Slide 1: QSC 2021 VMDR Overview
QSC 2021 VMDR Overview
Slide 2: VMDR Training Documents
VMDR Training Documents § QSC 2021 VMDR Overview Lab Supplement § QSC 2021 VMDR Overview Slides You can download both documents, just below the presentation you are viewing (at the bottom of the page). 2 Qualys, Inc. Corporate Presentation
Slide 3: Play Lab Tutorials
Play Lab Tutorials 3 Qualys, Inc. Corporate Presentation
Slide 4: Qualys VMDR Lifecycle
Qualys VMDR Lifecycle VMDR®
Slide 5: VMDR Agenda
VMDR Agenda 1. Asset Management • Qualys Sensor Overview • CyberSecurity Asset Management (CSAM) 2. Vulnerability Management (VM) • Vulnerability Findings • Dashboards & Widgets 3. Threat Detection & Prioritization (TP) • Threat Intelligence Feed • VMDR Prioritization Report 4. Response – Patch Mana
Slide 6: Asset Management
Asset Management Qualys, Inc. Corporate Presentation
Slide 7: CIS Control 1: Inventory and Control of Enterprise Assets
CIS Control 1: Inventory and Control of Enterprise Assets https://www.cisecurity.org/controls/inventory-and-control-of-enterprise-assets/
Slide 8: Qualys Sensor Platform
Qualys Sensor Platform Remote Scanners (Internet facing) CORSE EOESKY CASS Cloud Agents (>, = (servers, endpoints, ° mobile devices) : . ° e Cloud ar e Connectors _ e e e . e . ° SaaS Connectors Container Sensors SK APIs (collect data from 3rd parties) Local Scanners Passive Scanners d Out-of-Band S
Slide 9: Configure Agents for VMDR
Configure Agents for VMDR § The patching and response functions in VMDR require Cloud Agent. § Some Agent Activation Keys may need to be updated to include the VMDR application modules (i.e., VM, CSAM, SCA, and PM). 9 Qualys, Inc. Corporate Presentation
Slide 10: Lab 1: Configure Agents for VMDR
Lab 1: Configure Agents for VMDR Please consult pages 3 to 13 in the lab tutorial supplement for details. 10 mins Tutorial begins on page 4.
Slide 11: Upgrade Agent Activation Keys
Upgrade Agent Activation Keys § Upgrade Agent Activation Keys to include VMDR application modules (i.e., VM, SCA, PM, CSAM). 11 Qualys, Inc. Corporate Presentation
Slide 12: Activation Key Tagging Strategy
Activation Key Tagging Strategy • BEST PRACTICE: Assign “static” tags to agent Activation Keys and use them to ensure agent hosts receive their appropriate performance settings, patching licenses, and patch job assignments.
Slide 13: CyberSecurity Asset Management
CyberSecurity Asset Management Qualys, Inc. Corporate Presentation
Slide 14: Two Asset Management Applications
Two Asset Management Applications • Global AssetView (GAV) Provides foundational inventory gathering capabilities for all assets in your IT environment, from on-premise servers and PCs, to Cloud instances, containers, Enterprise IoT and OT environments. • CyberSecurity Asset Management (CSAM) Delive
Slide 15: CSAM or GAV Key Features
CSAM or GAV KEY FEATURES GAV (free) CSAM Get complete visibility into your environment Discover and inventory all your assets View categorized and normalized hardware and software information Standardize your inventory Define criticality and find related assets Add business context through dynamic t
Slide 16: Comprehensive Asset & Software Inventory
Comprehensive Asset & Software Inventory CSAM Catalog: Categorize, Normalize and Enrich Physical Scanner Cloud Agent OS/HW/SW Lifecycle Stage Virtual Scanner Passive Sensor Support Stage License type Cloud Connector API Manufacturer Category Container Sensor Out-of-Band • Qualys CyberSecurity Asset
Slide 17: Qualys Categorization, Normalization & Enrichment
Qualys Categorization, Normalization & Enrichment
Slide 18: Search Hardware Categories
Search Hardware Categories hardware.category1: value1 hardware.category1: `Networking Device` hardware.category2: value2 hardware.category2: `Switch` hardware.category: value1 / value2 hardware.category: `Networking Device / Switch`
Slide 19: Hardware Category List
Hardware Category List • From the “Assets” tab, group assets by Hardware Category.
Slide 20: Hardware Lifecycle Stage
Hardware Lifecycle Stage Search Token: hardware.lifecycle.stage:value § General Availability (GA) - Hardware is in production, available for purchase, and supported § End of Sale (EOS)- No longer being sold or by vendor § Obsolete (OBS) - End-of-Service; no longer serviced via upgrades, patches, or
Slide 21: Search OS Categories
Search OS Categories operatingSystem.category1: value1 operatingSystem.category1: `Windows` operatingSystem.category2: value2 operatingSystem.category2: `Server` operatingSystem.category: value1 / value2 operatingSystem.category: `Windows / Server`
Slide 22: OS Category List
OS Category List • From the “Assets” tab, group assets by OS Category.
Slide 23: Search Software Categories
Search Software Categories software:(category1: value1) software:(category1: `Security`) software:(category2: value2) software:(category2: `Endpoint Protection`) software:(category: value1 / value2) software:(category: `Security / Endpoint Protection`)
Slide 24: Software Category List
Software Category List • From the “Software” tab, group software by Category.
Slide 25: OS & Software Lifecycle Stages
OS & Software Lifecycle Stages Search Tokens: operatingSystem.lifecycle.stage:value software:(lifecycle.stage:value) • Generally Available (GA) - When the product became available for purchase. • End-of-Life (EOL) - No longer marketing, selling, building new features, or promoting product (Security
Slide 26: Lab 2: Search Using Categories
Lab 2 : Search Using Categories Please consult pages 14 to 15 in the lab tutorial supplement for details. Tutorial begins on page 15. 5 mins
Slide 27: Software License Category
Software License Category Commercial – Supported by vendor. Open Source – Free for public use.
Slide 28: Dynamic Rule-Based Tags
Dynamic Rule-Based Tags • The “Asset Inventory” rule engine allows you to build tags using query tokens, including the Hardware, OS, and Software category tokens. • Other “dynamic” rule engines are also available.
Slide 29: Lab 3: Dynamic Rule-Based Tags
Lab 3 : Dynamic Rule-Based Tags Please consult pages 16 to 17 in the lab tutorial supplement for details. Tutorial begins on page 16. 5 mins
Slide 30: Unidentified vs. Unknown
Unidentified vs. Unknown Some OS and Hardware assets may appear as “unidentified” or “unknown.” Unidentified • Not enough data has been discovered/collected for Qualys to determine the asset’s hardware or operating system. Unknown • Adequate data exists for Qualys to categorize the asset, but it has
Slide 31: Network Passive Sensor
Network Passive Sensor
Slide 32: Passive Sensor Overview
Passive Sensor Overview § Sniffs traffic via network TAP or the SPAN port of a network switch. § Captured data and traffic is sent to the Qualys Platform for analysis and processing. 1. Discovered assets not in your account, are placed in the “Unmanaged” section of Qualys CSAM. 2. Enable “Traffic An
Slide 33: Managed vs. Unmanaged Assets
Managed vs. Unmanaged Assets 1. If discovered data is confirmed to match an asset already in your account, its information will be merged with the existing asset. 2. Discovered assets not in your account, are placed in the “Unmanaged” section of Qualys CSAM.
Slide 34: Unmanaged Assets
Unmanaged Assets • It is common to find unidentified or unknown values within the "Unmanaged" assets section of the CyberSecurity Asset Management application. • Confidence levels are provided (LOW, MEDIUM, HIGH) for OS and hardware findings.
Slide 35: Network Traffic Analyzer
Network Traffic Analyzer § Conversations between assets can offer new discoveries and insights. QSC Conference, 2018
Slide 36: Network Passive Sensor User Guides
Network Passive Sensor User Guides ü Stay up-to-date with the latest sensor features and specifications. 36 Qualys, Inc. Corporate Presentation
Slide 37: CMDB Sync
CMDB Sync
Slide 38: Certified ServiceNow CMDB Sync App
Certified ServiceNow CMDB Sync App • Supports 2-way sync (Qualys to ServiceNow and ServiceNow to Qualys) • Up-to-date, categorized, normalized, and enriched ServiceNow CMDB • Enrich Qualys assets with key CMDB business data • Synchronization schedules can be configured and saved. • Asset metadata is
Slide 39: Import Business Attributes from ServiceNow CMDB
Import Business Attributes from ServiceNow CMDB • Automatically import business application and business context attributes from ServiceNow CMDB • Identify other assets associated with a business application
Slide 40: Use Business Attributes to Search for Assets
Use Business Attributes to Search for Assets • Use any of the “businessApp” search tokens to single out assets, based on the business information and characteristics provided by ServiceNow. • Queries using these tokens will impact assets already synchronized.
Slide 41: Lab 4: CMDB Sync and Business Context
Lab 4 : CMDB Sync and Business Context Please consult pages 18 to 19 in the lab tutorial supplement for details. 5 mins Tutorial begins on page 18.
Slide 42: Integration with ServiceNow CMDB
Integration with ServiceNow CMDB To implement ServiceNow CMDB Integration, a Qualys subscription with API access is required, along with the following application modules: • CSAM • Vulnerability Management 1. Qualys CMDB Sync App • Install the Qualys CMDB Sync App (available in ServiceNow Online Sto
Slide 43: CMDB Sync App User Guides
CMDB Sync App User Guides 43 Qualys, Inc. Corporate Presentation
Slide 44: Public APIs for CMDB Sync
Public APIs for CMDB Sync • CSAM now supports import of Asset business metadata and Business app metadata from your CMDB into your Qualys asset inventory (using v2 APIs). • Imported business attributes are listed in the Asset Details page. • User must have access to the CSAM module with API enabled
Slide 45: Authorized & Unauthorized Software
Authorized & Unauthorized Software
Slide 46: CIS Control 2: Inventory and Control of Software Assets
CIS Control 2: Inventory and Control of Software Assets https://www.cisecurity.org/controls/inventory-and-control-of-software-assets/
Slide 47: Software Rule Types
Software Rule Types § Create rules for authorized/unauthorized software and software that needs to be reviewed. 47 Qualys, Inc. Corporate Presentation
Slide 48: Lab 5: Software Authorization
Lab 5: Software Authorization Please consult pages 20 - 21 in the lab tutorial supplement for details. Tutorial begins on page 20. 5 mins
Slide 49: Create Software Rules
Create Software Rules • View, create and modify rules from the RULES section or the “Software” tab under the INVENTORY section. 49 Qualys, Inc. Corporate Presentation
Slide 50: Rule Precedence
Rule Precedence • Rules at the top of the list have precedence over the rules below. • Click the “Reorder” button to move rules higher or lower.
Slide 51: Software Authorization Tokens
Software Authorization Tokens • AUTHORIZED • UNAUTHORIZED • NEEDS REVIEW • After creating software authorization rules, software authorization tokens can be used to search and query. 51 Qualys, Inc. Corporate Presentation
Slide 52: Vulnerability Management
Vulnerability Management
Slide 53: VM Sensors
VM Sensors LAN 2 • EC2/VPC Remote Users • Azure • Google LAN 1 DMZ Qualys Cloud Platform
Slide 54: Vulnerability Findings
Vulnerability Findings § Industry-leading vulnerability KnowledgeBase with tens-of- thousands of vulnerability signatures. § Each vulnerability is ranked and associated with: • Qualys Severity Level • CVSS Score • CVE & Bugtraq IDs • Available Patches • Known Threats • Associated Malware • and more.
Slide 55: Lab 6: Vulnerability Findings
Lab 6 : Vulnerability Findings Please consult pages 22 to 24 in the lab tutorial supplement for details. Tutorial begins on page 23. 5 mins
Slide 56: Vulnerability Findings In CSAM
Vulnerability Findings In CSAM • View and patch vulnerability findings from within CyberSecurity Asset Management (on a per asset basis). 56 Qualys, Inc. Corporate Presentation
Slide 57: Vulnerability Findings in VMDR
Vulnerability Findings in VMDR Which ones are patchable? 1. Detected vulnerabilities must be associated with one or more patches found in the Qualys Patch Catalog 2. Detection Host must be running the Qualys Cloud Agent 3. Cloud Agent must have the PM module activated 57 Qualys, Inc. Corporate Prese
Slide 58: Dashboards & Widgets
Dashboards & Widgets
Slide 59: Out-of-Box Dashboard Templates
Out-of-Box Dashboard Templates 59 Qualys, Inc. Corporate Presentation
Slide 60: Widget Types
Widget Types • Dashboard widgets can be designed to display query results as counts, tables, columns, or pie charts, 60 Qualys, Inc. Corporate Presentation
Slide 61: Lab 7: Dashboards & Widgets
Lab 7 : Dashboards & Widgets Please consult pages 25 to 28 in the lab tutorial supplement for details. 5 mins Tutorial begins on page 25.
Slide 62: Count Widget
Count Widget • The “Count Widget” can be configured to automatically change color, when specific conditions or thresholds are met. 62 Qualys, Inc. Corporate Presentation
Slide 63: Enable Trending in Widgets
Enable Trending in Widgets • Visualize changes or swings in momentum or progress. • When enabled, widgets can store trend data for up to 90 days. • Trend lines plotted on a graph are added to the widget. 63
Slide 64: Dashboard Tags
Dashboard Tags • Add one or more Asset Tags through the Dashboard Editor. • The “Default Dashboard Access Tag” is created by Qualys. • Share dashboards with other Qualys users by assigning “dashboard” tag(s) to their accounts. 64
Slide 65: Session Break
Session Break 30 min. 65 Qualys, Inc. Corporate Presentation
Slide 66: Threat Detection & Prioritization
Threat Detection & Prioritization
Slide 67: VMDR Threat Feed
VMDR Threat Feed • Search for threats by content, category or publish date and click to view impacted assets. 67 Qualys, Inc. Corporate Presentation
Slide 68: Threat Feed Sources
Threat Feed Sources Exploit Sources Malware Sources Source Type Data Type Source Type Data Type Core Security PoC Exploits mapped to CVEs Reversing Labs CVEs associated with malware Exploit-DB PoC Exploits mapped to CVEs Trend Micro Malware names Metasploit PoC Exploits mapped to CVEs associated wit
Slide 69: VMDR Prioritization Report
VMDR Prioritization Report Prioritize vulnerabilities by: • Asset Context • Vulnerability Age • Threat Intelligence • Attack Surface 69 Qualys, Inc. Corporate Presentation
Slide 70: Lab 8: VMDR Prioritization Report
Lab 8: VMDR Prioritization Report Please consult pages 29 to 35 in the lab tutorial supplement for details. Tutorial begins on page 30. 5 min.
Slide 71: Asset Tags Add Context
Asset Tags Add Context • Design and build Asset Tags that help to distinguish the “context” of your assets. • Leverage tags that use the “Asset Inventory” rule engine, along with 1) hardware, 2) software, and 3) OS categories. 71 Qualys, Inc. Corporate Presentation
Slide 72: Priority Options
Priority Options • Prioritize discovered vulnerabilities by Age, RTIs, and Attack Surface. 72 Qualys, Inc. Corporate Presentation
Slide 73: Age
Age • Detection Age – reflects the number of days since you first detected the vulnerability (e.g., by Qualys scanner or Cloud Agent). • Vulnerability Age – (i.e., real age) reflects the number days since Qualys published the vulnerability to our KnowledgeBase. 73 Qualys, Inc. Corporate Presentation
Slide 74: Real-Time Threat Indicators (RTI)
Real-Time Threat Indicators (RTI) • Provided by VMDR Threat Feed. 74 Qualys, Inc. Corporate Presentation
Slide 75: Attack Surface
Attack Surface • Continue to define asset context with “Attack Surface” options. 75 Qualys, Inc. Corporate Presentation
Slide 76: Deploy Priority Patches
Deploy Priority Patches • Patchable assets have Cloud Agent installed and Patch Management activated. 76 Qualys, Inc. Corporate Presentation
Slide 77: Windows & Linux Patches
Windows & Linux Patches 1. Available patches provided for Windows hosts. 2. Available patches provide for Linux hosts. 77 Qualys, Inc. Corporate Presentation
Slide 78: Zero-Touch Patch Job
Zero-Touch Patch Job • Select the “Zero-Touch Patch Job” option from the VMDR Prioritization Report. • Patches are not selected individually, but instead are targeted using a query. • Schedule patch jobs to recur daily, weekly, or monthly. • Specific patching use-cases are ideal for ”Zero-Touch” pat
Slide 79: Zero-Touch Patching
Zero-Touch Patching • The query is generated from the options Patches that meet the query (Age, RTIs, and Attack Surface) selected in condition are added to the the Prioritization Report. deployment job, automatically. 79 Qualys, Inc. Corporate Presentation
Slide 80: Export to Dashboard
Export to Dashboard Results will be continuously updated within the Dashboard Widget. 80 Qualys, Inc. Corporate Presentation
Slide 81: Labs 9 & 10: Prioritization Report Use-Cases
Labs 9 & 10 : Prioritization Report Use-Cases Please consult page 36 in the lab tutorial supplement for details. Tutorials begins on page 36. 10 mins
Slide 82: Patch Management
Patch Management 82 Qualys, Inc. Corporate Presentation
Slide 83: Patch Management Features & Benefits
Patch Management Features & Benefits § Automatically correlates discovered vulnerabilities with their required patches. § Leverage existing Qualys Agents to deploy and uninstall patches. § Covers OS and Application patches, including patches from third- party software vendors (e.g., Adobe, Java, Goo
Slide 84: Patch Sources
Patch Sources OS and Application Patches come from: § Vendor Global CDNs (e.g., Oracle, Adobe, Microsoft, Apache, Google, etc...) • Qualys uses both digital signatures and hash values to validate downloaded patches, which are validated again, via Qualys Malware Insights. § Local repository (i.e., Qu
Slide 85: Qualys PM Workflow
Qualys PM Workflow 1. Install Cloud Agent on target host. 2. Assign target agent host to a CA Configuration Profile that has PM configuration enabled. 3. Activate PM module on target agent host. 4. Assign target agent host to an enabled Assessment Profile. 5. Allocate patching licenses. 6. Create Pa
Slide 86: Patch Deployment Job
Patch Deployment Job 86 Qualys, Inc. Corporate Presentation
Slide 87: Deployment Job Wizard
Deployment Job Wizard • Build patch jobs step-by-step. • Select assets and patches. • Configure scheduling option or run on-demand. • Configure communication and reboot options. • Assign access to a job. 87 Qualys, Inc. Corporate Presentation
Slide 88: Lab 11: Patch Deployment
Lab 11 : Patch Deployment Please consult pages 37 to 41 in the lab tutorial supplement for details. 10 mins Tutorial begins on page 37
Slide 89: License Consumption
License Consumption • Use Asset Tags to specify hosts for patching and to exclude others. • Only agent host assets will consume a patch license. 89
Slide 90: Targeted Assets
Targeted Assets • Add assets to a Deployment Job by Asset Name or Asset Tag. • Asset Tags are automatically transferred from VMDR Prioritization Report. 90 Qualys, Inc. Corporate Presentation
Slide 91: Asset Tag Tips
Asset Tag Tips • Design Asset Tag hierarchies with nested structures. • Selecting a “parent” tag as a patching target, includes its “child” tags automatically. • Use tags to distinguish between production and testing assets. 91 Qualys, Inc. Corporate Presentation
Slide 92: Targeted Patches
Targeted Patches • Build more efficient patch jobs by focusing on patches that have not been superseded. 92 Qualys, Inc. Corporate Presentation
Slide 93: Select Patches Using QQL
Select Patches Using QQL • The query specifies the targeted patches. • Choose between Patch or Vulnerability when constructing a query. 93 Qualys, Inc. Corporate Presentation
Slide 94: Within Scope Patch
“Within Scope” Patch • “Within Scope” only includes patches needed by your targeted host assets. 94 Qualys, Inc. Corporate Presentation
Slide 95: Schedule Deployment
Schedule Deployment • Run jobs ”on demand” or schedule them to run at regular frequencies. 95 Qualys, Inc. Corporate Presentation
Slide 96: Patch Window
Patch Window • A host will display the “Timed out” status, if the patch installation does not start within a specified patch window. • Select the “None” option to give agents an unlimited amount of time. 96 Qualys, Inc. Corporate Presentation
Slide 97: Windows Communication Options
Windows Communication Options • Choose the type of “Deployment and Reboot Communication Options” for each Deployment Job. 97 Qualys, Inc. Corporate Presentation
Slide 98: Opportunistic Patch Download
Opportunistic Patch Download • You can “Enable opportunistic patch download,” to allow agents to download required patches prior to the start of a scheduled job. 98 Qualys, Inc. Corporate Presentation
Slide 99: Linux Communication Options
Linux Communication Options • Suppress Reboot and Reboot Countdown 99 Qualys, Inc. Corporate Presentation
Slide 100: Add to Existing Job?
Add to Existing Job? • Patches and assets can be added to any deployment job, before it is enabled • Patches and assets can be added to a “recurring” job, both before and after it is enabled. 100 Qualys, Inc. Corporate Presentation
Slide 101: Best Practices
Best Practices § Use Asset Tags as targets for patch deployment jobs. § Deploy patches to test hosts, first (create Asset Tags that distinguish between test and production assets). § Once test deployments are verified, clone the deployment job and include production asset tags 101
Slide 102: Patch Catalog
Patch Catalog 102 Qualys, Inc. Corporate Presentation
Slide 103: Patches
Patches • The Patch Catalog contains tens of thousands of OS and application patches. • Presently, you can add up to 2000 patches to a single job. 103 Qualys, Inc. Corporate Presentation
Slide 104: Lab 12: Patch Catalog
Lab 12 : Patch Catalog Please consult pages 42 to 46 in the lab tutorial supplement for details. Tutorial begins on page 42. 10 mins
Slide 105: Catalog’s Default Display Filters
Catalog’s Default Display Filters • The default filters in the Patch Catalog, display patches that are missing and only the latest patches (non-superseded). 105 Qualys, Inc. Corporate Presentation
Slide 106: Acquire From Vendor
Acquire From Vendor • Patches identified with the “key-shaped” icon, cannot be downloaded by Qualys’ Cloud Agent. 106 Qualys, Inc. Corporate Presentation
Slide 107: Prioritized Products
Prioritized Products 107 Qualys, Inc. Corporate Presentation
Slide 108: Prioritized Products
Prioritized Products • Automate the selection of patches in recuring deployment jobs • Patches are selected using QQL • Patches meeting the query condition are included in scheduled deployment jobs (daily, weekly, monthly) • Patch Jobs are initiated from the Patch Catalog (i.e., click the “Prioritiz
Slide 109: Prioritized Products
Prioritized Products • Products listed near the top, introduce the most vulnerabilities into your business and enterprise architectures. 109 Qualys, Inc. Corporate Presentation
Slide 110: Create Job Using Query
Create Job Using Query • Select applications from the “Prioritized Products” list and use the “Actions” button to “Create Job using Query.” • A query designed to target the selected applications is constructed automatically (using QQL). 110 Qualys, Inc. Corporate Presentation
Slide 111: Create a Query for Patches
Create a Query for Patches • The generated query condition(s) will specify the criteria for selecting patches each time the job runs (daily, weekly, monthly). 111 Qualys, Inc. Corporate Presentation
Slide 112: Additional VMDR Applications
Additional VMDR Applications 112 Qualys, Inc. Corporate Presentation
Slide 113: Security Configuration Assessment (SCA)
Security Configuration Assessment (SCA) § Monitor and assess assets for misconfigurations. § Leverage Qualys Scanners and Agents. § Provides over 400 CIS Benchmark Policies for hundreds of OS and application technologies. § Upgrade from SCA to PC. 113 Qualys, Inc. Corporate Presentation
Slide 114: CloudView & Cloud Security Assessment (CSA)
CloudView & Cloud Security Assessment (CSA) § Leverage Qualys Cloud Connectors. § Add cloud-based assets to your asset inventory. § Collect metadata to assess both your account and assets for misconfigurations. § CSA provides “out-of-box” policies for your AWS, Azure, and Google accounts. 114 Qualys
Slide 115: Container Security (CS)
Container Security (CS) • Assess container applications for vulnerabilities and misconfigurations. • Deploy Container Sensors right along side other container applications. Container Sensor Types: 1. General Sensor 2. Registry Sensor 3. CI/CD Pipeline Sensor 115 Qualys, Inc. Corporate Presentation
Slide 116: CertView (CERT)
CertView (CERT) Leverage Qualys Scanner Appliances to provide visibility into certificates across your network and enterprise architecture (on-premise and cloud-based). § Create a baseline inventory of existing certificates and monitor for new certificates. § Identify certificates that have weak sig
Slide 117: Continuous Monitoring
Continuous Monitoring § Add custom alerts to your vulnerability assessment program for immediate response. § CM works in tandem with VM/VMDR: • Deploy Qualys Scanner Appliances and/or activate the VM module for deployed Qualys Agents. • Schedule frequent or continuous vulnerability scans. 117 Qualys
Slide 118: VMDR for Mobile Devices
VMDR for Mobile Devices § Collect inventory and configuration data from your mobile devices (integration with Qualys Global AI). § Perform vulnerability and compliance assessments. § Perform active device operations, like locking a screen or locating a missing device. 118 Qualys, Inc. Corporate Pres
Slide 119: Following This Course
Following This Course VMDR Certification Exam https://gm1.geolearning.com/geonext/qualys/scheduledclassdetails4enr oll.geo?&id=22511237824 VMDR Course Survey https://forms.office.com/r/rsy0Aja6Xz VMDR Trial Account https://www.qualys.com/forms/vmdr/ 119 Qualys, Inc. Corporate Presentation
Slide 120: Thank You
Thank You training@qualys.com 120 Qualys, Inc. Corporate Presentation