Security

Those are more administrative requirements/settings than something that the posture validation would be looking at.  What purpose is there for checking on these items in posture evaluation prove?

Thank you for your response @chulcher

If looking from security value for a bank environment

• misconfigured DNS can redirect traffic to phishing/malware sites
• NTP is critical for event correlation
• Secure Boot/TPM check to ensure endpoints are installed with golden image

For this we are trying to add new checks along with exiting checks (AV, Windows Hotfixes)

Thank you for your response @chulcher

If looking from security value for a bank environment

• misconfigured DNS can redirect traffic to phishing/malware sites
• NTP is critical for event correlation
• Secure Boot/TPM check to ensure endpoints are installed with golden image

For this we are trying to add new checks along with exiting checks (AV, Windows Hotfixes)

You could have a look at Custom scripts for Onguard, which allow you to run basically any check you can think of as long as you know how to check in a script.

Thank you for your response @chulcher

If looking from security value for a bank environment

• misconfigured DNS can redirect traffic to phishing/malware sites
• NTP is critical for event correlation
• Secure Boot/TPM check to ensure endpoints are installed with golden image

For this we are trying to add new checks along with exiting checks (AV, Windows Hotfixes)

Those are more administrative requirements/settings than something that the posture validation would be looking at.  What purpose is there for checking on these items in posture evaluation prove?

@Herman Robers

Thank you for your insight. One doubt, I would like to ask if adding more checks will degrade ClearPass Performance for an environment like financial institution.

You could have a look at Custom scripts for Onguard, which allow you to run basically any check you can think of as long as you know how to check in a script.

Thank you for your response @chulcher

If looking from security value for a bank environment

• misconfigured DNS can redirect traffic to phishing/malware sites
• NTP is critical for event correlation
• Secure Boot/TPM check to ensure endpoints are installed with golden image

For this we are trying to add new checks along with exiting checks (AV, Windows Hotfixes)