Key facts
- Manuals
- 4
- Languages
- EN
- Last added
- 2023-10-21
Featured Qualys manuals

Qualys Arbor-APS DDoS Data Mapping Guide
This guide explains how Arbor-APS DDoS data fields map to the Qualys Context XDR data model. It covers device details, supported formats, and field mappings including action, source IP, destination IP, and geo coordinates. The guide is for configuring data ingestion in Qualys Context XDR.
The document includes sample values and QQL tokens for each field, and notes that support for specific versions requires contacting a TAM. It also references the Qualys Context XDR UI for managing data sources.
Covers: About this Guide · About Qualys · Qualys Support · Overview · Device Details · Supported Formats

Qualys App for IBM QRadar User Guide
This guide explains how to install and configure the Qualys App for IBM QRadar to ingest Qualys VM detection data. It covers prerequisites, app installation, log source setup, API configuration, and troubleshooting common issues. The app supports both single-user and multi-tenant environments, with detailed steps for each.
The guide includes sections on validating dependencies, mapping log sources, enabling last scan datetime parsing, configuring credentials, and managing multi-tenant instances. It also provides troubleshooting tips for errors such as connection refused, unauthorized access, and missing data.
Covers: Introduction to Qualys App for QRadar · What’s New in This Release · Prerequisites · Install the App · Application Dependencies · Validating Dependencies

Qualys Virtual Scanner Appliance User Guide
The Qualys Virtual Scanner Appliance is a stateless, disposable resource that extends the Qualys Cloud Platform capabilities for scanning devices and web applications. This user guide covers the deployment process across supported virtualization platforms, including VMware, Citrix, Microsoft Hyper-V, and major cloud providers like AWS, Azure, and Google Cloud Platform.
Covers: About this guide · Deploying Scanner Through Various Tools · Add Your Virtual Scanner · Configuration settings · Network Settings · Troubleshooting

Qualys Symantec Endpoint Protection Data Mapping Guide
This document serves as a reference for integrating Symantec Endpoint Protection data into the Qualys Context Extended Detection and Response (XDR) platform. It explains how data points from the Symantec product are normalized, enriched, and mapped to the Qualys internal data model to provide a unified security view.
Covers: About this Guide · About Qualys · Overview · Device Details · Supported Formats · Data Field Mappings
Latest Qualys manuals
Qualys Arbor-APS DDoS Data Mapping Guide
User Manual 8 pages · 227 KB · ENGuide for mapping Arbor-APS DDoS data fields to Qualys Context XDR data model.
Qualys App for IBM QRadar User Guide
User Manual 34 pages · 1.5 MB · ENUser guide for installing, configuring, and using the Qualys App for IBM QRadar integration.
Qualys Virtual Scanner Appliance User Guide
User Manual 26 pages · 2.1 MB · ENThis guide explains how to deploy, configure, and troubleshoot the Qualys Virtual Scanner Appliance on various virtualization platforms and cloud environments.
Qualys Symantec Endpoint Protection Data Mapping Guide
User Manual 8 pages · 180 KB · ENThis guide details the data field mappings between Symantec Endpoint Protection logs and the Qualys Context XDR data model.
Which document do I need?
User Manual
Day-to-day operation, settings and troubleshooting. Start here if the product is already set up.
Questions answered in Qualys manuals
What device vendor is supported?
Device Vendor – Arbor.
What is the supported format for data ingestion?
Syslog format is supported for data ingestion.
How do I install the Qualys App for IBM QRadar?
Log in to QRadar, go to Admin > Extensions Management, click Add, upload the .zip file, confirm replacement or skip, and click Install.
What are the application dependencies?
The app requires vixie-cron, python-crontab-2.1.1.tar.gz, pycrypto-2.6.1.tar.gz, and cronie packages.
Can I use a snapshot or clone of a virtual scanner instance?
No, using a snapshot or clone to create a new instance is strictly prohibited as it will cause the new instance to lose all settings and functionality.
What happens if I enter an incorrect personalization code?
The Scanner Console will display a personalization code error if the code is already in use by another scanner or if it is for a different type of scanner.
