Qualys Asset Connector Guide

Summary: How to set up and use the Qualys Asset connector in Ivanti Neurons for RBVM/ASOC.

Qualys Asset Connector Overview

Qualys is a cloud service that proactively locates and identifies vulnerabilities through automated scanning. Ivanti Neurons for RBVM/ASOC offers an API-based connector that integrates Qualys vulnerability information into the Neurons for RBVM/ASOC platform for further prioritization and accessibility.

Qualys Asset Configuration

This setup requires an account with Qualys and access to the Asset View.

Qualys Asset User Permissions

A User can be assigned to one or more Roles, which are a consolidation of Permissions that represent the rights to access features and functions. API Access can be given to a User when assigning or editing their Role.

Locate Users in the Navigation Bar and either create or edit an existing user. In the pop-up window, select a User Role. Then select or deselect the API check box.

Qualys Asset Connector - Edit User in Qualys

Note: For more information, please visit Qualys.Community.

Connector Configuration in Neurons for RBVM/ASOC

Setting Up the Qualys Asset Management Connector

Navigate to the Automation > Integrations page.

Navigation - Automation - Integrations

Using the search bar in the upper-right corner of the Integrations page, type Qualys to find the connector.

Qualys Asset Connector - Search for Qualys

Locate the Qualys Asset Inventory card under Asset Management and click Configuration.

Qualys Asset Connector - Configuration Button Location

In the new window under Connection, complete the required fields, as described below.

Qualys Asset Connector - Configuration Window

  • Name: The connector’s name.

  • URL: Qualys Asset URL (i.e., https://qualysapi.qg2.apps.qualys.com/)

  • User Name: The user name that has access to Qualys.

  • Password: The password associated with the username.

  • Network: Neurons for RBVM/ASOC network name (ingested applications associated with this network).

Click Test Credentials to verify the credentials are correct and have access to make API calls to the Qualys Asset instance.

Qualys Asset Connector - Test Credentials

Note: If your Qualys Asset instance uses whitelisting, contact Neurons for RBVM/ASOC Support to obtain the whitelisting IPs.

Configure the desired schedule for the connector to retrieve results from the Qualys Asset instance and optionally turn on Enable auto URBA (Update Remediation by Assessment).

Qualys Asset Connector - Schedule and Connector Specific Options

Click Save to create the connector. Once saved, the connector is now visible on the Integrations page under Currently Configured Integrations.

Qualys Asset Connector - Configured Connector

On the Settings > Uploads page, Qualys Asset data is parsed from the scan file and displayed on the Hosts page.

Qualys Asset Data Mapping in Neurons for RBVM/ASOC

The Scanner Name associated with these scans is QUALYS, which can be used as a filter in the Hosts view in Neurons for RBVM/ASOC.

Hosts Page

Host data extracted from the Qualys Asset scan file is shown on the Hosts page under the Asset Details section.

Neurons for RBVM/ASOC Field

Qualys Field

Detail Pane

Hostname

Assigned by order of precedence according to:

  1. DNS

  2. NETBIOS

  3. IP Address

Asset Details Section

Operating System

HostOperatingSystem

Asset Details Section

DNS

DNS

Asset Details Section

NetBIOS

netbios

Asset Details Section

Last Scan Date

discovered_date

Recent Scans

Tags

Asset_group_ids

Tags Section