Scanner Appliance Tour
Split Network Configuration
39
Split Network Configuration
Split network configuration is supported only in IPv4+v6 mode (the default). It is not
supported in IPv6-only mode.
The Qualys Scanner Appliance provides two network traffic configurations: Standard and
Split. The Standard configuration is enabled by default. You can choose to enable the Split
network configuration. For a physical appliance, you’ll do this using menu options on the
SETUP NETWORK
menu.
In the Standard network configuration, the LAN interface or LAN RJ45 Ethernet connector
(for physical appliances) services scanning traffic and all management traffic (software
updates, health checks, scan data upload) to the Qualys Cloud Platform over the Internet.
Figure 2-9. Standard network traffic configuration (default)
The Split network configuration allows users to split the scanning traffic from the
management traffic. The WAN interface by default is only used to communicate with the
Qualys Cloud Platform for Scanner Appliance management traffic like scan/map job
pickup, scan/map data upload, software updates and health checks. The LAN interface is
used for scanning traffic. This configuration enables customers to use Scanner Appliances
to scan networks that do not have direct Internet access. Split network configuration also
keeps scanned data and internal targets secure by isolating internal LAN traffic from
Internet traffic by using the WAN interface. Once configured, no internal traffic is routed
or bridged to the WAN interface and no management traffic is routed or bridged to the
LAN interface.
Summary of Contents for QGSA-5120-A1
Page 1: ...Scanner Appliance User Guide December 20 2021 ...
Page 6: ...Preface 6 ...
Page 58: ...Troubleshooting Where can I find the model number and serial number 58 ...
Page 60: ...Appendix A Product Specifications 60 ...
Page 62: ...Appendix B Software Credits 62 ...
Page 64: ...Appendix C Safety Notices 64 ...
