Support articles
Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.
Accuracy of Windows operating system detection in Elements Vulnerability Management
Last updated
Issue:
Scan results shows the wrong installed Windows OS with 87% certainty, stating that a closed port is required for better accuracy. Apart from that is there any other setting that we can tweak in the scan options to increase the accuracy of OS detection?
Resolution:
If scanner was unable to determine operating system version with 100% certainty. We recommend to scan the host again with an authenticated scan.
For steps on Configuring the WinRM service to use HTTP on individual hosts for Authenticated Scans;
Note: Do remove the { }. Multiple IP can be added with comma separation
For steps on Configuring the WinRM service to use HTTP through GPO;
Note: This will add all host under *.domain
To add individual hosts under domain;
Set-Item WSMan:\localhost\Client\TrustedHosts -Value '{*.domain},{target ip address}'
Note: Do remove the { }. Multiple IP can be added with comma separation
For more configuring alternatives such as using HTTPS, the full guide can be viewed here: https://www.withsecure.com/userguides/product.html#business/radar/4.0/en/concept_AB45C3CF1EE74D0699BB8BCFFA1C3BA1-4.0-en