malderman

QualysGuard 6.18 API Notification

Blog Post created by malderman on Feb 28, 2011

API Notification

Dear API Users,

A new update of QualysGuard®, version 6.18, will be available in production in approximately 30 days. This release is completely transparent to users and will require no scheduled downtime.

 

QualysGuard 6.18 includes a number of API enhancements. This notification provides an early preview of these API enhancements, allowing you to make any changes to automated scripts or code that utilize the following APIs:

Authentication API Updates for SNMPv2c and SNMPv3

For QualysGuard 6.18 updates were made to the SNMP scan authentication API to add support for SNMPv2c and SNMPv3. Users can now create and update authentication records for these newly supported SNMP versions. SNMP records created prior to this release are set to SNMPv1 by default.

 

The /api/2.0/fo/auth/snmp resource is used to manage SNMP authentication records. For this release changes were made to input parameters used to add or edit an SNMP record (action=create and action=update) and the SNMP authentication list DTD (auth_snmp_list_output.dtd).

PCI Flag Added to Asset Data Report

For QualysGuard 6.18 updates were made to the XML output for QualysGuard reports to reflect the PCI status for each vulnerability listed. A PCI flag value of “1” indicates that the vulnerability must be fixed to pass a PCI compliance scan. This information is shown in the <PCI_FLAG> element in the Asset Data Report DTD (asset_data_report.dtd).

Map Title Added to Map Report List

For QualysGuard 6.18 updates were made to the map report list API to include the title of the map report. This information is shown in the <TITLE> element in the Map report list DTD (map_report_list.dtd).

Compliance Policy Report XML

For QualysGuard 6.18 improvements were made to the policy editor and policy reporting. Updates were made to the compliance policy report XML & DTD (compliance_policy_report.dtd). The policy report XML is returned when you download a saved policy report using the Report Share API or the QualysGuard user interface.

Compliance Posture Information Output XML

For QualysGuard 6.18 improvements were made to the policy editor and policy reporting. Updates were made to the compliance posture information output XML & DTD (posture_info_list_output.dtd). The compliance posture information output XML is returned from an API request for compliance policy posture information.

 

Full details regarding these XML changes are available within the Qualys community at: https://community.qualys.com/docs/DOC-2153.

 

API release notes will be available to customers from within the Resources section of your QualysGuard account. To receive more information on QualysGuard 6.18, please visit the Qualys Community at https://community.qualys.com or contact your Technical Account Manager or Qualys' Technical Support Department at support@qualys.com.

 

We thank you for your continued support and look forward to continuously improving our services.

 

Qualys Customer Advocacy Group

Outcomes