IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

Qradar and Qualys API scanner Integration

  • 1.  Qradar and Qualys API scanner Integration

    Posted Mon December 23, 2019 11:30 AM
    Hello all,

    I try to  integer my  Qualys scanner to  my  Qraddar I did  all the neded configuration and import the ssl  certificate but I got the error below can anyone help me  to  resolve this  issue

    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Schedule Manager] com.q1labs.vis.ScheduleManager: [INFO] [NOT:0000006000][XX.XX.48.10/- -] [-/- -]Submitted scan request for qualys (9) scanner to scan XX.XX.48.0/24
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Scanner Manager] com.q1labs.vis.scanners.qualys.QualysTaskModule: [INFO] [NOT:0000006000][XX.XX.48.10/- -] [-/- -]Received scan task 10.100.48.0/24:1-9000, this task will be addressed as soon as possible by the scanner module
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] com.q1labs.vis.scanners.qualys.QualysTaskModule: [INFO] [NOT:0000006000][XX.XX.48.10/- -] [-/- -]Processing scan task 10.100.48.0/24:1-9000
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] com.q1labs.vis.scanners.qualys.QualysTaskModule: [INFO] [NOT:0000006000][XX.XX.48.10/- -] [-/- -]Detected configuration update... Re-initializing scanner module with updated configuration details
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] com.q1labs.vis.scanners.qualys.QualysTaskModule: [INFO] [NOT:0000006000][XX.XX.48.10/- -] [-/- -]Initializing Qualys scanner module
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] com.q1labs.vis.scanners.qualys.QualysTaskModule: [INFO] [NOT:0000006000][XX.XX.48.10/- -] [-/- -]Testing Qualys API connection
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [qvmprocessor.qvmprocessor] [QVM-ResultExporter] com.q1labs.qvm.workflow.vis.ExporterProcess: [INFO] [NOT:0000006000][XX.XX.48.10/- -] [-/- -]No jobs found to export.
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] com.q1labs.vis.scanners.qualys.QualysConnector: [INFO] [NOT:0000006000][XX.XX.48.10/- -] [-/- -]Following message suppressed 1 times in 300000 milliseconds
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] com.q1labs.vis.scanners.qualys.QualysConnector: [ERROR] [NOT:0000003000][XX.XX.48.10/- -] [-/- -]There was an authentication error while connecting to the Qualys API (indicated by an HTTP response code '403') - the account and credentials should be verified
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] java.io.IOException: Server returned HTTP response code: 403 for URL: https://qualysapi.qg2.apps.qualys.eu/msp/report_template_list.php
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1906)
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1504)
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] at com.ibm.net.ssl.www2.protocol.https.b.getInputStream(b.java:1)
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] at com.q1labs.vis.scanners.qualys.QualysConnector.getUrlStream(QualysConnector.java:139)
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] at com.q1labs.vis.scanners.qualys.TemplateListCompiler.compileTemplateList(TemplateListCompiler.java:55)
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] at com.q1labs.vis.scanners.qualys.QualysTaskModule.init(QualysTaskModule.java:76)
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] at com.q1labs.vis.scanners.base.ScannerModule.run(ScannerModule.java:174)
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] at java.lang.Thread.run(Thread.java:811)
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] com.q1labs.vis.scanners.qualys.AssetDataReportCompiler: [ERROR] [NOT:0000003000][XX.XX.48.10/- -] [-/- -]Could not retrieve template report list through Qualys API: There was an authentication error while connecting to the Qualys API (indicated by an HTTP response code '403') - the account and credentials should be verified
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] com.q1labs.vis.exceptions.ScannerTaskException: There was an authentication error while connecting to the Qualys API (indicated by an HTTP response code '403') - the account and credentials should be verified
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] at com.q1labs.vis.scanners.qualys.QualysConnector.getUrlStream(QualysConnector.java:180)
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] at com.q1labs.vis.scanners.qualys.TemplateListCompiler.compileTemplateList(TemplateListCompiler.java:55)
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] at com.q1labs.vis.scanners.qualys.QualysTaskModule.init(QualysTaskModule.java:76)
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] at com.q1labs.vis.scanners.base.ScannerModule.run(ScannerModule.java:174)
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] at java.lang.Thread.run(Thread.java:811)
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] com.q1labs.vis.scanners.qualys.QualysTaskModule: [ERROR] [NOT:0000003000][XX.XX.48.10/- -] [-/- -]Abandoning scan task 10.100.48.0/24:1-9000, exceptions were thrown while initializing
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] com.q1labs.vis.exceptions.ScannerInitException: com.q1labs.vis.exceptions.ScannerTaskException: Could not retrieve template report list through Qualys API: There was an authentication error while connecting to the Qualys API (indicated by an HTTP response code '403') - the account and credentials should be verified
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] at com.q1labs.vis.scanners.qualys.QualysTaskModule.init(QualysTaskModule.java:81)
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] at com.q1labs.vis.scanners.base.ScannerModule.run(ScannerModule.java:174)
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] at java.lang.Thread.run(Thread.java:811)
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] Caused by:
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] com.q1labs.vis.exceptions.ScannerTaskException: Could not retrieve template report list through Qualys API: There was an authentication error while connecting to the Qualys API (indicated by an HTTP response code '403') - the account and credentials should be verified
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] at com.q1labs.vis.scanners.qualys.TemplateListCompiler.compileTemplateList(TemplateListCompiler.java:88)
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] at com.q1labs.vis.scanners.qualys.QualysTaskModule.init(QualysTaskModule.java:76)
    Dec 23 15:43:23 ::ffff:XX.XX.48.10 [vis] [Qualys Scanner-52-worker] ... 2 more
    Dec 23 15:43:53 ::ffff:XX.XX.48.10 [vis] [Schedule Manager] com.q1labs.vis.ScheduleManager: [INFO] [NOT:0000006000][XX.XX.48.10/- -] [-/- -]Received scan update response from qualys scanner with config id 52 and request id 9 - progress: 0% status: Pending
    Dec 23 15:43:53 ::ffff:XX.XX.48.10 [vis] [Schedule Manager] com.q1labs.vis.ScheduleManager: [INFO] [NOT:0000006000][XX.XX.48.10/- -] [-/- -]Received scan update response from qualys scanner with config id 52 and request id 9 - progress: 0% status: Failed

    ------------------------------
    cherbani samir
    ------------------------------


Related Content