Qualys GUARD User manual

Support
Contact Qualys Support
At Qualys, we are committed to providing customers and partners with the
highest quality service on all technical and account related questions. Our
dedicated staff of Security Engineers are specialized in network security to
assist customers quickly and effectively —24 hours a day, seven days a week
by telephone, e-mail, and the web.
US and Canada 1 [phone]
Europe/International [phone]
Web site www.qualys.com/support
Understanding Messages
During operation, the Scanner Appliance reports the following errors in the
Scanner Appliance user interface (LCD display and Remote Console).
Activation Code/ At startup, the Scanner Appliance failed to make a
Network Err. connection to the QualysGuard platform and the Scanner
Appliance has not been activated yet. Please activate the
Scanner Appliance as described in the Quick Start.
Network Error At startup, the Scanner Appliance failed to make a
connection to the QualysGuard platform. This message
may appear because you need to enable additional
configurations, such as a static IP address and/or
Proxy support.
Communications Failure A network communication error occurred when the
appliance tried to poll the QualysGuard platform during
normal operation. This error can occur only after successful
completion of the Quick Start.
See the QualysGuard Scanner Appliance User Guide for information on the
available configurations options and setup steps. Appendix B provides
comprehensive information about the appliance, including detailed
troubleshooting instructions that will assist you with resolving errors.
Rack Mount Instructions
To rack mount the appliance, follow these steps:
1 With a #2 flat blade screwdriver, remove all 6 plastic screws on both sides
of the Scanner Appliance.
2 Attach the mounting brackets to the sides of the Scanner Appliance using a
#2 Philips screwdriver and 6 10-32 x 5/16" stainless steel screws.
3Mount the Scanner Appliance onto the rack using 4 10-32 x 3/4" rack
screws.
User Guide AC power cord CAT5 cable
19" rack mount bracket kit
(see Rack Mount Instructions —
to the left)
Support
Contact Qualys Support
At Qualys , we are committe d to providing customers and partners with the
highest q uality servi ce on all techni cal and account related questions. Our
dedicat ed staff of Secur ity Engineer s are special ized in netw ork securit y to
assist custo mers quickly an d effectivel y— 24 hours a day, seve n days a week
by telephon e, e-mail, and the w eb.
US and Canada 1 [phone]
Europe/International [phone]
Support e-mail [e-mail]
Web site www.qualys.com/support
Understanding Messages
During ope ration, the Sca nner Applianc e reports the fo llowing erro rs in the
LCD inter face.
Network Erro r At startup, the Scanner Appliance failed to make a
connection to the QualysGuard platform. This message
may appear because you need to enable additional
configurations, such as a static IP address and/ or
Proxy support.
Login Qualys-Guard Your login to the appliancefailed because yo u did not
Web First complete yo ur login to the QualysGuard w eb application
first. Foll ow the instructions provided i n STEP 2 of the
Quick Start.
Authentication Failure Your login to the Scan ner Appliance failed. B e sure to
use the same ac count to log into the QualysGuard web
application and the appliance.
Communications Failure A n etwork communicati on error occurred when t he
appliance tri ed to poll the QualysGuard platform during
normal operation. This er ror can occur only after successful
completio n of the Quick Start.
The Qualy sGuard Scanne r Appliance Us er Guide provi des compreh ensive
information about the appliance, including the LCD interface and appliance
configuration options. Note that Appendix B provide s detailed troubleshooting
instructions that will assist yo u with resolvi ng errors.
User Guide AC power co rd
CAT5 cable 19" rack mount bracket kit
Before You Begin
You can easily ins tall the Scann er Applianc e on your networ k in minutes by
followi ng the 3-step Quic k Start. Before y ou begin, we rec ommend that you
review the sections below to become familiar with the Scanner Appliance
and its configuration options.
Check Package Accessories
Your Starter Kit package should contain these components:
If any components are missing or damaged, please contact Qualys Support.
Review Network Requirements
The Scann er Appliance h as the followi ng network requ irements.
Outbound HT TPS Access Your local network must be c onfigured to allow outbo und
https (port 443) a ccess to the Internet , so that the
Scanner Appliance can communicate with the
QualysGuard platfo rm.
Accessibility of Target IPs The IP addresses for the host s to be scanned must be
accessible to the Scanner Appliance. This ispart icularly
important if your network is designed with VLANs.
Bandwidth Minimum recommended bandwidth conne ction of
1.5 megabits per second (Mbps) to the QualysGuard
.mroftalp
DHCP or Static IP The Scanner Applianc e is pre-configured wit h DHCP.
If you wish to con figure with a static IP add ress, be sure
you have the IP address, netmask, defaultgateway, and
primary DNS.
Proxy Suppor t Proxy support is available with or without authentication—
basic or NTLM . The Proxy server must be assigned a
static IP address an d must allow transparent SSL
.gnilennut
© QualysGuard is a registered trademark of Qualys, Inc. Qualys and the Qualys logo are trademarks of Qualys, Inc.
All other trademarks are the property of their respective owners.
Qualys, Inc.
1600 Bridge Parkway
Redwood Shores, CA 94065
T: 1 [phone]
For more information, visit: www.qualys.com
ENTERPRISE SCANNER APPLIANCE
QUICK START GUIDE
USB-to-RS232 converter cable
for Remote Console
Before You Begin
You can easily install the Scanner Appliance on your network in minutes by
following the 3-step Quick Start. Please review your Starter Kit package
contents before you begin. The Scanner Appliance includes a user interface
for configuration and management. Users may choose to use the LCD display
and keypad or the optional Remote Console interface for remote access via
a VT100 terminal, such as Windows HyperTerminal.
Check Package Accessories
Your Starter Kit package should contain these components:
If any components are missing or damaged, please contact Qualys Support.
Review Network Requirements
The Scanner Appliance has the following network requirements.
Outbound HTTPS Access Your local network must be configured to allow outbound
https (port 443) access to the Internet, so that the
Scanner Appliance can communicate with the
QualysGuard platform.
Accessibility of Target IPs The IP addresses for the hosts to be scanned must be
accessible to the Scanner Appliance. This is particularly
important if your network is designed with VLANs.
Bandwidth Minimum recommended bandwidth connection of
1.5 megabits per second (Mbps) to the QualysGuard
.mroftalp
DHCP or Static IP The Scanner Appliance is pre-configured with DHCP.
If you wish to configure with a static IP address, be sure
you have the IP address, netmask, default gateway, and
primary DNS.
Proxy Support Proxy support is available with or without authentication —
basic or NTLM. The Proxy server must be assigned a
static IP address and must allow transparent SSL
.gnilennut
ENTERPRISE SCANNER APPLIANCE
QUICK START GUIDE

Power On the Scanner
Appliance
1 Connect the AC power cord into the power socket.
2 Check to be sure that the amber PWR LED is lit.
3 WELCOME TO QUALYSGUARD appears in the Scanner Appliance user
interface followed by other informational messages during the boot
process which takes approximately two minutes.
4Check the message indicating the activation status of the Scanner Appliance:
•ACTIVATION CODE –The Scanner Appliance has not been
activated.
•FRIENDLY NAME/IP ADDRESS –The Scanner Appliance has been
activated. Now you are ready to start scanning. Go to "Getting
Started with Scanning".
A network error message appears when the Scanner Appliance did not
make a successful connection to the QualysGuard platform and the issue
must be resolved:
•ACTIVATION CODE/NETWORK ERR. –The Scanner Appliance
has not been activated.
•NETWORK ERROR –The Scanner Appliance has been activated.
5 When the ACTIVATION CODE message appears, make yourself a note of
the activation code for the Scanner Appliance. A unique activation code is
assigned to each Scanner Appliance. Now you are ready to go to STEP 3
Note: If the Remote Console will be used, it may be necessary to press
the ENTER key on the VT100 terminal's keyboard to display the Remote
Console interface.
Proper Shutdown
To shut down the system, press ENTER and then the Down arrow to select
the SYSTEM SHUTDOWN option. Wait until this message appears:
IT'S NOW SAFE TO UNPLUG THE BOX. Then you can safely disconnect
the power supply.
Connect the Scanner
Appliance to the Network
Setup Network Connection
The Scanner Appliance connects like any other computer to a switch on your
network. To setup the network connection, follow these steps:
1Connect one end of the Ethernet cable to the Ethernet LAN port on the
back of the Scanner Appliance.
2 Connect the other end of the Ethernet cable to a 10BASE-T or
100BASE-TX or 1 Gigabit switch on your network.
Remote Console Setup (optional)
The Remote Console interface supports remote configuration of the Scanner
Appliance using a VT100 terminal, such as Windows HyperTerminal. To setup the
Remote Console, follow these steps:
1 Be sure your terminal server is up and running. These settings are required:
•BITS PER SECOND: 9600 •STOP BITS: 2
•DATA BITS: 8 •FLOW CONTROL: None
•PARITY: None •TERMINAL EMULATION: VT100
2 Connect one end of the USB-to-RS232 converter cable to a USB port on the
Scanner Appliance (back panel).
3 Connect the other end of the USB-to-RS232 converter cable to your
terminal server via network cable.
1
Step
2
Step
3
Step
Activate the Scanner
Appliance
1 Open a browser and go to the platform URL where your QualysGuard
account is located. Please refer to your registration email containing your
platform URL and login credentials. A Manager or Unit Manager account
is required.
2 On the QualysGuard login page, enter your user name (Login) and
password, and then click LOGIN. You are prompted to review and accept
the licensing agreement when you log into your account for the first time.
Your QualysGuard Home page appears upon successful login.
3 Select Scanner Appliances from the left menu, under Tools.
4 Go to New➞Scanner Appliance.
Activation Code – Enter the activation code for the Scanner Appliance.
Add To (Unit Manager only) – Select an asset group that you want to add
the Scanner Appliance to. This will make the appliance available to users
in your business unit.
Click Activate.
5 This message appears when the Scanner Appliance has been successfully
activated:
FRIENDLY NAME/IP ADDRESS – When this message appears, you are
ready to start scanning.
Note: It may take a few minutes for the Scanner Appliance activation to
occur. If you prefer not to wait, complete the activation manually by
restarting the Scanner Appliance. To do this, press the Down arrow until
the SYSTEM REBOOT screen appears and then press ENTER. When the
REALLY REBOOT SYSTEM? screen appears press ENTER.
Getting Started with Scanning
Log into your QualysGuard account.
Before you begin, select Scanner Appliances on the left menu, under Tools.
From there you have the option to view appliance information and edit appliance
settings, such as the friendly name and polling interval.
Select Scan on the left menu, under Navigation. Then go to New➞Scan on
the top menu bar to launch an on demand scan, or go to New➞Schedule Scan
to define a scheduled scan to run sometime in the future. When defining the
scan, be sure to select the friendly name of your Scanner Appliance.
Online Help is always available to assist you. Click the Help button when stepping
through a workflow. Or go to Help➞Online Help to view the complete online help.
See also the QUALYSGUARD QUICK TOUR. Go to Help➞Resources to download.
ENTERPRISE SCANNER APPLIANCE