Environment
Netiq Secure Configuration Manager 5.8.2
Netiq Security Agent for Windows 5.8.2
Situation
IIS
MS SQL Server
Oracle
SQL Server 2000
Windows
You can use the new objects and attributes to create custom security checks and templates. You can also download new and updated checks from the AutoSync server, including the following new checks:
Advanced audit policy setting status
Kerberos Policy: Enforce user logon restrictions
Kerberos Policy: Maximum lifetime for service ticket
Kerberos Policy: Maximum lifetime for user ticket renewal
Kerberos Policy: Maximum lifetime for user ticket
Kerberos Policy: Maximum tolerance for computer clock synchronization
Local - Anti-virus software installed
Windows Firewall setting
Resolution
Download and apply Hotfix 73053 to all SCM consoles.
After you install this hotfix, run the AutoSync wizard to download and apply the latest security knowledge to ensure you have the most recent Windows security checks and policy templates.
Cause
This hotfix adds support for NetIQ Security Agent for Windows 5.8 Service Pack 2, including updated objects and attributes for the following Windows namespace components:
IIS
MS SQL Server
Oracle
SQL Server 2000
Windows
Additional Information
To use the updated objects and attributes in the Secure Configuration Manager console, your environment must meet the following requirements:
- NetIQ Secure Configuration Manager 5.8 Service Pack 2 with this hotfix installed on all console computers
- NetIQ Security Agent for Windows 5.8 Service Pack 2 applied to all Windows agent computers
- To query IIS 7 or 7.5 endpoints, you must have:
- IIS Management Scripts and Tools component installed on the endpoint computers running IIS version 7 or 7.5 that you want to monitor
- NetIQ VBscripts enabled to run on the computer containing the Windows agent
For more information about enabling NetIQ VBscripts, see the Special Installation Instructions section in the Release Notes for Security Agent for Windows 5.8 Service Pack 2 .