I am creating templates for patch reporting. In the scan results selection section I can see that the results can be restricted by Asset Groups, IPs/Ranges, and Asset Tags. There is nothing preventing me from using these in combination.
If I select Asset Group "Site A" and Asset Tag "Linux Servers", I would intuitively expect that Qualys would apply a logical AND operation. But I am seeing hosts in the report that are not Linux servers, which indicates that something counterintuitive is happening.
Is this approach of selecting by both Asset Group and Tag supported, and if so, am I overlooking something?