Qualys VM for QRadar for v7.5.0 GA+

Release v3.1.2

Date: January 24, 2024

Use the Qualys VM for QRadar – 7.5.0 GA+ application to ingest your Qualys VM detections into QRadar and visualize them on a single page. You need to install the application, configure the application, and schedule the sync. The Qualys VM application pulls your detection delta continuously, so you always see updated reports. You can use the date-time pickers given in the Qualys application to see valuable reports.

Features

The following are the features of Qualys VM for Qradar app:

Support for multi-tenant environment.
Updates for the Summary Tab Widget and Reports or Search Tab.
QRadar authentication token workflow to upgrade existing version of Qualys VM for QRadar - 7.5.0 GA+ and for fresh installations.
Advanced tab showing success and failure messages for the etls running with process IDs. Users can download etl logs from the Advanced tab.

Prerequisites

The following are the prerequisites for getting started with VM for Qualys QRadar:

A valid Qualys subscription.
API access to Qualys VM module.
Knowledgebase API access for enabling Knowledgebase input.
Internet access and reachable Qualys API server from QRadar

This application is compatible with these versions only 7.5.0 GA+
The user cannot use the application for a distributed setup as Qualys VM only sends data to QRadar console.
When updating or installing app version 3.x.x, the Log Activity Event name may display: as Event 0 for updates, and Unknown for new installs. In these scenarios, refer to troubleshooting section If you get Event 0 or Unknown in the Log Activity Event name.
If you are upgrading from Qualys app for QRadar 3.1.2 or an earlier version to Qualys VM for QRadar—7.5.0 GA+ Version 3.x.x, ensure that you save the Qualys App Settings again, even if you saved them in the earlier version.

Quick Start Steps

Perform the following steps to get started with Qualys VM for QRadar - v7.5.0 GA+ :