Advanced tab
Tools > Options > Advanced tab lets you view and change the default values of advanced settings.
The Advanced tab lists the Type (String, DWord, or Boolean) and current Value of many settings, and lets you change them. When you select a setting by clicking it, a brief description of the setting and how to use it appears at the bottom of the list.
- To locate a particular Preference Name (or names), type a word or fragment into the filter field at the top of the dialog. Use the drill-down arrow to Match case and/or Match whole word.
- To change a setting, click on the Value field, and select or type in the new
value.
Settings that have been changed from their default values appear in bold.
Note:If you try to enter an invalid value, a warning appears and the value is not accepted. - To restore all settings to their default values, click the Reset to default button at the top of the dialog.
|
Name |
Description |
Default value |
Possible use cases |
|---|---|---|---|
|
ASE.TimeOut |
The timeout value, in seconds, for requests to AppScan Enterprise. | 100 | |
|
AutoApproveEmbeddedBrowserDialogs |
Automatically approve embedded browser pop-up dialogs. | False | Use when browser-based recording or exploration is interrupted by recurring pop-up dialogs and you want the scan to continue without manual approval. |
| ChromePoolSettings.NumBrowserlnstancesInScreenShotService | Specifies how many Chrome instances AppScan can launch in parallel to capture screenshots for issue information and to call AI providers. Higher values can speed up the collection of issue details, but they also increase CPU, memory, and disk usage. Reduce the value on slower machines, shared scan hosts, or when screenshot capture or AI processing becomes unreliable. | 3 | Increase when the scan host has sufficient resources, many findings need screenshots, or AI provider calls are enabled and performance is a priority. Decrease when the system is resource-constrained, screenshots fail, or AI calls time out. |
|
ChromePoolSettings.NumSeleniumDriverThreads |
Specifies how many Selenium browser instances AppScan can run in parallel during security tests. Higher values can shorten scan time by testing more pages or requests at once, but they also increase load on the scan host and the target application. Lower the value if the environment has limited resources, the target site uses rate limiting, or the scan shows instability or authentication issues. | 3 | Increase for large or complex applications, when scan time is important, and when the host has enough CPU and memory to support parallel testing. Decrease for slower machines, shared environments, or targets that show rate limiting, session problems, or unreliable scan behavior. |
| Communication. ADNS.ValidationProtocol | Specifies the protocol to use for ADNS validations. 0 = DNS; 1 = HTTP. | 0 | |
| Communication.HttpsignoreCertErrors | Ignore SSL certificate errors. | True | Use when testing internal or self-signed sites where certificate validation would otherwise block access to the application. |
| Communication.Proxy.PACFileCache | Defines how AppScan caches PAC file entries: -1 (default) = Uses the engine's value by default; 0 = Don't cache; 1 = Cache by host and port; 2 = Cache by path and port. | -1 | |
| CustomScripts. Enable | Run custom scripts during the scan. | True | Use when the application requires custom login, MFA, or other pre-scan actions that are not handled by the standard scan flow. |
|
CVSS.MinCriticalScore |
Minimum CVSS score for Critical severity (between 0.0 and 10.0). | 9 | |
|
CVSS.MinHighScore |
Minimum CVSS score for High severity (between 0.0 and 10.0). | 7 | |
|
CVSS.MinLowScore |
Minimum CVSS score for Low severity (between 0.0 and 10.0). | 0.1 | |
| CVSS.MinMedScore | Minimum CVSS score for Medium severity (between 0.0 and 10.0). | 4 | |
| GUl.LongResponse | Maximum size of the response that the user will be allowed to scroll down without being warned that AppScan might stop responding while trying to display it. | 2000000 | |
|
Gui.RecordUserActionsInExternalBrowser |
Record user actions when using an external browser for recording. | True | Use when you want AppScan to capture the full sequence of user actions while recording traffic in an external browser. |
| GUl.SyntaxEditorFontFamily | The font family that is used in the Request/Response tab. | Courier New | |
| GUl.ValidateStartingUrl | Validate the Starting URL during scan configuration. | True | Keep enabled for normal scan setup to catch invalid or unreachable starting URLs. Disable only when you intentionally use temporary or dynamic URLs for exploratory testing. |
|
License.ConnectionTimeout |
Timeout (in seconds) for connecting to HCL License Server. | 20 | |
|
License.MaskHostld |
Mask system information when generating the host ID for server-based license allocation only. | True | |
| License.ReturnLicenseTimeout | Timeout (in seconds) for returning (check out) the license to HCL License Server. | 5 | |
|
License.ServerPingCheck |
Don't send ping requests to License Key Server | True | |
|
LocalAppScanHttpServer.SourcelnterfacelP |
Machines with multiple IP addresses: Specify an address accessible to the tested application server. | Auto | |
|
LocalAppScanHttpServer.TcpSourcePort |
Specify a TCP port, in the range of 1024 - 65535, which AppScan uses for a local HTTP server. A value of "1" will result in automatic port selection. Caution: Altering this option would limit the number of open AppScan instances to one. | Auto | |
|
Logger.LogDbg.LogFileSize |
EngineTrace log file max size (in bytes). | 52428800 | |
|
Logger.LogTraffic.LogFileSize |
Traffic log file max size (in bytes). | 262144000 | |
| PerformanceMonitor.AttackThresholdForMemoryCheck | Number of attacks to send between free-virtual-memory checks. | 50 | |
|
PerformanceMonitor.EnvironmentMonitorlnterval |
Determine the interval (in milliseconds) of monitoring and logging the memory status. | 10000 | |
|
PerformanceMonitor.MaxMemUsageMB |
Max. virtual memory usage before forcing scan pause. (MB) | 2800 | |
|
Report.GenerateWordReportBasedOnURL |
If set to True, when a Word report is generated it will include only results for the URL currently selected in the application tree, and not on all scan results. | True | |
|
Report.FItmlToPdfTimeout |
Timeout (in milliseconds) for HTML to PDF conversion when creating security report PDFs. | 1800000 | |
| Report.MaxContinuousCharsLength | Maximum number of continuous characters that can be printed on a single line in the report. If longer the string will be truncated. | 400 | |
| Report.MaxDataLength | Maximum length of data that is printed in a report section. Longer data will be truncated. | 5000 | |
| Report.MaxParamLength | Maximum length of a parameter name or value that is printed in a report section. Longer data will be truncated. | 500 | |
| Report.XmlToHtmlTimeout | Timeout (in milliseconds) for XML to HTML conversion when creating security reports. | 1200000 | |
| RunEngineExternalProcess | Run AppScan's engine as an external process to its GUI. | True | |
| SessionManagement.ShowActionBasedPlayerWindow | Show action-based player window during playback. | False | |
| SessionManagement.UseMouseLocationForActionBasedRecording | Use mouse coordinates instead of DOM events when recording mouse clicks during action-based recording. | False | |
| TempFilesDir | Path for AppScan temporary files. Must be local, and use ASCII characters only.You may also need to change TEMP and TMP values in Windows User Environment Variables. | C:\ProgramData\HCL\AppScan Standard\temp |