Anti-Virus and HIPS Exclusion / Whitelisting on Mac

Have Anti-Virus or HIPS software installed? It's required that the following files, directories, and processes are excluded or whitelisted in all security software installed on the system in order to prevent conflicts with the Cloud Agent.

Directory list used by Cloud Agent installation

/etc/qualys

/Applications/QualysCloudAgent.app

/Applications/QualysCloudAgent.app/Contents

/Applications/QualysCloudAgent.app/Contents/MacOS

/Applications/QualysCloudAgent.app/Contents/Library

/Applications/QualysCloudAgent.app/Contents/Docs

/Applications/QualysCloudAgent.app/Contents/Info.plist

/Applications/QualysCloudAgent.app/Contents/Resources

/Applications/QualysCloudAgent.app/Contents/_CodeSignature

/Library/Application Support/QualysCloudAgent/Data

/Library/Application Support/QualysCloudAgent/Config

Note: On Mac 1.5 and 1.6 agents, the Data and Config directories are located at:

/Applications/QualysCloudAgent.app/Contents/Data

/Applications/QualysCloudAgent.app/Contents/Config

Agent daemon process “qualys-cloud-agent”

The agent runs as daemon process “qualys-cloud-agent”.

The agent runs various read-only commands during the scanning process. These are the same commands run by a scan using a scanner appliance. Learn more

Some transient files are created during agent execution

/Library/Application Support/QualysCloudAgent/Data/*.db

- these are various sqlite DB files necessary for Qualys Cloud Agent functionality.

/Applications/QualysCloudAgent.app/Contents/MacOS/*.sh

- these are various utility scripts used by Qualys Cloud Agent

/Library/Application Support/QualysCloudAgent/Data/manifests/*.db

- this contains manifests used during agent based scans

Note: On Mac 1.5 and 1.6 agents, the Data directory is located at:
/Applications/QualysCloudAgent.app/Contents/Data