Contents x
    Qualys - Add IP Addresses to Asset Group
    • 28 Nov 2024
    • 3 Minutes to read
    • Print
    • Dark
      Light
    • PDF
    Contents

    Qualys - Add IP Addresses to Asset Group

    • Updated on 28 Nov 2024
    • 3 Minutes to read
    • Print
    • Dark
      Light
    • PDF
    Article summary

    Qualys - Add IP Addresses to Asset Group (Add IPs to Qualys Cloud Platform) action adds IP addresses to an existing asset group or to a new one.

    Asset groups are logical groups of host assets, domain assets, and scanner appliances (if applicable). Asset groups can be based on importance, priority, location, or ownership.

    NOTE

    This action supports IPv4 addresses only.

    See Creating Enforcement Sets to learn more about adding Enforcement Actions to Enforcement Sets.

    Note:

    Required Fields

    These fields must be configured to run the Enforcement Set.

    • Action name - The name of this Enforcement Action. The system sets a default name. You can change the name.
    • Configure Dynamic Values - Toggle on to enter a Dynamic Value statement. See Creating Enforcement Action Dynamic Value Statements to learn more about Dynamic Value statement syntax.

    • Use stored credentials from Qualys Cloud Platform adapter - Select this option to use credentials from the adapter connection. By default, the first connection is selected.
      • When you select this option, the Select Adapter Connection drop-down becomes available. Select the adapter connection to use for this Enforcement Action.
    Note:

    To use this option, you must successfully configure a Qualys Cloud Platform adapter connection.

    Additional Fields

    These fields are optional.

    Connection and Credentials

    When Use stored credentials from the adapter is toggled off, some of the connection fields below are required to create the connection, while other fields are optional.

    • Qualys Cloud Platform domain - The hostname of the Qualys API (for example, qualysapi.apps.qualys.com). For more details on how to determine your Qualys API URL, see Identify your Qualys platform.
    • User name and Password - The credentials for a user account that has the Required Permissions to add IP addresses as host assets to an existing asset group or to a new one.
    • Verify SSL (optional) - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
    • HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.
    • Create asset group - When selected, Axonius will create a new host asset (if it does not exist), a new asset group, and will associate the host asset to the created group. When not selected, Axonius associate the new host asset (if is does not exist) to an existing asset group, if specified in Group name.
    • Group name - Specify the asset group name to which Axonius will add the IP address as a host asset. When no value is given, Axonius will not associate the host asset to any asset group. When Create asset group is enabled, this field must be supplied.
      • When Create asset group is enabled and the specified group with that name already exists in Qualys, Qualys will add the new IPs to the group.
    • Use private IP addresses - Choose whether to add private IP addresses to Qualys.
    • Use public IP addresses - Choose whether to add public IP addresses to Qualys.
    • CIDR exclude list - Specify a comma-separated list of CIDRs to be excluded. Axonius will not add to Qualys devices IP addresses in the IP range of the specified CIDRs.
    • Only send perferred IPs - When selected, the action will use only the preferred IPs in the IP network.
    • IP Network - The IP address of the network that all the IPs in the related query should belong.
    • User Host Name - Select this to add the preferred hostname to the specified group.
    • Fail when no IP added - Select this to enable the following behavior: when the Enforcement Action does not find any IP address to add, instead of a success status, the Action status will be "Failed", and it will display the message "No IPs were added to asset group".

    Required Permissions

    The value supplied in User Name must be associated with one of the following user roles and with the following permissions:

    1. Manager role with full scope.
    2. Unit Manager role with the following permissions:
      • "Add Assets" permissions.
      • Manage (create, edit, delete, view) all assets in their own business unit.
    NOTE

    Users with other roles do not have permissions to add IP addresses.

    For more details about other Enforcement Actions available, see Action Library.

    Was this article helpful?
    What's Next