Qualys scan from Servicenow -
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-23-2020 03:24 PM
Hello,
While initiating scans from Servicenow to Qualys, I get the below error. I am using the "rescan vulnerable items" UI action from the VUL record.
Error: Unsuccessful response from server. Status code: 400
I have already default_scan_appliance and default_scan_appliance in Qualys configuration
can someone please let me know what this error about ?
Thanks
.
- Labels:
-
Vulnerability Response

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-24-2020 12:09 AM
Hi,
Can you check the ECC queue for more information. This seems to be a bad request.
Thanks,
Ashutosh
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-24-2020 06:03 AM
HI,
There is nothing created in the ECC queue.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-24-2020 06:32 AM
Did you check the documentation for section error handling checklist ? Are you using the ServiceNow Vulnerability Response app or custom integration developed by Qualys ?
If it is the latter one, write to api-integrations@qualys.com and the team will help you you. I have worked at Qualys since 2015 to 2018 and it is an indivisible part of work for the dev team to support folks with queries revolving around Q APIs in ServiceNow.
Hope that helps. Good luck !
Thanks,
Nitin | nitbabar@gmail.com

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-24-2020 08:27 AM
Hi,
So, I'm am wondering about the IP address that you blanked out....
🙂
First, if it is an IPv6 address, the Qualys API (typically) does not support that. If the IP address falls outside of the Scanner range that will not work either.
I would grab a known good IPV4 address that falls in the range of the scanner and kick off a manual scan for the IP and check the results.
Go ahead and mark this as helpful or correct.