Qualys Cloud Platform 10.2.0 New Features

The upcoming release of the Qualys Cloud Platform (VM, PC), version 10.2.0, includes several new features and enhancements in Qualys Cloud Platform and Qualys Policy Compliance. This release will also add support for new technologies in Qualys Policy Compliance for OCA.

10.2.0 is scheduled to go live across the shared platforms in the third week of June, 2020.

Feature Highlights

Qualys Cloud Platform

New TARGET_TYPE field for Unix auth records

Previously, Unix authentication did not allow users to select target type in the auth record. With this release, users will be able to select the new TARGET_TYPE field for Unix auth records to define the type of target for a Unix auth record.

Restructured Authentication Records

This release will add logical groups for authentication records to better organize the existing records into structured categories. The categories introduced are:

• Operating SystemsNetwork and Security
• Application Records
• Databases
• VMWare
• System Record Templates (for Oracle System Record Template)

Enhanced agent tracking and data merging

The existing agent tracking and data merging feature will be enhanced to ensure better workflow and user experience.

Four options are available for users to choose for merging results from agent scans and IP scans. Please note that this merging will apply only when you have authenticated scans with agentless tracking identifier enabled. 

• Do not merge data 
  Select this option if you do NOT want to merge scan results for cloud agents or IP scans. Each agent and scanned IP interface of an asset would result in a separate asset record.   

• Merge data by scan method 
  All scanned interfaces of an asset will be merged into a single asset record (tracked by IP). Results of network scans and agent data will NOT be merged; you will get a separate asset record (tracked by agent UUID) from the cloud agent scan results. 

• Merge data for a single unified view 
  You’ll get a single asset record with results from cloud agent scans and results from all scanned IP interfaces merged for a single unified view of the asset. Assets with a cloud agent will be tracked by agent UUID and assets without a cloud agent will be tracked by IP.  

• Enable smart merging 
  We’ll automatically detect whether a cloud agent is installed and merge results into a single unified view of the asset only when an agent is found.  Assets with a cloud agent will be tracked by agent UUID and all the interfaces of an asset without a cloud agent will be tracked by IP. 

Qualys Policy Compliance (PC)

New technology support

With this release, Qualys PC will add support for the following new technologies:

• Windows 2008/2012/2016 Certification Authority
• IBM Sterling Connect:Direct 4.x (Unix)

New technology support for OCA

With this release, OCA module will add support for the following technologies to evaluate off-line/air-gapped devices in your environment:

• Riverbed SteelHead Interceptor 7.x
• IBM z/OS Security Server RACF 2.x