<div dir="ltr"><p class="MsoNormal" style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:none;margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><b style="font-size:11pt"><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Product:</span></b></p><p class="MsoNormal" style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">
BigFix Compliance</span></p>
<p class="MsoNormal" style="margin:14pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Title:</span></b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
</span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue";color:black">Updated DISA STIG Checklist for Windows Server 2019 with bug fixes</span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></p>
<p class="MsoNormal" style="margin:14pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Security
Benchmark:</span></b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
</span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue";color:black">Microsoft Windows Server 2019 STIG SCAP Benchmark, V3R4</span></p>
<p class="MsoNormal" style="margin:14pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Published
Sites:</span></b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
</span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue";color:black">DISA STIG Checklist for Windows Server 2019</span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">, site
version 21<br>
(The site version is provided for air-gap customers.)</span></p>
<p class="MsoNormal" style="margin:14pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:10pt;color:black"><br>
</span><b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Details:</span></b></p>
<p class="MsoNormal" style="margin:14pt 0in 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Modified logics for these
checks:</span></b></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Windows Server 2019 must
be configured for certificate-based authentication for domain controllers.</span></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Windows Server 2019 Lock
pages in memory user right must not be assigned to any groups or accounts.</span></p>
<p class="MsoNormal" style="margin:14pt 0in 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Modified logics and
removed remediation for these checks:</span></b></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Windows Server 2019
"Deny access to this computer from the network" user right on
domain-joined member servers must be configured to prevent access from highly
privileged domain accounts and local accounts and from unauthenticated access</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Windows Server 2019
"Deny log on through Remote Desktop Services" user right on
domain-joined member servers must be configured to prevent access from highly
privileged domain accounts and all local accounts and from unauthenticated
access</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Windows Server 2019
"Deny log on locally" user right on domain-joined member servers must
be configured to prevent access from highly privileged domain accounts and from
unauthenticated access on all systems.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Windows Server 2019 must
preserve zone information when saving attachments.</span></p>
<p class="MsoNormal" style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue""> </span></p>
<p class="MsoNormal" style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue""> </span></p>
<p class="MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Actions
to take:</span></b><b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></b></p>
<p class="MsoNormal" style="margin:14pt 0in 14pt 0.5in;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:12pt;font-family:"Noto Sans Symbols";color:black">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">To subscribe to the above site, you can
use the License Overview Dashboard to enable and gather the site. Note that you
must be entitled to the BigFix Compliance product, and you must be using BigFix
version 10 and later</span><span lang="EN-IN" style="font-size:12pt;font-family:Arial,sans-serif">.</span><span lang="EN-IN" style="font-size:12pt;font-family:Arial,sans-serif"></span></p>
<p class="MsoNormal" style="margin:6pt 0in 0.0001pt 0.5in;border:none;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-family:"Noto Sans Symbols";color:black">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">If you use custom sites,
update your custom sites accordingly to use the latest content. You can
synchronize your content by using the Synchronize Custom Checks wizard. For
more information, see </span><u><span lang="EN-IN" style="color:rgb(5,99,193)"></span></u></p>
<p class="MsoNormal" style="margin:0in 0in 14pt 0.5in;border:none;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN"><a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html"><span style="color:rgb(5,99,193)">https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html</span></a><u><span style="color:rgb(5,99,193)"></span></u></span></p>
<p class="MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">More
information:</span></b><b><span lang="EN-IN" style="font-size:10pt;color:black"> </span></b><span lang="EN-IN" style="font-size:10pt"><br>
</span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">To know more about the BigFix Compliance SCM checklists, please
see the following resources:</span><b><span lang="EN-IN" style="font-size:10pt;color:black"></span></b></p>
<p class="MsoNormal" style="margin:6pt 0in 0.0001pt 0.5in;border:none;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-family:"Noto Sans Symbols";color:black">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">BigFix Forum:<br>
</span><span lang="EN-IN"><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforum.bigfix.com%2Fc%2Frelease-announcements%2Fcompliance&data=05%7C01%7CBigFix-Scrum-Earth%40hcl.com%7C850b19aead5a47f24eb308da841ed642%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637967565224681222%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=UYYRYb3SofshREYync5mCc2d5MUGb53t7OjOCBg%2BoJg%3D&reserved=0"><span style="color:rgb(5,99,193)">https://forum.bigfix.com/c/release-announcements/compliance</span></a><u><span style="color:rgb(5,99,193)"></span></u></span></p>
<p class="MsoNormal" style="margin:0in 0in 6pt 0.5in;border:none;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:10pt;font-family:"Noto Sans Symbols";color:black">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">BigFix Compliance SCM
Checklists:</span><span lang="EN-IN" style="font-size:10pt"><br>
</span><span lang="EN-IN"><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbigfix-wiki.hcltechsw.com%2Fwikis%2Fhome%3Flang%3Denus%23!%2Fwiki%2FBigFix%2520Wiki%2Fpage%2FSCM%2520Checklists&data=05%7C01%7CBigFix-Scrum-Earth%40hcl.com%7C850b19aead5a47f24eb308da841ed642%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637967565224681222%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=sJEji05sRie522iksNIya8RoKSDGBtgSCKlAzsF0N%2Fo%3D&reserved=0"><span style="color:rgb(5,99,193)">https://bigfix-wiki.hcltechsw.com/wikis/home?lang=enus#!/wiki/BigFix%20Wiki/page/SCM%20Checklists</span></a></span><span lang="EN-IN" style="font-size:10pt;font-family:"Times New Roman",serif;color:black"></span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">We hope
you find this latest release of SCM content useful and effective. Thank you!</span><span lang="EN-IN" style="font-size:10.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt;font-size:11pt;font-family:Calibri,sans-serif"><i><span lang="EN-IN" style="font-size:10.5pt;font-family:"Helvetica Neue"">– The BigFix Compliance team</span></i><i><span lang="EN-IN" style="font-size:10pt"></span></i></p></div>