I know when you publish an AppScan Source assessment to AppScan Enterprise, it really just does an import of the ozasmt file under the covers, so it would seem like that file (or at least everything in it) is now available on the AE server. However, I have been looking through the functionality in the AppScan Enterprise interface, and I don't see anything that allows you to export that file back out once it is there.
Our ultimate goal is to use AppScan Enterprise as a secure location to publish findings assessments to. Right now we can publish to the shared AppScan Source database, but we have a number of teams sharing the same AppScan Enterprise, but if they all publish to the shared AppScan Source database, everyone can see each other's assessments, which we don't want. We would rather publish to a secure folder on AppScan Enterprise, and be able to then distribute findings via there. It would be great if a user who had the right authority, could easily pull the .ozasmt file down to their AppScan Source client directly from the client itself, but we could get by with a way of exporting from the web interface. Neither seem to be available.
Any help would be appreciated.
This topic has been locked.
2 replies Latest Post - 2013-02-15T16:32:49Z by chris.ratcliffe
Pinned topic Is it possible to export the .ozasmt file from AppScan Enterprise
Answered question This question has been answered.
Unanswered question This question has not been answered yet.
Updated on 2013-02-15T16:32:49Z at 2013-02-15T16:32:49Z by chris.ratcliffe
SystemAdmin 110000D4XK49 PostsACCEPTED ANSWER
Re: Is it possible to export the .ozasmt file from AppScan Enterprise2013-02-15T15:26:47Z in response to chris.ratcliffeHi Chris,
So when you import an assessment file (ozasmt) into AppScan Enterprise (ASE), the file does not get saved anywhere locally; it just gets parsed into ASE and is not retained. The imported data is no longer going to be in ozasmt format and unfortunately as a result, there is no way for you to export that back into an ozasmt file.
Based on the fact that your goal is to limit the users who can view the published assessments, what you can do is create a folder in ASE and set the permission so that certain individuals can publish to it, but cannot view the contents within that folder. Then when a user publishes to ASE from AppScan Source, have them choose that folder.
The ability to export an ozasmt file from ASE after importing it would probably an RFE in which you can submit the RFE via the RFE Community:
chris.ratcliffe 110000FX1T2 PostsACCEPTED ANSWER
Re: Is it possible to export the .ozasmt file from AppScan Enterprise2013-02-15T16:32:49Z in response to SystemAdminThanks for the response. Actually, I eventually did find a place to download hte .ozasmt file. After you publish from AppScan source to a particular folder, if you look at the AppScan Source Results Import item, and click the Edit link, it brings you to the scan job settings. On the "What to import" page, if you scroll to the bottom, there is an Export Data button while allow you to dump out a .zip file that contains the .ozasmt file. Its not in a very inuitive place, but it seems to be what I was looking for.