Qualys Cloud Agent Passive Sensor Release 1.0

April 17, 2026

We are introducing the following new features and enhancements for this release of Cloud Agent Passive Sensor (CAPS).

IPv6 Asset Detection Support

Qualys CAPS now supports IPv6-based asset detection. This enhancement adds packet-level visibility and processing for IPv6 traffic, enabling more comprehensive asset discovery in network environments. This support improves asset visibility in IPv6-only and dual-stack environments.

How CAPS Leader is Elected

CAPS considers the following rules when selecting CAPS Leader in IPv4-only, IPv6-only, and dual-stack environments.

• When an IPv4 address is available, it is always used for election.
• On dual-stack hosts (IPv4 + IPv6), IPv4 takes precedence over IPv6 for election purposes.
• IPv6 link-local addresses participate in the election only when IPv4 is not present.
• Other IPv6 address types (for example, global unicast or temporary addresses) do not participate in the election process.

Each network interface is evaluated independently. The election address is selected per interface, based on the addresses configured on that interface.

Supported Interface Configurations for CAPS Leader Election

The election mechanism works correctly on dual-interface hosts with the following configurations:

• IPv4-only on both interfaces.
• Dual Stack (IPv4 + IPv6) on both interfaces.
• IPv4-only on one interface and Dual Stack (IPv4 + IPv6) on the other interface.

Behavioral Change

There is no behavior change for this release.

Platform Coverage Support

No new platform coverage support is added in this release.

Issues Addressed

There are no important and notable issues are for this release.

Known Issues, Limitations, and Workarounds

The following are the known issues and workarounds for this release:

• On dual-interface hosts, if either or both interfaces are configured as IPv6-only, the election process fails on the IPv6-only interface. As a result, assets from the associated IPv6 subnet may not be reported.
• The IPv6 asset exclusion may fail if you exclude only one IPv6 address for the asset, as that asset may have multiple valid IPv6 addresses.
  Workaround: To reliably exclude an IPv6 asset, use the asset's MAC address instead of the IPv6 address.