To schedule a WAS scan please follow these instructions. Notice that you first need to create a WAS scan profile that you use for your schedule.
- Login to Security Center.
- Click Scan webb app in the header.
- Click Schedules.
- Click Create a schedule -> Web scan-> Vulnerability scan
- Under the headline General Information enter the following:
- Name: the name of the schedule, e.g. Weekly standard WAS scan.
- Owner: the owner of the schedule. Will be the one receiving notifications for the schedule.
- Target: Choose what web application you want to scan
- Under the headline Scan settings enter the following:
- Scan profile: select the WAS scan profile for the schedule. Choose if you want to use the profile if the web application has no default profile or if you choose to always override profile on web application.
- Scanner appliance: select External for external scanning of your web application from Holm Security VMP cloud platform, or select an installed scanner appliance for local scanning. Choose if you want to use the profile if the web application has no default profile or if you choose to always override profile on web application.
- Under the headline Schedule enter the following:
- Schedule enabled: Select the day, time, timezone, and Don't repeat if you want the schedule to run once.
- Start date: Select the first start date.
- Time: Set the time for the scan to run (Notice that reoccurring scans will start at the time set here).
- Timezone: select the timezone for the schedule.
- Repeat: Select daily, weekly or monthly between the scans.
- Every: The occurrence in combination with the values selected in repeat and day fields.
- Day: Select which day you want the scans to run.
- Under the headline Notifications enter information about notifications sent before the scheduled scan and when the scheduled scan is finished.
-
- Under Notification before scan starts enter the following:
- Notify scan owner before scan starts: check to enable.
- Notify before the scan starts: select how long before the scan the notifications should be sent. Default is 1 hour.
- Subject: enter a custom subject for the notification, or use default.
- Sender name: enter a custom sender name for the notification, or use default.
- Sender email: enter a custom sender email for the notification, or use default. If you use your own email (e.g. notifications@yourbusiness.com) address please add the following SPF record for the domain (e.g. yourbusiness.com) to avoid problems receiving the emails:
http://support.holmsecurity.com/hc/en-us/articles/213446285 - Also send notification to the following email addresses: enter additional recipients for the notifications.
- Message: enter a custom message for the notification, or use default.
- Under Notification for finished scan enter the following:
- Notify scan owner when this scan is finished: check to enable.
- Subject: enter a custom subject for the notification, or use default.
- Sender name: enter a custom sender name for the notification, or use default.
- Sender email: enter a custom sender email for the notification, or use default.
- Also send notification to the following email addresses: enter additional recipient for the notifications.
- Message: enter a custom message for the notification, or use default.
- Click Submit.
- The WAS scan will now run and a notification will be sent (if activated) according the schedule.
- Under Notification before scan starts enter the following:
- Done!
0 Comments