Qualys asset groups can now be created per zone such that the data push from Lumeta to Qualys is grouped by zone rather than arriving in one single group, which is still the default behavior. User can select assets from specific zones to push to Qualys.

Assumptions

Requirements

User Design

A Table where first column shows list of existing zones. Second column would be a drop down of available Network IDs as well as empty value. Empty value will be displayed either on initial setup when no mapping exists Or when network ID that is mapped does not exist. On initial set up, no data will be displayed on second column.  Third column would be a checkbox , if the network Id is selected the ‘Enabled’ checkbox should checked automatically.  If network Id is not selected and the user want to create asset group without network ID selection ,  just checked the “Enabled” check box it will create the asset group with zone name in  qualys server  User will need to select network ID for all the zones they want to create mapping and click Submit button to Save it. After initial setup, second column would be populated with mapped network ID. If user wants to delete a mapping, they will need to uncheck the “Enabled” column and click the Submit button.


Below table describes behavior surrounding asset mapping

Use Case

Expected Result

Asset mapping by zone is checked and zone2 and zone4 are enabledTwo asset groups Spectre_Zone2 and Spectre_Zone4 will be created in Qualys and appropriate devices (within those zones) will be pushed to those groups.
Asset mapping by zone is checked and no zones are enabledNo asset group will be created in Qualys and nothing will be pushed to Qualys
Asset mapping by zone is checked and a networkID is selected for Zone3 and enabled checkbox for Zone3 is also checkedAsset group Spectre_Zone3 will be created in Qualys and appropriate devices (within that zone) will be pushed to this group
Asset mapping by zone is not checkedDefault asset group will be pushed to Qualys and all candidate devices (from all zones) will be pushed to this group.

UI calls that would need to be added

API support needed

Questions