I have an issue to identify - why agent based scan is not able to report latest scan even though the Qualys agent service is running on the machine and machine is up and running. This is in agent scan
The device or target host is hosted in cloud. I am not able to see in the schedule scan list. But it is mentioned as RFC with the IP range not sure what it is.
There was request from Cloud team to scan the host or target for vulnerability. When checked it was last scanned on 21 days back and shared the same report.
The requester wanted to know why agent was not reported with latest scan. When contacted Qualys support team, they asked me to uninstall the agent and reinstall it. I did the same and it worked. There was 404 error. Not sure why did this happen.
If you have the Qualys Agent installed and you request a VM scan of that host today it does not force the Agent to Synchronize and correlate the newest data on the host.
You do perform a VM Scan.
But the VM scan was set for every 7 days, where we couldn't see the latest scan for last 21 days.
Let me make sure I understand you have a device with the Qualys Agent installed and you have a VM Scan of the same device scheduled for every 7 days.
There is a check box when you do a scheduled scan to scan hosts with the Qualys Agent installed, do you have this selected in your schedule?
If you don't have this selected it may be passing over your device.
Now my next question is what Policy for the Qualys Agent is assigned to the device?
they should asked for the logs in my opinion, too easy just to remove and re-install.
But glad you got it fixed.
Busby, Many thanks for taking time to answer my questions, even it is simple once. I really appreciate your willingness.
Any time as we are doing a lot with Cloud as well. Happy to try and assist.
Retrieving data ...