Qualys App for IBM QRadar

Release v1.2.0

Date: February 28, 2021

Use the Qualys App for QRadar to ingest your Qualys VM detections into QRadar and visualize them on a single page. All you need to do is install the app, configure the app, and schedule the sync. The Qualys App continuously pulls your detection delta, so you always see updated reports. Want to visualize historical data? Just use date-time pickers given in the Qualys App and see useful reports.

Features/Improvements

The following are the features of Qualys VM for Qradar app:

  • Support for multi-tenant environment.
  • Updates for the Summary Tab Widget and Reports or Search Tab.
  • QRadar authentication token workflow is improved to upgrade existing version of Qualys App for QRadar and for fresh installations.
  • Improved the Qualys App Settings interface. Added Advanced tab which shows the success and failure messages for the etls running with process ids. User can download etl logs from Advanced tab.

Prerequisites

The following are the prerequisites for getting started with VM for Qualys QRadar:

  • A valid Qualys subscription.
  • API access to Qualys VM module.
  • Knowledgebase API access for enabling Knowledgebase input.
  • Internet access and reachable Qualys API server from QRadar
  • Changes made for AQL are not compatible with QRadar 7.2.8 if your Qualys App version is 1.1.0 or later.
  • If you are using Qualys App for QRadar with version 1.1.2 or before, you need to uninstall existing app.

Quick Start Steps

Perform the following steps to get started with Qualys App for QRadar:

  1. Install App
  2. Validating Dependencies
  3. Configure App