Qualys WAS

Qualys WAS is a web application scanning tool for identifying vulnerabilities in web applications.

Asset Types Fetched

• Aggregated Security Findings, SaaS Applications, Application Services, Domains & URLs

Before You Begin

Required Ports

• TCP port 443 (HTTPS)

Authentication Methods

Axonius authenticates with the Qualys WAS API using Basic Authentication (username and password).

APIs

Axonius uses the Qualys Web Application Scanning API. The following endpoints are called:

• POST /qps/rest/3.0/search/was/webapp - Retrieves web applications
• POST /qps/rest/3.0/search/was/finding - Retrieves vulnerability findings

Required Permissions

To use the adapter successfully:

• Make sure the WAS module is enabled
• The user account needs to have these permissions: Access Permission "API Access"
• The data fetched only includes findings in the user's scope

Supported From Version

Supported from Axonius version 6.1

Connecting the Adapter in Axonius

1. Navigate to the Adapter Catalog, search for Qualys WAS, and select the adapter.
2. Click Add Connection.
3. Provide the following parameters.

Required Parameters

1. Host Name or IP Address - The hostname or IP address of the Qualys WAS server.
2. User Name and Password - The credentials for a user account that has permission to fetch assets. For more information, see Get Started>Qualys user account.

1. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
2. HTTPS Proxy - Connect the adapter to a proxy instead of directly connecting it to the domain.
3. HTTPS Proxy User Name - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.
4. HTTPS Proxy Password - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

1. Enrich URL With DNS Lookup (default: disabled) - Enable to perform a DNS lookup on each web application domains and save the resolved IP address to the IP Address field for URL. Note that enabling this may increase fetch time.
2. Enrich Web Apps with Findings (default: enabled) - Enableto fetch vulnerability findings (parsed as Aggregated Security Findings) from the Qualys WAS API.
3. Fetch RepositoryVulnerabilities from Findings (default: enabled) - Enable to fetch repository vulnerabilities (parsed as Aggregated Security Findings) from the Qualys WAS API.

   ---

Related Enforcement Actions

Qualys WAS - Add or Remove Tags to Assets