Accuracy of Windows operating system detection in F-Secure Elements Vulnerability Management - F-Secure Community
<main> <article class="userContent"> <h3 data-version="4" data-article="000009983" data-id="issue">Issue:</h3> <p>Scan results shows the wrong installed Windows OS with 87% certainty, stating that a closed port is required for better accuracy. Apart from that is there any other setting that we can tweak in the scan options to increase the accuracy of OS detection?</p> <h3 data-id="resolution">Resolution:</h3> <p>If scanner was unable to determine operating system version with 100% certainty. We recommend to scan the host again with an authenticated scan.<br><br>For steps on Configuring the WinRM service to use HTTP on individual hosts for Authenticated Scans;<br></p><div><b>Set-Item WSMan:\localhost\Client\TrustedHosts -Value '{target IP address}' </b><br>Note: Do remove the { }. Multiple IP can be added with comma separation</div><br><br>For steps on Configuring the WinRM service to use HTTP through GPO;<br><div><b>Set-Item WSMan:\localhost\Client\TrustedHosts -Value ' * '</b><br>Note: This will add all host under *.domain<br><br>To add individual hosts under domain;<br><b>Set-Item WSMan:\localhost\Client\TrustedHosts -Value '{*.domain},{target ip address}'</b><br>Note: Do remove the { }. Multiple IP can be added with comma separation</div><br><br>For more configuring alternatives such as using HTTPS, the full guide can be viewed here: <a rel="nofollow" href="https://help.f-secure.com/product.html#business/radar/3.0/en/concept_E357586713E6478995E3F8E980FF2B65-3.0-en">https://help.f-secure.com/product.html#business/radar/4.0/en/concept_AB45C3CF1EE74D0699BB8BCFFA1C3BA1-4.0-en</a> <p>Article no: 000009983</p> </article> </main>
