I have been finding out more about 2003 Server clustering. In my environment I have two W2K3 servers that are clustered. One's called Martha, the other Stewart. The cluster is named Fred. Martha has IP 10.1.1.2, Stewart 10.1.1.3 and Fred has 10.1.1.4. Martha and Stewart are not vulnerable to Audit 10359, but Fred reports that it is. From looking what the scan finds, Retina is looking for a Registry key. Since Fred is logically just a name, the scanner cannot find the key (found value is **keynotfound**).
Is there anyway you can make the scanner not scan these types of IP's (IP's that are cluster names)?
I could omit the IP from the scan. That would probably be an easier solution.