cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
386
Views
0
Helpful
1
Replies

VULNERABILITY SCANNING PREVENTED BY CSA

snehalshetty
Level 1
Level 1

When I scan Windows XP machine with Foundstone(Mcafee) scanner,CSA is preventing the scanning attempt and logging the following message:

9/21/2005 5:03:24 PM: The process '<remote application>' (as user PC1\Admin) attempted to access the registry key '\REGISTRY\MACHINE', value ''. The attempted access was an open (operation = OPEN/KEY). The operation was denied.

When scanner tries to access registry to find out windows missing patches,CSA is blocking the attempt immediately.

We would like to modify the rule in CSA and also want to make sure it does not create any loopholes.

Please help me solve this.

Thanks.

1 Reply 1

umedryk
Level 5
Level 5

You can disable the relevant signature in your IDS for this specific host.

Review Cisco Networking products for a $25 gift card