Using AppScan as recording proxy
You can use AppScan's External Traffic Recorder as a recording proxy, and manually explore RESTful or other non-SOAP web services - or SOAP services that do not require security envelopes - using a mobile phone, simulator, or emulator. AppScan displays the domains and requests in its External Traffic Recorder, and create appropriate tests from the input.
Note: For web services that have a WSDL file, and utilize SOAP security envelopes,
you should use GSC to explore the service instead (for details see Using GSC).
Note: If your application uses man-in-the-middle protection, it is
not possible to scan it with AppScan as proxy.