Qualys Global AssetView

What is Qualys Global AssetView? #

Qualys Global AssetView (formerly Qualys Global IT) uses a combination of Qualys sensors (agents, scanners, and passive network sensors) to discover assets in your environment and collect inventory information.

Why Should You Use the Qualys Global AssetView Connector? #

The Qualys Global AssetView connector provides visibility into all the assets in your environment. You can use this visibility to:

  • ensure assets are managed per your security policies

  • find vulnerabilities quickly and remediate

How Does This Connector Work? #

Lucidum executes read-only requests to the Qualys Global AssetView API and ingests only meta-data about Qualys Global AssetView assets. Lucidum does not retrieve any data stored on your assets.

Configuring the Connector in Lucidum #

Field

Description

Example

Host

The hostname for the Qualys API. To determine your platform URL, see 

Qualys Global AssetView in US: gateway.qg*.apps.qualys.com

gateway.qg*.apps.qualys.com

User Name

User name for a Qualys Global AssetView account that has read access to API data.

See the instructions in the section Adding Usershttps://cdn2.qualys.com/docs/qualys-evaluators-guide.pdf

Password

User name for a Qualys Global AssetView account that has read access to API data.

*******************

API Version

Version of the Qualys Global AssetView API.

Default is v1

v1

Source Documentation #

Creating a User Account #

Before configuring the Qualys connector in Lucidum, you must first create a user with API access. Lucidum will use this user account to access Qualys.

To create a new user for the Lucidum connector:

  1. Log in to the Qualys Administration utility

  2. In this document, follow the instructions in the section Adding Usershttps://cdn2.qualys.com/docs/qualys-evaluators-guide.pdf

  3. In User Roles, assign one of the following:

    • Manager role with full scope

    • Reader role with full scope

To enable API access for the user account:

  1. Log in to the Qualys Administration utility

  2. Click User.

  3. In the Edit User page, click User Role.

  4. Click the API checkbox.

  5. Click Save.

Required Permissions #

https://docs.qualys.com/en/gav/latest/#t=get_started%2Froles_permissions.htm

The following roles allow access to API data:ing permissions:

  • Manager role with full scope.

  • Reader role with full scope.

API Documentation #

https://www.qualys.com/docs/qualys-global-ai-api-user-guide.pdf

https://cdn2.qualys.com/docs/qualys-global-ai-api-v2-user-guide.pdf