On Sun, Feb 12, 2006 at 08:05:42AM -0500, ablesambaker wrote:

> On a recent scan at a client, Nessus 2.6x with current plugins (02/09/2006)
> finds thin clients (e.g. Wyse or Neoware dumb terminals) and classifies them
> as Windows CE, or Windows 95.

Are they really dumb terminals (like the old DEC vt100 terminals) rather
than thin clients? I'm not familiar with these devices, but browsing
Neoware's website it seems like they make thin clients running either
Windows CE / XPE or Linux.

Also, which plugin is identifying the OS?

> Is there a way to bypass these type of terminals during a scan since they
> generally pose no security risks to a client?

Omit their IPs as Josh mentioned or write a plugin that uniquely
identifies them and marks them as dead (like dont_scan_printers.nasl).

I'm not sure either is a good idea as they apparently do have some type
of TCP/IP stack. The better approach would be to figure out why they're
being mis-identified, if in fact that's true.

George
-- 
[EMAIL PROTECTED]
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to