Add API Source

Once you install the Qualys App, you must add the API source.

Perform the following steps to add API source:

1. Go to Qualys CMDB Sync App > Configuration > API Sources, and click New.
   
2. Enter the required details to create the source:
   • Name - Provide a name for the API source.
   • POD - Click and select the Private Cloud Platform (PCP) users can create and add details of their PCP environment.
     For information on how to add custom pod details, refer to Add Custom Pod (PCP).
   • Username and Password - Enter valid Qualys Enterprise TruRisk™ Platform credentials with API access enabled for the account on the selected POD.
   • Enable Qualys to ServiceNow Sync and Enable ServiceNow to Qualys Sync - Select these options to allow uninterrupted sync between Qualys and ServiceNow.
   • Active - Select this option to indicate that the source is active and that assets should be synced from it. In the case of multiple sources, you can use this option to activate or deactivate a source.
   • MID Server - The MID server can work as a proxy server or middleman between ServiceNow and Qualys pod. In this case, the ServiceNow instance is limited in reachability to outside sources. You can use this option to activate or deactivate a source.
   • Validation -Reflects the status of usage of the Test Connection button. When you create a new API source, the field is automatically set to Not Validated, by default indicating that the API source has not yet been tested.
     Once you click Test Connection (after completing API source creation), the value changes to validated or validation failed, depending on the test result.

     The Validation field is auto-populated and is not editable.

Sync Software Catalog 

Perform following steps to sync software catalog:

1. Select Sync Software Catalog to enable software sync to staging tables.
   
2. By default, this check box is disabled. Only after you enable Sync Software Catalog check box is the Sync Software Catalog to CMDB check box displayed.
   Use this check box to enable software sync and add the software data to CMDB tables.
   Once the sync cycle is complete, the sync details are populated in the Last Sync Timestamp, Last Sync Key, and Sync Notes fields.
3. Click Submit to create the API source.
4. After configuring and saving the API source, choose the record you just created from the list of API source.
5. Open the record and click Test Connection.

Sync Asset Tag or Asset Group

Using this option, you can sync asset tags or asset groups from Qualys to ServiceNow.

In this option, you can see the following two checkboxes:

• Sync Asset Tags
• Sync Asset Groups

Enable these checkboxes to sync the Asset Tags or Asset Groups from Qualys to ServiceNow.

By default, 'Sync Asset Tag' and 'Sync Asset Groups' are enabled. Refer to the following screenshot.

Sync Certificates

Perform the following steps to sync certificates from Qualys to ServiceNow:

1. Click Sync Certificate.
   You can see the Sync Certificates checkbox.
   Enable the Sync Certificates to sync certificates from Qualys.

   

2. Select Relation Type to establish a relationship between CI records and certificates.

    By default, the relation type is Owns::Owned by.

3. Enter QQL serach token to search in Certificate Filter to find filtered results.
   Refer to Qualys VMDR OT Online Help to learn how to create or use the Qualys QQL search token.
4. Click Submit to create the API source.
5. Once you have saved the API source configuration, choose the record you just created from the API source list, open the record, and click Test Connection.

Next Step

Create Schedules