Home
Reference
Review reference information for the product.
Triage with reports
Reports are automatically generated after a job has run. They provide a way of managing issues so that you can helps you manage issues that are important to your organization and do so in a way that is supported both by the Enterprise Console's workflow and the workflows of other processes within your organization.
Organizing report and dashboard results for analysis
A tremendous amount of powerful data is delivered through the reports. But not every organization wants to review their data in exactly the same way as everybody else. Flexible viewing mechanisms help you organize how you review your issues in whatever way makes the most sense to you.
Track progress with executive dashboards
Use the dashboard to track and consolidate the severity metrics and trends of your web applications or website over time. You can combine data from different business areas (such as sales, marketing, or products), specific issue types, or developers so you can see a complete picture of your web properties or applications. Security analysts or web managers can use this high-level view to quickly study interactive reports about the issues.
Modifying a pre-created dashboard
You can modify a pre-created dashboard to focus it on a specific website area or business unit. Add or remove tabs to meet compliance targets, or modify the configuration of a dashboard tab as necessary.

Welcome
Welcome to the HCL AppScan Enterprise 10.7.0 documentation, where you can find information about how to install, maintain, and use HCL AppScan Enterprise.
Accessibility features for AppScan® Enterprise
Accessibility features assist users who have a disability, such as restricted mobility or limited vision, to use information technology content successfully.
Overview
Learn general information about the product.
Installing
Learn how to install the product.
Upgrading and migrating
Learn how to upgrade the product.
Integrating
Learn how to integrate the product with other solutions.
DevOps
Learn how to extend the product with REST APIs and plugins.
Best practices
Learn best practices for using the product.
Configuring
Learn how to configure the product.
Administering
Learn how to administer the product.
Managing application risk
Follow this workflow to manage application security risks in your organization.
Troubleshooting and support
To help you understand, isolate, and resolve problems with your HCL® software, the troubleshooting and support information contains instructions for using the problem-determination resources that are provided with your HCL products.
Reference
Review reference information for the product.
- Configuring Wizard topics
  Learn about configuring wizard topics.
- Folder Explorer topics
  Learn about folder explorer topics.
- Triage with reports
  Reports are automatically generated after a job has run. They provide a way of managing issues so that you can helps you manage issues that are important to your organization and do so in a way that is supported both by the Enterprise Console's workflow and the workflows of other processes within your organization.
  - Summarizing issues in report packs
    A report pack is a bundle of reports that summarizes the issues discovered within its reports and provides a window into those reports. The reports themselves contain the details of the issues found on your website or application.
  - Organizing report and dashboard results for analysis
    A tremendous amount of powerful data is delivered through the reports. But not every organization wants to review their data in exactly the same way as everybody else. Flexible viewing mechanisms help you organize how you review your issues in whatever way makes the most sense to you.
    - Grouping report data
      Grouping report results by different data sets (such as page, or context or IP address) helps make the report data more relevant to your analysis needs.
    - Searching report data
      You can search for specific issues or information within each report's results. For example, you might want to find all the issues within a certain directory of the Page URL. Or you might want to track a particular issue throughout your remediation process; enter the Issue ID in the Search tab to locate it within the relevant report.
    - Identifying pages with identical URLs in reports
      When your report contains a list of identical URLs, it is likely because your site uses static URLs. In these cases, the page content can be determined through the use of either POST data or cookie information.
    - Managing issues in a report
      All issues are classified as open by default. You can see an issue classification by grouping by Issue Status.
    - Exporting data for offline analysis
      Exporting report data is useful if you have team members that do not directly access the Enterprise Console; you can export the report data to an XML file, Excel spreadsheet, pdf or CSV file for them to use.
    - Correlating static analysis data with dynamic analysis data
      Import data from AppScan® Source to correlate its findings with an existing dynamic analysis security scan (AppScan Enterprise Server content scan job or an AppScan Standard import job).
    - Reports
    - Track progress with executive dashboards
      Use the dashboard to track and consolidate the severity metrics and trends of your web applications or website over time. You can combine data from different business areas (such as sales, marketing, or products), specific issue types, or developers so you can see a complete picture of your web properties or applications. Security analysts or web managers can use this high-level view to quickly study interactive reports about the issues.
      - Running pre-created dashboards
        Pre-created dashboards alleviate the configuration process for you. They include a graphical top-level executive summary and relevant detailed report summaries in a spreadsheet format. These dashboards are installed in the root folder when you run the Default Settings Wizard (during configuration or at another time), and can be copied to other folders.
      - Modifying a pre-created dashboard
        You can modify a pre-created dashboard to focus it on a specific website area or business unit. Add or remove tabs to meet compliance targets, or modify the configuration of a dashboard tab as necessary.
      - Creating a dashboard
        Dashboards track and consolidate the severity metrics and trends of your web applications or site over time. You can create graphical or spreadsheet dashboards.
      - Linking dashboards together
        You can link dashboards together to give a bigger picture of an issue or a website. For example, if you have two compliance dashboards that are related, but each represents a different area of your website, they might be linked together to give users a picture of the whole website's compliance.
      - Running and updating the dashboard
        Dashboard data must be updated on a periodic basis using its schedule property or by running it manually.
      - Exporting dashboard or report pack summary data
        You can export dashboard, report pack, or history data to produce summaries for offline analysis.
- Configuration Manager
- AppScan resources
  A GitHub collection of integrations, helper scripts, utilities, useful examples, libraries, and other resources related to HCL AppScan.
Glossary

Modifying a pre-created dashboard

You can modify a pre-created dashboard to focus it on a specific website area or business unit. Add or remove tabs to meet compliance targets, or modify the configuration of a dashboard tab as necessary.

Procedure

Copy the dashboard to another location. This will aggregate data for all folders below the new location.
In the Folder Explorer view, select the dashboard and click Edit.
Go to the Tabs page for the dashboard and click the Create icon ().
On the Create Tab page, give the tab a meaningful Name and Description (optional).
Select Detailed summary by Report Pack and click Create.
On the Reports page, select the Pages report and the relevant Compliance module reports, and click Save.
Rerun the dashboard to update its contents.

Results

Note:

If the report packs included in the dashboard do not contain the reports required by the dashboard tab, no data about those reports will be displayed. If your dashboard does not contain the information you expect, verify the reports selected in your report pack, add the missing ones, and rerun the report packs and dashboard.
Because the Top Security Issues and Breakdown by Security Risk charts take their data from the Security Issues report and the Security Risk Assessment report, their content will not be updated when you add Compliance tabs.