---
title: Qualys VM/VMDR Connector Guide
slug: rbvm-help/qualys-vmvmdr-connector-guide
createdAt: 2026-10-26T13:51:23.492Z
---

**Summary**: How to set up and use the Qualys Vulnerability Management (VM)/Vulnerability Management, Detection, and Response (VMDR) connector in Ivanti Neurons RBVM/ASPM/VULN KB.

## Overview

Qualys Vulnerability Management (VM)/Vulnerability Management, Detection, and Response (VMDR) provides asset discovery and vulnerability assessment for on-premises and cloud environments.

The Ivanti Neurons RBVM/ASPM/VULN KB platform provides an API-based connector that integrates with **Qualys VM/VMDR**, enabling customers to bring in their findings. It allows customers to gain visibility into their overall risk due to vulnerabilities in their endpoint and a more straightforward, more efficient way to manage those vulnerabilities.

:::hint{type="info"}
Qualys connector is upgraded to support the latest VMDR API version. Within **Host Findings**, you can now filter out the Qualys IPv6 addresses as well.
:::

![Qualys IPv6 Addresses in Host Findings](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/3gtIzUeYrDpKF-aAKyRdK_qualys1.png)

## User Prerequisites/Qualys Setup

A Qualys **user** can be assigned to one or more **roles**, which consolidate **permissions** that represent the rights to access features and functions. **API Access** can be given to a user when assigning or editing their role.

Locate **Users** in the **navigation bar** and either **create or edit** an existing user. In the pop-up window, select a **User Role**. Then, select or deselect the **API** checkbox. Click **Save**.

![Qualys VMDR - User Permissions](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/CKYjDFIDxhPiBmr62kuTt_qualys-vm-vmdr-connector-guide.png)

## Qualys VM/VMDR Connector API Calls

The following API calls are performed during a connector run to pull security vulnerabilities from Qualys VM/VMDR into Neurons RBVM/ASPM/VULN KB.

| **API Type**                                            | **Endpoint**                        |
| ------------------------------------------------------- | ----------------------------------- |
| Authentication                                          | /api/2.0/fo/session/?action=login   |
| Fetch List of Hosts                                     | /api/2.0/fo/asset/host/             |
| Fetch List of Vulnerabilities Associated with Each Host | /api/2.0/fo/asset/host/vm/detection |
| Fetch List of AssetGroups                               | /api/2.0/fo/asset/group/            |

## Connector Setup

To set up the Qualys VM/VMDR connector, navigate to the **Automate > Integrations** page.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/OUe6qITaLIXxXnrHrfCpn_burp-suite-enterprise-connector.png" alt="Navigation - Automation - Integrations-1" position="flex-start" size="33" width="229" height="151" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Burp Suite Enterprise Connector.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Burp Suite Enterprise Connector.png" showCaption="false"}

Using the search bar in the upper-right corner of the Integrations page, type **VMDR** to find the connector.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/Uj5yW4IfI0F5i-Ag_HZba_qualys-vm-vmdr-connector-guide1.png" alt="Qualys VMDR - Search for Connector" position="flex-start" size="98" width="686" height="396" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys VM VMDR Connector Guide_1.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys VM VMDR Connector Guide_1.png" showCaption="false"}

Locate the **Qualys VM/VMDR** card on the page and click **Configuration**.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/pFKEZWAVMppNAnJ5G-aol_servicenow-configuration-management3.png" alt="ServiceNow CMDB - Configuration Button Location" position="flex-start" size="98" width="688" height="425" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/ServiceNow Configuration Management_3.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/ServiceNow Configuration Management_3.png" showCaption="false"}

In the new window under **Connection**, complete the required fields, as described below.

- **Name**: The connector’s name.
- **URL**: The specific Qualys VM/VMDR instance URL.
- **User Name/Password**: The Qualys username and password.
- **Select Network: **Neurons RBVM/ASPM/VULN KB network name (ingested data associated with this network).
- **SSL**: Optional instance SSL certificate in base64 format.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/v_VWQmSfeLiOmRG3-kKvt_qualys-vm-vmdr-connector-guide2.png" alt="Qualys VMDR - Connection Window" position="flex-start" size="59" width="411" height="366" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys VM VMDR Connector Guide_2.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys VM VMDR Connector Guide_2.png" showCaption="false"}

Click **Test Credentials** to verify the credentials are correct and have access to make API calls to the Qualys VM/VMDR instance.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/HGzMAj0PmqgKYqAulZwW__palo-alto-xpanse-expander4.png" alt="Qualys VMDR - Test Credentials" position="flex-start" size="28" width="195" height="136" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Palo Alto Xpanse Expander_4.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Palo Alto Xpanse Expander_4.png" showCaption="false"}

Under Schedule, you can configure the desired schedule for the connector to retrieve results from the Qualys instance and optionally select the Oldest Scan Data Pull configuration. The Oldest Scan Data Pull dropdown provides users the flexibility to pull the assets from the last 30, 60, 90, 180 days and 1 year.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/Vw6eNCf7By8bNhkROH0lf_qualys-vm-vmdr-connector-guide3.png" alt="Qualys VMDR - Schedule Section" position="flex-start" size="46" width="319" height="297" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys VM VMDR Connector Guide_3.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys VM VMDR Connector Guide_3.png" showCaption="false"}

Under Connector Specific Options, select the required options from the list.

- Users can optionally turn on** Enable auto URBA (Update Remediation by Assessment).**
- On marking the **Create Assets that do not have vulnerabilities** options, Neurons RBVM/ASPM/VULN KB will create hosts with zero findings.
- By enabling **Allow to pull tag information from Qualys, **RiskSense will pull associated tags with hosts.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/1nXm5Iwal29xbFZTS_OqF_qualys-vm-vmdr-connector-guide4.png" alt="Qualys VMDR - Connector Specific Options" position="flex-start" size="63" width="440" height="510" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys VM VMDR Connector Guide_4.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys VM VMDR Connector Guide_4.png" showCaption="false"}

- **Information Gathered Plugins**: Clicking the All Plugins radio button allows users to pull all informational plugins related to the hosts. To pull specific plugins, click the Select Plugins radio button. Input the list of informational plugins you would like to process as comma-separated values without spaces. For example--11773, 12014, 12015
- **Qualys Asset Groups**: Clicking the All Asset groups radio button allows users to pull hosts from all the associated groups. Users can choose to whitelist groups as well as blacklist. By whitelisting one or more groups, a user is able to configure only hosts belonging to these groups will be pulled in. On other hand, by blacklisting groups, users have the ability to restrict certain hosts from these blacklisted groups. *Whitelisting and blacklisting of groups can be done only by the Qualys Users who have the Manager Role.*

Click **Save** to create the connector.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/kdbPMlCNd8PqsIzArWR2D_qualys-vm-vmdr-connector-guide5.png" alt="Qualys VMDR - Connector Enabled" position="flex-start" size="78" width="543" height="122" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys VM VMDR Connector Guide_5.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys VM VMDR Connector Guide_5.png" showCaption="false"}

A new card for the Qualys connector appears at the top of the **Integrations** page.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/palfUuaNh0XUVwWflE1rg_qualys-vm-vmdr-connector-guide6.png" alt="Qualys VMDR - Configured Connector" position="flex-start" size="35" width="242" height="278" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys VM VMDR Connector Guide_6.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys VM VMDR Connector Guide_6.png" showCaption="false"}

This connector runs once the initial setup is complete. Click the **History** button to check the connector’s status. Clicking the **Sync** button pulls connector files from Qualys on demand. Clicking the **Edit **button allows you to modify the connector. Clicking the **Delete** button deletes the connector.