Re: False positives scanning Red Hat servers running Apache

[Chris Green <cmgreen () UAB EDU>]

Wyman Miles wrote:

> If you're willing to supply login credentials to your scanner, it'll
> invariably be much more accurate.  But, now you've introduced a maintenance
> issue and potentially a security risk.

While griping about Tenable, I seem to recall a day when they did write
the scripts that did a lot more than version checking. They still seem
now and then.   I spend a LOT more time filtering out the remote patch
check scripts which just are not useful to me in the distributed
organization.  Unfortunately, I don't think other vendors are much
better in this regard.