Cloud Agent for Linux Intel Release 7.4

April 16, 2026

Cloud Agent for Linux Intel 7.4 introduces automated certificate management, forensic data collection for Linux assets, controlled Software Composition Analysis (SwCA) binary downloads, improved log collection, and scan reliability fixes, helping you automate securely and operate efficiently.

New Feature - Collect Forensic Data for Linux Assets

Cloud Agent for Linux Intel now supports collecting forensic data for analyzing Linux assets. You can use this forensic data to verify tampering with assets, conduct system health assessments, support incident response, and perform post-incident analysis.

To request the forensic data, navigate to Forensics > Forensics Collection > Request Forensic Data in the Endpoint Detection and Response (EDR) user interface. With this feature, you can request System Forensics and Process Dump data for the Linux assets.

The target assets must have sufficient space and gbd/gcore installed to collect process dump data.

Required Application Version

Endpoint Detection and Response 3.8.2

To learn more about collecting forensic data, refer to the Request Forensic Data section in the EDR online help.

Automate Certificate Management with Packaged Certificates

Cloud Agent for Linux Intel now supports configuring automatic certificate management with packaged Root certificates. This enhancement automates certificate assignments and improves communication between the host and the Qualys platform by reducing certificate failures.

Cloud Agent host needs certificates for successful communication with the Qualys platform. The following certificates, packaged with Cloud Agent, provide flawless and effective communication:

• QAG Public Certificate: To communicate with the Qualys Platform.
• CASK Certificate: To communicate with the Qualys Content Delivery Network (CDN).
• Global Certificate: To communicate with the Qualys platform if you use the Qualys Gateway Service in patching and cache mode. Global certificate eliminates the need for manual certificate distribution.

When enabled, Cloud Agent merges system-trusted certificates with packaged Root certificates and uses the merged certificate bundle for platform communication. This merged certificate bundle eliminates the need for manual certificate installation and ensures trusted communication with the Qualys platform.

By default, this feature is disabled. To enable this feature, set the parameter AddCertsToStore=1 using Cloud Agent configuration tool (qualys-cloud-agent.sh).

The Root certificate support is available only for Cloud Agents installed on shared Qualys Platforms.

Control SwCA Binary Download

With Cloud Agent for Linux Intel, you can now control the SwCA binary download on your assets. This feature enables you to control the SwCA version used by Cloud Agent and to install it manually based on system availability.

By default, Cloud Agent downloads the latest SwCA binary from the Qualys CDN. To restrict the SwCA binary download, set the parameter DisableSwCAPackageDownload=1 using the Cloud Agent configuration tool (qualys-cloud-agent.sh).

Run the following command to allow or prevent the latest SwCA binary download:

/usr/local/qualys/cloud-agent/bin/qualys-cloud-agent.sh DisableSwcaPackageDownload={0|1}

Behavior Change

There is no behavior change for this release.

Platform Coverage Support

No new platform coverage added in this release.

Issues Addressed

The following important and notable issues are fixed in this release:

Component/Category	Description
Cloud Agent Scans	We fixed an issue where Cloud Agent processes stopped due to the wildcard characters in the configuration name. Now, Cloud Agent supports wildcard characters in configuration names, and Cloud Agent processes are not stopped.
Cloud Agent Remote Logs	The remote log files were getting decompression errors due to LZMA compression. We have now removed LZMA compression to prevent these errors and eliminate the need for third-party tools to decompress remote log files.

Known Issues, Limitations, and Workarounds

There are no known issues and limitations for this release.