Option

Description

 

 

Do not perform application fingerprinting

Does not try to specifically identify which

 

applications are communicating over which

 

ports, and runs the checks as selected in the

 

Assessment policy.

 

This option does not identify applications

 

communicating over non-standard ports.

 

(Checks are run against standard ports as

 

defined in the Network Services policy.)

 

 

Fingerprint applications and run checks

Identifies applications communicating over

that apply to application protocol (e.g.,

specific ports, and then runs checks that

http)

apply to the protocol in use.

 

This option identifies applications

 

communicating over non-standard ports.

 

 

Fingerprint applications and run checks

Identifies applications communicating over

that apply to specific application (e.g.,

specific ports, and then runs checks that

apache)

apply only to the application identified.

 

This option identifies applications

 

communicating over non-standard ports.

 

 

11.The settings in the Account Verification section apply only if an Assessment Credentials policy is available for the group being scanned.

Option

Description

 

 

Verify account access level before using

v If disabled, Enterprise Scanner assumes

 

that whatever is specified in the

 

Assessment Credentials policy is accurate.

 

v If enabled, Enterprise Scanner tries to

 

confirm that the access level specified in

 

the Assessment Credentials policy is

 

correct.

 

Important: You should enable the Check

 

local group membership to verify access

 

level if you enable account verification.

 

 

Access domain controllers to verify access

v If disabled, Enterprise Scanner does not

level

communicate with a Domain Controller in

 

 

the process of verifying access levels.

 

v If enabled, Enterprise Scanner tries to

 

communicate with a Domain Controller in

 

the process of verifying access levels.

 

 

Check local group membership to verify

v If disabled, Enterprise Scanner does not

access level

try to confirm the access level for the

 

 

account during assessment by checking

 

which local groups the asset belong to.

 

v If enabled, Enterprise Scanner tries to

 

confirm the access level for the account

 

during assessment by checking which

 

local groups the asset belong to.

 

 

12.Configure the options for locking out accounts in the Account Lockout Control section:

14Enterprise Scanner: User Guide

Page 22
Image 22
IBM Partner Pavilion 2.3 Fingerprint applications and run checks, That apply to application protocol e.g, Http, Apache