Troubleshooting Qualysguard Integration - Cisco CS-MARS-20-K9 - Security MARS 20 User Manual

Chapter 9 Configuring Vulnerability Assessment Devices

Troubleshooting QualysGuard Integration

Table 9-1
Table 9-1 Error Table for QualysGuard and MARS Integration
Error/Symptom
Test connectivity failed. Click the
View Errors button for more
information.
Server unavailable.
Fail to parse scan report.
Invalid user credentials.
Test connectivity failed for qualys.
Unknown host: qualysapi.qualys.com
Please make sure that,
Proxy settings are configured
•
correctly, If there is no direct
connection exists from
CS-MARS to Qualys server
• The hostname specified in the
URL string is correct
• Login name and Password is
valid.
78-17020-01
identifies possible errors and likely causes and solutions.
Workaround/Solution
This error means that MARS was unable to connect to the Qualys device. Four
possible issues can account for this message:
You have entered an invalid hostname or IP address in the URL field. Verify the
•
value was entered correctly.
The traffic may be blocked by either a proxy server or firewalls and gateways on
•
your network. Enable SSL traffic (TCP port 443) to traverse between the MARS
Appliance and the Qualys device. Enter the correct settings for your proxy server
on the Admin > System Parameters > Proxy Setting page.
This error means that MARS was unable to parse the scan report that it pulled from
the Qualys device. Two possible issues can account for this message:
Data corruption on the QualysGuard device.
•
Format changes to the report due to an issue on the QualysGuard device or due
•
to a software upgrade on the QualysGuard device.
Verify that the QualysGuard device is running a supported version and that the device
data is not corrupted.
This error means that MARS was unable to authenticate to the Qualys device. Two
possible issues can account for this message:
The provided login credentials are incorrect. Verify these values were entered
•
correctly, and verify that the provided account has sufficient privileges.
Your account has expired. Renew your subscription services with Qualys.
•
Make sure that the DNS server is configured correctly for the MARS Appliance. For
more information on these DNS settings, see
page 5-15.
Specifying the DNS Settings,
User Guide for Cisco Security MARS Local Controller
Qualys QualysGuard Devices
9-9