in

eEye Digital Security

The endpoint to vulnerability starts here.

 

RETINA Scanning Locks out Local User Accounts

Last post 06-23-2008 6:44 PM by Blue1978. 1 replies.
Page 1 of 1 (2 items)
Sort Posts: Previous Next
  • 06-05-2008 6:26 AM

    RETINA Scanning Locks out Local User Accounts

    We had an Oracle database server impacted by RETINA scanning. The server was scanned at 10:21am yesterday and all local accounts were locked. This server also had an account lockout duration of 24 hours set in the local security policy. Each of our servers are set with an account lockout threshold of 3 invalid logon attempts (per the DISA Gold Disk). At 6:30pm each night, this server automatically runs two Oracle backups. The Scheduled Task is setup to run with a local admin account to kick off the job. Since the account was still locked, when the task was scheduled to run, the backup jobs failed last night. We can see in our Security Logs that the Retina scan attempts to use each local account three times. Once the scan is complete, all local accounts are locked on all of our servers.

    Request any assistance or suggestions how we can limit the number of queries made by Retina during the scan.

    William H. Spencer
  • 06-23-2008 6:44 PM In reply to

    Re: RETINA Scanning Locks out Local User Accounts

    I am assuming you have the full paid for version of Retina (the standalone scanner) that you are speaking of here?  If you do, you are entitled to support through a specific customer portal located at:

    https://www.eeye.com/clients/login.html?access=2&target=/clients/index.html&rnd=080114.195019.109229.341 

    Folks that use the Professional version of Blink and the other eEye products can set up an account via this portal for submitting trouble tickets and so forth through.  I have gotten great support via this method.  Unfortunately, these forums were intended for the users of the Personal Edition of Blink to come to for problems.

    Hope this helps. :) 

    Filed under:
Page 1 of 1 (2 items)
© 1995 - 2009 eEye Incorporated