Introduction

The Safe integration with Qualys VMDR ingests assets and vulnerabilities. This guide provides a step-by-step procedure to configure this integration in SAFE.

With this integration, you can ingest data from both Qualys VMDR and Qualys CSAM.

Qualys Vulnerability Management, Detection & Response (VMDR) is a comprehensive cloud-based vulnerability management solution that continuously discovers, assesses, and prioritizes vulnerabilities across hybrid IT environments. The Safe integration with Qualys VMDR ingests asset inventories and associated vulnerability data discovered by Qualys VMDR, including risk-based prioritization through TruRisk scoring and threat intelligence feeds.

Qualys CyberSecurity Asset Management (CSAM) is an advanced cloud-based asset discovery and inventory solution that continuously identifies, catalogs, and assesses all IT assets across internal and external attack surfaces. Safe integration with Qualys CSAM ingests comprehensive asset inventories and associated risk factors discovered by Qualys CSAM, including hardware, software, IoT/OT devices, and external-facing assets with their security posture and business context.

Note

To ingest data from Qualys VMDR and Qualys CSAM, ensure that the “Enable CASM” checkbox is selected on the configuration page. By default, both checkboxes are enabled.

What data does this integration fetch?

• Asset Type Fetched: Infrastructure devices such as servers, virtual machines, desktops, laptops, networking, and IoT.

• Data Fetched: Asset names, hardware information, CPU information, interface information (MAC address, IP address), OS information, BIOS information, system information, software information, vulnerability information.

Prerequisites and Permissions

To configure the Safe connector, you must have a Qualys VMDR user account with the appropriate roles and permissions. These credentials are required for completing the configuration process.

To configure, you need the following connection details:

• Qualys API Gateway URL: Refer to the Qualys official document to identify the URL.

• Qualys API Server URL: Refer to the Qualys official document to identify the URL.

• Qualys Account Username and Password: The user account must have the permissions listed below.

Required Role Name(s)/Permissions

• Manager role with full scope

• Reader role with full scope

• Non-manager role with the following permissions:

  • Access Permission: API Access

  • Access Permission: GUI Access (for initial setup)

  • Asset Management Permission: Read Asset

  • Requested assets within scope

Note

The user account must have access to the "All" asset group or specific asset groups that contain the assets you want to import into Safe.

Configure Qualys VMDR in Safe

1. Log in to SAFE as an admin and navigate to Integrations.

2. Click the + icon in the top-right corner of the page, then search for Qualys VMDR.

3. Enter the integration name.

4. Enter the Qualys API Gateway URL, Qualys API Server URL, Qualys Account Username, and Qualys Account Password.

5. Asset Filter by Tags: Enter Tags separated by a comma to filter assets. Only assets with matching tags will be imported from Qualys VMDR.
   Make sure the checkbox is checked to enable Tag-based filtering.

6. Auto Sync: Defines the interval in which SAFE will automatically run a sync. Default is 7 days.

7. Asset last seen days filter: Add the number of days you want to consider since the asset was last seen. Default is 30 days.

8. Click Test Connection after entering the credentials.

9. Select or deselect the following options based on your business requirements:

   1. Ingest Potential Vulnerabilities

   2. Enable VMDR

   3. Enable CSAM

   4. Enable Tag-Based Filtering

10. Once the connection is verified, click Save.

11. Once the integration is saved, click on Sync Now to trigger an on-demand sync.

View Results

1. Go to the Integrations page and open the configured Qualys VMDR integration.

2. On the details page, the Vulnerability tab displays the list of vulnerabilities, and the Asset tab displays the list of assets.

API Details

FAQs

Q: How frequently does SAFE sync data from Qualys VMDR?

A: Sync frequency depends on the auto sync frequency configured for the integration.

Q: What happens if API rate limits are exceeded?

A: SAFE automatically manages rate limits by pausing and retrying API calls after the designated wait time.

Q: Can historical data be re-ingested?

A: Yes, historical data can be re-ingested by re-running the integration.

To check sync status and errors for this integration, see Integration History.

Did this article help?

Let us know by leaving a star rating at the top of this article.