Deployment Recommendations for Scanners

When deploying a scanner, Qualys suggests the following recommendations.

Virtual Machine Size for Hosting the Scanner

The recommended minimum instance configuration for the Scanner VM is 4 CPU cores and 8 GB of RAM. In the event of scan delays, failures, or performance issues, it is advisable to increase the instance size. Ensure that the CPU: RAM ratio is maintained at 1:2 or 1:3 for optimal performance.

The instance size should be scaled up based on the frequency of scanning and the number of Azure Virtual machines being scanned.

The minimum supported instance size for a Qualys scanner using qVSA image version 4.1 or later requires at least 2 GB of RAM.

Instance Snapshots/Cloning Not Allowed

Using a snapshot or clone of a virtual scanner instance to create a new instance is strictly prohibited. The new instance does not function as a scanner, and all configuration settings and platform registration information are lost. This could also lead to scan failures and errors for the original scanner.

Moving/Exporting Instance Not Allowed

Moving or exporting a registered scanner instance from a virtualization platform (HyperV, VMware, XenServer) in any file format to the Microsoft Azure cloud platform is strictly prohibited. This breaks scanner functionality, and the scanner permanently loses all of its settings.