I can perform searches based on known virtual environment subnets, or those assets perhaps with VM in the DNS machine name, but is there a QID detection to qualify a virtual desktop?
There are plenty of QIDs for specific virtualization packages. Are you looking for a particular virtualization software (e.g., Citrix)?
Hi Chris, i'd rather not disclose too much on a forum, but if you can point us at the QIDs for the most common/popular VM technologies, that would help.
Perhaps this thread could be converted into a support ticket?
many thanks, Tony
You can log into QualysGuard and do a knowledge-base search for whichever package you're using. If you're looking for something specific, feel free to PM me.
I bounced this topic off of Chris Farrow in our Product Management group. He said that identifying virtual machines is more of an asset identification issue than just providing content via either a QID or CID. When the hypervisor is doing its job, it is very hard to tell if a machine is virtual when you are just querying the OS. There are ways to get this information but it involves hardware queries, virtual center queries (at least for VMware), hypervisor queries and correlating that with what we find as the virtual machine OS.
VMware vSphere (ESX and supporting infrastructure) scanning support is currently being worked on by the engineering team. Once we gather all the right information, we will be able to publish content for both VM and Policy Compliance.
Was this question answered to your satisfaction?
Retrieving data ...