Release Notes. Audit Integration Component 6.1. Notice. September 13, 2006

Transcription

1 Release Notes Audit Integration Component 6.1 September 13, 2006 Notice The content in this document represents the current view of Altiris as of the date of publication. Because Altiris responds continually to changing market conditions, this document should not be interpreted as a commitment on the part of Altiris. Altiris cannot guarantee the accuracy of any information presented after the date of publication Altiris. All rights reserved. Altiris, the Altiris logo, BootWorks, Inventory Solution, LabExpert, PC Transplant, RapiDeploy, and RapidInstall are registered trademarks of Altiris, Inc. in the United States. Carbon Copy is a registered trademark licensed to Altiris, Inc. in the United States and a trademark of Altiris, Inc. in other countries. Altiris express, Deployment Server, Deployment Solution, My IT Forum, Notification Server, Vision, Web Reports and other product names are trademarks of Altiris, Inc. in the United States and other countries. AuditExpress, Scan on Detect, and SecurityExpressions are trademarks of Pedestal Software Inc. in the United States. Audit on Connect and Audit on Detect are trademarks of Pedestal Software inc. in the United States and other countries. Pedestal Software, Inc. is a wholly owned subsidiary of Altiris, Inc. All other brand names are trademarks or registered trademarks of their respective companies. Information in this document is subject to change without notice. For the latest documentation, visit our Web site at RNT: D

2 Contents SECTION 1 OVERVIEW Document Purpose Background Additional Documentation Altiris Information Resources Contacting Customer Support... 4 SECTION 2 INSTALLATION AND UPGRADING System Requirements Where to Download the Software Upgrade Steps... 5 SECTION 3 WHAT S NEW? SecurityExpressions data integrated Solution name change... 6 SECTION 4 KNOWN ISSUES Connecting to a SQL-Server security-audit database Security-audit database must be case insensitive Installing SecurityExpressions Using Altiris Agent to perform agentless auditing in the security-management application Running the solution on Altiris Console 6.5 (AeXHD14049) Errors when generating Web reports with no data (LB44094) Security-policy categories and SecurityExpressions... 7 RELEASE NOTES AUDIT INTEGRATION COMPONENT PAGE 2 OF 8

3 Section 1 Overview 1.1 Document Purpose Please read the following document carefully. This document lists important issues and topics concerning the product. We recommend that you read the entire document before you install the software. 1.2 Background The Audit Integration Component adds security-audit features to the Notification Server infrastructure to help you eliminate security vulnerabilities throughout your organization s global network. The solution transfers security-audit data from the security-management application into Notification Server so you can apply the data to Notification Server tasks such as updating collections, refining notification policies, designing reports, and creating Altiris Helpdesk and Alert Management tickets. 1.3 Additional Documentation Altiris product documentation is available in Microsoft HTML Help (.CHM) and Adobe Acrobat (.PDF) formats. To view Altiris product documentation in.pdf format, use Adobe Acrobat Reader (available at: Documentation files are installed in the following directory on the Notification Server computer: C:\Program Files\Altiris\eXpress\Notification Server\NSCap\Help The following documentation is provided with this solution: Audit Integration Component User s Guide Audit Integration Component Help You can access documentation from the Altiris Console by clicking the following icons in the upperright corner of the console: Access the contextual online help by clicking the online help icon. Access an index of all installed help by clicking the index icon Altiris Information Resources Source Altiris Documentation What Information it Includes Information about new features, update instructions, and known issues for each release. Includes Altiris formal documentation such as Release Notes, Help, Reference Guides, Best Practice Articles, and Where to Find it RELEASE NOTES AUDIT INTEGRATION COMPONENT PAGE 3 OF 8

4 Altiris Knowledgebase Altiris Juice: an online magazine for Altiris users Online Forums Technical Reference Articles. Comprehensive collection of articles, incidents, and issues for Altiris solutions. Best Practices, tips and tricks, and articles for users of Altiris solutions. Forums for Altiris solutions and suites Contacting Customer Support Altiris has performed extensive testing before releasing the product. If you find a problem or have questions, please contact customer support at by completing the form provided. You may also send an message to support@altiris.com or call World Wide Web: RELEASE NOTES AUDIT INTEGRATION COMPONENT PAGE 4 OF 8

5 Section 2 Installation and Upgrading 2.1 System Requirements Before you install the software, make sure you meet all of the following hardware and software requirements for both the integration component and the security-management application. Notification Server 6.0 Service Pack 2 or later, installed and ready to use a new, dedicated, case-insensitive database manually created with Microsoft SQL Server 2000 or later to use as the security audit database, with a system data-source name (DSN) already set up and pointing to this database. This must be a separate SQL server database, although it can reside within the same SQL Server. if using SecurityExpressions as the security-management application, version or later all system requirements listed in the security-management application s release notes Altiris Agent installed on every computer you plan to audit. If you plan to audit any UNIX or Linux computers using the security audit agent, you must have Altiris Agent for UNIX and Linux installed on Notification Server. 2.2 Where to Download the Software The Audit Integration Component solution can be downloaded from Notification Server s Solutions Center to install for the first time or upgrade from previous versions. AuditExpress is included with the solution. You can install AuditExpress straight from Altiris Console. SecurityExpressions is not included with the solution. You can download it from to install for the first time or upgrade from previous versions. 2.3 Upgrade Steps This version of the solution allows you to upgrade the integration component seamlessly from previous versions using the Solutions Center. From there, you can upgrade the security management application and any security audit agents you use. 1. Download the integration component from the Solutions Center to update features and automatically restore data. 2. Upgrade and configure the security-management application. 3. Upgrade any security audit agents installed on target computers. RELEASE NOTES AUDIT INTEGRATION COMPONENT PAGE 5 OF 8

6 Section 3 What s New? 3.1 SecurityExpressions data integrated Now you can use the solution to transfer audit data from SecurityExpressions as well as AuditExpress to Notification Server for use with Notification Server tasks. Since both securitymanagement applications use the same security audit database, this is made easy. The same security audit agents, collections, notification policies, and Web reports work with both kinds of data. 3.2 Solution name change Since you can use both SecurityExpressions data and AuditExpress data with the solution, the solution s name changed from AuditExpress Integration Component to Audit Integration Component. The name was changed in both the solution s interface and in the documentation. RELEASE NOTES AUDIT INTEGRATION COMPONENT PAGE 6 OF 8

7 Section 4 Known Issues 4.1 Connecting to a SQL-Server security-audit database While Notification Server automatically creates the SQL Server database it uses when you install it, the security-management application does not create SQL Server databases. Since the integrated component communicates with SQL Server databases only, you or your database administrator must manually create a new, dedicated, case-insensitive security audit database before installing the security-management application. This must be a separate SQL server database, although it can reside within the same SQL Server. After installing the security-management application, you must connect it to this newly created database. When you run the security-management application for the first time, it creates the necessary database tables for you. 4.2 Security-audit database must be case insensitive When you create the security audit database using Microsoft SQL Server, you must make sure the database you create is case insensitive. To learn more about creating case-insensitive databases using Microsoft SQL Server, check Microsoft s documentation. 4.3 Installing SecurityExpressions Whereas AuditExpress comes with the solution and you can install AuditExpress from the solution, you must obtain and install SecurityExpressions separately. 4.4 Using Altiris Agent to perform agentless auditing in the securitymanagement application You must install the Altiris Agent on every target computer you plan to audit, even if you re not using the security audit agent to access the target computer in the security-management application. 4.5 Running the solution on Altiris Console 6.5 (AeXHD14049) If you run the solution on Altiris Console 6.5 with Console Data Pack version or earlier installed, the Configure > Solutions menu lists the solution under the name AuditExpress Integration Component instead of Audit Integration Component. 4.6 Errors when generating Web reports with no data (LB44094) Generating Web reports about security audit data in Altiris Console causes an overflow error when 1) there is no security audit data imported or 2) when the report s query returns no results. 4.7 Security-policy categories and SecurityExpressions Like AuditExpress, SecurityExpressions collects data based on security policies. Unlike AuditExpress, these security policies don t contain separate categories of security checks. In RELEASE NOTES AUDIT INTEGRATION COMPONENT PAGE 7 OF 8

8 places where you need to select or enter a security-policy category to complete a task, the only option available in the Category field will be the same as the security policy. These places are: New Collection wizard New Notification Policy wizard Purging Maintenance page Audit Detail views Reports tab, generating and viewing Web reports RELEASE NOTES AUDIT INTEGRATION COMPONENT PAGE 8 OF 8