Basic Settings in Tenable Web App Scanning Scans

Specifies the URL for the target you want to scan, as it appears on your Tenable Web App Scanning license. Regular expressions and wildcards are not allowed. Targets must start with the http:// or https:// protocol identifier.

The Import from file link opens a file manager window. You can import a target list in TXT format with one target per line. The file must be 1MB or smaller, and each line must be shorter than 4096 characters. After you add targets, you can search and delete targets from the list. You cannot modify targets inline.

Tip: If you upload a new target list, it replaces any existing targets in the scan. If you have multiple target lists, consolidate them in one file before you upload them to Tenable Web App Scanning.

You can add up to 1000 targets to a scan, with the exception of scans that include API targets. API scans support only one target at a time.

Note: If you create a user-defined scan template, the target setting is not saved to the template. Type a target each time you create a new scan.

Schedule

A toggle that specifies whether the scan is scheduled. By default, scans are not scheduled.

When the Schedule toggle is disabled, the other schedule settings remain hidden.

Click the toggle to enable the schedule and view the remaining Schedule settings.

Frequency

Specifies how often the scan is launched.

Note: The frequency with which you scan your target(s) depends on several factors (e.g., how often you update your web application, the content your web application contains, etc.). For most web applications, Tenable recommends at least monthly scans.

• Once: Schedule the scan at a specific time.
• Daily: Schedule the scan to occur on a daily basis, at a specific time, up to 20 days.
• Weekly: Schedule the scan to occur on a recurring basis, by time and day of week, up to 20 weeks.
• Monthly: Schedule the scan to occur every 1-20 months, by:
  • Day of Month: The scan repeats on a specific day of the month at the selected time.
  • Week of Month: The scan repeats monthly on the week you begin the scan. For example, if you select a start date of October 3rd, and that falls on the first week of the month, then the scan repeats the first week of each subsequent month at the selected time.

  Note: If you schedule your scan to recur monthly and by time and day of the month, Tenable recommends setting a start date no later than the 28th day. If you select a start date that does not exist in some months (e.g., the 29th), Tenable Vulnerability Management cannot run the scan on those days.

• Yearly: Schedule the scan to occur every year, by time and day, up to 20 years.

Starts

Specifies the exact date and time at which a scan launches.

Note: If you schedule an excessive number of scans to run concurrently, you may exhaust the scanning capacity on Tenable Web App Scanning. If necessary, Tenable Web App Scanning staggers concurrent scans to ensure consistent scanning performance.

The starting date defaults to the date you create the scan. The starting time is the next hour interval, displayed in 24-hour clock format. For example, if you create your scan on October 31, 2019 at 9:12 PM, the default starting date and time is 10/31/2019 and 22:00.

Timezone

The time zone of the value set for Starts.