tracking integration so that issues can be submitted as defects from reports from the Scans view. If you want users to submit issues as defects from an application in the Monitor view, do not configure Rational Team Concert in the Administration view. Instead, configure the integration from the Monitor view.
  - Capturing Traffic and Actions using AppScan Activity Recorder
  - Capturing and Importing Traffic Data
  - Configuring a proxy for the AppScan Dynamic Analysis Client
    Configure the proxy for the AppScan Dynamic Analysis Client and test the connection. This proxy is used to import .scant templates from AppScan Standard. After the .scant template is imported, the security analyst can use it to create a QuickScan template.
  - Capturing Traffic and Actions using AppScan Activity Recorder
  - Test Automation in AppScan® Enterprise using AppScan Proxy Server
    The AppScan Proxy Server enables you to record traffic to use as Explore data in your AppScan Enterprise (ASE) job. The AppScan Proxy Server is a system for managing recording proxies. Proxy instances can be created on demand to record traffic that will later be used for a DAST scan. This document describes how to set up and use the proxy server.
  - Updating security rules
    The security rules are updated as a part of your AppScan® Enterprise releases. You can verify the version and release date of the security rules by looking in the About link in the AppScan Enterprise main menu.
- Configuring log retention period property
  The log files generated during a scan run are saved in the server for certain time frame. The time limit until when such log files are retained by the server is referred as log retention period. After this retention period, these log files become outdated while redundantly occupying memory space in the server. You can configure a time limit as a log retention period in the AppScan Enterprise, to automatically delete such log files after this preset period exceeds.

Configuring defect tracking integration

If you use Rational Team Concert™ or Rational® Quality Manager, you can configure defect tracking integration so that issues can be submitted as defects from reports from the Scans view. If you want users to submit issues as defects from an application in the Monitor view, do not configure Rational Team Concert in the Administration view. Instead, configure the integration from the Monitor view.

About this task

The defect tracking system must be installed in your network before you can complete this task. Check the system requirements for the supported versions.

Procedure

Go to the Administration view.
In the Defect Tracking System Integration section of the General Settings page, click Edit.
On the Defect Tracking Integration page, select a tracking system from the list.
Enter the base URL for the host and HTTP/HTTPS port number to listen on. The HTTP port default is typically 80 or 9080. The HTTPS port default is typically 443 or 9443.
Note: The AppScan® Server should be secured with a valid certificate, but if it is not, you can enable the check box to allow connections with invalid or untrusted certificates; however, this is not recommended practice. Also, ensure that the Server is secured with a valid SSL certificate; otherwise your credentials and other security information might be intercepted by a third party.
Complete the User and Password fields with the identification string or name you want the server to use as your login credentials.
Enter the name of the Project Area in the defect tracking system that defects will be assigned to and click Test connection.
Enter the Property name and Property value of the defect tracking system.
Click Done.