This integration combines Spectre’s index of your network with Qualys to provide your security policy management software with a comprehensive set of network data. The two solutions work together to eliminate gaps in vulnerability coverage and improve your organization's security posture.
The Qualys integration provides Qualys customers with a way to ensure that the Qualys agent is installed comprehensively on all network devices in a particular segment (or multiple segments) as intended. The integration reconciles Qualys findings with Spectre findings and insodoing, uncovers:
Assets lacking the Qualys agent, which show up in Spectre-only dashboard widgets and in the Qualys console.
Assets to which visibility is blocked, which show up in Qualys-only dashboards widgets and in the Qualys console.
Assets with comprehensive management, which show up in both Qualys and Spectre dashboards widgets and in the Qualys console. A Qualys user with read-only permissions for the following parameters will be able to configure and use this integration:
Queries & Reports
Software
Software Manager
System Tree Access
Widgets on Spectre's Vulnerability Management dashboard are populated using a combination of IPs indexed by Spectre and IPs from the qualys_scanned_ips table and the qualys_subscribed_ips table, as follows:
IPs Unmanaged by Qualys
IPs indexed by Spectre yet unmanaged by Qualys
(aka Spectre-Indexed - Qualys-Subscribed table on Spectre)
IPs Unmanaged by Spectre IPs managed by Qualys yet not indexed by Spectre (aka Qualys-Scanned/Managed table on Spectre - Spectre-Indexed)
IPs both indexed by Spectre and in Qualys managed list (aka Intersection of Spectre-Indexed and Qualys-Scanned/Managed table on Spectre)
Configuring the Qualys Integration
An Spectre superuser can configure connectivity between the Spectre Command Center and the Qualys server as follows:
On the main menu, browse to Settings > Integrations > Other Solutions > Qualys.
Complete the configuration form, including Polling Interval, Qualys Server Name, Username and Password, and then click Submit.
Field
Description
Polling Interval
How often (in hours) that Spectre should poll Qualys for information
Server Name
The Server name or IP address of the Qualys server.
Username
Password
Your Qualys password
Enable the integration by toggling the Active control from red to green. The message "Product configured properly" displays when the Qualys has been successfully configured.