Anti-Virus and HIPS Exclusions on Linux/BSD/Unix
Have Anti-Virus or HIPS software installed? To avoid conflicts with Cloud Agent, ensure that you exclude the following files, directories, and processes from all security software installed on the system.
Directory list used by Cloud Agent installation :
On Linux/BSD:
/etc
/etc/init.d //Linux
/etc/rc.d //BSD
/etc/qualys
/etc/qualys/cloud-agent
/etc/qualys/cloud-agent/.centos //Linux
/etc/qualys/cloud-agent/cert
/etc/qualys/cloud-agent/.suse //Linux
/etc/qualys/cloud-agent/.systemd //Linux
/usr/local
/usr/local/qualys
/usr/local/qualys/cloud-agent
/usr/local/qualys/cloud-agent/bin
/usr/local/qualys/cloud-agent/lib
/usr/share/doc
/usr/share/doc/qualys-cloud-agent-<version>
On Unix:
/etc/opt/qualys
/etc/opt/qualys/cloud-agent
/etc/opt/qualys/cloud-agent/cert
/etc/qualys
/opt/qualys
/opt/qualys/cloud-agent
/opt/qualys/cloud-agent/bin
/opt/qualys/cloud-agent/lib
/opt/qualys/cloud-agent/manifests
/opt/qualys/cloud-agent/setup
/usr/share/doc
/usr/share/doc/qualys-cloud-agent-<version>
/var/opt/qualys
For agent version 1.6, files listed under /etc/opt/qualys/ are available at /etc/qualys/, and log files are available at /var/log/qualys.
Agent daemon process "qualys-cloud-agent"
The agent runs as daemon process "qualys-cloud-agent".
The agent runs various read-only commands during the scanning process. These are the same commands run by a scan using a scanner appliance. Learn moreLearn more
Click this link to see the commands run using a scanner appliance.
From the Community Sudo Command List
Some transient files are created during agent execution
/usr/local/qualys/cloud-agent/Config.db - this is the current agent configuration
/usr/local/qualys/cloud-agent/manifests/*.db - this contains manifested used during agent based scans