Configuring the BlueApp for Qualys

Role Availability Read-Only Investigator Analyst Manager

To configure the BlueApp for Qualys, you need to enter your Qualys username, password, and API URL in USM Anywhere.

Qualys API Configuration

To enable Qualys in USM Anywhere, you need an admin user account and password, and you need to enter your API URL in USM Anywhere. See Qualys' Identify your Qualys Platform documentation to learn how to get your API URL.

Note: The BlueApp for Qualys does not support Qualys's IP tracking feature. If you have enabled IP tracking in Qualys, asset filtering and orchestration rules will not be available in the AlienApp.

Configure BlueApp for Qualys in USM Anywhere

To enable the BlueApp for Qualys

  1. In USM Anywhere, go to Data Sources > BlueApps.
  2. Click the Available Apps tab.
  3. Search for the BlueApp, and then click the tile.
  4. Click Configure API.
  5. If you have more than one deployed USM Anywhere Sensor, select the sensor that you want to use for the enabled BlueApp.

    BlueApps operate through a deployed sensor and use APIs to integrate with the connected third-party technology. Select the sensor that can access the integration endpoint. The HTTPS connections to the API will originate from this sensor, so it is important to make sure the sensor has network access to the BlueApp API endpoints.

  6. Enter the Qualys Username and Password, and the API URL.

  7. (Optional.) Use the checkboxes to enable the BlueApp for Qualys to create and merge assets:

    • Check Allow Automatic Creation of New Assets to enable Qualys scans to create new assets in USM Anywhere.
    • Check Allow Automatic Merging of Existing Assets to enable USM Anywhere to run a match against the Qualys identification to merge the assets found with existing USM Anywhere assets.
    • Important: If you want to create new assets, you need to select both options, Allow Creation of New Assets and Allow Merging of Existing Assets, to prevent the duplication of assets. USM Anywhere won't create new assets if you only select one of the options.

      See BlueApp for Qualys Asset Discovery and Management for more details on the asset creation and merging processes.

  8. Click Save.

BlueApp Log Collection

Once the BlueApp has been configured, you can choose to have USM Anywhere collect logs from the app on a regular basis.

To configure log collection for the BlueApp

  1. Go to Settings > Scheduler.
  2. In the Job Scheduler, search for the BlueApp on the sensor to which it was deployed.
  3. In the enabled column, click the icon for the inactive collection job.

    The icon turns green, and collection is enabled.

  4. (Optional.) Click the icon to customize the frequency of the event collection.