Deploy Qualys Virtual Scanner Appliance

Perform the following steps to deploy Qualys Virtual Scanner Appliances: 

Create Qualys Virtual Scanner

Perform the following steps to create Qualys Virtual Scanner:

  1. Unzip the downloaded file qVSA<version>.vhdx.zip to obtain the virtual hard disk image file.
  2. Login to the Hyper-V server. Go to Manager > Hyper-V Manager and add a new Virtual Machine.
     
    • The minimum supported instance size for a Qualys scanner deployed with qVSA image version 4.1 or higher is at least 2 GB of RAM and 2 CPU cores.
    • Configure memory and CPU for your Virtual Scanner Appliance. Ensure that the CPU cores:RAM ratio is maintained at 1:2 or 1:3 for optimal performance. We recommend at least 4CPU cores and 8 GB of RAM for the Qualys Scanner VM.

Assign Memory tab.

Avoid excessive use of Dynamic Memory and be cautious when assigning maximum values to prevent memory contention.

Know more about RAM usage in scanners.Know more about RAM usage in scanners.

  • Minimum RAM: This is the minimum amount of memory required for your virtual machine to function properly.
  • Maximum RAM: This field sets the maximum RAM for your virtual machine. The Hyper-V host grants more memory if needed up to the amount set in the field.
  • Memory Buffer: This setting controls the percentage of physical memory allocated to the VM as a buffer. Physical memory is reserved for VM's memory needs in a buffer. The default value for this setting is 20%, but it is possible to make adjustments.

Perform the following steps to add a new virtual machine:

  1. Open Hyper-V Manager Console. 
  2. Open  Hyper-V Manager and create a new Virtual Machine.
    hyper v manager.
  3. A new virtual machine Wizard is displayed.
    a new virtual machine wizard.
  4. Provide the following information in the wizard to complete the setup.
    1. Specify Name and Location.
    2. Specify Generation: select Generation 1 and click Next.
    3. Go to Assign Memory tab, allocate at least 4GB of memory, and click Next.
  5. In the Configure Networking tab, select Connection as Default Switch and click Next.

    Viewing Configure Networking tab.

  6. From the Connect Virtual Hard Disk tab, select Use an existing virtual hard disk, select Qualys qVSA .vhdx image, and click Next.
    view  Connect Virtual Hard Disk.

  7. Review the Summary page, and click Finish.
    Summary

    The Qualys Scanner virtual machine has been created but has not been started yet. For detailed steps, refer to the Start Virtual Machine section

    Provide a name for the scanner.

    1. Select Generation 1 for this VM.
    2. Configure memory and CPU for your Virtual Scanner Appliance.

      For optimal performance, ensure that the CPU cores: RAM ratio is maintained at 1:2 or 1:3. We recommend at least 4 CPU cores and 8 GB of RAM for the Qualys Scanner VM.

    3. Configure the networking as appropriate so the scanner's network adapter can communicate over a virtual network.
    4. For the virtual hard disk configuration, select Use an existing virtual hard disk and provide the location of the Hard disk image file obtained from the qvsa<version>.vhdx image.
    5. Click Next and then Finish.
    6. Start the Virtual Machine. 

Network Setting and Proxy Configuration

By default, the LAN IP address is configured with DHCP enabled. Select Set up network (LAN) to configure a static IP address.

Perform the following steps to set a static IP address instead of DHCP:

  1. Using the Virtual Scanner Console, go to the main menu.
  2. Select Set up network (LAN).
  3. Click Right arrow to highlight Enable static IP config on LAN.
  4. Click Right arrow.
  5. Enter settings.

    scanner console set up lan

The scanner supports proxy configuration for the following:

  • IP-based and FQDN proxy host.
  • With or without authentication.
  • Authentication modes: Basic and NTLM.


It is recommended that the proxy server has an assigned static IP address and allows transparent SSL tunneling. Proxy-level termination (as implemented in SSL bridging for example) is not supported. The scanner does not support proxy servers in networking environments where the proxy server IP address is dynamically assigned. SOCKS proxies are not supported.

Configuring Proxy Server on your Scanner (Optional)

Using the Virtual Scanner Console, go to the main menu.

  1. Select Enable Proxy.
  2. Click the Right arrow to highlight Enable Proxy.
  3. Click the Right arrow.
  4. Enter settings.

    scanner console enable proxy

Personalize Qualys Virtual Scanner

Perform the following steps to personalize the scanner:

  1. Using the Virtual Scanner Console, go to the main menu.
  2. Select Personalize this scanner.
  3. Click the Right arrow to highlight Personalize this scanner.
  4. Click the Right arrow.
  5. Enter a 14-digit Personalization code.

    scanner console personalize

The activation process starts after entering the Personalization code, and the service reports the progress. Activation can take up to 10 minutes to complete.

scanner console personalize progress bar

Check the Scanner Status in Qualys

To confirm that the scanner is ready to use, check the virtual scanner status in Qualys UI.

Perform the following steps to check virtual scanner status:

  1. Go to Scans > Appliances and find your scanner in the list.
  2. Check that the scanner's status is Connected.

The Qualys user interface can take several minutes to update after adding a new appliance. Refresh your browser periodically to ensure you see the most up-to-date details.

Appliances list in UI

Next Step

Enable WAN for Split Network Configuration