How do I Use Policies in Tripwire Enterprise Rules?
Tripwire Enterprise is a security and compliance automation application. Its configuration assessment technology provides a means to test systems against external federal or financial standards that require companies to provide levels of security and control around their information technology infrastructures to protect customers and businesses. A key component to testing against these requirements are Tripwire Enterprise policies.
Instructions
-
-
1
Launch Tripwire Enterprise. The primary interface for Tripwire Enterprise is Web browser0based. Start Internet Explorer, Firefox or Chrome. In the address field, enter the hostname of the Tripwire Enterprise server.
-
2
Import the rules xml file. Navigate to the rule manager. Click the "Import" button. Navigate to the rules xml file and select it. Part of the policy file package provided by Tripwire includes rule files. Rules define what files, directories and other data that the policy engine will need to run the compliance tests.
-
-
3
Import the policies xml file. Navigate to the policy manager. Click the "Import" button. Navigate to the policy xml file and select it. Tripwire provides policies for a large number of compliance requirements. Select the policy that is aligned closely with organizational needs.
-
4
Link the policy to in-scope servers. In the policy manager, open the property sheet for the newly imported policy. Select the "Nodes" tab, click the "Add" button and select any individual node or group of nodes the policy applies to.
-
5
Create a task. Navigate to the task manager and click the "New Task" button. In the wizard, select the node, rules and schedule for the task. When selections are complete, initialize a baseline of the nodes. Tripwire Enterprise will take the rules applied and take a snapshot of the files, directories and any other necessary data and collect it to be tested against the policies.
-
6
Generate reports on compliance. Navigate to the report manager. Click "New Report." Tripwire Enterprise provides a large number of reports. Select detailed test results. Complete the wizard and run the report. The report generated will be a list of all the policy tests that were passed and failed. This report can be filtered many different ways and linked to higher-level graphical reports for management purposes.
-
1
References
- Photo Credit a computer class image by Ivan Hafizov from Fotolia.com