Qualys Cloud Agent for Unix Release 4.20.2-3

June 05, 2025

With this release of Cloud Agent, we are introducing the following new features and enhancements.

Updates for Reporting FIM Events

We have made the following updates for FIM event reporting:

Qualys FIM can report events only for regular files, directory files, or symbolic links. Events for other file types are not reported.
When an existing file is deleted and a new file is created at the same location, in some cases, the AIX system assigns the same Inode to the new file. Due to this, FIM reported the rename event for the new file, instead of the delete and create event.

In case of Inode collision, we have updated this behavior to report the rename, create, and delete events by tracking the changes made to the files.

There are no behavior changes for this release.

No new platform coverage is added in this release.

No notable and important issues are included in this release.

The following are the known issues for FIM working on AIX assets:

ruleType=symlink is not supported for AIX assets.
In FIM configuration, the inclusion criteria have higher precedence over the other criteria. For example, if you have created an inclusion rule to report FIM events for a specific file and there exists a conflicting exclusion rule for the same file, then FIM gives precedence to the inclusion rule, and the file is not excluded from reporting the FIM event.
As FIM can not capture the delete file events, the time stamps for delete events are reported incorrectly.