Service Graph Connector for Qualys

  • Release version: Yokohama
  • Updated January 30, 2025
  • 3 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Service Graph Connector for Qualys

    The Service Graph Connector for Qualys enables ServiceNow customers to import comprehensive hardware and software asset inventory data from the Qualys database into the Configuration Management Database (CMDB) within their ServiceNow AI Platform® instance. This integration supports managing Qualys resources directly through ServiceNow, enhancing visibility and control over asset information.

    Show full answer Show less

    Supported Versions and APIs

    • Qualys APIs: Supports Qualys Global Asset API v2 (recommended for Security Posture Control application) and Qualys Asset Management API v2 (deactivated by default; activate only if Qualys CSAM product is unavailable).
    • ServiceNow Versions: Compatible with Utah, Vancouver, and Washington releases.

    Key Capabilities

    • Asset Data Import: Imports data using specified Qualys APIs to complement Qualys Asset Discovery and facilitate more comprehensive asset management.
    • Multi-instance Support: Enables configuration and use across multiple ServiceNow instances.
    • Guided Setup: Provides an organized sequence of configuration tasks to simplify integration setup within your instance.
    • CMDB Integrations Dashboard: Offers a centralized dashboard via the Integration Commons for CMDB app to monitor integration status, processing results, and errors. Users can filter metrics by integration, time, or run.

    Mapping and Reconciliation Rules

    The connector uses predefined mapping rules to classify imported data into appropriate Configuration Item (CI) classes:

    • Hardware CI Rules: Map hardware based on two hardware category fields to target CI classes during import.
    • Computer CI Rules: Map computer assets using OS-related criteria such as OS name, category, publisher, and product name to assign target CI classes.
    • Asset Management CI Rules: Map assets based on criteria including Operating System, presence of volume info and processor, and Cloud Provider.

    To update CI attributes, customers must create new reconciliation rules to specify which discovery sources can modify the attributes. Guidance on reconciliation rules is available in ServiceNow documentation and knowledge base articles.

    The Service Graph Connector for Qualys pulls in asset inventory data (hardware and software) from the Qualys database into the Configuration Management Database (CMDB) application in your ServiceNow AI Platform® instance.

    Request apps on the Store

    Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.

    Supported versions

    Use this data to manage your Qualys resources directly from your ServiceNow AI Platform® instance.

    Supported Qualys APIs:
    • Qualys Global Asset API v2. You might prefer to use this API if you are importing data for the Security Posture Control Security Posture Control application.
    • Qualys Asset Management API v2. This API is deactivated by default. You should only activate this API if you don't have access to the Qualys Cybersecurity Asset Management (CSAM) product. ServiceNow uses a different API (Asset management and tagging) for this API but the data returned is not comprehensive.
    Supported ServiceNow® versions:
    • Utah
    • Vancouver
    • Washington

    Use cases

    The following are examples on how you can use the Service Graph Connector for Qualys for different ServiceNow applications:

    • Complements the Qualys Asset Discovery.
    • Import data with the Global Asset API or the Asset Management API.
    • Multi-instance support.

    Guided Setup

    The guided setup for the Service Graph Connector for Qualys provides you with an organized sequence of tasks to configure the integration on your instance.

    CMDB integrations dashboard

    The Integration Commons for CMDB store app provides a dashboard with a central view of the status, processing results, and processing errors of all installed integrations. You can see metrics for all integration runs. You can filter the view to a specific CMDB integration, a specific time duration, or a specific integration run. For more details about monitoring Qualys integrations in the CMDB Integrations Dashboard, see Using the CMDB Integrations Dashboard.

    Hardware CI Rules

    The hardware Configuration item (CI) mapping rule table is equipped with hardware category1, hardware category2 and corresponding target CI class. Following a Qualys API call, the system checks the hardware category1 and hardware category2 to determine their satisfaction, if hardware category1 and hardware category2 is match with the table record then the associated target CI class is added to the import set table data. During the mapping process, this designated target CI class is then utilized.

    Computer CI Rules

    The Computer CI Mapping Rule table is equipped with predefined rules, including criteria such as OS name, OS category, OS category 2, OS Publisher, OS Product name, and the corresponding target CI class. Following a Qualys API call, the system checks these rules to determine their satisfaction. If a rule is met, the associated target CI class is added to the import set table data. During the mapping process, this designated target CI class is then utilized.

    If you want to update CI attributes, you must create new reconciliation rules to determine which discovery sources can update CI attributes. See 'Reconciliation rules' in the online product documentation and the Identification and Reconciliation Fundamentals article in the ServiceNow Support Knowledge base for more information.

    Asset Management CI Rules

    The Asset Management CI Mapping Rule table is equipped with predefined rules, including criteria such as Operating System, Is Volume Info Present, Is processor Present, Cloud Provider and the corresponding target CI class. Following a Qualys API call, the system checks these rules to determine their satisfaction. If a rule is met, the associated target CI class is added to the import set table data. During the mapping process, this designated target CI class is then utilized.