Notice of Qualys US4 Platform Migration 

Vinod Tiwari
Vinod Tiwari
- 4 min read

Table of Contents

This advance notification is to inform customers with subscriptions on the US4 platform that we will be migrating our infrastructure from the existing environment to a more enhanced, optimized environment. This migration aims to improve overall platform performance, reliability, and resource utilization to deliver a better user experience.

This migration is scheduled to take place on July 10, 2026, from 5:00 PM PST and will require 15 hours of downtime.

Please refer to the Frequently Asked Questions (FAQs) below for more information about this migration and what customers need to do to ensure a smooth transition.

Frequently Asked Questions (FAQs)

1. What is the scope of migration activity?

The Qualys US4 Shared Cloud Platform (SCP) will undergo a migration to a more enhanced and optimized environment. All customer data, along with all applications and services, will be moved from the existing infrastructure to a new, optimized environment.

 2. When is this activity scheduled?

This migration will take place on July 10, 2026, from 5:00 PM PST. It will take place during the scheduled Quarterly Maintenance Downtime for the US4 Platform.

3. Which customers are affected by this migration?

Customers with subscriptions on the US4 platform will be affected. Please refer to https://www.qualys.com/platform-identification/ for help identifying your platform.

4. What testing has been done?

Our operations team has completed extensive testing to ensure this migration will go smoothly. We have also migrated our other shared cloud platforms successfully in the US and other regions in a similar manner over the last year.

5. Will there be any impact on customers during this migration?

Qualys services will be unavailable during this migration as we migrate customer data along with applications and services. Scans using an external scanner might get interrupted until the platform is back online. Qualys recommends pausing scans and resuming them once the platform is back online.

The IP address used for communication between the Cloud Agents/Qualys Gateway Appliance/Qualys sensor and the Shared Cloud Platform will change.

6. What steps does the customer need to take?

As part of this migration, the IP addresses associated with the FQDNs (URLs) will change. Customers are requested to add Qualys’ own IP subnets 64.39.110.0/24, 64.39.105.0/24, and 2602:FDAA:C7::/48 to the allowlist in both directions for incoming & outgoing traffic, instead of individual IPs, to prevent customers from having to allow individual IPs.

Customers are requested NOT TO REMOVE the existing IP addresses until further notice.


Additional IP address blocks can also be found in the Security Operations Center (SOC) netblock.

URL/ServiceCurrent IP AddressAdditional IPs to whitelistServicesTraffic Direction
qualysapi.qg4.apps.qualys.com139.87.105.17164.39.110.65HTTP, HTTPSOutgoing
qgadmin.qg4.apps.qualys.com139.87.105.19664.39.110.66HTTP, HTTPSOutgoing
portal-bo.qg4.apps.qualys.com139.87.107.12264.39.110.67HTTP, HTTPSOutgoing
distribution.qg4.apps.qualys.com139.87.105.25464.39.110.68HTTP, HTTPSOutgoing
scanservice1.qg4.apps.qualys.com139.87.105.16564.39.110.69HTTP, HTTPSOutgoing
gateway.qg4.apps.qualys.com139.87.106.2164.39.110.70HTTP, HTTPSOutgoing
download.qg4.apps.qualys.com139.87.107.12164.39.110.71HTTP, HTTPSOutgoing
monitoring.qg4.apps.qualys.com139.87.107.20364.39.110.72HTTP, HTTPSOutgoing
debug.qg4.apps.qualys.com139.87.107.10864.39.110.73HTTP, HTTPSOutgoing
kube.qg4.apps.qualys.com139.87.112.25564.39.110.74HTTP, HTTPSOutgoing
nac-le-service.qg4.apps.qualys.com  139.87.107.148  64.39.110.75HTTP, HTTPSOutgoing
rns.qg4.apps.qualys.com139.87.104.2064.39.110.76HTTP, HTTPSOutgoing
camspm.qg4.apps.qualys.com139.87.105.9164.39.110.77HTTP, HTTPSOutgoing
camsrepo.qg4.apps.qualys.com139.87.105.12564.39.110.78HTTP, HTTPSOutgoing
camspublic.qg4.apps.qualys.com139.87.105.6064.39.110.79HTTP, HTTPSOutgoing
semca.qg4.apps.qualys.com139.87.105.18164.39.110.80HTTP, HTTPSOutgoing
wasoob-dns.us4.qualysperiscope.com139.87.107.8564.39.110.81DNSOutgoing
qagpublic.qg4.apps.qualys.com139.87.107.25364.39.105.62 64.39.105.63HTTP, HTTPSOutgoing
cmsqagpublic.qg4.apps.qualys.com139.87.105.8864.39.105.64HTTP, HTTPSOutgoing
qgadmin.qg4.apps.qualys.com2602:fdaa:10:e:9e4f:4427:9777:9cdc2602:fdaa:c7::4027:6e42HTTP, HTTPSOutgoing
scanservice1.qg4.apps.qualys.com2602:fdaa:10:e:a195:f1b8:3eb7:3d9f2602:fdaa:c7::4027:6e45HTTP, HTTPSOutgoing
distribution.qg4.apps.qualys.com2602:fdaa:10:e:be76:482f:a587:13972602:fdaa:c7::4027:6e44HTTP, HTTPSOutgoing
monitoring.qg4.apps.qualys.com2602:fdaa:10:e:1255:aa17:efe9:2b312602:fdaa:c7::4027:6e48HTTP, HTTPSOutgoing
qualysapi.qg4.apps.qualys.com2602:fdaa:10:e:6bac:b4db:3380:aac92602:fdaa:c7::4027:6e41HTTP, HTTPSOutgoing
qagpublic.qg4.apps.qualys.com NA2602:fdaa:c4::4027:693e
2602:fdaa:c4::4027:693f		HTTP, HTTPSOutgoing
Cloud Connectors

139.87.112.151
139.87.112.158
 		64.39.110.112/30
64.39.110.116/30
64.39.110.120/30

HTTPSIncoming

Share your Comments

Comments

Your email address will not be published. Required fields are marked *