Configuration Compliance Module - Retina CS Console Add-on

Overview:

Define & manage enterprise-wide security policies to help monitor compliance to industry and internally developed configuration benchmarks.

In combination with the Retina CS solution, eEye’s Configuration Compliance Add-On Module simplifies how you audit and report on common industry configuration guidelines and best practices. With built-in templates for Windows operating systems and applications from FDCC, NIST, Microsoft, and more, you’ll find it easier than ever to prioritize and manage risk, audit configurations against internal policies or external best practices, and centralize reporting for monitoring and regulatory purposes.

While many organizations focus on implementing strong controls over systems and applications, they often fail to formalize, automate, or optimize the business processes that keep their Windows environment secure. Ensuring that systems are configured according to policy is critical to reducing risk, improving security, and demonstrating compliance. However due to constantly changing networks and systems combined with time consuming monitoring and reporting, this is often a challenge. Organizations need to take corrective actions when changes or threats impact their security and compliance posture.

Fast Facts:

• Automatically audit configurations against industry baselines and benchmarks.
• Keep up-to-date with industry benchmarks via eEye's benchmark library.
• Prioritize and manage risks by adhering to standard industry benchmarks or customize configuration baselines for your needs.
• Built-in vulnerability reporting and integration with Retina Insight for delta dashboards and drill downs.
• Streamlined reporting for government and corperate standards.

Features & Benefits:

Simpified Configuration Compliance
The eEye Configuration Compliance Add-On Module simplifies configuration compliance with drag-and-drop templates for Windows operating systems and applications from FDCC, NIST, STIGS, USGCB and Microsoft. Prioritize and manage risk, audit configurations against internal policy or external best practice and centralize reporting for monitoring and regulatory purposes.

Complete Configuration Assessment
Provides a comprehensive view of Windows devices by retrieving software configuration that includes audit settings, security settings, user rights, logging configuration and hardware information including memory, processors, display adapters, storage devices, motherboard details, printers, services, and ports in use.

Out-of-the-box Configuration Auditing
Out-of-the-box configuration auditing, reporting, and alerting for common industry guidelines and best practices to keep your network running, available, and accessible.

Configuration Auditing
Compare assets to industry baselines and best practices to check whether any software or hardware changes were made since the last scan that could impact your security and compliance objectives.

Up-to-date Baselines
With this module, a complete configuration compliance benchmark library keeps systems up-to-date with industry benchmarks including changes to benchmarks and adjustments for newer operating systems and applications.

Built-in Templates
Built-in templates for Windows operating systems and applications from FDCC, NIST, STIGS, USGCB, and Microsoft.

Customized Best Practices
Customized best practices for improved policy enforcement and implementation for a broad set of industry templates and standards including built-in configuration templates for NIST, Microsoft, and more.

Oval 5.6 SCAP-Certified
Retina is a OVAL 5.6 SCAP-certified scan engine and interpreter.

Streamlined Reporting
Streamlined reporting for government and corporate standards with built-in vulnerability reporting and integration with Retina Insight for delta dashboards and drilldowns.

Screenshots:

System Requirements:

RETINA CS 2.0.X + AND RETINA INSIGHT 2.0.1 +
WINDOWS SERVER 2003 SP2 OR HIGHER (32-BIT), SERVER 2008 (32- BIT AND 64-BIT), OR SERVER 2008 R2 (64-BIT)
MICROSOFT SQL SERVER 2005 SP3 OR 2008 SP2 (STANDARD OR ENTERPRISE EDITIONS ONLY)
MICROSOFT SQL SERVER REPORTING SERVICES & ANALYSIS SERVICES
INTEL DUAL CORE 2.0GHZ (OR COMPATIBLE, MINIMUM)
4GB MINIMUM / 8GB RECOMMENDED (REQUIRES X64 OS)
500MB SOFTWARE INSTALL / 40GB DATABASE MINIMUM
NETWORK INTERFACE CARD (NIC) WITH TCP/IP ENABLED
MICROSOFT .NET FRAMEWORK 3.5 (INCLUDED WITH INSTALLER)
MICROSOFT IIS 6.0 OR HIGHER ASP.NET
ADOBE FLASH PLAYER 10.0 OR HIGHER
ORACLE SUN JAVA VERSION 6 UPDATE 21 OR HIGHER
MICROSOFT SILVERLIGHT 4.0 OR HIGHER

Documentation:

Download the Retina CS Configuration Compliance Datasheet (.PDF)