Regarding the total number of scans, of requests, and the scan duration, it is basically difficult to estimate accurately before starting a scan for the following reasons.
- Some signaures require the verification if scanning values should be applied or not, by checking the request/response format of scanning scope.
- Scannning settings affecte Increase/decrease.
- The version of Vex or signature groups affect Increase/decrease.
For a rough estimation, there is the estimation tool.
The scan duration is estimated by entering the number of requests, parameters, headers, and screen transitions.
Refer to the following Excel in the manual folder included in the Vex module.
- Scan duration estimation tool.xlsx
*The description of the tool is in the Excel.