Qualys Qualysguard Devices - Cisco CS-MARS-20-K9 - Security MARS 20 User Manual

Chapter 9 Configuring Vulnerability Assessment Devices
Select Add SW Security apps on a new host or Add SW security apps on existing host from the
Step 2
Device Type list.
Enter the device name and IP addresses if adding a new host.
Step 3
Click Apply.
Step 4
Click the Reporting Applications tab.
Step 5
From the Select Application list, select eEye REM 1.0.
Step 6
Click Add.
Step 7
Enter the following information:
Step 8
•
•
•
•
Click Submit.
Step 9
Step 10 Click Apply.
Once you activate this device (click Activate in the web interface), you must define the schedule at which
MARS should pull data from it. For more information, see

Qualys QualysGuard Devices

In MARS, a QualysGuard device represents a specific report query to the QualysGuard API Server,
which is the central API server hosted by Qualys. The only one that you configure to work with MARS
is the QualysGuard API Server. You want to ensure that the QualysGuard API Server can provide reports
about the devices on the network segments that you are monitoring with the MARS Appliance, as each
MARS Appliance is responsible for identifying false positives for the network segments it monitors.
If you have a subscription to the QualysGuard service, MARS can pull VA data from the QualysGuard
database using the QualysGuard XML API, version 3.3. To configure MARS to pull this data, you must
perform three tasks:
•
•
78-17020-01
Database Name—The name for this database.
Access Port—The default access port is 1433.
Login—The login information for the database.
Password—The password information for the database.
Configure QualysGuard to collect the required data, ensuring that the data is current.
Add the QualysGuard device that represents a report query to MARS using the web interface.
Scheduling Topology Updates, page
User Guide for Cisco Security MARS Local Controller
Qualys QualysGuard Devices
2-39.
9-5