Qualys - Add Tags to Host Asset
  • 28 May 2023
  • 3 Minutes to read
  • Dark
    Light
  • PDF

Qualys - Add Tags to Host Asset

  • Dark
    Light
  • PDF

Article Summary

Qualys - Add Tags to Host Asset adds a specified list of tags to each device entity retrieved from the saved query supplied as a trigger (or to devices selected in the asset table) that is a host asset in Qualys.

See Creating Enforcement Sets to learn more about adding Enforcement Actions to Enforcement Sets.

General Settings

  • Enforcement Set name (required) - The name of the Enforcement Set. A default value is added by Axonius. You can change the name according to your needs.
  • Add description - Click to add a description of the Enforcement Set. It is recommended to describe what the Enforcement Set does.
  • Run action on assets matching following query (required) - Select an asset category and a query. The Enforcement Action will be run on the assets that match the query parameters.
  • Action name (required) - The name of the Main action. A default value is added by Axonius. You can change the name according to your needs.
  • Configure Dynamic Values - Toggle on to enter a Dynamic Value statement. See Creating Enforcement Action Dynamic Value Statements to learn more about Dynamic Value statement syntax.

Required Fields

These fields must be configured to run the Enforcement Set.

  • Use stored credentials from the Qualys Cloud Platform adapter - Select this option to use the first connected Qualys Cloud Platform adapter credentials.
    NOTE
    To use this option, you must successfully configure a Qualys Cloud Platform adapter connection.
  • Tags - Specify at least one new or existing tag in Qualys to be associated with each of the host assets in Qualys. Tag name is case sensitive.
    NOTE

    If Axonius will fail to create a tag or add tags to a host asset, Axonius will roll back the entire action and will fail it.

  • Instance Name - The Axonius node to use when connecting to the specified host. For more details, see Connecting Additional Axonius Nodes.

Additional Fields

These fields are optional.

  • Qualys Cloud Platform Domain (optional, default: empty) - The hostname of the Qualys API (for example, qualysapi.apps.qualys.com). For more details on how to determine your Qualys API URL, see Identify your Qualys platform.

    NOTE
    If Use stored credentials from the Qualys Cloud Platform adapter is disabled, this field is required.
  • User name and Password (optional, default: empty) - The credentials for a user account that has the Required Permissions to add a specified list of tags to each host asset in Qualys.

    NOTE
    If Use stored credentials from the Qualys Cloud Platform adapter is disabled, this field is required.
  • Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

  • HTTPS proxy - Connect the adapter to a proxy instead of directly connecting it to the domain.

  • Parent tag name (optional, default: empty) - Associate a Qualys tag as a parent tag of all the specified tags. Tag name is case sensitive.

    • If supplied, Axonius will add specified tag as a parent tag of all the specified tags.
    • If not supplied, Axonius will not set any parent tag for the specified tags.
    NOTE

    The specified tag must exist in Qualys. If it does not exist in Qualys, Axonius will fail to run the action.

Required Permissions

The value supplied in User Name must be associated with one of the following user roles and with the following permissions:

  1. Managers with full scope
  2. Other roles with the following permissions:
    • Desired host assets in scope.
    • Access to the API.
    • Tag permission: "Create User Tag", "Delete User Tag"
    • Asset Management permission: "Read Asset", "Update Asset".

To enable user access to the API:

  1. From Qualys, click the user button next to the Logout -> User Profile.

    image.png

  2. The Edit User screen opens. Click User Role -> select the API checkbox to enable API Access.
    image.png

  3. Save changes.


For more details about other Enforcement Actions available, see Action Library.


Was this article helpful?

Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.