Adding URLs to Allowlist for Patch Download

This section provides a list of URLs that you must add to the allowlist for the Cloud Agent to successfully download patches on your assets.

These URLs must be allowed access through firewalls or other content-blocking methods to properly retrieve patches from the patch vendors. The Qualys Cloud Agent must have access to these URLs to successfully download patches. If you are using a Qualys Gateway Service (QGS) proxy, ensure that it has access to the URLs as well so that it can download and cache the patches.

To obtain the IP Address for vendor sites you can ping the vendor site or contact the vendor to obtain this information. We are unable to provide a list of IP addresses due to the varied dynamic IP addresses being used by the vendors.

It may be easier to create an exception for an entire domain rather than entering all specific URLs. You can usually do so by entering the exception in this format:

*.domain.com

List of URLs to be added to the allowlist

Refer to the Qualys Patch Management URLs to Allowlist for Patch Download file to learn the URLs you need to add to the allowlist.