Scanning password protected pages TN-M14
You can scan password protected sites in all Desktop editions, but not in the OnDemand (cloud) edition.
Sites using forms and HTTP authentication
To map a password protected site in SortSite Desktop 1.0 or PowerMapper Desktop 4.02 and later:
- Login to the site in the usual way (either via a login page or the popup password dialog)
- Once you’ve logged in, navigate to the page you want to start scanning from (usually the page shown after login, or the home page of the site) then map or check your site
Note: If you have a logout link inside the secure area, then the scanner may be logged out if it follows the logout link, preventing a full scan of the password protected area. To prevent this happening go to Block Links on the Links tab of the Options window and add something like the following:
This stops the scanner following links with ‘logout’ in the URL.
Sites using Windows authentication
To map a site (typically an intranet or internal web application) that uses Windows Integrated Authentication:
- Go to Options on the View menu, go to the Links tab, and make sure the Automatic Login box is checked (this option is not present and always set in SortSite 3.0 and PowerMapper 5.01 and earlier)
- Now navigate to the page you want to start scanning from then map or check your site
Note: do not scan sites using Windows Authentication if you have administrator rights, and if following any of the links on the site can trigger side-effects such as hiding content.
Applies To: PowerMapper Desktop 4.0 and SortSite Desktop 1.0 or above
Last Reviewed: June 12, 2016