Qualys Network Passive Sensor Physical Appliance

With Qualys Network Passive Sensor (NPS), you can automatically detect and profile devices connected to your network, eliminating blind spots across your IT environment. NPS monitors network activity without any active probing of devices to detect active assets in your network.

Network Passive Sensor is available in five models. 
 
 

  1. 1Gbps (QPS-01G-0100-A0) 
  2. 4Gbps (QPS-04G- 0402-B0)
  3. 10Gbps (QPS-10G-0404-B1/QPS-10G-0404-B3)
  4. 100Mbps (QPS-01M-0500-D1)
  5. 100Mbps (QPS-01M-0600-B2)

Check Package Accessories

The starter kit package contains components depending on the appliance variant you choose. If any components are missing or damaged, contact Qualys Support.

The following are the Network Passive Sensor appliance models, along with packing lists:

1Gbps (QPS-01G-0100-A0)

Check the following accessories in your packing list:

  • AC Power Cord
  • CAT6 Cable
  • Rack Screws (quantity 4) - 10-32 x 3/4"
  • USB-to-RS232 Converter Cable

For the 1Gbps (QPS-01G-0100-A0) appliance, use only the USB-RS232 (F) converter cable shipped with the appliance

4Gbps (QPS-04G- 0402-B0)

Check the following accessories in your packing list:

  • Rack Mount Slide Rail Set
  • 2 x Power Cords
  • Accessory box contains:
    • 1x USB-RJ45 console cable
    • 1x DB9-RJ45 console cable
    • 1 x rack mount screw set (6 screws + 6 nuts)
    • 1 x ear bracket screw set (2 brackets + 6 screws)
    • SSD screw set (4 screws)
    • 1x slide rail screw pack
    • 1x SATA cable and SATA power cable set
    • 1x crossover LAN cable (red)
    • 1x SFP+ transceiver

10Gbps (QPS-10G-0404-B1/QPS-10G-0404-B3)

Check the following accessories in your packing list:

  • Rack Mount Slide Rail Set
  • 2 x Power Cords
  • Accessory box contains:
    • 1x USB-RJ45 console cable
    • 1x DB9-RJ45 console cable
    • 1 x rack mount screw set (6 screws + 6 nuts)
    • 1 x ear bracket screw set (2 brackets + 6 screws)
    • SSD screw set (4 screws)
    • 1x slide rail screw pack
    • 1x SATA cable and SATA power cable set
    • 1x crossover LAN cable (red)
    • 1x straight LAN cable (gray)
    • 1x SFP+ transceiver

100Mbps (QPS-01M-0500-D1)

Check the following accessories in your packing list:

  • QPS-01M-0500-D1(100Mbps Hardware Appliance)
  • USB-RJ45 Console Cable
  • Power Adapter
  • Power Cord
  • Rack Mount Kit
  • Wall Mount Kit
  • Mounting Screws

The following SFPs are supported for PS appliance Models: QPS-04G- 0402-B0, QPS-10G-0404-B1, and QPS-10G-0404-B3.

  • Finisar FTLX1475D3BCL (Single Mode Long range (10km)
  • Finisar FTLX8574D3BCL (Multimode Short range)

100Mbps (QPS-01M-0600-B2)

Check the following accessories in your packing list:

  • QPS-01M-0600-B2 (100Mbps Hardware Appliance)
  • USB-DB9(F) Console Cable
  • 1 x Ear Bracket
  • 4 x Ear Bracket Screws
  • 1 x Power Terminal Block Plug

The following are supported SFP's for PS appliance Model QPS-01M-0600-B2.

Brand

MPN

Speed

Type

Operation/Temperature

Type

FINISAR

FTLF1318P3BTL

1Gb Longwave

Single mode(10km)

-40°C to 85°C

SFP

FORMERICA

TSD-S2CA1-F11

1Gb Longwave

Single mode(10km)

-40°C to 85°C

SFP

FINISAR

FTLF8519P3BNL

1Gb Shortwave

Multi mode

-40°C to 85°C

SFP

FORMERICA

TSD-S2CH1-C11

1Gb Shortwave

Multi mode

-40°C to 85°C

SFP

FINISAR

FCLF8522P2BTL

1Gb Optic to RJ-45

N/A

-40°C to 85°C

SFP to RJ-45

FORMERICA

TCP-S2BC1-A1M

1Gb Optic to RJ-45

N/A

-40°C to 85°C

SFP to RJ-45

SFPs are not hot swappable for PS appliance Model QPS-01M-0600-B2.

Network Prerequisites

Make sure that your network follows the prerequisites mentioned in the following table:

Parameter Requirement

Bandwidth

Minimum recommended bandwidth connection of 1 Megabits per second (Mbps) to the Qualys Cloud Platform for a network containing around 10,000 assets.

Appliance Access

The Network Passive Sensor must be able to reach certain infrastructure located on the Qualys Cloud Platform where your Qualys account is located. The local network must be configured to allow outbound HTTPS and WebSocket (port 443) access to the Internet, so that the Network Passive Sensor can communicate with the Qualys Cloud Platform.

 Log into your account and go to Help > About to see the Qualys Cloud Platform URLs.

DHCP or Static IP

By default the Network Passive Sensor is preconfigured with DHCP. If configured with a static IP address, be sure you have the IP address, netmask, default gateway and primary DNS.

Proxy Support

The Network Passive Sensor includes Proxy support with or without authentication. For example, proxy-level termination (as implemented in SSL bridging) is not supported. SOCKS proxies are not supported.

Before you Begin - Mirror the Traffic

You need to feed traffic to the sensor by mirroring it (using a physical tap or mirror port). Connect the mirrored port to the sensor's sniffing interface. This step is required to see discovered assets.

Network Passive Sensor supports mirror traffic using SPAN, RSPAN, and ERSPAN methods. For more information, refer to the Deployment Guide.

Get Started

Setting up a Network Passive Sensor appliance within your network is easy. 

Perform the following steps to get started with Qualys NPS Physical Appliance:

  1. Configuring Appliance and Registering to Qualys Cloud Platform.
  2. Configure Assets.
  3. Take an Network Passive Sensor Tour.
  4. Navigate Appliance UI.
  5. Configure Static IP Address.
  6. Enable Proxy Configuration.

Related Topic

Best Practices