| Installing | 37
Permissions Descriptions
Registry permissions The local system user account must have the following permissions:
• Read and Execute
• Write
• Delete
Other user accounts
Table 7: Other user accounts
Account Description
ASPNET account The ASPNET account must have the following permissions on Drive:\
\YourInstallFolder\HCL\product name\ and all of its subfolders:
• Read and Execute
• Write
• Delete
• Impersonate a client after authentication
Internet Guest account The Internet Guest account must have the following permissions on
Drive:\\YourInstallFolder\HCL\product name\ and all of its subfolders:
• Read and Execute
• Write
Related information
Troubleshooting: Viewing a report in AppScan Enterprise results in error
Ports used by AppScan Enterprise
Deployment of AppScan® Enterprise requires that certain ports be open on the computers where those components
are installed.
Table 8: Ports used by AppScan Enterprise
Port Component Protocol
80 Dynamic Analysis Scanner HTTP
443 Dynamic Analysis Scanner HTTPS
40001-40500 Manual Explore to communicate with
the Enterprise Console
40501-50000 Manual Explore to communicate
with the Enterprise Console (multiple
instances)
| Installing | 38
Port Component Protocol
27000-27009 Rational License Server TCP/IP
Note:
1. The Rational License Key
Server is used for serving
floating licenses to AppScan
Enterprise. To make use of
AppScan Enterprise floating
licenses through a firewall, refer
to this technote: What ports to
open when License Key Server is
behind a firewall.
2. To operate in a port forwarding
environment, you must make
configuration changes to
the AppScan® Enterprise
system properties. For detailed
instructions for changing the
appropriate settings, contact your
HCL® support representative.
1433 AppScan Enterprise uses the standard HTTPS
OLE drivers and standard ports to
communicate with the database. To
see the ports used, review Microsoft
SQL Server documentation specific
for the version of SQL Server you are
running.
For SQL Server 2008 (and other
close versions) review this Microsoft
article, How to: Configure a
Windows Firewall for Database
Engine Access. For an overview for
the ports used by Microsoft SQL
Server 6.5, 7.0, and 2000, review this
Microsoft article, TCP Ports Needed
for Communication to SQL Server
Through a Firewall.
By default, the configuration wizard
uses port 1443 to connect to SQL
Server database. In the Database
Connection window of the wizard,
enter the SQL Server name, port
number and the name of the database
you are connecting to.
| Installing | 39
Port Component Protocol
9443 Liberty server in AppScan Enterprise HTTPS
v9.0.1 and later (note that this port
is configurable in the Configuration
Wizard).
User Authentication in Jazz
Team Server, if using Jazz for
user authentication, in AppScan
Enterprise v8.5 - 9.0.0.1.
9444 Configures the Advisory services
port that is used by the node.js
server to provide advisories and fix
recommendations (note that this port
is configurable in the Configuration
Wizard and runs over HTTP). You
can select a different port if 9444 is
already used.
25 Alerting service on the Dynamic SMTP
Analysis Scanner
444 Alerting service on the Dynamic SNPP
Analysis Scanner
Product and user licenses
This topic on AppScan Enterprise licenses opens a technote in a separate browser.
Read this technote: Licensing for AppScan Enterprise. It discusses:
• How to obtain licenses
• The product licenses you need: basic and premium
• The user licenses you need: floating and authorized
Note: Users must log off properly to release the license; closing the browser will not release the license until two
hours have passed.
1. Change the connection limit for the Monitor view by modifying the session.timeout property (in milliseconds)
in the <install-dir>\AppScan Enterprise\Liberty\usr\servers\<ase instance
name>\server.xml file.
2. Change the connection limit for the Folder Explorer view by modifying the sessionState timemout property
(in milliseconds) to be <sessionState timeout="120"/> in the <install-dir>\HCL\AppScan
Enterprise\WebApp\web.config file.
• How to apply the licenses
• Common licensing scenarios
HCL AppScan Enterprise License setup
AppScan products now support both IBM and HCL licenses. As of this version, all new licenses issued will be HCL
licenses.
This document describes how to set up HCL AppScan Enterprise licenses. The following are the types of HCL
product licenses:
• HCL_AppScan_Enterprise_FloatingUser_Scanning
• HCL_AppScan_Enterprise_FloatingUser_Reporting
• HCL_AppScan_Enterprise_Authorized_User_Scanning
• HCL_AppScan_Enterprise_Authorized_User_Reporting
• HCL_Appscan_Enterprise_Dynamic_Analysis_Scanner
