Welcome
Installing
Learn how to install the product.
Planning the deployment and installation
The configuration you use depends on a number of factors: what you plan to do with the software, how your organization and website or applications are structured, and how the information is to be distributed. Before you install the current release, review the information about hardware and software requirements, licensing, and other deployment considerations.
Installation topology examples
These examples illustrate installation topologies that are commonly used for deployment. Use the example that closely matches your situation. Each topology provides more information about when and how to use it.
Production topology example
This enterprise topology example is useful for production or medium-sized teams and multiple server deployments. In this type of installation, databases are installed on a single database server and each application is installed on a dedicated application server. You can install multiple instances of an application on separate application servers.

Welcome
Welcome to the HCL AppScan Enterprise 10.10.0 documentation, where you can find information about how to install, maintain, and use HCL AppScan Enterprise.
Accessibility features for AppScan® Enterprise
Accessibility features assist users who have a disability, such as restricted mobility or limited vision, to use information technology content successfully.
Overview
Learn general information about the product.
Installing
Learn how to install the product.
- Planning the deployment and installation
  The configuration you use depends on a number of factors: what you plan to do with the software, how your organization and website or applications are structured, and how the information is to be distributed. Before you install the current release, review the information about hardware and software requirements, licensing, and other deployment considerations.
  - Planning checklist
    Before you install HCL® AppScan® Enterprise, review and complete all of the necessary tasks on the planning checklist.
  - Installation requirements
    The Installation of AppScan® Enterprise requires the correct hardware, software, operating system, and other factors.
  - Installation topology examples
    These examples illustrate installation topologies that are commonly used for deployment. Use the example that closely matches your situation. Each topology provides more information about when and how to use it.
    - Evaluation topology example
      Evaluation installations are useful for demonstration or training deployments.
    - Production topology example
      This enterprise topology example is useful for production or medium-sized teams and multiple server deployments. In this type of installation, databases are installed on a single database server and each application is installed on a dedicated application server. You can install multiple instances of an application on separate application servers.
- Preinstallation tasks
  Before you install AppScan® Enterprise, you will need to prepare and configure your system.
- Installation tasks
  This section provides the instructions for installing AppScan® Enterprise.
- Installing HCL AppScan Enterprise in silent mode
  You can install AppScan Enterprise in silent mode on a target system, without any manual interventions, by running the executable command line that is programmed to automatically install or configure the package. The silent installation involves a non-interactive technique where parameters defined in these predefined command line validates and runs the installation steps automatically. After the installation and configuration, you can verify the installation error codes captured during the installation process in a log file.
- Post installation tasks
  After you install AppScan® Enterprise, complete these postinstallation tasks.
- Advanced installation scenarios
Upgrading and migrating
Learn how to upgrade the product.
Integrating
Learn how to integrate the product with other solutions.
DevOps
Learn how to extend the product with REST APIs and plugins.
Best practices
Learn best practices for using the product.
Configuring
Learn how to configure the product.
Administering
Learn how to administer the product.
Managing application risk
Follow this workflow to manage application security risks in your organization.
Troubleshooting and support
To help you understand, isolate, and resolve problems with your HCL® software, the troubleshooting and support information contains instructions for using the problem-determination resources that are provided with your HCL products.
Reference
Review reference information for the product.
Glossary

Production topology example

This enterprise topology example is useful for production or medium-sized teams and multiple server deployments. In this type of installation, databases are installed on a single database server and each application is installed on a dedicated application server. You can install multiple instances of an application on separate application servers.

Improved traffic performance for DAST scanning

As of AppScan® Enterprise version 10.10.0, scan data is now written into a local built-in database on the DAST scan server. At the end of the scan, data is transferred to the central SQL Server database which resides on the AppScan® Enterprise Server. The increase in network traffic between the scan server and the target application reduces the network bandwidth between the scan server and the database. This improves the performance of the Web UI, enables organizations to run more simultaneous scans on a single scan server, and addresses the latency concerns when the scan server is located far from the database server.

Network traffic benchmarks for AppScan® Enterprise DAST scanning

The following benchmarks are based on a dynamic analysis scan of a test website 'Altoro Mutual' (demo.testfire.net). The test scan was completed by AppScan® Enterprise 10.10.0 in 47 minutes, covered 58 pages, and included 20,914 unique security tests.

The specifications for the computer hosting AppScan® Enterprise Sever:

Operaring system: Windows™ Server 2016 Standard
CPU: 8 cores
RAM: 16 GB

The specifications for the computer hosting the SQL Server database:

Operaring system: Windows™ Server 2016 Standard
Database server: Microsoft™ SQL Server 2019 (RTM), version 15.0.2000.5 (x64)
CPU: 20 cores
RAM: 64 GB

The specifications for the computers hosting the DAST Scanner:

Operaring system: Windows™ Server 2016 Standard
Virtual machines: 10 VMs with varying configurations

Table 1. Agent Configurations
Agent	CPU (cores)	Memory (GB)
Agent 1	2	4
Agent 2	6	8
Agent 3	8	16
Agent 4	14	20
Agent 5	20	20
Agent 6	22	22
Agent 7	25	24
Agent 8	25	24
Agent 9	25	24
Agent 10	25	24

Table 2. Network traffic data
Server	Total bytes (GB)	Bytes sent (GB)	MB/second sent	Bytes received (GB)	MB/second received
SQL Database Server	241.65	156.15	34.7	85.5	19
DAST Scan Server	42.36	11.25	3.2	31.11	8.85
Web Server	496.8	327.15	72.7	169.65	37.7