Release 3.3.2.0
January 10, 2025
What's New?
|
|
CyberSecurity Asset Management and Global AssetView |
Insights into Software Component Details
Before this release, you could discover the installed open-source software, libraries, and the associated vulnerabilities on your assets using the SwCA scan.
With this release, we introduced a new tab, Components, under the Inventory > Software tab, where you can see the software components collected during the SwCA scan. These details are visible on the Components tab only after the SwCA scan is completed and the CSAM 3.3.2.0 is deployed.
- Upon clicking the View Install List option from the Quick Actions menu of the specific software component, you can see all the details, such as the asset name, operating system, and component installation path. As an example, refer to the following GAV screenshot:
- Upon clicking the count under the Asset Installations column, you can view all assets associated with that component.As an example, refer to the following GAV screenshot:
One of the important enhancements made is increasing the inventory count of software components shown on the Asset Details page from 2K to 20K. This count is shown on the Installed Software tab from the Inventory section and the Software Composition Analysis (SCA) tab from the Security section on the Asset Details page. For more information, refer to the Online Help.
With this release, we also introduced two new APIs for obtaining the component details from the SwCA scan. For more information, refer to the New APIs to Get Insights into Software Component Details section.
Also, learn more about the new QQL search tokens that you can use from CSAM and GAV.
Enhanced User Interface (UI 4.0) of the Qualys Cloud Platform
Introducing the new and improved UI with the following key upgrades:
- The vertical navigation bar on the left side of your screen offers quick access to modules, keeping your workspace organized. You can hover over the bar to view or hide icon labels as needed.
- The secondary navigation bar has been redesigned for a more intuitive user experience. Sub-menu options are displayed in a horizontal bar at the top, allowing easy access to features. Active tabs are highlighted in bold, making your current selection clear.
- The Tertiary options appear under the secondary bar, with fourth-level items shown as tabs or capsules. The selected item is highlighted for easier navigation.
Refreshed DashboardRefreshed Dashboard
We have improved our dashboards for better accessibility, color scheme, typography, and data interpretation. These updates ensure easy information consumption for all users.
Standardized UI Elements for Seamless NavigationStandardized UI Elements for Seamless Navigation
We have standardized the look and feel across all modules to enhance usability and ease of transition, reducing the learning curve for a more intuitive experience. These updates ensure that transitioning between modules is seamless and intuitive.
See it in Action
Watch this video to explore the new UI and discover the key enhancements made to improve your experience!
Enhanced UI Rollout Starting January 2025
The enhanced user interface will be rolled out in phases starting January 2025. You will receive in-platform notifications and email updates to guide you through the transition. Compatibility is seamless, with no additional setup required.
- You can update your preference by switching between the Old and New UI using the toggle option until Day 90.
- If no preference is set, the platform will default to the New UI after the 30-day transition period.
Learn More
- Explore the full details of these updates! Check out our blog for insights.
- For more information on the rollout phase, refer to the Frequently Asked Questions.
Platform Name Change Update
We are renaming the Qualys Cloud Platform to the Qualys Enterprise TruRisk Platform. This change highlights Qualys' commitment to empowering CISOs, cybersecurity professionals, and risk stakeholders to effectively measure and mitigate the impact of cyber risk on their organizations.
The Qualys Enterprise TruRisk Platform is the only cybersecurity and risk management solution that enables you to measure, communicate, and eliminate cyber risk across the extended enterprise with precise remediation and mitigation actions.
This update does not affect the platform’s functionality or features. Starting in January 2025, the name change will be implemented in phases across all product interfaces.
For more information, check out this blog.
|
|
CyberSecurity Asset Management |
Enhancement to the EASM Vulnerability Details Report
Before this release, you could not exclude the IG-type QID details from the EASM Vulnerability Details report. With this release, a new checkbox, Information, is added under the Exclude Vulnerabilities section on the Report Source page of the EASM Vulnerability Details report.
This checkbox is selected by default; in this case, the IG-type QID details are excluded from the report when created. If you clear the checkbox, the IG-type details are included in the report.
If you edit the existing EASM Vulnerability Details report, the Excluded Vulnerabilities checkbox is cleared. You can select the checkbox to exclude the IG-type details from the report.
New APIs to Get Insights into Software Component Details
With this release, we have introduced the following two new APIs. For more information, refer to the CSAM 3.3.2.0 API Release Notes.
- List of Software Components for All Assets: Use this API to get the list of all components discovered from the SwCA scan.
- List Software Components for Specific Asset ID: Use this API to get the list of software components for a specific assetId discovered from the SwCA scan.
New QQL Tokens
Refer to the following table to learn more about new QQL tokens for CSAM and GAV:
| Token | Tab | Description |
|
component.name |
Inventory > Software > Components tab Asset Details page > Security Section > Software Composition Analysis (SCA) > Components tab
|
Find the software components for the specified component name. |
|
component.version |
Find the software components for the specified version. |
|
|
component.technology |
Find the software components for the specified technology. |
Issue Addressed
The following reported and notable customer issue is fixed in this release.
| Component/Category | Description |
| CSAM+GAV-Asset Details | We fixed the issue where, for some of the assets, the installed software details were not found on the Asset Details page. |