–
Enable: Security Manager changes out-of-compliance items on the device to match the policy's
setting.
–
Disable: Security Manager reports out-of-compliance items, but does not change the item on the
device.
●
Set Unsupported Behavior: Denes how Security Manager reports a feature that a device does not support
during an assessment. This is useful when creating a single policy for use across a eet of devices. Instead
of failing when a specic feature is not supported, set the policy to ignore the item.
–
Fail: Security Manager reports a failure when the item does not exist on the device.
–
Ignore (default): Security Manager does not report the item. For example, if a device does not support
a FAX PIN, Security Manager does not report that a FAX PIN is blank.
Set policy options for a single item
After a policy is created, follow these steps to congure the policy setting items and to set the severity,
remediation, and unsupported behavior options for specic items in a policy:
1. Log into Security Manager, and then select the Policies tab.
2. On the Policies page, select a policy from the policies panel, and then click on the Edit button.
3. On the Policy Editor page, select a policy setting from the main category located in the top navigation tabs.
4. On the left navigation pane, select a sub category policy setting.
5. Select a Quick Settings policy item panel check box to enable the policy settings.
6. Click a policy item arrow to expand a policy item panel.
7. In the Security Manager Settings section, set the Severity option to High, Medium, or Low.
8. Set the Remediation option to Enable or Disable.
9. Set the Unsupported option to Fail or Ignore.
10. Congure the required policy settings To ensure a valid policy, click the Authentication tab, select the
Credentials sub category, and then make sure to congure the following settings:
For example, click the Authentication tab, select the Credentials sub category, and then congure the
following settings:
●
Admin (EWS) Password
●
SNMPv1/v2 Read Community Name and SNMPv1/v2 Read/Write Community Name
●
File System Password
●
PJL Password
●
Remote Conguration Password
11. Click Validate and then click Save.
ENWW Create a security policy 23
Kommentare zu diesen Handbüchern