SmartUpdate

For installations connected to the Internet, the SmartUpdate feature contacts the Micro Focus data center to check for new or updated adaptive agents, vulnerability checks, and policy information. SmartUpdate will also ensure that you are using the latest version of Fortify WebInspect, and will prompt you if a newer version of the product is available for download.

You can configure Fortify WebInspect settings to conduct a SmartUpdate each time you start the application (select Application Settings from the Edit menu and choose Smart Update).

You can also run SmartUpdate on demand through the Fortify WebInspect user interface by selecting Start SmartUpdate from the Fortify WebInspect Start Page, by selecting SmartUpdate from the Tools menu, or by clicking the SmartUpdate button on the standard toolbar. For more information, see Tools Menu and Toolbars.

For installations lacking an Internet connection, see Performing a SmartUpdate (Offline).

Performing a SmartUpdate (Internet Connected)

To perform a SmartUpdate when WebInspect is connected to the Internet:

1. Do one of the following:

   • From the toolbar, click SmartUpdate.

   • Select SmartUpdate from the Tools menu.

   • Select Start SmartUpdate from the Fortify WebInspect Start Page.

   If updates are available, the SmartUpdater window opens with the Summary tab in view. The Summary tab displays up to three separate collapsible panes for downloading the following:

   • New and updated checks

   • Fortify WebInspect software

   • SmartUpdate software

2. Select the check box associated with one or more of the download options.

3. (Optional) To view details about the checks being updated:

   1. Click the Check Detail tab.

      In the left pane is a list showing the ID, Name, and Version of checks being updated. The list is grouped by Added, Updated, and Deleted.

   2. To view the policies that include a specific check being updated, select the check in the list.

      A list of affected policies appears in the Related Policies pane.

4. (Optional) To view details about the policies affected:

   1. Click the Policy Detail tab.

      In the left pane is an alphabetical list of the policies affected by the update.

      Note: The list shows only those policies that are affected by updated checks. The Policy Detail tab does not show other policy changes that could be included in the update, such as associating new checks with a policy or changing a policy name.

   2. To view the checks being updated in a specific policy, select the policy in the list.

      A list showing the ID, Name, and Version of checks being updated appears in the Related Checks pane. The list is grouped by Added, Updated, and Deleted.

5. To install the updates, click Download.

Downloading Checks without Updating Fortify WebInspect

Engine updates are required for some checks to be run during scans. If you are not using the latest version of Fortify WebInspect, it is likely that some of the checks in your SecureBase cannot be run during a scan. To test your application with all the latest checks, ensure that you are using the latest version of Fortify WebInspect.

Performing a SmartUpdate (Offline)

Follow this process to perform a SmartUpdate for WebInspect that is offline.

Stage	Description
1.	Open a support case. Customer Support personnel will provide you with the offline FTP server URL and login credentials (if needed). For more information, see Support and Documentation.
2.	On a machine that can access the Internet, access the offline FTP server.
3.	Download the Fortify WebInspect static SmartUpdate ZIP file.
4.	On the machine where Fortify WebInspect is installed, extract all files from the ZIP file.
5.	Close Fortify WebInspect.
6.	Copy the extracted SecureBase.sdf and version.txt files to the directories where your SecureBase data resides. If your system is not FIPS enabled, then the default locations are: C:\ProgramData\HP\HP WebInspect\SecureBase C:\ProgramData\HP\HP WebInspect\Schedule\SecureBase C:\Program Files\Fortify\Fortify WebInspect If your system is FIPS enabled, then the locations are: C:\ProgramData\HP\HP WebInspect\FIPS\SecureBase C:\ProgramData\HP\HP WebInspect\FIPS\Schedule\SecureBase C:\Program Files\Fortify\Fortify WebInspect Tip: By default, these folders are hidden in Windows. Be sure to change folder options to show hidden files.