Overview

In Censys Attack Surface Management (ASM), you can connect your host association/dissociation LogBook with Qualys Vulnerability Management Detection and Response (VMDR) to gain insight into your attack surface and exposures.

How the integration works

After configuring the integration, it will poll Attack Surface Management for new host association and host disassociation events in LogBook.

• If a host is associated with your attack surface (via a host association event), the host is sent to Qualys VMDR and added to your asset folder -- by default, this is called "Censys ASM IPs".
• If a host is disassociated with your attack surface (via a host disassociation event), the host is removed from the asset folder.
• Before adding a host to Qualys VMDR, the integration checks whether the host already exists. If it exists, the host is not imported. If it does not exist, the host is imported.

How to integrate Qualys VMDR with Censys ASM

Prerequisites

• You must have an active instance of the Qualys Cloud Platform and a subscription or license to Qualys VMDR.
• In Qualys VMDR, you must create an asset group for the ASM IPs.
  • We recommend using the name "Censys ASM IPs." 

Configuring the integration in Censys ASM

1. Log in to Censys ASM, then click Integrations at the top of the page.
2. Locate Qualys and click Set Up.
   
3. On the Authentication page, configure the following:
   • Username: Enter your Qualys username.
   • Password: Enter your Qualys password.
   • API Server URL: Enter your Qualys API server URL.
     • Follow the Qualys documentation to confirm your URL.
   • Vulnerability Management API version: Enter the API version to use.
     • To find the API version:
       1. Log in to your Qualys account and go to Help > Resources > API Documentation.
       2. Search for "Qualys API (VM, PC)" then click the API user guide PDF.
       3. Navigate to the Authentication chapter to confirm the API version.
   • Asset management and Tagging API version: Enter the API version to use.
     • To find the API version:
       1. Log in to your Qualys account and go to Help > Resources > API Documentation.
       2. Search for "Asset Mgmt and Tagging API" then click the API user guide PDF.
       3. Navigate to the Authentication chapter to confirm the API version.
          
          
4. Click Connect, then click Next Step.
5. Enter the Asset Group IP for the group you created in Qualys.
6. Click Submit then click Close.

Modifying the integration

1. Log in to Censys ASM, then click Integrations at the top of the page.
2. Locate Qualys and click Manage.
3. Go through the setup wizard, as described in the section above, and make any necessary changes.

Verifying that the assets appear in Qualys

1. Log in to Qualys and navigate to Assets > Asset Groups.
2. In the list of groups, find the one you created for the Censys ASM integration. Click next to the IP address for that asset group, then click Info.
   
3. Click the tabs to learn more about the assets in the group.