Hello everyone,

I wrote little shellscript which do exactly what I was asking for in my original post.

Just make sure you have account with enabled API extention, fill the username,password,appliance name, option profile and you are good to go.

Have nice day.

J.

##

# This is just a woking proof of concept script for testing mobile hosts.

#Simple script for scaning mobile users,this script is initiated by DHCP server.

#Work for Qualys EU, for US site please change the URL in qualysapi.qualys.eu to qualysapi.qualys.com

#run the script with parameters IP and MAC

#example:  qualys_test.sh 10.10.50.20 00:XX:XX:XX:XX:XX

#script stores records about last scan in "local cache" hosts.dat which is stored in same directory as a script.

#It does scan the mobile clients onece in 30 days, it possible to adjust this time by changing the +30 days value in DATUM30.

###

HOSTIP=$1

HOSTMAC=$2

#####################

# QUALYS API

#####################

# QualysGuard user name

QUNAME=YourQualysGuardUsername

# QualysGuard password

QPASSWD=YourQualysGuardPASSWORD

################

# Prametry

################

# Option Profile

QOP=YOUR_OPTION_PROFILE

# Qualys Scanner Appliance

QSA=YOU_APPLIANCE_NAME

# API command

runTEST= curl "https://"$QUNAME":"$QPASSWD"@qualysapi.qualys.eu/msp/scan.php?scan_title=API&ip="$HOSTIP"&option=$QOP&iscanner_name=$QSA&save_report=yes"  > /dev/null 2>&1 &

#############

ADATUM=$(date --date "`date +"%D"`" +%s)

DATUM30=$(date --date "`date +"%D"` +30 days" +%s)

DATUMPT=$(cat hosts.dat|grep $HOSTMAC|cut -d " " -f2|tr -d " ")

if [ -z $DATUMPT ];

then

#echo "New host, adding record into hosts.dat and initiating the scan"

echo "$HOSTMAC $DATUM30" >> hosts.dat

$runTEST

elif [ "$DATUMPT" -gt "$ADATUM" ];

then

#echo "Scan is not required for this host"

exit 1

else

echo "Scan is required for this host"

cat ./hosts.dat| awk 'BEGIN{OFS=FS=" "}$1=="'"$HOSTMAC"'"{$2="'"$DATUM30"'"}{print}' > ./tmp_hosts.dat; cp ./tmp_hosts.dat ./hosts.dat

$runTEST

fi