Deploying Virtual Scanner Appliances

Scanner Appliances perform authenticated and unauthenticated network scans for devices and infrastructure that cannot run an agent.

Appliance Types

  • Virtual Scanner (Public Cloud Platform and Private Cloud Platform): Deploy as OVF/OVA. Minimum specs: 2 vCPU, 4 GB RAM, 20 GB disk.
  • Physical Scanner: Rackmount hardware appliance for high-volume on-premises scanning.
  • QCSA: Qualys Containerized Scanner
  • Cloud Perimeter Scanner (Internet Scanner): Qualys-hosted scanner for external attack surface assessment. No deployment required.
  • Offline Scanner

Deployment Steps for Virtual Machine

  1. Go to Scans > Appliances > Add New Appliance and generate a Personalization Code.
  2. Download the appropriate virtual appliance image from the Qualys Portal.
  3. Deploy the OVF/OVA into your hypervisor. Assign a static IP on the management VLAN.
  4. Power on the appliance and enter the Personalization Code when prompted to register it with your subscription.
  5. Verify appliance status shows "Online" in Scans > Appliances. Allow up to 10 minutes for initial activation.
  6. Create Scanner Groups to segment scanners by network zone (for example, DMZ, Corporate LAN, Data Center).