Input # of days

Specify the number of days that you have to patch the system and bring it into compliance.      

Select a Severity

The severity level of the patch. Patch severity levels are assigned by the vendor and often include levels like Critical, Moderate, and Low.            

Select a Tag

The tag associated with a system or group of systems.            

Scan Name

Displays the name of the inventory scan task.

Created On

Displays the data and time when the task was created.

Created By

Displays the name of the user who created the tasks.

Enabled

Displays whether the task is enabled or disabled.

Scan Auto ID

Displays the auto-generated scan ID for the scan task.

Last Modified Date

Displays the last modified date and time of the scan task.

Last Modified By

Displays the user name of the user who last modified the scan task.

Description

Displays the description of the scan task that was entered while creating the scan task.

Actions

Allows you to do the following:

• Edit Task – Edit the task.

• Edit Assignment – Edit the assignment.

• Edit Schedule – Edit the schedule for the task.

• Edit Scan Results – Edit the scan results.

Actions button

• Choose Columns – Add or remove columns from the scan results page.

• Delete Scan – Deletes the selected scan reports.

• Export Table – Exports all the scan results.

• Import Scan Results – Allows you to import scan results of systems that were scanned locally using command-line.

• New Inventory Scan – Creates a new inventory scan.

Name

Displays the name of the scan task.

Description

Displays the task description that was given while creating the task.

Assignment

Displays the group or system name for which the task is assigned.

Note: This field is displayed if you created an assignment based scan.

Reset Baseline

Displays whether the task resets the baseline scan data or not.

Note: Ensure that you enable Reset Baseline when you make any changes to the scan task.

Synchronize Scan

Displays whether synchronize scan is enabled or not.

Include Inventory Items

Displays the inventory items included for scan in this task.

Systems Scanned

System Name

Displays the name of the system for which the scan is complete.

Is Latest

Displays whether the scan data is latest or not.

Note:

This field specifies whether the inventory scan result is the latest with respect to all the other scan tasks for the corresponding system.

IP Address

Displays the IP address of the scanned system.

Scan Date

Displays the date and time of the inventory scan.

Operating System

Displays the Operating System details like OS Type, OS Platform, OS version and build number.

Note:

A quick find search box has been added to search and retrieve information using keywords from the System Name and IP Address fields.

Systems Not Scanned

System Name

Displays the name of the systems that are yet to be scanned by the this task.

IP Address

Displays the IP address of the system.

Operating System

Displays the Operating System details like OS Type, OS Platform, OS version and build number.

Note:

A quick find search box has been added to search and retrieve information using keywords from the System Name and IP Address fields.

General Options

Show the Policy Auditor system tray icon (Windows only) - When selected, the Show Audit option appears under the System Tray of the client system.

Allow Audits

Color of time when audits can run.

Block Audits

Color of time when audits cannot runs.

Days of the week

Lists days of the week.

Hours

Lists hours during a day.

Audit Benchmark Result Information

• Audit End Time — Time and date the audit finished.

• Audit Name — Name of the audit.

• Audit Result Expiration Date — Date the audit results expire.

• Benchmark Name — Name of the benchmark.

• Benchmark Profile — Benchmark profile in the audit.

• Benchmark Version — Version of the benchmark.

• Days Until Results Expire — Number of days remaining until the audit results expire.

• Is Most Recent Result — True/false value showing if the audit result is the most recent.

• Maximum Score Allowed — Maximum score for a system when the benchmark is evaluated.

• PassFailUnknown Status — System status of passed, failed, or unknown when evaluated against the benchmark.

• Raw Score — Raw score for a system.

• Score — Benchmark score for a system (depends on the scoring system used).

• Score Category — Score category for an audited system (set these values based on your needs; for example, high, medium, and low).

• Scoring System — System used to calculate

• the score (for example, flat-unweighted).

• System Name — Name of the system.

• Waiver In Effect — True/false value showing if a waiver is in effect on a system.

Related Items

• Go to related System — Opens a page displaying system details.

• Go to related Computer Property — Opens a page displaying system properties.

Request Waiver

Click to request a waiver.

View Audit Results

Click to view the results for the audit.

Audit Benchmarks

Lists the benchmarks associated with the audit.

Audit Name

Displays the audit name is the name of the top panel.

Results timeframe

Uses calendar control to show the results for a selected day.

Today

Shows the audit results for today.

Clear

Clears the search results.

Find

Finds the system specified in the System box.

include expired results

Shows the last result if the audit is not up-to-date.

Results timeframe

Uses calendar control to show the results for a certain day.

Request Waiver

Requests a waiver for selected system.

Rule Systems

Lists systems.

Rule Title

Displays the title for selected rule.

Show sub-groups

Shows systems in sub-groups of System Group.

System

Type the name or tag of a system to search for.

System Group

Displays the group containing the selected systems.

System Name

Select by System Name.

System Tag

Select by System Tag.

Today

Shows the audit results for today.

Checks

Information on the checks contained by the rule. For rules with multiple checks, each check is listed, along with the Result and View links.

Description

Description of rule.

Fix Info

Information on correcting the configuration or vulnerability.

Results timeframe

Calendar control to show the results for a certain day.

Title (Checks pane)

Name of rule.

Title (Rule Details pane)

Check title.

Today

Audit results for today.

Clear

Clears search results.

Find

Finds the rule specified in the Rule box.

Results timeframe

Uses calendar control to show the results for a certain day.

Request Waiver

Selects rules and requests a waiver.

Result

Shows the result returned by the rule.

Rule

Enter the rule name to search for.

Rule group

Select group containing rule.

Today

Shows the audit results for today.

Benchmark Systems

Lists names of selected systems.

Clear

Clears search results.

Find

Finds the system specified in the System box.

Include expired results

Shows the last result if the audit is not up-to-date.

Results timeframe

Uses calendar control to show the results for a certain day.

Show sub-groups

Shows systems in sub-groups for the selected System Group.

System

Enter a search for systems by system name or system tag.

System group

Select the group containing the systems whose audits you want to view.

System Name

Select to search by system name.

System Tag

Select to search by tag associated with systems.

Today

Shows the audit results for today.

Audits pane

Contains list of audits.

Actions → Delete

Deletes selected audits.

Actions → Edit Audit

Edits selected audit.

Actions → Export OVAL

Creates an OVAL results file that conforms to the OVAL results schema. This file can be consumed by any tool that understands the OVAL results schema.

Actions → Export XCCDF

Creates a file that conforms to the XCCDF results schema, as defined in the XCCDF specification. It contains the latest results for all the systems and benchmarks in the audit. The results file could be consumed by any tool that understands the XCCDF results schema.

Actions → New Audit

Creates a new audit.

Actions → Patch SLAs

Opens a page that allows you to associate a system tag with a patch security ranking. By assigning a number of days to apply the patch, the feature allows you to monitor the level of patch compliance of your systems.

Check Name

Name of check

Close

Returns to previous page

XML

XML representation of check

Close

Closes page and returns to the Select Systems page.

Criteria Result

Shows the results of the criteria when you click Preview on the Select Systems page.

Days

The number of days that you have to patch the system and bring it into compliance.

Severity

The severity level of the patch. Patch severity levels are assigned by the vendor and often include levels such as critical, moderate, and low.

Tag Name

The tag associated with a system or group of systems.

Finding Date

Displays the date and time when the summary is create.

Status

Displays one of the compliance status.                

• Compliant

• Not compliant

Current Status

Displays the status for the current findings.

Detail Message

Displays whether the rule passed or failed for the current system.

Finding ID

Displays the automatically generated finding ID.

Is Current Finding

Displays whether the finding is the latest or not.

Is Finding Hidden

Displays if the finding is hidden or not.

Source

Displays the source engine used for the finding.

Summary Finding Date

Displays date and time when the finding summary was created.

Summary Message

Displays the rule configuration settings corresponding to the finding results for the current system.

Summary Status

Displays one of the compliance status.                

• Compliant

• Not compliant

Current Summary Total Violations Reported

Displays the total number of violations reported on the current rule.

Current Summary Total Violations

Displays the total number of violations.

Current Summary

Displays whether the finding details are complete with reference to the violation limit.

Accept

Accepts selected file integrity events.

• Accepting a single event makes the changed file the new baseline.

• Accepting multiple events creates baselines from the most recent file versions.

If the file integrity monitoring policy maintains versions (stores changes to text files), previous versions are discarded.

Compare

If versioning is enabled in the policy, this allows you to compare differences between a text file and another version or the baseline. You can also compare the file with another selected file.

Custom

Allows you to filter results based on a number of criteria.

Export table

Allows you to export the table in various formats, including CSV, XML, HTML, and PDF.

Presets

Choose whether to see events from the selected node in the System Tree or from the selected node and all child modes.

Purge

Removes all selected file integrity events older than a specified date. Selecting Purge Baseline Events removes file baselines.

Select in all pages

Selects all file integrity events on all pages from the selected group in the System Tree.

Compare

If versioning is enabled in the policy, this allows you to compare differences between the file and another version or the baseline. You can also compare the file with another selected file.

Presets

Choose whether to see events from the selected node in the System Tree or from the selected node and all child modes.

Purge

Removes all selected file integrity events older than a specified date. Selecting Purge Baseline Events removes file baselines.

Reset Baseline

Creates a new baseline of monitored files on the selected systems and monitors file changes against the new baseline.

Accept

Accepts selected file integrity events.

• Accepting a single event makes the changed file the new baseline.

• Accepting multiple events creates baselines from the most recent file versions.

• If the file integrity monitoring policy maintains versions (stores changes to the file), previous versions are discarded.

Compare

If versioning is enabled in the policy, this allows you to compare differences between the file and another version or the baseline. You can also compare the file with another selected file.

Purge

Removes all selected file integrity events older than a specified date. Selecting Purge Baseline Events removes file baselines.

Select all on this page

Selects all file integrity events from the selected group in the System Tree.

Select in all pages

Selects all file integrity events on all pages from the selected group in the System Tree.

Interface Name

Displays the name of the network interface.

Interface Type

Displays the type of the network interface.

Broadcast Address

Displays the broadcast address, if available.

Netmask

Displays the masked address of the scanned system.

Primary DNS Server

Displays the primary DNS server's IPv4 or IPv6 address.

Secondary DNS Server

Displays the secondary DNS server's IPv4 or IPv6 address.

Hardware Address

Displays the hardware address or MAC address of the scanned system.

flags

Displays all flags set to the interface.

DNS Suffix

Displays the DNS suffix, if available.

DHCP Server

Displays the DHCP Server address.

Default Gateway

Displays the default gateway address.

Address Type

Displays the type of address assigned to network interface.

UID

Displays the unique identifier for the network interface.

Operating System Name

Displays the name of the operating system.

Family

Displays the family of the operating system.

Version

Displays the version of the operating system.

Edition

Displays the edition of the operating system.

Architecture

Displays whether the operating system is of the 32-bit or a 64-bit architecture.

Type

Displays whether the operating system is a Server or Client type.

Build

Displays the build version of the operating system.

Patch Major

Displays the number of major patches installed for the operating system.

Patch Minor

Displays the number of minor patches installed for the operating system.

Vendor

Displays the organization name that published the operating system.

Local Address

Displays the local IPv4 or IPv6 address of the system.

Local Port

Displays the local port that a process is listening to.

Protocol

Displays the type of protocol that the process is using the port for.

Pid

Displays the process identifier number.

Created At

Displays the date and time when a process establishes a connection through this port.

Process Name

Displays the name of the process using the port.

Extension

Displays the file extension.

Executable

Displays the executable file name associated with the file extension.

Installed Location

Displays the installation location of the executable file that is associated with the file extension.

Version

Displays the version of the executable file.

Publisher

Displays the publisher of the executable file.

Digital Signature

Displays the digital signature verifier for the file extension.

Service Name

Displays the name of the service.

Display Name

Displays the Display name of the service.

Description

Displays a description about the service if provided by the service publisher.

Service Type

Displays the type of the service.

Start Type

Displays how the service is started.

Current State

Displays the status of the service during the inventory scan.

Audit data retention

Select to override global system settings for retaining findings and audit results.

• Override server setting — Override the system audit data retention settings.

• Only retain latest results for a system — Retain most recent audit results.

• Purge audit data after — Delete audit results older than the specified period.

• Remove related Findings results when purging Audit Results — Delete findings results when audit results are purged.

Audit Enabled

Select to enable the audit. Deselect to save the audit for future use.

Audit Result Data Stream Retention

Select to override global system settings for retaining data stream results.

• Override server setting — Override the system audit data stream retention settings.

• Only retain latest results for a system — Retain only the latest results for a system.

• Purge audit data stream result after — Delete audit data stream results older than the specified period.

Audit Result Detail Level

Select to override global system settings for Findings and OVAL information.

• Override server setting — Override the system audit result detail level settings.

• Generate and store Findings. Always retain thin OVAL Results. — Generate and store Findings. Also retain thin OVAL results. Thin results retain minimal information. This includes the OVAL ID and results. This does not include child elements or system characteristic information.

• Generate and store Findings. Retain full OVAL results for failed non-patch checks with no XSLT generated Findings. — Generate and store Findings. Also retain full OVAL results. Full results retain detailed information, allowing you to generate in-depth reports from the results. This includes the results of the evaluated definition, extended definitions, and information gathered from the system.

• Do not generate and store Findings. Always retain thin OVAL Results. — Does not generate or store Findings. Retain thin OVAL results. Thin results retain minimal information. This includes the OVAL ID and results. This does not include child elements or system characteristic information.

• Do not generate and store Findings. Retain full OVAL results for all failed non-patch checks. — Does not generate or store Findings. Retain full OVAL results. Full results retain detailed information, allowing you to generate in-depth reports from the results.

• Discard "Not Applicable" rule results. — Select to discard rule results that are not applicable.

Description

Type an optional description.

Description

Type an optional description.

Generate result data stream on target system

Select to override global system settings to generate the result data stream on the target system.

• Override server setting — Override the system settings for generating the result data stream on a target system.

• Do not generate result data stream — Does not generate result stream data for the target system.

• Full results with system characteristics — Generate full results with system characteristics for the target system.

• Full results without system characteristics — Generate full results without system characteristics for the target system.

• Thin results — Generates thin results for the target system. Thin results retain minimal information. This includes the OVAL ID and results. This does not include child elements or system characteristic information.

Name

Type a descriptive audit name.

Purge Archived Systems

Purge archived system audit data.

Results must not be older than (audit frequency)

Specify an audit frequency.

Use Foundstone to audit all systems

Run audits with Trellix Policy Auditor or McAfee Vulnerability Manager, even if the systems are managed.

Violation limit

Type the number of findings violations to show. Type 0 to show all findings, but carefully consider that showing all violations could show many thousands of violations, slow down the system, and consume database space.

Add

Adds the selected systems to the waiver.

Cancel

Cancels the process and returns to the Waiver Request page.

Select all in this page

Selects all systems appearing on the current results page.

Select all in all pages

Selects all systems appearing on all result pages.

Search Results

• System Name — Name of the system

• IP address — Internet Protocol (IP) address of the system

• MAC Address — Media Access Control (MAC) address. This is a hardware address that uniquely identifies each node of a network.

• User Name — Current user name of the system

• OS Type — Name of the Operating System

• OS Version — Version of the Operating System

• Tags — Any tags that are currently applied to the system

Add

Adds the selected systems to the audit.

Cancel

Cancels the process and returns to the Select Systems page.

Select all in this page

Selects all systems appearing on the current results page.

Select all in all pages

Selects all systems appearing on all result pages.

Search Results

• System Name — Name of the system

• IP address — Internet Protocol (IP) address of the system

• MAC Address — Media Access Control (MAC) address. This is a hardware address that uniquely identifies each node of a network.

• User Name — Current user name of the system

• OS Type — Name of the Operating System

• OS Version — Version of the Operating System

• Tags — Any tags that are currently applied to the system

Active Benchmarks pane

Lists all benchmarks selected by Label drop-down box.

Add Benchmark

Adds selected benchmarks to Selected Benchmarks pane.

Filter pane

Contains drop-down box to filter benchmarks by label.

Label

Contains drop-down box to filter benchmarks by selected label.

remove

Removes selected benchmark.

Selected Benchmarks pane

Contains benchmarks that have been selected to be in audit.

Selected Profile

Selects a benchmark profile to use in the audit.

Add Group

Opens Add Tree Group dialog box to add systems under selected node on System Tree.

Add System

Opens Quick System Search dialog box to search for systems by full or partial system name, IP address, MAC address, or user name.

Add Tag

Adds systems that match a specified tag.

Comparison

Selects comparison operator on Criteria page.

Criteria

Opens list of available properties. Use arrows to add or remove criteria. Use Comparison and Value to specify system properties.

Include these

Displays systems included in audit.

preview

Displays preview criteria result.

remove

Removes systems from include or exclude list.

System Tree and Tags

Selects systems by System Tree and System Tag.

Value

Type or select property value on Criteria page.

Edit SLA

Edit an existing Service Level Agreement.

Delete SLA

Delete an existing Service Level Agreement.

New SLA

Create a new Service Level Agreement.

Audit data retention

Shows the audit data retention settings specified on the Properties page of the New Audit Builder.            

Audit Enabled

Shows whether the audit is enabled as specified on the Properties page of the New Audit Builder. Audits that are not enabled do not run.            

Benchmarks

Displays the benchmarks included in the audit.            

Description

Displays the description of the audit.            

Frequency

Results must be no older than the specified frequency.            

Name

Displays the name of the audit.            

Systems

Displays systems, groups, or tags included and excluded in the audit.            

Violation Limit

The maximum number of violations that will be shown in reports. If the Violation Limit is 0, all violations will be shown.            

Add Group

Add a System Tree group and any subgroups to a waiver.

Add Systems

Add one or more systems to a waiver.

Remove Groups

Removes the selected groups from a waiver.

Remove Systems

Removes the selected systems from a waiver.

Benchmark

Name of benchmark. Disabled for exemption waivers.

Close

Close page without saving changes.

Delete Waiver

Deletes a waiver that has a status of Upcoming.

Expire Waiver

Expires (cancels) a waiver that has a status of in-effect.

Expires

The expiration date is when the waiver is no longer in effect. The date is not inclusive.

Grant Waiver

Grant waiver (only appears for those who have waiver granter permissions).

Granted By

User who granted waiver.

Notes

Description and reason for waiver.

Remove

Moves one or more selected rules from the Selected box to the Available box.

Request Waiver

Request waiver (not needed for those who have waiver granter permissions).

Rule

Name of rule. Disabled for exemption waivers.

Select

Moves one or more selected rules from the Available box to the Selected box.

Start Date

Start date of waiver. This is the date when waivers take effect.

Status

Waiver status.

System

System to which waiver applies.

Waiver Name

Name of waiver.

Waiver Type

Type of waiver. Choices are:

• Exception

• Exemption

• Suppression

As of

Select a date from the drop-down calendar to view the status of waivers as of the selected date.

Filter

Filter by selected System Tree group only or by selected System Tree group and its subgroups, if any.

New Waiver

Create a new waiver. Depending upon the permissions you have, you can request a waiver or request and grant a waiver at the same time.

Status

Filter waivers by status. Choices are:                

• All

• In-effect

• Expired

• Upcoming

System Tree

Filter waivers by groups in the System Tree.

Today

Show waiver status as of today.