Policy Export

/api/2.0/fo/compliance/policy/

[GET]  [POST]

Use the parameter action=export to export compliance policies. Your account must have the Policy Compliance application enabled in order to export policies using this API.

Permissions - Manager role is required

Input Parameters

Parameter

Description

action=export

(Required) Specifies the action type for exporting the policy.

echo_request={0|1}

(Optional) Specify 1 to view (echo) input parameters in the XML output. By default these are not included.

id={value} or title={value}

(Required) The ID or the title of the policy you want to export.

show_user_controls={0|1}

(Optional) Set to 1 to include user-defined controls (UDCs) in the XML output. When not specified, UDCs are not included.

show_appendix={0|1}

(Optional) Set to 1 to show the appendix section in the XML output. When unspecified, the appendix section is not included in the output.

show_user_controls={0|1}

(Optional) Set to 1 to show user-defined controls (UDCs) in the XML output. For Qualys Custom Controls you’ll see the UDC ID for each control in the output. When not specified, the appendix section is not included in the output.

 

Sample - Export policies

API request

https://qualysapi.qualys.com/api/2.0/fo/compliance/policy/?action=export&id=853744

XML output

<!DOCTYPE POLICY_EXPORT_OUTPUT SYSTEM "https://qualysapi.qualys.com/api/2.0/fo/compliance/policy/policy_export_output.dtd">

 

<POLICY>

    <TITLE><![CDATA[My Policy]]></TITLE>

    <EXPORTED><![CDATA[2013-07-17T18:19:57Z]]></EXPORTED>

    <COVER_PAGE><![CDATA[]]></COVER_PAGE>

    <TECHNOLOGIES total="1">

        <TECHNOLOGY>

            <ID>1</ID>

            <NAME>Windows XP desktop</NAME>

        </TECHNOLOGY>

    </TECHNOLOGIES>

    <SECTIONS total="1">

        <SECTION>

            <NUMBER>1</NUMBER>

            <HEADING><![CDATA[Default section]]></HEADING>

            <CONTROLS total="20">

                <CONTROL>

                    <ID>1111</ID>

                    <TECHNOLOGIES total="1">

                        <TECHNOLOGY>

                            <ID>1</ID>

                            <NAME>Windows XP desktop</NAME>

                            <EVALUATE checksum="74378d12a39f82721a3cb156dee58c663a650a9ce422bd311b5e5443c2a20f14">&lt;CTRL&gt;&lt;NOT&gt;&lt;DP&gt;&lt;K&gt;auth.general.logintext&lt;/K&gt;&lt;OP&gt;re&lt;/OP&gt;&lt;V&gt;&lt;![CDATA[^(\s*|314159265358979|161803399999999)$]]&gt;&lt;/V&gt;&lt;/DP&gt;&lt;/NOT&gt;&lt;/CTRL&gt;</EVALUATE>

                        </TECHNOLOGY>

                    </TECHNOLOGIES>

                </CONTROL>

        </SECTION>

    </SECTIONS>

</POLICY>

Sample - Export policies with UDC data

API request

curl -u username:password -H "X-Requested-With: curl" -d "action=export&id=1448425&show_user_controls=1&show_appendix=0" "https://qualysapi.qualys.com/api/2.0/fo/compliance/policy/"

XML output

<?xml version="1.0" encoding="UTF-8" ?>

<!DOCTYPE POLICY_EXPORT_OUTPUT SYSTEM "https://qualysapi.qualys.com/api/2.0/fo/compliance/policy/policy_export_output.dtd">

<POLICY_EXPORT_OUTPUT>

  <RESPONSE>

    <DATETIME>2018-10-05T10:41:43Z</DATETIME>

<POLICY>

    <TITLE><![CDATA[Windows_Linux_UDC_Policy]]></TITLE>

    <EXPORTED><![CDATA[2018-10-05T10:41:43Z]]></EXPORTED>

    <COVER_PAGE><![CDATA[]]></COVER_PAGE>

    <STATUS><![CDATA[active]]></STATUS>

    <TECHNOLOGIES total="3">

        <TECHNOLOGY>

            <ID>45</ID>

            <NAME>Red Hat Enterprise Linux 6.x</NAME>

        </TECHNOLOGY>

        <TECHNOLOGY>

            <ID>52</ID>

            <NAME>AIX 7.x</NAME>

        </TECHNOLOGY>

        <TECHNOLOGY>

            <ID>81</ID>

            <NAME>Red Hat Enterprise Linux 7.x</NAME>

        </TECHNOLOGY>

    </TECHNOLOGIES>

    <SECTIONS total="1">

        <SECTION>

            <NUMBER>1</NUMBER>

            <HEADING><![CDATA[ddd]]></HEADING>

            <CONTROLS total="4">

                <USER_DEFINED_CONTROL>

                    <ID>100041</ID>

                    <UDC_ID>929a8c4e-5057-e3f3-8225-e92d4076f499</UDC_ID>

                    <CHECK_TYPE>Unix Directory Search Check</CHECK_TYPE>

                    <IS_CONTROL_DISABLE><![CDATA[0]]></IS_CONTROL_DISABLE>

                    <CATEGORY>

                        <ID>3</ID>

                        <NAME><![CDATA[Access Control Requirements]]></NAME>

                    </CATEGORY>

                    <SUB_CATEGORY>

                        <ID>1010</ID>

                        <NAME><![CDATA[Account Creation/User Management]]></NAME>

                    </SUB_CATEGORY>

                    <STATEMENT><![CDATA[Directory Search]]></STATEMENT>

                    <CRITICALITY>

                        <LABEL><![CDATA[SERIOUS]]></LABEL>

                        <VALUE>3</VALUE>

                    </CRITICALITY>

                    <COMMENT><![CDATA[]]></COMMENT>

                    <USE_AGENT_ONLY>1</USE_AGENT_ONLY>

                    <AUTO_UPDATE>0</AUTO_UPDATE>

                    <IGNORE_ERROR>0</IGNORE_ERROR>

...

</POLICY>

 

Sample - Export Policy with Appendix with lookups for control descriptions

API request

curl -u "USERNAME:PASSWORD" GET -H "X-Requested-With: curl" -X "POST" -d "action=export&id=5438&show_appendix=1"

"https://qualysapi.qualys.com/api/2.0/fo/compliance/policy/">showApp.xml

XML output

<?xml version="1.0" encoding="UTF-8" ?>

<!DOCTYPE POLICY_EXPORT_OUTPUT SYSTEM "https://qualysapi.qualys.com/api/2.0/fo/compliance/policy/policy_export_output.dtd">

<POLICY_EXPORT_OUTPUT>

  <RESPONSE>

    <DATETIME>2017-09-09T09:07:13Z</DATETIME>

   <POLICY>

    <TITLE><![CDATA[Solaris]]></TITLE>

    <EXPORTED><![CDATA[2017-09-09T09:07:12Z]]></EXPORTED>

    <COVER_PAGE><![CDATA[]]></COVER_PAGE>

    <STATUS><![CDATA[active]]></STATUS>

    <TECHNOLOGIES total="4">

        <TECHNOLOGY>

            <ID>4</ID>

            <NAME>Solaris 9.x</NAME>

        </TECHNOLOGY>

...

   <SECTION>

            <NUMBER>3</NUMBER>

            <HEADING><![CDATA[Untitled]]></HEADING>

            <CONTROLS total="4"/>

        </SECTION>

    </SECTIONS>

    <!--Note : Remove APPENDIX section if you wish to import this

     XML as policy.-->

    <APPENDIX>

        <OP_ACRONYMS><OP id="lt">less than</OP>

                     <OP id="gt">greater than</OP>

                     <OP id="le">less than or equal to</OP>

                     <OP id="ge">greater than or equal to</OP>

                     <OP id="ne">not equal to</OP>

                     <OP id="xeq">list OR string list</OP>          

                     <OP id="eq">equal to</OP>

                     <OP id="in">in</OP>

                     <OP id="xre">regular expression list</OP>

                     <OP id="re">regular expression</OP>

                     <OP id="range">in range</OP></OP_ACRONYMS>

        <DATA_POINT_ACRONYMS>

            <DP>

                <K id="auth.useraccount.legacy-plus-accounts"><![CDATA[The following List String value(s) <B>X</B> indicate the current list of accounts defined within the <B>/etc/group

</B>, <B>/etc/shadow</B>, and/or <B>/etc/passwd</B> files having a <B>plus-sign '+'</B> preceding them.]]></K>

                <FV id="161803399999999"><![CDATA[Setting not found]]></FV>

               <FV id="314159265358979"><![CDATA[File not found]]></FV>

            </DP>

            <DP>

                <K id="auth.useraccount.minimum-password-length">

                  <![CDATA[This Integer value <B>X</B> indicates the

                  current status of the <B>PASSLENGTH 'minimum password

                  length'</B> setting within the <B>/etc/default/passwd

                  </B> file.]]></K>

                <FV id="161803399999999"><![CDATA[Setting not found]]></FV>

               <FV id="314159265358979"><![CDATA[File not found]]></FV>

            </DP>

     ...

    </DATA_POINT_ACRONYMS>

    </APPENDIX>

</POLICY>

  </RESPONSE>

</POLICY_EXPORT_OUTPUT>

 

Sample - Export Library Policy to XML

You can export a library compliance policy from your account to an XML file. Just like with user created policies you must specify the input parameter show_user_controls=1 to include UDCs in the output. When the policy includes a Qualys Custom Control you’ll see the UDC ID for the control in the output.

API request

curl -u "USERNAME:PASSWORD" -H "X-Requested-With: curl" -d

"action=export&ids=991742279&show_user_controls=1"

"https://qualysapi.qualys.com/api/2.0/fo/compliance/policy/"

XML output

<POLICY>

    <TITLE><![CDATA[Library Policy with 2 UDC v.2.0]]></TITLE>

    <EXPORTED><![CDATA[2017-04-17T15:02:56Z]]></EXPORTED>

    <COVER_PAGE><![CDATA[]]></COVER_PAGE>

    <STATUS><![CDATA[active]]></STATUS>

    <TECHNOLOGIES total="2">

        <TECHNOLOGY>

            <ID>2</ID>

            <NAME>Windows 2003 Server</NAME>

        </TECHNOLOGY>

        <TECHNOLOGY>

            <ID>12</ID>

            <NAME>Windows 2000</NAME>

        </TECHNOLOGY>

        </TECHNOLOGIES>

    <SECTIONS total="1">

        <SECTION>

            <NUMBER>1</NUMBER>

            <HEADING><![CDATA[Untitled]]></HEADING>

            <CONTROLS total="1">

                <USER_DEFINED_CONTROL>

                    <ID>100005</ID>

                    <UDC_ID>55449d95-1877-7ee5-829a-4eededacb04f</UDC_ID>

                    <CHECK_TYPE>Registry Value Existence</CHECK_TYPE>

                    <IS_CONTROL_DISABLE><![CDATA[0]]></IS_CONTROL_DISABLE>

                    <CATEGORY>

                        <ID>3</ID>

                        <NAME><![CDATA[Access Control Requirements]]></NAME>

                    </CATEGORY>

                    <SUB_CATEGORY>

                        <ID>1007</ID>

                        <NAME><![CDATA[Authentication/Passwords]]></NAME>

                    </SUB_CATEGORY>

...

 

Updates you’ll see once Agent UDC support is available

The XML output may include the USE_AGENT_ONLY element for these Windows and Unix control types: Directory Search Control and Directory Integrity Control. This is set to 1 when the “Use agent scan only” option is enabled for the control.

The XML output may include the AUTO_UPDATE element for these Windows and Unix control types: File Integrity Control and Directory Integrity Control. This is set to 1 when the “Auto update expected value” option is enabled for the control.

Sample - Export Policy output when Agent UDC Support is available

XML output

<?xml version="1.0" encoding="UTF-8" ?>

<!DOCTYPE POLICY_EXPORT_OUTPUT SYSTEM "https://qualysapi.qualys.com/api/2.0/fo/compliance/policy/policy_export_output.dtd">

<POLICY_EXPORT_OUTPUT>

  <RESPONSE>

    <DATETIME>2018-10-05T10:41:43Z</DATETIME>

<POLICY>

    <TITLE><![CDATA[Windows_Linux_UDC_Policy]]></TITLE>

    <EXPORTED><![CDATA[2018-10-05T10:41:43Z]]></EXPORTED>

    <COVER_PAGE><![CDATA[]]></COVER_PAGE>

    <STATUS><![CDATA[active]]></STATUS>

    <TECHNOLOGIES total="3">

        <TECHNOLOGY>

            <ID>45</ID>

            <NAME>Red Hat Enterprise Linux 6.x</NAME>

        </TECHNOLOGY>

        <TECHNOLOGY>

            <ID>52</ID>

            <NAME>AIX 7.x</NAME>

        </TECHNOLOGY>

        <TECHNOLOGY>

            <ID>81</ID>

            <NAME>Red Hat Enterprise Linux 7.x</NAME>

        </TECHNOLOGY>

    </TECHNOLOGIES>

    <SECTIONS total="1">

        <SECTION>

            <NUMBER>1</NUMBER>

            <HEADING><![CDATA[ddd]]></HEADING>

            <CONTROLS total="4">

                <USER_DEFINED_CONTROL>

                    <ID>100041</ID>

                    <UDC_ID>929a8c4e-5057-e3f3-8225-e92d4076f499</UDC_ID>

                    <CHECK_TYPE>Unix Directory Search Check</CHECK_TYPE>

                    <IS_CONTROL_DISABLE><![CDATA[0]]></IS_CONTROL_DISABLE>

                    <CATEGORY>

                        <ID>3</ID>

                        <NAME><![CDATA[Access Control Requirements]]></NAME>

                    </CATEGORY>

                    <SUB_CATEGORY>

                        <ID>1010</ID>

                        <NAME><![CDATA[Account Creation/User Management]]></NAME>

                    </SUB_CATEGORY>

                    <STATEMENT><![CDATA[Directory Search]]></STATEMENT>

                    <CRITICALITY>

                        <LABEL><![CDATA[SERIOUS]]></LABEL>

                        <VALUE>3</VALUE>

                    </CRITICALITY>

                    <COMMENT><![CDATA[]]></COMMENT>

                    <USE_AGENT_ONLY>1</USE_AGENT_ONLY>

                    <AUTO_UPDATE>0</AUTO_UPDATE>

                    <IGNORE_ERROR>0</IGNORE_ERROR>

...

 

Database UDCs for MS SQL, Oracle, Sybase, and PotgreSQL/ Pivotal Greenplum

You can now create custom controls for MSSQL, Oracle, Sybase, and PostgreSQL/ Pivotal Greenplum databases. To support database controls, we’ve added new elements to the XML output and DTDs for Control List Output and Policy Export Output.

You’ll see these changes:

- New database controls allow you to ignore errors and set the status to Pass or Fail. The new element ERROR_SET_STATUS indicates the Pass/Fail setting for each control. This appears in the XML output for Control List and Policy Export.

- The SQL query configured for a database control appears in the new DB_QUERY element, and the description configured for the control appears in the new DESCRIPTION element. These appear in the XML output for Control List and Policy Export.

- In the Policy Export API output you’ll see these new elements added to the DP element in the Evaluate tag: Data Type (DT) and DB Column name (DBCOL).

Sample - Export policies for Database UDC

API request

curl -u "username:password" -H "Content-type: text/xml" -X "POST"

-d "action=export&id=1358790&show_user_controls=1" "https://qualysapi.qualys.com/api/2.0/fo/compliance/policy/"> PolicyExportAPI.xml

XML output

<?xml version="1.0" encoding="UTF-8" ?>

<!DOCTYPE POLICY_EXPORT_OUTPUT SYSTEM "https://qualysapi.qualys.com/api/2.0/fo/compliance/policy/policy_export_output.dtd">

<POLICY_EXPORT_OUTPUT>

   <RESPONSE>

    <DATETIME>2019-05-21T18:49:06Z</DATETIME>

<POLICY>

    <TITLE><![CDATA[Objects_Check]]></TITLE>

    <EXPORTED><![CDATA[2019-05-21T18:49:06Z]]></EXPORTED>

    <COVER_PAGE><![CDATA[]]></COVER_PAGE>

    <STATUS><![CDATA[active]]></STATUS>

      ...

        <USER_DEFINED_CONTROL>

                    <ID>100338</ID>

                    <UDC_ID>e9ff3da7-9d0c-4a64-8055-e49a3f88f838</UDC_ID>

                    <CHECK_TYPE>Oracle Database Check</CHECK_TYPE>

                    <IS_CONTROL_DISABLE><![CDATA[0]]></IS_CONTROL_DISABLE>

                    <CATEGORY>

                        <ID>5</ID>

                        <NAME><![CDATA[Services]]></NAME>

                    </CATEGORY>

                    <SUB_CATEGORY>

                        <ID>1024</ID>

                        <NAME><![CDATA[Support]]></NAME>

                    </SUB_CATEGORY>

                    <STATEMENT><![CDATA[STMT:SELECT * FROM user_tables;]]></STATEMENT>

                    <CRITICALITY>

                        <LABEL><![CDATA[MEDIUM]]></LABEL>

                        <VALUE>2</VALUE>

                    </CRITICALITY>

                    <COMMENT><![CDATA[SELECT * FROM user_tables]]></COMMENT>

                    <IGNORE_ERROR>1</IGNORE_ERROR>

                    <ERROR_SET_STATUS>PASS</ERROR_SET_STATUS>

                    <TECHNOLOGIES total="1">

                        <TECHNOLOGY>

                            <ID>8</ID>

                            <NAME>Oracle 10g</NAME>

                            <EVALUATE><CTRL><AND><OR><DP><K>custom.oracle_query.1661091</K><OP>xre</OP><CD>matches</CD><FV set="1">No data found</FV><DT>5</DT><V><![CDATA[.*]]></V><DBCOL><![CDATA[STATUS]]></DBCOL></DP></OR><DP><K>custom.oracle_query.1661091</K><L>0</L><OP>eq</OP><DT>4</DT><CD>match all</CD><V>2</V><DBCOL>NUM_ROWS</DBCOL></DP></AND></CTRL></EVALUATE>

                            <RATIONALE><![CDATA[rat:SELECT * FROM user_tables]]></RATIONALE>

                            <DB_QUERY><![CDATA[SELECT * FROM user_tables;]]></DB_QUERY>

                            <DESCRIPTION><![CDATA[des:SELECT * FROM user_tables]]></DESCRIPTION>

                        </TECHNOLOGY>

                    </TECHNOLOGIES>

                    <REFERENCE_LIST/>

                </USER_DEFINED_CONTROL>

 ...

      </RESPONSE>

</POLICY_EXPORT_OUTPUT>

Sample - Export policy with UDCs into XML file showing remediation information

API request

curl -u "USERNAME:PASSWORD" -H "X-Requested-With: curl" -d "action=export&id=1801961&show_user_controls=1" "https://qualysapi.qualys.com/api/2.0/fo/compliance/policy/"

XML output

<?xml version="1.0" encoding="UTF-8" ?>

<!DOCTYPE POLICY_EXPORT_OUTPUT SYSTEM "https://qualysapi.qualys.com/api/2.0/fo/compliance/policy/policy_export_output.dtd">

<POLICY_EXPORT_OUTPUT>

  <RESPONSE>

    <DATETIME>2020-04-22T16:47:24Z</DATETIME>

<POLICY>

    <TITLE><![CDATA[RHEL_8]]></TITLE>

    <EXPORTED><![CDATA[2020-04-22T16:47:24Z]]></EXPORTED>

    <COVER_PAGE><![CDATA[]]></COVER_PAGE>

    <STATUS><![CDATA[active]]></STATUS>

    <TECHNOLOGIES total="1">

        <TECHNOLOGY>

            <ID>217</ID>

            <NAME>Red Hat Enterprise Linux 8.x</NAME>

        </TECHNOLOGY>

    </TECHNOLOGIES>

    <SECTIONS total="2">

       ...

        <SECTION>

            <NUMBER>2</NUMBER>

            <HEADING><![CDATA[UDC]]></HEADING>

            <CONTROLS total="6">

                <USER_DEFINED_CONTROL>

                    <ID>100028</ID>

                    <UDC_ID>c50922a1-1482-df3f-83e2-bb96c99ffc48</UDC_ID>

                    <CHECK_TYPE>Unix File/Directory Permission</CHECK_TYPE>

                    <IS_CONTROL_DISABLE><![CDATA[0]]></IS_CONTROL_DISABLE>

                    <CATEGORY>

                        <ID>3</ID>

                        <NAME><![CDATA[Access Control Requirements]]></NAME>

                    </CATEGORY>

                    <SUB_CATEGORY>

                        <ID>1007</ID>

                        <NAME><![CDATA[Authentication/Passwords]]></NAME>

                    </SUB_CATEGORY>

                    <STATEMENT><![CDATA[Basic File/Directory Permission-UNIX-RHEL_8]]></STATEMENT>

                    <CRITICALITY>

                        <LABEL><![CDATA[SERIOUS]]></LABEL>

                        <VALUE>3</VALUE>

                    </CRITICALITY>

                    <COMMENT><![CDATA[Basic File/Directory Permission]]></COMMENT>

                    <USE_AGENT_ONLY>0</USE_AGENT_ONLY>

                    <AUTO_UPDATE>0</AUTO_UPDATE>

                    <IGNORE_ERROR>0</IGNORE_ERROR>

                    <IGNORE_ITEM_NOT_FOUND>0</IGNORE_ITEM_NOT_FOUND>

                    <SCAN_PARAMETERS>

                        <FILE_PATH><![CDATA[/etc/profile]]></FILE_PATH>

                        <DATA_TYPE>String</DATA_TYPE>

                        <DESCRIPTION><![CDATA[File/Directory Permission]]></DESCRIPTION>

                    </SCAN_PARAMETERS>

                    <TECHNOLOGIES total="1">

                        <TECHNOLOGY>

                            <ID>217</ID>

                            <NAME>Red Hat Enterprise Linux 8.x</NAME>

                            <EVALUATE><CTRL><DP><K>custom.file_permission.1007079</K><OP>re</OP><V><![CDATA[.*]]></V></DP></CTRL></EVALUATE>

                            <RATIONALE><![CDATA[Basic File/Directory Permission-UNIX]]></RATIONALE>

                            <REMEDIATION><![CDATA[]]></REMEDIATION>

                            <DATAPOINT>

                                <CARDINALITY>no cd</CARDINALITY>

                                <OPERATOR>re</OPERATOR>

                                <DEFAULT_VALUES total="1">

                                    <DEFAULT_VALUE><![CDATA[.*]]></DEFAULT_VALUE>

                                </DEFAULT_VALUES>

                            </DATAPOINT>

                        </TECHNOLOGY>

                    </TECHNOLOGIES>

                    <REFERENCE_LIST/>

                </USER_DEFINED_CONTROL>

                <USER_DEFINED_CONTROL>

                    <ID>100029</ID>

                    <UDC_ID>9da2c628-fb7d-50cf-8230-6f3ff59172a8</UDC_ID>

                    <CHECK_TYPE>Unix File/Directory Existence</CHECK_TYPE>

                    <IS_CONTROL_DISABLE><![CDATA[0]]></IS_CONTROL_DISABLE>

                    <CATEGORY>

                        <ID>3</ID>

                        <NAME><![CDATA[Access Control Requirements]]></NAME>

                    </CATEGORY>

                    <SUB_CATEGORY>

                        <ID>1007</ID>

                        <NAME><![CDATA[Authentication/Passwords]]></NAME>

                    </SUB_CATEGORY>

                    <STATEMENT><![CDATA[Basic File/Directory Existence-UNIX-RHEL_8]]></STATEMENT>

                    <CRITICALITY>

                        <LABEL><![CDATA[SERIOUS]]></LABEL>

                        <VALUE>3</VALUE>

                    </CRITICALITY>

                    <COMMENT><![CDATA[File/Directory Existence - this is in comment section]]></COMMENT>

                    <USE_AGENT_ONLY>0</USE_AGENT_ONLY>

                    <AUTO_UPDATE>0</AUTO_UPDATE>

                    <IGNORE_ERROR>0</IGNORE_ERROR>

                    <IGNORE_ITEM_NOT_FOUND>0</IGNORE_ITEM_NOT_FOUND>

                    <SCAN_PARAMETERS>

                        <FILE_PATH><![CDATA[/etc/profile]]></FILE_PATH>

                        <DATA_TYPE>Boolean</DATA_TYPE>

                        <DESCRIPTION><![CDATA[test]]></DESCRIPTION>

                    </SCAN_PARAMETERS>

                    <TECHNOLOGIES total="1">

                        <TECHNOLOGY>

                            <ID>217</ID>

                            <NAME>Red Hat Enterprise Linux 8.x</NAME>

                            <EVALUATE><CTRL><DP><K>custom.file_dir_exist.1007080</K><L>2</L><V>false</V></DP></CTRL></EVALUATE>

                            <RATIONALE><![CDATA[File/Directory Existence-this is in rationale section under default value]]></RATIONALE>

                            <REMEDIATION><![CDATA[]]></REMEDIATION>

                            <DATAPOINT>

                                <CARDINALITY>no cd</CARDINALITY>

                                <OPERATOR>no op</OPERATOR>

                                <DEFAULT_VALUES total="1">

                                    <DEFAULT_VALUE>true</DEFAULT_VALUE>

                                </DEFAULT_VALUES>

                            </DATAPOINT>

                        </TECHNOLOGY>

                    </TECHNOLOGIES>

                    <REFERENCE_LIST/>

                </USER_DEFINED_CONTROL>

          ...   

        </SECTION>

    </SECTIONS>

</POLICY>

  </RESPONSE>

</POLICY_EXPORT_OUTPUT>

</POLICY_EXPORT_OUTPUT>

Sample - Export policy with Unix File Content Controls when Evaluate as string is enabled

API request

curl -u "USERNAME:PASSWORD" -H "X-Requested-With:curl" -X POST -d  "action=export&id=3721621&show_user_controls=1"

"https://qualysapi.qualys.com/api/2.0/fo/compliance/policy/"

XML output

<?xml version="1.0" encoding="UTF-8" ?>

<!DOCTYPE POLICY_EXPORT_OUTPUT SYSTEM "https://qualysapi.qualys.com/api/2.0/fo/compliance/policy/policy_export_output.dtd">

<POLICY_EXPORT_OUTPUT>

  <RESPONSE>

    <DATETIME>2021-04-06T11:56:11Z</DATETIME>

<POLICY>

    <TITLE><![CDATA[Multiline CHeck Oracle asset]]></TITLE>

    <EXPORTED><![CDATA[2021-04-06T11:56:11Z]]></EXPORTED>

    <COVER_PAGE><![CDATA[]]></COVER_PAGE>

    <STATUS><![CDATA[active]]></STATUS>

    <TECHNOLOGIES total="2">

        <TECHNOLOGY>

            <ID>79</ID>

            <NAME>Oracle Enterprise Linux 7.x</NAME>

            ...

                    <CRITICALITY>

                        <LABEL><![CDATA[URGENT]]></LABEL>

                        <VALUE>5</VALUE>

                    </CRITICALITY>

                    <COMMENT><![CDATA[FC UDC]]></COMMENT>

                    <USE_AGENT_ONLY>0</USE_AGENT_ONLY>

                    <AUTO_UPDATE>0</AUTO_UPDATE>

                    <IGNORE_ERROR>1</IGNORE_ERROR>

                    <IGNORE_ITEM_NOT_FOUND>1</IGNORE_ITEM_NOT_FOUND>

                    <SCAN_PARAMETERS>                                <FILE_PATH><![CDATA[/home/testscan/samram]]></FILE_PATH>

                        <FILE_QUERY><![CDATA[.*]]></FILE_QUERY>

                        <DATA_TYPE>Line List</DATA_TYPE>

                        <EVALUATE_AS_STRING>1</EVALUATE_AS_STRING>

                        <DESCRIPTION><![CDATA[New option enabled with line list]]></DESCRIPTION>

                    </SCAN_PARAMETERS>

                    <TECHNOLOGIES total="2">

                        <TECHNOLOGY>

                            <ID>79</ID>

                            <NAME>Oracle Enterprise Linux 7.x</NAME>

                           ...

DTD

<platform API server>/api/2.0/fo/compliance/policy/policy_export_output.dtd