Deploy Qualys Virtual Scanner Appliance

Perform the following steps to deploy Qualys Virtual Scanner Appliances: 

Create Qualys Virtual Scanner

Perform the following steps to create Qualys Virtual Scanner:

  1. Unzip the downloaded file qVSA-2.X.X-X-vhdx.zip to obtain the virtual hard disk file qVSA-2.X.X-X-disk1.vhdx.
  2. Login to the Hyper-V server. Go to Manager > Hyper-V Manager and Add a new Virtual Machine.

     The number of CPUs to allocated RAM ratio must always be 1:2. For example, 4 CPUS and 8 GB RAM. The maximum recommended size for a Virtual Scanner Appliance instance is 8 CPUs and 16 GB RAM.

    Assign Memory tab,

    Avoid excessive use of Dynamic Memory and be cautious when assigning maximum values to prevent memory contention.

    Know more about RAM usage in scanners.Know more about RAM usage in scanners.

    • Minimum RAM: This is the minimum amount of memory required for your virtual machine to function properly.
    • Maximum RAM: This field sets the maximum RAM for your virtual machine. The Hyper-V host grants more memory if needed up to the amount set in the field.
    • Memory Buffer: This setting controls the percentage of physical memory allocated to the VM as a buffer. Physical memory is reserved for VM's memory needs in a buffer. The default value for this setting is 20%, but it is possible to make adjustments.

Perform the following steps to add a new virtual machine:

  1. Open Hyper-V Manager Console. 
  2. Right-click the Windows11 22H2 Pro and select New > Virtual Machine.  hyper v manager.
  3. A new virtual machine Wizard is displayed.
    a new virtual machine wizard.
  4. Provide the following information in the wizard to complete the setup.
    1. Specify Name and Location.
    2. Specify Generation: select Generation 1 and click Next.
    3. Go to Assign Memory tab, allocate at least 4GB of memory, and click Next.
  5. In the Configure Networking tab, select Connection as Default Switch and click Next.

    Viewing Configure Networking tab.

  6. From the Connect Virtual Hard Disk tab, select Use an existing virtual hard disk, select Qualys qVSA .vhdx image, and click Next.
    view  Connect Virtual Hard Disk.

  7. Review the Summary page, and click Finish.
    Summary

    The Qualys Scanner virtual machine has been created but has not been started yet. For detailed steps, refer to the Start Virtual Machine section

    Provide a name for the scanner.

    1. Select Generation 1 for this VM.
    2. Configure memory and CPU for your Virtual Scanner Appliance. The ratio of CPU cores to allocated RAM must always be 1:2, for example, 4 CPUS and 8 GB RAM. The maximum recommended limit by Qualys is 8 CPU cores and 16 GB RAM.
    3. Configure the networking as appropriate so the scanner's network adapter can communicate over a virtual network.
    4. For the virtual hard disk configuration, select Use an existing virtual hard disk and provide the location of the .vhdx file (obtained from the downloaded .zip file).
    5. Click Next and then Finish.
    6. Start the Virtual Machine. 

Network Setting and Proxy Configuration

By default, the LAN IP address is configured with DHCP enabled. Select Set up network (LAN) to configure a static IP address.

Perform the following steps to set a static IP address instead of DHCP:

  1. Using the Virtual Scanner Console, go to the main menu.
  2. Select Set up network (LAN).
  3. Click Right arrow to highlight Enable static IP config on LAN.
  4. Click Right arrow.
  5. Enter settings.

    scanner console set up lan

The scanner supports proxy configuration for the following:

  • IP-based and FQDN proxy host.
  • With or without authentication.
  • Authentication modes: Basic and NTLM.


It is recommended that the proxy server has an assigned static IP address and allows transparent SSL tunneling. Proxy-level termination (as implemented in SSL bridging for example) is not supported. The scanner does not support proxy servers in networking environments where the proxy server IP address is dynamically assigned. SOCKS proxies are not supported.

Configuring Proxy Server on your Scanner (Optional)

Using the Virtual Scanner Console, go to the main menu.

  1. Select Enable Proxy.
  2. Click the Right arrow to highlight Enable Proxy.
  3. Click the Right arrow.
  4. Enter settings.

    scanner console enable proxy

Personalize Qualys Virtual Scanner

Perform the following steps to personalize the scanner:

  1. Using the Virtual Scanner Console, go to the main menu.
  2. Select Personalize this scanner.
  3. Click the Right arrow to highlight Personalize this scanner.
  4. Click the Right arrow.
  5. Enter a 14-digit Personalization code.

    scanner console personalize

The activation process starts after entering the Personalization code, and the service reports the progress. Activation can take up to 10 minutes to complete.

scanner console personalize progress bar

Check the Scanner Status in Qualys

To confirm that the scanner is ready to use, check the virtual scanner status in Qualys UI.

Perform the following steps to check virtual scanner status:

  1. Go to Scans > Appliances and find your scanner in the list.
  2. Check that the scanner's status is Connected.

The Qualys user interface can take several minutes to update after adding a new appliance. Refresh your browser periodically to ensure you see the most up-to-date details.

Appliances list in UI

Next Step

Enable WAN for Split Network Configuration