About

Go to Help > About to see information about the service. You'll see a list of Security Operations Centers (SOCs) identified with the IP addresses for service's external scanners under Qualys External Scanners, that you might need to whitelist, a list of SOCs identified with URLs for scanner appliances must contact under Qualys Scanner Appliances, plus additional service information for your reference.

You'll see the current web application version, the current online help version, and the current version of the SCAP application (when this is enabled for your subscription).

External scanners are used for perimeter scanning. This functionality is available to all users to protect against external threats. External scanners must be able to access target IPs in order to perform network discovery and security audits on your perimeter. Multiple SOCs (Security Operations Centers) are located in various geographical locations as well as at customer sites with Private Cloud Platforms.

This section lists IP addresses for the service's external scanners located at the SOC where your account is located. Depending on your network, it may be necessary to add the scanner IPs to your list of trusted IPs, so that the service can send probes to target hosts when processing scans and maps.

This section also displays the current version number for the scanning engine and for the vulnerability signatures package.

When you have scanner appliances, you'll see a list of the SOC URLs appropriate for your account/location. Your scanner appliances must be able to contact these URLs on port 443. For Private Cloud Platforms, the URLs displayed are appropriate to your local on-site SOC.

This is the cluster ID within the SOC (Security Operations Center) where your account is located. Certain SOCs have clusters enabled. The cluster ID appears only when the SOC where your account is located has clusters enabled.

This is a list of services the scanning engine is able to identify. For each service, the following additional information appears: the full name of the service, the type of port (TCP or UDP) the service runs on, and a complete description of the service.

This is a list of systems, including operating systems, wireless access points and VPN gateways, that the scanning engine is able to identify.

This section provides a link to the Center for Internet Security (CIS) web site. Follow the link to learn more about CIS, their mission, and the CIS benchmarks.