Vulnerability Assessment

Re: Discrepancy between NetBIOS and DNS names on Retina scan.

Blue1978 — Wed, 13 May 2009 12:42:00 GMT

Yes, the portal is very nice and has a very simple interface. I have been using it now for almost a year and a half as a Blink Professional user and like it very much. Once you log into it you have access to four areas of interest:

1. Product Downloads - This is where you can download some of eEye's free tools that were created in the past. This is also where you download the current version of the software that you have a license for.

2. Product Licensing - Shows all of the serial numbers that you have under your account and whether they are still active or have expired.

3. Documentation - Pretty much explains it all. Nice archive of pdf manuals on all of eEye's products.

4. Technical Support - This is where you can submit a new ticket, view pending ones, or see ones that have been closed in the past. Through this you get to talk to two very busy guys that respond to these tickets on a daily basis (Alex and Jon). Keep up the good work guys!

Re: Discrepancy between NetBIOS and DNS names on Retina scan.

stabet — Wed, 13 May 2009 12:27:53 GMT

Excellent! Thanks to both of you for the info about DNS and the link to the client portal - I'll have to talk to our contracting overlords to find out about how to get an account for the portal.

Re: Discrepancy between NetBIOS and DNS names on Retina scan.

bpatten — Wed, 13 May 2009 04:17:53 GMT

As Blue1978 pointed out, you can open a support ticket and ask via Clients Portal (www.eeye.com/clients) but to answer your question, Retina is getting the machine name via Netbios and doing a reverse DNS lookup to get the DNS information, hence the discrepancy. You were right to check your DNS server and make the correction there, thats exactly how to resolve the issue.

Hope that helps.

Re: Discrepancy between NetBIOS and DNS names on Retina scan.

Blue1978 — Wed, 13 May 2009 01:20:30 GMT

I am not completely sure myself, but, if you do not get an answer in here in a timely fashion (and your using Blink Professional or the regular Retina scanning software package) you are entitled to personal support via the Customer Support Portal located here:

https://www.eeye.com/clients/login.html?access=0&target=&rnd=090512.181942.031014.231

Discrepancy between NetBIOS and DNS names on Retina scan.

stabet — Tue, 12 May 2009 18:24:18 GMT

Does Retina perform a DNS query to determine the NetBIOS and DNS names of the systems it scans? The results of a Retina scan vulnerability export report listed one name as the NetBIOS name for the scanned system, but a different name for the DNS name, on the same row in the csv file. After logging into the system, we determined that the NetBIOS name was correct. A little research showed DNS PTR records for the pertinent IP address for both the correct (NetBIOS) name and the incorrect (DNS) name. If Retina doesn't get this information from a DNS query, where does it get it from?

I realize this may not be directly related to Blink, but I couldn't find another Retina forum elsewhere. Thanks.