Azure Defender built-in vulnerability assessment agent does not support proxy configuration.

Question

Currently the Azure Defender built-in vulnerability assessment tool which is based on a Qualys solution does not support configuration of a proxy for the agent to connect to the required service endpoints.

This is in contrast to the ARC and Log Analytics agents which both support proxy configurations.

The Qualys agent itself does in fact support a proxy and so it is the deployment automation from Azure that is not able to set the proxy configuration and I would like to see that capability added so that ARC servers deployed behind a proxy can have the vulnerability assessment solution deployed too.

stanislavbelov · Answer

Hello and thank you for your question.Proxy config/support in ASC is in our roadmap and we even have been testing it recently. Unfortunately this is a low priority feature so we don't have a clear ETA at the moment.As an alternative this can be configured on the agent side:https://www.qualys.com/docs/qualys-cloud-agent-windows-install-guide.pdfhttps://qualysguard.qg2.apps.qualys.com/portal-help/en/ca/agents/win_proxy.htmhttps://qualysguard.qg2.apps.qualys.com/portal-help/en/ca/agents/linux_proxy.htm

Forum Discussion

Azure Defender built-in vulnerability assessment agent does not support proxy configuration.

Resources