Network Passive Sensor Release 2.7
October 05, 2026
This release adds tag-based user scoping for sensor access and granular role-based permissions for sensor configuration settings.
New Feature
Restrict Sensor Access with Asset Tags
What's New for You
You can now restrict sub-user access to specific sensors using dynamic asset tags. This ensures that sub-users can access only the sensors relevant to their assigned responsibilities.
As a manager user with all permissions, you can restrict which sensors each sub-user can access by assigning the appropriate asset tags.
You can create the dynamic tags in the Qualys CyberSecurity Asset Management (CSAM) application using the Asset Inventory rule. Use the qualys.passiveSensor.id: token in the tag query to specify one or more sensor IDs.
Examples:
- To provide access to a single sensor, form the query as follows:
qualys.passiveSensor.id:036898451249:5375868:704:1788948036:5375868:704 - To provide access to multiple sensors, form the query using operator (AND/OR):
qualys.passiveSensor.id:036898451249:5375868:704:1788948036:5375868:704 OR 075648451249:1788948036:5375868
After you create the tag, assign it to the required sub-users through the Administration application. As a result, sub-users can then access only the sensors included in the tags assigned to them. For more information on Tag-based User Scope, refer to the NPS Online Help.
When a sub-user with the Create PS Scanner permission creates a sensor, the sensor remains visible to the sub-user after registration is complete. The sub-user can view the assets discovered by the sensor in CSAM once the manager user with all permissions includes the sensor in the sub-user's scope.
Sensor Access for Existing Sub-Users
Existing sub-users cannot view any sensors because sensor access is not automatically configured for them. A manager user with all permissions must create the required asset tags and assign them to the appropriate sub-users to provide access to the sensors.
New Feature
Prevent Unauthorized Changes to Configuration Settings
What's New For You
You can now control sub-user access to specific NPS configuration settings in the NPS UI. This helps prevent unauthorized changes to sensor configurations.
As a manager user with all permissions, you can grant sub-users create, update, and delete permissions to configure sensors. These permissions control which configuration actions sub-users can perform. You can manage these permissions through the Administration application.
For more information, refer to NPS Online Help.
The following table lists the new permissions:
| Permission | Description |
|---|---|
| Internal Assets Config Permissions | |
| Create Internal Assets Config | Configure the Internal Assets group. |
| Update Internal Assets Config | Update an already configured Internal Assets group. |
| Delete Internal Assets Config | Delete an already configured Internal assets group. |
| External Assets Config Permissions | |
| Create External Assets Config | Configure a Monitor External Assets group. |
| Update External Assets Config | Update an already configured Monitor External Assets group. |
| Delete External Assets Config | Delete an already configured Monitor External Assets group. |
| Excluded Assets Config Permissions | |
| Create Excluded Assets Config | Configure an Excluded Assets group. |
| Update Excluded Assets Config | Update an already configured Excluded Assets group. |
| Delete Excluded Assets Config | Delete an already configured Excluded Assets group. |
| General Settings Config Permissions | |
| Update General Settings Config | Update the General Settings. |
To create a sensor, you must have both the Create PS Scanner and Create Internal Assets Config permissions, as sensor creation requires you to specify an internal asset group.
Impact on Existing Sub-users
Existing sub-users do not automatically receive the permissions listed above. Review the existing roles in the Administration application and grant the appropriate configuration permissions so that sub-users retain the access they need for their responsibilities.