RSA Admin

Qualys Integration and correlation question

Discussion created by RSA Admin Employee on May 11, 2010
Latest reply on Mar 20, 2012 by anuragmal

Hello All,

I have Qualys vulnerability data feeding into enVision and I am able to query the assets and see what type of vulnerabilities each has at a very high level.  Is there anything more that I can do to perhaps build correlation rules and somehow integrate Qualys data ? Can this even be done ?? ...If so, can you post an example of a correlated alert that utilizes Qualys data ?  Even better, could you post an example of a correlated alert that contains an IPS event  (or some other event)  and Qualys data ?

 

If anyone has integrated Qualys vulnerability data or any other vulnerability data into enVision ...can you list the top 5 or 10 benefits that you get from this type of integration....

 

I guess I'm trying to link IPS alerts with Vulnerability data to get better results or improved results...

 

regards,

Rob P.

 

Outcomes