Web inspect scan is too slow

[RVR]

I have initiated Web Inspect scan for an application 2 days back. It has crawled around 620 pages, but while auditing ran welll till 400 but after that the scan enigne is not showing any progress. For the next two day it audited only 13 issues. I believe this i not normal. Please let me know if i need to change any settings. Or do i need to initiate a new scan with any changes in the settings. Will appreviate your immediate response.

NOTE: I am using 17.10.283 version.

Thanks,

Raghav

[pprofili]

Raghav,

For assistance on specific issues like this your best bet would be to open a case with Fortify Technical Support by sending an email fo fortifytechsupport@hpe.com.  Having traffic enabled in the scan is invaluable in these sorts of cases, by the way, if you already have it enabled then click on the Traffic Monitor button (below "Dashboard") and you will be able to see exactly what the scan is working on. 

[RVR]

Thanks pprofili 🙂

[HansEnders]

I agree with Phil, you should contact our Fortify Tech Support at support.fortify.com to go further into the details of your configuration. Anytime a scan runs overnight there is most likely a configuration that will make the Crawler much more efficient. It all depends on the behavior of the target. In your case the lack of inactivity sounds like it could be an installation or network issue. At any point during a scan you can monitor the activity by pressing the Pause button and then inserting either the Traffic Monitor tool or the included Web Proxy tool (or any intercept proxy really). For a proxy, you would need to launch and start that tool separately, then alter the scan's Current Scan Settings to use that listener port. For the Traffic Monitor, you simply open the Current Scan Settings and enable it under the General settings panel. Once prepared, press the Resume button in WebInspect's toolbar area. To reverse this configuration, simply press Pause again, make the edits the Current Scan Settings, and press Resume.