Jeff Leggett

Qualys Cloud Platform 2.33 (AM/WAF/CA) Notification 2

Blog Post created by Jeff Leggett Employee on May 23, 2018

A new release of Qualys Cloud Suite, Version 2.33, includes an updated API which is targeted for release in May 2018. The specific day will differ depending on the platform. See platform release dates on the Qualys Status page. This API notification provides an early preview into the coming API, allowing you to identify use cases that can leverage this updated API.

 

What’s New
Easily identify ignored WAS findings /qps/rest/3.0/search/was/finding
We have introduced a new element <isIgnored> to easily identify whether a WAS finding (detection) in the user’s scope is ignored or not.

 

HostAsset and Asset APIs show new Cloud Provider metadata for AWS, Azure and GCP

With this release Qualys Cloud Platform shows additional Cloud Provider metadata to users for Amazon AWS, Azure, and Google Cloud Platform. This asset metadata is collected from Vulnerability Scans (using VM), Compliance Scans (using PC or SCA), Cloud Agents and Data Connectors.

 

Schedule auto-update for appliances registered to a cluster
/qps/rest/2.0/create/waf/cluster
/qps/rest/2.0/update/waf/cluster
You can now use the cluster API to specify when the appliances registered with a cluster
get auto-updated. Specify days of the week and the start time. By default, auto-update is
enabled for all days of the week.

 

Validate XML/JSON payload
/qps/rest/2.0/create/waf/httpprofile
/qps/rest/2.0/update/waf/httpprofile
You can now use the HTTP Profiles API to enable XML/JSON parsing to validate that
transmitted payload is XML/JSON compliant. Parsing is not enabled by default.

 

Uninstall Cloud Agent using UUID
/qps/rest/2.0/uninstall/am/asset
/qps/rest/2.0/uninstall/am/hostasset
Cloud Agent uninstall API now allows you to specify the agent UUID to identify an agent
during uninstallation. Agent UUID can be specified in the request XML.

Outcomes