Sorry, my Qualys reporting skills are a bit rusty. We perform scheduled scans on our assets. Is it possible to have the raw reports from these scans automatically emailed to specific people using the tools in the web gui?
I'm not sure why you would want to. Raw scans can get quite large. Would you please elaborate on the use case?
These particular scans are very small and are monitored by individuals within the organization. I want to be able to send the raw scan as an attachment or even a login to Qualys where they can download the PDF version of the raw scan would work. Currently, I have to download the raw scan and manually sent it to them. This would automate the process.
I believe you can setup the scheduled reports to be mailed out to certain people. I never have that done as I want to control the flow of information but I believe it can be done. Might have to create a few distribution groups in qualys as well.
I know you can set up scheduled reports, but how do you set it up to send out a scan result? If someone knows, I'd love to hear how to do it.
I do this fairly regularly using the report schedule(s) to run the report the morning after the scan runs. On Reports > Schedules, select New > Scan Report > Template Based, define a name/template used and which asset groups/IPs it will report on. It's worth noting that these automated reports cannot be scan-based, meaning that the report is actually pulling from the hosts/asset groups, not the raw scan itself (which is a bit unfortunate). So when doing this, asset management becomes very important, as old information (IPs/OSs/vulnerabilties) that hasn't updated for one reason or another may show up in the report.
Anyways, scroll down towards the bottom of the page after defining the IPs/asset groups and click the checkbox under Report Options for "Scheduling" and "Notification". Scheduling is self-explanatory, but the Notification section is what you are looking for. This is where you can setup the email notification/alert, who it will go to, and methods of sending the report. You will need to create a distribution group with the emails of who you want to receive the report (these emails do not need to be users in your Qualys subscription), but otherwise once this is setup, links to download the report(s) will be emailed to those in the distribution groups when this schedule runs.
It's also worth noting that you can password protect certain report types (e.g. PDF) if you would like to add additional security. This can be found towards the top by clicking "Add Secure Distribution" under the Report Format.
Hope this helps!
The Scan Results are not really the most suitable for human consumption. May I enquire as to the use-case for preferring it over a templated report, which can be distributed via email?
Retrieving data ...