Jeff Leggett

Qualys Cloud Platform v8.19 (VM/PC) API notification 2

Blog Post created by Jeff Leggett Employee on Apr 22, 2019

A new release of Qualys Cloud Platform v8.19 (VM,PC) includes an updated API which is targeted for release in May 2019. The specific day will differ depending on the platform. See platform release dates on the Qualys Status page. This API notification provides an early preview into the coming API, allowing you to identify use cases that can leverage this updated API.


What’s New
Sybase Authentication - Password Encryption and Auto Discover Databases
/api/2.0/fo/auth/sybase/
This release introduces 2 new options for Sybase authentication - Password Encryption and Auto Discover Databases.

Password Encryption - Enable this option when your Sybase database instance requires an encrypted password for successful login. If password encryption is required and you do not enable this option then authentication will fail.

Auto Discover Databases - Enable this option and we'll find all Sybase database names on each host for you. This means you no longer have to create a separate Sybase record for each database name. Create one record with Auto Discover Databases enabled to authenticate to multiple databases on the same host.

 

PC - New MS Exchange Server Authentication API
/api/2.0/fo/auth/
Microsoft Exchange Server authentication is now supported for compliance scans. The new MS Exchange Server Authentication API (api/2.0/fo/auth/ms_exchange/) lets you list, create, update and delete MS Exchange Server authentication records. User permissions for this API are the same as other authentication record APIs. Note that the API supports authentication record creation only for MS Exchange Server installed on Windows.

 

New Support for Microsoft Azure Key Vault
/api/2.0/fo/auth/windows/
/api/2.0/fo/auth/unix/
/api/2.0/fo/auth/ms_sql/
/api/2.0/fo/auth/mysql/
/api/2.0/fo/auth/mariadb/
/api/2.0/fo/auth/mongodb/
/api/2.0/fo/auth/oracle/
/api/2.0/fo/auth/postgresql/
This new vault type can be used to retrieve authentication credentials from an Azure key vault. We updated the authentication vault API (create, update, list, view) and the authentication record API (create, update, list) to support the new vault type.

Outcomes