I don't know what a SPI Dynamics AMP security scanner is. However, if it is a program that tries to use various known hacker methods through the internet to see if those holes are closed then it will probably report that there are no holes in you VM web site because it doesn't know about the possible holes in VM. I had a security scanner report that a Linux PC had no venerabilities because it tried known Windows holes.

Schuh, Richard wrote:
Does anyone know if the SPI Dynamics AMP security scanner work on a VM-based web site? Another one of those rules like we discussed yesterday, the ones created in a vacuum? Since everything on the site is Rexx and CMS Pipelines, I have my doubts. Rexx, possibly (except for the non-compliant CMS file structure); CMS Pipelines, very unlikely.

Regards,
Richard Schuh



--
Stephen Frazier
Information Technology Unit
Oklahoma Department of Corrections
3400 Martin Luther King
Oklahoma City, Ok, 73111-4298
Tel.: (405) 425-2549
Fax: (405) 425-2554
Pager: (405) 690-1828
email:  stevef%doc.state.ok.us

Reply via email to