Qualys DataFlow for TotalCloud Connector

The Asset / Misconfiguration column indicates whether the connector imports both asset inventory and misconfiguration findings (Both) or misconfiguration findings only.

Ensure the following prerequisites are completed before configuring the connector:

1. Ensure you have an active Qualys TotalCloud subscription.
2. Generate credentials from the Qualys platform.
3. Have your Qualys Gateway URL ready.
4. Contact your Technical Account Manager (TAM) or Qualys Support to activate the connector for your subscription.

Generating Client ID and Client Secret

1. Navigate to your Profile page in the Qualys platform.

   

2. Select Auth ID Client Management from the left navigation menu.

   

3. Click Create New Client.
4. Provide a client name.
5. Enable the TotalCloud toggle.

   

6. Click Create.
7. Copy the generated Client Secret immediately.
8. Copy the Client ID from the listing page.

Permissions Required

Navigate to Admin > Role Management and enter the Name on the Role Details page during role creation. Click Continue.

Select TotalCloud as the module, and select the following required permissions:

• TotalCloud API Access
• TotalCloud Readonly Access

To view the permissions, navigate to User Management, select the created role, and click View.

Scope and Data Access

The connector operates with read-only access to TotalCloud data. Using the granted permissions, it retrieves TotalCloud resources (assets) and their evaluations (misconfiguration findings) and imports them into Enterprise TruRisk Management. It does not write back to or modify TotalCloud.

Key Rotation

Generate new credentials from the Auth ID Client Management page and update them in ETM using the Edit Connector workflow.

Provide the connector profile details and authentication configuration.

Connector Details

Authentication Details

Click Test Connection to validate the connector configuration. The following checks are performed:

• Network Reachability – Verifies that the connector endpoint is reachable over HTTPS (port 443).
• TLS Handshake – Confirms that a secure TLS connection can be established with the remote endpoint.
• Authentication Credential Check – Validates the configured credentials against the source system's authentication endpoint.
• Authorization Scope Check – Confirms that the provided credentials have the required permissions to access the configured data scope.
• Data Fetch – Verifies that data can be successfully retrieved from the source system using the configured connection.

Select the data type to synchronize and configure the connector schedule.

• Data to Sync: Assets & Findings, or Assets
• Schedule Type: Custom

The connector supports Advanced Settings for Filters and Transform Map configuration.

Configure a Single Occurrence or Recurring schedule and specify the start and end dates and times.

Advanced Settings

Select the Advanced Settings toggle to view your Filters and Maps.

Filters Tab

The connector supports filtering for asset types and findings.

Select the required Asset Types from the drop-down list. Available asset types include Compute, Identity, Storage, and Serverless. All asset types are selected by default.

Select the required Findings from the drop-down list.

Transform Map Tab

During connector profile execution, the Qualys Dataflow for TotalCloud connector retrieves the default transformation map from the database and uses it to transform the ingested data. See the Transformation Maps section for the applied mapping.

Review the connection details, then click Create.