BMC + McAfee = Automated Policy Compliance

1© Copyright 04/21/23 BMC Software, Inc

Click-through Demonstration

BMC + McAfee = Automated Policy Compliance


Automated Policy Compliance

Let’s take a look out one of our Windows Client machines!

So, where’s the problem?


This Windows Service should not be runningThis Windows Service should not be running



Now, let’s go fix it!



Authorized administrators login to access BMC Security Policy Manager


Pre-defined Remediation Groups – Sourced directly from McAfee

Pre-defined Remediation Groups – Sourced directly from McAfee

The Security Policy Manager Main Page


Select and Publish an out-of-the-box remediation group

- OR -


Filter your own results based on criteria


Click on a remedy content line See a summary of the remediation content

Click here for remediation details


Remedy and Bulletin ID

Summary of content

Description of the fixScanner details

Descriptions of actions to be taken


Select a remediation entry


Click here to create a new remediation group Give the new group a name –

For example:MY XP SECURITY CONTENT


New group is created

Group contains 1 remediation entry


Publish the new remediation group


Remediation content is brought down in real-time, automatically packaged and published for distribution



The content is ready! Who needs it?


We want to target the content to all Windows XP boxes

This query returns a list we can now target via policy



Now, time to define deployment policy!

Subscription Policy Definition


First, select the target group from the list of collections Edit the

policy


Manage all policy compliance activities in a single interface


Select the Remediation tab

Click here to add our remediation content


Here is the Remediation Group created earlier

Click to select


Remediation Group Assigned


Policy defined: Assignment state = Assign or Exclude

Click here to preview policy assignment


Policy assignment complete

Click here to save the policy


Policy assignment completed successfully



After policy assignment, agent receives new policy

…and executes the policy


Client Remediation Log

Endpoint installs remediation content and creates a full audit log of activity


Problem solved!!! Service stopped and disabled



Mission Accomplished!!!

BMC + McAfee = Automated Policy Compliance

Documents

Transcript of BMC + McAfee = Automated Policy Compliance