

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
When and how does the SCA rulepack auto-update happen?
I see there's a setting to automatically update rulepacks in SCA. I have a few questions about that.
* How does that work? Is there a scheduled task/cron job that gets created at some point? Does this happen whenever someone runs a scan with that instance?
* Is it a problem if the rulepacks in a given instance of SCA are higher or lower than those in SSC? What sort of problems can I expect?
* Depending on the answer to my first question, what time does the update kick off at?
Thanks in advance.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
The update you mention is not triggered by a cron job or similar
You could run it before each scan, you could create a cronjob to do it. With fortifyupdate it is under your full control
* Is it a problem if the rulepacks in a given instance of SCA are higher or lower than those in SSC? What sort of problems can I expect?
There is potentially a warning uploading the results saying that the metadata is different. You would then need to approve the upload. I never experienced real issues doing this


- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
I am not sure what the mechanism is for triggering this, I assumed it occured when SCA or AWB was launched vs a cron job running.... did you know that you can check for rulepack updates yourself?
By calling C:\Program Files\Fortify\Fortify_SCA_and_Apps_<version>\bin\fortifyupdate.cmd
Doing it this way, you could have more control of when the rulepack updates are applied, which sounds like what you are after.