A Lieberman ERPM vault is where you provide us with the login credentials needed to access your ERPM server.
How to Use Vaults |
Click here and we'll walk you thru the steps. Add IP addresses to scan, configure scanner appliances, configure vaults and authentication records, set up option profiles and start scanning! |
Vault Credentials |
These credentials may be defined for your Lieberman ERPM vault. |
URL Enter the HTTP or HTTPS URL of the Lieberman ERPM server. (The SSL Verify option is only available when the URL entered uses HTTPS.) |
Domain Enter a domain name if your Lieberman ERPM server is part of a domain. Otherwise local authentication will be used to log into the ERPM server. |
Authentication Record |
Choose the Lieberman ERPM vault in your authentication record and provide these details. |
System Name Each system in your ERPM environment has a system name and this is needed in order to retrieve the password for authentication.
Use "Auto discovery" to allow the service to find the system name for you at scan time. The service uses information known about each host (like the IP address and FQDN) to query ERPM for the system name. Auto discovery is the only option available when your record includes multiple IPs. |
System Type Systems in ERPM are grouped by type (Windows Systems, Oracle Databases, etc). The service needs to know how your system has been defined in ERPM in order to retrieve the password for authentication.
Use "Auto discovery" to allow the service to find the system type for you at scan time. The service uses the target host's system name to query ERPM for the system type.
Manually select the type when: 1) your systems are in a custom store within ERPM, or 2) the type cannot be discovered, perhaps because the system name (used in the query) is defined in multiple groups. |
User Permissions |
A Manager user has permission to configure a Lieberman ERPM vault. A Unit Manager can be granted this permission. |
Tell me about SSL certification validationTell me about SSL certification validation
Qualys scanners will verify the SSL certificate of the web server to make sure the certificate is valid and trusted, unless you clear (un-check) the SSL Verify option. You may want to clear this option to skip SSL verification if the certificate was not issued by a well-known certification authority (CA) or if the certificate is self-signed. (Note: The SSL Verify option is only available when the URL entered uses HTTPS.)