Anti-Virus and Hips Exclusion

If you have Anti-Virus or HIPS software installed, ensure that you exclude the following files, directories, and processes from all security software installed on the system to avoid conflict with Cloud Agent.

Directory list used by Cloud Agent installation

• /etc/opt/qualys
• /etc/opt/qualys/cloud-agent
• /etc/opt/qualys/cloud-agent/cert
• /etc/qualys
• /opt/qualys
• /opt/qualys/cloud-agent
• /opt/qualys/cloud-agent/bin
• /opt/qualys/cloud-agent/lib
• /opt/qualys/cloud-agent/manifests
• /opt/qualys/cloud-agent/setup
• /usr/share/doc
• /usr/share/doc/qualys-cloud-agent-<version>
• /var/opt/qualys

For agent version 1.6, files listed under /etc/opt/qualys/ are available at /etc/qualys/, and log files are available at /var/log/qualys.

Agent daemon process “qualys-cloud-agent”

The agent runs as a daemon process “qualys-cloud-agent”.

The agent runs various read-only commands during the scanning process. These are the same commands run by a scan using a scanner appliance. 

Some transient files are created during agent execution

• The current agent configuration: /opt/qualys/cloud-agent/Config.db
• Manifests used during agent-based scans- /opt/qualys/cloud-agent/manifests/*.db