What is Qualys Global AssetView? #
Qualys Global AssetView (formerly Qualys Global IT) uses a combination of Qualys sensors (agents, scanners, and passive network sensors) to discover assets in your environment and collect inventory information.
Why Should You Use the Qualys Global AssetView Connector? #
The Qualys Global AssetView connector provides visibility into all the assets in your environment. You can use this visibility to:
-
ensure assets are managed per your security policies
-
find vulnerabilities quickly and remediate
How Does This Connector Work? #
Lucidum executes read-only requests to the Qualys Global AssetView API and ingests only meta-data about Qualys Global AssetView assets. Lucidum does not retrieve any data stored on your assets.
Configuring the Connector in Lucidum #
|
Field |
Description |
Example |
|---|---|---|
|
Host |
The hostname for the Qualys API. To determine your platform URL, see https://www.qualys.com/platform-identification/ |
gateway.qg*.apps.qualys.com |
|
User Name |
User name for a Qualys Global AssetView account that has read access to API data. See the instructions in the section Adding Users: https://cdn2.qualys.com/docs/qualys-evaluators-guide.pdf |
|
|
Password |
User name for a Qualys Global AssetView account that has read access to API data. |
******************* |
|
API Version |
Version of the Qualys Global AssetView API. Default is v1 |
v1 |
Source Documentation #
Creating a User Account #
Before configuring the Qualys connector in Lucidum, you must first create a user with API access. Lucidum will use this user account to access Qualys.
To create a new user for the Lucidum connector:
-
Log in to the Qualys Administration utility
-
In this document, follow the instructions in the section Adding Users: https://cdn2.qualys.com/docs/qualys-evaluators-guide.pdf
-
In User Roles, assign one of the following:
-
Manager role with full scope
-
Reader role with full scope
-
To enable API access for the user account:
-
Log in to the Qualys Administration utility
-
Click User.
-
In the Edit User page, click User Role.
-
Click the API checkbox.
-
Click Save.
Required Permissions #
https://docs.qualys.com/en/gav/latest/#t=get_started%2Froles_permissions.htm
The following roles allow access to API data:ing permissions:
-
Manager role with full scope.
-
Reader role with full scope.
API Documentation #
https://www.qualys.com/docs/qualys-global-ai-api-user-guide.pdf
https://cdn2.qualys.com/docs/qualys-global-ai-api-v2-user-guide.pdf
