Servers are detected as 'Local Scanners' after installing patches 4&5

12.14.11   |  
‎12-14-2011 10:12 PM

Hi there!


Before I start tuning all these false positves I wanted to ask if I've missed something...


Since we've installed the last required patches we've been swamped by many offenses.

I.e. our domain controllers, dhcp and file servers (and many others) are detected as 'Aggressive Local Scanner Detected'

I don't really get why that's happening. The behavior of these machines seems to be ok.

I didn't find any changes regarding NBAD-rules in the release notes.

Did some of you get the same results?


Thank you! Appreciate your help!