• Tomcat Authentication questions

    Has anyone dealt with tomcat installation directorys   my company has unix and windows servers that have tomcat.   Some machines have different directorys.   does every different directory need to ha...
    Ben Trevino
    created by Ben Trevino
  • Asset View - How to query assets policy compliane data?

    I am trying to add an asset view widget for policy compliance related data to a dashboard. E.g. num of total compliance failures for set of assets. Is it possible? how which attributes to use. I see primarily you can ...
    last modified by sandip
  • Transfer from Policy Compliance module to Security Configuration Assessment module

    I would like to ask for an advice. In case we go from Policy Compliance (PC) module to Secure Configuration Assessment (SCA) module, can we use existing edited CIS policies from Policy Compliance? Export them and...
  • How long does it usually take Qualys to release the scan criteria for new CIS Benchmarks?

    How long does it usually take Qualys to release the scan criteria for new CIS Benchmarks?   (I am interested in Windows Server 2019 that will be supposedly released by September)
    Morrys Lan
    created by Morrys Lan
  • no /var/tmp found

    In 1.1.8, the location /var/tmp needs to have nodev permission set. The problem is we do not have the folder location (not found) and we passed the checks with the default policy benchmarks.   In the control ite...
    Kehao Tan
    last modified by Kehao Tan
  • "Activity Log" not Capturing Changes to Roles

    Audit Acitivity in Qualysguard is not capturing  1. Role Creation 2. Role Modification 3. Role Deletion   Is there a reason for this ? Any one has any idea ?
    last modified by cutekido
  • SCA scan logs

    Hi there i would appreciate if somebody can indicate where i can get the logs with a SCA scan on Solaris 11. No qualys agent is installed.   thank you. Thewie.
    Thewie Eksteen
    created by Thewie Eksteen
  • LDAP Authentication for MongoDB

    Please advice if we can setup LDAP authentication for MongoDB Policy Compliance scans. MongoDB runs on a Linux machine in such case how do we setup LDAP Authentication. 
    created by cutekido
  • Custom Query Execution on Database in Qualys via PC Module

    IS there a way to run custom Query's on database using Qualys?
    last modified by cutekido
  • Policy Compliance report template frameworks

    Hi,   when creating a report template, there is the option to choose the framework you are interested to.   In this way, from my understanding, the report should show only the controls that are related wit...
    Max Max
    last modified by Max Max
  • Policy Compliance for Agent-only Deployment

    When will the policy compliance module be available to those who have only agents deployed? I was told at this point you must have an appliance onsite to use that module.
    Scott McIntosh
    last modified by Scott McIntosh
  • What anti-virus software is installed across the enterprise?

    As a governance and compliance group, we would like to be able to perform searches to determine the various anti-virus software (and various versions) installed across the enterprise.   What is the best way to a...
    Larry Virden
    last modified by Larry Virden
  • Oracle DB - PC Scan with Cloud Agent

    Hi,   I know that is possible have a PC scan of a MS SQL Database, using a cloud agent.   I was wondering if it is possible even with Oracle DBs and how to do it.   Thanks
    Max Max
    last modified by Max Max
  • Custom control with PowerShell

    Hello, We have a few situations across the organization that would be very useful to have the ability to write custom controls using PowerShell. For example, we have .net core versions and running and the only way to...
    Anthony Rea
    last modified by Anthony Rea
  • Not so straight-forward results of PC UDCs

    I encountered some strange results when some UDCs were assessed in the PC module:   1) First control: """     .... Ensure that a registry is set to 'Disabled' """ > Expected: "equal to 0" >...
    Ionut Pruteanu
    last modified by Ionut Pruteanu
  • Download list of policies from library

    Hello,   Is there any way I can download a list of policies from Qualys library?   Thanks!
    Nataliia Myslyvtes
    last modified by Nataliia Myslyvtes
  • Assign UDC Manifest in Bulk

    I had 1,820 cloud agents installed before I created my first User Defined Control (UDC). For newer cloud agent installs, UDC manifest is automatically getting assigned. How can I assign UDC manifest to the older 1,820...
    Nawab Kabir
    last modified by Nawab Kabir
  • How to get a PCI Report Certified by Qualys

    What are the steps needed to get a PCI report certified by Qualys?
    Sam Friday
    last modified by Sam Friday
  • Google Chrome vulnerability

    Hi All, In our environment some of devices do not have google chrome installed still it is showing vulnerable to chrome for different previous version. I have checked system installation and user profiles and registry...
    Arun Kumar
    last modified by Arun Kumar
  • QID 68519 - RPC Mountd Information Disclosure Vulnerability

    We have a customer scan reporting this issue for an NFS v4 system, but according to the development team who supports this system, this is a v3 behavior issue.  They are recommending that the test include the fol...
    George Johnson
    last modified by George Johnson