Release Notes

The following are the enhancements and improvements in the latest releases:

Release 2.11

July 09, 2026

Support for CSDM 5 Application Mapping

The CMDB Sync App now supports CSDM 5, the latest application-mapping framework from ServiceNow. A new configuration option, CSDM 5, enables application synchronization using an updated data model. The application identifies business applications through multi-level relationship traversal across CMDB entities, starting from Infrastructure CI to Application (CMDB CI APPL), then progressing to Application Service, and finally to the Business Application. This approach allows accurate resolution even when no direct relationship exists between the asset and the business application. The mapping follows a defined parent-child hierarchy, ensuring consistent traversal and reliable synchronization aligned with the CSDM 5 model.

For more details about syncing business information and asset metadata to Qualys, see ServiceNow to Qualys Scheduling.

Release 2.10

June 18, 2026

OIDC Authentication Support

This release introduces OpenID Connect (OIDC) authentication to the CMDB Sync app, enhancing overall security posture while maintaining compatibility with existing data collection workflows.

You can now select between Basic Authentication and OIDC within the setup screen and securely provide Client ID and Client Secret credentials. The Qualys platform also supports granular permission selection for specific modules when generating a Client ID, ensuring improved access control and a smooth transition to OIDC.

For more details, see Add API Source.

Database Instance Support

This release introduces support for synchronizing database instances into CMDB Sync integration. To use this feature, enable the Database Instance Sync property in the application settings. Once enabled, database instance records are automatically created during scheduled synchronization.

Database instances are created as configuration items and are associated with their respective software instances and underlying hardware, ensuring accurate configuration item hierarchy and relationship mapping.

Each database instance includes key attributes such as instance name, install path, home path, port, technology, and last-seen information, improving visibility and configuration tracking in the CMDB.

This feature currently supports DB2 and Informix database technologies.

For more details, see Update Properties.

Release 2.9.0

November 21, 2025

Added New Property for Logging 

In this release, we have added logging configuration to the properties page. Depending on the selected logging level, logs will be displayed. You can select the following log levels from the options:

• None
• All
• Info
• Error
• Warning
• Debug

By default, the 'All' log type is enabled. For more details, see Logging.

Added Support for SamPro Sync

A new property has been introduced in the Properties page to enable SamPro Sync for Software catalogs. When this option is enabled, after asset approval, the software installation records are stored in the Software Installation table. When it is disabled, after asset approval, the software installation records are stored in the CMDB Software Instance table. This property setting gives you the flexibility to manage software installed data. 

For more details, see Enable SamPro Sync for Software Catalogs.

Dynamic Tagging with Scripts

Dynamic tagging has been enhanced to support scripting. You can now use scripts to create dynamic tags for attributes. 

For more details, see Dynamic Asset Tagging Configuration.

Separate Sync Queues for Metadata

The synchronization process has been improved by separating asset metadata and business application metadata into two distinct sync queues. Previously, both were handled together, which made troubleshooting difficult. 

A new sync type, 'Upload Business App', has been introduced to support the upload of business application metadata from ServiceNow to Qualys. This enhancement provides more visibility and control when syncing business application data.

For more details, see Sync Queue.

JSON Parsing Replaced XML for Asset Sync

Updated the Asset data sync from Qualys to ServiceNow schedules to use JSON instead of XML for parsing, making the process faster and easier to manage.

Issues Addressed

Category/Component	Issue
Logging Activities	The issue has been fixed where invalid IP addresses were not giving a validation error message.
API Call Errors	The issue has been fixed where API response codes 999 and 1905 were marked as an error, causing an issue in ServiceNow to Qualys sync.
CMDB Assets	The issue has been fixed where duplicate records were being created in the catalog relation table.
Asset Tagging	The issue has been fixed where tag names with special characters were causing API call failure.

Version 2.8.0

Release Date: April 18, 2025

The following are the improvements we have made in Qualys CMDB Sync App 2.8.0:

In this release,

• Added validation for executing the ADD IP API call to ensure that at least a VM or PC is selected for the ServiceNow to Qualys sync. If unmanaged assets exist in ServiceNow and neither a VM nor a PC is selected, the scheduled API call to sync ServiceNow with Qualys does not execute. This validation helps prevent the empty response. For such unexecuted API calls, the event is logged with the validation reason in the application logs for better traceability.

• Added three new flags for IRE Updates on the Qualys CMDB Sync Properties page. Using these flags, you can decide whether to change the hierarchy of the assets while updating or switching assets.

  The following are the newly added flags:

  • IRE - Update without Downgrade
  • IRE - Update Without Upgrade
  • IRE - Update without Switch
  For more details, refer to Update Properties.
• Added two new fields, Organization Name and Qualys Unique Asset ID, on the Qualys Assets page. Additionally, on this page, the five new tabs are added to access the detailed asset information.
  • Sensor Information
  • Agent Information
  • Hardware Taxonomy
  • Last Location
  • Criticality

  

  To view these tabs, navigate to the Approve Qualys Asset table and select the asset.
  For more details, refer to View Asset Details.

• Fixed an issue of duplicate software records in the Software Catalogs table.
• Implemented minor improvements and bug fixes.

Version 2.7.0

Release Date: January 22, 2025

The following are the improvements we have made in Qualys CMDB Sync App 2.7.0:

In this release,

• A new feature for One-Way Sync has been added. Using this feature Qualys CMDB app on the ServiceNow platform can sync the Asset Metadata and Business Information to Qualys without updating the CI records in CMDB.

  For more details on the feature, refer to Enable One-Way-Sync.

• Added transformation for Cloud Asset data to Cloud CMDB-related table. 

  This is applicable only for transformation using IRE.

  For more details, refer to Cloud Data Mappings.

• Enhancements to Software Catalog import flow. Software Catalog imports using Sync Queue and JSON parsing which helps in reducing errors while importing the catalog data.
• Added 'Ci's sync to Qualys' widget on the dashboard. The Ci's Synced to Qualys report lists the number of assets synced from ServiceNow to Qualys.
• Minor improvements and bug fixes.

Version 2.6.1

Release Date: September 02, 2024

The following are the improvements we have made in Qualys CMDB Sync App 2.6.1:

• In this release, an issue is fixed for third-party asset import.
• We have provided an option to decide the CI Operation approval 'Insert' or 'Update' or 'Insert and Update' the CI.
• In the Add IP, it sends 100 IPs in one API request.
• We have added a few improvements to Sync Certificate, such as Certificate API filter, Approve UI action, Auto Approve Certificates, Certificate Transform Map, and so on. For this, it requires a Certificate View and VMDR license.
• The properties page contains the Download Batch Size, Download Processing Batch Size, and Auto Approval.
• Introduced the 'Custom Attributes' feature added for ServiceNow to Qualys schedule.
• Introduced the 'Asset Identification Service' (BETA) feature added for ServiceNow to Qualys schedule.
• Added Sync Queue Types for different API calls.