Use Asset Groups in VR Assignment Rules

[Jkelley]

I am wondering if anybody has used Qualys asset groups in the assignment rule conditions before, I'm trying to avoid using hundreds of IPs/ ranges in the conditions but I can't seem to dot walk to the asset groups.

[Aaron Molenaar · Accepted solution]

We are a Rapid7 shop, not Qualys, so not sure if this translates completely. Asset groups from Rapid7 are not imported to Vulnerability Response (98% certainty on that statement). However, asset groups can be configured to create Asset Tags on assets contained in the group, and Tags are imported to VR. Tags can be found on the Discovered Item record in the Host Tag or Resource Tag attribute (depending on version).

We use tags often in our assignment rules by dot-walking DiscoveredItem.HostTag.

Hope this helps.

Aaron

[Jkelley]

Thank you - familiar with using tags, will recommend that approach.