I am running Nessus on a closed network. My OS is Redhat 7.4. I have Bare Metal machines in my data center and Virtual Machines on AWS.
When Nessus scans my Bare Metal machines, it correctly identifies my servers as headless and does not check for GUI banners, screen locks, etc.
On my VMs, it determines, somehow, that it is a Headed server and reports findings for GUI banners, screen locks, etc.
Any ideas what Nessus is looking at to determine if the server is headless?