Create or View Asset Tags or Tag Sets

Create tags and apply them to assets in your subscription. Tags help organize your assets and manage user access to them. You can also apply tags to IP addresses and web applications. This section provides the steps to create tags and tagsets and view the tags.

Create Tags

1. Go to Tags and select Tag from the Create New drop-down.
2. Basic Details: Enter the basic details of your tag.

   1. Give your tag a name (up to 1024 characters).

   2. Select Mark as Favourite to create a favorite tag. The Favourite tag will be displayed with a yellow star in the list.

   3. Add a description for your tag (optional).

3. Asset Criticality Score: Asset Criticality Score represents the asset's criticality to your business infrastructure.

   • Select the Score between 1 to 5.

   • If you do not select the asset criticality score, the score '2' is applied to that asset by default.

   • If your asset has multiple tags with different asset criticality score, the criticality of your asset is the maximum criticality score among the tags. (For example, asset 'A' has three tags with asset criticality scores 3, 4, and 2 thus, the asset criticality score of the asset will be 4).

4. Tag Properties:

   1. To organize tags, click Set Tag Color (optional). You can assign different colors to different tags. 

   2. You can select an existing tag to be a Parent Tag. When creating a child tag, you can choose a parent tag from existing ones in your account. You can also create a new tag for a parent. Click Create, and a similar form will be displayed to create a tag. You can not create a new parent from this new tag.

5. Tag Type: Select Static or Dynamic tag type. 

   • Static: Static tags are created without rules. You can apply this tag to assets that do not have any rules criteria.

   • Dynamic: Dynamic tag allows you to define Tag Rules. You can select the Evaluate Rule on Creation checkbox to evaluate the dynamic rule once it is created or updated. For the Dynamic Tag Type, you can choose any of the following Tag Rules:

     • Asset Name Contains: Applies the tag when any part of the user-definable asset name contains the substring or substrings you enter. Add multiple substrings separated by the "|" (vertical bar) with no spaces before or after.

     • Business Information: Applies tags to the assets with queried business information attributes.

     • Asset Inventory: Applies the tag to assets from Qualys CyberSecurity Asset Management.
     • IP Address in Range(s): Applies the tag to assets with an IP in the range you enter. For example: 172.31.254.0-172.31.254.25 or 172.31.254.0/25.
     • IP Address In Range(s) + Network(s): Applies the tag to assets with an IP in the range you enter and network.
     • Open Ports: Applies the tag to assets whose port listing matches the ports you enter. For example: 80, 123
     • Cloud Asset Search: Applies the tag to Amazon EC2, Microsoft Azure, and Google Cloud Platform instances matching the query you provide. You can also create tags for your cloud assets. For more information, refer to Tag your Amazon EC2 instances | Tag your Microsoft Azure instances| Tag your Google Cloud Platform instances
     • Vuln (QID) Exist: Applies the tag to assets with the vulnerability (QID).
     • Groovy Scriplet: Applies the tag to assets based on the Groovy script.
     • Asset Search: Applies the tag to assets based on QID results.
     • Vulnerability Detection Searches: Applies the tag to vulnerabilities based on the detection search. 
6. Test Rule Applicability on Selected Assets: Optionally, you can select detections in your account to test the rule. Pass in green signifies the detection rule has matched the rule, and Fail in red means the detection rule did not match the rule.

7. Evaluate Rule on Creation: Select this option to tag the existing detection automatically. The detection will be tagged in the following scan if this option is not selected.

8. Click Create. 

   The following screenshot is an example of the Dynamic Tag created for Windows assets:

   

Create Tag Sets

A tag set is a collection of static and dynamic tags. You can include static and dynamic tags in a tag set. Also, you can exclude static or dynamic tags from the tag set. The assets tagged with these tags are brought under such a unique tag set. The tag set is of dynamic type. You can create a maximum of 100 tag sets from your account.

This feature is only available for CSAM subscriptions.

Complete the following steps to create a tag set:

1.  Go to the Tags tab and select Tag Set from the Create New list.
2. Enter the tag set name in the Name field.
3. Select the Mark as Favourite checkbox to mark your tag set as a favorite.
4. Enter an appropriate description for the tag set rule.
5. Enable the Asset Criticality Score toggle.

    
   - You can set the asset criticality score between 1 to 5. 1 is the lowest criticality score and 5 is the highest criticality score that is assigned to an asset.      
   
   - If you don't select the asset criticality score, the asset criticality score '2' will be applied to that asset by default.      
   
   - If your asset has multiple tags with some asset criticality score, the criticality of your asset will be the maximum criticality score among the tags. (For example, if asset 'A' has three tags with asset criticality scores 3, 4, and 2, then the asset criticality score of asset 'A' will be 4).  

6. Include tags to the tag set: Include tags to the tag set by clicking the  icon next to Include hosts that have All of the tags below. The Select Tags page opens. Select the tags that you want to include in the tag set. 

   
   -  The default filter for Include hosts that have All of the tags below is All.
   
   - When you select the All filter, all assets with the tags you included are considered for the tag set.
   
   - When you select the Any filter, only the common assets with the tags you included are considered for the tag set.
   
   - You can include a maximum of 20 tags.

7. Exclude tags from the tag set: If you want to exclude certain tags, select the Exclude tags checkbox. Click the   icon next to Exclude hosts that have Any of the tags below. The "Select Tags" page opens. Select the tags that you want to exclude from the tag set. 

   
   -  The default filter for Include hosts that have All of the tags below is Any.
   
   - When you select the All filter, all assets with the tags you excluded are considered for the tag set.
   
   - When you select the Any filter, only the common assets with the tags you excluded are considered for the tag set.
   
   - You can exclude a maximum of 20 tags.

   

8. Click the  icon next to Test Rule Applicability on selected assets to check whether the assets satisfy the rule condition. From the "Select Assets" window select assets in your account to test the rule. A green color 'Pass' tells you the asset matches the rule. A red color 'Fail' tells you the asset does not match the rule.

9. Select the Evaluate Rule on Creation checkbox to evaluate the tag set and add assets to the tag set. A tag set is created.

   After the tag set is created, you can view, edit, and delete the tag set. Also, remove the tag set from the Favorite, and find assets that are part of a tag set.

View Tags or Tag Sets

Perform the following steps to View Tags, Tag Sets, or both:

1. Click Tags.
2. Click All to see a list of Tags and Tag Sets. To view Tags or Tag Sets, click on their respective buttons.

   The following screenshot displays the list of Tags and Tag Set: