Response Phase

This phase of VMDR identifies the remediation for threats identified in the Threat Detection and Prioritization phase. Remediating threats can involve deploying a patch, renewing a certificate, or adjusting a configuration. Using the VMDR Prioritization report from the previous phase, you can deploy the patches for your Windows, Linux, or Mac operating systems. The Prioritization Report is divided into the Summary and Details sections.

The Summary section includes the following:

• Prioritized Assets: The count of assets that meets the combination of remediation techniques you selected in the Threat Detection and Prioritization phase.

• Prioritized Vulnerabilities: The count of prioritized vulnerabilities detected on the assets. It is categorized into Instances and Unique.

  • Instances:  The count of the total number of vulnerabilities that meets the combination of remediation techniques you selected in the Threat Detection and Prioritization phase.

  • Unique: The count of the individual vulnerabilities, which excludes duplicate QIDs. 

• Available Patches: The count of available Patches with the Qualys. We provide patches for Zero-Touch, Windows, Linux, and Mac. The Patch Now option in Available Patches also provides the feasibility to View Missing Windows, Linux, or Mac Patches. The following example screenshot of Available Patches lists all the patches available:

  

Deployment of patches is available only for customers with the Patch Management add-on.

The following screenshot is an example of the Summary section of the Prioritization Report in the Qualys Cloud Platform UI:

The Details section lists detailed information about the prioritized vulnerabilities, patches, and prioritized assets in their respective tabs. Enable the Show Only Patchable toggle to view the list of vulnerabilities that have patches available. The following example screenshot of the Detail section displays the Vulnerabilities, Patches, and Assets tab along with the Show Only Patchable toggle: