Translation Offloading

[garp]

Looking for any feedback/recommendations on use of Translation Offloading before I attempt to use it. Anybody experience any gotchas or lessons learned that they can share? Are there things that need to be added to the ScanCentral Sensors that didn't need to be there before?

[HansEnders]

ScanCentral is now offers more than a renaming of CloudScan, it also interfaces with SSC Server a bit more than CloudScan had, as we move toward a more managerial state in SSC.  The ScanCentral Client itself also offers more features to support remote translation and automated configuration.  At its most basic for the ScanCentral deployment, you will need one SSC Server, one ScanCentral Controller (optimally on its own Tomcat and not sharing with SSC), and deploy the ScanCentral Client alongside Fortify SCA onto the worker machines (ScanCentral "Sensors").  You will also deploy the ScanCentral Client wherever you plan to package and build code, so that the Client(s) can then ship the packages through the network and to the ScanCentral Controller, which will then deploy the test jobs and code packages to the available Sensor pool(s).

• Micro Focus product documentation (search for "fortify" or "webinspect") -- https://www.microfocus.com/en-us/support/documentation

• SSC section -- https://www.microfocus.com/documentation/fortify-software-security-center/

• ScanCentral Install Guide -- https://www.microfocus.com/documentation/fortify-software-security-center/2010/ScanCentral_Help_20.1.0/index.htm

[garp]

I guess my question is - my current build server is already configured with everything it could possibly need to build: compiler, proper versions of java, whatever else it might need. Will I need to replicate all of that on to each of my ScanCentral Sensors if I start using Translation Offloading? Will I need to do more than just stand up a box that can run the ScanCentral Sensor software?