How is the Qualys rescan function setup?

[Martin Dewit]

VR 14.0.6 with Qualys 12.1.1

Issue: Initiating a rescan within a VIT produces a status message of "Error code 1901. Message: Unrecognized parameters." V12.1.1 claimed to fix this error code, but it is still occurring. Any ideas?

[Jerald Carter]

Martin - 

This error reads like there is a query parameter being passed that the API does not know how to handle. In this case 'ip_network_id'. Looking at the API /api/2.0/fo/scan/scan_list_output.dtd it is a supported parameter, but has an additional note: ip_network_id (when the Network Support feature is
enabled).

Hope this helps.

[Martin Dewit]

Jerald -

Thanks for the response.

Shouldn't the Qualys integration API calls be set up correctly by default? I would also assume one should not edit/change the current API setup in ServiceNow. Our Qualys account does not have the Network Support feature enabled. The API documentation says that ip_network_id will only be valid if the feature is enabled and that it is optional. I have also verified the service account used has the Scanner Role and has API Access. 

[Jerald Carter]

Martin - 

Few more items to check on:

1. Is the Lookup By Network Partition enabled on the Qualys import settings?
2. Is the parameter being added in the sn_vul_qualys.QualysScanner._buildScanRequest() method?
3. Is the parameter being added in the HTTP Query Parameters for the Post Method?
   System Web Services->Outbound->Rest Message->Qualys Scan REST Template

[Martin Dewit]

Jerald - 

1. I do not see the option of Network Partition in production, but I see it in sub-prod. It does not look like have that enabled.
2. There is no code in the sn_vul_qualys.QualysScanner - only "new sn_vul_qualys.QualysScanner();"
3. See image.