Home
Manual exploring
Manual exploring enables you to explore specific parts of your application, filling in fields and forms as you go. This can be a way of ensuring that particular areas of the site are covered, and that AppScan has the information needed to complete forms correctly.
Using an external client
You can manually explore RESTful or other non-SOAP web APIs - or SOAP APIs that do not require security envelopes - using a mobile phone, simulator, or emulator. AppScan displays the domains and requests in its External Traffic Recorder, and create appropriate tests from the input.
SSL with SoapUI
To use SoapUI with SSL you must first install the AppScan SSL certificate in SoapUI.

Welcome
Welcome to the documentation for HCL AppScan Standard version 10.6.0
Getting started
This section provides a short tour of basic product features and procedures, including using the wizard to set up a scan.
Configuration
You configure a scan by choosing settings that best describe your application, and the kind of testing you want.
Manual exploring
Manual exploring enables you to explore specific parts of your application, filling in fields and forms as you go. This can be a way of ensuring that particular areas of the site are covered, and that AppScan has the information needed to complete forms correctly.
- Using a browser
  For web applications, you can usually use the build-in Chromium browser for manual exploring. Where necessary an external browser can be used.
- Using an external client
  You can manually explore RESTful or other non-SOAP web APIs - or SOAP APIs that do not require security envelopes - using a mobile phone, simulator, or emulator. AppScan displays the domains and requests in its External Traffic Recorder, and create appropriate tests from the input.
  - Recording with an external client
    Describes recording Manual Explore data with Postman, SoapUI, or another external client.
  - External Traffic Recorder
    When you manually explore using AppScan as recording proxy, this recorder displays domains detected and traffic received, and enables you to control which of these will be tested. A limited version of the recorder is used to record the login sequence.
  - SSL with SoapUI
    To use SoapUI with SSL you must first install the AppScan SSL certificate in SoapUI.
  - SSL with other external client
    To use SSL when recording from an external client, you must first install the AppScan SSL certificate on the AppScan machine. If the client is on a different machine to AppScan, you must also install the certificate on the client machine.
Scanning
Learn how to start a scan, and what happens during the scan; how to manually manipulate the Explore stage, and how to export the results of a scan.
Data
Data view is populated with information about the structure of the site during the Explore stage of the scan.
Issues
Issues view provides access to the results of a scan. You can view results at a high level or select specific tests or objects and access more details. These details include how to fix, requests/responses, and differences between the test variants that resulted in issues. You can manipulate the severity of issues, resend tests (with or without modifications), and create reports based on Issues.
Reports
This section describes how to generate reports from the scan results.
Tools
This section explains how to use additional tools provided with HCL AppScan Standard.
Integrations
This section describes integrations of other applications with AppScan Standard:
Best practices
This section contains some best practices and use cases for advanced users.
FAQ & Troubleshooting
CLI
This section describes the syntax and options available using the Command line interface.
References
Menus and toolbar summaries, and glossary

SSL with SoapUI

To use SoapUI with SSL you must first install the AppScan SSL certificate in SoapUI.

Procedure

Close any open instance of SoapUI.
In AppScan, click Tools > Options > Recording Proxy > Export, and save the ZIP file to your machine.

Note: If the Export button is disabled, the certificate is not installed, and you must first install it by clicking the Add button located above it.
Extract the SSL certificate file appScanRootCert.crt and save it to:
```
[SoapUI home dir]\jre\lib\security
```
Important: Do not change the filename. If the file already exists, overwrite it.
Open the command line as administrator, and go to:
```
cd [SoapUI home dir]\jre\lib\security
```

Run command:

"[SoapUI home dir]\jre\bin\keytool" -import -trustcacerts -keystore cacerts -storepass 
changeit -noprompt -alias AppScanCertificate -file appScanRootCert.crt

The certificate has now been added to the SoapUI key store, and will allow you to use SSL in SoapUI.

What to do next

Troubleshooting

If you are still unable to send requests, try these troubleshooting steps:

Close any open instance of SoapUI.
Uninstall the AppScan SSL Certificate by clicking Tools > Options > Recording Proxy tab > Remove.

Delete the AppScan KeyStore entry in SoapUI by running:

"[SoapUI home dir]\jre\bin\keytool" -delete -alias AppScanCertificate -storetype JKS 
-keystore cacerts -storepass changeit

Note: Ignore the warning that appears.

Repeat Steps 2 - 5 in the section above.

Related topic:

External traffic recorder not recording