[BESAdmin-Announcements] BigFix Compliance: Updated DISA Checklist for Apache Server 2_4 on Linux with bugfix, published 2025-12-15

[Announcements for BES Administrators]

*Product:*
BigFix Compliance

*Title:*
Updated DISA Checklist for Apache Server 2_4 on Linux with bug fixes

*Security Benchmark:*
DISA Apache Server 2.4 Unix Site_V2R6 Server_V3R2

*Published Sites:*
DISA STIG Checklist for Apache Server 2.4 on Linux, site version 24
(The site version is provided for air-gap customers.)

*Details: *

Total Updated Fixlets:46

Total Fixlets in Site: 48

·       Improved detection logic to accurately identify all valid running
Apache HTTPD instances on a system.

·       Excluded zombies, stale, and inactive processes so that only active
Apache web server instances are evaluated.

·       The Environment Setup Task now completes successfully only when all
valid Apache HTTPD instances are detected and scanned.

·       The Environment Setup Task will fail if no valid running Apache
HTTPD instances are found.

·       Individual Fixlet relevance has been updated to report compliance
only when a corresponding results file exists and contains a PASS status.

·       The Applicability Fixlet now includes additional validation,
ensuring that the Environment Setup Task log file exists, is not older than
90 days, and that results files are present. This ensures Fixlets are
reported as *Not Applicable* and that the Measured Value (MV) correctly
indicates that the Environment Setup Task has not been executed when the
task fails due to the absence of valid running Apache HTTPD instances.

·       Some of the checks allow you to use the parameterized setting to
enable customization for compliance evaluation. Note that parameterization
and remediation actions require the creation of a custom site.



*Actions to take:*

   - To subscribe to the above site, you can use the License Overview
   Dashboard to enable and gather the site. Note that you must be entitled to
   the BigFix Compliance product, and you must be using BigFix version 10 and
   later.
   - If you use custom sites, update your custom sites accordingly to use
   the latest content. You can synchronize your content by using the
   Synchronize Custom Checks wizard. For more information, see
   https://help.hcl-software.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html

*Note: *The Applicability Fixlet is not synchronized by the *Synchronize
Custom Checks* wizard. Please create a custom copy of the Fixlet from the
external site into your custom site and remove the existing version


*More information: *To know more about the BigFix Compliance SCM
checklists, please see the following resources:

   - BigFix Forum:
   https://forum.bigfix.com/c/release-announcements/compliance
   - BigFix Compliance SCM Checklists:

   https://bigfix-wiki.hcltechsw.com/wikis/home?lang=en-us#!/wiki/BigFix%20Wiki/page/SCM%20Checklists

We hope you find this latest release of SCM content useful and effective.
Thank you!


*– The BigFix Compliance team*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://bigmail.bigfix.com/pipermail/besadmin-announcements/attachments/20251216/b4ddb130/attachment.html>