I have used traditional VM scanners for scanning hosts, scheduling scans and then viewing the results of the scan etc. I'm new to Cloud agent. So Cloud Agent module is there no concept of scheduled scans, dealing with authentication issues etc as the events are reported in realtime? Just want to get more information on tasks that you guys do regularly on cloud agent module.
The agent doesn't scan. It collects metadata on the host and uploads that information to Qualys on a scheduled you configure with a profile. All analysis/correlation is done in the Qualys cloud.
As for authentication and the agent, it is a non-issue. The agent is a service running on the box so it doesn't need authentication (except you have to install with admin rights but if you are pushing with a patch utility, they usually already install with these rights to begin with). Note, the service does run as system and is not configurable which I have complained about before to Chris. He noted that is something they would eventually look into (allowing you to run the service as a different user) so we will see. However, most other security vendors seem to take this road also so it isn't like Qualys is doing anything out of the ordinary... Just wish I had more control to lock down/secure.
If you have additional questions, set some time up with your TAM to discuss.
Can you be more specific in what your question actually is?
I would like to know how to scan cloud agents for vulnerability 4 and 5. And also how to work with authentication issues on cloud agents.
quick question derekv . Those links says that I'm not authorized. Could you please suggest.
@derekv . Thank you!!. There is a pdf document in the same link for those who do not have access.