Chapter 3 Scanner Appliance Tour

         

Split Network Configuration

The QualysGuard Scanner Appliance provides two network traffic configurations: Standard and Split. The Standard configuration is enabled by default. You may enable the Split network configuration using menu options on the SETUP NETWORK menu. In the Standard network configuration, the LAN RJ45 Ethernet connector services both scanning traffic and management traffic to the QualysGuard platform over the Internet.

Figure 3-13. Standard network traffic configuration (default) In the Split network configuration all Scanner Appliance management traffic, which includes scan/map job pickup, scan/map data upload, software updates and health checks are routed through the WAN port, whereas scan traffic uses the LAN port. This configuration enables the use of Scanner Appliances in networks that do not have direct Internet access.

Figure 3-14. Split network traffic configuration No internal traffic is routed or bridged to the WAN port and no management traffic is routed or bridged to the LAN port.

'

&

"

&

'

&

"