Qualys is used by NCSA IT for vulnerability assessment and management. Qualys will require SSH access to any public-facing host or service.

NCSA Security has opened a ticket for this: https://jira.ncsa.illinois.edu/browse/SECOPS-340. We need to:

• Provide a list of IPs that we want scanned (in general they try to scan one system of each type)
• Security will provide SSH public key to use to login to local qualys user account.
• Instructions for setting up Qualys user: https://wiki.ncsa.illinois.edu/pages/viewpage.action?pageId=41461115
• Provide email address for reports.
• We will also need to do this to public-facing containers (e.g., Nginx controller)

This ticket is complete when we have enabled Qualys scanning on cluster nodes.