Recording Proxy tab

Tools > Options > Recording proxy tab

Use this tab to configure AppScan to act as a proxy for external browsers, or for manually exploring non-SOAP web APIs using either a remote device (such as a mobile phone), or a local application (such as a simulator or emulator).

Option

Description
AppScan proxy port

Specifies which port AppScan uses. When using AppScan as a proxy server you need to configure the external browser or mobile device to use this port.

Select whether AppScan selects an available port automatically, or lets you choose the port. Note that if the port is chosen automatically it may change between sessions, and you will therefore need to re-configure your mobile device.

Let AppScan choose the port automatically

Define manually

External Connections
This setting determines which connections to external domains are accepted.
Reject all
(Default) Connection attempts from all external IPs will be rejected. Use this setting only if you will be exploring using an application on the same machine as AppScan.
Accept allowlist only
Connections from external IPs that appear on the allowlist will be accepted; all others will be rejected.
Accept allowlist and prompt for others
Connections from external IPs that appear on the allowlist will be accepted automatically; for all others the AppScan user will be prompted, with the option of adding the new IP to the allowlist. Note that prompts are seen only if the External Traffic Recorder is open.

Allowlist

Connections from IPs listed here will be accepted automatically.

To add new IPs to the list, click + Add, and select an option:

  • To add a single IP to the list, type in the IP and optionally a description.
    Tip: If you will be using a remote device but are not sure of its IP address, or if it changes frequently, select Accept allowlist and prompt for others. The first time the device connects with a new IP, a pop-up appears giving you the option to add it to the allowlist.
  • To add a range of IP addresses, add an IPv4 address and subnet mask, or an IPv6 address and subnet prefix length, and optionally a description.

AppScan SSL certificate
From version 10.7.0, the AppScan SSL certificate is removed for security reasons. If you had it configured before, you now have the option to remove it. Remove the AppScan SSL certificate because it is no longer supported.
Remove
Removes the certificate from the AppScan machine.

For more information, see Using an external client