Part 1: Activating Asset Management
This is part 1 of a multi-part tutorial introducing QualysGuard Asset Management and Dynamic Tagging. In these tutorials, we will guide you through the activation and setup of the new tagging features, and demonstrate some best practices to get the most value out of these powerful features.
Activating and Accessing the Module
QualysGuard Asset Management and Dynamic Tagging is available free of charge to QualysGuard subscribers. However, to gain access to it, you MUST request the activation through your Qualys Technical Account Manager or Support representative. Activation time is typically 24 to 48 hours. Once this is done you will see a new module appear in the Module Picker – Asset Management (ASSET).
Before the existing assets will transfer from the other modules (i.e. Vulnerability Management) and be available for tagging, the new data security model must be enabled. The new data security model allows the tagging engine to process information from your scans and assign applicable tags. Only manager roles are allowed to accept the new data security model.
To enable the new data security model go to the VM module, under Users > Setup > Security > and select “I accept the new data security model”.
Validating All Assets are Initialized
Once you have enabled the new data security model, a background process will begin which will make your assets available for tagging. This process can take from several seconds to several minutes depending on how many hosts are in your subscription.
Go to the VM module, under Help > Account Info > VM Summary, note the Unique Hosts Scanned number. In this example, it is 82874.
Next, go to the ASSET module and notice the “total assets” number at the upper right of the Asset List. In this example it is 438. As the background process progresses this number will grow to eventually match the Unique Hosts Scanned number from the above screen shot.
Asset Management and Tagging Interface
You can access the Asset Management and Tagging interface by selecting the Asset Management (ASSET) from the Module Picker.
First click the small blue tab on the upper left of the asset list to show the tag tree.
The Asset Management and Tagging Interface includes three main sections:
- Search Box: This is a Google-like interface for searching for assets. You can use simple search terms or complex searches with AND’s and OR’s and NOT’s. This advanced functionality will be explored in a later posting.
- Tag Tree: This shows all the tags and allows for drag and drop organization of those tags into hierarchies. It also allows to drag and drop tags onto assets.
- Asset List: This lists all the assets in the subscription (In pages of 20), and can be filtered by the Search Box.
All assets that you have scanned (lifetime of subscription) are transferred into the Asset Management and Tagging module. The assets appear in a list with their host name, O/S, IP address and any assigned tags. The asset groups and business units from the VM module are imported and you should see them on the assets in the asset list.
It should be noted that if you have only recently activated the asset tagging module it could take several minutes to several hours for the all the assets to appear in the interface. When they do appear you will see the host name, operating system installed, IP address and tags assigned.
It’s also important to note that only asset (lifetime of the subscription) will be listed.
Hovering over each asset in the asset list, you will notice a small gray arrow to the right of the asset name. This is called the Quick Actions Menu. Clicking the Quick Actions Menu you will see an action for “View host details”, which will open a screen listing of all asset information, open ports, installed software, detected vulnerabilities for a system and assigned tags.
When you want to return to the asset list click on the Back to search results.
Once you feel comfortable that your Asset Management and Tagging module is activated and the correct number of assets transferred, it’s time to do some organizing of the Tags which are already available through the automatic importing of your "Asset Groups" and "Business Units."
In part 2, we will guide you through the initial organization of your own tags.