Has anyone implemented or tested the newer Qualys Deep Scan capability with the ServiceNow Vulnerability Response Qualys integration?
We recently enabled Deep Scan in Qualys and found that the resulting vulnerability detections are successfully ingested into ServiceNow. However, the additional Results/Proof available for the Deep Scan finding in Qualys are not populated on the corresponding ServiceNow Detection record, leaving the Proof field empty.
From our investigation, the current ServiceNow Qualys integration uses the Host List Detection API:
/api/2.0/fo/asset/host/vm/detection/
Qualys also has the newer Host List Detection API:
/vmrs/api/1.0/host/list/detections
Has anyone else encountered this with Deep Scan findings?
I'm particularly interested in whether:
Deep Scan Results/Proof are currently supported by the ServiceNow Qualys integration.
The newer Qualys detection API is supported or planned for the integration.
There is a recommended configuration or workaround for bringing the Deep Scan Results/Proof into ServiceNow.
The detection itself is being ingested correctly; the issue appears limited to the additional evidence/results associated with the Deep Scan detection.
