Notice of Migration of Qualys Amsterdam EU2 SCP to Oracle Cloud Infrastructure (OCI)
Last updated on: July 6, 2022
This advance notification is to inform customers having subscriptions on the EU2 platform, that we will be migrating this platform to a public cloud infrastructure hosted in Oracle Cloud Infrastructure (OCI). This migration is scheduled to take place on June 2nd, 2022 and will require a downtime of 15 hours. See the Frequently Asked Questions (FAQs) below to learn more about the benefits of this move and what is needed from customers to ensure a smooth transition.
Update – July 6, 2022
Before migrating from the On-Prem to the public cloud (OCI), Qualys was using 154.59.121.0/24 & 64.39.106.0/24 public subnets. We will continue to use both these subnets until further Notice.
Customers are advised not to remove the “154.59.121.0/24” and 64.39.106.0/24 subnet from their whitelist as we are hosting our Qualys external URL’s including “qagpublic.qg2.apps.qualys.eu” and External Scanners on these networks.
Please whitelist both the Ip addresses: 154.59.121.74 and 64.39.106.233 for “qagpublic.qg2.apps.qualys.eu”
Frequently Asked Questions
What is the scope of the migration activity?
The Qualys EU2 Shared Cloud Platform (SCP) currently hosted in Equinix Datacenter in Amsterdam will be migrated to a public cloud infrastructure hosted in Oracle Cloud Infrastructure (OCI) in Amsterdam. All customer data will be moved along with all applications and services from the existing SCP environment in the datacenter to the new environment in OCI.
When is this activity scheduled?
This migration is scheduled to take place on Thursday, June 2nd, 2022, from 5 P.M Central European Time (CET). It will take place during the scheduled Quarterly Maintenance Downtime for EU2 Platform.
Will there be any impact for customers during this migration?
Qualys services will be unavailable during this migration as we migrate customer data along with the applications and services to OCI. Scans using an external scanner might get interrupted until the platform is back online. Qualys recommends pausing scans and then resuming them once the platform is online. The IP address used for communication between Cloud Agents / Scanner Appliances / Qualys Gateway Appliance and our Shared Cloud Platform (qagpublic.qg2.apps.qualys.eu) is also changing from 154.59.121.74 to 64.39.106.233 and should be added to the allow list if allow listing was done using IP rather than DNS.
Which customers are affected by this migration?
Customers with subscriptions on the EU2 platform will be affected. Please refer to https://www.qualys.com/platform-identification/ for help identifying your platform.
Which compliance frameworks does OCI adhere to?
Please refer to the following Oracle Cloud Compliance site for details on the global and regional attestations for Oracle cloud services: https://www.oracle.com/cloud/compliance/
What testing has been done?
We have done extensive testing of this process and we have previously migrated our AE01 (Dubai) pod from a datacenter to OCI last year.
What steps does the customer need to take?
As part of the migration, the IP addresses associated with the FQDN(URLs) listed below will change. Customers having subscriptions on the EU2 Platform will need to whitelist the new IP addresses to ensure connectivity with the Qualys Cloud Platform. (If Qualys public IP range, i.e., 64.39.96.0/20 or 64.39.106.0/24, is already whitelisted, then NO change is required by the customer ) The new IP addresses are within the existing Security Operations Center( SOC) netblock.
| URL | Existing IP Address | New IP Address to Whitelist |
|---|---|---|
| qualysguard.qg2.apps.qualys.eu | 154.59.121.68 | 64.39.106.225 |
| qualysapi.qg2.apps.qualys.eu | 154.59.121.69 | 64.39.106.226 |
| scanservice1.qg2.apps.qualys.eu | 154.59.121.73 | 64.39.106.229 |
| distribution.qg2.apps.qualys.eu | 154.59.121.71 | 64.39.106.230 |
| monitoring.qg2.apps.qualys.eu | 154.59.121.72 | 64.39.106.232 |
| qagpublic.qg2.apps.qualys.eu | 154.59.121.74 | 64.39.106.233 |
| certs.qg2.apps.qualys.eu | 154.59.121.81 | 64.39.106.234 |
| nac-le-service.qg2.apps.qualys.eu | 154.59.121.84 | 64.39.106.240 |