in

eEye Digital Security

The endpoint to vulnerability starts here.

 

Audit ID 10359 Clustered servers

Last post 11-04-2009 10:28 AM by RAC_Reaper. 5 replies.
Page 1 of 1 (6 items)
Sort Posts: Previous Next
  • 10-30-2009 10:36 AM

    Audit ID 10359 Clustered servers

    I have been finding out more about 2003 Server clustering.  In my environment I have two W2K3 servers that are clustered.  One's called Martha, the other Stewart.  The cluster is named Fred.   Martha has IP 10.1.1.2, Stewart 10.1.1.3 and Fred has 10.1.1.4.  Martha and Stewart are not vulnerable to Audit 10359, but Fred reports that it is.  From looking what the scan finds, Retina is looking for a Registry key.  Since Fred is logically just a name, the scanner cannot find the key (found value is **keynotfound**). 

    Is there anyway you can make the scanner not scan these types of IP's (IP's that are cluster names)?

    I could omit the IP from the scan.  That would probably be an easier solution.

  • 10-30-2009 9:25 PM In reply to

    • bpatten
    • Top 10 Contributor
    • Joined on 09-24-2007
    • Irvine, CA
    • Posts 125

    Re: Audit ID 10359 Clustered servers

    I'd suggest you open a support ticket and send a support package to review the issue. There may be a way to work around it, although this is the first I've heard of such an issue.

  • 11-03-2009 7:52 AM In reply to

    Re: Audit ID 10359 Clustered servers

     How do I open a support ticket?

  • 11-03-2009 12:32 PM In reply to

    Re: Audit ID 10359 Clustered servers

    Via the https://eeye.com/clients login. 

    Brian,

         If your a first time user to the Customer Portal, how do you get an account to it?  Do they click on the forgot password and enter the email address that they used on their purchase?  RAC_Reaper needs an account.

  • 11-03-2009 8:45 PM In reply to

    • bpatten
    • Top 10 Contributor
    • Joined on 09-24-2007
    • Irvine, CA
    • Posts 125

    Re: Audit ID 10359 Clustered servers

    Portal Accounts are created when a customer purchases an enterprise or professional edition product. If RAC_Reaper does not have one, my question would be what license are they using and from whom? If your organization provided you with a serial key, then you'll need to contact your organizations help desk for further assistance and they will likely have portal access.

  • 11-04-2009 10:28 AM In reply to

    Re: Audit ID 10359 Clustered servers

     I have one of those. I can do that.

Page 1 of 1 (6 items)
© 1995 - 2009 eEye Incorporated