Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Info

Qualys is a cloud-based solution that detects vulnerabilities on all networked assets, including servers, network devices (e.g. routers, switches, firewalls, etc.), peripherals (such as IP-based printers or fax machines) and workstations.

logo rgb_sign dark (3).pngImage Added To see how Cloudaware seamlessly integrates with Qualys in action, request a demo.

Cloudaware CMDB and Breeze Agent support Qualys Vulnerability Scanning Service. The integration supports several distinct use cases:

  • Qualys as datasource

  • Qualys Breeze plugin

    • Deployment

    • Floating license management

    • Software asset management

  • Qualys as a vulnerability scanning provider

    • BYOL deployment

    • Cloudaware license

Table of Contents

Qualys As Datasource

Cloudaware is a CMDB service that supports AWS, Azure and GCE cloud providers. Cloudaware enhances CMDB inventory data using Qualys API.

...

Qualys Breeze Plugin

Cloudaware Breeze is an optional agent that customers can deploy to cloud compute, virtual and on-prem instances. Cloudaware uses Breeze agent data to enhance CMDB data with operating system level, data about installed packages, patches, services, users and performance metrics.

Breeze Agent has several capabilities in regards to Qualys:

  1. Discover and interrogate Qualys agent state and version. Qualys is a supported software in Breeze’s software asset management capability. Using Breeze agent data, CMDB users can create software asset inventory reports showing which versions of Qualys are installed. In addition, Breeze catalogs the state of the Qualys agent - whether it is running or not.

  2. Install/Uninstall/Configure

...

  1. Qualys agent. Breeze Agent, when deployed in DevOps mode, can not only interrogate state of pre-existing Qualys agent, but to install and configure as well. If Breeze detects that agent is corrupt or missing: not starting or otherwise malfunctioning, it will perform clean reinstall of the Qualys agent to enforce desired state. Breeze supports deployment of Qualys Agent on all Breeze supported operating systems.

License Management

Breeze agent working in coordination with CMDB will manage Qualys Agent registration and de-registration processes. During registration process CMDB will furnish Breeze Agent with Qualys registration keys based on the attributes of the instance where Breeze is running, such as cloud provider account ID, VPC or application name.

...

If Qualys is acting as datasource only, Reader role is sufficient. However, if Cloudaware/Breeze is managing the agent deployment along with activation and de-activation, Cloudaware user needs to be given permissions to Install/Uninstall and Activate/Deactivate agents as shown here.

...

Cloudaware Setup Setup

1. Log in to your Cloudaware account → Admin.

2. Find Qualys in the list of Security integrations. Click +Add.

...

3. Fill out the form:

...

4. The green light in 'Status' means that Qualys integration has been successfully added. If there is a red light, please contact support@cloudaware.com.

...