Versions Compared

Old Version 7

changes.mady.by.user David P

Saved on

compared with

New Version Current

changes.mady.by.user Eliezer Basner

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
  • Server host requirements depend on whether the installation is Centralized or Distributed, and on how many lines of code will need to be scanned. These requirements are also applicable for CxAudit.

...

In addition to the requirements in the table below, in general, CPU clock speed and disk speed will affect scan time. For exact tested versions, see the CxSAST Release Notes.

PurposeLines of CodeInstalled RAM**CoresCPU SpeedDiskOSWeb ServerOther Software
Centralized (POC)200K8 GB6-82.8 GHz80 GB (recommended)

Windows
7,8,8.1,10
Windows Server
2008R2 2012, 2012R2, 2016

IIS 7/7.5/8/8.5/10

Windows Installer 3.1 or above (Run msiexec to check)

.NET framework 4.7.1 

500K16 GB
Centralized (Production)200K10 GB

Minimum: 8 for 1 concurrent scan.
Additional 2 cores for each additional concurrent scan,
up to a maximum of 12 cores,
(Recommended: 4, 6, or 8 cores )
Max recommended concurrent scans: 3*

* Scans of 1M LOC or more are
recommended to limit concurrency or
run on their own distributed server.

2.8 GHz

250 GB
(recommended)

Windows Server
2008R2 2012, 2012R2, 2016



IIS 7/7.5/8/8.5/10

600K16 GB
1.2M24 GB2.8 GHz
2M40 GB
3M56 GB
4M72 GB

Distributed - CxEngine (Production)

For multiple CxEngine servers
(for concurrent scans),
each server should meet
the requirements.		200K6 GB

4 (for 1 concurrent scan)

Additional 2 cores for each additional concurrent scan (Recommended: 4, 6, or 8 cores )

Recommended: 2.8 GHz

100 GB
(recommended)

NA
600K12 GB
1.2M20 GBRecommended: 2.8 GHz
2M32 GB
3M48 GB
4.5M72 GB
Distributed - CxManager with Management & Orchestration Layer (Production)
14 GB82.5 GHz

250 GB
 (recommended)

IIS 7/7.5/8/8.5/10

Distributed - CxManager without Management & Orchestration Layer (Production)
10 GB42.5 GHz

250 GB
(recommended)

IIS 7/7.5/8/8.5/10


Distributed - Database (Production)



 12 GB 6-8 2.5 GHz 350-400 GB
(recommended)		 NA MS SQL Server
(Express not recommended)
2008/2012/2014/2016

** Note: GB RAM / LOC numbers for Javascript are higher.

...

Info
titleServer Hardening Checklist

The following security hardening recommendations for the Checkmarx installation are:

Checkmarx Application - 

  • Configure Checkmarx System Admin login from dedicated IP`s only
  • Use SSL for HTTPS based browsing – prohibit using HTTP
  • Use SAML based authentication for the system (replacing local users)
  • If applicable – enable 2FA/MFA through the SAML IDP (Checkmarx does not support that as a feature)
  • Install the Checkmarx application in a distributed mode exposing the least Checkmarx components to users as possible

Application Hosting Servers - 

For the CxSAST For the CxSAST application, it is recommended to use a display with any one of the following resolutions; 1280x720, 1280x800, 1366x768, 1920x1080.

...