We are working on getting authenticated scans working from our Risk department to determine to gather more information to eliminate some false positives as well as PCI requirements for authenticated scans. We are working with the Vendor (Qualys) on this, but it appears that when the scanner logs in it run many different versions of the "show" command, and a large amount of commands for every scan. I am curious if anyone here has had any experience with authenticated scans?
Thanks,
Joe
