Webhook

A Qualys Webhook connector lets you connect and discover resources of third-party inventories. The discovered assets can be viewed in the CSAM application. The CSAM APIs are required to establish a connection with the third-party service. Once you have created the Connector using the steps listed below, refer to the Qualys CSAM API guide on establishing a connection using the Qualys CSAM APIs.

Configure a Webhook Connector

1. Navigate to Integrations.

2. Click the three dots and click Manage on the Webhook integration.

The Manage Connectors screen lists all the available connectors you created in the Connectors Application. You can view their status and perform actions on them.

3. Let’s begin creating our first connector. Click Create Connector.

4. In the Basic Details screen, provide the required details:

Connector Name - Name of the connector

Description – Description of the connector

Modules to Enable - Select the Qualys service the connector will have access to. Select CSAM to pass the Connector information to the CSAM application.

5. Click Create

Your connector is ready. You can change the state of your connector or edit their configurations by selecting them and clicking Actions.

Asset Identification Rules

Once you have created a connector, you must specify the Asset Identification rules to determine which attributes must be fetched and in which order. Select a connector and click Actions.

This step is only necessary to control the information fetched by the connector in your Asset Inventory. You can read more about Identification Rules here.

You can merge duplicate hostnames or assets or select rules for webhook, etc. Select the rules by toggling the ‘Required’ button.

To create rules in the CSAM application, follow the steps documented in the CSAM Online Help. The rules shown below are created and enabled by default when the Third-party asset identification feature is enabled for your subscription.

If you do not have any assets, create an unmanaged asset by selecting the ‘Create unmanaged asset’ checkbox.

Select the ‘Apply default rule’ when faced with multiple matches under the final rule selected. The asset selected will be based on its most recent update and the trustworthiness of its source.

 

View Assets in CSAM

Your connector is created successfully and has Asset Identification rules provided. Now, it should start fetching from Active Directory. To view the Asset information, you must navigate to the CSAM application.

Select any of your connectors, click Actions and click View Assets in CSAM.