Control Compliance Suite

I know it can be done but should it be and what is the best way?

Right now it looks like CCS is primarily written to perform compliance monitoring and reporting on just servers, but we have a new requirement to have a tool that checks for workstation compliance as well. We've suggested using CCS but there is one caveat, many of our workstations are laptops that come and go off the network. How does CCS handle this? Should we install the bv-agent on every workstation so that they check in regularly?

What is everyone elses thoughts on using CCS for workstation compliance monitoring and reporting?

 

CCS Can be used to check your workstations for compliance at a point in time, however, as you describe, there is a drawback that you can miss systems from regular analysis when they are disconnected from the network.

An approach would be to use SCSP (Critical Systems Protection) to lock systems down or Symantec's Altiris or Sygate (Management or Network Access Control) to control the system and confirm that you can keep the system updated when you reconnect to the network.

Consider layering your analysis to provide a thorough analysis of the system along with keeping it updated when it reconnects to the network.

Regards,
Paul