Welcome
Configuring
Learn how to configure the product.
Configuring the Enterprise Console
The Enterprise Console is the main user interface that supports administration, item configuration, and reporting.
Capturing Traffic and Actions using AppScan Activity Recorder

Welcome
Welcome to the HCL AppScan Enterprise 10.12.0 documentation, where you can find information about how to install, maintain, and use HCL AppScan Enterprise.
Accessibility features for AppScan® Enterprise
Accessibility features assist users who have a disability, such as restricted mobility or limited vision, to use information technology content successfully.
Overview
Learn general information about the product.
Installing
Learn how to install the product.
Upgrading and migrating
Learn how to upgrade the product.
Integrating
Learn how to integrate the product with other solutions.
DevOps
Learn how to extend the product with REST APIs and plugins.
Best practices
Learn best practices for using the product.
Configuring
Learn how to configure the product.
- Configuring your user settings
  There are several settings that you can personalize for your needs.
- Configuring the Enterprise Console
  The Enterprise Console is the main user interface that supports administration, item configuration, and reporting.
  - Identifying the servers and domains in your installation
    Servers and domains are considered global properties. When you add a Starting URL to a content scan job, its domain is automatically added to the Servers and Domains page on the Administration tab. Any job that uses that domain will have the same properties and rules applied to the URLs that it finds.
  - Scheduling blackout periods for a domain
    If you have regularly scheduled site maintenance periods, use a blackout period to suspend the content scan job so your site is not scanned while you are performing maintenance tasks. You can also use a blackout period for those times when your website is subject to heavy visitor traffic. Job and system administrators can schedule and override blackout periods if necessary.
  - Configuring defect tracking integration
    If you use Rational Team Concert™ or Rational® Quality Manager, you can configure defect tracking integration so that issues can be submitted as defects from reports from the Scans view. If you want users to submit issues as defects from an application in the Monitor view, do not configure Rational Team Concert in the Administration view. Instead, configure the integration from the Monitor view.
  - Capturing Traffic and Actions using AppScan Activity Recorder
  - Capturing and Importing Traffic Data
  - Configuring a proxy for the AppScan Dynamic Analysis Client
    Configure the proxy for the AppScan Dynamic Analysis Client and test the connection. This proxy is used to import .scant templates from AppScan Standard. After the .scant template is imported, the security analyst can use it to create a QuickScan template.
  - Capturing Traffic and Actions using AppScan Activity Recorder
  - Test Automation in AppScan® Enterprise using AppScan Traffic Recorder
    The HCL AppScan Traffic Recorder enables you to record traffic to use as Explore data in your AppScan Enterprise (ASE) job. The HCL AppScan Traffic Recorder is a system for managing traffic recorder instances. Traffic recorder instances can be created on demand to record traffic that will later be used for a DAST scan. This topic describes how to set up and use the traffic recorder.
  - Updating security rules
    The security rules are updated as a part of your AppScan® Enterprise releases. You can verify the version and release date of the security rules by looking in the About link in the AppScan Enterprise main menu.
- Configuring log retention period property
  The log files generated during a scan run are saved in the server for certain time frame. The time limit until when such log files are retained by the server is referred as log retention period. After this retention period, these log files become outdated while redundantly occupying memory space in the server. You can configure a time limit as a log retention period in the AppScan Enterprise, to automatically delete such log files after this preset period exceeds.
Administering
Learn how to administer the product.
Managing application risk
Follow this workflow to manage application security risks in your organization.
Troubleshooting and support
To help you understand, isolate, and resolve problems with your HCL® software, the troubleshooting and support information contains instructions for using the problem-determination resources that are provided with your HCL products.
Reference
Review reference information for the product.
Glossary

Capturing Traffic and Actions using AppScan Activity Recorder

AppScan Activity Recorder plug-in extension offers to capture browsing activity while performing web application security testing on Google Chrome browser. The Activity Recorder plug-in helps to automatically record traffic data and generates the output file, .dast.config, which you can upload to an existing AppScan Enterprise job for scanning.

Note:

Don't use a traffic-only dast.config file to create a new job via the POST /jobs API. To import traffic data to an existing job, use the POST /jobs/{jobId}/dastconfig/updatetraffic/ API.

You can install AppScan Activity Recorder on Chrome browser. Follow instructions available on the installation page to record traffic using the extension.

You can also install AppScan Activity Recorder on Microsoft Edge browser. Follow the instructions under the section "Add an extension to Microsoft Edge from the Chrome Web Store" in this link.