Versions / Builds Affected
LanGuard 2011 SR1 build 20110817Status
ResolvedProblem Summary
LanGuard does not query the AD in a network discovery scan, but discovers only the computers that are also shown via the Windows Explorer API (showing when browsing the network)TT / JIRAID
LANGUARD-45How to Identify
Confirm that the computers which are discovered match only the list of computers which are listed when browsing the network via Windows Explorer.
lanss_v101_securityscanner.csv shows in the corresponding Network Discovery scan that Windows Explorer API is being used and hosts are returned by it. An example would be:
2011-08-31,09:39:47,941,3,"#00000aec","#000009e4","info ","GatherLivePCs","Target: MHGNT Type: 3"
2011-08-31,09:39:47,942,3,"#00000aec","#000009e4","info ","GatherLivePCs","LoadComputersFromDomain m_isADDescoveryActive: False >>"
2011-08-31,09:39:47,953,3,"#00000aec","#000009e4","info ","GatherLivePCs","SendStatus: Retrieving list of computers for domain/workgroup: MHGNT...Using Windows Explorer API."
2011-08-31,09:39:48,075,3,"#00000aec","#000009e4","info ","GatherLivePCs","SendStatus: Retrieved 8 computers."
2011-08-31,09:39:48,090,3,"#00000aec","#000009e4","info ","GatherLivePCs","ProcessData: Computers: MHGDTIT00416 MHGDTIT00510 MHGDTIT00627 MHGDTIT00656 MHGDTIT00784 MHGDTIT00791 MHGLASSEL00647 MHGSVVMGFI "
In this case Windows Explorer API did return more than 0 computers and therefore LanGuard did not query the AD anymore. The patch changes this behavior.
Example:
The AD holds 100 computers
Opening Windows Explorer / Network only shows 8 computers
In this case LanGuard would only discover 8 computers
Ensure that the computers which are not discovered are not offline.Workaround / Fix Details
A patch is available for LanGuard 2011 SR1 build 20110817:
http://ftp.gfisoftware.com/patches/LG10/20110817/LANGUARD101_PATCH_20110902_05.zipRequired Actions
Please confirm that the issue is exactly as described above, then provide the patch to the customer.
