Skip to main content
This document is for:
Invicti Enterprise on-premises

Configure Invicti IAST Bridge

Invicti IAST Bridge is a necessary application to facilitate communication between IAST sensors and Invicti Enterprise.

Invicti Shark (IAST) helps you run interactive security testing via Invicti Enterprise. That helps confirm more vulnerabilities and further minimize false positives. By adding IAST capabilities with the Shark, Invicti also shows the exact location of the issue and ensures that the entire web application is scanned. For more information, refer to the Deploying Shark (IAST) in Invicti Enterprise on-premises document.

For Invicti Shark to operate, you need to download the Shark sensor and deploy it on your server. Additionally, you must configure the Invicti IAST Bridge for Java, .NET, and Node.js sensors. Note that the PHP sensor doesn't use the IAST Bridge.

IAST Bridge communication​

The bridge is used to relay information from the Shark sensor to the Invicti scanner agent. The following steps show how the IAST Bridge facilitates communication between the scanner and the sensor:

  1. When the scan is launched, the Scanner connects to the bridge. The scanner includes the IAST token, which is the identifier throughout the scan.
  2. The Bridge starts listening for connections for the scan.
  3. When the sensor needs to send data, it sends the data to the bridge, together with the IAST token.
  4. The bridge sends the data to the correct scanner (identified by the IAST token) connected to receive that data.

Both the scanner agent and Shark sensor connect to the IAST Bridge via the address and port configured for the IAST Bridge. As a result, the IAST Bridge receives connections from the scanning engine and from the IAST sensors.

Set up the IAST Bridge on Invicti Enterprise​

You can set up the IAST Bridge if you have Invicti Enterprise on-premises.

tip

The IAST Bridge is included in the Invicti Enterprise on-premises installation package delivered to you via a .zip file.

Install the Invicti IAST Bridge​

  1. Run the IASTBridgeSetup.exe file.
  2. On the Welcome to the Invicti IAST Bridge Setup Wizard window, click Next.
  3. Click Browse if you want to install the IAST Bridge to a different folder than the default folder, then click Next.
IAST Bridge installation folder selection
  1. On the Agent Settings window, enter the Service Port. By default, it's 7880.
IAST Bridge port settings
  1. Click Install to complete the installation.

Set up a custom bridge service​

  1. Press the Windows logo key.
  2. Type Services and open the Services application.
  3. Make sure the Invicti IAST Bridge is running.
Invicti IAST Bridge in Windows Services
note

By default, the Invicti IAST Bridge runs at the 7880 port using HTTPS.

  1. Log in to Invicti Enterprise on-premises.
  2. Go to Settings > General from the left-side menu.
  3. Locate the IAST Bridge Settings section.
  4. Enter your custom URL in the Default Bridge URL field. (You can enter your custom URL like this: https://52.58.213.161:7880)
IAST Bridge default URL settings
  1. Click Save.

Configure Invicti Enterprise on-premises for a custom IAST bridge​

You can configure the bridge address on the General Settings page or the Shark Settings.

  • You can set the default bridge URL and port on the General Settings page.
  • In the Shark Settings, the advanced setting lets you override the default bridge URL for each website.

You can use the URL provided by Invicti as a bridge URL and port, or you can set up a custom bridge.

warning

Ensure that the Shark sensors can connect to the address/port specified.

Configure the default bridge URL​

  1. Select Settings > General from the left-side menu.
  2. Enter your bridge URL into the IAST Bridge Settings field.

Override the default bridge URL​

  1. Select Scans > New Scan from the left-side menu.
  2. Specify the Target URL.
  3. From the Scan Settings, go to the Shark (IAST and SCA) tab.
  4. From the Shark Settings section, turn on Enable Shark.
  5. From the Server Platform drop-down, select Java, .NET, or Node.js.
  6. From the Advanced Settings drop-down, enter the URL and the port to the Bridge URL and Port field.
Override IAST Bridge URL in Shark Settings.

Need help?​

Invicti Support team is ready to provide you with technical help. Go to Help Center

Was this page useful?