Standard desktop deployment

The standard desktop deployment is for a single AppScan® Source user in a small organization or a security analyst/auditor who performs security assessments, both onsite and offsite. It assumes no defect tracking system integration or build integration (through use of AppScan Source for Automation). This deployment model can be installed in two ways:
  • Two AppScan Source components installed on one computer, such as a notebook: AppScan Source for Analysis (client) and the AppScan Enterprise Server.
  • One AppScan Source component installed on one computer, such as a notebook: AppScan Source for Analysis (client) to be run in standalone mode.
The desktop deployment model focuses on scan results and individual productivity and convenience rather than the ability to deploy AppScan Source across numerous computers and optimization around a team effort.

With this model, a user either authenticates to the AppScan Enterprise Server using the AppScan Source administrative account, and no LDAP Directory Server integration is expected, or runs in standalone mode with no authenication required. This model assumes that a source control management client on the computer provides access to source code, or the source code resides on the computer.

The standard desktop deployment is ideal for a mobile auditor. For example, the auditor might work onsite and then want to finish some work at home or while traveling. If the auditor logs in to the notebook running AppScan Source for Analysis and the AppScan Enterprise Server while offsite, there is access to the source code and the saved assessments. Later, when the auditor returns to work onsite, reconnecting to the source control system allows for the return of the corrected source to the corporate repository. This model allows for the generation of leave-behind reports with all of the assessment result details.