User-Defined Controls: Differences between Scanner and Agent Results

For some user-defined controls, you'll see differences in the scan results when scanning the same control on the same host with both a scanner and an agent. We'll list these differences below.

Windows Directory Search UDC

Unix Directory Search UDC

Windows Directory Search UDC

For this control, the scanner results include Statistics below the Evidence/Extended Evidence section and before Remediation. The agent results do not include Statistics. See samples below.

Scanner results

You'll see Statistics in results from the scanner.

Agent results

You won't see Statistics in results from the agent.

Unix Directory Search UDC

For this control, the scanner results include the Base Directory and the agent results do not include the Base Directory.

Scanner results (Max Depth 0)

In this example, the Maximum Depth is set to 0. In the scanner results, the Base Directory is returned as the Actual value. The Actual value matches the Expected value, so the status is PASS.

Agent results (Max Depth 0)

In this example, the Maximum Depth is set to 0. In the agent results, the Actual value is "No data found" because the agent does not return the Base Directory. The Actual value does not match the Expected value, so the status is FAIL.

Scanner results (Max Depth 1)

In this example, the Maximum Depth is set to 1. In the scanner results, the Base Directory is included in the Actual value. The Actual value matches the Expected value, so the status is PASS.

Agent results (Max Depth 1)

In this example, the Maximum Depth is set to 1. In the agent results, the Base Directory is not included in the Actual value. The Actual value matches the Expected value, so the status is also PASS.