# Catalogue des tags Qualys V3 SANEF
# Source : SANEF DSI / Sécurité Opérationnelle — Plan d'action Qualys V3 (Mars 2026)
#
# type: DYN (dynamic — création console web Qualys UNIQUEMENT)
#       STAT (static — création + assignation via API OK)
# auto: True  = entierement automatisable (Tag Rule ou script)
#       False = necessite decision humaine

categories:
  OS:
    description: "Système d'exploitation — dynamique sur operatingSystem"
    tags:
      - name: OS-LIN
        type: DYN
        auto: true
        qql: 'operatingSystem.category1: "Linux"'
        color: "#4CAF50"
      - name: OS-WIN
        type: DYN
        auto: true
        qql: 'operatingSystem.category1: "Windows"'
        color: "#2196F3"
      - name: OS-WIN-SRV
        type: DYN
        auto: true
        qql: 'operatingSystem: "Windows Server"'
        color: "#1976D2"
      - name: OS-ESX
        type: DYN
        auto: true
        qql: 'operatingSystem: "ESXi"'
        color: "#9C27B0"

  ENV:
    description: "Environnement — dynamique sur hostname position 2"
    tags:
      - name: ENV-PRD
        type: DYN
        auto: true
        qql: 'name: "vp" OR name: "sp" OR name: "lp" OR name: "ls-"'
        color: "#F44336"
      - name: ENV-REC
        type: DYN
        auto: true
        qql: 'name: "vr" OR name: "sr" OR name: "lr"'
        color: "#FF9800"
      - name: ENV-PPR
        type: DYN
        auto: true
        qql: 'name: "vi" OR name: "si" OR name: "vo"'
        color: "#FFC107"
      - name: ENV-TST
        type: DYN
        auto: true
        qql: 'name: "vv" OR name: "vt"'
        color: "#CDDC39"
      - name: ENV-DEV
        type: DYN
        auto: true
        qql: 'name: "vd" OR name: "sd"'
        color: "#8BC34A"

  POS:
    description: "Périmètre / Domaine — dynamique sur hostname positions 2-N"
    tags:
      - name: POS-FL
        type: DYN
        auto: true
        qql: 'name: "*bot" OR name: "*boo" OR name: "*boc" OR name: "*afl" OR name: "*sup"'
        color: "#009688"
      - name: POS-INF
        type: DYN
        auto: true
        qql: 'name: "*dsi" OR name: "*cyb" OR name: "*vsa" OR name: "*iad" OR name: "*bur" OR name: "*aii" OR name: "*ecm" OR name: "*log" OR name: "*vid" OR name: "*gaw" OR name: "*bck" OR name: "*ngw" OR name: "*pct" OR name: "*pix" OR name: "*sim" OR name: "*nms" OR name: "*ges" OR name: "*mon"'
        color: "#3F51B5"
      - name: POS-PEA
        type: DYN
        auto: true
        qql: 'name: "*pea" OR name: "*osa" OR name: "*svp" OR name: "*adv" OR name: "*rpa" OR name: "*rpn" OR name: "ls-"'
        color: "#673AB7"
      - name: POS-TRA
        type: DYN
        auto: true
        qql: 'name: "*ame" OR name: "*tra" OR name: "*dai" OR name: "*pat" OR name: "*rau" OR name: "*dep" OR name: "*exp" OR name: "*sig" OR name: "*air"'
        color: "#E91E63"
      - name: POS-BI
        type: DYN
        auto: true
        qql: 'name: "*dec" OR name: "*sas" OR name: "*bip" OR name: "*apt" OR name: "*pbi" OR name: "*rep"'
        color: "#FF5722"
      - name: POS-GES
        type: DYN
        auto: true
        qql: 'name: "*int" OR name: "*agt" OR name: "*pin" OR name: "*ech"'
        color: "#795548"
      - name: POS-DMZ
        type: DYN
        auto: true
        qql: 'name: "*ssi"'
        color: "#607D8B"

  EQT:
    description: "Type equipement — position 1"
    tags:
      - name: EQT-VIR
        type: DYN
        auto: true
        qql: 'name: "v"'
        color: "#00BCD4"
      - name: EQT-SRV
        type: DYN
        auto: true
        qql: 'name: "l" OR name: "s"'
        color: "#03A9F4"
      - name: EQT-SWI
        type: DYN
        auto: true
        qql: 'name: "n"'
        color: "#4DD0E1"

  SPEC_AUTO:
    description: "Tags spécifiques automatisables"
    tags:
      - name: TAG-OBS
        type: DYN
        auto: true
        qql: 'operatingSystem: "Windows Server 2008" OR operatingSystem: "Windows Server 2012" OR operatingSystem: "CentOS release 6" OR operatingSystem: "Red Hat Enterprise Linux Server release 6"'
        color: "#B71C1C"
      - name: TAG-EMV
        type: DYN
        auto: true
        qql: 'name: "*emv" OR name: "*pci"'
        color: "#D500F9"

  SPEC_MANUAL:
    description: "Tags spécifiques non automatisables (decision humaine)"
    tags:
      - name: TAG-SED
        type: STAT
        auto: false
        description: "Securite Exposition Directe — IP publique / NAT direct"
        color: "#C62828"
      - name: TAG-SEI
        type: STAT
        auto: false
        description: "Securite Exposition Indirecte — derriere frontal"
        color: "#EF6C00"
      - name: TAG-DEC
        type: STAT
        auto: false
        description: "Decommissionnement en cours"
        color: "#6D4C41"
      - name: TAG-INT
        type: STAT
        auto: false
        description: "Integration / Implémentation en cours"
        color: "#FDD835"
      - name: TAG-SIC
        type: STAT
        auto: false
        description: "Zone SIC — Systeme Information Classifie"
        color: "#1A237E"
      - name: TAG-SIA
        type: STAT
        auto: false
        description: "Zone SIA — Systeme Information Administration"
        color: "#283593"

  PREFIXES_MANUAL:
    description: "Prefixes statiques pour tags nominatifs (crees a la demande via API)"
    prefixes:
      - prefix: APP-
        description: "Application hebergee — APP-SAT, APP-JIRA, APP-GLPI..."
      - prefix: BDD-
        description: "Type de base de donnees — BDD-ORA, BDD-PG, BDD-SQL..."
      - prefix: VRF-
        description: "VRF reseau — VRF-TRAFIC, VRF-EMV..."
      - prefix: MID-
        description: "Middleware — MID-TOMCAT, MID-HAPROXY..."
