Tripwire Enterprise

Sample Security Reports

REPORT
CATALOG
Tripwire Enterprise Sample Security Reports

Windows CIS Scoring

Date: 1/14/10 1:32 PM

Group by: Policy, Node
Display raw score (without waivers): No
Display criteria at end: No
Nodes: Windows
Node name: Not applied
Node Properties: Not applied
Policies: MS Windows Server 2003 DM Enterprise Benchmark - CIS
v2.0
Nodes sort: Name, ascending
Policies sort: Name, ascending
Scoring range sort: Score, descending
Details table sort: Name, ascending

Security Scoring
Reports, like this one for
CIS scoring on Windows
machines, reveal overall
alignment with relevant
security standards.

Customizable passing-
failing ranges allow
Tripwire Enterprise
users to get one-glance
MS Windows Server 2003 DM Enterprise Benchmark - CIS v2.0 views that show which
machines are at the
Passing greatest risk.

Node Score Waived Tests

WIN-COMPLIANCE1.PDXSE.TR 90.70 0
IPWIRE.COM

ams.win2k3.dc1.tripwire.com 90.53 0

ams.win2k3.dc2.tripwire.com 90.53 0

ams.win2k3.dc3.tripwire.com 90.53 0

ams.win2k3.dc4.tripwire.com 90.53 0
Tripwire Enterprise Sample Security Reports

ams.win2k3.dc5.tripwire.com 90.53 0

ams.win2k3.dc6.tripwire.com 90.53 0

ams.win2k3.dc7.tripwire.com 90.53 0

ams.win2k3.dc8.tripwire.com 90.53 0

lon.win2k3.crm.db1.tripwire.com 90.53 0

lon.win2k3.crm.db2.tripwire.com 90.53 0

lon.win2k3.crm1.tripwire.com 90.53 0

lon.win2k3.crm2.tripwire.com 90.53 0

lon.win2k3.crm3.tripwire.com 90.53 0

lon.win2k3.crm4.tripwire.com 90.53 0

lon.win2k3.crm5.tripwire.com 90.53 0

lon.win2k3.crm6.tripwire.com 90.53 0

ord.win2k3.proc1.tripwire.com 90.53 0

ord.win2k3.proc2.tripwire.com 90.53 0

ord.win2k3.proc2.tripwire.com 90.53 0

70 to 90

Node Score Waived Tests

WIN-COMPLIANCE2.PDXSE.TR 79.76 0
IPWIRE.COM

WIN-COMPLIANCE3.PDXSE.TR 79.76 0
IPWIRE.COM

WIN-COMPLIANCE4.PDXSE.TR 83.93 0
IPWIRE.COM

WIN-COMPLIANCE5.PDXSE.TR 83.93 0
IPWIRE.COM

Failing

Node Score Waived Tests

DEMOSERVER.PDXSE.TRI 33.96 0
PWIRE.COM

Security reports can be

arranged from passing
to failing nodes for gen-
eral reporting, or from
failing to passing for
prioritization of configu-
ration remediation tasks.
Tripwire Enterprise Sample Security Reports

NIST 800 - 53 Windows-High

Tripwire Enterprise’s
security reports can
detail your infrastruc-
ture’s alignment with
security standards like
NIST and DISA. For a
given machine or group
of machines, these tests
can instantly aggre-
gate the overall ratio of
passed to failed control
tests, then provide drill-
down paths to important
details.

MS Windows Server 2003 DM High Security Control Catalog - NIST SP 800-53 Rev 1

Access Control (AC)

Node Passed Failed Percent Compliant

Tests Tests
Clicking the report title
172.19.254.67 19 37 34%
generates a sub-report Drillable sub-reports can
DEMOSERVER.PDXSE.TRIPWIRE.COM 28 74 27%
show any test failures by
detailing each of the
test failures that have WIN-COMPLIANCE1.PDXSE.TRIPWIR 68 34 covered by specific con-
67%
E.COM
been summarized in this trol areas, like Access
WIN-COMPLIANCE2.PDXSE.TRIPWIR 65 37 64% controls, Identification
report. E.COM
and Authentication con-
WIN-COMPLIANCE3.PDXSE.TRIPWIR 65 37 64%
E.COM
trols, or Configuration
Management controls.
WIN-COMPLIANCE4.PDXSE.TRIPWIR 69 33 68%
E.COM

WIN-COMPLIANCE5.PDXSE.TRIPWIR 69 33 68%
E.COM

ams.win2k3.dc1.tripwire.com 68 34 67%

ams.win2k3.dc2.tripwire.com 68 34 67%

ams.win2k3.dc3.tripwire.com 68 34 67%

ams.win2k3.dc4.tripwire.com 68 34 67%
Tripwire Enterprise Sample Security Reports

ams.win2k3.dc5.tripwire.com 90.53 0

ams.win2k3.dc6.tripwire.com 90.53 0

ams.win2k3.dc7.tripwire.com 90.53 0

ams.win2k3.dc8.tripwire.com 90.53 0

lon.win2k3.crm.db1.tripwire.com 90.53 0

lon.win2k3.crm.db2.tripwire.com 90.53 0

lon.win2k3.crm1.tripwire.com 90.53 0

lon.win2k3.crm2.tripwire.com 90.53 0

lon.win2k3.crm3.tripwire.com 90.53 0

lon.win2k3.crm4.tripwire.com 90.53 0

lon.win2k3.crm5.tripwire.com 90.53 0

Clicking any of the node lon.win2k3.crm6.tripwire.com 90.53 0

names reveals instant ord.win2k3.proc1.tripwire.com 90.53 0

details of the tests fail-
ord.win2k3.proc2.tripwire.com 90.53 0
ing on that machine or
device. ord.win2k3.proc2.tripwire.com 90.53 0

70 to 90

Node Score Waived Tests

WIN-COMPLIANCE2.PDXSE.TR 79.76 0
IPWIRE.COM

WIN-COMPLIANCE3.PDXSE.TR 79.76 0
IPWIRE.COM

WIN-COMPLIANCE4.PDXSE.TR 83.93 0
IPWIRE.COM

WIN-COMPLIANCE5.PDXSE.TR 83.93 0
IPWIRE.COM

Failing

Node Score Waived Tests

DEMOSERVER.PDXSE.TRI 33.96 0
PWIRE.COM
Tripwire Enterprise Sample Security Reports

Test Result Summary

Test Results Summary

reports give visual and
textual details of how
specific machines or
device groups compare
to security policies and
benchmark standards.

MS Windows Server 2003 DM Enterprise Benchmark - CIS v1.2

(Generated 16:59 27 May 2008)

1. Service Packs and Hotfixes

1.1 Major Service Pack and Hotfix Requirements

1.1.1 Current Service Pack Installed

Remediation guidance is included with many reports that

Windows Server 2003 Service Pack Is Greater than or Equal to 2
details the steps needed to remediate failing tests.
This test verifies that the current Windows Server 2003 Service Pack installed on this system is 2 or great
er. Because critical security updates are often distributed in Service Packs, it is important to install them
regularly.

Node Passed Failed Percent Compliant

Tests Tests

tgood-xp.tripwire.com 1 0 100%

2. Auditing and Account Policies

2.1 Major Auditing and Account Policies Requirements

2.1.1 Minimum Password Length Is Greater than or Equal to 8

(Minimum)

TESRS8001n