Microsoft WinServ2k3 -Member-Server-DISA-Platinum/Gold

General support questions for the Secutor Prime product.
Nathan_Hale
Contributor
Posts: 5
Joined: Mon Mar 08, 2010 10:34 am

Microsoft WinServ2k3 -Member-Server-DISA-Platinum/Gold

Postby Nathan_Hale » Mon Mar 08, 2010 11:11 am

Does anyone know what additional controls were added to the Member-Server-DISA-Platinum profile of the SCAP-Win2003-MS-XCCDF-Beta-v3.xml from the Member-Server-DISA-Gold?

Has anyone conducted a gap-analysis of the two profiles?

Randy
Site Admin
Posts: 28
Joined: Sat Feb 24, 2007 9:48 am

Postby Randy » Mon Mar 15, 2010 8:21 am

Nathan,

To help you we did a diff analysis of the two profiles. The Platinum profile is derived from the Gold profile. The Platinum is the same as Gold with the following additions:

- PosixSubsystemFileComponents (Posix subsystem file system components not present)

- POSIXSubsystemRegistryKeysInstalled (Posix subsystem registry keys not present)

- ShutDownIfUnableToLogSecurityAudits (Shut down if unable to log security audits)

- UnsignedDriverInstallationBehavior (Warn when unsigned driver is installed)

- LANManagerAuthenticationLevel (Require Kerberos v5)

- ClearPagefileOnShutdown (Clear virtual memory pagefile when system is shutdown)

- FIPSCompliantEncryption (Enable FIPS compliance)
-- Randy
ThreatGuard, Inc.

Nathan_Hale
Contributor
Posts: 5
Joined: Mon Mar 08, 2010 10:34 am

Postby Nathan_Hale » Mon Mar 29, 2010 12:47 pm

Thanks for the reply, Randy.


Return to “Secutor Prime Support”

Who is online

Users browsing this forum: No registered users and 1 guest