Getting Started With CSAM
Getting Started With CSAM
Qualys Asset Management capabilities are available in two versions that is Global AssetView (GAV)
and CyberSecurity Asset Management (CSAM). Click the Module picker at the top to get started.
The module picker lists both CSAM, which is a paid version and Global AssetView, which is a free
version.
Notice here that you are placed in CSAM even though you clicked on Global AssetView, as this
subscription includes the CSAM license.
Cybersecurity starts with visibility into your IT asset inventory. You can start building your inventory by
downloading and installing Qualys Cloud Agents on supported platforms from this page...
With Network Passive Sensor, you can identify known and unknown assets in your network
instantaneously and eliminate blind spots across your IT environment.
With Container Security, you can discover, track, and continuously protect container environments.
With VMDR Mobile, you can discover, inventory, and monitor, mobile devices, including smartphones
and tablets.
With CloudView, you can get complete visibility of your public cloud resources such as cloud workloads
and cloud infrastructure.
With CMDB sync, you can get asset, business application, and business service attributes into your
Qualys inventory.
Here, you can see the total number of assets discovered by the different Qualys Sensors you have
deployed in your environment, assets with, and without the Cloud Agent deployed on them and the total
software instances discovered on these assets.
Click the number (12k) above Total Assets to see the inventory.
You are placed in the "Inventory" section, under "Assets" tab, where you can view a consolidated list of
assets, and a bar chart for top hardware and operating systems categories.
The "Source" column lists the Qualys Sensor that last scanned the asset.
This can be QAGENT (for Cloud Agent), IP, DNS, NETBIOS (for scanner appliance),
VIRTUAL_MACHINE_ID, GCP_INSTANCE_ID, etc. (for cloud connector) and so on.
You can quickly filter assets by the asset manufacturer or using Qualys asset tags using the faceted
search pane on the left..
.. or use the Search area to build custom queries using search tokens to quickly find any asset, or
information on an asset, for immediate answers.
Click the question mark (?) on the right to open Qualys Online Help.
The help page provides a lot of useful information, including syntax and example search queries.
Once you have your asset search results you may want to organize them further into logical groupings.
To know more, click the Group Assets by .. dropdown menu.
You can group assets by options like operating system, hardware, DNS address, cloud provider type and
metadata, and more.
Here you get a software-centric view of all software instances discovered and inventoried on all
scanned assets in your inventory, in one place.
This inventory is categorized by functional category, product family, license type and enriched with
lifecycle information, authorization status, etc. to provide vital context to the security team.
Here you can group software by different attributes such as the Category, Publisher and Product Name,
Market Version and Edition.
That's it. You're done. You may now collapse this window and proceed with the course.