Build a Configuration Profile

1
Now that you've built an Activation
Key, you will also need a
Configuration Profile. This is what
governs how the agent behaves.
Click Configuration Profiles.

2
I will click New Profile.

3
You can have many profiles with
specific settings. An agent host
can use one profile at a time, so
use a naming convention that fits
your needs.

Feb 2, 2023 1 of 12
 Build a Configuration Profile

4
You can make a specific profile
default for the subscription with
this checkbox. Any agent asset
not explicitly assigned a profile,
will use the default profile.

5
You can suspend data collection
for the apps listed. Agents will still
self-update and receive manifests
from the Qualys Platform.

6
Windows Cloud Agents with
SQLite In-Memory Databases
enabled consumes slightly higher
memory, slightly less CPU, and
reduced disk. By default, it is
disabled.

Feb 2, 2023 2 of 12
 Build a Configuration Profile

7
You can prevent the agent for
automatically updating itself. This
is for organizations who wish to
certify agent versions.

8
I will click Continue.

9
If you want to prevent the agent
from communicating with the
Qualys Platform at specific times
of the day, you can configure a
blackout window.

Feb 2, 2023 3 of 12
 Build a Configuration Profile

10
I will click Continue.

11
Here you can change how often
the agent checks in with the
Qualys Platform, and how many
system resources are used by
the agent. Qualys has provided
presets of Low, Normal, and
High.

12
With the Customize toggle
switch, you can modify the
presets to fine-tune the settings
to fit your needs.

Feb 2, 2023 4 of 12
 Build a Configuration Profile

13
I will click Continue.

14
Here you assign agent hosts to
this profile using tags.

15
I have added the "CA: Windows"
tag previously created. All assets
with that tag will get the settings
in this profile.

Feb 2, 2023 5 of 12
 Build a Configuration Profile

16
I will click Continue.

17
Here I have enabled Agent Scan
Merge. This will merge data
collected by the agent with data
collected by a Qualys Scanner
Appliance.

18
I will click Continue.

Feb 2, 2023 6 of 12
 Build a Configuration Profile

19
The data collection interval is
how often you want the agent to
collect vulnerability data. The
default is 4 hours, configurable
up to 30 days.

20
Scan delay and scan randomize
are settings to allow you to
stagger communication back to
the Qualys Platform for all agent
hosts using this profile.

21
I will click Continue.

Feb 2, 2023 7 of 12
 Build a Configuration Profile

22
If you have enabled Policy
Compliance, this setting is how
often the agent collects
compliance data.

23
I will click Continue.

24
If you are using SCA, instead of
Policy Compliance, configure
this setting for how often the
agent collects data for Secure
Config Assessment.

Feb 2, 2023 8 of 12
 Build a Configuration Profile

25
I will click Continue.

26
Since FIM was not provisioned in
the Activation Key for these
assets, I will not enable it here in
the profile. This can be changed
at a later time.

27
I will click Continue.

Feb 2, 2023 9 of 12
 Build a Configuration Profile

28
EDR can also be enabled later.

29
I will click Continue.

30
Patch Management was
provisioned in the Activation Key
and here I have also enabled it.
This will ensure the agents
collect patch data.

Feb 2, 2023 10 of 12
 Build a Configuration Profile

31
The cache size is the local disk
space the agent should allocate
for patch binaries downloaded to
the asset.

32
I will click Finish to complete the
profile.

Feb 2, 2023 11 of 12
 Build a Configuration Profile

Scan to go to the interactive player

Feb 2, 2023 12 of 12