Control Compliance Suite

Hi,

If i scan targets for vulnerabilty and i got one report. After reviewing that report I run some patch updation. Again I scan the same targets and got one report. So in that report how I come to know which are the new vulnerabilities, which are the old, reopen. Is there any option for the same. Please assist.

Friend

If you are looking for a 'baselining' feature that compares yesterday's snapshot against today's, RMS/DCC can do that but CCS/R&A cannot.  Which one are you using?

If R&A, have you performed a new data-import-job to refresh all the Repository data before re-evaluating?

KDH

Hi,

Thanks for reply.

We are using RMS. I know there is one option with the help of this we can compare two reports. But I want to know that without comparing new with old report, is there any option in new report or any extra field which indicate this is new bug, this is old, this is reopen bug.

Friend

Baselining is the only way to accomplish your goal.  This is because a verdict of 'old', 'new', and 'reopen' requires that somebody remember whether the issue has been seen before.  RMS's only memory is its previous query results, and baselining is the way to utilize them.

CCS, on the other hand, has a more sophisticated memory (the Repository), but it does not have a feature specifically for this request.  CCS is geared toward the administrator who says "I don't care how long it's been a problem, just tell me what's broke and how to fix it".

KDH