Cloud Agent for MacOS Intel Release 6.2

August 05, 2025

With this release of Cloud Agent for MacOS Intel, we are releasing the following new features and enhancements.

Enhanced Support for Qualys EDR

With this release of the Cloud Agent for MacOS Intel, we have enhanced the Qualys Endpoint Detection and Remediation support with the following features.

Remediation: With MacOS Intel agent 6.2, you can quarantine, un-quarantine, or delete a file. You can also kill a process while performing the remediation action. The enhanced remediation support ensures that the critical applications and processes are running effectively on your assets.

Capture File Write Events: We have added support to capture the write, update, rename, and delete events with the EDR module. This enhancement helps you track the unintentional and unauthorized modifications to files and applications on your assets.

Display Cloud Agent Correct Version in EDR Module: We now have added the support to display the Correct Cloud Agent version for MacOS assets in the EDR Module when the agents are upgraded from a previous version to the new available version.

Required application version

Endpoint Detection and Response 3.7.0

Cloud Agent Log Compression

The Cloud Agent for MacOS now supports compressing log files to optimize disk space utilization. You can set the LogCompression parameter using the Cloud Agent configuration tool to enable or disable log file compression. Log compression considerably reduces the size of log files and reduces the disk usage on the host asset.

When enabled, Cloud Agent compresses the log file when it is rolled over and keeps the five most recent archived zip files, each with 10 MB of log data. When Cloud Agent accumulates more logs, the oldest scan logs are deleted, and space for new logs is created.

Log compression can compress the logs generated by the following applications:

Scan logs
Endpoint Protection Platform (EPP)
Endpoint Detection and Response (EDR)
Patch Management (PM)

HMAC Authentication for MacOS Cloud Agents

With this release, we have added the Hash-based Message Authentication Code (HMAC) to the URLs used for communicating with the Cloud Agent Server. The HMAC headers prevent tampering and spoofing and ensure the integrity and authenticity of data exchanged between the MacOS Cloud Agent and Cloud Agent server.

The HMAC Authentication has limited availability. Contact Qualys Support or your technical account manager to enable it.

HMAC is calculated using the HMAC algorithm based on the HTTP method, secret key, current timestamp, and URL. On the server side, HMAC is recalculated and compared with the HMAC received in the communication URL to authenticate the request.

Machine time should be synchronized with an appropriate time-stamp to avoid failure in HMAC authentication.

Support IPv6 Assets for Qualys EPP

We have enhanced the Anti-malware Protection option (EPP) for MacOS Intel Cloud Agent to support IPv6 assets. You can now use IPv6 assets in EPP while configuring exclusions and prohibitions for the applications and web access control.

The improvement greatly increases the scope of EPP and is in line with the widely accepted compliance standard, such as PCI DSS 4.0.1.

Enhancements for Countdown Window

We have updated the patch deployment deferral, countdown, progress, and success windows to display the list of applications for which the patches are being installed. This enhancement helps you view the affected applications with the upcoming patch job and make an informed decision on deferral instances.

Check the following table to see the samples of old and updated countdown windows.

Countdown Window Name	Old Window	Updated Window
Final Countdown Window
Patch Installation In-progress
Patch Installation Successful