Install the .NET Framework Agent (legacy) – Contrast Security Support Portal

Important

If your applications are running on modern technology you should use the .NET Framework agent instead of the legacy agent.

The legacy .NET Framework agent offers the full capabilities of Contrast Assess, Protect, and SCA as of April 2020 but is no longer receiving new features or lower severity bug fixes. Contrast is no longer fixing bugs in the legacy agent as of January, 2023.

You must have at least the "Edit" role permission to install an agent.

The legacy Contrast .NET Framework agent can be used to analyze ASP.NET web applications running on legacy technologies including:

Windows Server 2008
Windows machines that cannot upgrade to .NET Framework version 4.7.1 or newer
Applications that target the CLR2 runtime and cannot be upgraded to CLR4

See the legacy .NET Framework agent supported technologies and system requirements for more details.

To install the legacy .NET Framework agent:

Download the legacy .NET Framework agent (for exampleContrastSetup_20.4.X.zip) where 20.4.X is the newest legacy version available.

Find the agent keys and create a YAML configuration file calledcontrast_security.yaml. Copy and paste this sample and replace the<Values>below with your values:

api: 
  url: <YourContrastURL>
  api_key: <YourAPIkey>
  service_key: <YourServiceKey>
  user_name: <YourUserName>
agent:
  dotnet:
    enable_chaining: <True/False>

Copy thecontrast_security.yamlconfiguration file and the agent zip file to the web server.
Extract the downloaded zip archive (for example,ContrastSetup_20.4.X.zip) on the web server.
Move thecontrast_security.yamlfile in the same directory asContrastSetup.exe.
RunContrastSetup.exe. This installs the .NET agent.

Once installed, the .NET agent automatically instruments ASP.NET applications deployed to IIS. Agent analysis is performed as applications are exercised by users (or by automated scripts or tests).

Legacy .NET Framework Agent articles:

Important