This section describes how to install the glass box agent
on a .NET server.
Before you begin
The AppScan® glass
box agent must be installed on your application server (or servers),
by copying certain files from the AppScan installation to the
server. To do this you will need access to your application server.
The following systems and technologies are supported:Table 1. .NET platform requirements
Software |
Requirement |
Operating System |
32 - bit and 64 - bit editions:
- Microsoft™ Windows™ Server 2008
- Microsoft Windows Server 2008 R2
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 R2
|
Other |
Microsoft IIS
version 7.0 or later Microsoft .NET4
Framework must be installed, and IIS must be configured at the root
level to work with this version of ASP.net |
Procedure
- On the Glass Box page of a content scan job, expand the Download
glass box agent installer section, locate
GB_DotNET_Setup.exe
and
copy it to your web server machine. - Double-click on it to start the wizard. Follow the wizard
steps.
- When you are asked whether to install on a new or existing
website, select the recommended option (unless you are sure the alternative
is better).
Note: Which of the two options is recommended
depends on your system. Where possible an "existing website" will
be recommended, but this is not always possible, and "new website"
may be recommended in some cases. In general "existing website" is
preferred because it does not require a new port, which would then
need to be configured in AppScan, and might also require additional
firewall configuration to be accessible to AppScan.
- This step depends on your choice in the previous step:
- Existing site: If you chose "Existing site",
you are now asked to select a site from a list of existing sites.
Note: When there is more than one site, the wizard will list
them in order of preference. If the wizard identifies some sites as
potentially problematic, it will list them lower down, and label them
"not recommended". However, the order, and even the "not recommended"
label are only suggestions, and in some cases you may decide to select
a site that is labeled "not recommended".
Tip: Whichever
selection you make will enable monitoring of all sites, but where
possible try to select the site which you plan to configure as the
starting URL of your first scan.
- New site: If you chose "New site" you are now
asked to assign a port. You must define a port that will allow access
to AppScan when scanning from a remote machine.
Important: You will need to supply the port number when configuring
AppScan.
Note: You can use the Test button
to verify that the selected port is currently available. However,
this will automatically be done when you click Next.
- Set the Agent Username and Password for the glass box web
application agent.
Important: You will need
to supply these credentials when configuring a scan with glass box.
- The summary screen appears before the actual installation
takes place.
Important: Before clicking Install make
sure you have a record of the Username, Password and Port, as you
will need these when configuring AppScan.
- Click Install.
Note: The
installation includes a restart of your IIS.
When
the process completes a final message appears indicating its success
or failure.
Note: If the installation fails for any reason, the final
dialog will provide a link to the installation log for use in troubleshooting.
It may be worth attempting to install on a different or new site on
the server, even a different site that was labeled "not recommended".
In all cases you must uninstall before attempting installation again.
The location of the two installation logs is the %temp% folder. The
names of the two installation logs are:
glassbox_setup_api.txt
glassbox_setup_msi.txt
Note that the uninstall process
includes a restart of your IIS.