Qualys Embraces CDN for Agent Binary Distribution

We are happy to announce an update regarding the delivery of Qualys Cloud Agent binary downloads for auto-upgrade. Starting with Windows Agent 5.7 and Linux Agent 6.4, scheduled for release ~August 2024, we will be leveraging a Content Delivery Network (CDN) for seamless and efficient distribution of agent binaries.

Action Required:

To ensure a smooth transition and optimal performance, we kindly request all our customers to take the following action:

Allow Cloud Agents to Access Qualys CDN URLs: Please ensure that your network configurations allow access to the following CDN URL based on the platform you use:

Americas:

• US1: https://cask.qg1.apps.qualys.com
• US2: https://cask.qg2.apps.qualys.com
• US3: https://cask.qg3.apps.qualys.com
• US4: https://cask.qg4.apps.qualys.com
• CA1: https://cask.qg1.apps.qualys.ca

EMEA:

• EU1: https://cask.qg1.apps.qualys.eu
• EU2: https://cask.qg2.apps.qualys.eu
• EU3: https://cask.qg3.apps.qualys.it
• UK1: https://cask.qg1.apps.qualys.co.uk
• AE1: https://cask.qg1.apps.qualys.ae
• KSA: https://cask.qg1.apps.qualysksa.com

APAC:

• IN1: https://cask.qg1.apps.qualys.in
• AU1: https://cask.qg1.apps.qualys.com.au

For a comprehensive list of the Cloud Agent URLs and to identify your platform, please refer to Qualys Platform Identification.

How to Check If Your Asset Has Access to the Qualys CDN?

Customers can reach `/stub_status` by running the following command returning an HTTP 200:

Windows PowerShell

iwr https://cask.qg3.apps.qualys.com/stub_status

Linux Terminal

curl -v https://cask.qg3.apps.qualys.com/stub_status

What Happens If the Agent Cannot Reach Qualys’ CDN?

The default behavior for these newer agents will be to first reach out to the CDN for binary downloads. In the event of any communication failure with the CDN, agents will automatically fall back to fetching binaries from the Qualys Cloud Platform, ensuring uninterrupted service delivery.

What Happens to Previous Agent Versions?

Please note that previous agent versions will continue receiving binaries from the Qualys Cloud Platform, ensuring compatibility and stability across all platform types.

Benefits of CDN Integration:

1. Enhanced Performance: The use of a CDN ensures faster download speeds by serving content from servers geographically closer to end users, reducing latency and improving overall user experience.
2. Global Reach: With servers strategically distributed around the globe, our CDN enables rapid and reliable delivery of agent binaries to users irrespective of their location, ensuring consistent performance worldwide.
3. Improved Reliability: By leveraging redundant infrastructure and optimized routing algorithms, our CDN enhances the reliability of binary downloads, mitigating the impact of network congestion or server downtime.
4. Scalability: The scalable nature of CDN infrastructure allows us to efficiently handle surges in demand, ensuring that our services remain accessible and responsive even during periods of high traffic.
5. Cost Efficiency: We can optimize resource utilization and reduce operational costs by offloading these tasks to the CDN.

Fun Fact: New agent capabilities such as Cloud Agent Passive Sensor (CAPS) and Software Composition Analysis (SwCA) already leverage the CDN to download their respective resources.

The Help > About page will also reflect the additional CDN URL in the next release.

We are confident that this enhancement will further elevate the performance and reliability of our services, providing you with a superior experience for managing your security posture.

Should you have any questions or require further assistance, please do not hesitate to contact our dedicated support team.