Log in to create and rate content, and to follow, bookmark, and share content with other members. Not a member? Join Now!

AnsweredAssumed Answered

Synchronisation between AssetView and Vulnerability Management?

Question asked by john nee on Jul 13, 2018
Latest reply on Jul 16, 2018 by Shyam Raj

Like • Show 1 Like1
Comment • 9

Hi Community,

I'm facing one supposedly simple question, but so far no direct answer found in this forum.

I have added a couple of <HostAsset>s with trackingMethod of IP in AssetView Modul, and several <IP>s, which are other than the addresses of the <HostAsset>s, in Vulnerability Management. Although scanning with authentication has been carried out, they are kept listed in one module, INvisible in the other module.

Questions:

1. Why are they not synchronized automatically?

2. How could I realize the following simple scenarios:

i. Upon adding one IP in Vulnerability Management, its HostAsset will be created in AssetView

ii. Upon adding a HostAsset in AssetView, this Host Asset will also available in Vulnerability Management

Any insights?

(Sorry for my poor English)

Johny

No one else has this question

Outcomes

9 Replies

DMFezzaReed Jul 13, 2018 8:55 AM
Mark Correct
Correct Answer
Johny,

1. How do you access Qualys?
US01: https://qualysguard.qualys.com/portal-front/module/vm/#/
US02: https://qualysguard.qg2.apps.qualys.com/portal-front/module/vm/#/
US03: https://qualysguard.qg3.apps.qualys.com/portal-front/module/vm/#/
EU01: https://qualysguard.qualys.eu/portal-front/module/vm/#/
EU02: https://qualysguard.qg2.apps.qualys.eu/portal-front/module/vm/#/
IN01: https://qualysguard.qg1.apps.qualys.in/portal-front/module/vm/#/
PCP: https://qualysquard.<customer_base_url>/portal-front/module/vm/#/

2. Within your subscription, do you run appliance-based scans, cloud agents, or a combination of both?

3. Did you add your assets to the subscription by logging into Vulnerability Management > Assets > Host Assets as noted in the image below?
Like • Show 0 Likes0
Actions
john nee Jul 13, 2018 9:34 AM
Mark Correct
Correct Answer
Debra,
1. I access EU01. <HostAsset>s have been added and activated using qualys.eu/qps/rest/2.0/, <IP>s thru qualys.eu/api/2.0/fo/asset/ip/?action=add
2. The executed scans should be appliance-based
3. After adding <IP>s, the new <IP>s will be automatically listed in the tab "Host Assets" (see "3" in your screenshot), however without ID. Actually the newly created <IP>s are not <HOST>s, but they are shown in "Host Assets". I'm also confused at this point.
1 person found this helpful
Like • Show 1 Like1
Actions
- DMFezzaReed @ john nee on Jul 13, 2018 9:41 AM
  Mark Correct
  Correct Answer
  Are you able to:
  search the IP addresses within Asset Search,
  select an IP from the results, and,
  view the associated results data?
  Like • Show 0 Likes0
  Actions
  - john nee @ DMFezzaReed on Jul 13, 2018 10:49 AM
    Mark Correct
    Correct Answer
    Thank you for the prompt answers!
    I'm able to make search in the given section. However the newly created <IP>s don't show up in the search results. Could you tell me, what are the preconditions / requirements for a <IP> to be an <Asset> or <HOST>? Must the <IP> be "live" && have valid dns && netbios && scanned? What are the requirements for a <HOST> in Vulnerability Management visible in AssetView, and vice versa? Perhaps links to manuals?
    Like • Show 0 Likes0
    Actions
    - DMFezzaReed @ john nee on Jul 13, 2018 2:11 PM
      Mark Correct
      Correct Answer
      Johny,
      
      I think our self-paced training would be a good place to begin: Training and Certification | Qualys, Inc.
      
      If you don't have time for the full course, you may want to watch the following three (3) training videos to learn the step-by-step process for managing assets within your subscription:
      Qualys - Self-Paced Class: Vulnerability Management Assets Overview on Vimeo
      Qualys Vulnerability Management Extended Mapping on Vimeo
      Qualys Vulnerability Management - Host Assets Account Setup on Vimeo
      
      If training is not an option, then I recommend contacting your technical account manager (TAM) for the level of support needed to get you moving forward.
      
      Please let me know if I can be of any further assistance.
      Like • Show 0 Likes0
      Actions
      - john nee @ DMFezzaReed on Jul 16, 2018 12:36 AM
        Mark Correct
        Correct Answer
        Bebra,
        thanks alot for the suggestion of the video tutorials! All the actions (creating assets, mapping etc.) have been already carried out, scannings have been also ensued executed with the status of "Finished", the Assets created in VM are however still unavailable in AV.
        1 person found this helpful
        Like • Show 1 Like1
        Actions
Shyam Raj Jul 13, 2018 8:03 PM
Mark Correct
Correct Answer
Johny,

1. Why are they not synchronized automatically?
The sync between VM and AssetView is automatic and requires no user action. Usually, it happens pretty quick.

2. How could I realize the following simple scenarios:
i. Upon adding one IP in Vulnerability Management, its HostAsset will be created in AssetView
When you add an IP in the VM module, it won't show up in the AssetView module until it has been scanned.

ii. Upon adding a HostAsset in AssetView, this Host Asset will also available in Vulnerability Management
Can you explain what you mean by the above? Where are you adding host assets in the AssetView module?
1 person found this helpful
Like • Show 1 Like1
Actions
- john nee @ Shyam Raj on Jul 16, 2018 12:42 AM
  Mark Correct
  Correct Answer
  Shyam,
  thank you very much for the answers!
  
  2. How could I realize the following simple scenarios:
  i. Upon adding one IP in Vulnerability Management, its HostAsset will be created in AssetView
  When you add an IP in the VM module, it won't show up in the AssetView module until it has been scanned.
  What / which settings could be wrongly configured, in case an IP in VM module is added, and has been scanned (even mapped), but still doesn't show up in AV?
  
  ii. Upon adding a HostAsset in AssetView, this Host Asset will also available in Vulnerability Management
  Can you explain what you mean by the above? Where are you adding host assets in the AssetView module?
  I'm trying to use "qualys.eu/qps/rest/2.0/" to add/create a <HostAsset> in AssetView module.
  1 person found this helpful
  Like • Show 1 Like1
  Actions
  - Shyam Raj @ john nee on Jul 16, 2018 8:09 AM
    Mark Correct
    Correct Answer
    What / which settings could be wrongly configured, in case an IP in VM module is added, and has been scanned (even mapped), but still doesn't show up in AV?
    If the IP has been added to the VM module and has been scanned, it will automatically show up in the AssetView module. At times, it could take a while, but it's automatic.
    This does not include map scans.
    
    I'm trying to use "qualys.eu/qps/rest/2.0/" to add/create a <HostAsset> in AssetView module.
    
    I see what you mean. When you add a new host asset, it's added to the VM module (and not the AssetView module).
    1 person found this helpful
    Like • Show 1 Like1
    Actions

Synchronisation between AssetView and Vulnerability Management?

Outcomes

Related Content

Recommended Content