Having difficulty configuring a Qualys WAS application because the site actually contains two FQDN's.
Login is done on:
but within this site there are some pages which are in HTTPS, but on a different FQDN:
while others are just on staging.mysite.com but selecting the option "Limit to sub-directories of the Web Application URL" won't scan the different FQDN because they are in a different path.
Is it better just to list all the HTTPS pages explicitly or is there a different way I should be doing this.
Thanks in advance for any assistance.
The option "Follow links in a specific subdomain" is the one you should use. You can specify the '.staging.mysite.com' subdomain. If there are other hosts in that subdomain you want to exclude - use a blacklist regex.
Hope this helps
Retrieving data ...