Launch Virtual Scanner Appliance in AWS Commercial Marketplace via AWS Portal

AWS customers (US) can launch a virtual machine(VM) from the Qualys Virtual Scanner Appliance image available in AWS Marketplace via the AWS Console. 

Launch an AMI instance in Amazon AWS

Qualys Virtual Scanners can be launched from the AWS marketplace or a custom AMI shared with your AWS account.

You can also launch an AMI instance using the AWS Management Console:

  1. Sign in to the console.
  2. Go to Services > EC2, and enter AMI settings per below.

Deploy the Qualys Virtual Scanner Appliance

To Launch from the AWS Marketplace, follow these steps:

Go to Qualys Virtual Scanner Appliance page at AWS Marketplace and login to your AWS account.

AWS Marketplace: Qualys Virtual Scanner Appliance HVM

vsa-aws-marketplace

To Launch Custom AMI from AWS Console

To launch from a custom AMI that has been shared with your AWS account:

  1. Log in to your AWS console.
  2. Go to Images - AMI – Private Images.
  3. Enter ‘qVSA’ in the search box.
  4. Check all Qualys virtual scanner images shared with your account:

    launchami

  5. Launch the virtual scanner AMI in a region.

  6. Use the wizard to enter AMI settings.
    Qualys  supports the V2(token required) version. In the Advanced Details section, select the Metadata version accordingly.

    In the User data field, you must enter the personalization code obtained from Qualys. In addition, you can configure other optional parameters.

    Configuration Parameters in User Data

    The following table includes the complete list of configurable parameters in user data.

    Parameter

    Description

    Format/Example

    Required

    PERSCODE

    Personalization code obtained from Qualys.

    PERSCODE=12345678901234

    Required

    PROXY_URL

    Proxy server details. Used when the scanner does not have direct connectivity to the Qualys Enterprise TruRisk™ Platform.

    PROXY_URL=username:password@proxyhost:port

    Example: PROXY_URL=jdoe:[email protected]:3128

    Optional

    DNS_SERVERS

    Specify up to two custom DNS servers on the scanner, separated by a comma.

    When configured, these DNS servers will be added at the top of the /etc/resolv.conf file. If the scanner is also configured with a DHCP lease, the DNS servers provided by the DHCP lease will be added below the custom entries.

    DNS_SERVERS=dns1.example.com,dns2.example.com

     Example: DNS_SERVERS=8.8.8.8,8.8.4.4

    Optional

If you use a proxy server, ensure that you configure the Amazon EC2 API Proxy server settings in Qualys UI.
For more information, refer to Define Amazon EC2 API Proxy settings in Qualys UI.

Virtual Appliance Connecting to Qualys Enterprise TruRisk™ Platform

Once launched, Virtual Appliance connects to Qualys Enterprise TruRisk™ Platform. This step registers the Virtual Scanner Appliance with your Qualys account. Also, your appliance downloads all the latest software updates immediately and is ready for scanning.