Upgrade to TotalAppSec
Upgrading to TotalAppSec from WAS is simple and seamless. It does not require data or configuration migration, application reconfiguration, user re-onboarding, or downtime. All WAS vulnerabilities, reports, applications, schedules, and users are automatically carried over.
Scanner Requirements
TotalAppSec API Security is supported only with next-generation 64-bit scanners. If you are using a legacy 32-bit scanner, we recommend upgrading to the 64-bit scanner.
Upgrade to the 64-bit scanner involves a platform change; you must reinstall your internal scanners during the upgrade.
Before upgrading, verify your scanner type and version.
External Scanners
External scanners hosted in the Qualys Cloud are already running on the 64-bit WAS engine. No action required.
Internal (On-Prem) Scanners
If you are using a 32-bit WAS Engine, you must upgrade to the 64-bit Engine. To check the scanner version, see Verify the Scanner Version.
Physical Scanners
If you are using physical scanners of model QGSA-5120-A1 or QGSA-4120-A1, you must upgrade your scanner.
Verify Scanner Version
Use one of the following ways to verify the scanner version:
- In Vulnerability Management, navigate to Scans > Appliance> Info, and check the scanner image name. If your Software Image Version is earlier than 3.10 (for example, SCAN.i386-3.9.26-1), you must upgrade your scanner.
- In Web Application Scanning, navigate to Scans. Select a scan, and click View from Quick Actions to check the WAS Engine version. If the version is 10.x, it is a 64-bit scanner. If it is 9.x or earlier, it is a 32-bit scanner.
Upgrade Physical Scanner
Contact your Technical Account Manager (TAM) for assistance with the physical scanner upgrade.
Virtual Scanners — VMs or Containers
If you are using virtual scanners, verify the version of your scanner image. To check the scanner image version, navigate to VMDR > Scans > Appliances and click Info from the Quick Actions menu.
Upgrade Virtual Scanner
To upgrade the virtual scanner:
- Navigate to Vulnerability Management > Scans > Appliances.
- Click New > select an appropriate option based on your scanner setup.
For detailed information, see Scanner Appliances.
What to Expect After the Upgrade
Post upgrade to TotalAppSec, you can see the user interface change as described
- Application Name Change
The application name will change from WAS to TotalAppSec (TAS) in the top-left corner.
- New APIs tab in Applications
The new APIs tab under Applications is available to onboard APIs for compliance testing. For details, see Add New APIs.
- New Discovery tab
The new Discovery tab is available to configure sources to auto-discover and display the inventory of discovered web applications and APIs. For details, see Discover Potential Web Applications and APIs.
- Compliance scan details
When you perform a compliance scan for the APIs specifying Swagger files, the API Compliance tab in the application details displays violations to the OpenAPI specifications.
- Custom Signature
Custom signature functionality is provided to create or modify signatures to automate custom penetration tests. For details, see Custom Signature.
Ready to upgrade to TotalAppSec? Contact your Technical Account Manager.