Qualys - Add Tags to Host Asset
  • 22 Sep 2024
  • 2 Minutes to read
  • Dark
    Light
  • PDF

Qualys - Add Tags to Host Asset

  • Dark
    Light
  • PDF

Article summary

Qualys - Add Tags to Host Asset adds a specified list of tags to each device entity retrieved from the saved query supplied as a trigger (or to devices selected in the asset table) that is a host asset in Qualys.

See Creating Enforcement Sets to learn more about adding Enforcement Actions to Enforcement Sets.

Note:

General Settings

  • Action name - The name of this Enforcement Action. The system sets a default name. You can change the name.
  • Configure Dynamic Values - Toggle on to enter a Dynamic Value statement. See Creating Enforcement Action Dynamic Value Statements to learn more about Dynamic Value statement syntax.

  • Use stored credentials from the Qualys Cloud Platform adapter - Select this option to use the first connected Qualys Cloud Platform adapter credentials.
    NOTE
    To use this option, you must successfully configure a Qualys Cloud Platform adapter connection.

Required Fields

These fields must be configured to run the Enforcement Set.

  • Tags - Specify at least one new or existing tag in Qualys to be associated with each of the host assets in Qualys. Tag names are case sensitive.
    NOTE

    If Axonius will fail to create a tag or add tags to a host asset, Axonius will roll back the entire action and will fail it.

  • Compute Node - The Axonius node to use when connecting to the specified host. For more details, see Connecting Additional Axonius Nodes.

Additional Fields

These fields are optional.

  • Qualys Cloud Platform Domain - The hostname of the Qualys API (for example, qualysapi.apps.qualys.com). For more details on how to determine your Qualys API URL, see Identify your Qualys platform.
  • User name and Password - The credentials for a user account that has the Required Permissions to add a specified list of tags to each host asset in Qualys.
  • Verify SSL (optional) - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
  • HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.
  • Parent tag name - Designate an existing Qualys tag to be the parent tag of the tags being added. Tag names are case sensitive. When no parent tag is supplied, the new tags are added without a parent.

    NOTE

    The specified tag must exist in Qualys. If it does not exist in Qualys, Axonius will fail to run the action.

  • Use all Qualys IDs - Use all available Qualys IDs to add the new tags.

Required Permissions

The value supplied in User Name must be associated with one of the following user roles and with the following permissions:

  1. Managers with full scope
  2. Other roles with the following permissions:
    • Desired host assets in scope.
    • Access to the API.
    • Tag permission: "Create User Tag", "Delete User Tag"
    • Asset Management permission: "Read Asset", "Update Asset".

To enable user access to the API:

  1. From Qualys, click the user button next to the Logout -> User Profile.

    image.png

  2. The Edit User screen opens. Click User Role -> select the API checkbox to enable API Access.
    image.png

  3. Save changes.


For more details about other Enforcement Actions available, see Action Library.


Was this article helpful?