Qualys QualysGuard Scanner

• Configuration in FortiSIEM

Configuration in FortiSIEM

Complete these steps in the FortiSIEM UI:

1. Go to the ADMIN > Setup > Credentials tab.
2. In Step 1: Enter Credentials, click New to create a new credential.
   1. Follow the instructions in "Setting Credentials" in the User's Guide to create a new credential.
   2. Enter these settings in the Access Method Definition dialog box:

      Settings	Description
      Name	Enter a name for the credential.
      Device Type	Qualys QualysGuard Scanner
      Access Protocol	Qualys API
      Pull Interval	60 minutes
      Port	443
      User Name	A user who has access to the vulnerability scanner over the API.
      Password	Password associated with the user
      Description	Description about the device

3. In Step 2, Enter IP Range to Credential Associations, click New to create a mapping.
   1. Enter a host name, an IP, or an IP range in the IP/Host Name field.
   2. Select the name of your credential created in step 2 from the Credentials drop-down list.
   3. Click Save.
4. Click the Test drop-down list and select Test Connectivity to test the connection to Qualys QualysGuard Scanner.
5. To see the jobs associated with Qualys, select ADMIN > Setup > Pull Events.
6. To see the received events ,select ANALYTICS, then enter "Qualys" in the search box.