<div dir="ltr"><p class="MsoNormal" style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Product:</span></b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
BigFix Compliance</span></p>

<p class="MsoNormal" style="margin:14pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Title:</span></b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
</span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue";color:black">Updated DISA STIG Checklist for Windows Server 2019 with bug fixes</span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></p>

<p class="MsoNormal" style="margin:14pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Security
Benchmark:</span></b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
</span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue";color:black">Microsoft Windows Server 2019 STIG SCAP Benchmark, V3R4</span></p>

<p class="MsoNormal" style="margin:14pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Published
Sites:</span></b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
</span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue";color:black">DISA STIG Checklist for Windows Server 2019</span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">, site
version 20<br>
(The site version is provided for air-gap customers.)</span></p>

<p class="MsoNormal" style="margin:14pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:10pt;color:black"><br>
</span><b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Details:</span></b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></p>

<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">      
</span></span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Removed parameterization
for this check - Windows Server 2019 must not allow anonymous SID/Name
translation.</span></p>

<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">      
</span></span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">‘Deploy and Run’ task has
been updated for the task and for the following rules:</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="color:black"><span id="gmail--1532943955"><span style="font-size:10.5pt;font-family:"Arial Unicode MS";color:rgb(34,34,34)">●       Windows Server
 2019 must not allow anonymous SID/Name translation.</span></span></span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="color:black"><span id="gmail-1238902575"><span style="font-size:10.5pt;font-family:"Arial Unicode MS";color:rgb(34,34,34)">●       Windows Server
 2019 must have the built-in Windows password complexity policy enabled.</span></span></span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="color:black"><span id="gmail--2117439031"><span style="font-size:10.5pt;font-family:"Arial Unicode MS";color:rgb(34,34,34)">●       Windows Server
 2019 reversible password encryption must be disabled.</span></span></span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Note:
This task has to be run periodically.</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue""> </span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue""> </span></p>

<p class="MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Actions
to take:</span></b><b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></b></p>

<p class="MsoNormal" style="margin:14pt 0in 14pt 0.5in;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:12pt;font-family:"Noto Sans Symbols";color:black">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">To subscribe to the above site, you can
use the License Overview Dashboard to enable and gather the site. Note that you
must be entitled to the BigFix Compliance product, and you must be using BigFix
version 10 and later</span><span lang="EN-IN" style="font-size:12pt;font-family:Arial,sans-serif">.</span><span lang="EN-IN" style="font-size:12pt;font-family:Arial,sans-serif"></span></p>

<p class="MsoNormal" style="margin:6pt 0in 0.0001pt 0.5in;border:none;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-family:"Noto Sans Symbols";color:black">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">      
</span></span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">If you use custom sites,
update your custom sites accordingly to use the latest content. You can
synchronize your content by using the Synchronize Custom Checks wizard. For
more information, see </span><u><span lang="EN-IN" style="color:rgb(5,99,193)"></span></u></p>

<p class="MsoNormal" style="margin:0in 0in 14pt 0.5in;border:none;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN"><a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html"><span style="color:rgb(5,99,193)">https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html</span></a><u><span style="color:rgb(5,99,193)"></span></u></span></p>

<p class="MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">More
information:</span></b><b><span lang="EN-IN" style="font-size:10pt;color:black"> </span></b><span lang="EN-IN" style="font-size:10pt"><br>
</span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">To know more about the BigFix Compliance SCM checklists, please
see the following resources:</span><b><span lang="EN-IN" style="font-size:10pt;color:black"></span></b></p>

<p class="MsoNormal" style="margin:6pt 0in 0.0001pt 0.5in;border:none;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-family:"Noto Sans Symbols";color:black">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">      
</span></span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">BigFix Forum:<br>
</span><span lang="EN-IN"><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforum.bigfix.com%2Fc%2Frelease-announcements%2Fcompliance&data=05%7C01%7CBigFix-Scrum-Earth%40hcl.com%7C850b19aead5a47f24eb308da841ed642%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637967565224681222%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=UYYRYb3SofshREYync5mCc2d5MUGb53t7OjOCBg%2BoJg%3D&reserved=0"><span style="color:rgb(5,99,193)">https://forum.bigfix.com/c/release-announcements/compliance</span></a><u><span style="color:rgb(5,99,193)"></span></u></span></p>

<p class="MsoNormal" style="margin:0in 0in 6pt 0.5in;border:none;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:10pt;font-family:"Noto Sans Symbols";color:black">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">      
</span></span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">BigFix Compliance SCM
Checklists:</span><span lang="EN-IN" style="font-size:10pt"><br>
</span><span lang="EN-IN"><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbigfix-wiki.hcltechsw.com%2Fwikis%2Fhome%3Flang%3Denus%23!%2Fwiki%2FBigFix%2520Wiki%2Fpage%2FSCM%2520Checklists&data=05%7C01%7CBigFix-Scrum-Earth%40hcl.com%7C850b19aead5a47f24eb308da841ed642%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637967565224681222%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=sJEji05sRie522iksNIya8RoKSDGBtgSCKlAzsF0N%2Fo%3D&reserved=0"><span style="color:rgb(5,99,193)">https://bigfix-wiki.hcltechsw.com/wikis/home?lang=enus#!/wiki/BigFix%20Wiki/page/SCM%20Checklists</span></a></span><span lang="EN-IN" style="font-size:10pt;font-family:"Times New Roman",serif;color:black"></span></p>

<p class="MsoNormal" style="margin:0in 0in 12pt;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">We hope
you find this latest release of SCM content useful and effective. Thank you!</span><span lang="EN-IN" style="font-size:10.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 12pt;font-size:11pt;font-family:Calibri,sans-serif"><i><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">– The BigFix Compliance team</span></i><i><span lang="EN-IN" style="font-size:10pt"></span></i></p></div>