Cloud Agent for MacOS Intel Release 6.4
July 17, 2026
With this release of Cloud Agent for macOS Intel, we provide new features, strategic enhancements, and important bug fixes. These updates empower your teams to prioritize risks and secure your digital environment effectively.
Assess Cloud Agent Health Status
MacOS Intel Cloud Agent now supports Cloud Agent Health Check Tool. This tool provides a summarized agent health report in JSON and text format through the Command-Line Interface (CLI). The health check report helps you verify Cloud Agent package authorization and gives clear visibility into agent health.
Run the following command to launch the Cloud Agent Health Check tool.
/Applications/QualysCloudAgent.app/Contents/MacOS/qualys-healthcheck
In the Cloud Agent health check command runPatch parameter is optional. Use this parameter to run the patch management checks for the Cloud Agent.
Agent Health Status Evaluation
The tool assesses the overall health status of the Cloud Agent based on installation status, communication health, and application functionality. The applications assessed for health status are Vulnerability Management (VM), Policy Compliance (PC), Security Configuration Assessment (SCA), Patch Management (PM), User Defined Control (UDC), and Software Composition Analysis (SwCA).
The following table illustrates Cloud Agent health status:
| Health Status | Description |
|---|---|
| Good | Agent Health is good. |
| Bad |
|
| Poor | Some, but not all the applications of the Qualys Agent are functioning correctly. |
| Not Installed | Qualys Agent is not installed on the asset. |
| Not Provisioned | Qualys Agent is installed but not provisioned. |
| Tool Error | The Agent Health Status tool encountered a critical error while retrieving Agent Health. |
To learn more about Cloud Agent Health Check Tool, refer macOS Cloud Agent Installation Guide.
Reattempt Failed Patches
You can now configure the system to reattempt failed patch installations. This feature lets you specify the exact number of retry attempts and the time interval between them to ensure critical updates deploy successfully. The agent will not reattempt patches that fail due to download failures, network issues, hash mismatches, digest mismatches, or misconfigured URLs.
| Required Application Version | Patch Management 4.0 |
Platform Coverage Support
There are no new platform coverage added for this release.
Behavior Changes
macOS Intel Cloud Agent 6.4 and later do not support non-root users configured with UseSudo=0. When a previous Cloud Agent is upgraded to 6.4 or later, its configuration is automatically upgraded to UseSudo=1.
For more information on user configuration, refer to macOS Cloud Agent Install Guide.
Issues Addressed
The following important and notable customer issues are fixed in this release.
| Component/Category | Description |
|---|---|
| Remote Log Collection | We fixed an issue where the macOS Cloud Agent was unable to generate remote logs from Cloud Agent user interface. Now, the MacOS Cloud Agent successfully completes remote log requests. |
| Cloud Agent Reporting | We fixed an issue where the macOS Cloud Agent reported an incorrect MAC address for the hosts. Now, Cloud Agent correctly reports the host asset addresses. |
| Cloud Agent Operation | We fixed an issue where macOS Cloud Agent became unresponsive after the post-update restart when the Endpoint Protection Platform (EPP) is enabled for the asset. Now, macOS Cloud Agent works smoothly after the upgrades for EPP-enabled assets. |
| Cloud Agent Upgrade | Fixed an issue where Cloud Agent showed QualysCloudAgent is damaged and can't be opened error after upgrades due to Apple Gatekeeper Policy enforcement. Cloud Agent now automatically manages required permissions to successfully complete Cloud Agent upgrades. |