Integration of BigFIx with Qualys for Vulnerability management

[tarwaniv]

Hi All, Please guide me through if someone has done integration of BigFix to Qualys tool for vulnerability management.

So far I have the below link for information to start off:-1:

BigFix Insights for Vulnerability Remediation is now available

The BigFix Team is pleased to announce the release of the BigFix Insights for Vulnerability Remediation application (included in the BigFix Lifecycle and Compliance suites)! This application will enable IT Security and Operations teams to collaborate much more effectively by automatically correlating discovered vulnerabilities to their proper remediations, while providing prioritization data to focus remediation efforts. This technology automates elements of the vulnerability remediation proce…

If anyone has done the integration then please post your experience and guidance. Ty

[FatScottishGuy]

I’ve had problems finding anyone who has installed Insights and we’re also looking to add IVR so will be interesting to follow this post.

[itsmpro92]

Hi @tarwaniv and @FatScottishGuy How far along are you in getting Insights set up? How large is your environment?

There is a good YouTube video from the HCL BigFix Tech Advisors that walks through the process of setting up and configuring Insights (with Tenable, but the concept is the same for Qualys). There is also this Getting Started Guide.

[tarwaniv]

Yes I found good information on the below link which can be utilized:-1:
https://help.hcltechsw.com/bigfix/10.0/integrations/Ecosystem/Quick_Start/ecosystem_qs_guide_IVR_2.html

Also I am still exploring the way I will be configuring the connections for Qualys IVR.

[FatScottishGuy]

We’re at the sizing stage

The environment is currently 53k but likely to grow to about 80k+ in the coming months.

We have all out components on separate servers, nothing resides together.

[gappy]

Hi All,

If I cannot expose Qualys API to automation. Can we manual import finding report from Qualys to IVR?