appears next to the control
statement if the control has been deprecated. A workflow is provided in
the Policy Editor for replacing deprecated controls.Note: This report is only available when the compliance module is enabled for your subscription and you have compliance management privileges.
The Control Pass/Fail Report identifies the compliance status for a particular control. Hosts included in the report are listed with a pass or fail status for the specified control. Since this is an interactive report, you can modify the report source options to change the report output in real-time. Note that interactive reports are not saved to Report Share.
Select your report source options.
Policy. Select the policy you want to report on.
Control. Select the control you want to report on. Click the Select link and choose a single control from the Select Control pop-up. All controls in the policy are listed. Click Add to add the control to the report and close the pop-up.
Asset Group. (Available to Managers and Auditors only). Select an asset group relevant to the policy to report on.
Display. Specify whether you want to show hosts that passed the control, failed the control or both.
Sort By. Specify how you want to sort the report results. Your options are: IP Address, NetBIOS name, DNS name, Posture and Exception (status).
Click Run to generate your interactive report. The report results appear in the same window. Change the report source options at any time to update the results in real-time. For example, change the control you want to report on or change the display option.
Click Cancel to close the report.
Note: To maximize the space available for your report results, the report setup pane (with report source options) is automatically hidden. You can also hide the preview pane. To do so, go to the View menu and clear the Preview Pane option. To show the hidden panes, go to the View menu and select the Setup Pane and Preview Pane options.
This section provides a report summary with report source options and the number of hosts in and out of compliance. You can change the report source options at any time at the top of your report to change the output and test different controls on different hosts.
appears next to the control
statement if the control has been deprecated. A workflow is provided in
the Policy Editor for replacing deprecated controls.
(Visible to Managers and Auditors only.) This section shows asset group information for the selected asset group. Asset group information includes the number of IPs and domains assigned to the group, the number of users with privileges to the group, and the location, function and division specified for hosts in the group. The business impact level indicates how critical the asset group is to your organization, and the CVSS Environmental metrics are shown when CVSS Scoring is enabled. Edit the asset group to change asset group information.
Each host in the asset group that the control applies to is listed with the following information.
column |
Description |
IP Address |
The IP address for the host. Select the IP address to view host information. |
Tracking |
The method used to report information about this host: IP address, DNS hostname or NetBIOS hostname. See Tracking Method for more information. |
DNS Hostname |
The registered DNS hostname. |
NetBIOS Hostname |
The Microsoft Windows NetBIOS name for the host. |
Instance |
If the compliance information applies to a technology version on the host, like an Oracle version, the instance information appears in this format: (Oracle technology version:SID:port). For example: (oracle10:ora102030p:1521). |
OS |
The operating system detected on the host. |
OS CPE |
The OS CPE name assigned to the operating system detected on the host. (The OS CPE name appears only when the OS CPE feature is enabled for the subscription, and an authenticated scan was run on this host after enabling this feature.) |
Posture |
The status for the control on the host. Passed indicates that the expected value defined in the policy for the control matches the actual value returned during the last compliance scan on the host. Failed indicates that the expected value defined in the policy for the control does not match the actual value returned during the last compliance scan on the host. PassedE indicates that the host is exempt from the control. This means that an exception was requested and accepted for the control on the host. |
Exception |
If applicable, the exception status appears. If an exception does not exist, click the Create link to request a new exception for the control on the host. Assign the new exception to a user for approval and add comments explaining your request. For exceptions with a Pending, Accepted or Rejected status, click the exception status to edit the exception. Depending on your user role permissions, you may be allowed to change the exception status, reassign the exception to another user and add comments to the exception details. For exceptions with an Expired status, click the exception status to view the exception information and history. |
Click on any row in the Results list to see specific scan results for the control. The expected value for the control is the value specified in the policy. The actual value for the control is the value returned during the most recent compliance scan on the host. By comparing the expected value to the actual value, you can easily determine why the control passed or failed for the host.
See Control Values for information on the types of control values that may appear in your report, including integer values, regular expressions, and Windows permissions.
If an error occurs for a user-defined custom control, then a description of the error appears in the Actual field. For example, you might see "Error Code 2: Item not found" if the registry key that the control needs to check does not exist.
You can request an exception for a single host or for multiple hosts that the control failed on.
To request an exception for a single host, select the Request link in the Exception column. To request an exception for multiple hosts, select the check box next to each host to include in the action, and then select the Request Exception button.
In the pop-up that appears, assign the exception to a user for approval and provide notes explaining your request in the Comments field. Then click the Request button. The report reloads and the Exception column shows the status "Pending".
The following options are available from the File menu:
Print. Click to print your report. Your printed report will appear as it does online, meaning that expanded sections will appear expanded and collapsed sections will appear collapsed.
Download. Click to download your report in one of these formats: PDF, HTML pages (ZIP), MHT, XML, or CSV. See Report Formats for more information. The report is downloaded to your system. Interactive reports are not saved to Report Share.
The following options are available from the View menu:
Setup Pane. Click to hide/show the Setup Pane. The Setup Pane appears above your report results. This is where you set and modify report source options.
Preview Pane. Click to hide/show the Preview Pane. The Preview Pane appears below your report results. Click on any row in the results to see additional information in the Preview Pane.