Qualys

This integration combines Asset Manager’s index of your network with Qualys  to provide your security policy management software with a comprehensive set of network data. The two solutions work together to eliminate gaps in vulnerability coverage and improve your organization's security posture.

The Qualys integration provides Qualys customers with a way to ensure that the Qualys agent is installed comprehensively on all network devices in a particular segment (or multiple segments) as intended.  The integration reconciles Qualys findings with Asset Manager findings and insodoing, uncovers:

  1. Assets lacking the Qualys agent, which show up in Asset Manager-only dashboard widgets and in the Qualys console.
  2. Assets to which visibility is blocked, which show up in Qualys-only dashboards widgets and in the Qualys console.
  3. Assets with comprehensive management, which show up in both Qualys and Asset Manager dashboards widgets and in the Qualys console. A Qualys user with read-only permissions for the following parameters will be able to configure and use this integration:
    • Queries & Reports
    • Software
    • Software Manager 
    • System Tree Access

Widgets on Asset Manager's Vulnerability Management dashboard are populated using a combination of IPs indexed by Asset Manager and IPs from the qualys_scanned_ips table and the qualys_subscribed_ips table, as follows:

IPs Unmanaged by Qualys

IPs indexed by Asset Manager yet unmanaged by Qualys

(aka Asset Manager-Indexed - Qualys-Subscribed table on Asset Manager)

IPs Unmanaged by Asset Manager
IPs managed by Qualys yet not indexed by Asset Manager
(aka Qualys-Scanned/Managed table on Asset Manager - Asset Manager-Indexed)

IPs both indexed by Asset Manager and in Qualys managed list
(aka Intersection of Asset Manager-Indexed and Qualys-Scanned/Managed table on Asset Manager)

Configuring the Qualys Integration

An Asset Manager superuser can configure connectivity between the Asset Manager Command Center and the Qualys server as follows:

  1. Log in to Asset Manager as a superuser.

  2. On the main menu, browse to Settings > Integrations  > Qualys.

  3. Complete the configuration form, including Polling Interval, Qualys Server Name, Username and Password, and then click Submit.

    Field Description
    Polling Interval How often (in hours) that Asset Manager should poll Qualys for information
    Server Name The Server name or IP address of the Qualys server. 
    Username

    Password Your Qualys password

  4. Enable the integration by toggling the Active control from red to green. The message "Product configured properly" displays when the Qualys has been successfully configured. 

    1. The Asset Manager Extension installs on your Qualys server. See How to Confirm Installation for more.

    2. Results populate the Qualys Integration dashboard.

    3. Confirm this by browsing in your Asset Manager UI to Dashboards > Qualys Management.