End of Support (EOS) Notice: WAS Version 9.X and earlier
Overview
Qualys is announcing the End of Support (EOS) for WAS versions 9 and earlier, effective as detailed below. This transition is part of our ongoing commitment to providing secure, high-performance web application scanning capabilities and ensuring our customers maintain the highest level of security protection.
What is changing?
- WAS Version 9.x and all earlier versions (32 bit architecture) will reach End of Support
- All users must upgrade to WAS Version 10.x (64 bit architecture) or later
- After the EOS date, legacy versions will no longer receive security updates or technical support
Are you impacted by this change?
If you are scanning internal applications and using WAS version 9.x or earlier you are affected.
External scanners hosted in the Qualys cloud are already on 64-bit WAS engine and do not require action.
Important Dates and Timeline
| Date | Milestone |
|---|---|
| September 8, 2025 | EOS announcement published |
| July 31, 2026 | End of Support for Virtual Scanner Appliances |
| July 31, 2026 | End of Support for Physical Scanner Appliances |
How to Check If Your Scanner/Appliances Need Upgrade
- Go to VMDR > Scans > Appliances
- Click on Search. A popup will open.
- In the popup, filter by Virtual or Physical Scanner Type
For Virtual Scanners on VMs or Containers
- Click on Info for each appliance
- Go to the Version tab
- Look at the Image Version field
- If Image Version contains “i386“: You need to upgrade your scanner
- If Image Version contains “x86_64“: You are already on the latest WAS Engine
For Scanners on Physical Appliences
- Click on Info for each appliance
- Go to the General Information tab
- Look at the Model field and match with the table below
| Model | Architecture | Serial Number Range | Needs Upgrade? |
|---|---|---|---|
| QGSA-21XX | 32-bit kernel | 3001-17970 | Yes |
| QGSA-3120-A1 | 32-bit kernel | 18000-28162 | Yes |
| QGSA-4120-A1 | 32-bit kernel | 29000-38531 | Yes |
| QGSA-5120-A1 | 32-bit kernel | 39000-41998 | Yes |
| QGSA-6120-A1 | 64-bit kernel | 42000+ | No |
| QGSA-6120-B1 | 64-bit kernel | 58500+ | No |
Next Steps
Assess Your Current Environment
- Identify all scanner appliances and their current WAS versions
- Determine which scanners require upgrade attention
- Plan your upgrade timeline to meet the EOS deadlines
Choose Your Upgrade Path
- Virtual Scanners (recommended for most organizations)
- Physical Scanners
- Cloud Deployment
Not sure which option will work best for you?
Set up a consultation with your Technical Account Manager or Qualys Customer Support.
Begin Migration Process
- Deploy new scanner appliances with WAS 10.x
- Configure and test new scanning infrastructure
- Validate upgraded scanning capabilities before decommissioning legacy systems
Why we are making this change?
The primary reason for this transition is security. Legacy 32 bit versions of WAS no longer receive security updates from the base system packages, which could potentially create vulnerabilities in your web application scanning infrastructure. By migrating to the 64 bit architecture in Version 10.x, we ensure that your scanning environment remains protected with the latest security patches and updates.
This enhancement will bring us up to date with the latest web application scanning technologies and detection capabilities. It will improve compatibility with modern security frameworks and support compliance requirements and ongoing feature enhancements. Additionally, by expanding vulnerability coverage, it will contribute to the long-term sustainability and support of the platform.
Additional Resources
Frequently Asked Questions
Q: Will my scan configurations be preserved during the upgrade?
Yes, when you upgrade, all settings are automatically transferred to the new scanner upon next scan.
Q: Is there any cost associated with virtual scanner appliances?
Virtual scanner appliances are included in your existing Qualys subscription. Cloud marketplace deployments may incur infrastructure costs from your cloud provider. Physical appliances may incur costs. Contact your TAM for clarification.
Q: Does this WAS Engine EOS affect all physical scanner appliances, or only those used for WAS/TAS?
This EOS specifically impacts customers using WAS/TAS functionality for internal application scanning. If you have 4120/5120 physical appliances but only use VMDR or other modules (not WAS/TAS), you are not affected by this WAS Engine upgrade requirement. However, all virtual scanner appliances with WAS Engine version below 10.x require upgrade regardless of module usage.
Questions or need assistance?
Our team is ready to help you navigate this important upgrade. Contact your Technical Account Manager or Qualys Customer Support team for personalized assistance with your WAS upgrade.
This upgrade ensures your web application scanning infrastructure remains secure, performant, and ready for future security challenges.