---
title: "Process Workflow"
canonical: "https://docs.infoblox.com/space/DeploymentGuideIPAMTDwithQualys/1296990508/Process%20Workflow"
format: markdown
---
### IPAM Integration

The script is designed to synchronize IP address management (IPAM) data from Infoblox Infoblox to Qualys Vulnerability Management. This synchronization process involves creating and updating objects such as address blocks, subnets, IP ranges, fixed IPs and IP reservations in Qualys based on changes made in the Infoblox IPAM system. After the synchronization is complete, the script will automatically initiate a Qualys scan wherever needed.

### Threat Defense Integration

In addition to IPAM synchronization, the script integrates with Infoblox  Threat Defense to identify and respond to cyber threats. When a security policy is violated by an asset, it will be logged in the "Threat Defense Threat Feeds Hits Log." Any critical assets tagged as **'VM_Scan_on_Policy_Hit'** will be immediately sent to Qualys for a vulnerability scan, ensuring timely assessment of high-risk items.

> ℹ️ For **Threat Defense** to function properly, it requires both **DFP **and **DHCP services** to be running on a designated host.

### Script Wokflow


- **Initialization: **The script begins by initializing and retrieving necessary environment variables such as the Qualys URL, credentials, and API keys.
- **Data Fetching:**
  - **Initial Sync:** The script fetches all IPAM data from Infoblox using the bulk export data API and stores IP space information in a cache. It also retrieves DHCP lease information via the Infoblox DHCP Lease API.
  - **Event-Based:** The script listens to events from audit logs and monitors changes to IP spaces and objects. It syncs with the Qualys platform based on specific tags, such as `Qualys_sync`, `Qualys_group`, and `Qualys_scan`.
- **Data Filtering: **Only objects within tagged IP spaces or objects themselves with the `Qualys_sync=true` value are considered for synchronization. For IP spaces, the `Qualys_sync` and `Qualys_scan` tags are prioritized, while the `Qualys_group` tag is prioritized for individual objects.
- **Data Synchronization: **If an asset is not already available in Qualys, it will be created, whether the event is a creation or an update. The script supports synchronization for the following object types:
  - Address Block
  - Address
  - Subnet
  - Range
  - Fixed Address
  - TD RPZ Log (Threat Feed Logs)