--- title: HCL AppScan on Cloud (ASoC) Connector Guide slug: rbvm-help/hcl-appscan-on-cloud-asoc-connector-guide createdAt: 2026-10-26T13:51:22.492Z --- **Summary**: How to set up and use the HCL AppScan on Cloud (ASPM) connector in Ivanti Neurons. ## Overview HCL AppScan on Cloud (ASPM) is a SaaS solution for all application security testing needs. It consolidates all HCL Security’s testing capabilities into a single service that provides a uniform experience for all technologies. The Ivanti Neurons platform provides an API-based connector that integrates with HCL ASPM, allowing customers to bring in their DAST, SAST and Open Source (OSS) findings. It allows customers to gain visibility into their overall risk due to vulnerabilities in their source code and web applications, thereby enabling a simpler, more efficient way to manage those vulnerabilities. ## User Prerequisites/HCL ASPM Setup HCL ASPM is a cloud-based solution. Access to [the cloud instance](https://cloud.appscan.com/) with scanning capabilities is a prerequisite. The user must have view access to applications, scans, and their corresponding issues. Any role above Application Manager (the default role in HCL ASPM) is sufficient for pulling data. [Refer to this following link for more information](https://help.hcltechsw.com/appscan/ASPM/appseccloud_user_roles_cm.html). ### Steps to Generate Key ID and Key Secret from ASPM Instance The Key ID and Key Secret are used for API authentication. Log in to the HCL ASPM cloud instance, click on the left hamburger menu, and navigate to the **Settings** page. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/3VIawfROGzpfAML-ESLiR_hcl-appscan-on-cloud-asoc.png" alt="HCL Connector - Settings Menu Location" position="flex-start" size="98" width="687" height="302" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/HCL AppScan on Cloud ASoC.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/HCL AppScan on Cloud ASoC.png" showCaption="false"} On the Settings page, click **Generate** to obtain a new Key and Secret for accessing the API endpoints. ![HCL Connector - Generate Button Location](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/jWYQvV4TIMkjt22qjH7bJ_hcl-appscan-on-cloud-asoc1.png) Once successfully generated, make sure to copy these values, as you will be unable to retrieve them later. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/6MKZ7UbHyGOQrYkUYWbW8_hcl-appscan-on-cloud-asoc2.png" alt="HCL Connector - Key ID and Key Secret" position="flex-start" size="80" width="559" height="525" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/HCL AppScan on Cloud ASoC_2.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/HCL AppScan on Cloud ASoC_2.png" showCaption="false"} ## HCL ASPM Connector API Calls The following API calls are performed during a connector run to pull vulnerabilities from HCl ASPM into Ivanti Neurons. | **API Type** | **Endpoint** | | --------------------------------------------------- | ------------------------------------------------------------------------ | | Authentication | https\://cloud.appscan.com/api/V2/Account/ApiKeyLogin | | List Applications | https\://cloud.appscan.com/api/V2/Apps | | Get List of Issues associated with each Application | https\://cloud.appscan.com/api/v2/Issues/Application/\ | | Get Issue details for each Issue | https\://cloud.appscan.com/api/v2/Issues//Artifacts | | Get Issue advisory for each Issue | https\://cloud.appscan.com/api/v2/Issues//Advisory?locale=en-US | | Get Issue fix recommendation for each Issue | https\://cloud.appscan.com/api/v2/Issues//FixRecommendation?locale=en-US | ## Configuring the HCL ASPM Connector in Ivanti Neurons Navigate to the **Automate > Integrations** page. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/N6T9UnB5FOanUDKWj7uEe_palo-alto-xpanse-expander.png" alt="Navigation - Automation - Integrations" position="flex-start" size="33" width="229" height="151" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Palo Alto Xpanse Expander.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Palo Alto Xpanse Expander.png" showCaption="false"} Using the search bar in the upper-right corner of the **Integrations** page, type **AppScan on Cloud** to find the connector. Locate the **HCL ASPM** card on the page and click **Configuration**. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/iyAg7wqzYaQzYGuVkl0Gq_hcl-appscan-on-cloud-asoc3.png" alt="HCL Connector - Configuration Button Location" position="flex-start" size="98" width="687" height="393" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/HCL AppScan on Cloud ASoC_3.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/HCL AppScan on Cloud ASoC_3.png" showCaption="false"} In the new window under **Connection**, complete the required fields, as described below. - **Connector Name**: The connector’s name. - **Access Key**: Use the Key Id retrieved earlier. - **Secret Key**: Use the Key Secret retrieved earlier. - **URL**: The URL to access the **HCL ASPM** cloud instance. The instance URL would be [https://cloud.appscan.com/ASPMUI/serviceui/home](https://cloud.appscan.com/ASPMUI/serviceui/home) - **SSL**: Optional SSL of the instance in base64 format. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/xFVX7eo32teYoUqk4w3Lg_hcl-appscan-on-cloud-asoc4.png" alt="HCL Connector - Connector Window" position="flex-start" size="52" width="361" height="371" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/HCL AppScan on Cloud ASoC_4.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/HCL AppScan on Cloud ASoC_4.png" showCaption="false"} Click **Test Credentials** to verify the credentials are correct and have access to make API calls to the HCL ASPM. Configure the desired schedule for the connector to retrieve results from the HCL ASPM instance and optionally turn on **Enable auto URBA (Update Remediation by Assessment)**. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/n1qmAjWyBdvYdRJdwuM1O_hcl-appscan-on-cloud-asoc5.png" alt="HCL Connector - Connector Specific Options" position="flex-start" size="70" width="488" height="389" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/HCL AppScan on Cloud ASoC_5.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/HCL AppScan on Cloud ASoC_5.png" showCaption="false"} Click the **Save** button to save the connector’s configuration and create the connector. Once saved, the connector is now visible on the **Integrations** page under **Currently Configured Integrations**. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/86b4Hibkb77Xt6MygrtOt_hcl-appscan-on-cloud-asoc6.png" alt="HCL Connector - Configured Integration" position="flex-start" size="32" width="226" height="261" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/HCL AppScan on Cloud ASoC_6.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/HCL AppScan on Cloud ASoC_6.png" showCaption="false"} Clicking the **History** button displays the connector details for each pull. The **Sync** button allows users to perform an on-demand sync. The **Edit** button allows the user to edit the connector configuration. The **Delete** button allows the user to delete the connector. Once files have been processed on the Uploads page, the user can view the ingested data by navigating to the **Applications** and **Application Findings** pages. ### Mapping HCL ASPM fields in Ivanti Neurons This table shows the high-level mapping of HCL ASPM fields in Ivanti Neurons. HCL ASPM connector pulls DAST, SAST, and OSS findings. | **Ivanti Neurons Fields** | **HCL ASPM Fields - DAST / SAST / OSS** | | ------------------------- | --------------------------------------------- | | Scanner Severity | Severity | | Scanner Plugin | Id | | Application Name | Name | | Plugin Source Status | Status | | Plugin Details → FixGroup | FixGroupId (Not applicable for DAST findings) | ## Ivanti Neurons Tags The following HCL ASPM fields are converted into Ivanti Neurons tags. These tags are used for searches, playbook automation, and better visualization in Dashboards. ### Application Tags - Asset GroupName - Risk Rating - Business Impact - Hosts - URL - Business Owner ### Application Findings Tags - Scan Name - Scanner - Domain ## Common Fields in Ivanti Neurons Here are the default values for the following Ivanti Neurons fields as defined for HCL ASPM: - **Scanner Name**: HCL ASPM - **Finding Type**: SAST, DAST, or OSS (open source), depending on the type of data