Community
 
 
 

Radia - General Discussions

1323 followers
 
Avatar
Ishant Walia

Run Security ,vulnerability, compliance Scan

Dear Experts,

I need to run security, compliance, vulnerability scan .

I'm not able to find any option for this.

Could you please help in this.

 

5 comments
0

Please sign in to leave a comment.

 
 

Previous 5 comments

Avatar
Arne Halsteinslid

Hi Ishant!

Which version of Radia do you have?

If you check the Radia Console 'Configuration' tab under 'Infrastructure Management - Job Action Templates' there should be one for 'Security Connect', but you may have to enable it for it to show up in the job creation wizard.

You enable it by selecting it and checking 'Enable Template'.

The following command, when executed from the 'Agent' directory, will also kick off a security connect:
radntfyc localhost radskman cop=y,dname=SECURITY

Before you start looking into Security and Compliance, I would also advice that you contact Accelerite Support and ask for relevant fixes. The 'out-of-the-box' CSDB 'Security' may not very useful, and may fail to install and deliver data.

Comment actions Permalink
Avatar
Ishant Walia

And what about vunerability and compliance there isn't any Job template for these .

Comment actions Permalink
Avatar
Arne Halsteinslid

Sorry, forgot to mention:

A 'Security Connect' will run a complete desired state check on all CSDB SECURITY.ZSERVICE instances the target machine has policies for, both the ones for Compliance, Vulnerability and Security Tools. This also means you have to assign policies for the CSDB SECURITY.ZSERVICE instances you wish to install and execute.

Again, please check with Accelerite Support concerning updated CSDB SECURITY domain content and other fixes.

 

Comment actions Permalink
Avatar
Ishant Walia

Please clarify below things.

I just need to run Security Scan and it will scan all the devices and get the data for Security, Vulnerability and Security ?

Do we need to assign any policies also while running security scan ?

 

 

Comment actions Permalink
Avatar
Arne Halsteinslid

Concerning you questions:

I just need to run Security Scan and it will scan all the devices and get the data for Security, Vulnerability and Security ?

--> Answer: Correct, providing you have the necessary CSDB SECURITY domain content (ZSERVICEs, PACKAGEs etc.). Again, the basic, out-of-the-box content was not of much use the last time I checked out Security and Compliance. You need the content you get when you actually license the Security and Compliance module (plus fixes, if any)

Do we need to assign any policies also while running security scan ?

--> Answer: Yes, you must assign policies for the CSDB SECURITY ZSERVICEs you with to install and execute, otherwise the scan will produce no Reporting data

Comment actions Permalink

Top Contributors