Symantec Security Expressions Server manual Target Options, Agent & Service Configuration

SecurityExpressions Server User Guide

(weighted total of OK results ÷ (weighted total of OK rules + weighted total of Not

OK rules)) × 100

Example

An audit contains four rules:

•1 High Priority

•1 Medium Priority

•1 Low Priority

•1 no priority or impact, and no Weight key exists

The weight values are:

•High:1.5

•Medium:1.0

•Low:0.5

The rule with no priority or impact set assumes a weight of 1.0, which happens to also be the default Medium priority weight in this example. If none of the rules return Info or Error, the weighted total of all rules is:

((1 × 1.5) + (1 × 1.0) + (1 × 0.5) + (1 × 1.0) + 0) = 4.0

So, if the high-priority rule returns Not OK and the other three rules return OK, the score will be the actual weighted total for OK rule results [i.e. (1×1.0)+(1×0.5)+(1×1.0)] divided by the weighted total of all rules [i.e. 4.0], multiplied by 100:

2.5 ÷ 4.0 × 100 = 63

Target Options

The Agent & Service Configuration options are for Windows target systems only. The SSH Agent Authentication options are for UNIX target systems only.

Agent & Service Configuration

The Agent & Service Configuration options let you manage the remote execution of scripts and programs.

Default method for remote execution on Windows

When a method for executing scripts and programs is not explicitly given in a rule or security check, the application uses the method selected. When set to Automatic, the application tries to run executables using all other methods until it finds a compatible method. It tries the methods in this order:

1.Task Scheduler - Uses the Windows Task Scheduler to remotely execute scripts and programs.

2.WMI - Uses Windows Management Instrumentation, which is typically enabled on all Windows platforms, to remotely execute scripts and programs.

20