{"id":1569,"date":"2024-03-01T11:51:02","date_gmt":"2024-03-01T11:51:02","guid":{"rendered":"https:\/\/editjournal.redakt.eu\/faxmodem\/?p=1569"},"modified":"2024-03-01T12:49:37","modified_gmt":"2024-03-01T12:49:37","slug":"qualys-scan-cloudflare","status":"publish","type":"post","link":"https:\/\/editjournal.redakt.eu\/faxmodem\/blog\/seo-webmaster\/qualys-scan-cloudflare\/","title":{"rendered":"Passing a Qualys scan with Cloudflare free plan"},"content":{"rendered":"<p>Start by creating a Cloudflare account. Add your website. Use their nameservers on your domain. Wait until they validate your website.<\/p>\n<p>Below assumes you have a brand new account with all the default settings, i.e. you won't have <em>Bot Fight Mode<\/em> turned on.<\/p>\n<ol start=\"0\">\n<li>On your account level (so not having entered a specific website), go to Manage Account -&gt; Configurations -&gt; Lists and create a new list; choose Type = IP and insert the Qualys IP ranges from <a href=\"https:\/\/pci.qualys.com\/static\/help\/merchant\/getting_started\/check_scanner_ip_addresses.htm\">Qualys website<\/a>.<\/li>\n<li>Go to SSL\/TLS and set your SSL\/TLS encryption mode to Full. Otherwise you may start getting <code>ERR_TOO_MANY_REDIRECTS<\/code>.<\/li>\n<li>Go to Security -&gt; WAF and create a new rule whitelisting Qualys' IP addresses. Either reuse the list created above, or manually copy the ranges from <a href=\"https:\/\/pci.qualys.com\/static\/help\/merchant\/getting_started\/check_scanner_ip_addresses.htm\">Qualys website<\/a>. Using their ranges at the moment of writing, here's how your rule would look like:\n<ul>\n<li>Field = IP Source Address<\/li>\n<li>Operator = is in, Value = <code>64.39.96.0\/20<\/code>, <code>139.87.112.0\/23<\/code><\/li>\n<li><strong>or<\/strong> Operator = is in list, Value = the list you created<\/li>\n<li>Action = Skip<\/li>\n<li>WAF components to skip = (choose all checkboxes)<\/li>\n<li>More components to skip = (choose all checkboxes)<\/li>\n<\/ul>\n<\/li>\n<li>Go to Security -&gt; WAF -&gt; Tools and whitelist Qualy's ranges there as well. Under IP Access Rules:\n<ul>\n<li>IP Range = <code>64.39.0.0\/16<\/code>, <code>139.87.0.0\/16<\/code><\/li>\n<li>Action = Allow<\/li>\n<li>Zone = All websites in account<\/li>\n<\/ul>\n<\/li>\n<li>Go to Security -&gt; Settings and set\n<ul>\n<li>Security Level = Essentially Off<\/li>\n<li>Browser Integrity Check = Off<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>Start by creating a Cloudflare account. Add your website. Use their nameservers on your domain. Wait until they validate your website. Below assumes you have a brand new account with all the default settings, i.e. you won&#8217;t have Bot Fight Mode turned on. On your account level (so not having entered a specific website), go&hellip; <a class=\"more-link\" href=\"https:\/\/editjournal.redakt.eu\/faxmodem\/blog\/seo-webmaster\/qualys-scan-cloudflare\/\">Continue reading <span class=\"screen-reader-text\">Passing a Qualys scan with Cloudflare free plan<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[994],"tags":[1208,1211],"class_list":["post-1569","post","type-post","status-publish","format-standard","hentry","category-seo-webmaster","tag-cloudflare","tag-pci","entry"],"_links":{"self":[{"href":"https:\/\/editjournal.redakt.eu\/faxmodem\/wp-json\/wp\/v2\/posts\/1569","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/editjournal.redakt.eu\/faxmodem\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/editjournal.redakt.eu\/faxmodem\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/editjournal.redakt.eu\/faxmodem\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/editjournal.redakt.eu\/faxmodem\/wp-json\/wp\/v2\/comments?post=1569"}],"version-history":[{"count":4,"href":"https:\/\/editjournal.redakt.eu\/faxmodem\/wp-json\/wp\/v2\/posts\/1569\/revisions"}],"predecessor-version":[{"id":1576,"href":"https:\/\/editjournal.redakt.eu\/faxmodem\/wp-json\/wp\/v2\/posts\/1569\/revisions\/1576"}],"wp:attachment":[{"href":"https:\/\/editjournal.redakt.eu\/faxmodem\/wp-json\/wp\/v2\/media?parent=1569"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/editjournal.redakt.eu\/faxmodem\/wp-json\/wp\/v2\/categories?post=1569"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/editjournal.redakt.eu\/faxmodem\/wp-json\/wp\/v2\/tags?post=1569"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}