Manage Sensors

You can manage your physical or virtual sensors from the Sensors tab.

Navigate to the Sensors tab and from the Quick Actions menu you can perform actions such as View Details, Deregister sensor, Delete Assets discovered by the sensor, Start Sensing, and Reboot, Delete Sensor.

You can filter out the sensor listing on the sensor page by the type of appliance – Physical or Virtual.

View Sensor Details

Select a sensor and from the Quick Action menu and click View Details. Navigate through multiple tabs to view the sensor details.

Summary

In this tab, you can see all your configured sensor details.

General Settings

In this tab, you can see the passive sensor appliance settings, in which you can follow on-screen instructions for module activation and enable Qualys to collect support logs for troubleshooting. Also, you can set the IP inactivity time that helps the passive sensor to avoid creating duplicate assets when it detects only IP addresses and no MAC addresses or Hostnames.

Click Edit to do the general settings. Use a toggle button to enable the VMDR OT Module Support in Sensor and Qualys to collect support logs for debugging. Click Save.

Add Domain - You can select or add a domain from the drop-down using the Add New option, as shown in the following screenshot.

For details on what data we collect from production, refer to the Logs for Troubleshooting.

If the domain name for an asset is not learned by the passive sensor appliance and if the user has provided the domain names, they will be considered at the time of merging unmanaged assets into managed assets. Else, the domain names that are learned by the passive sensor will be considered for this merging.

All the domains learned from the passive sensor will be listed in the dropdown. You can select a list of domains or provide additional domains.

 If you do not select or provide any domains, the passive sensor will use the list of domains learned by the appliance.

If the passive sensor has not learned the domain name of an asset, then the provided domain names will be used for merging passively sensed assets into managed assets.

Network

In this tab, you can see the list of networks associated with the sensor and internal assets configured with IP range and scanner group.

Interface Settings

In this tab, you can see the sensor interface details. Here, you can assign the IP address to the sniffing interface.

To assign the IP address, follow these steps:

1. Click the edit icon of the desired sniffing interface, as shown in the following screenshot.

   

2. Select ERSPAN mode and assign IP to the interface along with subnet mask (for example: <10.20.30.40/30>).
3. Click Ok > Update to save the configuration.

   

If you want to remove the IP Address from the sniffing interface, follow these steps:

1. Click the edit icon of the desired sniffing interface.
2. Select DEFAULT mode, click Ok > Update to save the configuration.

   

   For the 10G appliance model (QPS-10G-0404-B1), the interface needs to be active before assigning an IP address to the sniffing interface.
   The PS appliance will reboot once after adding/editing/deleting the IP address of the sniffing interface.

Events

In this tab, you can see the alert notification for events like Driver Change Required, Reboot Required, and Asset Reporting Stopped.

Deregister a Sensor

Once your physical or virtual sensor is ready and registered with Qualys Enterprise TruRisk™ Platform, you can start viewing information in the Network Passive Sensor UI.

If you would like to deregister/delete a sensor your sensor, follow these steps:

1. Navigate to the Sensors tab and select your sensor.

   

2. From the Quick Actions menu, click Deregister.

   A deregister confirmation message is displayed.

3. Click Yes to deregister your sensor.

   

The sensor can also be deregistered from the Sensor Details page. Follow the steps:

1. Select your sensor from the Sensors tab and click View Details from the Quick Actions menu.

   The Sensors Details page is displayed.

   

2. Click Deregester from the Actions list.

   A deregister confirmation message is displayed.

3. Click Yes to deregister your sensor.
4. After you have deregistered your sensor, and if you want to delete it, then follow the instructions:

Delete a Sensor

To delete a sensor after deregistering it, follow these steps:

1. Navigate to the Sensors tab and select your deregistered sensor.
2. From the Quick Actions menu, click Delete Sensor.

   

   A delet confirmation message is displayed.

3. Click Yes to delete the sensor.