Transferring settings to/from Enterprise Server

Use this feature to:

• Create a Fortify WebInspect Enterprise scan template based on an OpenText DAST settings file and upload it from OpenText DAST to an enterprise server (Fortify WebInspect Enterprise).

• Create an OpenText DAST settings file based on an enterprise server scan template and download it to OpenText DAST.

OpenText DAST settings files and Fortify WebInspect Enterprise scan templates do not have the same format; not all settings in one format are replicated in the other. Note the warnings that follow descriptions of the conversion procedure.

Creating a Fortify WebInspect Enterprise scan template

To create a Fortify WebInspect Enterprise scan template:

1. Click the OpenText DAST Enterprise Server menu and select Transfer Settings.

2. On the Transfer Settings window, select an OpenText DAST settings file from the Local Settings File list.

3. (Optional) Click View to review the settings as they appear in an OpenText DAST settings file. To continue, click Close.

   Note: This is a read-only file. Any changes you make will not be persisted.

4. Select the Application and Version to which the template will be transferred in Fortify WebInspect Enterprise.

5. If necessary, click Refresh to ensure the lists include the latest settings files and scan templates.

6. Enter the name of the scan template that will be created. You cannot duplicate the name of an existing template.

7. Click Upload.

All template settings that are not extracted from OpenText DAST will use the Fortify WebInspect Enterprise template default settings.

• The scan template will not specify the policy used by the OpenText DAST settings file. Instead, it will contain the "Use Any" option.

• Any client certificate information that may be included in the OpenText DAST settings file is transferred to the scan template, but the certificates are not transmitted.

• All OpenText DAST settings are preserved in the scan template, even if they are not used by Fortify WebInspect Enterprise. Therefore, if you subsequently create an OpenText DAST settings file based on the scan template you created from the original settings file, the OpenText DAST settings will be retained.

Creating an OpenText DAST settings file

To create an OpenText DAST settings file:

1. Click the OpenText DAST Enterprise Server menu and select Transfer Settings.

2. Select the Application and Version from which the template will be transferred in Fortify WebInspect Enterprise.

3. On the Transfer Settings window, select a scan template from the list.

4. (Optional) Click View to review the settings as they would appear in an OpenText DAST settings file. To continue, click Close.

   Note: This is a read-only file. Any changes you make will not be persisted.

5. If necessary, click Refresh to ensure the lists include the latest settings files and scan templates.

6. Click Download.

7. Using a standard file-selection window, name the settings file, select a location in which to save it, and click Save.

The OpenText DAST settings file will not specify the policy used by the scan template. Instead, it will specify the Standard policy.