Download Cloud Agent Resources from CDN
We have adopted the Content Delivery Network (CDN) for more efficient and seamless distribution of Cloud Agent packages.
This option to download Cloud Agent packages from CDN for auto-upgrade is available for:
- Windows Cloud Agent 5.7 and later versions
- Linux Cloud Agent 6.4 and later versions
For the smooth transition to the CDN-based package distribution, allow Cloud Agent to access the following Qualys CDN URLs.
The Cloud Agent host must be able to reach the respective CDN servers for seamless Cloud Agent binary downloads.
To view the CDN Server URLs specific to your host, navigate to Help > About section in the Cloud Agent user interface.
To know the CDN server URL for a specific Qualys Platform, refer to Identify Your Qualys Platform.
Resources Available on CDN Server
The following resources are available on the Qualys CDN Server. You must add these resources to the allow list for smooth operations of the impacted Qualys applications.
| Category | Resource Type | Impacted Qualys Applications |
|---|---|---|
| Cloud Agent Binaries | Cloud Agent for Windows and Linux binaries | Cloud Agent |
| SwCA | SwCA scanners and data collection binaries | Cloud Agent - SwCA |
| CAPS | Windows Cloud Agent binaries with CAPS support | Cloud Agent - CAPS |
| CAPS leader module | ||
| CAPS data upload and sensor engine module | ||
| Deep Scan | Windows Cloud Agent binaries with Deep Scan support | Cloud Agent - Deep Scan |
| Deep Scan configuration module | ||
| Deep scan signatures | ||
| Agent ID Services | Agent ID Service binaries | Cloud Agent |
| Cloud Agent packages | ||
| Patch Management | Vendor acquired patches | Patch Management |
| Custom patch binaries | ||
| Install pre-action files | ||
| Mitigation | Mitigation Engine binary | Patch Management |
| ETM Identity | ETM Identity (ISPM) binary | ETM Identity |
| ISPM PS script | ||
| EDR | Host Isolation artifacts | Endpoint Detection and Response |
| EPP | EPP setup chunks | Endpoint Detection and Response |
| TRPT packages |
Check CDN Access
Use the following commands to check if your assets have access to the Qualys CDN server.
Windows Assets ― Using Windows Powershell
iwr https://cask.qg3.apps.qualys.com/status
Linux Assets ― Using Linux Terminal
curl -v https://cask.qg3.apps.qualys.com/status
Cloud Agent Behavior with CDN
Note the following important points for Cloud Agent behavior with CDN:
- By default, the new Cloud Agents (Windows Cloud Agent 5.7, Linux Cloud Agent 6.4, and later versions) attempt the binary download from the Qualys CDN server. In case of any communication failure with the CDN, Cloud Agent will automatically fetch the required binaries from the Qualys Enterprise TruRisk™ Platform.
- The older Cloud Agents continue to download the required binaries from the Qualys Enterprise TruRisk™ Platform.