{"id":35754,"date":"2019-10-31T22:06:09","date_gmt":"2019-10-31T19:06:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-ya-stal-uyazvimym-skaniruem-it-infrastrukturu-s-pomoshhyu-qualys\/"},"modified":"2019-10-31T22:06:09","modified_gmt":"2019-10-31T19:06:09","slug":"kak-ya-stal-uyazvimym-skaniruem-it-infrastrukturu-s-pomoshhyu-qualys","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-ya-stal-uyazvimym-skaniruem-it-infrastrukturu-s-pomoshhyu-qualys","title":{"rendered":"Cum am devenit vulnerabil: scan\u0103m infrastructura IT cu Qualys","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Salut tuturor!<\/p>\n<p>Ast\u0103zi vreau s\u0103 v\u0103 povestesc despre solu\u021bia cloud de identificare \u0219i analiz\u0103 a vulnerabilit\u0103\u021bilor, Qualys Vulnerability Management, pe care se bazeaz\u0103 unul dintre serviciile noastre <noindex><a rel=\"nofollow\" href=\"https:\/\/www.dtln.ru\/uslugi\/security\/securityscan?utm_source=habr&amp;utm_medium=media&amp;utm_campaign=qualys_1\">servicii<\/a><\/noindex>.<\/p>\n<p>Mai jos v\u0103 voi ar\u0103ta cum este organizat\u0103 scanarea \u0219i ce informa\u021bii despre vulnerabilit\u0103\u021bi pot fi ob\u021binute \u00een urma acesteia.<\/p>\n<p><img decoding=\"async\" alt=\"Cum am devenit vulnerabil: scan\u0103m infrastructura IT cu Qualys\" src=\"\/wp-content\/uploads\/2019\/06\/31ae712e6eb4f3a2a08ab4fc9d754c63.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Ce poate fi scanat<\/h3>\n<p>\n<b>Servicii externe. <\/b>Pentru a scana serviciile care au acces la internet, clientul ne furnizeaz\u0103 adresele IP \u0219i datele de autentificare (dac\u0103 este necesar\u0103 o scanare cu autentificare). Scan\u0103m serviciile folosind cloud-ul Qualys \u0219i trimitem un raport la final.<\/p>\n<p><img decoding=\"async\" alt=\"Cum am devenit vulnerabil: scan\u0103m infrastructura IT cu Qualys\" src=\"\/wp-content\/uploads\/2019\/06\/7319302863fc2cc3b99ae66aff878b62.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Servicii interne.<\/b> \u00cen acest caz, scannerul caut\u0103 vulnerabilit\u0103\u021bi pe serverele interne \u0219i infrastructura de re\u021bea. Printr-o astfel de scanare se poate efectua un inventar al versiunilor sistemelor de operare, aplica\u021biilor, porturilor deschise \u0219i serviciilor aferente acestora. <\/p>\n<p>Pentru a scana \u00een interiorul infrastructurii clientului, se instaleaz\u0103 scannerul Qualys. Cloud-ul Qualys \u00eendepline\u0219te aici rolul de centru de comand\u0103 pentru acest scanner. <\/p>\n<p>\u00cen plus fa\u021b\u0103 de serverul intern cu Qualys, pot fi instalate agen\u021bi (Cloud Agent) pe obiectele de scanare. Ace\u0219tia colecteaz\u0103 informa\u021bii despre sistem local, practic f\u0103r\u0103 a crea o \u00eenc\u0103rcare asupra re\u021belei \u0219i a gazdelor pe care func\u021bioneaz\u0103. Informa\u021biile ob\u021binute sunt trimise \u00een cloud.<\/p>\n<p><img decoding=\"async\" alt=\"Cum am devenit vulnerabil: scan\u0103m infrastructura IT cu Qualys\" src=\"\/wp-content\/uploads\/2019\/06\/2ec636488a5095cc58ade13d1790c712.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAici sunt trei puncte importante: autentificarea \u0219i alegerea obiectelor pentru scanare.<\/p>\n<ol>\n<li><b>Utilizarea autentific\u0103rii<\/b>. Unii clien\u021bi solicit\u0103 s\u0103 efectu\u0103m scan\u0103ri blackbox, \u00een special pentru serviciile externe: ne ofer\u0103 un interval de adrese IP f\u0103r\u0103 a specifica sistemul \u0219i spun \u201eac\u021biona\u021bi ca un hacker\u201d. Dar hackerii rareori ac\u021bioneaz\u0103 la \u00eent\u00e2mplare. C\u00e2nd vine vorba de atac (nu de recon), ei \u0219tiu ce anume doresc s\u0103 compromit\u0103.\u00a0\n<p>La \u00eent\u00e2mplare, Qualys ar putea \u00eent\u00e2lni bannere falsificate \u0219i le-ar putea scana \u00een loc de sistemul \u021bint\u0103. De asemenea, f\u0103r\u0103 a \u00een\u021belege ce anume va fi scanat, este u\u0219or s\u0103 gre\u0219e\u0219ti configur\u0103rile scanner-ului \u0219i s\u0103 \u201eaplici\u201d serviciul verificat.\u00a0<\/p>\n<p>Scanarea va aduce mai multe beneficii dac\u0103 se fac verific\u0103ri cu autentificare \u00eenainte de sistemele scanate (whitebox). Astfel, scanner-ul va \u00een\u021belege unde a ajuns \u0219i ve\u021bi ob\u021bine date complete despre vulnerabilit\u0103\u021bile sistemului \u021bint\u0103.<\/p>\n<p><img decoding=\"async\" alt=\"Cum am devenit vulnerabil: scan\u0103m infrastructura IT cu Qualys\" src=\"\/wp-content\/uploads\/2019\/06\/3ad663252fac794f1ee2c1b97c3f90dc.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Qualys are multe op\u021biuni de autentificare.<\/i><\/li>\n<li><b>Gruparea activelor<\/b>. Dac\u0103 se \u00eencepe scanarea \u00een \u00eentregime \u0219i f\u0103r\u0103 discern\u0103m\u00e2nt, va fi un proces lung \u0219i va crea o sarcin\u0103 suplimentar\u0103 asupra sistemelor. Este mai bine s\u0103 grupa\u021bi serverele \u0219i serviciile \u00een func\u021bie de importan\u021b\u0103, loca\u021bie, versiunea OS, criticitatea infrastructurii \u0219i alte caracteristici (\u00een Qualys acestea se numesc Asset Groups \u0219i Asset Tags) \u0219i s\u0103 alege\u021bi o grup\u0103 specific\u0103 pentru scanare.<\/li>\n<li><b>Alege\u021bi o fereastr\u0103 tehnic\u0103 pentru scanare.<\/b> Chiar dac\u0103 a\u021bi prev\u0103zut totul \u0219i v-a\u021bi preg\u0103tit, scanarea genereaz\u0103 o sarcin\u0103 suplimentar\u0103 asupra sistemului. Nu va provoca neap\u0103rat degradarea serviciului, dar este mai bine s\u0103 alege\u021bi un moment specific, ca pentru backup sau aplicarea de actualiz\u0103ri.<\/li>\n<\/ol>\n<p><\/p>\n<h3>Ce se poate afla din rapoarte?<\/h3>\n<p>\nLa finalul scan\u0103rii, clientul prime\u0219te un raport, care nu con\u021bine doar o list\u0103 a tuturor vulnerabilit\u0103\u021bilor g\u0103site, ci \u0219i recomand\u0103ri de baz\u0103 pentru remedierea acestora: actualiz\u0103ri, patch-uri etc. Exist\u0103 multe rapoarte \u00een Qualys: sunt \u0219abloane implicite \u0219i se pot crea altele personalizate. Pentru a nu v\u0103 pierde \u00een toate aceste op\u021biuni, este mai bine s\u0103 clarifica\u021bi urm\u0103toarele aspecte:\u00a0<\/p>\n<ul>\n<li>cine va vizualiza acest raport: un manager sau un specialist tehnic?<\/li>\n<li>ce informa\u021bii dori\u021bi s\u0103 ob\u021bine\u021bi din rezultatul scan\u0103rii. De exemplu, dac\u0103 dori\u021bi s\u0103 verifica\u021bi dac\u0103 toate patch-urile necesare sunt instalate \u0219i cum se desf\u0103\u0219oar\u0103 remedierea vulnerabilit\u0103\u021bilor g\u0103site anterior, atunci este un raport. Dac\u0103 dori\u021bi doar s\u0103 efectua\u021bi un inventar al tuturor serverelor, atunci este alt raport.<\/li>\n<\/ul>\n<p>\nDac\u0103 ave\u021bi sarcina de a prezenta o imagine concis\u0103, dar clar\u0103, conducerii, pute\u021bi crea <b>Executive Report<\/b>. Toate vulnerabilit\u0103\u021bile vor fi organizate pe niveluri de criticitate, grafice \u0219i diagrame. De exemplu, primele 10 cele mai critice vulnerabilit\u0103\u021bi sau cele mai frecvente vulnerabilit\u0103\u021bi.<\/p>\n<p><img decoding=\"async\" alt=\"Cum am devenit vulnerabil: scan\u0103m infrastructura IT cu Qualys\" src=\"\/wp-content\/uploads\/2019\/06\/d5e5b54781de48b0b3132d886f59a064.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Cum am devenit vulnerabil: scan\u0103m infrastructura IT cu Qualys\" src=\"\/wp-content\/uploads\/2019\/06\/17113c844c35a4f328f5cbd958335875.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPentru specialistul tehnic, exist\u0103 <b>Technical Report<\/b> cu toate detaliile \u0219i specifica\u021biile. Se pot crea urm\u0103toarele rapoarte:<\/p>\n<p><b>Raport pe servere<\/b>. Este o unealt\u0103 util\u0103 atunci c\u00e2nd trebuie s\u0103 efectua\u021bi un inventar al infrastructurii \u0219i s\u0103 ob\u021bine\u021bi o imagine complet\u0103 asupra vulnerabilit\u0103\u021bilor serverelor.\u00a0<\/p>\n<p>Iat\u0103 cum arat\u0103 lista serverelor analizate cu sistemele de operare func\u021bionale indicate.<\/p>\n<p><img decoding=\"async\" alt=\"Cum am devenit vulnerabil: scan\u0103m infrastructura IT cu Qualys\" src=\"\/wp-content\/uploads\/2019\/06\/4143f3fa3233d51146a6d2ecbe0312db.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nVom deschide serverul de interes \u0219i vom vedea o list\u0103 de 219 vulnerabilit\u0103\u021bi g\u0103site, \u00eencep\u00e2nd de la cele mai critice, de nivelul cinci:<\/p>\n<p><img decoding=\"async\" alt=\"Cum am devenit vulnerabil: scan\u0103m infrastructura IT cu Qualys\" src=\"\/wp-content\/uploads\/2019\/06\/c40fa6b6a8e9547248f4125ae3ba3a0d.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nApoi putem verifica detaliile fiec\u0103rei vulnerabilit\u0103\u021bi. Aici vedem:<\/p>\n<ul>\n<li>c\u00e2nd vulnerabilitatea a fost identificat\u0103 pentru prima \u0219i ultima dat\u0103, <\/li>\n<li>numere industriale ale vulnerabilit\u0103\u021bilor, <\/li>\n<li>patch-ul pentru remedierea vulnerabilit\u0103\u021bii, <\/li>\n<li>exist\u0103 probleme de conformitate cu standardele PCI DSS, NIST etc.,<\/li>\n<li>exist\u0103 exploit-uri \u0219i malware pentru aceast\u0103 vulnerabilitate,<\/li>\n<li>o vulnerabilitate este detectat\u0103 \u00een timpul scan\u0103rii cu\/sau f\u0103r\u0103 autentificare \u00een sistem etc.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Cum am devenit vulnerabil: scan\u0103m infrastructura IT cu Qualys\" src=\"\/wp-content\/uploads\/2019\/06\/bf5d69126c1e4ae3cdf226d6b5783f68.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDac\u0103 nu este prima scanare \u2013 da, trebuie s\u0103 face\u021bi scan\u0103ri regulat \ud83d\ude42 \u2013 atunci cu ajutorul <b>Raport de tendin\u021be<\/b> se poate urm\u0103ri evolu\u021bia gestion\u0103rii vulnerabilit\u0103\u021bilor. Statutul vulnerabilit\u0103\u021bilor va fi ar\u0103tat \u00een compara\u021bie cu scanarea anterioar\u0103: vulnerabilit\u0103\u021bile care au fost g\u0103site anterior \u0219i remediate vor fi marcate ca fixed, cele nefacute \u2013 active, noi \u2013 new. <\/p>\n<p><b>Raport de vulnerabilitate.<\/b> \u00cen acest raport, Qualys va construi o list\u0103 a vulnerabilit\u0103\u021bilor, \u00eencep\u00e2nd cu cele mai critice, indic\u00e2nd pe ce host poate fi g\u0103sit\u0103 aceast\u0103 vulnerabilitate. Raportul este util dac\u0103 dori\u021bi s\u0103 analiza\u021bi, de exemplu, toate vulnerabilit\u0103\u021bile de nivel cinci. <\/p>\n<p>De asemenea, pute\u021bi realiza un raport separat doar pentru vulnerabilit\u0103\u021bile de nivel patru \u0219i cinci.<\/p>\n<p><img decoding=\"async\" alt=\"Cum am devenit vulnerabil: scan\u0103m infrastructura IT cu Qualys\" src=\"\/wp-content\/uploads\/2019\/06\/95e08a919b3f83e246c1bf210cf802a9.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Raport de patch-uri.<\/b> Aici se ofer\u0103 o list\u0103 complet\u0103 a patch-urilor care trebuie instalate pentru a remedia vulnerabilit\u0103\u021bile g\u0103site. Pentru fiecare patch exist\u0103 explica\u021bii despre ce vulnerabilit\u0103\u021bi trateaz\u0103, pe ce host\/sistem trebuie instalat \u0219i un link direct pentru desc\u0103rcare.<\/p>\n<p><img decoding=\"async\" alt=\"Cum am devenit vulnerabil: scan\u0103m infrastructura IT cu Qualys\" src=\"\/wp-content\/uploads\/2019\/06\/508894789fba21d871d17e4275f66c99.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Cum am devenit vulnerabil: scan\u0103m infrastructura IT cu Qualys\" src=\"\/wp-content\/uploads\/2019\/06\/c085079f440f15defdff81a0745c0e06.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Raport de conformitate cu standardele PCI DSS<\/b>. Standardul PCI DSS impune efectuarea de scan\u0103ri ale sistemelor informa\u021bionale \u0219i aplica\u021biilor accesibile din re\u021beaua Internet la fiecare 90 de zile. Dup\u0103 scanare, se poate genera un raport care va ar\u0103ta ce nu se conformeaz\u0103 cerin\u021belor standardului \u00een infrastructur\u0103.<\/p>\n<p><img decoding=\"async\" alt=\"Cum am devenit vulnerabil: scan\u0103m infrastructura IT cu Qualys\" src=\"\/wp-content\/uploads\/2019\/06\/31438f0e8e9533a4eded51acfd6285a4.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Cum am devenit vulnerabil: scan\u0103m infrastructura IT cu Qualys\" src=\"\/wp-content\/uploads\/2019\/06\/ffae65037d591ca6a0487842ca7eb147.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Rapoarte de remediere a vulnerabilit\u0103\u021bilor<\/b>. Qualys poate fi integrat cu serviciul de ticketing, iar toate vulnerabilit\u0103\u021bile g\u0103site vor fi automat transformate \u00een tichete. Cu ajutorul acestui raport, de fapt, pute\u021bi urm\u0103ri progresul tichete-lor realizate \u0219i al vulnerabilit\u0103\u021bilor remediate. <\/p>\n<p><b>Rapoarte de porturi deschise<\/b>. Aici pute\u021bi ob\u021bine informa\u021bii despre porturile deschise \u0219i serviciile care ruleaz\u0103 pe acestea:<\/p>\n<p><img decoding=\"async\" alt=\"Cum am devenit vulnerabil: scan\u0103m infrastructura IT cu Qualys\" src=\"\/wp-content\/uploads\/2019\/06\/1303ce43360789cb6fc361843bbfdbb5.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nsau pute\u021bi genera un raport de vulnerabilitate pe fiecare port:<\/p>\n<p><img decoding=\"async\" alt=\"Cum am devenit vulnerabil: scan\u0103m infrastructura IT cu Qualys\" src=\"\/wp-content\/uploads\/2019\/06\/7fd85c1a2a7570e193e6e0112e531285.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAcestea sunt doar \u0219abloane standard de rapoarte. Pute\u021bi crea altele personalizate pentru sarcini specifice, de exemplu, pentru a ar\u0103ta doar vulnerabilit\u0103\u021bile de cel pu\u021bin nivelul cinci de criticitate. Toate rapoartele sunt disponibile. Formatul rapoartelor: CSV, XML, HTML, PDF \u0219i docx. <\/p>\n<p><img decoding=\"async\" alt=\"Cum am devenit vulnerabil: scan\u0103m infrastructura IT cu Qualys\" src=\"\/wp-content\/uploads\/2019\/06\/fee65d62388fd7efef2aeed25c36fd14.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>\u0218i aminti\u021bi-v\u0103:<\/b> Securitatea nu este un rezultat, ci un proces. O scanare unic\u0103 ajut\u0103 la identificarea problemelor \u00een prezent, dar nu reprezint\u0103 un proces complet de gestionare a vulnerabilit\u0103\u021bilor.<br \/>\nPentru a v\u0103 \u00eencuraja s\u0103 v\u0103 angaja\u021bi \u00een aceast\u0103 munc\u0103 regulat\u0103, am creat un serviciu bazat pe Qualys Vulnerability Management.<\/p>\n<p><b>Oferim tuturor cititorilor Habr o promo\u021bie:<\/b> la comanda unui serviciu de scanare pe un an, dou\u0103 luni de scan\u0103ri sunt gratuite. Cererile pot fi l\u0103sate <noindex><a rel=\"nofollow\" href=\"https:\/\/www.dtln.ru\/uslugi\/security\/securityscan?utm_source=habr&amp;utm_medium=media&amp;utm_campaign=qualys_2\">aici<\/a><\/noindex>, \u00een c\u00e2mpul \u201eComentariu\u201d scrie\u021bi Habr.<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dataline\/blog\/457768\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u0445\u043e\u0447\u0443 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u0440\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Qualys Vulnerability Management, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d \u043e\u0434\u0438\u043d \u0438\u0437 \u043d\u0430\u0448\u0438\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432. \u041d\u0438\u0436\u0435 \u043f\u043e\u043a\u0430\u0436\u0443, \u043a\u0430\u043a \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u043e \u0441\u0430\u043c\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438 \u043a\u0430\u043a\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043c\u043e\u0436\u043d\u043e \u0443\u0437\u043d\u0430\u0442\u044c \u043f\u043e \u0438\u0442\u043e\u0433\u0430\u043c. \u0427\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0412\u043d\u0435\u0448\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b. \u0414\u043b\u044f \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0432\u044b\u0445\u043e\u0434 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u043a\u043b\u0438\u0435\u043d\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0430\u043c \u0438\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26790,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-35754","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u0445\u043e\u0447\u0443 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u0440\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Qualys Vulnerability Management, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d \u043e\u0434\u0438\u043d \u0438\u0437 \u043d\u0430\u0448\u0438\u0445\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-ya-stal-uyazvimym-skaniruem-it-infrastrukturu-s-pomoshhyu-qualys\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u044f \u0441\u0442\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c: \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u0435\u043c \u0418\u0422-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Qualys | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u0445\u043e\u0447\u0443 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u0440\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Qualys Vulnerability Management, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d \u043e\u0434\u0438\u043d \u0438\u0437 \u043d\u0430\u0448\u0438\u0445\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-ya-stal-uyazvimym-skaniruem-it-infrastrukturu-s-pomoshhyu-qualys\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:06:09+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:06:09+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cum am devenit vulnerabil: scan\u0103m infrastructura IT cu ajutorul Qualys | ProHoster","description":"Salutare tuturor! Ast\u0103zi vreau s\u0103 v\u0103 vorbesc despre solu\u021bia de cloud pentru c\u0103utarea \u0219i analiza vulnerabilit\u0103\u021bilor Qualys Vulnerability Management, pe care se bazeaz\u0103 unul dintre serviciile noastre","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-ya-stal-uyazvimym-skaniruem-it-infrastrukturu-s-pomoshhyu-qualys","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u044f \u0441\u0442\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c: \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u0435\u043c \u0418\u0422-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Qualys | ProHoster","og:description":"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u0445\u043e\u0447\u0443 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u0440\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Qualys Vulnerability Management, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d \u043e\u0434\u0438\u043d \u0438\u0437 \u043d\u0430\u0448\u0438\u0445","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-ya-stal-uyazvimym-skaniruem-it-infrastrukturu-s-pomoshhyu-qualys","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:06:09+00:00","article:modified_time":"2019-10-31T19:06:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35754","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 00:37:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:56:33","updated":"2026-01-22 00:37:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/35754","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=35754"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/35754\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/26790"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=35754"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=35754"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=35754"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}