Starting to see this more and more.
Running a successful authenticated scan, the Qualys AV name is different then the reported Netbios name. Anyone know why this happens and how to avoid it?
The Asset Name is set when the asset is created and it does not change unless the customer changes it. If the DNS or NetBIOS changed at some point, that would explain the situation in that screenshot.
Are you running authenticated scans only, not getting this data from the Cloud Agent?
Do you have "agentless tracking" activated and enabled?
Hi , yes we are running authenticated scans. This device does NOT have Cloud agents installed. Yes we use agent less tracking.
Any workaorund to get AV name and DNS name in sync again???
Otherwise AV search is useless in dynamic environements....
Maybe purging asset group hosts before scanning could solved the problem?
But purging will also cause loss of all historical scan result data and all trendlines of the assets. Not an option.
For Dynamic environments you might want to consider deploying Cloud Agent
Cloud Agent | Qualys, Inc.
not an option at this customer environment ...
I'm still wondering in which use-case I would like to create "custom asset names". Ok this is "works-as-designed", but there should be an option to have the names in sync with DNS/NetBios names even when "just" scanning via authentication records.
Are you using IP, DNS, or NetBIOS tracking on this segment?
If IP tracking, please read this article: Understanding IP, DNS, and NetBIOS Tracking and Scan by Hostname
using DNS tracking at this customer...
If you are using DNS tracking and scanning by IP, e.g. scanning a CIDR block, then the name along with all other data on the asset is updated during scan data processing. The DNS name for an IP based scan is the PTR record, NetBIOS name is retrieved from the host directly.
Retrieving data ...