Launch a Qualys network map for one or more domains, initiating network discovery. The map target may include asset groups and the default scanner option may be enabled for distributed mapping across multiple scanner appliances.
A map request for multiple domains issued using the map-2.php API, runs one map at a time, one domain at a time. If you cancel a running map for a domain using the scan_cancel.php function and there are multiple domains in the map target, the service cancels the maps for any remaining, undiscovered domains in the same map target.
For a map request with multiple domains, the XML map report returned by the map-2.php function includes all domains that were successfully discovered. When you view the map results for this request using the map_report.php function or the Qualys user interface, each map report includes map results for one domain. Also, if the map summary notification is enabled in your account, there is a separate notification for each target domain.
Basic HTTP authentication is required. Session based authentication is not supported using this API.
Permissions - Managers can map all domains in the subscription. Unit Managers can map domains in the user’s same business unit. Scanners can map domains in their own account.
Parameter |
Required/Optional |
Data Type |
Description |
---|---|---|---|
map_title={title} |
Optional |
String |
Specifies a title for the map. The map title can have a maximum of 2,000 characters. When specified, the map title appears in the header section of the map results. When unspecified, the API returns a standard, descriptive title in the header section. |
domain={target} |
Optional |
String |
Specifies one or more domain names for the map target. Multiple entries are comma separated. (Target may include domain names and/or asset groups) For each domain, include the domain name only; do not enter “www.” at the start of the domain name. Netblocks may be specified with each domain name to extend the scope of the map. Multiple domains must be comma separated. This parameter and/or asset_groups must be specified. |
asset_groups={title1,title2...} |
Optional |
String |
Specifies the titles of asset groups for the map target. Multiple asset groups must be comma separated. (Target may include domain names and/or asset groups) This parameter and/or the domain parameter must be specified. |
iscanner_name={name} |
Optional |
String |
Specifies the name of the Scanner Appliance for the map, when the map target has private use internal IPs. Using Express Lite, Internal Scanning must be enabled in your account. One of these parameters may be specified in the map request: iscanner_name or default scanner. |
default_scanner={0|1} |
Optional |
Integer |
Enables the default scanner feature, which is only valid when the map target consists of asset groups. A valid value is 1 to enable the default scanner, or 0 (the default) to disable it. Using Express Lite, Internal Scanning must be enabled in your account. One of these parameters may be specified in the same map request: iscanner_name or default scanner. |
option={title} |
Optional |
String |
Specifies the title of an option profile to be applied to the map. The profile title must be defined in the user account, and it can have a maximum of 64 characters. If unspecified, the default option profile in the user account is applied. |
network_id={value} |
Optional, and valid only when the Network Support feature is enabled for the user’s account |
Integer |
Restrict the request to a certain custom network by specifying the network ID. When unspecified, we default to “0” for Global Default Network. |
save_report=yes |
Optional |
Boolean |
Saves a map report for each target domain on the Qualys server for later use. A valid value is “yes” to save a map report for each target domain, or “no” (the default) to not save the report. If set to “yes”, you can close the HTTP connection when the map is in progress, without cancelling the map. When the map completes the resulting map report is saved on the Qualys platform, and a map summary email notification is sent (if this option is enabled in your user account). |
API Request
https://<qualys_base_url>/msp/map-2.php?domain=mycompany.com&save_report=yes
API Request
https://<qualys_base_url>/msp/map-2.php?domain=mycompany.com:192.168.0.1-192.168.0.254&iscanner_name=Hong+Kong
API Request
https://<qualys_base_url>/msp/map-2.php?domain=none:192.168.0.1-192.168.0.254&iscanner_name=San+Franscisco
API Request
https://<qualys_base_url>/msp/map-2.php?domain=mydomain.com:10.10.10.10-10.10.10.20&iscanner_name=my_scanner&network_id=4234545&save_report=yes
<platform API server>/map-2.dtd