Populating the CMDB - Qualys integrations

[Sarah James]

Hi everyone,

I am looking for some advise and experience for those who have used or are exploring integrations with Qualys to populate their CMDB.  Seeking information to help us determine our best path forward for deciding between using:
- ServiceNow Service Graph connector for Qualys
- Qualys CMDB Sync Service Graph Connector

I am working with a customer who is at the start of their ServiceNow journey leveraging CMDB, CSDM and Discovery, and we are starting to explore how integrations (like Qualys) could help in situations for network segments with security controls where we cant get credentials. In this instance they have a lot of good data in Qualys about what is in their network. 

Requirement: As a CMDB admin, I need to populate the CMDB, specifically data for cis like servers where discovery doesnt have the creds, unable to use creds for particular network segments - unable to create or update some servers today due to credential limitations, so that I can automatically create and update the CMDB at this technical layer / reduce manual efforts and manual creation.

We started to test and leverage the one provided by Qualys but are not finding the experience as good as we were expecting. Have also reached out to ServiceNow but understand there arent any materials which 

recommend one over the other for different use cases, have any references to talk to that. 

Whilst we have a list of the features of both, there isnt something which would help us truly understand the benefit over the other, our current path is to poc / test and compare both. 

[AJ-TechTrek]

Hi @Sarah James ,

Please refer the below docs, Which may help.

https://cdn2.qualys.com/docs/qualys-cmdb-sync-v2.pdf

https://www.qualys.com/apps/cmdb-sync/

Please appreciate the efforts of community contributors by marking appropriate response as Mark my Answer Helpful or Accept Solution this may help other community users to follow correct solution in future.

Thanks

AJ

Linkedin Profile:- https://www.linkedin.com/in/ajay-kumar-66a91385/

[Sarah James]

Thanks for sharing.

I have access already to that documentation plus others, but wanting to see if anyone can share any experiences or feedback re: the difference between these Qualys ones, to the ServiceNow one (ServiceNow Service Graph connector for Qualys).

Seeking this info to help us determine which one may suit us best and why to choose one over the other - pro / cons of each etc. 

[NickLintgenFV]

@Sarah James, did you end up coming to any conclusions between these two integrations?

We are currently using the Qualys CMDB Sync Service Graph Connector but it is less than user-friendly, as you suggested.  Improvements/additions to the transform maps don't seem to be working for us, either.  Is the Service Graph Connector for Qualys leveraging IntegrationHub ETL and robust transformers?

I've noticed the ServiceNow Service Graph connector for Qualys now being available, but agree that it is very unclear when one would be preferred over the other... or if the ServiceNow-developed SGC will eventually replace the Qualys-developed one.

Thanks!

Nick

[Sarah James]

Sorry @NickLintgenFV for my delayed response to this. 

We decided to proceed with a POC for the ServiceNow Graph Connector, but have since had issues testing the connection successfully. We are currently blocked awaiting support from Qualys to make sure we have the right configuration details. 

If you have that all sorted, I would be going ahead with the ServiceNow one as you are right it has been built similar to other Service Graph Connectors that initially seems to be more user friendly for sure.