IBM Security AppScan Standard 220.127.116.11 has been made generally available on the IBM Passport Advantage website.
IBM Security AppScan Standard Version 18.104.22.168 is a full product download.
This page contains release details and download instructions.
|An overview on what's new in this release, with a description of any new functionality or enhancements when applicable.|
|Important information to review prior to the installation of this release.|
|Describes where and how to download the package for installation in your environment.|
|The instructions necessary to apply this release into your environment.|
|Known problems (open defects) identified at the time of this release.|
|Detailed system requirements, by version.|
|Click to open the AppScan Standard 8.7 InfoCenter, an online version of the Help that comes with the product.|
|Defects (APARs) resolved in recent releases, including this release, by version.|
|A library of links to AppScan Standard documentation, by version.|
After downloading the installation pack to your computer and unzipping the contents, double-click on AppScan_Setup.exe to launch the setup process and follow the simple on-line instructions.
Note: During the installation you will be asked if you want to install Generic Service Client (GSC). This is a program included in the AppScan Standard package, and used by AppScan Standard when scanning web services. If your site includes web services, install GSC; otherwise do not..
|Passport Advantage||Passport Advantage and Passport Advantage Express clients are required to sign in to download the software package.|
|IBM OEM software||IBM Software Group OEM offerings are designed for partners who develop and sell business solutions with embedded or bundled IBM middleware software. Clients with Flexible Contract Type (FCT) license purchases and IBM Business Partners must sign in to download the software package.|
- Log in to one of the above download locations, as appropriate.
- Search for and download the following package (ZIP file):
Part Number CIGA7ML
This package includes:
- AppScan_Setup.exe - The file for installing AppScan Standard 8.7
- GSC_Setup.exe - The file for installing Generic Service Client, used for scanning web services, if your application includes web services
- Quick Start Guide - A multilingual PDF file
How critical is this fix?
This is a service release of AppScan Standard containing new features as well as fixes for client reported and internally found defects.
Known side effects
FIPS 140-2 support
The US Federal Information Processing Standards (FIPS) define cryptography requirements. AppScan now uses encryption and hashing mechanisms that support these requirements, and can run on Windows machines that have been set up to work in FIPS Compliant mode.
For scanning web services, Generic Service Client version 8.11 is now replaced with version 8.3, with the following improvements:
- Web services security policies are now supported
- Raw transaction data view
- GZIP encoding supported
- Enhanced web services policies and security algorithms
- Improved logging
- Improved memory usage
For increased accessibility, the user interface is now high-contrast compatible.
Deprecated in this version:
Support for PEM client-side certificates is deprecated as of this version. They can still be used in this version, but will not be supported in future versions.
- Visit the IBM Support Portal to configure your support portal experience and review FAQs, lists of known problems, fixes, and a wealth of important support information.
- Visit developerWorks to access an online collection of tutorials, sample code, standards, forums and other resources provided by experts at IBM to assist software developers using Security tools including access to the IBM RFE Community.
- Visit the Jazz Community if you use a product created using the Jazz platform to interact directly with the Jazz development team and other community members, download product trials and betas and track developement progress.
Helpful Hints for Obtaining Technical Assistance
Before you contact IBM Security Software Support, gather the background information that you need to describe the problem. When you describe a problem to an IBM software support specialist, be as specific as possible and include all relevant background information so that the specialist can help you solve the problem efficiently. To save time, know the answers to these questions:
- What software versions were you running when the problem occurred?
- Do you have logs, traces, or messages that are related to the problem?
- Can you reproduce the problem? If so, what steps do you take to reproduce it?
- Is there a workaround for the problem? If so, be prepared to describe the workaround.
If you have helpful information to diagnose or identify the problem on your system, you can provide this data by following the instructions to exchange information with IBM Technical Support.