System requirements

A summary of the minimum hardware and software required for the machine that runs AppScan Standard.

User Permissions

  • Installing: Administrator permissions are required to install AppScan Standard.
  • Using: Regular user permissions are sufficient for using AppScan Standard.

Administrator permissions are required to install AppScan Standard, but no special permissions are required to configure or run scans.

Hardware requirements

Hardware Minimum Requirement
Processor 2 GHz, 2-core (or equivalent)
Memory 4 GB RAM minimum; 8 GB recommended
Hard disk 5 GB free space
Network 1 NIC 100 Mbps for network communication with configured TCP/IP
Display 1920 x 1080 recommended

Operating system and software requirements

Software Details
Operating system Supported operating systems (64-bit editions only):
  • Microsoft® Windows® Server 2022: Standard and Datacenter
  • Microsoft® Windows® Server 2019: Essentials, Standard and Datacenter
  • Microsoft® Windows® Server 2016: Standard and Datacenter
  • Microsoft® Windows® 11: Pro and Enterprise
  • Microsoft® Windows® 10: Pro and Enterprise
Note: In general, any OS that is End of life (EOL) is not supported.
Display settings
  • Screen resolution: 1920 x 1080 recommended
  • Scaling: Up to 150% is supported. Setting a higher display scale may result in distortion
License
  • Users using a local license server require a network connection to their license server.
  • Users connecting to the HCL Cloud License Server require an internet connection.
In both cases, the license domain and port must be enabled in the Windows proxy and any firewall.
Other Microsoft® .NET Framework 4.7.2 or later.

Optional: Microsoft® Word 2013, 2016 for custom report templates.

External clients Optional: For manually exploring web APIs with an external client, the following client versions are approved:
  • Postman (all current versions)
  • SoapUI 5.6.x

Network allowlist

Host Port Details
appscan.com
53 Required for some Command Execution and Remote File Inclusion security tests, including tests for the Log4j vulnerability. Both AppScan and the tested server must be able to send DNS lookup queries to this domain.
help.hcl-software.com
hclsoftware-esd.flexnetoperations.com
80, 443 Required if using Auto-update.
hclsoftware.compliance.flexnetoperations.com
80, 443 Required if using a cloud license server.
localhost
* Required to access the "How to Fix" information.

Firewall

A personal firewall running on the same computer as AppScan can block communication and result in inaccurate findings and reduced performance. For best results, do not run a personal firewall on the computer that runs AppScan.

Antivirus

An antivirus program running on the same computer as AppScan can impede scanning. For best results, do not run an antivirus program on the computer that runs AppScan, or at least make sure that AppScan is added in its list of approved programs.

Multiple instances of AppScan

You can have more than one instance of AppScan open on the same machine, for example, to compare scan configurations or results, but only one scan should be run at a time.