📙 You will learn
How to open/create, configure, launch, export, and upload an AppScan Enterprise scan.
Prerequisites
Audience: IT Professional, or End User
Difficulty: Basic
Time needed: Approximately 10 minutes
Tools required: N/A
Generate Results
After navigating to a deployed instance of AppScan Enterprise, an application must be setup to assign scans:
Fill out the Name field and click the Create button.
Navigate to the Scans page through the drop-down menu in the top left.
Select the '+' button under the Folders section to create a new scan job.
Use the defaults provided by AppScan, fill the Name field, assign it to an application from the drop-down list and select Create: Is this a button not in the picture?
Fill the New starting URL(s) field with the target application's URL, click the Add button and select Apply Is this a button not in the picture?
Navigate to the Security tab, under the Test category, on the side bar.
Select the Security Test Policy that fits the target application(Application Only is a good choice as a default) and select Save Is this a button not in the picture?
Select the newly created scan job's checkbox and click the
button to run the scan.
After the scan job completes, select the Report Pack job. Is there a screenshot for this?
Select all the issues at once by checking the top checkbox beneath Action, select Export then To XML and save the file to a desired directory:
Upload Results
It's recommended to use the AooScan Remote Providers feature to import AppScan Enterprise Scans into ThreadFix.
After generating the report, log in to ThreadFix and navigate to the Teams tab. Expand the Team that the report will be uploaded to:
After picking one of the Team's Application, select Upload Scan and drag the report into the pane:
Once ThreadFix has finish processing the report, the results can be viewed on the Application's page:
