IBM Rational AppScan Reporting Console reports security vulnerabilities for Web sites and Web applications

Transcription

1 , dated May 06, 2008 IBM Rational AppScan Reporting Console reports security vulnerabilities for Web sites and Web applications Table of contents 2 Key prerequisites 3 Publications 2 Planned availability dates 4 Technical information 2 Description 5 Software Services 3 Availability of national languages 5 Ordering information 3 Program 12 Terms and conditions 3 Offering Information 14 Prices Overview While Web sites streamline access to information, they are vulnerable, potentially exposing critical corporate information and consumer data or otherwise compromising enterprise IT. Online security breaches lead to a of damaging consequences. Federal and state laws may require companies to disclose when their customer information has been compromised, and industry groups are recommending or requiring periodic assessments of Web application risks. Hackers can compromise vital corporate data, or they can use corporate Web sites as a way to take over the computers of Web site visitors. Vulnerabilities can lead to bad press, resulting in negative impressions, eroded brands, and lost business. And in the most extreme of these cases, a Web site can be shut down for good. Executives should understand these risks and put processes and technology in place to understand, assess, and rectify these online issues. IBM Rational AppScan Reporting Console delivers Web application security reporting. This solution offers IT security, development, and On Demand Business and compliance professionals the ability to automate the process of identifying vulnerabilities that exist in Web applications and corporate Web properties. IBM Rational AppScan helps users manage Web application security throughout the software development life cycle. Named a worldwide market-share leader, IBM Rational AppScan offers a time-saving solution for all types of security testing # outsourced, individual, and enterprise-wide analysis # and for all types of users # application developers, quality assurance (QA) teams, penetration testers, security auditors, and senior management. IBM Rational AppScan operates by traversing an application, analyzing and testing the application, validating the findings, and then reporting results. The reports generated include recommendations to address the problems. These advanced fix recommendations deliver unmatched accuracy and efficiencies for developers and security auditors to help address and remediate the vulnerabilities identified during the scan. IBM Rational AppScan editions include: IBM Rational AppScan Standard is the desktop solution for automating Web application security testing. It is used by penetration testers and security auditors, as well as QA and development. IBM Rational AppScan Tester integrates security testing into the QA process and supports software quality assurance and software quality management. IBM Rational AppScan Enterprise is a Web-based, multi-user solution that provides centralized application security scanning, data consolidation and reporting, remediation capabilities, executive dashboards, compliance reporting, and seamless integration with IBM Rational AppScan Standard. IBM is a registered trademark of International Business Machines Corporation 1

2 IBM Rational AppScan Reporting Console is a Web-based, multi-user solution that provides centralized data consolidation and reporting, remediation capabilities, executive dashboards, compliance reporting, and seamless integration with IBM Rational AppScan Standard. For more information on IBM Rational products, visit For more information about the IBM Passport Advantage program, visit Key prerequisites Refer to the Hardware requirements and Software requirements sections. Planned availability dates May 6, 2008: Electronic software delivery May 9, 2008: Media and documentation Description IBM Rational AppScan delivers Web application security testing. This solution offers IT security, development, and On Demand Business and compliance professionals the ability to automate the process of identifying vulnerabilities that exist in Web applications and corporate Web properties. Left unchecked, these issues expose organizations to the risk of issues such as data breaches due to vulnerable applications. IBM Rational AppScan helps users manage Web application security throughout the software development life cycle. Named a worldwide market-share leader, IBM Rational AppScan offers a time-saving solution for all types of security testing # outsourced, individual, and enterprise-wide analysis # and for all types of users # application developers, QA teams, penetration testers, security auditors, and senior management. IBM Rational AppScan operates by traversing an application, analyzing and testing the application, validating the findings, and then reporting results. IBM Rational AppScan Reporting Console generates reports that provide recommendations to address the problems. These advanced fix recommendations deliver unmatched accuracy and efficiencies for developers and security auditors to help address and remediate vulnerabilities identified by a scan. The new IBM Rational AppScan Reporting Console is tailored for companies interested in finding the most cost-effective way to distribute application security test reporting across the organization. This Web-based multi-user application for vulnerability reporting with scan results is delivered as a simple-to-action developer task-list. IPLA and Subscription and Support considerations IPLA licenses can be transferred from one machine to another within, but not limited to, an enterprise. You may aggregate the capacity for all the processors the product is operated on to achieve a more economic price. This will result in a single Proof of Entitlement (PoE). It is your responsibility to manage the distribution of Value Units within the limits of the entitlement of the product license. Subscription and Support must cover the same capacity as the product license entitlement. Subscription and Support will be available in the country in which the agreement is made. IBM is a registered trademark of International Business Machines Corporation 2

3 Availability of national languages Product description Language GA date Rational AppScan Std Ed English November 30, 2007 V7.7.0 Rational AppScan Tester Ed English December 7, 2007 V7.7.0 Ratl AppScan Enterprise Ed. English November 30, 2007 V5.4.0 Ratl AppScan Rpt Console English May 9, 2008 V5.4.0 Ratl Pol Tester Privacy Ed. English November 30, 2007 V5.4.0 Ratl Pol Tester Quality Ed. English November 30, 2007 V5.4.0 Ratl Pol Tstr Accessibility English November 30, 2007 V5.4.0 Program Program VRM Program name 5724-T IBM Rational AppScan Enterprise 5724-T IBM Rational AppScan Standard 5724-T IBM Rational AppScan Tester 5724-V IBM Rational AppScan Reporting Console 5724-T IBM Rational Policy Tester Accessibility 5724-T IBM Rational Policy Tester Privacy 5724-T IBM Rational Policy Tester Quality Offering Information Product information is available via the Offering Information Web site Also, visit the Passport Advantage Web site Publications No publications are shipped with these products. IBM Publications Center The Publications Center is a worldwide central repository for IBM product publications and marketing material with a catalog of 70,000 items. Extensive search facilities are provided. Payment options for orders are via credit card (in the U.S.) or customer for 20 countries. A large of publications are available online in various file formats, and they can all be downloaded by all countries. IBM is a registered trademark of International Business Machines Corporation 3

4 Technical information Specified operating environment Hardware requirements Processor: 3.0 GHz Pentium IV-compatible processor; faster processor or multiple processors recommended Memory: 2 GB of RAM or more recommended Hard disk: Approximately 200 MB of available hard-disk space for the recommended installation Approximately 10 GB of available hard-disk space for scan logs on Agent Server Approximately 200 GB of available hard-disk space on the system hosting the database Additional recommended hardware requirements The following recommendations will increase AppScan Enterprise Server performance and are highly recommended for scanning large Web applications and sites: Install the Watchfire Agents on a separate server from the Database Server. The Control Center (Web Application) performs better when installed on the Database Server. AppScan Enterprise Server requires significant processing from the database server while running scan jobs and report packs. Configure Database Server as a server class machine, with multiple processors and a SCSI disk array configured as RAID(0) for fast disk I/0. 4 GB of RAM recommended if Database and Agents share one machine. For a full discussion of sizing system hardware to meet your needs, see the Planning and Installation Guide. Software requirements Operating system: Microsoft Windows Server 2003 with Service Pack 1 or later Microsoft Windows XP with Service Pack 2 or later for demonstration purposes only It is highly recommended that latest Critical Updates from Microsoft for your operating system be installed. Database: SQL Server 2005 Service Pack 1 Standard or better SQL Server 2005 Express Service Pack 1 for demonstration purposes only SQL Server system requirements available from the Microsoft Web Site Other prerequisites: Before installing AppScan Enterprise Server or AppScan Reporting Console, you must have IIS 5.1 or higher installed (not required for servers running Watchfire Agents only). Before installing AppScan Enterprise Server or AppScan Reporting Console, you must download and install the.net Framework 2.0 from the Microsoft Web site. Ensure that ASP.Net is installed and enabled in IIS. IBM is a registered trademark of International Business Machines Corporation 4

5 Supported browsers: Microsoft Internet Explorer 6.0 Service Pack 1 or later Mozilla Firefox 1.5 or later The program's specifications and specified operating environment information may be found in documentation accompanying the program, if available, such as a read-me file, or other information published by IBM, such as an announcement letter. Documentation and other program content may be supplied only in the English language. Planning information Software Maintenance is included with licenses purchased through Passport Advantage and Passport Advantage Express. Product upgrades and technical support are provided by the Software Maintenance offering as described in the Agreements. Product upgrades provide the latest versions and releases to entitled software, and technical support provides voice and electronic access to IBM support organizations, worldwide. IBM includes one year of Software Maintenance with each program license acquired. The initial period of Software Maintenance can be extended by the purchase of a renewal option, if available. Packaging IBM Rational AppScan Reporting Console V5.4: Quick Start Guide for Rational AppScan Reporting Console V5.4 IBM Rational AppScan Reporting Console V5.4 Security, auditability, and control The customer is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communication facilities. Software Services IBM Software Services has the breadth, depth, and reach to manage your services needs. You can leverage the deep technical skills of our lab-based Software Services team and the business consulting, project management, and infrastructure expertise of our IBM Global Services team. Also, we extend our IBM Software Services reach through IBM Business ners to provide an extensive portfolio of capabilities. Together, we provide the global reach, intellectual capital, industry insight, and technology leadership to support a wide range of critical business needs. To learn more about IBM Software Services or to contact a Software Services sales specialist, visit To locate an IBM Business ner, visit Ordering information This product is available only via Passport Advantage. It is not available as shrinkwrap. IBM is a registered trademark of International Business Machines Corporation 5

6 Product information Licensed function title Product group Product category IBM Rational AppScan Enterprise Software Software Quality Quality IBM Rational AppScan Standard Ed Software Software Quality Quality IBM Rational AppScan Tester Software Software Quality Quality IBM Rational AppScan Reporting Software Software Console Quality Quality IBM Rational Policy Tester Software Software Accessibility Quality Quality IBM Rational Policy Tester Privacy Software Software Quality Quality IBM Rational Policy Tester Quality Software Software Quality Quality Program name PID Charge unit description IBM Rational AppScan Enterprise 5724-T52 Authorized User(s) IBM Rational AppScan Enterprise 5724-T52 Authorized User(s) IBM Rational AppScan Enterprise 5724-T52 Server(s) IBM Rational AppScan Enterprise 5724-T52 Server(s) IBM Rational AppScan Standard Ed 5724-T59 Floating User(s) IBM Rational AppScan Standard Ed 5724-T59 Floating User(s) IBM Rational AppScan Tester 5724-T51 Server(s) IBM Rational AppScan Tester 5724-T51 Server(s) IBM Rational AppScan Tester 5724-T51 Authorized User(s) IBM Rational AppScan Tester 5724-T51 Authorized User(s) IBM Rational AppScan Reporting 5724-V03 Server(s) Console IBM Rational AppScan Reporting 5724-V03 Authorized Console User(s) IBM Rational Policy Tester 5724-T53 Resource Value Accessibility Unit IBM Rational Policy Tester Privacy 5724-T57 Resource Value Unit IBM Rational Policy Tester Quality 5724-T58 Resource Value Unit Charge metrics definitions Value Unit A Value Unit is a pricing charge metric for program license entitlements which is based upon the quantity of a specific designated measurement used for a given program. Each program has a designated measurement. The most commonly used designated measurement is a processor core. However, for select programs, there are other designated measurements such as users or resources which may include servers, client devices, and messages. The of Value Unit entitlements required for a program depends on how the program is deployed in your environment and must be obtained from a Value Unit table. You must obtain a PoE for the calculated of Value Unit entitlements for your implementation. The Value Unit entitlements are specific to a program and may not be exchanged, interchanged, or aggregated with Value Unit entitlements of another program. Server A server is a computer system that executes requested procedures, commands, or applications to one or more user or client devices. A PoE must be obtained for each server regardless of the of processor cores and partitions in the server on which the program runs or for each IBM is a registered trademark of International Business Machines Corporation 6

7 server managed by the program. Where blade technology is employed, each blade is considered a separate server. Authorized user An authorized user is one and only one individual (named or unnamed) within or outside your enterprise. A PoE must be obtained for each individual user accessing the program in any manner. A program licensed under an authorized user PoE may be installed on a single computer or server, and accessed by multiple users, provided that a PoE has been obtained for each individual user accessing the program either directly or indirectly (via a multiplexing program, device, or application server) through any means on behalf of the user. Floating user You may utilize the program, including installation of the program on multiple servers, provided that use of the program occurs via a license server, and the total of concurrent users does not exceed the total of floating user licenses obtained for the program. Term license # "Initial Fixed Term License + Software Subscription and Support 12 Months" The "Initial Fixed Term License + Software Subscription and Support nths" term license grants the right to: Use the software for a period of 12 months only Receive Software Subscription and Support (also referred to as Software Maintenance) for a period of 12 months At the end of the term (12 months), the license may be renewed for an additional 12-month term (at the prevailing price). When you renew your Fixed Term License in the second year, and in each year after, this is referred to as a "Subsequent Fixed Term License + Software Subscription and Support nths." If the license is not renewed, you will no longer have the rights to use the software, will no longer be entitled to the benefits of Software Subscription and Support, and must destroy all copies of the software. Passport Advantage program licenses IBM Rational AppScan Enterprise description IBM Rational AppScan Enterprise Ratl AppScan Enterprise Authorized User Initl D040HLL FT Lic+S&S Ratl AppScan Enterprise Authorized User SubSq E04SILL FT Lic+S&S Ratl AppScan Enterprise Server Initl FT Lic+S&S D040ILL Ratl AppScan Enterprise Server SubSq FT Lic+S&S E04SJLL Ratl AppScan Enterprise Authorized User Annual E047CLL SW S&S Rnwl Ratl AppScan Enterprise Authorized User Lic + D61V2LL SW S&S 12 mo Ratl AppScan Enterprise Authorized User SW S&S D61V4LL Reinstate 12 mo Ratl AppScan Enterprise Server Annual SW S&S E047ALL Rnwl Ratl AppScan Enterprise Server Lic + SW S&S 12 D61UYLL mo Ratl AppScan Enterprise Server SW S&S Reinstate D61UZLL 12 mo IBM is a registered trademark of International Business Machines Corporation 7

8 IBM Rational AppScan Standard description IBM Rational AppScan Standard Ed Ratl AppScan Standard Floating User Initl FT Lic+S&S Ratl AppScan Standard Floating User SubSq FT Lic+S&S Ratl AppScan Standard Floating User Annual SW S&S Rnwl Ratl AppScan Standard Floating User Lic + SW S&S 12 mo Ratl AppScan Standard Floating User SW S&S Reinstate 12 mo IBM Rational AppScan Tester D040CLL E04SDLL E046DLL D61SYLL D61SZLL description IBM Rational AppScan Tester Ratl AppScan Tester Authorized User Initl FT Lic+S&S Ratl AppScan Tester Authorized User SubSq FT Lic+S&S Ratl AppScan Tester Server Initl FT Lic+S&S 12 Mo Ratl AppScan Tester Server SubSq FT Lic+S&S 12 Mo Ratl AppScan Tester Authorized User Annual SW S&S Rnwl Ratl AppScan Tester Authorized User Lic + SW S&S 12 mo Ratl AppScan Tester Authorized User SW S&S Reinstate 12 mo Ratl AppScan Tester Server Annual SW S&S Rnwl Ratl AppScan Tester Server Lic + SW S&S 12 mo Ratl AppScan Tester Server SW S&S Reinstate 12 mo IBM Rational AppScan Reporting Console D040NLL E04SPLL D040LLL E04SMLL E046ALL D61SSLL D61STLL E046FLL D61T2LL D61T3LL description IBM Rational AppScan Reporting Console Ratl AppScan Reporting Console Authorized User Annual E04SXLL SW S&S Rnwl Ratl AppScan Reporting Console Authorized User Initl FT D0430LL Lic+S&S Ratl AppScan Reporting Console Authorized User Lic + SW D0410LL S&S Ratl AppScan Reporting Console Authorized User SW S&S D0411LL Reinstate Ratl AppScan Reporting Console Authorized User SubSq FT E04TVLL Lic+S&S Ratl AppScan Reporting Console Server Annual SW S&S E04SYLL Rnwl Ratl AppScan Reporting Console Server Initl FT Lic+S&S D0431LL Ratl AppScan Reporting Console Server Lic + SW S&S 12 D0412LL Mo Ratl AppScan Reporting Console Server SW S&S Reinstate D0413LL Ratl AppScan Reporting Console Server SubSq FT Lic+S&S E04TWLL IBM is a registered trademark of International Business Machines Corporation 8

9 IBM Rational Policy Tester Accessibility description IBM Rational Policy Tester Accessibility Ratl Policy Tester Accessibility RVU Annual SW S&S Rnwl Ratl Policy Tester Accessibility RVU Initl FT Lic+S&S Ratl Policy Tester Accessibility RVU Lic + SW S&S 12 mo Ratl Policy Tester Accessibility RVU SW S&S Reinstate 12 mo Ratl Policy Tester Accessibility RVU SubSq FT Lic+S&S IBM Rational Policy Tester Privacy E047ELL D040QLL D61V6LL D61V7LL E04SRLL description IBM Rational Policy Tester Privacy Ratl Policy Tester Privacy RVU Annual SW S&S E047GLL Rnwl Ratl Policy Tester Privacy RVU Initl FT Lic+S&S D040RLL Ratl Policy Tester Privacy RVU Lic + SW S&S 12 D61VALL mo Ratl Policy Tester Privacy RVU SW S&S Reinstate D61VBLL 12 mo Ratl Policy Tester Privacy RVU SubSq FT Lic+S&S E04SSLL IBM Rational Policy Tester Quality description IBM Rational Policy Tester Quality Ratl Policy Tester Quality RVU Annual SW S&S E047FLL Rnwl Ratl Policy Tester Quality RVU Initl FT Lic+S&S D040PLL Ratl Policy Tester Quality RVU Lic + SW S&S 12 D61V8LL mo Ratl Policy Tester Quality RVU SW S&S Reinstate D61V9LL 12 mo Ratl Policy Tester Quality RVU SubSq FT Lic+S&S E04SQLL Passport Advantage supply Program name/description Rational AppScan Std Ed V7.7.0 Ratl AppScan Standard, v7.7 English Media Pack Rational AppScan Tester Ed V7.7.0 Ratl AppScan Tester, v7.7 English Media Pack Ratl AppScan Enterprise Ed. V5.4.0 Ratl AppScan Enterprise, v5.4 English Windows Media Pack Ratl AppScan Rpt Console V5.4.0 Ratl AppScan Rpt Console Other V5.4.0 ENC Unrestricted CD ROM Digital Disk Ratl Pol Tester Privacy Ed. V5.4.0 Ratl Policy Tester Privacy Ed, v5.4 English Media Pack Ratl Pol Tester Quality Ed. V5.4.0 Ratl Policy Tester Quality Ed, v5.4 English Media Pack Ratl Pol Tstr Accessibility V5.4.0 Ratl Policy Tester Access Ed, v5.4 English Media Pack BT002EN BT003EN BT004EN BT04EEN BT006EN BT007EN BT005EN IBM is a registered trademark of International Business Machines Corporation 9

10 Passport Advantage customer: Media pack entitlement details Customers with active maintenance or subscription for the products listed are entitled to receive the corresponding media pack. Ratl Pol Tester Privacy Ed. V5.4.0 Entitled maintenance Media packs description offerings description Ratl Policy Tester - Privacy Resource Value Unit Ratl Pol Tester Quality Ed. V5.4.0 Ratl Policy Tester Privacy BT006EN Ed, v5.4 English Media Pack Entitled maintenance Media packs description offerings description Ratl Policy Tester - Quality Resource Value Unit Ratl Pol Tstr Accessibility V5.4.0 Ratl Policy Tester Quality BT007EN Ed, v5.4 English Media Pack Entitled maintenance Media packs description offerings description Ratl Policy Tester - Ratl Policy Tester BT005EN Accessibility Accessibility Ed, v5.4 Resource Value Unit English Media Pack Ratl AppScan Rpt Console V5.4.0 Entitled maintenance Media packs description offerings description Ratl AppScan Reporting Ratl AppScan Rpt Console BT04EEN Console Authorized User Other V5.4.0 ENC Unrestricted CD ROM Digital Disk Ratl AppScan Reporting Ratl AppScan Rpt Console BT04EEN Console Server Other V5.4.0 ENC Unrestricted CD ROM Digital Disk Rational AppScan Std Ed V7.7.0 Entitled maintenance Media packs description offerings description Rational AppScan Standard Ratl AppScan Standard BT002EN Floating User, v7.7 English Media Pack Rational AppScan Standard Ratl AppScan Standard BT002EN Floating User for, v7.7 English System Z Media Pack Rational AppScan Tester Ed V7.7.0 Entitled maintenance Media packs description offerings description Rational AppScan Tester Ratl AppScan Tester BT003EN Authorized User, v7.7 English User Media Pack Rational AppScan Tester Ratl AppScan Tester BT003EN Authorized User, v7.7 English for System Z Media Pack Rational AppScan Tester Ratl AppScan Tester BT003EN IBM is a registered trademark of International Business Machines Corporation 10

11 Server, v7.7 English Media Pack Rational AppScan Tester Ratl AppScan Tester BT003EN Server for System, v7.7 English Z Media Pack Ratl AppScan Enterprise Ed. V5.4.0 Entitled maintenance Media packs description offerings description Ratl AppScan Enterprise Ratl AppScan Enterprise BT004EN Authorized User, v5.4 English User Windows Media Pack Ratl AppScan Enterprise Ratl AppScan Enterprise BT004EN Authorized User, v5.4 English for System Z Windows Media Pack Ratl AppScan Enterprise Ratl AppScan Enterprise BT004EN Server, v5.4 English Windows Media Pack Ratl AppScan Enterprise Ratl AppScan Enterprise BT004EN Server for System, v5.4 English Z Windows Media Pack Cross-platform product for use on System z Order the part s that follow when there is an intention to acquire this cross-platform product for deployment on the System z or S/390 platform. This set of part s provides the identical supply and authorization as the other set in this announcement. The distinction is to identify the planned deployment platform. Program name/description Ratl AppScan Enterprise Ed For E047DLL System Z Auth User Annual SW S&S Rnwl Ratl AppScan Enterprise Ed For D61V3LL System Z Auth User Lic + SW S&S 12 mo Ratl AppScan Enterprise Ed For D61V5LL System Z Auth User SW S&S Reinstate 12 mo Ratl AppScan Enterprise E047BLL For System Z SRVR Annual SW S&S Rnwl Ratl AppScan Enterprise D61V0LL For System Z SRVR Lic + SW S&S 12 mo Ratl AppScan Enterprise D61V1LL For System Z SRVR SW S&S Reinstate 12 mo Ratl AppScan Std Ed For System Z E046ELL Floating User Annual SW S&S Rnwl Ratl AppScan Std Ed For System Z D61T0LL Floating User Lic + SW S&S 12 mo Ratl AppScan Std Ed For System Z D61T1LL Floating User SW S&S Reinstate 12 mo Ratl AppScan Tester Ed For E046BLL System Z Authorized USR Annual SW S&S Rnwl Ratl AppScan Tester Ed For D61SULL System Z Authorized USR Lic + SW S&S 12 mo Ratl AppScan Tester Ed For D61SVLL System Z Authorized USR SW S&S Reinstate 12 mo Ratl AppScan Tester For E046CLL System Z Server Annual SW S&S Rnwl Ratl AppScan Tester For D61SWLL System Z Server Lic + SW S&S 12 IBM is a registered trademark of International Business Machines Corporation 11

12 mo Ratl AppScan Tester For System Z Server SW S&S Reinstate 12 mo D61SXLL Terms and conditions The information provided in this announcement letter is for reference and convenience purposes only. The terms and conditions that govern any transaction with IBM are contained in the applicable contract documents such as the IBM International Program License Agreement, IBM International Passport Advantage Agreement, and IBM Agreement for Acquisition of Software Maintenance. Licensing IBM International Program License Agreement including the License Information document and Proof of Entitlement (PoE) govern your use of the program. PoEs are required for all authorized use. products only, offered outside of Passport Advantage, where applicable, are license only and do not include Software Maintenance. This software license includes Software Maintenance, previously referred to as Software Subscription and Technical Support. License Information form s Program name Program Form IBM Rational AppScan Enterprise 5724-T52 L-KHUY-785RGA IBM Rational AppScan Standard 5724-T59 L-KHUY-788KN9 IBM Rational AppScan Tester 5724-T51 L-KHUY-788KN9 IBM Rational AppScan Reporting Console 5724-V03 L-KHUY-7AQP22 IBM Rational Policy Tester Accessibility 5724-T53 L-KHUY-785RGA Ed. IBM Rational Policy Tester Privacy 5724-T57 L-KHUY-785RGA IBM Rational Policy Tester Quality 5724-T58 L-KHUY-785RGA The program's License Information will be available for review on the IBM Software License Agreement Web site Limited warranty applies Warranty IBM warrants that when the program is used in the specified operating environment, it will conform to its specifications. The warranty applies only to the unmodified portion of the program. IBM does not warrant uninterrupted or error-free operation of the program or that IBM will correct all program defects. You are responsible for the results obtained from the use of the program. IBM provides you with access to IBM databases containing information on known program defects, defect corrections, restrictions, and bypasses at no additional charge. Consult the IBM Software Support Handbook for further information at IBM will maintain this information for at least one year after the original licensee acquires the program (warranty period). IBM is a registered trademark of International Business Machines Corporation 12

13 Program technical support Technical support of a program product will be available for a minimum of three years from the general availability date, as long as your Software Maintenance is in effect. This technical support allows you to obtain assistance (via telephone or electronic means) from IBM for product-specific, task-oriented questions regarding the installation and operation of the program product. Software Maintenance also provides you with access to updates, releases, and versions of the program. You will be notified, via announcement letter, of discontinuance of support with 12 months' notice. If you require additional technical support from IBM, including an extension of support beyond the discontinuance date, contact your IBM representative or IBM Business ner. This extension may be available for a fee. Money-back guarantee If for any reason you are dissatisfied with the program and you are the original licensee, you may obtain a refund of the amount you paid for it, if within 30 days of your invoice date you return the program and its PoE to the party from whom you obtained it. If you downloaded the program, you may contact the party from whom you acquired it for instructions on how to obtain the refund. For programs acquired under the IBM International Passport Advantage Agreement, this term applies only to your first acquisition of the program. Authorization for use on home/portable computer The program may be stored on the primary machine and another machine, provided that the program is not in active use on both machines at the same time. You may not copy and use this program on another computer without paying additional license fees. Product name IBM Rational AppScan Enterprise IBM Rational AppScan Standard IBM Rational AppScan Tester IBM Rational AppScan Reporting Console IBM Rational Policy Tester Accessibility Ed. IBM Rational Policy Tester Privacy IBM Rational Policy Tester Quality Volume orders (IVO) No Passport Advantage applies, and through the Passport Advantage Web site at This product is available only via Passport Advantage. It is not available as shrinkwrap. Agreement for Acquisition of Software Maintenance TheIBM Agreement for Acquisition of Software Maintenance (Z ) applies for maintenance and does not require customer signatures. Software Maintenance applies. Software Maintenance is included with licenses purchased through Passport Advantage and Passport Advantage Express. Product upgrades and technical support are provided by the Software Maintenance offering as described in the Agreements. Product upgrades provide the latest versions and releases to entitled software and Technical Support provides voice and electronic access to IBM support organizations, worldwide. IBM includes one year of Software Maintenance with each program license acquired. The initial period of Software Maintenance can be extended by the purchase of a renewal option, if available. IBM is a registered trademark of International Business Machines Corporation 13

14 While your Software Maintenance is in effect, IBM provides you assistance for your routine, short-duration installation and usage (how-to) questions, and code-related questions. IBM provides assistance via telephone and, if available, electronic access, to your information systems (IS) technical support personnel during the normal business hours (published prime shift hours) of your IBM support center. (This assistance is not available to your end users.) IBM provides Severity 1 assistance 24 hours a day, 7 days a week. For additional details, consult your IBM Software Support Handbook at Software Maintenance does not include assistance for the design and development of applications, your use of programs in other than their specified operating environment, or failures caused by products for which IBM is not responsible under the applicable agreements. For additional information about the International Passport Advantage Agreement and the IBM International Passport Advantage Express Agreement, visit the Passport Advantage Web site at System i Software Maintenance applies No Educational allowance available Not applicable Prices Passport Advantage For Passport Advantage information and charges, contact your IBM representative or authorized IBM Business ner. Additional information is also available at Business ner information If you are an IBM Business ner # Distributor for Workstation Software acquiring products from IBM, you may link to Passport Advantage Online for resellers where you can obtain Business ner pricing information. An IBM ID and password are required. Trademarks SiteProtector, SecurityFusion, Internet Security Systems, System p, System z and System i are trademarks of IBM Corporation in the United States, other countries, or both. Rational, IBM, Passport Advantage, Internet Scanner, Proventia, ClearQuest, Tivoli, ibm.com and S/390 are registered trademarks of IBM Corporation in the United States, other countries, or both. Pentium is a registered trademark of Intel Corporation or its subsidiaries in the United States and other countries. Microsoft and Windows are registered trademarks of Microsoft Corporation in the United States, other countries, or both. Other company, product, and service names may be trademarks or service marks of others. Terms of use IBM products and services which are announced and available in your country can be ordered under the applicable standard agreements, terms, conditions, and prices in effect at the time. IBM is a registered trademark of International Business Machines Corporation 14

15 IBM reserves the right to modify or withdraw this announcement at any time without notice. This announcement is provided for your information only. Additional terms of use are located at: For the most current information regarding IBM products, consult your IBM representative or reseller, or visit the IBM worldwide contacts page IBM is a registered trademark of International Business Machines Corporation 15