ScanCentral SAST Installation & Configuration

This video covers the whole installation process of ScanCentral SAST and how you can actually configure it the right way. Watch as Jan Wienand, Fortify Pre-Sales Consultant, guides you through this entire process.
Timestamps:
00:00 Intro
02:52 Components overview
08:32 ScanCentral SAST Controller
19:57 ScanCentral SAST Sensor
28:22 ScanCentral SAST Standalone Client
40:00 ScanCentral SAST Embedded Client
48:52 Tips and Tricks



- Connect with peers and share your knowledge
- Find solutions and answers to your technical questions
- Stay informed on new releases and product enhancements
- Access downloads, demos, videos and support tips

[rushikeshmisalkar]

Thank you so much for the video. I am configuring scan central SAST can you please let me which ports I need to open to make connections between clients, controller, sensors and SSC.

[vasupodagatla]

@Fortify unplugged can you share to download the URLs of packages

[andersonalves]

I'm a fan of your solution/tool. Improve her commercial and support in Brazil. Would be great...

[AfaanNaqvi]

Thanks for the video. I am an individual macOS developer trying to run my Google Workspace Application (.js and .html code files only) through the PWC CASA Portal, and I get the following error when I try the "scancentral package -bt none -o myPackage.zip"

"Unable to identify the Controller URL. Specify either the -url option or the -sscurl and -ssctoken options."

I do not have (or do not know) what my Controller URL is or should be. I just followed the download, installation, and step by step packaging instructions per the PWC CASA portal, and there is not reference there to any URL. The instructions did also not have any information related to -sscurl or -ssctoken

Any help would be much appreciated.

[papeds]

Very informative, is it possible to request trial licenses for testing

[sagargoyal]

I am running scan central from Jenkins and getting the error that uptoken not found. I have generated the upload token from the SSC but could not found in which file should I keep that token so that I don't get this error.

[Monastyrrr]

Hi, how can I deploy ScanCentral sast on docker or kubernetes? The documentation doesn't even mention it...

[sagarpatil]

Thanks for the detailed video. We have completed the setup and have installed the SAST censor on a different VM(8 vcpu and 32 GB RAM). But we are facing 2 challenges here:
1. We get random "Scan Faulted" issues during the scan. Also we are not able to run multiple scan which I understand is a limitation on a single sensor but the next scan is not setup in any queue which can run the next scan once the first one is successful
2. Also when we try to view the results in the Audit section we see the following error:
"Unable to locate source file rendering information. Completion of an SCA scan using the latest version of sourceanalyzer is required to view source files."
Thanks in advance

[wejdanalsa]

Can I set up another port for the scan central site? I'm using 8080 to SSC

[kingtut]

This is helpful, but you all need to document Linux as well, but make it happen on separate systems on the same network.

[ericbermudez]

I followed your guide, but I'm stuck on getting the controller to populate on SSC. I can successfully go to the ip/site of the controller, and I see the version number etc so I know that's working. But when I go into SSC I cant see any controllers loaded. I made sure I put in the SSC url in the config.properties of the controller, same shared key too

[nandyalamadhu]

Hello, thanks for the detailed video. I have followed your steps and tried to install the controller. Tomcat server is up and running and I can access the scan central url from the browser. Configured the same url in ssc configuration page. Restarted the both servers. But I am unable to see the scan central controller details in ssc under scancentral tab. Can you please help me in resolving the issue. PS: my ssc and scan central are running on https protocol

[samf]

Do you have an installation Guide for Linux? :)

[weyewweyew]

I am not able to see the Demo Applications under Application on SSC

[ohnobabyontv]

Hi I need a help on installing ssc sensor in ubuntu I don't know how execute command

[maulanairvansyah]

I have successfully installed scancentral sast version 22.

I integrated it with Jenkins, the scan process went smoothly, but an error occurred during the upload process to SSC with an error like the following:


how to solve this?

Thank you in advance