Qualys - Add IP Addresses as Host Assets
  • 21 May 2023
  • 3 Minutes to read
  • Dark
    Light
  • PDF

Qualys - Add IP Addresses as Host Assets

  • Dark
    Light
  • PDF

Article Summary

Qualys - Add IP Addresses as Host Assets (Add IPs to Qualys Cloud Platform) action adds IP addresses as host assets to an existing asset group or to a new one.

Asset groups are logical groups of host assets, domain assets, and scanner appliances (if applicable). Asset groups can be based on importance, priority, location, or ownership.

NOTE

The Add IPs to Qualys Cloud Platform action supports IPv4 addresses only.

See Creating Enforcement Sets to learn more about adding Enforcement Actions to Enforcement Sets.

General Settings

  • Enforcement Set name (required) - The name of the Enforcement Set. A default value is added by Axonius. You can change the name according to your needs.
  • Add description - Click to add a description of the Enforcement Set. It is recommended to describe what the Enforcement Set does.
  • Run action on assets matching following query (required) - Select an asset category and a query. The Enforcement Action will be run on the assets that match the query parameters.
  • Action name (required) - The name of the Main action. A default value is added by Axonius. You can change the name according to your needs.
  • Configure Action Conditions - Toggle on to enter a condition statement. See Configuring Enforcement Action Conditions to learn more about condition statement syntax.

Additional Fields

These fields are optional.

  • Qualys Cloud Platform domain - The hostname of the Qualys API (for example, qualysapi.apps.qualys.com). For more details on how to determine your Qualys API URL, see Identify your Qualys platform.
  • User name and Password - The credentials for a user account that has the Required Permissions to add IP addresses as host assets to an existing asset group or to a new one.

Additional Fields

These fields are optional.

  • Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

  • HTTPS proxy - Connect the adapter to a proxy instead of directly connecting it to the domain.

  • Create asset group (required, default: False) - Choose whether to associate the IP address as a host asset to a new asset group.
    • If enabled, Axonius will create a new host asset (if not exist), a new asset group and will associate the host asset to the created group.
    • If disabled, Axonius will create a new host asset (if not exist) and will associate the host asset to an existing asset group, if specified.
  • Group name (optional, default: empty) - Specify the asset group name Axonius will add the IP address as a host asset.
    • If supplied, Axonius will add the IP address as a host asset to the specified asset group.
      • If the Create asset group is enabled and the specified group with that name already exists in Qualys, that asset group will be deleted and will be replaced by the new specified asset group name.
      • If the Create asset group is enabled, this field must be supplied. Otherwise, the action execution will fail.
    • If not supplied, Axonius will not associate the host asset to any asset group.
  • Use private IPs (required, default: True) - Choose whether to add private IP addresses to Qualys.
    • If enabled, Axonius will add private IP addresses to Qualys.
    • If disabled, Axonius will not add private IP addresses to Qualys.
  • Use public IPs (required, default: True) - Choose whether to add public IP addresses to Qualys.
    • If enabled, Axonius will add public IP addresses to Qualys.
    • If disabled, Axonius will not add public IP addresses to Qualys.
  • CIDR exclude list (optional, default: empty) - Specify a comma-separated list of CIDRs to be excluded.
    • If supplied, Axonius will not add to Qualys devices IP addresses in the IP range of the specified CIDRs.
    • If not supplied Axonius will add to Qualys devices IP addresses in any IP range.

Required Permissions

The value supplied in User Name must be associated with one of the following user roles and with the following permissions:

  1. Manager role with full scope.
  2. Unit Manager role with the following permissions:
    • "Add Assets" permissions.
    • Manage (create, edit, deletet, view) all assets in their own business unit.
NOTE

Users with other roles do not have permissions to add IP addresses.


For more details about other Enforcement Actions available, see Action Library.


Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.