...
Qualys as datasource
Qualys Breeze plugin
Deployment
Floating license management
Software asset management
Qualys as a vulnerability scanning provider
BYOL deployment
Cloudaware license
| Table of Contents |
|---|
Qualys As Datasource
Cloudaware is a CMDB service that supports AWS, Azure and GCE cloud providers. Cloudaware enhances CMDB inventory data using Qualys API.
For example, for every EC2, Azure and GCE instance, Cloudaware will use Qualys API to ascertain Last Scan Date of the instance in question. Using this example, CMDB users can built build a report of instances that are not getting scanned at all or have not been scanned in a long time.
Here is a complete list of fields and items that Cloudaware either extracts from Qualys or calculates based on the extracted data:
Last Scan DateLast Scan ResultCritical Vulnerabilities CountHigh Vulnerabilities CountMedium Vulnerabilities CountLow Vulnerabilities Count
Cloudaware enhances the following CMDB object types with data from Qualys:
...
When CMDB notices instances that have been terminated or stopped for over 24 hours, it will issue an asset de-registration request directly to Qualys API endpoint. Once server is restarted, Breeze will re-register Qualys agent upon boot.
...
Cloudaware offers vulnerability scanning as a services service (VSaaS). When subscribing for VSaaS, Cloudaware will ensure that all infrastructure gets scanned at least once on a weekly basis. Cloudaware VSaaS supports Qualys as vulnerability scanning provider. Breeze agent will automatically deploy and perform at least one scan every 7 days.
When subscribing to VSaaS, customers can bring their own license or leverage licenses provided by Cloudaware.
Permissions and Settings
If Qualys is acting as datasource only, Reader role is sufficient. However, if Cloudaware/Breeze is managing the agent deployment along with activation and de-activation, Cloudaware user needs to be given permissions to Install/Uninstall and Activate/Deactivate agents as shown here.
...
Cloudaware Setup
1. Log in to your Cloudaware account → Admin.
2. Find Qualys in the list of Security integrations. Click +Add.
...
3. Fill out the form:
...
4. The green light in 'Status' means that Qualys integration has been successfully added. If there is a red light, please contact support@cloudaware.com.
...