Tim White, Director of Product Management at Qualys, presented on Qualys AssetView at RSA Conference 2016.
Qualys AssetView is a cloud-based inventory service that provides visibility and actionable data on global IT assets within an organization.
Sign up for this free service: https://www.qualys.com/free-tools-trials/assetview/
Contact Qualys for more information: 800.745.4355 https://www.qualys.com/company/contacts
3. Qualys Cloud Agent Platform
Visibility Across Globally Distributed Networks
3
Light-weight agent (2 MB) for
on premise servers
dynamic cloud environments
mobile endpoints
built to scale to millions of devices
Centrally managed, self updating
3
4. Qualys Cloud Agent Platform
Continuous Security & Compliance
4
Beam up system info in real-time
Delta based approach
Always up-to-date snapshot in cloud
Continuously evaluate latest threat
5. AssetView Inventory Service
Bring IT & Security together
5
Unified view of IT & Security data
Search all hardware & software inventory
information in seconds
Simple but Powerful
Customizable Dashboards
6. Demo Agenda
Overview of Cloud Agent
Analytics via Powerful Dashboards
Common IT Search Tasks
Security Analytics with Advanced
Search
Customizing your Dashboards
6
7. Roadmap
AssetView
Dashboard and Widget Library
Advanced Widget Customization
Options
Report Export
Broader use of Saved Searches
API
Cloud Agent
Linux GA
MacOS Support
Linux/Unix Platform Expansion
Patching, File Integrity
Monitoring and IOC Detection
Additional Core Features
7
8. Roadmap
8
AssetView
• Dashboard and Widget
Library
• Advanced Widget
Customization Options
• Report Export
• Broader use of Saved
Searches
• API
Cloud Agent
• Linux GA
• MacOS Support
• Linux/Unix Platform
Expansion
• Patching, File Integrity
Monitoring and IOC
Detection
• Additional Core Features
Competition:
They take time – with tens of thousands of assets, a query might take a week or more to complete. And because you need this rich asset information as soon as possible when investigating an incident, your risk increases dramatically as you're waiting for these query results to finish. Chances are, you'll have additional questions and queries you need to run once you've seen those results.
They’re often out of date and incomplete – the value of your asset inventory is dependent upon highly accurate and current data. When asset queries take so long to complete, often the data is already out of date and irrelevant by the time a query has finished. Also, with so many distributed assets - across hybrid environments, roaming and mobile laptops, etc. - it can be daunting to maintain a consolidated, updated and accurate asset inventory.
They require scale – collecting, correlating, and then querying against thousands of attributes across thousands of assets is a computational challenge, and most on-prem databases can’t handle it.
They lack a security and compliance context – combining and correlating asset inventory data with current and accurate security and compliance data (e.g. vulnerability results, threat intelligence, etc.) provides the necessary context to prioritize remediation efforts and mitigate critical compliance gaps. Unfortunately, most asset inventories lack this context.
Plus, most asset inventory tools can’t provide a unified view of your cloud-based assets with your on-premise ones. And yet, you need this in order to stay ahead of emerging threats.