Use Asset Groups in VR Assignment Rules

Jkelley
Tera Contributor

I am wondering if anybody has used Qualys asset groups in the assignment rule conditions before, I'm trying to avoid using hundreds of IPs/ ranges in the conditions but I can't seem to dot walk to the asset groups.

1 ACCEPTED SOLUTION

Aaron Molenaar
Mega Guru

We are a Rapid7 shop, not Qualys, so not sure if this translates completely. Asset groups from Rapid7 are not imported to Vulnerability Response (98% certainty on that statement). However, asset groups can be configured to create Asset Tags on assets contained in the group, and Tags are imported to VR. Tags can be found on the Discovered Item record in the Host Tag or Resource Tag attribute (depending on version).

 

We use tags often in our assignment rules by dot-walking DiscoveredItem.HostTag.

 

Hope this helps.

Aaron

View solution in original post

2 REPLIES 2

Aaron Molenaar
Mega Guru

We are a Rapid7 shop, not Qualys, so not sure if this translates completely. Asset groups from Rapid7 are not imported to Vulnerability Response (98% certainty on that statement). However, asset groups can be configured to create Asset Tags on assets contained in the group, and Tags are imported to VR. Tags can be found on the Discovered Item record in the Host Tag or Resource Tag attribute (depending on version).

 

We use tags often in our assignment rules by dot-walking DiscoveredItem.HostTag.

 

Hope this helps.

Aaron

Jkelley
Tera Contributor

Thank you - familiar with using tags, will recommend that approach.