Download Cloud Agent Resources from CDN

We have adopted the Content Delivery Network (CDN) for more efficient and seamless distribution of Cloud Agent packages.

This option to download Cloud Agent packages from CDN for auto-upgrade is available for:

  • Windows Cloud Agent 5.7 and later versions
  • Linux Cloud Agent 6.4 and later versions

For the smooth transition to the CDN-based package distribution, allow Cloud Agent to access the following Qualys CDN URLs. 

The Cloud Agent host must be able to reach the respective CDN servers for seamless Cloud Agent binary downloads.

To view the CDN Server URLs specific to your host, navigate to Help > About section in the Cloud Agent user interface.

 

To know the CDN server URL for a specific Qualys Platform, refer to Identify Your Qualys Platform.

Resources Available on CDN Server

The following resources are available on the Qualys CDN Server. You must add these resources to the allow list for smooth operations of the impacted Qualys applications.

Category Resource Type Impacted Qualys Applications
Cloud Agent Binaries Cloud Agent for Windows and Linux binaries  
SwCA  SwCA scanners and data collection binaries  
CAPS Windows Cloud Agent binaries with CAPS support  
  CAPS leader module  
  CAPS data upload and sensor engine module  
Deep Scan Windows Cloud Agent binaries with Deep Scan support  
  Deep Scan configuration module  
  Deep scan signatures  
Agent ID Services Agent ID Service binaries  
  Cloud Agent packeges  
Patch Management Vendor aquired patches  
  Custom patch binaries  
  Install pre-action files  

Check CDN Access

Use the following commands to check if your assets have access to the Qualys CDN server.

Windows Assets ― Using Windows Powershell

iwr https://cask.qg3.apps.qualys.com/status

Linux Assets ― Using Linux Terminal

curl -v https://cask.qg3.apps.qualys.com/status

Cloud Agent Behavior with CDN

Note the following important points for Cloud Agent behavior with CDN:

  • By default, the new Cloud Agents (Windows Cloud Agent 5.7, Linux Cloud Agent 6.4, and later versions) attempt the binary download from the Qualys CDN server. In case of any communication failure with the CDN, Cloud Agent will automatically fetch the required binaries from the Qualys Enterprise TruRisk™ Platform.
  • The older Cloud Agents continue to download the required binaries from the Qualys Enterprise TruRisk™ Platform.