![Page 1: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/1.jpg)
18QUALYS SECURITY CONFERENCE 2018
With 2-second visibility and 2-way synchronization with CMDB
Pablo Quiroga Director, Product Management, Qualys, Inc.
Global IT Asset Inventory
![Page 2: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/2.jpg)
Agenda
November 19, 2018 Qualys Security Conference, 2018 2
Challenges Use Cases Demo Roadmap Q&A
![Page 3: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/3.jpg)
Challenges
![Page 4: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/4.jpg)
Modern IT Environments are Hybrid
Multi-Cloud On Premise Work Stations Mobile Force OT/IIoT/IoT
November 19, 2018 Qualys Security Conference, 2018 4
![Page 5: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/5.jpg)
5
Common Challenges
Lack of cohesive visibility across hybrid environments.
Lots of inefficient manual work. Data becomes out-of-date quickly.
Many disparate, point solution tools, providing partial information.
![Page 6: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/6.jpg)
High Volume
High Velocity
High Variance
Acquisitions Skype ! Microsoft
Product rebranding
Communicator ! Lync ! Skpe for Business ! Teams
“A” means “B” lync.exe = Skype for Business
Name variance MSFT, Microsoft Corporation, Microsoft, microsoft corp, …
8 ! 1 Manufacturer
20 ! 1 Product
The Nature of IT Asset Data
6
![Page 7: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/7.jpg)
Why Global IT Asset Inventory?
![Page 8: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/8.jpg)
November 19, 2018 QSC Conference, 2018 8
Source: The ITAM Review
![Page 9: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/9.jpg)
Use Cases
Security best-practices
Compliance
Identify and track unauthorized software. Ensure software is up-to-date.
Software Asset Management Owned vs. Deployed vs. Used
Enterprise Architecture End-of-life application or component
Visibility You can’t manage nor protect what you don’t know
Internal and external audits (what | who | how)
November 19, 2018 Qualys Security Conference, 2018 9
![Page 10: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/10.jpg)
Qualys Asset Inventory
Source of truth for IT and Security teams managing assets in hybrid environments. Complete, continuous, structured and enriched asset inventory, that enables better business decisions.
Introducing
![Page 11: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/11.jpg)
Qualys Asset Inventory
Discovers all assets in global, hybrid infrastructure. .
Asset information is normalized and categorized for hardware and software. .
Enriched with metadata and indexed for 2-second visibility. .
Two-way CMDB synchronization (clean and categorized asset data)
![Page 12: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/12.jpg)
Qualys Sensors Scalable, Self-updating & Centrally Managed
Physical Scanner
Legacy data centers
Corporate
infrastructure
Virtual Scanner
Private cloud infrastructure
Virtualized
Infrastructure
Cloud Scanner
Commercial IaaS & PaaS clouds
Pre-certified in market place
Fully automated
with API orchestration
Cloud Agent
Light weight, multi-platform
On premise, elastic cloud & endpoints
Real-time data
collection
Passive*
Passively sniffs network
Real-time device
discovery & profiling
Identifies protocols
& application traffic
API
Public Cloud Connector
CMDB
Log
Active Directory*
Agentless + Agent Based + Passive
![Page 13: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/13.jpg)
Operating Systems Hardware Software
Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p
Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions
Owner Oracle Oracle Oracle
Product Solaris Sun Blade 100 Hyperion Capital Planning
Market Version 9 - 6
Edition - Professional
Category Unix > Server Computer > Server Application > Finance
Lifecycle Stage EOL EOS EOL
End-of-Life October 2011 August 2011 May 2014
License Type Open Source - Commercial
![Page 14: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/14.jpg)
Every asset is classified in meaningful functional categories, for example:
• Devices: Computing, Networking, and Storage - but also into detailed subcategory such as Notebooks, Servers and so on.
• Applications first level taxonomy of Database would also breakdown into more detailed subcategories, such as Relational and NoSQL databases.
Rationalize IT assets, prioritize work and gain actionable insights.
14
Visualize with customizable dashboards
November 19, 2018 Qualys Security Conference, 2018
![Page 15: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/15.jpg)
Complete and clean data to your CMDB Certified ServiceNow App Syncs asset data in both directions.
15 November 19, 2018 Qualys Security Conference, 2018
![Page 16: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/16.jpg)
Passive Network Sensor in Beta
![Page 17: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/17.jpg)
Discovery & Profiling Eliminate blind spots. Identify and profile devices as soon as they connect to the network.
Continuously enrich existing inventory with additional details in real time.
Extends discovery, for sensitive systems that may not be suited for active probing or agent.
November 19, 2018 Qualys Security Conference, 2018 17
Passive Network Sensor
BETA
![Page 18: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/18.jpg)
1. Deploy a Passive Sensor
(physical or virtual)
2. Mirror traffic 3. Continuously discover
and profile every device with network activity
How?
November 19, 2018 Qualys Security Conference, 2018 18
![Page 19: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/19.jpg)
DEMO
Qualys sensors for complete, detailed asset telemetry
Structuring your Hardware and Software (normalization and taxonomy)
Enriching your inventory (e.g. lifecycle)
Blind spots? (showcase passive discovery)
![Page 20: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/20.jpg)
* Roadmap items are future looking; timing and specifications may change
November 2018 GA
August 2018 Beta
During Beta Improve coverage (>90%)
Additional Vendor Lifecycle (future EOL/EOS)
Q3 2019* Internal Lifecycle
Management
Q2 2019* Software Usage.
November 19, 2018
Roadmap Asset Inventory
Asset Relationships Highlights communication
between assets.
+ Sources User / Org.
Passive Discovery. Enterprise Mobile
+ Vuln Dashboard Normalized data
Q1 2019* CMDB Sync 2.0
![Page 21: Global IT Asset Inventory - qualys.com · Raw Data SunOS 5.9 sun4u SPARC SUNW Hyperion CapPlan 6_2-p Manufacturer Sun Microsystems Sun Microsystems Hyperion Solutions Owner Oracle](https://reader033.vdocuments.us/reader033/viewer/2022052803/5f834f5640bdbd71bc363602/html5/thumbnails/21.jpg)
November 19, 2018 Qualys Security Conference, 2018 21
Q&A