Update Patch Blocking Rule by ID

Use this API to update a patch-blocking rule by its rule ID. This feature is supported on both Windows and Linux platforms.

PUT/pm/v1/blocking/rules/{id}

Input ParametersInput Parameters

Parameter	Sub Parameter	Mandatory/ Optional	Data Type	Description
ruleName		Mandatory	String	Specify the name for the rule. Note: The rule name helps you identify the specific rule because of which the patches get skipped.
ruleReason		Mandatory	String	Specify a reason for which the blocking rule is created.
criteria	type	Mandatory	Integer	Specify the type as 1. Note: Only the patch QQL type 1 is supported.
criteria	value	Mandatory	String	Specify the QQL token query.
Platform		Mandatory	String	Specify the platform. Supported values are Windows and Linux.
Scope		Mandatory	String	Specify the scope. Supported values are GLOBAL and TAG_BASED. Note: The global scope is applicable for all assets. The tag-based scope applies only to assets included in the tag.
includeTagIds		Optional	String	Specify the tag ID for the tag to be included in the rule. Note: This parameter is mandatory if you select the TAG_BASED scope.

Sample - Update a Patch Blocking Rule by IDSample - Update a Patch Blocking Rule by ID

API Request

curl -X 'PUT' \
  '<qualys_base_url>/pm/v1/blocking/rules/c003a69f-17d1-4a85-9ef7-2ef9f87aff2d' \
  -H 'accept: application/json' \
  -H 'Authorization: Bearer <JWT_Token>
  -H 'Content-Type: application/json' \
  -d '{

API Body

  "ruleName": "Windows Blocking Rule",
  "ruleReason": "Blocking few patches",
  "criteria": {
    "type": 1,
    "value": "patch.publishedDate:[2026-05-01 ... now-5d] and patch.appFamily:`Visual C++`"
  },
  "platform": "Windows",
  "includeTagIds": ["6ff0b36a-644a-4413-9d87-c2e35381db07"],
  "scope": "TAG_BASED"
}'

API Response

Not documented for this release; the response follows the same schema shown in the corresponding Get/Create sample above.

Last updated: September, 2026