Control Compliance Suite
charliechye
|
November 18th, 2009
Hi there, I have migrated the ESM policy to CCS standards and imported into CCS. The issue I face is the Target Types of the imported standard is being recognized as "Windows 2003 ESM Agents Machines". It seems that that is how CCS decide whether to show that standard to be selected when going through the Data Collection Wizard. While I can see the usual CIS standard that caters for Windows 2003 Server in Data Collection wizard, these imported standards won't appear as an option (basically I think it is because the Machine Types of the asset is Windows 2003 Server). How can I make sure these standards appear when doing data collection for Windows Servers? Feel free to correct my understanding.
Appreciate any sharing. Thanks!
Regards
Charlie Chye
0 comments
Ahmad Ateayh
|
November 18th, 2009
Good day
I have an issue when generate Collection-Evaluation-Reporting job, but before i explain this issue i will explain my CCS Tepology as below:
1- I have SVR-CCS-01 as reporting server that have the following Roles DPS and Application servers.
2- I have SVR-CCS-02 as RMS server (Information Server).
everything is OK when i importing assets or run Collection-Evaluation-Reporting job, but some times i have the following Error message when i run Collection-Evaluation-Reporting job as below:
"Asset AQABAVIEW\SVR-SQL-03 is unavailable. Verify that it is available and reachable."
on the other hand, i guaranteed the following:
1- No firewall exist that prevent the traffic to pass.
2- The Remote Registry and Server services running on the target machine.
3- The CCS Admin has the full privileges on the target machine (Member of Domain Admin Group).
4- The system configured and communicated very well.
So please there is someone help to solve this issue
Best...
0 comments
wizwizard
|
November 16th, 2009
Hi all,
I would like to know if it is possible to create new checks based on custom fields which are not provided in the platform browser in the check wizard. I read some of the other posts that it is by using xml to create complex checks but what about adding custom fields (e.g. checking AUDIT_SYS_OPERATIONS = TRUE) Thanks all.
Thomas
0 comments
charliechye
|
November 12th, 2009
Hi there, I am currently working on generating reports in CCS 9.0.1. There are total 25 predefined report templates. However, I can see only about 8 of them available for selection when I run a collection-evaluation-report job against an asset (Solaris machine). Wonder anyone can share what is the criteria/precondition before a report template can be selected in the job?
Regards
Charlie Chye
0 comments
edietz@stclouds...
|
November 12th, 2009
Join us for our next Twin Cities Security & Compliance User Group meeting on Wednesday, March 3 from 10:00 am to 2:00 pm at Unisys in Egan, MN.
The tentative agenda for this meeting is:
Control and Compliance Suite: Presentation by James Bly, Symantec Compliance Specialist
SEP 11.5 Update: Presentation by Jim Waggoner, Symantec Endpoint Protection Product Manager
SEPM at Unisys: Presentation by Tony Asher, Unisys, Windows System Engineering
Where:
Unisys
3199 Pilot Knob Road
Eagan, MN 55122
0 comments
charliechye
|
November 11th, 2009
Hi there,
I am looking to understand the reason behind the import of Windows Asset taking hours. I notice a task is being fired off at the RMS when I submit an import asset job in CCS. I went to RMS console and can see the multiple records being accepted/rejected. The number of records could be in terms of thousands even when my filter is set to specific machine name at the CCS. Anyone knows how does RMS going about querying the network? It will be great if there is any document around explain how the different components work in CCS/RMS.
Thanks in advance.
Regards
Charlie Chye
6 comments
Joe Pendry
|
October 29th, 2009
This week, Symantec participated in the 5th Annual IT Security Automation Conference held in Baltimore from October 26-30. This event is jointly sponsored by National Institute of Standards and Technology (NIST), National Security Agency (NSA), Defense Information Systems Agency (DISA), Department of Homeland Security (DHS).
The event brought together some of the leading organizations in government and industry seeking to address the basic challenge a common approach to securing government environments and information. And while the notion of common security standards isn’t new, the amount of initiatives that have complicated this area seems to be growing exponentially. The conference touched on a number of top IT initiatives that provide the top challenges and drive the most important security initiatives in government today:
Cloud Computing
Health Information Technology (IT)
Health Information Portability and Accountability Act (HIPAA)
Federal Information Security...
Federal Government, Security, Defense & Intelligence, Compatibility, Control Compliance Suite, Data Loss Prevention (Vontu), General Symantec
0 comments
samir.saadah
|
October 25th, 2009
Dear All,
is there any deference between /(S-1-15-19)|(S-1-15-20) and {S-1-15-19,S-1-15-20}
in the predefine Standard for Windows 2003 DC there is a check for (Replacing token) SIDs.
i try to create a custom check with the same configuration but i replace /(S-1-15-19) | (S-1-15-20)/ with {S-1-15-19,S-1-15-20) but it dos'nt work any suggested of how the format for the list
Best regards,
Samir
2 comments
clarkey
|
October 12th, 2009
Hi,
I need to run a report in RMS 9.0 that show the effective permissions evidence on, and can do this by modifying a standard template.
However, i cannot export the 'evidence' into excel - is there a way of doing this?
1 comments
chungkc
|
October 7th, 2009
Hi,
I'm in a bind now, on how to create checks to monitor permissions on files and registries using CCS 9.0. I tried to edit some of the registry checks copied over from out-of-box standards, but it gives me error such as "This is a complex check and modifying it is not supported through the check editor". Can anyone help, pls?
Thks and rgds,
KC
4 comments
Ahmad Ateayh
|
September 28th, 2009
Hi
Actual I have a policy and I mapped it on a control statement also I published this policy
and all audience responded to it via the web portal, and when I run one of policy report
template the report show me empty result .
So please anyone here can help me by telling me how to solve above issue, and If I
followed incorrect procedure for policy please guide me for the correct procedure for policy.
Best regards
Ahmad Ateayh
Technical Consultant
Versatile Solutions Limited Liability Co.
Riyadh 11353, K.S.A, P.O.Box 255390
Mobile +966553053849
0 comments
ohzone
|
September 23rd, 2009
We've had numerous questions regarding Windows 7 and which Symantec products will support the new OS and when. In effort not to duplicate information and keep updates as current as possible we are providing this link to the Symantec.com site: http://www.symantec.com/business/theme.jsp?themeid=windows7
This FAQ page contains a list of products and release dates along with links to the individual product pages.
Altiris Client Management Suite, Security, Altiris Deployment Solution, Backup and Archiving, Endpoint Management and Virtualization, Backup Exec, Backup Exec System Recovery, Windows, Control Compliance Suite, Data Loss Prevention (Vontu), Endpoint Encryption, Endpoint Protection (AntiVirus), Endpoint Protection Small Business, Enterprise Vault, Ghost Solution Suite, NetBackup, Network Access Control, pcAnywhere, Wise Application Packaging, Wise Installation Development, Workspace Streaming, Workspace Virtualization
5 comments
Patrick Birch
|
September 22nd, 2009
You can find how CCS 9.0 and 9.0.1 works with LiveUpdate here:
seer.entsupport.symantec.com/docs/327237.htm
You can read other topics on LiveUpdate in the Control Compliance Suite Windows Documentation Resources > How To > Managing.
0 comments
Patrick Birch
|
September 22nd, 2009
You can find how to view the licenses here:
seer.entsupport.symantec.com/docs/327236.htm
You can find how to manage the licenses here:
seer.entsupport.symantec.com/docs/327237.htm
0 comments
Patrick Birch
|
September 22nd, 2009
In Symantec Control Compliance Suite 9.0 and 9.01, you should run the Scheduled Reporting Database Syncronization job before you run a report.
seer.entsupport.symantec.com/docs/332579.htm
0 comments
neil_rogers
|
September 17th, 2009
Everyone knows USB drives are a huge chance for losing data. I found a way to make that worse.
I bought a USB drive for my wife to use on her personal laptop. We all carry at least one of these. Her drive stopped be recognized, let alone work on the system.
Since it had only been used 3 times, i wanted the manufacturer to replace it under warranty. They offered to exchange it only if i send it back with drive intact. I was shocked that they required me to send it back. They had a fax number that if i was with the government and can send letterhead of such an organization asking to not send the drive, and they will exempt it.
So a new drive cost $60-$150 depending on size. Having personal, let alone any corporate data on the drive and it falls into the wrong hands, which if it is being sent in a box that says what company makes the drive or is addressed to the company, it would be easy for someone to take a look inside to...
Altiris Client Management Suite, Emerging Threats, Security, Evolution of Security, Endpoint Management and Virtualization, Online Fraud, Security Risks, Vulnerabilities & Exploits, Control Compliance Suite, Critical System Protection, Data Loss Prevention (Vontu), Endpoint Encryption
1 comments
Jeff Vandervoort
|
September 13th, 2009
Prelude
Initially, I wrote this about Backup Exec, because that's where I ran into this problem. I'm also a SAV & SEP veteran but don't recall seeing this heinous language in their KB articles. So maybe it's a Veritas thing. But, whatever...
...then it occurred to me that while BE may (or may not) be the only Symantec enterprise product to which the symptom applies, the cure is universal. Because it bridges a huge gap between the goals of Symantec Sales, Support, Connect, Knowledge Base, and Product Managers. So I've taken the unusual-and-hopefully-not-presumptuous step of tagging it to all available products. It is global.
That kinda makes it Ideas spam, I know. Never done it before; probably never will again. Hope you can forgive me!
Don Quixote Battles Symantec
Two KB articles I've browsed recently contain variations on this boilerplate (emphasis mine):
"There are currently no plans to address this issue by way of a patch or hotfix in the...
11.x, 12.x, 8.x, Altiris Client Management Suite, Security, 10.x, 11.x, 7.x and Earlier, Altiris Deployment Solution, Vision User Conference, 10.x and Earlier, 9.x and Earlier, Altiris IT Asset Management, Storage Management, Altiris Notification Server, Backup and Archiving, Altiris Recovery Solution, Clustering and Replication, Altiris Server Management Suite, Endpoint Management and Virtualization, Inside Symantec, Brightmail Gateway, Cluster Server One, Control Compliance Suite, Critical System Protection, Data Loss Prevention (Vontu), Dell Management Products, Endpoint Encryption, Endpoint Protection (AntiVirus), Endpoint Protection Small Business, Enterprise Security Manager, General Symantec, Ghost Solution Suite, Helpdesk Solution, Hosted Mail Security, HP Management Products, IM Manager, Mail Security for Exchange/Domino, Mobile Security, Network Access Control, Online Backup, Online Storage for Backup Exec, pcAnywhere, Replication Exec, Security Information Manager, SecurityExpressions, ServiceDesk, SFHA Management (SFM, VIAS, VOS), Storage Foundation for Windows, Symantec Connect, Symantec Vision, Volume Replicator, Web Gateway, Wise Application Packaging, Wise Installation Development, Workflow Solution, Workspace Corporate, Workspace Remote, Workspace Streaming, Workspace Virtualization
15 comments
AndyN
|
September 1st, 2009
Join us for our next New York Security and Compliance User Group meeting on Wednesday, October 14 from 12:00 pm to 3:30 pm.
This meeting will include presentations from Symantec Product Management covering agentless data collection, CCS reporting, analytics, and much more. Come prepared with your questions, ideas, and experiences to share with our Group!
Lunch will be served.
Agenda:
12:00 pm - Lunch
12:30 pm - Announcements & Introductions
01:00 pm - Agentless Data Collection
02:00 pm - CCS 9 Reporting & Analytics Overview
02:30 pm - What's New in CCS 9.0.1 and Roadmap Update
03:15 pm - User Group Planning & Prizes
Where:
Citigroup
283 King George Rd
Building B, 2nd Floor
Warren, NJ 07059
6 comments
samir.saadah
|
August 28th, 2009
Dear All,
I need your help, What is the Best way to map a customer polcies to CCS Policies, dos any one have a solution, insted of manual map.
2 comments
JamieMurdock
|
August 28th, 2009
If you have missed patches or updates, do you have to apply ALL missing patches/updates or the most recent ones?
2 comments
notjet
|
August 27th, 2009
I would like to be able to export all Bindview queries (custom and canned), including the email destination they are going to after running. Is there a way to do this? I am hoping for several things from this: 1. I want to be able to confirm that the reports are all going to valid email addresses. 2. I want to confirm that they are fairly distributed (not 80% to one person). 3. I want to confirm that the SQL in the query seems reasonable by giving it to a non-user who knows SQL. Thanks.
1 comments
AndyN
|
August 21st, 2009
Join us at our next South Florida Security & Compliance User Group meeting on Thursday, September 17 at the IGFA Fishing Hall of Fame & Museum from 8:30 am to 12:00 pm.
This meeting will include a presentation from Symantec on Control Compliance Suite and roundtable discussions on security and compliance.
Breakfast will be served!
Agenda:
08:30 am - Breakfast
09:00 am - Announcements & Introductions
09:15 am - Control Compliance Suite Presentation
10:30 am - Roundtable Discussions
11:45 am - User Group Planning & Prizes
Where:
IGFA Fishing Hall of Fame & Museum
300 Gulf Stream Way
Events Hall
Dania Beach, FL 33004
954-924-4312
4 comments
JamieMurdock
|
August 19th, 2009
I saw the link to the CCS v.9.0 User Guide. Can anyone point me to a User Guide for 8.6?
2 comments
AndyN
|
August 6th, 2009
Join us for our next Iowa Security & Compliance User Group meeting on Wednesday, September 16 at the State of Iowa Judicial Branch.
This meeting will include a presentation from a member of our User Group and we will also have roundtable discussions on security, compliance, and Enterprise Vault.
Lunch will be served!
Agenda:
12:00 pm - Lunch
12:45 pm - User Group Member Presentation
01:30 pm - Roundtable Discussions on Security, Compliance and Enterprise Vault
02:45 pm - User Group Planning & Prizes
Where:
State of Iowa - Judicial Branch
1111 E Court Avenue
Des Moines, IA 50319
Security, Backup and Archiving, User Group, Control Compliance Suite, Endpoint Protection (AntiVirus), Enterprise Vault
1 comments
GuidoSanchidrian
|
July 29th, 2009
I get many requests regarding cloud computing and in particular inquiries regarding the security approach on cloud computing. A couple of while ago I read a very good Blog entry from Dr. Guy Bunker (www.viewfromthebunker.com) who brought the problem to the straight point:
"One of the problems with ‘the cloud’ is that it has been tough up until now to distinguish the different variations or even acknowledge that there are different cloud formations out there, and that one size does not fit all. So, are you after software (application)-as-a-service or a platform-as-a-service, are you thinking about in-house clouds or external ones, how about having proprietary or open API access? You see, the possibilities soon mount up. Of course, there is no single answer and different applications will be best suited to different cloud solutions. Understanding the differences will help you to make a good choice and reading the paper will remove some of the cloudiness around the cloud...
Security, Evolution of Security, IT Risk Management, Best Practice, Security Risks, Brightmail Gateway, Control Compliance Suite, Endpoint Protection (AntiVirus), Security Information Manager
0 comments