Qualys Scanner Appliance Versioning

This topic helps to understand the Qualys Scanner Appliance versioning.

Version Components

Scanner Appliance has multiple components that undergo regular updates on their own cycles for updating new scanner functionality, improvements, security fixes, new platform support, and so on.

Scanner appliance versioning can be broken down into the following components:

• Scanning software and signatures (for example, ML, VULNSIGS)
• Scanner communication software (for example, TAGGER, SCAND)
• Operating system software (for example, curl, openssl)
• Hardware generation for physical appliances (for example, Models 5120, 6120)
• Image bootstrap version for virtual appliances (qVSA-X.Y, qCSA-X.Y)

Automatic Updates

The scanners are automatically updated in the following cases:

• All flavors of scanners, virtual or physical, are updated the same way as long as they stay connected to the Qualys Enterprise TruRisk™ Platform. There is no difference in feature support across any form factor on supported versions and models in general. 

  • Exceptions are when a new feature is only available in newer versions of scanners due to OS or kernel incompatibility. 

• Scanning software and signatures are updated automatically on supported appliances.

  • VULNSIGS, ML, WAS, and so on, are updated timely to include new QIDs, new scanning functionalities, new scan target support

• Scanner communication software and operating system are also updated automatically.

  • To address bug fixes, security issues, and feature additions or enhancements.

• Physical appliances with older operating systems may be eligible for in-field upgrades.

Upgrade Policies

We have predefined upgrade policies for available Scanner Appliance flavors.

Physical Appliances

Qualys Physical Scanner appliances come with the following models and serial number ranges:

• Serial Numbers 3001-17970. Model QGSA-21XX: End-of-support, no upgrades. Ref: https://cdn2.qualys.com/docs/qualys-ng-scanner-eos-notice.pdf

• Serial Numbers 18000-28999. Model QGSA-3120: Compatible hardware underwent a complete OS upgrade between 2018 and 2020. 

  • The model is not compatible with the latest 64-bit distro. 

  • Continues to update with 32-bit scanning software (Scanner, Signature, WAS) as long as Scanning components are supported in 32-bit. 

  • Scanner communication software updates are frozen. In maintenance. Only security fixes.

• Supported Models: 

  • QGSA-4120-A1 (Serial Numbers 29000-38999)

  • QGSA-5120-A1 (Serial Numbers 39000+) 

  • QGSA-6120-A1 (Serial Numbers 42000+) 

    • 64-bit kernel

  • QGSA-6120-B1 (Serial Numbers 58500+)

    • 64-bit kernel

    • Dual power supply

• Upgrade process: Contact Qualys Support or Technical Account Manager for scheduling.

Virtual Scanner Appliances

Qualys Virtual Scanner appliances come with the following models and serial number ranges:

• Supported Models:

  • qVSA: As a virtual machine on all Virtualization Hypervisors, Public and Private clouds

  • qCSA: Containers for container runtime environments.

• "qVSA-X.Y" or “qCSA-X.Y” indicates the bootstrap image version, not the scanner software version.

• New images are released for OS bug fixes, security updates, new virtualization or cloud support, and so on.

• Redeployment is required only when the operating system switches to a new generation, and a new feature or scanning capability is only available in the new version.

• Upgrade process: 

  • Redeploy new appliances using the latest available image.

  • Redeployment is not always necessary. For more details, refer to Know When Scanner Replacement is Needed.

    When adding a new virtual appliance, it is advisable to always use the latest available appliance image to reduce the chance of problems during bootstrapping (personalization or activation).

  • You can replace the scanner using the ‘Replacement’ feature from Qualys Enterprise TruRisk™ Platform. Refer to the API document: Replace Scanner Appliance.

How to Identify Your Appliance

Follow the steps below to identify the appliances deployed in your account.

From the Qualys App

Perform the following steps to identify your appliance from the Qualys app:

1. Log in to your Qualys account and go to VM/VMDR.
2. Go to Scans > Appliances.
   The Personalization Code column shows the serial number for each physical appliance and a personalization code for each virtual appliance.

From the Appliance Sticker

Physical appliances have a sticker with the model and serial number on the bottom. Check out the sample sticker on the right.