Cloud Agents for FedRAMP-compliant Platform (GOV1)
FedRAMP-compliant Qualys Cloud Agents deliver continuous security, visibility, and assessment for the government platform. This section describes the Cloud Agent Installation process on a FedRAMP-compliant platform, i.e., the GOV1 platform.
How to Install Cloud Agent on FedRAMP-high Platform
Download the Cloud Agent for hosts on the FedRAMP-high platform. To learn more about downloading Cloud Agent, refer to Cloud Agent Getting Started Guide.
To support Cloud Agent installation on a FedRAMP-compliant platform, we introduced a new parameter, FEDRAMP={true|false}. Check the Support Matrix to know the Cloud Agent versions supported for the FedRAMP-high platform.
The FEDRAMP={true|false} parameter must be set to true while installing Cloud Agent on a FedRAMP-high platform. This parameter is only supported for the FedRAMP-high platform (GOV1).
Use the following installation commands to install different Cloud Agent variants:
FedRAMP-high Windows Cloud Agent
Installation Command for .exe Package
> QualysCloudAgent.exe CustomerId={xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}
ActivationId={xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}
WebServiceUri=https://qualysguard.gov1.qualys.us/CloudAgent/ FEDRAMP=true
Installation Command for .exe Package
Msiexec.exe /i CloudAgent_x86.msi CustomerId={12345678-1234-1234-1234-123456789012}
ActivationId={12345678-1234-1234-1234-123456789012}
WebServiceUri=https://qualysguard.gov1.qualys.us/CloudAgent/ FEDRAMP=true
FedRAMP-high Linux Cloud Agent
Installation Command for Linux (.rpm) Package
> sudo rpm -ivh qualys-cloud-agent.x86_64.rpm
> sudo /usr/local/qualys/cloud-agent/bin/qualys-cloud-agent.sh ActivationId=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
CustomerId=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
ServerUri=https://qualysguard.gov1.qualys.us/CloudAgent/ FEDRAMP=true
Installation Command for Linux (.deb) Package
> sudo dpkg --install qualys-cloud-agent.x86_64.deb
> sudo /usr/local/qualys/cloud-agent/bin/qualys-cloud-agent.sh
ActivationId=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
CustomerId=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
ServerUri=https://qualysguard.gov1.qualys.us/CloudAgent/ FEDRAMP=true
FedRAMP-high MacOS Cloud Agent
Installation Command for macOS Cloud Agents
sudo installer -pkg ./QualysCloudAgent.pkg -target/
sudo /Applications/QualysCloudAgent.app/Contents/MacOS/qualys-cloud-agent.sh
ActivationId=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
CustomerId=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
ServerUri=https://qualysguard.gov1.qualys.us/CloudAgent/ FEDRAMP=true
The installation commands mentioned above are only for sample. Do not use these commands as it is. Use the proper activation ID, customer ID, and spacing in the commands.
Which Cloud Agents are Supported for FedRAMP-high Platform
The following support matrix lists the minimum Cloud Agent versions supported for the FedRAMP-high platform. The matrix also highlights if the Cloud Agent installed on shared or private Cloud Platforms can be migrated to the FedRAMP-high platform (Cross-platform migration support).
| Cloud Agent OS | Agent Architecture | Agent Version | FedRAMP Parameter | Cross-platform Migration |
|---|---|---|---|---|
| Windows | x86/x64 | 5.6.4.2 | Not Required | Not allowed |
| Windows | x86/x64 | 6.4 and higher | Required | Not allowed (Supported for Windows Agent 6.4.1 and higher versions) |
| Linux (RPM) | x86/x64 | 6.3.113 | Not Required | Not allowed |
| Linux (Ubuntu) | x86/x64 | 6.3.113 | Not Required | Not allowed |
| Linux (RPM) | x86/x64 | 7.3 and higher | Required | Allowed |
| Linux (Ubuntu) | x86/x64 | 7.3 and higher | Required | Allowed |
| MacOS (Intel) | Intel | 6.2 and higher | Required | Not allowed |
| MacOS (Apple Silicon) | ARM | 6.3 and higher | Required | Not allowed |