Qualys Asset Connector Guide

Summary: How to set up and use the Qualys Asset connector in Ivanti Neurons RBVM/ASPM/VULN KB.

Qualys Asset Connector Overview

Qualys is a cloud service that proactively locates and identifies vulnerabilities through automated scanning. Ivanti Neurons RBVM/ASPM/VULN KB offers an API-based connector that integrates Qualys vulnerability information into the Neurons RBVM/ASPM/VULN KB platform for further prioritization and accessibility.

Qualys Asset Configuration

This setup requires an account with Qualys and access to the Asset View.

Qualys Asset User Permissions

A User can be assigned to one or more Roles, which are a consolidation of Permissions that represent the rights to access features and functions. API Access can be given to a User when assigning or editing their Role.

Locate Users in the Navigation Bar and either create or edit an existing user. In the pop-up window, select a User Role. Then select or deselect the API check box.

Qualys Asset Connector - Edit User in Qualys

Note: For more information, please visit Qualys.Community.

Connector Configuration in Neurons RBVM/ASPM/VULN KB

Setting Up the Qualys Asset Management Connector

Navigate to the Automation > Integrations page.

Navigation - Automation - Integrations

Using the search bar in the upper-right corner of the Integrations page, type Qualys to find the connector.

Qualys Asset Connector - Search for Qualys

Locate the Qualys Asset Inventory card under Asset Management and click Configuration.

Qualys Asset Connector - Configuration Button Location

In the new window under Connection, complete the required fields, as described below.

Qualys Asset Connector - Configuration Window

  • Name: The connector’s name.

  • URL: Qualys Asset URL (i.e., https://qualysapi.qg2.apps.qualys.com/)

  • User Name: The user name that has access to Qualys.

  • Password: The password associated with the username.

  • Network: Neurons RBVM/ASPM/VULN KB network name (ingested applications associated with this network).

Click Test Credentials to verify the credentials are correct and have access to make API calls to the Qualys Asset instance.

Qualys Asset Connector - Test Credentials

Note: If your Qualys Asset instance uses whitelisting, contact Neurons RBVM/ASPM/VULN KB Support to obtain the whitelisting IPs.

Configure the desired schedule for the connector to retrieve results from the Qualys Asset instance and optionally turn on Enable auto URBA (Update Remediation by Assessment).

Qualys Asset Connector - Schedule and Connector Specific Options

Click Save to create the connector. Once saved, the connector is now visible on the Integrations page under Currently Configured Integrations.

Qualys Asset Connector - Configured Connector

On the Settings > Uploads page, Qualys Asset data is parsed from the scan file and displayed on the Hosts page.

Qualys Asset Data Mapping in Neurons RBVM/ASPM/VULN KB

The Scanner Name associated with these scans is QUALYS, which can be used as a filter in the Hosts view in Neurons RBVM/ASPM/VULN KB.

Hosts Page

Host data extracted from the Qualys Asset scan file is shown on the Hosts page under the Asset Details section.

Neurons RBVM/ASPM/VULN KB Field

Qualys Field

Detail Pane

Hostname

Assigned by order of precedence according to:

  1. DNS

  2. NETBIOS

  3. IP Address

Asset Details Section

Operating System

HostOperatingSystem

Asset Details Section

DNS

DNS

Asset Details Section

NetBIOS

netbios

Asset Details Section

Last Scan Date

discovered_date

Recent Scans

Tags

Asset_group_ids

Tags Section