Installing Authentication Verifier Agents in Acunetix 360

You can download and install authentication verifier agents to verify that you run authenticated scans in your local environment.

  • In order to scan a website located on your internal network, and not accessible from the internet, you can install and configure a scan agent on your network. The agent will conduct the actual scan job and then report the results back to Acunetix 360.
  • You can download and install an internal verifier agent to perform the authentication, so you can make sure that your scan is authenticated.

This topic explains how to install, update, and uninstall authentication verifier agents on Windows. Using Linux? See Installing Authentication Verifier Agent on Linux (Debian Distribution). For the RedHat distributions, see Installing Authentication Verifier Agent on Linux (RedHat Distribution).

Tips

The Authentication Verifier Agent is an optional component.

Download and install the authentication verifier agent if you need to scan websites with form or basic authentication or OAuth2. The authentication verifier agents also work for the Authentication Profiles, Custom Scripts for Form Authentication, CyberArk Vault, HashiCorp Vault, and AzureKey Vault.

Downloading and configuring authentication verifier agent

There are 3 steps in this process:

  1. Downloading an authentication verifier agent
  2. Configuring an authentication verifier agent
  3. Setting an authentication verifier agent as a Windows Service

Prerequisites

Software Requirements

  • Windows Server 2016 or above (Windows Server 2019 recommended)

Hardware Requirements

  • 1.4 GHz Processor (2.0 GHz or faster recommended)
  • 4 GB RAM or higher recommended
  • 10 GB Free Disk space for each internal agent

Information

If you select TLS 1.3 as a security protocol from the Scan Policy, make sure you have Windows 10 v1903 or higher versions.

Network Requirements

  • Agent should be configured so that it can reach your internal website through HTTP/HTTPS
  • Agent needs to be able to access the Netsparker Enterprise Application Server’s HTTP(S) (443) port

Allowlisting Requirements

  • www.invicti.com
  • r87.me
  • 52.1.118.97, acx-avservice.acunetix360.com

Required Access

  • User(s) must have administrator privileges to run the required commands and agent service.

Step 1. Downloading authentication verifier agent

First, you need to download the installation files of the authentication verifier agent and install it on a machine in your internal network.

How to download the authentication verifier agent
  1. Log in to Acunetix 360.
  2. From the main page, go to Agents > Manage Agents > Configure New Agent.

 

  1. From the Authentication Verifier section, select Windows to download the file.

When you download the zip file, you can configure the authentication verifier agent.

Step 2. Configuring authentication verifier agent

How to configure the authentication verifier agent
  1. Navigate to the folder you downloaded the zip file.
  2. Extract the contents of the zip file to C:\Acunetix360_VerifierAgent. (You can use another location, but this instruction will use this path.)
  3. Open the C:\Acunetix360_VerifierAgent\appsettings.json file with your preferred text editor.
  4. Edit the following attributes before running the agent, listed under AgentInfo:
  • AgentName: This can be anything you want. (If you are going to install more than one instance of the agent, you must set a unique agentName value for each instance, something you will use later.)
  • ApiToken: In Acunetix 360, the Agent Token is displayed in the Configure New Agent window. Copy the value into the apiToken.

Warning

  • Do not edit the ApiRootUrl address. If edited, your authentication verifier agent may not work.
  • Whitelist the ApiRootUrl address so that the authentication verifier agents can access the verifier server for the form authentication.
  • Make sure the machine where the authentication verifier agent is installed can access the ApiRootURL.

  1. Save and close the C:\Acunetix360_VerifierAgent\appsettings.json file.

Changing default data folder for the authentication verifier agent

You can change the default location in which the scanner agent saves its data. For further information, refer to Changing default data folder for the authentication verifier agent.

Setting proxy in authentication verifier agent

You can set a proxy for the authentication verifier agent in Acunetix 360. Acunetix 360 supports Basic Authentication but not Digest and NTLM.

You are required to manually enter proxy settings into the appsettings.json file with your preferred text editor.

This table lists and explains the entries in the Proxy settings.

Field

Description

Proxy Mode

Enter your proxy settings if you want the Agent to use or not to use the proxy. There are three modes:

  • NoProxy: The Agent does not use a proxy even if you configure the server's proxy settings.
  • SystemProxy: The Agent uses the System Proxy that was defined on the server.
  • CustomProxy: The Agent uses Custom Proxy that you define in the appsettings.json file.

Use Default Credentials

Enter true if you authenticate to the proxy via the user that the Agent service is defined.

Username

Enter a username for authentication

Password

Enter a password for authentication

Domain

Enter a domain name

Address

Enter a proxy address. Only IP address or hostname without schema and port is allowed.

Port

Enter a port for the proxy

Bypass on Local

Enter a value that indicates whether to bypass the proxy server for local addresses.

Bypass List

Enter the address(es) that do not use the proxy server. Enter the address(es) as RegEx.

The following shows some possible bypass list expressions:

"example\\.com",

";*\\.example\\.com",

"192\\.168\\.1\\.1",

"www\\.example\\.com",

"www\\.example\\.com:8080",

"100\\.;*\\.;*\\.;*"

Using Proxy Auto-Configuration file

You can use Proxy Automatic Configuration (PAC) to configure your proxy. A PAC file lets you describe the proxy configuration in a file using JavaScript, so you can manage your proxy settings effortlessly.

Information

To use a PAC file, you must set the Proxy Mode to System Proxy in the appsetting.json file.

How to use a Proxy Auto-Configuration file on Windows
  1. Go to Settings > Network & Internet > Proxy.
  2. Turn on the Use setup script toggle.
  3. In the Script address field, enter the PAC file's URL address.

  1. Select Save.

Step 3. Setting authentication verifier agent as a Windows Service

An internal authentication verifier agent should be configured as a Windows service so that it can poll the Acunetix 360 servers regularly and can take the verification initiation command from the server.

How to set the authentication verifier agent as a Windows Service
  1. Open a command prompt in Administrator mode and navigate to the agent's folder.
  2. Run the following command to install the Acunetix 360 Authentication Verifier Agent as a Windows Service:
  • Acunetix.Cloud.Agent.exe -i
  1. Press Windows+R, type 'services.msc' and press Enter.
  2. Find 'Netsparker Cloud Scanning Service - [YOUR_AGENT_NAME]'.
  3. Right-click on it and select Properties.
  4. Make sure Startup type is set to Automatic, and select Start.
  5. Select Apply and OK, then exit the Properties window.

Information

Although this service is set to start automatically, it may not restart until the PC is restarted too.

After these steps, the Acunetix 360 Authentication Verifier Agent should be running on your network. To view your verifier agents, from the main menu, select Agents > Manage Verifiers.

Warning

Any change in the appsetting.json file, such as setting proxy and changing API Token, requires restarting the service so that the changes can take effect.

Updating authentication verifier agents

There are three methods to update your authentication verifier agent.

  • When a new verifier agent version has been published, you can update your Agents manually using installation files on the machines on which agents are installed.
  • You can update agents manually by selecting Update Agent (visible only when the Enable Auto Update is not configured and the new version of the Agent is available). While the update is in progress, the State field will display 'Updating'.
  • You can enable the auto update feature. The target verifier agent updates itself as soon as possible when it’s idle.

How to enable automatic Authentication Verifier Agent updates
  1. From the main menu, select Agents > Manage Verifiers.
  2. Next to the relevant agent, select the Command drop-down, then Enable Auto Update.

Changing default data folder for the authentication verifier agent

You can change the default location where the authentication verifier agent saves its data. This helps you avoid running out of free space due to accumulating data.

By default, the authentication verifier agent saves the data to the C:/Invicti Enterprise folder. But, you can choose to save the data in a different location to prevent filling up your free space.

The following instruction explains how to change the location where the authentication verifier agent saves its data. The instruction is valid for new agents or existing agents:

How to change the default data folder
  1. Navigate to the agent’s folder you want to change the default folder.
  2. Open appsettings.json file with your preferred text editor.
  3. Add the following attribute listed under AgentInfo: "ScanDataFolderPath": "FullPath"

Warning

Write the full path as shown in the following example: C:\\Users\\[User]\\Documents\\ScanData

  1. Save and exit.

If you modified the existing agent's configuration file, you need to restart the agent service. So, Open services.msc, find 'Acunetix 360 Scanning Service - [YOUR_AGENT_NAME]', and restart the agent service.

This restart does not affect your saved data. To move the existing data, you need to copy the data and paste it into the new folder.

If this is a new agent, continue following this instruction: Step 2. Configuring authentication verifier agent.

Installing multiple authentication verifier agents on Windows

How to install multiple verifier agents on Windows
  1. Copy all files from the default Verifier Agent’s folder to the new Agent’s folder. The path is: C:\Acunetix 360 Agent.

For example, if you decided to use Agent-2 as the new Agent name, you could use this command to copy all files to new Agent’s folder:

xcopy "C:\Acunetix 360 Agent\*.*" "C:\Acunetix 360 Agent-2" /yie

This will create a new directory in C:\Acunetix 360 Agent-2 and copy in all the required files.

  1. Locate the new Agent’s folder and open the appsettings.json file with a text editor. Set the new Agent’s name.
  2. Open a command prompt in Windows with Administrator rights and install the new Agent as a Windows Service using these commands:
  • This command changes the current folder to the new Agent’s folder:

cd C:\Acunetix 360 Agent-2

  • This command installs the new Agent as a Windows Service:

Acunetix.Cloud.Agent.exe -i

Uninstalling authentication verifier agent

You may uninstall verifier agents.

How to uninstall the authentication verifier agent
  1. Open a command prompt in Administrator mode and navigate to the agent's folder.
  2. Run the following command to stop and delete the Acunetix 360 Authentication Verifier Agent as a Windows Service:

sc stop "Netsparker Cloud Scanning Service - YourAgentName"

sc delete "Netsparker Cloud Scanning Service - YourAgentName"

This command will delete the verifier agent service. If required, you can delete the related folder.


 
« Back to the Acunetix Support Page