For authenticated scans we intend to setup credentials using the Account Type "Windows Domain".
1. Which authentication protocols are supported by MVM 7.0/7.5?
2. Will authenticated scans work in an environment where LM/NTLM is not allowed (only NTLMv2 is allowed)?
With version 7.0x our engines are setup to "Send LM & NTLM - use NTLMv2 session security if negotiated". Check out the following KB:
I'm a little fuzzy what that's going to mean when you're running the engine on Windows 2008 R2...
That KB is a little outdated, and needs to be updated with Windows 2008 R2 considerations. I will hopefully have it updated in the next week or so.
I read the KB you refer to and it seems to include Windows 2008 R2 environment. There are some information in the notes section. Have you already updated it, or am I missing something? The KB is dated February 08, 2011 though.