Welcome
Welcome to the documentation for HCL AppScan Standard version 10.5.0
Getting started
This section provides a short tour of basic product features and procedures, including using the wizard to set up a scan.
Configuration
You configure a scan by choosing settings that best describe your application, and the kind of testing you want.
Manual exploring
Manual exploring enables you to explore specific parts of your application, filling in fields and forms as you go. This can be a way of ensuring that particular areas of the site are covered, and that AppScan has the information needed to complete forms correctly.
Scanning
Learn how to start a scan, and what happens during the scan; how to manually manipulate the Explore stage, and how to export the results of a scan.
Data
Data view is populated with information about the structure of the site during the Explore stage of the scan.
Issues
Issues view provides access to the results of a scan. You can view results at a high level or select specific tests or objects and access more details. These details include how to fix, requests/responses, and differences between the test variants that resulted in issues. You can manipulate the severity of issues, resend tests (with or without modifications), and create reports based on Issues.
Reports
This section describes how to generate reports from the scan results.
Tools
This section explains how to use additional tools provided with HCL AppScan Standard.
Integrations
This section describes integrations of other applications with AppScan Standard:
Best practices
This section contains some best practices and use cases for advanced users.
FAQ & Troubleshooting
- General FAQ
  This topic addresses general application questions.
- Troubleshooting tools
- Digital signature troubleshooting
- External traffic recorder not recording
  If your external device is configured correctly, AppScan's external login recorder and external traffic recorder will show the traffic sent from the device as you send it. This section offers suggestions if it does not.
- Insufficient disk space
- License troubleshooting
- Login troubleshooting
  Tips for troubleshooting session detection problems in Scan Configuration > Login Management view.
- Low virtual memory
- Multi-step operation troubleshooting
  Some suggestions for troubleshooting action-based multi-step operations.
- No URLs found
- Out-of-session troubleshooting
  Some suggestions for troubleshooting out-of-session issues.
- Postman Collection scan
  Some suggestions for troubleshooting a Postman Collection scan.
- Server not responding
  Some suggestions for troubleshooting if the server is not responding.
- Replacing unsigned extensions
  If you want to use an unsigned extension that you used with a previous version of AppScan, you can either elect to trust it, or see if a signed version is available to replace it with.
- Extended Support Mode
  Extended Support Mode logs all AppScan activity, for packing and sending to your support provider to help troubleshooting a problematic procedure.
- Changing the default browser
  You can configure AppScan to use a browser other than its built-in browser.
- Reporting false positive results
- Logs
  This section includes explanations of Scan Log messages (View > Scan Log).
CLI
This section describes the syntax and options available using the Command line interface.
References
Menus and toolbar summaries, and glossary

Changing the default browser

You can configure AppScan to use a browser other than its built-in browser.

About this task

By default, AppScan opens its built-in browser when you record the login procedure, or a multi-step operation, or when you click the Show in Browser button.

If the built-in browser is unable to access parts of the site, or if your site is not optimized for it, you can configure AppScan to use a different browser that you have installed on your machine instead.

Procedure

Click Tools > Options, and select Use External Browser.
Select a browser from the drop-down list of supported browsers that are installed on your machine. Supported browsers are:
- AppScan Chromium browser
- Mozilla Firefox
- Google Chrome
- Microsoft Edge
If either of the following two configuration options has been changed, the defined header values will be used, and not the header values of the newly selected browser. If necessary, you can restore the default values
- Configuration > Advanced Configuration > Communication: Accept-Language request header value
- Configuration > Explore Options > User-Agent header value
The ways in which these settings may have been changed by the user are:
- You opened the browser to record the login procedure or a multi-step operation, or clicked "Show in Browser"
- You manually changed them
- You loaded a saved scan
In order to set these two settings to those of the newly defined browser, simply delete the values, and (if relevant) record the login or multi-step operation again. From now on AppScan® will automatically use the header value of the defined browser.
Note: The following limitations apply to the newly defined browser:
- If the selected browser is configured to use a proxy configuration file, this selection will be ignored and the built-in browser will open.
- If you record a multi-step operation using the "Login and then Record" option, the built-in browser will open.
- If another instance of AppScan is open, and you try to open an external browser, the built-in browser will open.
- In Login Management > Details tab, if you select a URL and click either Show in browser or Select, the built-in browser will open.
- If you select Firefox, AppScan automatically creates a Firefox profile named "AppScan" (if one does not already exist). If Firefox was open when this was done, you must close it for the change to take effect.