Security Settings
In the Security Settings window, you can enable, add and set security measures while scanning. You can also make user sessions IP restricted, prevent internal scanning, enable localhost scanning, and add new authorized IP addresses.
Security Settings is available in the Netsparker Enterprise On-Premises Edition only.
For further information, see Overview of Settings in Netsparker Enterprise and Netsparker Editions.
Security Settings Fields
This table lists and explains the fields in the Security Settings window.
|
Field |
Description |
|
Prevent Internal Scanning |
Enable this option to prevent Netsparker from scanning internal IP address blocks. |
|
Enable Localhost Scanning |
Enable this option to allow Netsparker to scan localhost. For example, if you’ve already built your website on localhost:95, please enable it for scanning. |
|
Authorized IP Addresses |
This is a list of IP Addresses that have been specifically authorized to access Netsparker Enterprise. If you want to serve the application behind a load balancer, you must add its IP address to this list. Otherwise, IP Based Cookies will not work. |
|
Name |
This is the name of the IP Address. |
|
Regex Pattern |
This is the Regex Patterns of the IP Address. |
How to Enable Security Settings
- Log in to Netsparker Enterprise.
- From the main menu, select Settings > Security.
- Enable the Prevent Internal Scanning checkbox.
- Enable the Enable Localhost Scanning checkbox.
- Select Save.
How to Add an Authorized IP Address
- From the main menu, select Settings > Security.
- In the Authorized IP Addresses panel, select New.
- Complete the Authorized IP Addresses, Name, and Regex Pattern fields.
- Select Save.
How to Delete an Authorized IP Address
- From the main menu, select Settings > Security.
- In the Authorized IP Addresses panel, select the Delete button (
) next to the relevant IP address. - Select Save.
