Scheduling Web Application Discovery Scans

Note: This information applies when WAS 1.0 is enabled for your subscription.

Schedule a web application discovery scan to learn what parts of the target web application will be scanned for vulnerabilities in a future scan, including URLs and domains (FQDNs), and to test authentication. For a discovery scan, the service performs a crawl-only scan and does not perform any vulnerability assessment. With information from a discovery scan you may choose to change web application settings for black/white lists and authentication records.

For a discovery scan:

•      No vulnerability checks are performed.

•      Sensitive content checks are performed and findings are reported in your scan results.

•      Information gathered checks are performed and findings are reported in your scan results.

•      Using an account with the Pay Per Scan service option, a discovery scan does not decrease your scan quota.

The instructions below describe how to schedule a web application discovery scan.

To schedule a web application discovery scan:

1.    Select Schedule from the left menu.

2.    Go to New > Schedule Scan > Web Application > Discovery. This scan option is available when the web application module is enabled for the subscription and your account has permissions to launch and schedule web application scans

3.    Specify settings in these sections:

•      Task Title. Provide a title, change the task owner, and select a scanner to apply to the scheduled task.

•      Target & Settings. Identify the target web application and settings for the scheduled task. The settings include a web application title, a web application profile, and a web application record, if you want to test the validity of authentication records.

•      Scheduling. Specify the start date and time, the maximum run time and how often the task should occur.

•      Notifications. Enable the notifications option to receive an email each time this scheduled task is scheduled to start.

4.    Click Save.

If you have an account with a Pay Per Scan service option, note that web application discovery scans do not decrease the number of web application scans remaining in your account.

To edit a web application discovery scan schedule:

1.    Select  Schedule from the left menu.

2.    Identify the scheduled task you want to change, and click .

3.    Make changes to settings in these sections: Task Title, Target & Settings, and Scheduling.

4.    Select Deactivate this task if you do not want the task to run according to its schedule.

5.    Click Save.