Find All Assets with MS IIS and where it is Running
So 2 different reports.
I saw QID 45104 but thought there might be another QID where only if the service was running it would find that asset.
Using Asset Search
Select your target hosts (asset groups, IP's or All)
Select QID 86000, 86001 - with results containing Microsoft (enter Microsoft into the text box)
The resulting list will show all hosts identified with Web Server Version (QID 86000) and SSL Web Server Version (QID 86001) with a banner containing "Microsoft"
Will keep trying but that search keeps timing out with our Web Gateway. Currently the way that I am doing it is searching All in the Application list for "IIS".
Did you reduce QID during search on two I selected. This should help to solve time out.
Containing text can be IIS instead Microsoft.
And you can test it with on IP to check resault.
Yes. Finally got it to work but results are not exactly what I was looking for. Thus far searching the the Applications had the best results (still only the ones Qualys can auth to).
I wasn't able to find a QID specifically for IIS running service.
However, you may try an AssetView query like this and then download the results:
Thanks Shyam but got no results that way.
Retrieving data ...