Transferring Settings to/from Enterprise Server

Use this feature to:

• Create a Fortify WebInspect Enterprise scan template based on a Fortify WebInspect settings file and upload it from Fortify WebInspect to an enterprise server (Fortify WebInspect Enterprise).

• Create a Fortify WebInspect settings file based on an enterprise server scan template and download it to Fortify WebInspect.

Fortify WebInspect settings files and Fortify WebInspect Enterprise scan templates do not have the same format; not all settings in one format are replicated in the other. Note the warnings that follow descriptions of the conversion procedure.

Creating a Fortify WebInspect Enterprise Scan Template

To create a Fortify WebInspect Enterprise scan template:

1. Click the Fortify WebInspect Enterprise Server menu and select Transfer Settings.

2. On the Transfer Settings window, select a Fortify WebInspect settings file from the Local Settings File list.

3. (Optional) Click View to review the settings as they appear in a Fortify WebInspect settings file. To continue, click Close.

   Note: This is a read-only file. Any changes you make will not be persisted.

4. Select the Application and Version to which the template will be transferred in Fortify WebInspect Enterprise.

5. If necessary, click Refresh to ensure the lists include the latest settings files and scan templates.

6. Enter the name of the scan template that will be created. You cannot duplicate the name of an existing template.

7. Click Upload.

All template settings that are not extracted from Fortify WebInspect will use the Fortify WebInspect Enterprise template default settings.

• The scan template will not specify the policy used by the Fortify WebInspect settings file. Instead, it will contain the "Use Any" option.

• Any client certificate information that may be included in the Fortify WebInspect settings file is transferred to the scan template, but the certificates are not transmitted.

• All Fortify WebInspect settings are preserved in the scan template, even if they are not used by Fortify WebInspect Enterprise. Therefore, if you subsequently create a Fortify WebInspect settings file based on the scan template you created from the original settings file, the Fortify WebInspect settings will be retained.

Creating a Fortify WebInspect Settings File

To create a Fortify WebInspect settings file:

1. Click the Fortify WebInspect Enterprise Server menu and select Transfer Settings.

2. Select the Application and Version from which the template will be transferred in Fortify WebInspect Enterprise.

3. On the Transfer Settings window, select a scan template from the list.

4. (Optional) Click View to review the settings as they would appear in a Fortify WebInspect settings file. To continue, click Close.

   Note: This is a read-only file. Any changes you make will not be persisted.

5. If necessary, click Refresh to ensure the lists include the latest settings files and scan templates.

6. Click Download.

7. Using a standard file-selection window, name the settings file, select a location in which to save it, and click Save.

The Fortify WebInspect settings file will not specify the policy used by the scan template. Instead, it will specify the Standard policy.