Deploy Scanner Instance using Proxmox VE Web Interface

To deploy the Scanner instances, follow these steps:

1. Go to the Proxmox VE web interface and click Create VM.
2. Name your Qualys scanner VM.
   If no VM ID is provided, Proxmox VE automatically assigns the next available ID.
   
3. On the OS tab, select Do not use any media.
   For Guest OS, select Linux and Version: 6.x-2.6 Kernel.

   

4. In the System tab, configure the following settings:

   • SCSI Controller: VirtIO SCSI
   • BIOS: OVMF (UEFI) if you want your Scanner VM to boot in UEFI mode.

   

   Do not enable QEMU Agent, Add EFI Disk, or Add TPM.

5. On the Hard Disk tab, first delete scsi0 disk, because you need to import the uploaded QCOW2 image as shown in step 6

   

6.  Import the QCOW2 image:

   1. Click Import button.
      A new scsi0 disk is created where the qualys image will be imported.
   2. Select Import Storage.
   3. In this example, choose the qvsa-images storage that has already been created.
      

7. On CPU tab, set the number of CPU cores. We recommend a ratio CPU:RAM 1:2 or 1:3, and select the type as kvm64.

   

8. On the Memory tab, select 8192 of Memory (MB) of RAM. The recommended ratios by Qualys are 1:2 or 1:3 between CPU:RAM.

   

9. On the Network tab, configure the following"

   • Network device: Bridge
   • Model: VirtIO (Paravirtualized)
     

10. From the Confirm tab, finish the process. 

    Ensure Start after creation is not selected if you intend to use this VM as a template for future Qualys scanner deployments.

    

11. Qualys scanner in split network mode. (optional)
    To configure a scanner in split-network mode, you must add a second network interface to the VM you created in the previous steps. In split network scanners, the first network interface handles scanning traffic, and the second interface is used exclusively for communication with the Qualys TruRisk platform.
    To add a second network interface,  you need to select your VM > Hardware > Add  > Network Device.

    
12. Convert the VM to a template and use it to create multiple Qualys Scanners. (optional)
    You can convert your VM into a template. Based on your configuration, you can deploy new scanners either with a single network or with a split network from this template. Choose your VM and select Convert to template from the drop-down menu.
    
    
13. Create a new Scanner VM by cloning the VM template.
    Find the template you have created in the previous step, and from the drop-down menu, click Clone.

    

14. Continue with creating a VM.