{“lastseen”:”2025-10-07T18:43:46″,”description”:”Deployment health is mission-critical in today\u2019s digital environment. Duplicate records, ghost hosts, and stale data obscure insights, slow decisions, and erode confidence. Building on last year\u2019s Subscription Health Dashboard blog and best practices, the 2025 update delivers cleaner visibility, stronger ownership, and sharper awareness across the Qualys Enterprise TruRisk Platform. It equips teams to act decisively and keep deployments efficient and compliant while ensuring confidence in global subscription health.\\n\\nThe 2025 Subscription Health Dashboard retains the same clean design with refreshed content and a host of improvements under the hood. Last year\u2019s release helped global teams automate, scale success, and align on best practices faster than ever. This year\u2019s update takes the next step, adding three new widgets, surfacing hidden issues, and delivering prescriptive guidance for faster resolution. Think of it as the new model year for deployment health, built to run smoother, faster, and more reliably.\\n\\n## 6 Key Improvements in This Release\\n\\n**1\\\\. Documentation Additions, Updates, and Streamlined Steps**\\n\\n * Refreshed documentation links in every widget for easier navigation and reference. (Open the widget, then copy and paste from the Description section; links are **not clickable** from the UI hover action).\\n * Cleanup of QQL, Qualys Query Language, search queries for consistency and accuracy.\\n * Deeper dive links into the authentication documentation and next steps.\\n\\n\\n\\n**2\\\\. Sharper Ghost Host Detection (Now with Prescriptive Fixes)** \\nGhost hosts bloat counts, complicate reporting, and add little value. This release sharpens detection with two refined widgets updated with IP, NetBIOS, _and_ DNS tracking methods, as well as tuned queries, while simultaneously zeroing in on TCP and UDP services where polling or scanning access is blocked.\\n\\n * **Updated Potential Ghost Host Detection – **Spot where **scanners are blocked from TCP and UDP ports** or associated services.\\n * Configure for Next Generation Firewalls, Host-Based Firewalls, and Load Balancers.\\n * Review option profiles to quickly auto-clean subscriptions (see related \u201cRecommended Option Profile\u201d blog update).\\n * **New Widget #1** : See where the**scanner is unable to poll TCP\/UDP services (** targeting key QIDs 82023 and 82004).\\n * **Step-by-Step Guidance highlight:**\\n * Verify allow lists, trunk ports, and VLAN access.\\n * Confirm QIDs 82023 and 82004 are included in the Option Profile.\\n * Configure Option Profiles to ignore TCP SYN and SYN-ACK responses from firewalls (Additional tab).\\n\\n\\n\\n\\n\\n**3\\\\. New Widget #2: Agent Merge Default Ports Check** \\nCorrelating Qualys Cloud Agent records with IP-based scans is critical for accurate subscription reporting. This widget helps flag cases where default ports are not enabled, blocking merging, and helps teams to:\\n\\n * Catch duplicate issues before they inflate asset counts.\\n * Pinpoint root causes behind merging failures.\\n * Resolve port-related gaps that block Qualys from unifying unauthenticated scans and agent data.\\n\\n\\n\\n**4\\\\. New Widget #3: Discovered but Unmanaged Assets** \\nCatch unknowns and Shadow IT activity with Qualys Cloud Agent passive discovery, network sensors, or the External Attack Surface. This widget highlights unmanaged assets and web applications creeping into the subscription:\\n\\n * Gain insight into discoveries that are not yet covered by Qualys VMDR, External Attack Surface, or Web Application TotalAppSec scans.\\n\\n\\n\\n**5\\\\. Stale Assets Section Improvements**\\n\\n * Trending is automatically enabled when imported.\\n * Expanded legend and links for faster awareness and next steps.\\n\\n\\n\\n6\\\\. **Branding Alignment**\\n\\nUpdated widgets with TruRisk Eliminate and Policy Audit references, reflecting the latest Qualys terminology and capabilities.\\n\\n## Sharper Insights, Clear Action\\n\\nThis release deepens the best practices established last year (unification, merging, purging, and depth) by adding prescriptive guidance. With unmanaged and discovered asset tracking, potential ghost host resolution, and agent merging visibility, teams can maintain a clean _and_ automated experience. This year\u2019s updates empower teams to resolve issues, cutting inflated counts faster and helping to keep the platform accurate, reliable, and reporting-ready.\\n\\n## Next Steps\\n\\nLog in today to put the latest release to work:\\n\\n * Review hidden, unmanaged, and discovered assets, and then bring them into scope.\\n * Enable cloud connectors, passive sensors, scanners, agents, and close coverage gaps.\\n * Purge stale records automatically.\\n * Check for potential ghost hosts, keep data clean, and unlock assets outside of view.\\n * Validate agent merging to avoid duplicates.\\n * Bookmark the Qualys documentation site.\\n\\n\\n\\nNo matter which Qualys products the team uses to de-risk the business, with the 2025 Subscription Health Dashboard updates, they will get sharper insights and prescriptive guidance. These tactics combined with the updated dashboard ensure that the Enterprise TruRisk Platform subscription stays clean, compliant, and ready for whatever comes next!\\n\\n* * *\\n\\n**Download the 2025 Subscription Health Dashboard today.**\\n\\nDownload Now\\n\\n* * *\\n\\n## **C** ontributors\\n\\n * Marcus Burrows \u2013 Lead Technical Trainer”,”published”:”2025-10-07T18:33:59″,”modified”:”2025-10-07T18:33:59″,”type”:”qualysblog”,”title”:”Subscription Health Dashboard 2025 Update”,”source”:””,”references”:””,”id”:”QUALYSBLOG:863F3350544C487ABF39D9EF17FDB119″,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/blog.qualys.com\/category\/product-tech”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-10-07T18:43:46″,”description”:”Deployment health is mission-critical in today\u2019s digital environment. Duplicate records, ghost hosts, and stale data obscure insights, slow decisions, and erode confidence. Building on last…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,13,33,120,7,11,5],"class_list":["post-20558","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-news","tag-none","tag-qualysblog","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n