Skip to main content

CxPS Release Internal Note (v3.1.0)

Notice

IMPORTANT NOTE

  • This is an internal page for Checkmarx only, and should not be shared with customers, prospects, or partners.

  • Updates in this version are not final and therefore subject to change.

The following release updates are available for CxIAST version 3.1.0. Use the search tool to find a specific subject.

New Features and Changes

CxIAST version 3.1.0 includes the following new features and changes:

Category

Feature

Change to Documentation

Additional Information

Setup & Configuration

API Versioning - CxIAST RESTful API supports versioning. This ensures forward and backward compatibility looking forward but requires an update for any API already in use.

Version upgrade - If you have version 2.6.x or below installed, it is required to clean the DB and uninstall the version before upgrading to v3.1.0 installation.

Docker Deployment - Running CxIAST Server in a Docker container.

Go to https://hub.docker.com/r/checkmarx/iast for latest version. Send IAST-Support your Docker user if you wish to download the version.

CxIAST Server in AWS (for PoC) - Send Request to ITWebOPs if you wish to run remote PoC (similar to CxSAST process).

Installing the CxIAST Management Server (v3.1.0)

Upgrading the CxIAST Management Server (v3.1.0 to v3.2.1)

UI Terminology

All UI terminology for ‘Application’ in CxIAST have been changed to ‘Project’. This helps to ensure ongoing efforts for consistency with other Checkmarx products.

Getting to Know the CxIAST Web Interface (v3.1.0 to v3.2.x)

Project View (v3.1.0 to v3.2.x)

Action Ability and Usability

All Projects Filter – Filter the ‘All Project’ list by either Project Name or Team. Useful in case of multiple monitored projects for easier management.

Project Renaming – As CxIAST automatically registers an application, the naming provided by the system may be confusing or meaningless to CxIAST users. This new ability allows the user to provide a more meaningful name to be used anywhere within the CxIAST system (UI, API, plugins).

All Projects (v3.1.0 to v3.2.x)

Changing the Project Display Name (v3.1.0 and up)

Node.js

  • CxIAST/CxSAST result correlation for Node.js applications

  • Query customization – full support

  • Ease of deployment – no need to download Node.js. From version 3.1 Node.js is installed using npm install (See user guide for complete instructions)

  • Major performance improvements

  • Hornet framework support

.NET

  • CxIAST/CxSAST result correlation for C# applications

  • Export logs

  • Accuracy improvements

Java

Major Performance Improvements - adding a caching mechanism to reduce the overhead created by method instrumentation.

The caching mechanism reduces the startup and the running time delay significantly.

Most of the information is cached during the first running of the application. As so, the improvement is most noticeable from the second run forward.

CxIAST Setup and User Guide

Online and downloadable versions of the setup and user documentation can be found here ->

CxIAST Software Documentation

Checkmarx CxIAST Setup and User Guide v3.1.0

Known Limitations

Category

Limitation

.NET Agent

  • C# and ASP.NET only

  • Missing capabilities (compared to Java)

    • Query customization is performed manually (not from the UI)

    • Code Coverage

    • Application tags

    • Agent auto upgrade is performed only on agent registration

Node.js Agent

  • Node.js v10 and higher is not supported

  • Missing capabilities (compared to Java)

    • Code Coverage

    • Application tags

Java Agent

  • On upgrade, Application restart is required

  • Java 11 and higher is not supported

  • Standalone applications are partly supported

Supported Environments

The following environments have been tested with CxIAST version 3.1.0

Operating System

Windows

10 (or higher)

Windows Server

2012 (or higher)

Linux

Any official Linux distribution (excl. macOS)

SQL Server

SQL

2012

* SQL express is supported, but as it is targeted for small-scale installations it is not recommended to be used.

Browsers

Microsoft

Edge

Google Chrome

43 (or higher)

Build Servers

Jenkins

1.580.1 (or higher)

Supported Code Languages

The following code languages can be scanned using CxIAST version 3.1.0

Language Supported

Version

OS

Application Server

6501144280.png

Java 6 (or higher)

Windows or Linux

Apache Tomcat v7 (or higher)

Jetty v8 (or higher)

JBoss EAP v7 (or higher)

Wildfly v10.1 (or higher)

WebLogic Server 12cR2

Eclipse Vert.x v3.1 (or higher)

WebSphere Liberty – 18 (or higher)

WebSphere Traditional - 9 (or higher)

Payara - 5

6501144283.png
6501144286.png

.NET framework 3.5 (or higher)

Windows or Linux

IIS, IIS Express

6501144289.png

Node.js version 6 (or higher)

Windows or Linux

Not Applicable

Send Documentation Feedback - If you have comments about this documentation, you can contact the documentation team by sending your feedback to us. We appreciate your feedback!