[BESAdmin-Announcements] BigFix Compliance: Updated CIS Checklist for Apache Tomcat 11 on Linux, published 2026-10-15

[Announcements for BES Administrators]

*Product:*
BigFix Compliance

*Title:*
Updated CIS Checklist for Apache Tomcat 11 on Linux to support a more
recent version of the benchmark

*Security Benchmark:*
CIS Apache Tomcat 11 Benchmark V1.1.0

*Published Sites:*
CIS Checklist for Apache Tomcat 11 on Linux, site version 2 (The site
version is provided for air-gap customers.)

*Details:*

●      Total New Fixlets: 0

●      Total Updated Fixlets:1

○      Ensure 'protocol' is Configured Correctly for Secure Connector

●      Total Deleted Fixlets: 2

○      Restrict access to Tomcat catalina.policy

○      Restrict runtime access to sensitive packages

●      Total Fixlets in Site: 56

●

●      Updated all checks with descriptions and metadata aligned to the
latest benchmark standards.

●      The Environment Setup task utilizes atomic result refreshes,
ensuring that existing results remain available until new results are
generated. Results now also include a collection timestamp for better
tracking and auditability.

●      The Applicability Fixlet verifies that the Environment Setup Task
log file exists, is not older than 90 days, and that the required result
files are present. This ensures that Fixlets are reported as Not Applicable
when the Environment Setup Task has not been executed, and that the
Measured Value (MV) correctly reflects this condition.

●      Both analysis and remediation checks are included

●      Some of the checks allow you to use the parameterized setting to
enable customization for compliance evaluation. Note that parameterization
and remediation actions require the creation of a custom site.

*Actions to take:*

●       To subscribe to the above site, you can use the License Overview
Dashboard to enable and gather the site. Note that you must be entitled to
the BigFix Compliance product, and you must be using BigFix version 10 and
later.

●       If you use custom sites, update your custom sites accordingly to
use the latest content. You can synchronize your content by using the
Synchronize Custom Checks wizard. For more information, see
https://help.hcl-software.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html

*More information:*
To know more about the BigFix Compliance SCM checklists, please see the
following resources:

●       BigFix Forum:
https://forum.bigfix.com/c/release-announcements/compliance

●       BigFix Compliance SCM Checklists:
*https://forum.bigfix.com/c/release-announcements/scm-checklists/86
<https://forum.bigfix.com/c/release-announcements/scm-checklists/86>*
We hope you find this latest release of SCM content useful and effective.
Thank you!
*– The BigFix Compliance team*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://bigmail.bigfix.com/pipermail/besadmin-announcements/attachments/20261016/69a17b17/attachment.html>