If we have a product that support both Internet Protocols, IPv4 and IPv6, can we expect different Qualy's scan results on IPv4 network versus IPv6 network?
It depends on a few things. Is the check a remote-only check? If it is an authenticated check then assuming authentication is successful then no. Is the check a network stack like issue such as predictable TCP ISNs? The possibly as the two stacks are different. Are the two stacks on the same or different interfaces and is there a service running on both? If we only detect on one interface then that will be different.
Finally, of course, we need to scan both addresses.
I am seeing this some times,
Mostly with OCSP Must Staple: "OCSP response not stapled"
I know OCSP is working but nginx is sometimes slow to start up that part so it works on v4 but not v6 as v6 is scanned first, after a rescan it works on both.
Retrieving data ...