Welcome
Configuring
Learn how to configure the product.
Configuring the Enterprise Console
The Enterprise Console is the main user interface that supports administration, item configuration, and reporting.
Configuring a proxy for the AppScan Dynamic Analysis Client
Configure the proxy for the AppScan Dynamic Analysis Client and test the connection. This proxy is used to import .scant templates from AppScan Standard. After the .scant template is imported, the security analyst can use it to create a QuickScan template.

Welcome
Welcome to the HCL AppScan Enterprise 10.11.0 documentation, where you can find information about how to install, maintain, and use HCL AppScan Enterprise.
Accessibility features for AppScan® Enterprise
Accessibility features assist users who have a disability, such as restricted mobility or limited vision, to use information technology content successfully.
Overview
Learn general information about the product.
Installing
Learn how to install the product.
Upgrading and migrating
Learn how to upgrade the product.
Integrating
Learn how to integrate the product with other solutions.
DevOps
Learn how to extend the product with REST APIs and plugins.
Best practices
Learn best practices for using the product.
Configuring
Learn how to configure the product.
- Configuring your user settings
  There are several settings that you can personalize for your needs.
- Configuring the Enterprise Console
  The Enterprise Console is the main user interface that supports administration, item configuration, and reporting.
  - Identifying the servers and domains in your installation
    Servers and domains are considered global properties. When you add a Starting URL to a content scan job, its domain is automatically added to the Servers and Domains page on the Administration tab. Any job that uses that domain will have the same properties and rules applied to the URLs that it finds.
  - Scheduling blackout periods for a domain
    If you have regularly scheduled site maintenance periods, use a blackout period to suspend the content scan job so your site is not scanned while you are performing maintenance tasks. You can also use a blackout period for those times when your website is subject to heavy visitor traffic. Job and system administrators can schedule and override blackout periods if necessary.
  - Configuring defect tracking integration
    If you use Rational Team Concert™ or Rational® Quality Manager, you can configure defect tracking integration so that issues can be submitted as defects from reports from the Scans view. If you want users to submit issues as defects from an application in the Monitor view, do not configure Rational Team Concert in the Administration view. Instead, configure the integration from the Monitor view.
  - Capturing Traffic and Actions using AppScan Activity Recorder
  - Capturing and Importing Traffic Data
  - Configuring a proxy for the AppScan Dynamic Analysis Client
    Configure the proxy for the AppScan Dynamic Analysis Client and test the connection. This proxy is used to import .scant templates from AppScan Standard. After the .scant template is imported, the security analyst can use it to create a QuickScan template.
  - Capturing Traffic and Actions using AppScan Activity Recorder
  - Test Automation in AppScan® Enterprise using AppScan Traffic Recorder
    The HCL AppScan Traffic Recorder enables you to record traffic to use as Explore data in your AppScan Enterprise (ASE) job. The HCL AppScan Traffic Recorder is a system for managing traffic recorder instances. Traffic recorder instances can be created on demand to record traffic that will later be used for a DAST scan. This topic describes how to set up and use the traffic recorder.
  - Updating security rules
    The security rules are updated as a part of your AppScan® Enterprise releases. You can verify the version and release date of the security rules by looking in the About link in the AppScan Enterprise main menu.
- Configuring log retention period property
  The log files generated during a scan run are saved in the server for certain time frame. The time limit until when such log files are retained by the server is referred as log retention period. After this retention period, these log files become outdated while redundantly occupying memory space in the server. You can configure a time limit as a log retention period in the AppScan Enterprise, to automatically delete such log files after this preset period exceeds.
Administering
Learn how to administer the product.
Managing application risk
Follow this workflow to manage application security risks in your organization.
Troubleshooting and support
To help you understand, isolate, and resolve problems with your HCL® software, the troubleshooting and support information contains instructions for using the problem-determination resources that are provided with your HCL products.
Reference
Review reference information for the product.
Glossary

Configuring a proxy for the AppScan Dynamic Analysis Client

Configure the proxy for the AppScan Dynamic Analysis Client and test the connection. This proxy is used to import .scant templates from AppScan Standard. After the .scant template is imported, the security analyst can use it to create a QuickScan template.

Procedure

Go to Administration > Dynamic Analysis Client Proxy.
Enter the proxy address and modify the port number if necessary.
Restriction:
The port number can't be the same as the port number in the connection proxy that is stored in the web.config file.
If the proxy server requires authentication, enter the user name and password.
Enter a URL to test the proxy connection and click Test Connection.
When the connection is successful, click Save.

The settings above apply specifically to importing templates. The AppScan Dynamic Analysis Client also has its own communication and proxy settings that are used during scan recording and execution. These settings determine how both the local client and the AppScan Enterprise Agent connect to the application being tested.

For detailed instructions on these options, see Communication and Proxy in the AppScan Dynamic Analysis Client documentation.