Integrating specific Qualys Policies with Configuration Compliance

Kevin Lillis · ‎11-10-2023

Hi,

We are in the process of integrating Qualys Policy Compliance with Configuration Compliance. We currently do have an integration successfully working for several years for Vulnerability Response. We are on the Utah version (soon going to Vancouver).

Is there a way to specifically choose which Qualys policies you want to integrate/ingest into ServiceNow Config Compliance? We have a total of 11 active policies and only wish to integrate 8 policies at this point. In addition, as we test this out, we would maybe like to integrate just one policy to start with into our DEV environment and 'work out the kinks' before we integrate the additional 7 policies.

Thanks in advance.

Kevin

Joe Kline · ‎11-15-2023

Kevin,

That link by itself doesn't really go into the detail of what to change or how to accomplish it to then limit which Policies get pulled from Qualys. However match that along with the Qualys API user guides, you can find this:

ids={value} (Optional) Show only certain policy IDs and/or ID ranges. One or
more policy IDs/ranges may be specified. Multiple entries are
comma separated. A policy ID range entry is specified with a
hyphen (for example, 160-165). Valid policy IDs are required.

That is an additional input parameter that you can add to the HTTP REST message that gets passed along and should limit you down on what will come across. For me, I have enough technical debt on customizations without doing that too, and once set would mean I have to always be in communication with the PC team that is configuring Policies on Qualys to know when they have another new one that would need to be then added to this list for import. But that sure does enable you to only go after specific ID's when the integration runs.

View solution in original post

Kevin Lillis · ‎11-15-2023

Thank you Joe! I'll look into that. We are going to test this soon and if it works, I'll come back and accept this as a solution. You've been helpful. Thanks again.

Kevin Lillis · ‎01-25-2024

What Joe suggested here works. And yes, we will have to stay on top of just the policies we want ingested and continue to update the parameters to include that. Thanks for your help.