Foundstone Reports vulnerabilities with Insight Manager

[Heathe Kyle Yeakley]

Hello,

I work in an environment where applications with even the slightest signs of possible security holes are shut off. Of the guidelines I have to follow when hardening a newly installed Tru64 box, disabling HP Insight Manager is required because Foundstone (our main network security system) reports that Insight Manager is too insecure.

Now, I have never used Insight Manager, the tool could be lousy for all I know. That said, does anyone know of a patch or "Best Practices" documentation that could help me lock down whatever holes Foundstone is finding so that I may set this feature up and use it?

Thank you.