Proxy Support

This topic explains the Proxy configuration supported by the QCS Sensor.

Your proxy server must provide access to the Qualys Enterprise TruRisk™ Platform (or the Qualys Private Enterprise TruRisk™ Platform) over HTTPS port 443.

Installation Method	http (for registry connection)	https (for registry connection)	qualys_http_proxy
Binary (installSensor.sh)	Not supported	Not supported	Proxy=<<IP/IPv6 address or FQDN>:<Port#>> ProxyCertFile=<Proxy certificate file path if proxy uses any certificate>
DockerHub	-e http_proxy=<IP/ address OR FQDN>:<Port#> Note: Set this as an environment variable to sensor. Example, sudo docker run -d --restart on-failure \ -v /var/run/docker.sock:/var/run/docker.sock:ro \ -v /etc/qualys:/usr/local/qualys/qpa/data/conf/agent-data \ -v /var/lib/containerd:/var/lib/containerd:ro \ -v /var/lib/docker:/var/lib/docker:ro \ -v /usr/local/qualys/sensor/data:/usr/local/qualys/qpa/data \ -e ACTIVATIONID= <Activation ID> \ -e CUSTOMERID= <Customer ID> \ -e qualys_https_proxy=<IP/ address or FQDN>:<Port#> \ -e https_proxy=<IP/ address or FQDN>:<Port#> \ -e http_proxy=<IP/ address or FQDN>:<Port#> \ -e POD_URL=https://cmsqagpublic.qg1.apps.qualys.in/ContainerSensor \ --net=host \ --name qualys-container-sensor qualys/qcs-sensor:latest \ --perform-sca-scan	-e https_proxy=<IP/ address or FQDN>:<Port#> Note: Set this as environment variable to sensor Example, sudo docker run -d --restart on-failure \ -v /var/run/docker.sock:/var/run/docker.sock:ro \ -v /etc/qualys:/usr/local/qualys/qpa/data/conf/agent-data \ -v /var/lib/containerd:/var/lib/containerd:ro \ -v /var/lib/docker:/var/lib/docker:ro \ -v /usr/local/qualys/sensor/data:/usr/local/qualys/qpa/data \ -e ACTIVATIONID= <Activation ID> \ -e CUSTOMERID= <Customer ID> \ -e qualys_https_proxy=<IP/ address or FQDN>:<Port#> \ -e https_proxy=<IP/ address or FQDN>:<Port#> \ -e http_proxy=<IP/ address or FQDN>:<Port#> \ -e POD_URL=https://cmsqagpublic.qg1.apps.qualys.in/ContainerSensor \ --net=host \ --name qualys-container-sensor qualys/qcs-sensor:latest \ --perform-sca-scan \	-e qualys_https_proxy=<IP/ address or FQDN>:<Port#> Note: Set this as an environment variable to sensor Example, sudo docker run -d --restart on-failure \ -v /var/run/docker.sock:/var/run/docker.sock:ro \ -v /etc/qualys:/usr/local/qualys/qpa/data/conf/agent-data \ -v /var/lib/containerd:/var/lib/containerd:ro \ -v /var/lib/docker:/var/lib/docker:ro \ -v /usr/local/qualys/sensor/data:/usr/local/qualys/qpa/data \ -e ACTIVATIONID=<Activation ID> \ -e CUSTOMERID=<Customer ID> \ -e qualys_https_proxy=<IP/ address or FQDN>:<Port#> -e POD_URL=https://cmsqagpublic.qg1.apps.qualys.in/ContainerSensor \ --net=host \ --name qualys-container-sensor qualys/qcs-sensor:latest \ --perform-sca-scan
K8s - helm	Not supported	Not supported	global.proxy.value=<Url of proxy server> Note: Format: "http://<proxy FQDN or Ip address>:<port>"
K8s - Yaml	- name: http_proxy value: <proxy FQDN or Ip address>:<port#>	- name: https_proxy value: <proxy FQDN or Ip address>:<port#>	name: qualys_https_proxy value: <proxy FQDN or Ip address>:<port#> Note: 'name', and 'value' are already present in the Sensor Deployment YAML files, uncomment it to provide proxy