What reports and security checks that are not supported against proxied endpoints? (NETIQKB42464)

goal
What reports and security checks that are not supported against proxied endpoints?

fact
NetIQ Vulnerability Manager Agent for Windows 5.5

fact
NetIQ Vulnerability Manager Agent for Windows 5.0

cause
The operating system does not support hashing the password on a remote machine such as the agent.  It must be hashed on the local machine only and not carried across the network, therefore the agent must be local to the target endpoint.

fix

Certain Windows reports and security checks require the NetIQ Vulnerability Manager Agent service to be running on the target endpoint:

• Port Scan



• Password content related reports:
• Users with Password=Username
• Users with Weak Passwords
• Users without a Password
• Users with password too short


• Password content related checks:
• Accounts with password equal to user name
• Accounts with password equal to any user name
• Accounts with password same as reverse user name
• Accounts with blank passwords
• Accounts with short passwords

Formerly known as NETIQKB42464