WebInspect Directories Settings

advertisement
HP WebInspect
(Desktop)
Directories Settings
Produced by
Hans Enders
May 2013
Table of Contents
1.
INTRODUCTION: ..................................................................................................................................................2
2.
EXPLANATION AND DETAILS ..........................................................................................................................3
SCANDATA FOLDER ............................................................................................................................................................3
REPORTS FOLDER................................................................................................................................................................3
EXPORTS FOLDER ...............................................................................................................................................................3
3.
FOLDER PATHS .....................................................................................................................................................4
A.
B.
C.
D.
E.
WEBINSPECT VERSION 10.0 .....................................................................................................................................4
WEBINSPECT VERSION 9.30 .....................................................................................................................................5
WEBINSPECT VERSION 9.20 .....................................................................................................................................6
WEBINSPECT VERSION 8.0 .......................................................................................................................................7
WEBINSPECT VERSION 7.7 .......................................................................................................................................8
1. Introduction:
Although HP WebInspect can be installed to an alternative local drive, its user data is saved to the user’s C:
drive by default. This article seeks to record the default values used by various WebInspect versions and also
suggest alternative paths for those interested users.
HP Fortify – Enterprise Security Products
© Hewlett-Packard Confidential
Page 2
2. Explanation and Details
Most of these settings are found in the Directories panel under the Application Settings (Edit menu >
Application Settings > Directories panel). There is also an infrequently used Support Channel panel with its
own two directory settings.
ScanData Folder
The largest space is taken by the Logs folder as well as the Scans or Scandata folder, particularly if MS SQL
Express is being used as the scan database rather than a standard SQL Server. Within the Scandata folder is a
Scans.XML file that indexes the directory contents for display within the WebInspect UI. When this folder and
its contents are moved, the user will want to delete that Scans.XML file so that it will rebuild when WebInspect
opens. If this is not done, then the Manage Scans UI within WebInspect will fail to show the actual folder
contents.
Reports Folder
Previously, all Reports output was saved to \My Documents\SPI dynamics\Reports\ and more recently they
have become buried more deeply within the program data folders. Since these files are often accessed outside
of the WebInspect UI, users may feel more comfortable by placing a short-cut within the My Documents area
to take them to the new Generated Reports folder directly.
Exports Folder
The Exports do not have a user configured field setting. Instead, they default to the user’s application data
folders. Since this material is generally used outside of WebInspect, it is recommended that the user create a
short-cut to this folder. Below is the path found in WebInspect 10.0.

C:\Users\%CURRENTUSER%\AppData\Local\HP\HP WebInspect\Exports\
HP Fortify – Enterprise Security Products
© Hewlett-Packard Confidential
Page 3
3. Folder Paths
A. WebInspect version 10.0
Taken from WebInspect 10.0.490 on Windows 7 (64-bit)
Directories Field
Name
Scans
Logs
Settings
Policies
Generated Reports
Compliance
Templates
Scheduled Scans
Tool Settings
Web Macros
Web Forms
Web Discovery
Additional Paths
Support Channel
Uploads
Support Channel
Downloads
Default Path
Suggestion
C:\Users\%CURRENTUSER%\AppData\Local\HP\HP
WebInspect\ScanData\
C:\Users\%CURRENTUSER%\AppData\Local\HP\HP
WebInspect\Logs\
C:\ProgramData\HP\HP WebInspect\Settings\
C:\ProgramData\HP\HP WebInspect\Policies\
C:\ProgramData\HP\HP
WebInspect\GeneratedReports\
C:\Users\%CURRENTUSER%\AppData\Local\HP\HP
WebInspect\ComplianceTemplates\
C:\ProgramData\HP\HP
WebInspect\Schedule\ScanData\
C:\Users\%CURRENTUSER%\AppData\Local\HP\HP
WebInspect\Tools\Settings\
C:\Users\%CURRENTUSER%\Documents\SPI
Dynamics\Tools\
C:\Users\%CURRENTUSER%\Documents\SPI
Dynamics\Tools\
C:\Users\%CURRENTUSER%\Documents\SPI
Dynamics\Tools\
D:\WebInspect Data\ScanData\
Default Path
C:\ProgramData\HP\HP
WebInspect\SupportChannel\Upload\
C:\ProgramData\HP\HP
WebInspect\SupportChannel\Download\
Suggestion
D:\WebInspect
Data\SupportChannel\Upload\
D:\WebInspect
Data\SupportChannel\Download\
HP Fortify – Enterprise Security Products
© Hewlett-Packard Confidential
Page 4
D:\WebInspect Data\Logs\
D:\WebInspect Data\Settings\
D:\WebInspect Data\Policies\
D:\WebInspect
Data\GeneratedReports\
D:\WebInspect
Data\ComplianceTemplates\
D:\WebInspect Data\Scheduler\
D:\WebInspect
Data\Tools\Settings\
D:\WebInspect Data\Tools\
D:\WebInspect Data\Tools\
D:\WebInspect Data\Tools\
B. WebInspect version 9.30
Taken from an upgraded version of WebInspect 9.30.93.2, on Windows 2003 (32-bit)
Directories Field
Name
Scans
Logs
Settings
Policies
Generated Reports
Compliance
Templates
Scheduled Scans
Tool Settings
Web Macros
Web Forms
Web Discovery
Additional Paths
Support Channel
Uploads
Support Channel
Downloads
Default Path
Suggestion
C:\Documents and
Settings\%CURRENTUSER%\Local
Settings\Application Data\SPI
Dynamics\WebInspect\7.0\ScanData
C:\Documents and
Settings\%CURRENTUSER%\Local
Settings\Application Data\SPI
Dynamics\WebInspect\7.0\Logs\
C:\Documents and Settings\All Users\Application
Data\SPI Dynamics\WebInspect\7.0\Settings\
C:\Documents and Settings\All Users\Application
Data\SPI Dynamics\WebInspect\7.0\Policies\
C:\Documents and Settings\All Users\Application
Data\SPI
Dynamics\WebInspect\7.0\GeneratedReports\
C:\Documents and
Settings\%CURRENTUSER%\Local
Settings\Application Data\SPI
Dynamics\WebInspect\7.0\ComplianceTemplates\
C:\Documents and Settings\All Users\Application
Data\SPI
Dynamics\WebInspect\7.0\Schedule\ScanData
C:\Documents and
Settings\%CURRENTUSER%\Local
Settings\Application Data\SPI
Dynamics\Tools\Settings\
C:\Documents and Settings\%CURRENTUSER%\My
Documents\SPI Dynamics\Tools\
C:\Documents and Settings\%CURRENTUSER%\My
Documents\SPI Dynamics\Tools\
C:\Documents and Settings\%CURRENTUSER%\My
Documents\SPI Dynamics\Tools\
D:\WebInspect Data\ScanData\
Default Path
C:\Documents and Settings\All Users\Application
Data\SPI
Dynamics\WebInspect\7.0\SupportChannel\Upload\
C:\Documents and Settings\All Users\Application
Data\SPI
Dynamics\WebInspect\7.0\SupportChannel\Download\
HP Fortify – Enterprise Security Products
© Hewlett-Packard Confidential
Page 5
D:\WebInspect Data\Logs\
D:\WebInspect Data\Settings\
D:\WebInspect Data\Policies\
D:\WebInspect
Data\GeneratedReports\
D:\WebInspect
Data\ComplianceTemplates\
D:\WebInspect Data\Scheduler\
D:\WebInspect
Data\Tools\Settings\
D:\WebInspect Data\Tools\
D:\WebInspect Data\Tools\
D:\WebInspect Data\Tools\
Suggestion
D:\WebInspect
Data\SupportChannel\Upload\
D:\WebInspect
Data\SupportChannel\Download\
C. WebInspect version 9.20
Taken from an upgraded version of WebInspect 9.20.247, on Windows 7 (64-bit)
Directories Field
Name
Scans
Logs
Settings
Policies
Generated Reports
Compliance
Templates
Scheduler
Tool Settings
Web Macros
Web Forms
Web Discovery
Additional Paths
Support Channel
Uploads
Support Channel
Downloads
Default Path
Suggestion
C:\Users\%CURRENTUSER%\AppData\Local\SPI
Dynamics\WebInspect\7.0\ScanData\
C:\Users\%CURRENTUSER%\AppData\Local\SPI
Dynamics\WebInspect\7.0\Logs\
C:\ProgramData\SPI
Dynamics\WebInspect\7.0\Settings\
C:\ProgramData\SPI
Dynamics\WebInspect\7.0\Policies\
C:\ProgramData\SPI
Dynamics\WebInspect\7.0\GeneratedReports\
C:\Users\%CURRENTUSER%\AppData\Local\SPI
Dynamics\WebInspect\7.0\ComplianceTemplates\
C:\ProgramData\SPI
Dynamics\WebInspect\7.0\Schedule\ScanData\
C:\Users\%CURRENTUSER%\AppData\Local\SPI
Dynamics\Tools\Settings\
C:\Users\%CURRENTUSER%\Documents\SPI
Dynamics\Tools\
C:\Users\%CURRENTUSER%\Documents\SPI
Dynamics\Tools\
C:\Users\%CURRENTUSER%\Documents\SPI
Dynamics\Tools\
D:\WebInspect Data\ScanData\
Default Path
C:\ProgramData\SPI
Dynamics\WebInspect\7.0\SupportChannel\Upload\
C:\ProgramData\SPI
Dynamics\WebInspect\7.0\SupportChannel\Download\
Suggestion
D:\WebInspect
Data\SupportChannel\Upload\
D:\WebInspect
Data\SupportChannel\Download\
HP Fortify – Enterprise Security Products
© Hewlett-Packard Confidential
Page 6
D:\WebInspect Data\Logs\
D:\WebInspect Data\Settings\
D:\WebInspect Data\Policies\
D:\WebInspect
Data\GeneratedReports\
D:\WebInspect
Data\ComplianceTemplates\
D:\WebInspect Data\Scheduler\
D:\WebInspect
Data\Tools\Settings\
D:\WebInspect Data\Tools\
D:\WebInspect Data\Tools\
D:\WebInspect Data\Tools\
D. WebInspect version 8.0
Taken from upgraded version of WebInspect 8.0.548
Directories Field
Name
Scans
Logs
Settings
Policies
Generated Reports
Compliance
Templates
Scheduler
Tool Settings
Web Macros
Web Forms
Web Discovery
Additional Paths
Support Channel
Uploads
Support Channel
Downloads
Default Path
Suggestion
C:\Documents and Settings\%CURRENTUSER%\Local
Settings\Application Data\SPI
Dynamics\WebInspect\7.0\ScanData\
C:\Documents and Settings\%CURRENTUSER%\Local
Settings\Application Data\SPI
Dynamics\WebInspect\7.0\Logs\
C:\Documents and Settings\All Users\Application
Data\SPI Dynamics\WebInspect\7.0\Settings\
C:\Documents and Settings\All Users\Application
Data\SPI Dynamics\WebInspect\7.0\Policies\
C:\Documents and Settings\All Users\Application
Data\SPI
Dynamics\WebInspect\7.0\GeneratedReports\
C:\Documents and Settings\%CURRENTUSER%\Local
Settings\Application Data\SPI
Dynamics\WebInspect\7.0\ComplianceTemplates\
C:\Documents and Settings\All Users\Application
Data\SPI Dynamics\WebInspect\7.0\Schedule\
C:\Documents and Settings\%CURRENTUSER%\Local
Settings\Application Data\SPI
Dynamics\Tools\Settings\
C:\Documents and Settings\%CURRENTUSER%\My
Documents\SPI Dynamics\Tools\
C:\Documents and Settings\%CURRENTUSER%\My
Documents\SPI Dynamics\Tools\
C:\Documents and Settings\%CURRENTUSER%\My
Documents\SPI Dynamics\Tools\
D:\WebInspect Data\ScanData\
Default Path
C:\Documents and Settings\All Users\Application
Data\SPI
Dynamics\WebInspect\7.0\SupportChannel\Upload\
C:\Documents and Settings\All Users\Application
Data\SPI
Dynamics\WebInspect\7.0\SupportChannel\Download\
Suggestion
D:\WebInspect
Data\SupportChannel\Upload\
HP Fortify – Enterprise Security Products
© Hewlett-Packard Confidential
Page 7
D:\WebInspect Data\Logs\
D:\WebInspect Data\Settings\
D:\WebInspect Data\Policies\
D:\WebInspect
Data\GeneratedReports\
D:\WebInspect
Data\ComplianceTemplates\
D:\WebInspect Data\Scheduler\
D:\WebInspect
Data\Tools\Settings\
D:\WebInspect Data\Tools\
D:\WebInspect Data\Tools\
D:\WebInspect Data\Tools\
D:\WebInspect
Data\SupportChannel\Download\
E. WebInspect version 7.7
Taken from upgraded version of WebInspect 7.7.869
Directories Field
Name
Scans
Logs
Settings
Policies
Generated Reports
Compliance
Templates
Scheduler
Tool Settings
Web Macros
Web Forms
Web Discovery
Additional Paths
Support Channel
Uploads
Support Channel
Downloads
Default Path
Suggestion
C:\Documents and Settings\%CURRENTUSER%\Local
Settings\Application
Data\SPI
Dynamics\WebInspect\7.0\ScanData\
C:\Documents and Settings\%CURRENTUSER%\Local
Settings\Application Data\SPI
Dynamics\WebInspect\7.0\Logs\
C:\Documents and Settings\All Users\Application
Data\SPI Dynamics\WebInspect\7.0\Settings\
C:\Documents and Settings\All Users\Application
Data\SPI Dynamics\WebInspect\7.0\Policies\
C:\Documents and Settings\%CURRENTUSER%\My
Documents\SPI Dynamics\WebInspect\SavedReports
C:\WebInspect Data\SavedReports
C:\Documents and Settings\%CURRENTUSER%\Local
Settings\Application
Data\SPI
Dynamics\WebInspect\7.0\ComplianceTemplates\
C:\Documents and Settings\All Users\Application
Data\SPI Dynamics\WebInspect\7.0\Schedule\
(not available field)
C:\Documents and Settings\%CURRENTUSER%\My
Documents\SPI Dynamics\Tools\
C:\Documents and Settings\%CURRENTUSER%\My
Documents\SPI Dynamics\Tools\
C:\Documents and Settings\%CURRENTUSER%\My
Documents\SPI Dynamics\Tools\
D:\WebInspect Data\ScanData\
Default Path
C:\Documents and Settings\All Users\Application
Data\SPI
Dynamics\WebInspect\7.0\SupportChannel\Upload\
C:\Documents and Settings\All Users\Application
Data\SPI
Dynamics\WebInspect\7.0\SupportChannel\Download\
Suggestion
D:\WebInspect
Data\SupportChannel\Upload\
HP Fortify – Enterprise Security Products
© Hewlett-Packard Confidential
Page 8
D:\WebInspect Data\Logs\
D:\WebInspect Data\Settings\
D:\WebInspect Data\Policies\
D:\WebInspect
Data\GeneratedReports\
D:\WebInspect
Data\ComplianceTemplates\
D:\WebInspect Data\Scheduler\
D:\WebInspect Data\Tools\
D:\WebInspect Data\Tools\
D:\WebInspect Data\Tools\
D:\WebInspect
Data\SupportChannel\Download\
Download