cancel
Showing results for 
Search instead for 
Did you mean: 

On rhel 6 cleint, getting "Indeterminate" scan results - any ideas ?

I have an RHEL 6 client that I'm running a policy san on - this works on another client and I've compared the service account setup on each and they are the same - sudo access is correct - password is correct etc.    The commands that are run on the clients show that they are the same until it "stops" on this this non working client.  This post relates to my post regarding client scripts.  Is it advised that I check logs on the Foundstone console ?

Currently dont have access to these logs but will get it and I plan on looking at those today as well, but any information on this will be extremely helpful....

TIA, moses+ada

1 Reply
Highlighted
cgrim
Level 13
Report Inappropriate Content
Message 2 of 2

Re: On rhel 6 cleint, getting "Indeterminate" scan results - any ideas ?

Hi,

The daily logs would be a good place to start, but by default they aren't very verbose.

To troubleshoot SSH Login issues, you should turn on the Shell Module Tweak on the engine, and re-scan.

Run Regedit

Navigate to

[HKEY_LOCAL_MACHINE]\SOFTWARE\Foundstone\Foundscan\Tweaks] (for 32-bit host) or

[HKEY_LOCAL_MACHINE]\SOFTWARE\Wow6432Node\Foundstone\Foundscan\Tweaks]  (for 64-bit host)

** if the key "Tweaks" doesn't exist, create it. **

Create a new DWORD value called "LogShell" value 'ff'

Re-scan, and examine the logs for any specific errors.  If you're still having trouble, then you should open a Service Request.

I hope that helps!
Cathy

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community