This release of the Qualys Cloud Platform version 2.38 includes updates and new features for AssetView, Web Application Firewall, and Web Application Scanning, highlights as follows.
AssetView
Azure Instance State search token and Dynamic Tag Support - A new search token ('azure.vm.state') is added to index the last state of Azure instances. Values can be: pending, running, shutting_down, terminated, stopping, stopped, deallocated, and deallocating. This token is supported in the Dynamic Tag Rule creation.
Web Application Firewall
New Events Tab - We have completely revamped the Event Logs screen in order to accelerate the review of security violations. It has never been so easy to monitor your traffic and deliver responses against targeted attacks.
New Magento Security Template - We are happy to introduce a brand new Application Security Templates dedicated to Magento's version 1.x and 2.x of the famous CMS. These templates cover known critical vulnerabilities, including those fixed in version 2.3.1. With it you can safely install a WAF without worry about false-positives.
Web Application Scanning
Cancel Individual Scans in a Multi-Scan - We have added a new option allowing you to cancel individual scans that are running under a multi-scan. Cancelling the entire multi-scan continues to be supported.
Alert Icon for Multi-Scans - The 'alert' icon next to a completed multi-scan is now displayed in the case where one or more of the individual scans ended with 'Service Errors Detected' status.
Test Authentication Option - The 'Test Authentication' option is now available to all customers by default. Previously, it was enabled only upon request. This option can be found under the quick actions menu for a web application.
Filter for Activated/Deactivated Schedules - In the Malware Detection module, we have added a new filter to display only Activated schedules or Deactivated schedules.
API updates are also included with this release:
Qualys Cloud Platform 2.38 API Notification 1
The specific day for deployment will differ depending on the platform. Release Dates will be published on the Qualys Status page when available.
For more details about the above features - please review the release notes. Release notes will be posted as soon as they are available on the Qualys Suite Release Notes page.
Attachments
Original document
Permalink
Disclaimer
Qualys Inc. published this content on 10 April 2019 and is solely responsible for the information contained herein. Distributed by Public, unedited and unaltered, on 10 April 2019 18:07:06 UTC
Qualys, Inc. is a provider of a cloud-based platform delivering information technology (IT), security and compliance solutions. The Companyâs integrated suite of IT, security and compliance solutions delivered on Qualys' Enterprise TruRisk Platform enables its customers to identify and manage their IT and operational technology (OT) assets, collect, and analyze large amounts of IT security data, recommend, and implement remediation actions and verify the implementation of such actions. It provides its solutions through a software-as-a-service model, primarily with renewable annual subscriptions. Its cloud platform offers an integrated suite of solutions that automates the lifecycle of asset discovery and management, security and compliance assessments, and remediation for an organizationâs IT infrastructure and assets, whether such infrastructure and assets reside inside the organization, on their network perimeter, on endpoints or in the cloud.