What's New in Scanner Appliances
This section highlights key updates from recent Scanner Appliance releases, keeping you informed about new features, enhancements, and improvements.
Release 4.1.82: OpenShift
With this release, we have introduced support for the OpenShift platform and introduced the following features:
- qVSA 4.1 is qualified on Red Hat OpenShift v.4.19.7.
- qVSA 4.1 image version is based on Oracle Linux 8(x86_64) with UEK kernel-5.15.
- The Scanner console displays the UI on tty1 and the system log on tty8.
- Syslog forwarding is set up to forward all scanner logs, including both scanning-related logs, AUTOUPDATE logs, and all messages from /var/log/messages.
- A Virtual Machine instance with a minimum of 2GB of RAM is required.
- Support for TLSv1.3.
Release 4.1.82: IBM | Oracle
With this release, we have introduced new features for IBM and Oracle Cloud Infrastructure.
- qVSA 4.1 image version is based on Oracle Linux 8(x86_64) with UEK kernel-5.15.
-
The Scanner console displays the UI on tty1 and the system log on tty8.
-
Syslog forwarding is set up to forward all scanner logs, including both scanning-related logs, AUTOUPDATE logs, and all messages from /var/log/messages.
-
A Virtual Machine instance with a minimum of 2GB of RAM is required.
-
Support for TLSv1.3.
Virtual Scanner Appliance 4.1.82: Alibaba | Xenserver | KVM | Proxmox | GCP | Azure| AWS
With this release, we have introduced new features for Alibaba, Xenserver, KVM, Proxmox, GCP :
- qVSA 4.1 image version is based on Oracle Linux 8(x86_64) with UEK kernel-5.15.
- The Scanner console displays the UI on tty1 and the system log on tty8.
- Syslog forwarding is set up to forward all scanner logs, including both scanning-related logs, AUTOUPDATE logs, and all messages from /var/log/messages.
- A Virtual Machine instance with a minimum of 2GB of RAM is required.
- Support for TLSv1.3.
For the GCP Platform, added the following feature:
- Support of Shielded VM capabilities such as Secure Boot, vTPM (for Measured Boot), and Integrity Monitoring.
The following enhancements have been made for the platform on which qVSA 4.1 has already been released.
Azure
-
Support for instance sizes with Accelerated Networking, including D-Series v5, B4-series v2, and others.
-
qVSA 4.1.82+ virtual machines now report Agent Status and Agent Version to Azure.
AWS
The DNS server can be configured using user data for AWS scanners only.
Release 4.1.82: Alibaba | Xenserver | KVM | Proxmox | GCP | Azure | AWS
Containerized Scanner Appliance 1.3.28
With this release, we have introduced the following new features for Containerized Scanner Appliance:
-
Support for Additional Linux Distributions
QCSA now supports CentOS 8 & 9, Oracle Linux 8 & 9, Ubuntu 24.04, Debian 12.5. -
Containerized Scanner Flexibility
You can deploy containerized scanners on Linux hosts with a 64-bit kernel version 3.10 or later, regardless of whether ia32_emulation (support for 32-bit binaries) is enabled or disabled. -
Support for FIPS-enabled Docker/Podman runtime environments.
-
QCSA image is now publicly available on Docker Hub (qualys/qcsa). You can directly pull it via Docker or Podman.
-
Improved Logging & Diagnostics
-
Regular dump of system statistics and metrics for overload troubleshooting.
Virtual Scanner Appliance Terraform Support 1.2
The QVSA Terraform template now includes the following capabilities in its latest release:
-
Creation of Scanner Virtual Machines
-
Seamlessly deploy Scanner Virtual Machines on OCI and VMware platforms.
-
Starting Scanner Virtual Machines
-
Effortlessly initiate Scanner Virtual Machines, bringing them to an operational state.
-
Deletion of scanner resources.
Release qVSA Terraform Support 1.2.0
Offline Scanner Appliance qVSA-O.i386-2.2.3-14
With this release, we have introduced new features for the Offline Scanner Appliance:
- Support for VMware ESXi : The Offline Scanner can now be deployed on VMware ESXi.
- Support for Oracle VirtualBox: The Offline Scanner can now be deployed on Oracle VirtualBox.
- Default Resource Allocation: The Offline Scanner is configured by default with 2 vCPUs and 4 GB of RAM.
Release 2.2.3-14: Offline Scanner
Virtual Scanner Appliance 4.1: Nutanix | OpenStack
With this release, we have introduced new features for Nutanix and OpenStack platforms:
- qVSA 4.1 image version is based on Oracle Linux 8(x86_64) with UEK kernel-5.15.
- The Scanner console displays the UI on tty1 and the system log on tty8.
- The standard qVSA-4.1 OVA image now supports scanner configuration using vApp templates and vApp options.
- Syslog forwarding is set up to forward all scanner logs, including both scanning-related logs, AUTOUPDATE logs, and all messages from /var/log/messages.
- A Virtual Machine instance with a minimum of 2GB of RAM is required.
- Support for TLSv1.3.
Additional Feature for Nutanix
- qVSA-4.1 image is qualified on the Nutanix AHV 7.0.1 platform.
Release 4.1: Nutanix | OpenStack
Virtual Scanner Appliance 4.1: Oracle
With this release, we have introduced new features for Oracle Cloud Infrastructure.
- qVSA 4.1 image version is based on Oracle Linux 8(x86_64) with UEK kernel-5.15.
- Syslog forwarding is set up to forward all scanner logs, including scanning-related logs, AUTOUPDATE logs, and all messages from /var/log/messages.
- Instance type with a minimum of 2GB RAM is required.
- Support for TLSv1.3.
Virtual Scanner Appliance 4.1: VMWare | HyperV
With this release, we have introduced new features for VMware and Hyper-V:
- qVSA 4.1 image version is based on Oracle Linux 8(x86_64) with UEK kernel-5.15.
- The Scanner console displays the UI on tty1 and the system log on tty8.
- The standard qVSA-4.1 OVA image now supports scanner configuration using vApp templates and vApp options.
- Syslog forwarding is set up to forward all scanner logs, including both scanning-related logs, AUTOUPDATE logs, and all messages from /var/log/messages.
- A Virtual Machine instance with a minimum of 2GB of RAM is required.
- Support for TLSv1.3.
Virtual Scanner Appliance 4.1: Azure
With this release, we have introduced the following new features for Azure.
- qVSA 4.1 image version is based on Oracle Linux 8(x86_64) with UEK kernel-5.15.
- Syslog forwarding is set up to forward all scanner logs, including scanning-related logs, AUTOUPDATE logs, and all messages from /var/log/messages.
- Instance type with a minimum of 2GB RAM is required.
- Support for TLSv1.3.
Virtual Scanner Appliance 4.1: AWS
We have introduced new features for Amazon Web Services (AWS).
- qVSA 4.1 image version is based on Oracle Linux 8(x86_64) with UEK kernel-5.15.
- Syslog forwarding is set up to forward all scanner logs, including both scanning-related logs, AUTOUPDATE logs, and all messages from /var/log/messages.
- EC2 instance type with a minimum of 2GB RAM is required.
- Support for TLSv1.3.
Containerized Scanner Appliance 1.2
With this release, we have introduced few features and logging improvements such as a regular dump of systems stats and metrics for better overload troubleshooting.
- Support for operations using Podman in Rootful mode
-
Support for 64-bit-only mode (32-bit emulation disabled on host)
- Support for TLS v1.3
- Upgraded the base image to Oracle Linux 8.
- Requirement for 32-bit emulation on hosts is removed.
-
This version supports binary execution for both 32-bit and 64-bit applications.
-
With ia32_emulation disabled, the containerized scanner operates in 64-bit only mode.
-
The default mode for the container scanner supports 32-bit emulation.
-
Physical Scanner Appliance 3.10.27
With this release, we have introduced the following features for Physical Scanner Appliance:
-
Support the latest Physical Scanner hardware: QGSA-6120-B1(64-bit Physical Scanner Appliance with dual power sockets) along with earlier QGSA-6120-A1 (64-bit Physical Scanner Appliance with one power socket).
-
QGSA-6120-B1 features dual power sockets for redundancy.
Customer data centers require appliances to have redundant power sources. The QGSA-6120-B1 is designed to meet this requirement by including two power sockets.