Qualys Cloud Platform 10.32 (VM, PC) API Notification 2

Prabhas Gupte

A new release of Qualys Cloud Platform 10.32 (VM, PC) includes new updated APIs, which are targeted for release in January 2025. The specific day will differ depending on the platform. See platform release dates on the Qualys Status page. This API notification provides an early preview into the upcoming APIs, allowing you to identify use cases that can leverage these updated APIs.

What’s New?

This release introduces a new API for Azure instance-based scans for internal assets. It will help you to launch and update the internal scan on Assets in Azure Cloud. Additionally, this release adds the posture modification date to the compliance policy report when a control status changes from Pass to Fail. A new “Posture Modified Date” checkbox is added in the report template and POSTURE_MODIFIED_DATE tag is added in the API response to support this.

New API for Azure Instance-Based Scans for Internal Assets

POST /api/2.0/fo/scan/cloud/internal/job/

With this release, we have added a new API to launch and update the internal scan on Assets in Azure Cloud. You can use an Azure connector and launch Instance-based scans based on location or virtual network.

Earlier Qualys supported only perimeter scanning for Azure. Now, we are providing internal cloud scan support for Azure. Azure instance-based scans for internal scan can be authenticated or unauthenticated scan. Azure internal scans support only scheduled scans.

Launch Report: Retrieve Posture Modification Date in the Compliance Policy Report

POST /api/2.0/fo/report

DTD or XSD changes: Yes

From this release, you can now retrieve the posture modification date in the report when each control posture status changes from Pass to Fail. Retrieving the posture modification date in the compliance policy report helps you monitor the 90-day SLA to remediate failed controls.

As part of this enhancement, we have added a new checkbox, Posture Modified Date, in the report template. Similarly, to support this change in the API, we have added a new DTD tag POSTURE_MODIFIED_DATE in the Compliance Policy Report response. This tag displays the control posture modification date when the Posture Modified Date checkbox is selected in the report template.

Please note that, there are no changes to the input parameters or API response when launching the report. However, changes are made to the XML format of the downloaded report.

Please refer the release note here for more details: https://docs.qualys.com/en/vm/release-notes/qweb/release_10_32_api.htm

Share your Comments

Comments

Your email address will not be published. Required fields are marked *