Configure Offline Scanner

To configure the Offline Scanner, perform the following steps:

  1. Launch the hypervisor (For example, Workstation, ESXi, or VirtualBox).
  2. Locate the offline scanner image file (starts with qVSA-O) on your local system.
  3. Import or deploy the OVA template using the hypervisor’s user interface.

    The following table outlines the configuration details for deploying the offline scanner appliance across hypervisors.

    Step

    VMware Workstation

    VMware ESXi

    Oracle VirtualBox

    Import Method

    Go to File > Open and select the .ova image.

    Use vSphere Client > Deploy OVA Template.

    Go to File > Import Appliance wizard.

    Deployment Location

    Local machine

    ESXi host or vCenter server

    Local machine

    Network Setup

    Network Adapter 1: NAT (default) – Enables the scanner to connect to the Qualys Enterprise TruRisk™ Platform.

    Network Adapter 2: Host-only (default) – Used for scanner management and configuration via user interface.

    Network Adapter 1: Must allow connection to the Qualys Enterprise TruRisk™ Platform.

    Network Adapter 2: Used for scanner management and configuration via the user interface.

    Network Adapter 1: NAT (default) – Enables the scanner to connect to the Qualys Enterprise TruRisk™ Platform.

    Network Adapter 2: Host-only (default) – Used for scanner management and configuration via the user interface.

    Storage Format

    Option to choose disk format (for example, thin or thick provisioning).

    Storage and provisioning method selected during deployment.

    Automatically handled by VirtualBox.

    User Interface Access

    Access the scanner user interface from a browser on the host machine.

    Requires a VM with a browser on the same subnet as Network Adapter 2 to access the user interface.

    Access the scanner user interface from a browser on the host machine.

  4. Customize the virtual machine settings (such as network configuration, storage options, or other settings) as needed.
  5. Power on the virtual machine.

By default, your Offline Scanner is configured with two network interfaces: Network Adapter 1 for scanning and Network Adapter 2 for Offline Scanner configuration and management purposes.

Additionally, the scanner is configured with 2 vCPUs and 4 GB of RAM by default. The maximum supported configuration for Qualys Offline Scanner is 8 vCPUs and 16 GB of RAM.

Add Proxy Server Details

If you have a proxy, you must give details about your proxy server.

Perform the following steps to add proxy server details:

  1. Copy and paste the Web UI URL into a new browser window.
    console4.png
  2. Click the Click here link present on the screen to configure proxy settings.

    scanner_ui_proxy.png

  3. Enter the IP address (required) and port number (8080 is implied but can be changed).
    If the proxy server requires authentication, enter the proxy username and password.

After saving your settings, return to the Scanner Console to personalize your scanner.

Personalize the Scanner

Perform the following steps in the Scanner Console to personalize the scanner:

  1. Press the Right arrow to select Personalize this scanner.
  2. Enter the personalization code.
    console1.png

    If you do not have your personalization code, perform the following steps:

    1. Log in to Qualys Enterprise TruRisk™ Platform.
    2. Navigate to the VM/VMDR app.
    3. Then, go to Scans > Appliances. There is a separate column for personalization code.

Now, your scanner connects to the Qualys Enterprise TruRisk™ Platform to complete the activation and download the latest software.

console2.png

Troubleshoot Activation Progress

If you face any issues in the activation progress, perform the following steps to troubleshoot it:

  1. Check your scanner network settings.
    For more information about the Offline Scanner VM’s network configuration, refer to the Network Configuration section.
  2. Check network access to scanners.
  3. Log in to Qualys Enterprise TruRisk™ Platform and go to Help > About to see a list of URLs (at the SOC) that your scanner must be able to contact on port 443.
    console00003.png

If successful, the scanner's name and IP address are displayed. 

That’s it! You have added your offline scanner to your account.

Note the Web UI URL. You need this in a few minutes to log in to the Scanner’s Web UI.