Reports Setup

Go to Reports > Setup to see global setup options related to reporting.

Some options may not be available, depending on your service level and subscription settings.

CVSS Scoring

Enable the CVSS Scoring feature for the subscription to display CVSS scores and vector strings in your scan reports. Learn more.

Note: Show CVSS Scoring is enabled by default for all new VMDR subscriptions.

Report Storage & PDF Security

When Report Storage & PDF Security is enabled, managers can check the maximum report size assigned to each user, as well as the statistics on the current size of reports and the free space available for the subscription. The Report Storage also provides the ability to clear the report cache of the used reports when there is an issue with the report share disk storage. Used reports are reports that are created or deleted by the users in your subscription but have not yet expired. The report cache can be cleared by using the Clear Report Cache. Managers can also enable Encrypt PDF Reports.

Notes:

-To use this feature, the Report Storage & PDF Security feature must be enabled for your subscription.

-The Qualys system already has an automated program that executes every 24 hours to clear the report cache of expired reports.

-The used report size displayed on the Report Storage & PDF Security comprises only the report share size for your subscription and reports deleted by the users in your subscription. It does not include expired reports.

OS CPE

Enable the OS CPE feature for the subscription to display operating system CPE names in your reports.

Note: Enable OS CPE Support is enabled by default for all new VMDR subscriptions.

Business Risk

Customize business impact titles and business risk values for calculating business risk in your scan reports.

Security Risk

Choose whether security risk should be equal to the average severity level detected or the highest severity level detected for each host in your scan reports.

Scheduled Reports Distribution

Determine the method for sending notifications for scheduled reports, and whether they will be sent as attachments or report links.