I ran in to the same issue with my first couple Security Metrics scans. It took a few phone calls before I got ahold of a tech with a clue, but when I did he entered it as a false positive. All has been well since.