Get Started with Qualys Integration with Azure Storage Blob

Welcome to Qualys Enterprise TruRisk™ Platform and the integration of Qualys Enterprise TruRisk™ Platform with Azure Storage Blob! This guide helps you get acquainted with the Qualys solutions for integrating Azure Storage Blob with Qualys Enterprise TruRisk™ Platform

On Qualys Enterprise TruRisk™ Platform, you can view and retrieve vulnerability findings and compliance posture data using multiple methods such as interactive dashboards, reports, and APIs.

The Qualys Azure Storage Blob integration automatically transfers vulnerability and compliance data from the Qualys Enterprise TruRisk Platform to Azure Storage Blob in near real-time, eliminating the need for manual API calls or report generation. Security teams gain continuous visibility into their asset inventory and security posture directly within their cloud storage environment, enabling faster detection of risks and rapid remediation. By correlating Qualys findings with other data already stored in Azure, organizations can develop a comprehensive understanding of their security landscape and take automated corrective actions. The integration delivers easy and seamless post-processing through JSON-formatted data while allowing teams to maintain flexibility alongside existing Qualys API workflows.

In this guide, you can find information about integrating Qualys findings with Microsoft Azure Storage Blob using CIPS (Cloud Integration Partner Service), so that you can use the findings further in your enterprise.

Qualys Integrated Security Platform

With Qualys Enterprise TruRisk™ Platform you get a single view of your security and compliance - in near real time. If you are new to Qualys, you can visit the Qualys Enterprise TruRisk™ Platform web page to know more about the platform.

Qualys Sensors

Qualys sensors, a core service of the Qualys Enterprise TruRisk™ Platform, make it easy to extend your security throughout your global enterprise. These sensors are remotely deployable, centrally managed, and self-updating. They collect the data and automatically transmit it to the Qualys Enterprise TruRisk™ Platform, which has the computing power to continuously analyze and correlate the information in order to help you identify threats and eliminate vulnerabilities.

Benefits

You get the following benefits on integrating with Azure Storage Blob for VM/VMDR, PA, FIM, and CDR data:

• Instantaneous and near real-time transfer of vulnerability and posture data to your preferred storage platform.
• Automatic data transfer to your storage platform without making any API calls. This eliminates the process of pulling large amounts of data from the Qualys Enterprise TruRisk™ Platform using APIs.
• Easy and seamless post-processing as the data is transferred in JSON format.
• Flexibility to use this feature alongside the Qualys API services.

Prerequisite for API Entitlement

Before onboarding to Cloud Integration Partner Services (CIPS), your Qualys subscription includes the required API entitlement for CIPS.

• Qualys confirms your subscription eligibility as part of the onboarding process.

• If the required entitlement is not available in your subscription, onboarding cannot proceed until the entitlement is enabled.

• If you are unsure whether your subscription is eligible, contact your Qualys Technical Account Manager (TAM) or Account Representative for assistance.

Quick Start Steps

Perform the following steps for Qualys integration with Azure Storage Blob:

1. Create Storage Account
2. Integrate VM/VMDR
   • Configure Integration with Qualys
3. Integrate Policy Compliance
   • Add Policies to CIPS

4. Integrate File Integrity Monitor 

5. Integrate Cloud Detection and Response 

6. View Insights on Azure Storage Blob Console (Optional)

Qualys Support for Azure Storage Blob

Azure Storage Blob provides you the flexibility to create data lakes and acts like a data store for cloud analytics. Azure Storage Blob also provides immense storage and multiple mechanisms to build powerful cloud-native and mobile apps.

You can access Qualys vulnerability assessment findings and Policy Compliance posture data in Azure Storage Blob. The Azure Storage Blob provides a comprehensive view of the high-priority security alerts and compliance status across its accounts. By integrating the findings from Qualys Vulnerability Management (VM/VMDR), Qualys Policy Audit (PA), File Integrity Monitoring (FIM), and Cloud Detection and Response (CDR) with Azure Storage Blob, you can get near real-time and up-to-date visibility of your security and compliance postures in the Azure Storage Blob console. These findings, obtained by correlating Qualys data with other data in Azure Storage Blob, enable you to quickly detect risks and take rapid, automated remedial actions.

Currently, Qualys supports findings from only VM/VMDR, PA, FIM, and CDR apps for Azure Storage Blob integration.
‎

• Once data is uploaded to Azure Storage Blob, Qualys does not own the data. You must take care of the data security, data archival, deletion, further charges, etc.
• Qualys must have access to write to the Azure storage blob. You can choose any SAS/token or permissions for the storage account.
• Azure storage blob has certain size limits. For more information, refer to Scale targets for Blob storage.

Additional Resources 

You might already be familiar with Qualys Cloud Suite's features and user interface. If you are new to Qualys, we recommend the following tutorial. 

Video Tutorial

Vulnerability Management Detection and Response. (3 mins)

From the Community

• For Free self-paced classes, video series, and online classes, refer to the Qualys Training page.
• To get started with guides, quick references, and API docs, refer to the Qualys Documentation page.