Product manual

GFI LanGuard 12 Scanning Profile Editor | 199
Screenshot 137: Advanced vulnerability scanning dialogs
The options in Advanced Vulnerabilities Options are used to:
Configure extended vulnerability scanning features that check your target computers for weak
passwords, anonymous FTP access, and unused user accounts.
Configure how GFI LanGuard handles newly created vulnerability checks.
Configure GFI LanGuard to send CGI requests through a specific proxy server. This is mandatory
when CGI requests will be sent from a computer that is behind a firewall to a target web server
that is ‘outside’ the firewall. For example, Web servers on a DMZ.
The firewall will generally block all the CGI requests that are directly sent by GFI LanGuard to a
target computer that is in front of the firewall. To avoid this, set the Send CGI requests through
proxy option to ‘Yes’ and specify the name/IP address of your proxy server and the communication
port which will be used to convey the CGI request to the target.
12.3 Configuring Patches
The Patches tab specifies the security updates checked during vulnerability scanning. The patches
checked are selected from the complete list of supported software updates, included in this tab. This
list is automatically updated whenever GFI releases a new GFI LanGuard missing patch definition file.
The following sections contain information about:
Enabling/disabling missing patch detection checks
Customizing the list of software patches to scan