QualysRemoteProvider.getScans(222) | No valid scans were found.

[Christopher J. Bischoff]

Successfully connected Qualys as a Remote Provider - list all web application defined within Qualys, when I attempt to import kicks the error even when a scan has occurred.  The scan was not authenticated/performed on Feb 03/2016.  Any thoughts? 

[Daniel Maldonado]

Christopher,

You are using ThreadFix 2.2.7.2, correct? I know that Qualys recently push some updates let me do some research to determine if any of these require some changes to how ThreadFix integrates with Qualys.

Thanks,

Daniel M

[Christopher J. Bischoff]

Daniel -

Using version ThreadFix 2.2.7.2 Community Edition.

AuthN worked - Pulled Apps - just nothing from the scan data.  I can/will provide assistance if you require access to Qualys for testing.

[Christopher J. Bischoff]

It might be my account; checking Qualys support - performed the following query

https://qualysapi.qg2.apps.qualys.com/qps/rest/3.0/download/was/wasscan/18524412

  <responseCode>UNAUTHORIZED</responseCode>

  <responseErrorDetails>

    <errorMessage>Express Lite customers are not authorized to access the application through the API.</errorMessage>

    <errorResolution>If you think this is an error, please contact your account manager.</errorResolution>

  </responseErrorDetails>

[Christopher J. Bischoff]

To confirm if you are an Express Lite Customer - API functionality is limited. You can view/list web applications, but you cannot import/pull the report.

On Thursday, February 18, 2016 at 9:02:42 PM UTC-7, Christopher J. Bischoff wrote:

[Daniel Maldonado]

Christopher,

Thank you for this information. I made a note of this requirement on our wiki.

Daniel Maldonado