Vulnerability Remediation

Service Check

The following command checks if the Qualys vulnerability service is currently running or not.

Linux:

CODE

sudo /opt/armor/armor vuln service-check

Windows:

CODE

c:\.armor\opt\armor.exe vuln service-check

Service Restart

The following command restarts the Qualys vulnerability service.

Linux:

CODE

sudo /opt/armor/armor vuln service-restart

Windows:

CODE

c:\.armor\opt\armor.exe vuln service-restart

Run Sync Job

The following command runs a sync job which persists the Qualys HostId of a VM in Armor database.

Linux:

CODE

sudo /opt/armor/armor vuln sync-agent-id

Windows:

CODE

c:\.armor\opt\armor.exe vuln sync-agent-id

Uninstall And Install The Qualys Agent

The following commands uninstall and install the Qualys agent freshly and assigns new HostId to the VM.

Linux:

CODE

sudo /opt/armor/armor vuln uninstall
sudo /opt/armor/armor vuln install

Windows:

CODE

c:\.armor\opt\armor.exe vuln uninstall
c:\.armor\opt\armor.exe vuln install

Using Toolbox To Issue The Above Commands

The above Qualys agent service commands can be issued using Toolbox utility in Armor Portal. The steps to schedule a job in Toolbox are as follows.

1. Toolbox utility is available under Infrastructure menu in left navigation as shown below. Click on the blue "SCHEDULE TASK" button as shown in the below screenshot, to schedule a new command execution.

2. The following screen appears on click on the "SCHEDULE TASK" button. Select the product as Vulnerability Management to see the available operations for a Qualys agent.

3. Select an operation, for example Restart Vulnerability service, and click on the blue "Select VMs" button to select VM instances as shown in below screenshot to schedule the task.

4. Once back on the TASK screen as shown in the below screenshot, click on the blue "SCHEDULE TASK" button to create a job which will run on a selected future date or at next Armor agent heartbeat.

As you can see in the above screenshot, the Restart Vulnerability Service operation is selected to run on one VM instance at next Armor agent heartbeat.

5. Once the scheduled job completes, click the scheduled job record in the Toolbox screen to see the result window as show in the following screenshot.