Don't forget that nmap will probably need to run as root on a *nix box.
That may be the bigger obstacle. Reading some of the other posts
prompted me to re-read your post. I'm getting the idea that I
misinterpreted your statement "We have a web server..." as indicating
that you have control over it...

[ more ]