Home
Manual exploring
Manual exploring enables you to explore specific parts of your application, filling in fields and forms as you go. This can be a way of ensuring that particular areas of the site are covered, and that AppScan has the information needed to complete forms correctly.
Using an external client
You can manually explore RESTful or other non-SOAP web APIs - or SOAP APIs that do not require security envelopes - using a mobile phone, simulator, or emulator. AppScan displays the domains and requests in its External Traffic Recorder, and create appropriate tests from the input.
SSL with other external client
To use SSL when recording from an external client, you must first install the AppScan SSL certificate on the AppScan machine. If the client is on a different machine to AppScan, you must also install the certificate on the client machine.

Welcome
Welcome to the documentation for HCL AppScan Standard version 10.6.0
Getting started
This section provides a short tour of basic product features and procedures, including using the wizard to set up a scan.
Configuration
You configure a scan by choosing settings that best describe your application, and the kind of testing you want.
Manual exploring
Manual exploring enables you to explore specific parts of your application, filling in fields and forms as you go. This can be a way of ensuring that particular areas of the site are covered, and that AppScan has the information needed to complete forms correctly.
- Using a browser
  For web applications, you can usually use the build-in Chromium browser for manual exploring. Where necessary an external browser can be used.
- Using an external client
  You can manually explore RESTful or other non-SOAP web APIs - or SOAP APIs that do not require security envelopes - using a mobile phone, simulator, or emulator. AppScan displays the domains and requests in its External Traffic Recorder, and create appropriate tests from the input.
  - Recording with an external client
    Describes recording Manual Explore data with Postman, SoapUI, or another external client.
  - External Traffic Recorder
    When you manually explore using AppScan as recording proxy, this recorder displays domains detected and traffic received, and enables you to control which of these will be tested. A limited version of the recorder is used to record the login sequence.
  - SSL with SoapUI
    To use SoapUI with SSL you must first install the AppScan SSL certificate in SoapUI.
  - SSL with other external client
    To use SSL when recording from an external client, you must first install the AppScan SSL certificate on the AppScan machine. If the client is on a different machine to AppScan, you must also install the certificate on the client machine.
Scanning
Learn how to start a scan, and what happens during the scan; how to manually manipulate the Explore stage, and how to export the results of a scan.
Data
Data view is populated with information about the structure of the site during the Explore stage of the scan.
Issues
Issues view provides access to the results of a scan. You can view results at a high level or select specific tests or objects and access more details. These details include how to fix, requests/responses, and differences between the test variants that resulted in issues. You can manipulate the severity of issues, resend tests (with or without modifications), and create reports based on Issues.
Reports
This section describes how to generate reports from the scan results.
Tools
This section explains how to use additional tools provided with HCL AppScan Standard.
Integrations
This section describes integrations of other applications with AppScan Standard:
Best practices
This section contains some best practices and use cases for advanced users.
FAQ & Troubleshooting
CLI
This section describes the syntax and options available using the Command line interface.
References
Menus and toolbar summaries, and glossary

SSL with other external client

To use SSL when recording from an external client, you must first install the AppScan SSL certificate on the AppScan machine. If the client is on a different machine to AppScan, you must also install the certificate on the client machine.

Procedure

Click Install AppScan certificate locally, and then click Yes on the Windows dialog box that appears to allow the change.

Note: To uninstall, go to Tools > Options > Recording Proxy, and click Remove.
If you will be exploring from a remote device (mobile phone or emulator), you must also install the certificate on that device:
1. On the device, browse to: http://appscan
2. On the device, click Install AppScan SSL Certificate.
You are now ready to record the login from your device, with AppScan as recording proxy.