Get Started with Custom Assessment and Remediation

The CAR module is a powerful solution designed to automate script execution across your assets. It provides a centralized framework for creating, managing, and executing scripts on Windows and Linux platforms.

Role-Based Access Control (RBAC) in CAR

You must have the user roles defined to get started with CAR. Not all users have access to execute all the operations; hence, user segregation is a better way to streamline the process of script execution in your environment.

CAR uses RBAC permissions that control access to various functions.

To know more about the predefined roles in Qualys CAR, refer to Required Roles and Permissions for CAR.

CAR Licensing

We provide a Free license type for CAR to help you understand CAR and its features. This license is automatically activated for our new customers. With the free license type for CAR, you can access only Home and Library. For an enriched experience, you can choose a Trial license plan. This trial license plan lets you access all features of CAR for 30 days.

CAR features are available based on different license types. The below table provides which features you can access with each type of license.

Policy Audit (PA) is an enhanced version of Policy Compliance (PC). Depending on your subscription, you may view Policy Audit (PA) or Policy Compliance (PC) in your application.

License Type	Available CAR Scripts	Limitations
Policy Audit/Policy Compliance	Custom QID Custom Script	Script Library: View only Script Content: Not available Import Script: Not available
Policy Audit/Policy Compliance and Policy Audit Fix/PC Remediation	Custom QID Custom Script Control ID Remediation	Script Library: View only Script Content: Only scripts from the Policy Audit Fix/PC Remediation category are visible Import Script: Only from the Policy Audit Fix/PC Remediation category
File Integrity monitoring	Custom Script	Script Library: View only Script Content: Not available Import Script: Not available
Mitigation	Custom QID Script Custom Script	Script Library: View only Script Content: All scripts except those in the Policy Audit Fix/PC Remediation category are visible Import Script: All scripts except those in the Policy Audit Fix/PC Remediation category are allowed to import
Mitigation and Policy Audit Fix/AutoR	Custom QID Script Custom Script Control ID Remediation	Script Library: View only Script Content: All script categories are visible Import Script: All scripts are allowed to import

Supported Script Types in CAR

Qualys CAR supports script creation on both Linux and Windows platforms. The currently supported script types include:

Platforms	Script Types
Linux	LUA, PERL, Python, Shell
Windows	PowerShell Command, PowerShell Script, Python, VBScript VBScripts are run in batch mode.
Unix	LUA, PERL, Python, Shell
MAC	LUA, PERL, Python, Shell

Get Started with Custom Assessment and Remediation

Role-Based Access Control (RBAC) in CAR

CAR Licensing

Supported Script Types in CAR

Related Topics