From your scripting server, run the Qualys API query against your Qualys subscription to collect relevant data. Have your script parse and reformat the response data from Qualys into your preferred Jira format. Send reformatted Qualys data to Jira API to create a new ticket.
Full Answer
How does the stillsecure and Qualys integration work?
Using the Qualys connector, organizations can easily import devices scanned by Qualys into VAM for management. Through the integration, joint StillSecure and Qualys customers can better manage their organization’s risk by proactively identifying, tracking, and managing the repair of critical network vulnerabilities.
Why choose Qualys for vulnerability management?
With the most accurate, comprehensive and easily deployed scanning available, Qualys provides the best vulnerability management solution to support your brand, your customers and your stakeholders.
What can Qualys APIs do for You?
Easy to use, efficient and open XML APIs enable developers to seamlessly integrate the Qualys security and compliance suite into their own applications. Qualys integration with IDS/IPS solutions provides customers with an automated way to adjust severity level of incident alerts based on host context information provided by Qualys.
How does intelligent compliance work with Qualys?
Together with Qualys, the Intelligent Compliance joint solution addresses the gap through a combination of security and compliance audit data from Qualys Vulnerability Management (VM) with the associated action from BMC BladeLogic Server Automation to remediate the vulnerability.
See more
Find an integration partner
Qualys integration with IDS/IPS solutions provides customers with an automated way to adjust severity level of incident alerts based on host context information provided by Qualys.
Why partner with us?
With the most accurate, comprehensive and easily deployed scanning available, Qualys provides the best vulnerability management solution to support your brand, your customers and your stakeholders.
See for yourself. Try Qualys for free
Start your free trial today. No software to download or install. Email us or call us at 1 (800) 745-4355.
What is Qualys certified for?
Qualys certifies the two latest Agent releases for new operating systems and their updates. While not explicitly certified, all Agent versions that are not End-of-Service should also support these operating systems.
Why does Qualys fail?
The Qualys certification uses SHA2-512 so any validation against that certification will fail because the platform doesn't have the algorithm to validate the certification installed or to install the certification. Hotfixes must be installed to add the necessary SHA2-256/318/512 support to the system.
What port is Qualys Cloud Platform?
Your hosts must be able to reach your Qualys Cloud Platform (or the Qualys Private Cloud Platform) over HTTPS port 443. Go to Help > About to see the URL your hosts need to access.
What is Qlys cloud?
Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of cloud-based security and compliance solutions. The Qualys Cloud Platform and its integrated apps help businesses simplify security operations and lower the cost of compliance by delivering critical security intelligence on demand and automating the full spectrum of auditing, compliance and protection for IT systems and web applications.
Quickly find hosts by IP
Click on the Results tab to view hosts by IP address. Then click any IP to highlight it in the map.
Switch to list view anytime
Use the toggle in the top, right corner to switch from radial view (the default) to a list view.
Tell me about the map images
Each map image represents a type of device (host, router, server, etc) and its operating system.
Getting Started
Due to the high community demand for custom Jira integrations, this write-up is to guide you through best-practice architecture for scripting your own custom integration between Qualys and Jira.
Technical Requirements
Note: It will be helpful to work with an internal Jira contact to determine how Jira is configured within your environment (cloud vs on-prem, setup to open tickets from emails, etc) and assist with Jira API calls.
High-level Integration Logic Overview
From your scripting server, run the Qualys API query against your Qualys subscription to collect relevant data.
Policy Compliance (PC) Detailed Workflow
You can find additional details by going to the PC API Qualys Integration with Google Cloud Security Command Center under the "Compliance Posture Information" section in the table of contents.
Purpose
This is a community driven document to demonstrate examples of how to connect to the Qualys API using various platforms.
Go Language Example
Go lends itself very well to Qualys’ REST based API’s - it includes builtin library support for HTTP and XML parsing. Further it’s built in concurrency support will make multi threaded apps easy to use as well. Here’s an initial example of using Go with the Asset Management API’s.
Groovy, httpbuilder's RESTClient
This open source package assists in making calls to all API versions. HTTPBuilder
Perl, LWP
The open source library assists in making calls to all API versions. LWP
Postman (Mac, Windows, or Linux)
This native Postman application speeds up development by adding a user interface.
Virtual Appliance Security Review using MiFi Configuration
In this document, a MiFi configuration refers to a specific way to install and use a Qualys Virtual Scanner Appliance running on a consultant’s laptop.
Security Review
The Qualys Scanner Appliance is packaged as a network appliance, pre-installed with Scanner Appliance software, and pre-configured for ease of installation and deployment within an enterprise.
Scanning Performance using MiFi Configuration
When a laptop is configured and setup to use the MiFi for Internet connectivity, the consultant should expect the same scanning performance as using a regular Internet connection.
