Credentialed Foundstone scan against RHEL5.5 won't connect.
 

Our org uses Foundstone. I gave them a wheel user and verified connectivity with putty from their server to my RH box. Foundstone never makes it in and I don't see anything from faillog, sshd logs, etc. Anyone ever deal with this?
Thanks,
Steve

Based on what you posted, it looks like a problem in Foundstone. Since you've checked the logs, and don't see anything failing, and you've already verified connectivity from server to server, the only piece left is Foundstone.

You can try to give them another (temporary) user ID to see if you can see anything. Check the logs for SUCCESSFUL logins from that user ID too, since Foundstone may be logging in correctly, then not actually doing anything. :)

Foundstone Credentialed Scanning
 

Make sure that you are using the "bash" or "ksh" shells in the account that is being used to scan. Also, we use sshv2 certificates to credential scan and it works well.

In Foundstone, make sure and select " trust unknown remote-shell targets" when you enter credentials into the Foundstone Scanning Tool.

Great Ideas! For the first suggestion, is there a setting in foundstone for the shell or should I make sure the red hat account uses bash or ksh? I never verified what is was set up with. I will also try the trust unk...I am forwarding this info to our it security. They normally run the scans but don't have access to our systems(we enter the credentials for them).
Thanks!

Foundstone Credential Scans
 

The shell for the account created on the Linux machine should be "bash" or "ksh".