Global Security Forum

Security Global Forum

Our mission is to provide clients with an online user community of industry peers and IBM experts, to exchange tips and tricks, best practices, and product knowledge. We hope the information you find here helps you maximize the value of your IBM Security solutions.

 View Only
  • 1.  QRoC and Qualys App for Qradar

    Posted Fri July 12, 2019 10:17 AM
    Does anyone have experience of setting up the Qualys App for Qradar in a QRoC environment?

    I have created scanner data imports, and these run nicely on a schedule to pull the scan data from Qualys, but the App Exchange says you have to configure proxy mapping - not sure what it needs to talk to?


    Tim Anderson
    Veolia
    United Kingdom




    Legal Disclaimer on behalf of the following companies registered in England and Wales under the following numbers (and all subsidiaries and group companies of the same):

    Veolia UK Limited (2664833); Veolia Environmental Services (UK) plc (2215767); Veolia Water UK Limited (2127283); Veolia Energy UK plc (883131);

    Registered office 210 Pentonville Road, London N1 9JY.


    The information in this email and any associated files is confidential and may be legally privileged. It may also contain information that is subject to copyright or constitutes a trade secret. It is intended solely for the named recipient. Access to this email by anyone else is unauthorised.

    If you are not the intended recipient, please note that any use,disclosure, copying, distribution of this email or any action taken or omitted to be taken in reliance on it is prohibited.

    Warning: Although this email and any attachments are believed to be free from viruses, it is the responsibility of the recipient to ensure that they are virus free. No responsibility is accepted by any of the Veolia group companies for any loss or damage arising in any way from their receipt or opening.




  • 2.  RE: QRoC and Qualys App for Qradar

    Posted Mon July 15, 2019 01:01 AM
      |   view attached
    ​Hi Tim,

    As your environment is using QROC (Qradar on cloud) , and Qualys is might in on premise then there is a difficulty in communication between them. And that's why you Qualys app (which is from Qradar side) will not communicate with Qualys so for that communication you need to setup a proxy mapping between them,

    I have attached the screenshot of the proxy mapping setup (Its for Bigfix but its same for Qualys).
    1) Name should be  Qualys
    2) CIDR is Qualys server IP
    3)Data gateway (As you are using QROC the you must be having data gateways configured , select any of the data gateway)
    4) You should test a connection once you setup proxy mapping (Enter the Qualys server IP address and the port number it uses)

    Regards
    Asif Siddiqui











    ------------------------------
    Asif Siddiqui
    ------------------------------