FAQs

Administration

• If I upgrade a library in use by my Application, will the old library be automatically be removed from Contrast?
• When does my license actually expire?

Agent Deployment

• How do I tell if my application is still using the deprecated Java launcher jar? 
• Which network ports does Contrast use?
• How does the Contrast agent authenticate with the Contrast server?
• What is the IP for Contrast SaaS?
• How does Contrast distinguish a new server?

Policy Management

• Why are some Assess rules disabled by default?
• Understanding and Adjusting Severity Levels
• How do I determine if any Level 2 rules are in use?

Integrations and Plugins

• How do I get a .pem file for ADFS SSO integration?

Vulnerability Lifecycle

• What is the data retention policy for Contrast findings?
• How do I manage vulnerabilities across build versions?
• Will vulnerabilities be automatically closed after code changes?
• How do I handle findings in out-of-reach code?
• Can I import a Trace into the Contrast UI?