Configuring
Learn how to configure the product.
- Configuring your user settings
  There are several settings that you can personalize for your needs.
- Configuring the Enterprise Console
  The Enterprise Console is the main user interface that supports administration, item configuration, and reporting.
  - Identifying the servers and domains in your installation
    Servers and domains are considered global properties. When you add a Starting URL to a content scan job, its domain is automatically added to the Servers and Domains page on the Administration tab. Any job that uses that domain will have the same properties and rules applied to the URLs that it finds.
  - Scheduling blackout periods for a domain
    If you have regularly scheduled site maintenance periods, use a blackout period to suspend the content scan job so your site is not scanned while you are performing maintenance tasks. You can also use a blackout period for those times when your website is subject to heavy visitor traffic. Job and system administrators can schedule and override blackout periods if necessary.
  - Configuring defect tracking integration
    If you use Rational Team Concert™ or Rational® Quality Manager, you can configure defect tracking integration so that issues can be submitted as defects from reports from the Scans view. If you want users to submit issues as defects from an application in the Monitor view, do not configure Rational Team Concert in the Administration view. Instead, configure the integration from the Monitor view.
  - Capturing Traffic and Actions using AppScan Activity Recorder
  - Capturing and Importing Traffic Data
  - Configuring a proxy for the AppScan Dynamic Analysis Client
    Configure the proxy for the AppScan Dynamic Analysis Client and test the connection. This proxy is used to import .scant templates from AppScan Standard. After the .scant template is imported, the security analyst can use it to create a QuickScan template.
  - Capturing Traffic and Actions using AppScan Activity Recorder
  - Test Automation in AppScan® Enterprise using AppScan Traffic Recorder
    The AppScan Traffic Recorder enables you to record traffic to use as Explore data in your AppScan Enterprise (ASE) job. The AppScan Traffic Recorder is a system for managing traffic recorder instances. Traffic recorder instances can be created on demand to record traffic that will later be used for a DAST scan. This document describes how to set up and use the traffic recorder.
  - Updating security rules
    The security rules are updated as a part of your AppScan® Enterprise releases. You can verify the version and release date of the security rules by looking in the About link in the AppScan Enterprise main menu.
- Configuring log retention period property
  The log files generated during a scan run are saved in the server for certain time frame. The time limit until when such log files are retained by the server is referred as log retention period. After this retention period, these log files become outdated while redundantly occupying memory space in the server. You can configure a time limit as a log retention period in the AppScan Enterprise, to automatically delete such log files after this preset period exceeds.

Capturing Traffic and Actions using AppScan Activity Recorder

AppScan Activity Recorder plug-in extension offers to capture browsing activity while performing web application security testing on Google Chrome browser. The Activity Recorder plug-in helps to automatically record traffic data and generates the output file, *.dast.config, which can be uploaded to AppScan Enterprise jobs for scanning.

You can install AppScan Activity Recorder on Chrome browser. Follow instructions available on the installation page to record traffic using the extension.

You can also install AppScan Activity Recorder on Microsoft Edge browser. Follow the instructions under the section "Add an extension to Microsoft Edge from the Chrome Web Store" in this link.