Forum Discussion

ibelyna's avatar
ibelyna
3 years ago

Nessus can now use Kerberos for DCOM Authentication Summary...

Nessus can now use Kerberos for DCOM Authentication Summary Nessus scans that are provided with Windows Kerberos credentials will now use the Kerberos protocol for authentication in plugins that us...
Microsoft
Target
esearle's avatar
esearle
Connect Contributor
2 years ago

Will this also support Kerberos armoring. AKA FAST?

We use the GPO setting "KDC support for claims, compound authentication for Dynamic Access Control and Kerberos armoring: Fail unarmored authentication requests"

It appears that Nessus Professional is incapable of using compound authentication for Kerberos. This is also knows as Flexible Authentication Secure Tunneling (FAST) for Kerberos

See MS Documentation at https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh831747(v=ws.11) 

And also https://learn.microsoft.com/en-us/windows/security/identity-protection/credential-guard/additional-mitigations#kerberos-armoring

Can you confirm? If it does not support it, then how do we request this to be supported? This was available from MS back in 2012, over 10 years ago. 

Thanks,

Eli