Lumension Security Configuration Management

• This NIST validation ensures accurate assessments of policy checklists and configurations as defined in the National Vulnerability Database.

• SCAP validation provides another level of confidence.
• Agency endpoint configurations will be compliant with Mandate standards.

• Ensures policy management via extendable and customizable architecture providing the ability to add, create, define, edit and import/export security configuration policies and checklists based on industry standards in an easy-to-edit XML format.

• Create and maintain your own policies.
• Manage and interpret different policies and results from different tools with integrated scanners and agents.

• Delivers a flexible mechanism to assess and apply appropriate policies to applicable systems.
• Combination of standard configuration checklists from variety of sources with Lumension repository of software vulnerabilities delivers information with context to properly remediate.
• Delivers actionable information.

• Simplify compliance through best-practice configuration checklists.

Lowers TCO

• Automation of configuration issue identification & correction lowers security operating costs.

Reduces Endpoint Risk

• Reduce security incidents and strengthen your security posture.
• Continuously manage & enforce your policy.

• Leverages automated remediation and policy enforcement with Lumension Content Wizard.

• Maintain your compliance by enforcing policy.

• Demonstrates policy compliance with high- and low-level reports on the status of your endpoint configurations.
• Technical controls and asset entities are consolidated into a single UI.
• Intelligent Dashboard Displays.

• Reduce IT overhead via standardized and secure configuration settings.
• Increase operational efficiency by managing all vulnerability activities from a single tool.

• Automates security checks including event log policy settings, file permission settings, local policies group, system services group, network settings, system settings, windows components, local user policy setting, security patches, firewall settings, IE settings application settings.

• Detail and roll-up results views provide instant visibility into configuration posture.

Ensures Constant Audit-Readiness

• Maintain constant audit readiness through the automated collection and centralization of security configuration results.

• Lumension Security Configuration Management is expanded functionality on top of leading products such as Lumension Patch and Remediation and Lumension Scan.

• Ensure regulatory compliance through risk assessment of security configurations (e.g., screensaver configurations, password complexity, running services).
• These capabilities are built on top of proven vulnerability management solutions.

Note: Lumension Endpoint Management and Security Suite must be installed on an English operating system using any English locale (en-US, en-UK, en-CA, and so on) in its default configuration.

Note: If not present, Microsoft .NET Framework 3.5 is installed with Lumension Endpoint Management and Security Suite.

Supported database servers can be installed in the following locations relative to the Lumension Endpoint Management and Security Suite server:

• Locally in named instances installed by Lumension Endpoint Management and Security Suite.
• Locally in named or default instances that are preexisting.
• Remotely in named or default instances that are preexisting.

Note: If an instance of SQL Server is not present on your target server, SQL Server 2008, Express Edition with SP1 is installed with Lumension Endpoint Management and Security Suite (if you are not using a remote instance of SQL Server)