Add IPs to Qualys Cloud Platform
  • 3 Minutes To Read
  • Print
  • Share
  • Dark
    Light

Add IPs to Qualys Cloud Platform

  • Print
  • Share
  • Dark
    Light

The Add IPs to Qualys Cloud Platform action adds IP addresses as host assets to an existing asset group or to a new one.

Asset groups are logical groups of host assets, domain assets, and scanner appliances (if applicable). Asset groups can be based on importance, priority, location, or ownership.

NOTE

The Add IPs to Qualys Cloud Platform action supports IPv4 addresses only.


To configure the Add IPs to Qualys Cloud Platform action, from the Action Library, click Update VA Coverage, and then click Add IPs to Qualys Cloud Platform.
image.png

Connection Settings

  1. Qualys Cloud Platform Domain (required) - The hostname of the Qualys API (for example, qualysapi.apps.qualys.com). For more details on how to determine your Qualys API URL, see Identify your Qualys platform.
  2. User name and Password (required) - The credentials for a user account that has the Required Permissions to add IP addresses as host assets to an existing asset group or to a new one.
  3. Verify SSL (required, default: False) - Verify the SSL certificate offered by the host supplied in Qualys Cloud Platform Domain. For more details, see SSL Trust & CA Settings.
    • If enabled, the SSL certificate offered by the host will be verified against the CA database inside of Axonius. If it fails validation, the connection will fail with an error.
    • If disabled, the SSL certificate offered by the host will not be verified against the CA database inside of Axonius.
  4. HTTPS proxy (optional, default: empty) - A proxy to use when connecting to Qualys Cloud Platform Domain.
    • If supplied, Axonius will utilize the proxy when connecting to the host defined for this connection.
    • If not supplied, Axonius will connect directly to the host defined for this connection.

Action Settings

  1. Create asset group (required, default: False) - Choose whether to associate the IP address as a host asset to a new asset group.
    • If enabled, Axonius will create a new host asset (if not exist), a new asset group and will associate the host asset to the created group.
    • If disabled, Axonius will create a new host asset (if not exist) and will associate the host asset to an existing asset group, if specified.
  2. Group name (optional, default: empty) - Specify the asset group name Axonius will add the IP address as a host asset.
    • If supplied, Axonius will add the IP address as a host asset to the specified asset group.
      • If the Create asset group is enabled and the specified group with that name already exists in Qualys, that asset group will be deleted and will be replaced by the new specified asset group name.
      • If the Create asset group is enabled, this field must be supplied. Otherwise, the action execution will fail.
    • If not supplied, Axonius will not associate the host asset to any asset group.
  3. Use private IPs (required, default: True) - Choose whether to add private IP addresses to Qualys.
    • If enabled, Axonius will add private IP addresses to Qualys.
    • If disabled, Axonius will not add private IP addresses to Qualys.
  4. Use public IPs (required, default: True) - Choose whether to add public IP addresses to Qualys.
    • If enabled, Axonius will add public IP addresses to Qualys.
    • If disabled, Axonius will not add public IP addresses to Qualys.
  5. CIDR exclude list (optional, default: empty) - Specify a comma-separated list of CIDRs to be excluded.
    • If supplied, Axonius will not add to Qualys devices IP addresses in the IP range of the specified CIDRs.
    • If not supplied Axonius will add to Qualys devices IP addresses in any IP range.

Required Permissions

The value supplied in User Name must be associated with one of the following user roles and with the following permissions:

  1. Manager role with full scope.
  2. Unit Manager role with the following permissions:
    • "Add Assets" permissions.
    • Manage (create, edit, deletet, view) all assets in their own business unit.
NOTE

Users with other roles do not have permissions to add IP addresses.



For more details on other Enforcements available actions, see Action Library.
For more details on Enforcement Set configuration, see Enforcement Set configuration.

Was This Article Helpful?