USING QUALYS v2 API in DATA FEEDS

[GeneSteinbacher]

Ever wonder why your Data Feed will not work with Qualys.  Seems the second version of Qualys API supports a different type of authentication than used by the Data Feed HTTP Transporter.  But you can get around this by putting the authentication information in the header.  This document provides instructions on how to do this.

[KentPierson]

Can you tell me how you did the API call using the V2? I have been told that Qualys API v2 does not work with Archer.

[DavidPetty]

What issues are you having?  The doc above outlines pretty much what you need to do to connect to Qualys API v2.

Also you can use the follow PowerShell script to encode BASE64

To Base64

$b  = [System.Text.Encoding]::UTF8.GetBytes("username:Passsw0rd!")

[System.Convert]::ToBase64String($b)

From Base64

$b  = [System.Convert]::FromBase64String("SGVsbG8gV29ybGQ=")

[System.Text.Encoding]::UTF8.GetString($b)

[KentPierson]

What is the actual API call? All that is listed is https://qualysapi.qualys.com/api/2.0/
To pull the report with the v1 API I would specify the report template that I needed to pull https://qualysapi.qualys.com/msp/asset_data_report.php?template_id=XXXXXXX. I am not sure what the call would be for the v2 API call.

[madhur21jain]

Hello Kent

Were you able to resolve the issue? can you please guide which URL to be used?

Thanks in advance.

Regards

Madhur Jain

[DavidPetty]

Have you looked at the Qualys API V2 User Guide, https://www.qualys.com/docs/qualys-api-v2-user-guide.pdf?

I believe the KB URL for V2 is, https://qualysapi.qualys.com/api/2.0/fo/knowledge_base/vuln/?action=list&details=All