ISM prerequisites

System requirements

The system requirements for Veracode Internal Scanning Management (ISM) are based on the minimum requirements to run a Java Virtual Machine (JVM) on Java 21 or greater.

Requirement	Description
Operating system	You can install an ISM endpoint on the following operating systems: Windows 7 or later Windows Server macOS Lion or later Linux with one of these distributions: RHEL, CentOS, or Ubuntu. To install an ISM endpoint on Ubuntu, you must use the manual deployment method.
Java version	Java 21 or later.
Memory	Minimum of 8 GB.
Disk space	Minimum of 4 GB.
Network	Reliable internet access Reliable connection between the endpoint server and the Veracode gateway, and the Veracode gateway domain or IP address is on the allowlist for your organization Reliable connection between the endpoint server and your target URLs
Port	Requires one-way communication over port 443 to the Veracode Platform URL, based on the Region Domain for your Veracode account.
WebSocket	Your firewall must allow WebSocket traffic.

Veracode requirements

To configure ISM in the Veracode Platform, you must have:

• A Veracode Dynamic Analysis subscription.
• A Veracode account with the Administrator or Security Lead role.