Scan Configuration

Once AppScan is launched a new scan can be created by selecting the 'Create New Scan...' option on the Welcome screen.

Then select 'Regular Scan' from the Predefined Templates on the next screen.

Choose 'Web Application Scan' on the first page of the Configuration Wizard, click 'Next'.

On the 'URL and Servers' page of the wizard enter the starting URL of the application. Once the URL is entered it can be verified by clicking the icon beside the input field. This will cause the AppScan browser to be displayed and it will attempt to open the URL. Confirm that the URL is correct and accessible. (Click yes on security warning if necessary). Close the browser and click 'Next' in the Configuration Wizard.

Enter the necessary Login Management details. Applications running under Eclipse/Tomcat do not require the user to login, so the option 'None' can be selected. Click 'Next'.

On the 'Test Policy' screen click on the 'Full Scan Configuration' link in the 'General Tasks' panel. This presents the 'Scan Configuration' dialog.