OS detection in passive deployment

[tfellinger]

Hello,

I have here a passive deployment of a FirePower Appliance. Unfortunately there are around 40 hosts which get tagged as ESX Servers...which is not correct. Are there ways to optimize the OS detection? I know of NMAP scans, are there other options I can activate to make this feature work better?

Thanks!

BR,

Thomas

[opsec arqiva]

Hi, Did you manage to resolve this issue and how?

[tfellinger]

Hi,

not really...it kind of ended in setting the OS manually for these hosts. Probably ýou can achieve better automatic results by placing a sensor more close to the client, but this was not an option in my case.

BR,

Thomas