Lumeta helps your Qualys Enterprise server work better by comparing Qualys-subscribed and Qualys-scanned IPs with Lumeta-indexed hosts in the same network space. Qualys receives up-to-the-minute endpoint data from Lumeta at every polling interval, enabling Qualys to saturate a network space with its service, thereby eliminating any and all gaps in coverage and ensuring the comprehensive provision of Qualys Management to Qualys customers.
The Qualys integration also supports Lumeta's new Qualys Management dashboard, which provides device details on IPs managed by Qualys, IPs managed by Lumeta, and IPs managed by both services.
Once you have done so, Lumeta-indexed devices that Qualys doesn't know about are incorporated to Qualys Managed and Subscription management services. At each polling interval, the integration is run and a refresh of endpoint data is pushed to the Qualys server.
Here's how it works:
At every polling interval, Lumeta retrieves a list of Scanned/Managed hosts (yellow) and a list of Subscribed hosts (red) from Qualys. This information populates two tables on Lumeta (i.e., qualys_scanned_ips table and qualys_subscribed_ips table) and ultimately feeds the Qualys Management dashboard on Lumeta.
Legend Blue - Lumeta-Indexed IPs Red - Qualys-Subcribed IPs Yellow - Qualys-Scanned/Managed IPs Note: Qualys-Scanned/Managed hosts (yellow) are always a subset of Qualys-Subscribed hosts (red).
Additionally, when an Lumeta user enables Auto-Subscribe (i.e., Settings > Integrations > Qualys > Auto-Subscribe), several events happen:
First, Lumeta-Indexed hosts (blue) not present in Qualys' Subscribed list (red) are added to Qualys' Subscribed list (red).
Lumeta then identifies hosts in the Qualys Subscribed list (red) that are not in the Qualys Managed list (yellow) and pushes those to the LUMETA_Spectre_DISCOVERED asset list on Qualys.
- When an Lumeta user disables Auto-Subscribe, IPs that are common to both Lumeta-Indexed and Qualys-Subscribed but are not in Qualys-Managed are added to LUMETA_Spectre_DISCOVERED.
Widgets on Lumeta's Qualys Management dashboard are populated using a combination of IPs indexed by Lumeta and IPs from the qualys_scanned_ips table and the qualys_subscribed_ips table, as follows:
Widget Label Description Image IPs Unmanaged by Qualys IPs indexed by Lumeta yet unmanaged by Qualys
(aka Lumeta-Indexed - Qualys-Subscribed table on Lumeta)
IPs Unmanaged by Lumeta IPs managed by Qualys yet not indexed by Lumeta
(aka Qualys-Scanned/Managed table on Lumeta - Lumeta-Indexed)Qualys and Lumeta Managed IPs IPs both indexed by Lumeta and in Qualys managed list
(aka Intersection of Lumeta-Indexed and Qualys-Scanned/Managed table on Lumeta)