What is Qualys Cloud Agent and how do I use it?

Tags qualys

Overview

Qualys Cloud Agent is a light application that runs in the background of the systems where it is installed. This gives updated scan data sent back to the Qualys platform without having to perform active scans.

How to Use Cloud Agent

Installation instructions will be provided along with the install agent, as each agent as its own individual activation code.

Once you’ve installed the agent, within an hour it should display in Asset View. First go to Qualys Asset View. Click on the drop-down menu in the upper left-hand corner of Qualys, this will list the available modules. This list will change over time as we add or remove Qualys services. Click on Asset View.

Where to find Asset View button in V D M R menu

  Once on this screen navigate to the Assets tab at the top

showing where to find the Assets tab

 

Once on the Assets screen this will show you all of the assets tagged with your Business Unit and Asset Group. Use the following search string in the search box to show only the assets running Cloud Agent: tags.name:`Cloud Agent`

example assets screen

 

Click on the asset and it will bring up an information window. The main page shows the Host Name, IPv4 Address, Asset ID, Operating System info, location, and log-in activity.

example Asset Summary page

 

Other tabs with good information include the System Information tab which shows services running on the device, the Open Ports which shows detected open ports on the device as well as what services have detected using those ports, and the Vulnerabilities tab, which shows detailed information on the vulnerabilities detected on the machine.

example vulnerabilities tab

 

From here you can click on the chart and get more detailed information on the vulnerabilities present including their QID’s.

example of more details page

 

If you click on a QID it will give you more details on the vulnerability, including the threat is poses, the impact it can have, and potential solutions.

example details of a Q I D details screen

example of vulnerabiiity solution page

With quick access to this information you can easily see how each individual asset has in terms of security vulnerabilities, and information on how to address them. This is why Qualys Cloud Agent is extremely useful, as it allows you to sort, view, and access your assets remotely.

Print Article

Related Articles (6)

A step by step guide for creating, running, and scheduling vulnerability scans in Qualys
How to create and run a vulnerability report in Qualys
UIC's Asset tagging naming convention for use in Qualys.
Qualys’s Global IT Asset Inventory is a system built into Qualys that allows you view and organize all the assets in a unit.
A summary of what is the UIC Qualys Threat Protection module how to use it.
An overview of Qualys a network vulnerability scanner

Related Services / Offerings (1)

Qualys is a cloud-based vulnerability scanner and threat detector which comes with the ability to run IP based targeted scans or install a lightweight agent on endpoints for continuous monitoring. Qualys not only discovers threats and vulnerabilities but offers known effective ways to solve these threats.