Lumeta Asset Manager helps your Qualys Enterprise server work better by comparing Qualys-subscribed and Qualys-scanned IPs with LumetaAsset Manager-indexed hosts in the same network space. Qualys receives up-to-the-minute endpoint data from Lumeta Asset Manager at every polling interval, enabling Qualys to saturate a network space with its service, thereby eliminating any and all gaps in coverage and ensuring the comprehensive provision of Qualys Management to Qualys customers.
The Qualys integration also supports LumetaAsset Manager's new Qualys Management dashboard, which provides device details on IPs managed by Qualys, IPs managed by LumetaAsset Manager, and IPs managed by both services.
Expand | ||
---|---|---|
| ||
|
Once you have done so, LumetaAsset Manager-indexed devices that Qualys doesn't know about are incorporated to Qualys Managed and Subscription management services. At each polling interval, the integration is run and a refresh of endpoint data is pushed to the Qualys server.
...
At every polling interval, Lumeta Asset Manager retrieves a list of Scanned/Managed hosts (yellow) and a list of Subscribed hosts (red) from Qualys. This information populates two tables on Lumeta Asset Manager (i.e., qualys_scanned_ips table and qualys_subscribed_ips table) and ultimately feeds the Qualys Management dashboard on LumetaAsset Manager.
Legend Blue - LumetaAsset Manager-Indexed IPs Red - Qualys-Subcribed IPs Yellow - Qualys-Scanned/Managed IPs Note: Qualys-Scanned/Managed hosts (yellow) are always a subset of Qualys-Subscribed hosts (red). Expand title Want more on how this is accomplished? - At the first polling interval, Lumeta Asset Manager creates an asset group container on the Qualys server called LUMETAAsset Manager_Spectre_DISCOVERED.
- Lumeta Asset Manager checks and refreshes the contents of the LUMETA_Spectrethe Lumeta_DISCOVERED asset group at every subsequent polling interval. Note: This is different from IPsonar, where a new asset group is created each time a report is generated.
- Lumeta Asset Manager ingests all of the IPs on LUMETA_Spectre Lumeta_DISCOVERED to the qualys_scanned_ips table on LumetaAsset Manager.
- Lumeta Asset Manager ingests all Subscribed IPs from Qualys' server to LumetaAsset Manager's qualys_subscribed_ips table.
- At the first polling interval, Lumeta Asset Manager creates an asset group container on the Qualys server called LUMETAAsset Manager_Spectre_DISCOVERED.
Additionally, when an Lumeta Asset Manager user enables Auto-Subscribe (i.e., Settings > Integrations > Qualys > Auto-Subscribe), several events happen:
First, LumetaAsset Manager-Indexed hosts (blue) not present in Qualys' Subscribed list (red) are added to Qualys' Subscribed list (red).
Lumeta Asset Manager then identifies hosts in the Qualys Subscribed list (red) that are not in the Qualys Managed list (yellow) and pushes those to the LUMETAAsset Manager_Spectre_DISCOVERED asset list on Qualys.
- When an Lumeta Asset Manager user disables Auto-Subscribe, IPs that are common to both LumetaAsset Manager-Indexed and Qualys-Subscribed but are not in Qualys-Managed are added to LUMETAAsset Manager_Spectre_DISCOVERED.
Widgets on LumetaAsset Manager's Qualys Management dashboard are populated using a combination of IPs indexed by Lumeta Asset Manager and IPs from the qualys_scanned_ips table and the qualys_subscribed_ips table, as follows:
Widget Label Description Image IPs Unmanaged by Qualys IPs indexed by Lumeta Asset Manager yet unmanaged by Qualys
(aka LumetaAsset Manager-Indexed - Qualys-Subscribed table on LumetaAsset Manager)
IPs Unmanaged by LumetaAsset Manager IPs managed by Qualys yet not indexed by LumetaAsset Manager
(aka Qualys-Scanned/Managed table on Lumeta Asset Manager - LumetaAsset Manager-Indexed)Qualys and Lumeta Asset Manager Managed IPs IPs both indexed by Lumeta Asset Manager and in Qualys managed list
(aka Intersection of LumetaAsset Manager-Indexed and Qualys-Scanned/Managed table on LumetaAsset Manager)