Webinspect slow

[anwarrhce1]

Did a PoC for WebInspect and it turns out that scan is running for last 30 days and now ready to finish. I asked this issue with support and they suggested it depends. I know it depends on size of application and all that but everything is fine. IBM appscan finished the scanning in 5 days than why HP is taking more than a month ? Have anyone seen this issue ?

[jnatt · Accepted solution]

:

I have personally seen this at times, but it all comes down to numerous items and reasons that a scan can take longer than they should.  Some of the quick ones to consider are how he requestor performance configuration is established.

For your WI configuration is the scan using a shared requestor or separate requestors for your crawl and audit?

Are you configured Depth or Breath first?

These are just two reasons that your scan could take longer no to mention how the finger print was done or not done...

Within the HP Software Education course on WebInspect we discuss all these and numerous others configuration features that help ensure quick scans or slow scans of the environment.  Other items we discuss are how to leverage the HP WebInspect Agent as well.

For now I would recommend engaging with TAC and seeing if they can help as well.  But I would like to invite you to attend one of our training sessions also.

Let me know if I can help.

Regards,

Joel E. Natt CISSP, CRISC
Hewlett-Packard Enterprise Software Education
Global Exam/Certification Lead – Hewlett-Packard Enterprise Software

Trainer – HP Software Education – Fortify, TippingPoint

Get Training: http://www.hpenterprisesecurity.com/university

Get Certified: http://h10120.www1.hp.com/ExpertOne/certification_program_overview.html

[anwarrhce1]

Thanks for your response.

I didn't check these settings and discussed the matter with

We used all default configuration, now I'm not sure what setting was in place for these 2 options which you suggested.

Anyhow, We are planning few Fortify training's to be attended from our side, I will be in touch with you if required.

For now, I will mark it as "Answered"

Thanks.