QualysGuard WAS 2.3 Target Release Date: April 18, 2012

Blog Post created by WillB on Apr 5, 2012

A new release of QualysGuard® Web Application Scanning 2.3 is targeted for April 18, 2012 in production on the EU Platform, featuring Selenium crawl script support and an enhanced dashboard.  This release is completely transparent to users and will require no scheduled downtime. The release will occur between 20:00 GMT (12 PM PST) and 02:00 AM GMT next day (6 PM PST). 


QualysGuard WAS 2.3 includes significant enhancements that expand WAS coverage, improve management visibility and simplify configuration tasks.


Selenium Crawl Script Support: WAS 2.3 expands its support for Selenium to include support for Selenium crawl scripts.  The Selenium plugin (http://seleniumhq.org/projects/ide/) enables a user to record his browser actions and save them as a script that can then be replayed at a later time.  Selinium crawl scripts can be recorded by users and uploaded to WAS to gain crawl access to application areas that require complex human capabilities such as selecting user input combinations that require business knowledge. 




Improved Dashboard: WAS 2.3 includes a new Dashboard with an improved look and feel to help you understand the overall security status of your web applications and to provide an interactive way to take actions within your account. These include:

  • New header section showing the total number of current vulnerabilities.
  • New Scan button allows you to launch a discovery or vulnerability scan
  • New Add Web Application option allows you to add a new web application to your account.
  • New Scan Type icons indicate discovery and vulnerability scans.




Improved Web Application Settings: WAS 2.3 provides users with scan settings that simplify scan configuration.  The improvements include changes to make the scope and URL settings easier to understand so users can configure their scans more precisely, leading to improved scan results and reducing the amount of time it takes to setup a web application for scanning.





Scheduling: WAS 2.3 now supports the ability to activate and deactivate WAS scheduled scans. This provides users with a way to suspend scheduled scanning for periods such as for maintenance or during holiday season blackout periods.  WAS 2.3 also gives users the ability to download one or multiple schedules to iCalendar format (ICS) and import them to any calendaring system that supports the iCalendar standard. Calendaring systems that support the iCalendar standard include but are not limited to: Microsoft Office Outlook, Lotus Notes,Google Calendar, and Apple iCal.






Taken together, the new features of WAS 2.3 make it easier to use and also expand the scanning coverage for many applications.


To receive more information on QualysGuard WAS 2.3, please visit the Qualys WAS community or contact your Technical Account Manager.