.NET Framework Instrumentation

.NET Framework Agent

Installation

Please see our .NET Framework - Supported Technologies page for additional information on our application stacks supported by our .NET Framework agent.

Configuration

  • Config via contrast_security.yaml file (included in the installer)
  • There are 2 ways to set parameters for an application:
    • On the application server itself by updating the parameters in C:\Program Files\Contrast.NET\DotnetAgentService.exe.config
    • On the application level (which will override any of the same settings from the server), by updating web.config for the application

Running

Runs as a Windows service (with system tray monitor)

Reference: https://docs.contrastsecurity.com/installation-netinstall.html#net-windows

Additional .NET Framework Settings

Setting Description
Contrast.AppName Controls the application name sent to the Contrast interface for this application. The Contrast.AppName setting should be present on each server where the application is to be analyzed. Otherwise the applications could have different display names (see below) and be considered as different applications by the Contrast application.
Contrast.AppVersion Controls the application version tag sent to Contrast.
Contrast.AppTags Controls free-form tags sent to Contrast for the application; you can use tags to search for specific applications in the Contrast interface.
Contrast.LibraryTags Controls free-form tags sent to Contrast for the application’s libraries; you can use tags to search for specific libraries in the Contrast interface.
Contrast.FindingTags Controls free-form tags sent to Contrast for the application’s vulnerabilities; you can use tags to search for specific vulnerabilities in the Contrast interface.