Having problems with your account or logging in?
A lot of changes are happening in the community right now. Some may affect you. READ MORE HERE
Highlighted
Micro Focus Expert
Micro Focus Expert
2939 views

WebInspect - Explanation of the license's Server Mode flag

Besides operating as a Named User or Concurrent User license model, the Activation Token for WebInspect (desktop) includes a Server Mode flag.  This feature setting dictates how the WebInspect desktop client inter-operates with the HP WebInspect Enterprise server (formerly HP AMP), if one is present on-site.


The choices for Server Mode are Standalone, Roaming, and Fixed, as detailed below, with Standalone Mode being the most commonly set and Fixed Mode being the most restrictive.  The user may check their WebInspect Activation Token's setting by opening the WebInspect desktop application > Help menu > About WebInspect > {see field for "Enterprise Server Mode"}


  • Standalone = WebInspect is free to connect or disconnect from HP WebInspect Enterprise (WIE) or HP AMP, provided the user has logon credentials for that server.
    • In general, WebInspect operates as a free agent with all rights preserved by the local user, so they may scan any target that matches the Allowed IP Range found within their WebInspect activation Token.
    • This WebInspect installation fetches its SmartUpdates from HP Fortify directly.
    • Sometimes this Server Mode was referred to as "AMP Optional".

  • Roaming = WebInspect operates primarily as a client of an on-site enterprise server, whether WebInspect Enterprise (WIE) or AMP (Assessment Management Platform), and the user must have logon credentials for that server.
    • WebInspect operates within the Permissions of the enterprise server and that user's permission set therein.  The user may only scan targets permitted by the server administrators, as defined for the user's Group and their Role in that Group, regardless of the IP ranges shown in their WebInspect Activation Token or even in the server's Activation Token.
    • This installation of WebInspect will only fetch its SmartUpdates from the enterprise server.
    • WebInspect can be disconnected from the enterprise server, i.e "Roam", but it must make at least one initial connection prior to being operational.  Additionally, if the user's permissions are altered while they are disconnected, their WebInspect installation is still locked to the Permissions they had when they had last connected.

  • Fixed = WebInspect operates primarily as a client of an on-site enterprise server, whether WebInspect Enterprise (WIE) or AMP (Assessment Management Platform), and the user must have logon credentials for that server.
    • WebInspect operates within the Permissions of the enterprise server and that user's permission set therein.  The user may only scan targets permitted by the server administrators, as defined for the user's Group and their Role in that Group, regardless of the IP ranges shown in their WebInspect Activation Token or even in the server's Activation Token.
    • This installation of WebInspect will only fetch its SmartUpdates from the enterprise server.
    • WebInspect cannot be disconnected from the enterprise server at any time, or the UI will close.  It is "fixed" in place.



Centralized management and control is a core tenant of the WebInspect Enterprise server solution.  The Roaming and Fixed Server Modes for the WebInspect clients enhances this control.

  • Both permit the server administrators to control the SmartUpdates delivered internally.
  • Both limit the Allowed IP Targets the WebInspect user may scan.
  • Both remove the Policy Manager and Compliance Manager functions from WebInspect so that the server administrators must manage those from the thick client Console.


If the Server Mode setting is incorrect for your organization, please submit a Fortify Support case (https://support.fortify.com) detailing the Activation Token in question and the corrected entry you would prefer for the Server Mode.  They will pass that order along to the HP Licensing Team internally.  Once modified, your WebInspect desktop installation will realize the updated entry when it performs a SmartUpdate or the user manually triggers an Update action for the license under the Application Settings.


-- Habeas Data
Micro Focus Fortify Customers-Only Forums – https://community.softwaregrp.com/t5/Fortify/ct-p/fortify
Labels (2)
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.