SN Qualys Integration

User179407
Mega Guru

Hello,

I have installed the Qualys Vulnerability Integration plugins.

I am trying to set it up using the Setup assistant.

I entered the Login credentials for Qualys, however when running  the Knowledgebase and Host detetction scans I see the below errors in the error log.

Error: Invalid response code 403 received from Qualys

 

Can some one let me know what is this error for?

Thanks

Suraj 

1 ACCEPTED SOLUTION

Okay.  SN setup should be something like:

Name:   Qualys

Server URL:     https://qualysapi.qg3.apps.qualys.com

Username:    <login name>

Password:     <password>

Be certain you have the correct fully qualifiedServer URL

If you are copying the password, make sure you are not picking up a trailing space.

View solution in original post

17 REPLIES 17

Hi Stephen,

 

Thanks for your response..

I am little confuse on which URL to use

My Qualys admin created the API account and gave ne this URL:  https://qualysguard.qualys.com

 

I entered the below URL's on Setup assistant with correct user name and password which I am able to login using Qualys UI

https://qualysapi.qg1.apps.qualys.com  ( this says URL is unreachable)

https://qualysapi.qualys.com ( this accepts the credential and the KBase Import script fails with the same error - 403)

 

Thanks for assisting.

 

 

 

 

 

Qualys has a number of servers supporting API services.  Your Qualys rep can get you situated with the correct endpoint.  In the meantime, try these:

https://qualysapi.qg2.apps.qualys.com

https://qualysapi.qg3.apps.qualys.com

 

looking at  this link..it seems our's is in US 1

https://www.qualys.com/platform-identification/

so i tried the below 3 URL"s

https://qualysapi.qualys.com (able to connect but get the 403 errro)
https://qualysapi.qg2.apps.qualys.com (The username or password is incorrect.)
https://qualysapi.qg3.apps.qualys.com (The username or password is incorrect.)

 

I will have our Qualys admin contact Qualys rep for the correct URL.

Try https://qualysapi.qg.apps.qualys.com

Also, looked at some very old documentation from 2016 on a contract I did.  Back then qualysguard was used, perhaps still is.

https://qualysguard.qg2.apps.qualys.com

it says 'The URL you entered is unreachable.