<div dir="ltr"><p class="MsoNormal" style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Product:</span></b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
BigFix Compliance</span></p>
<p class="MsoNormal" style="margin:14pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Title:</span></b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
</span><span lang="EN" style="font-size:13pt;font-family:"Times New Roman",serif;color:rgb(36,36,36)">Updated CIS Checklist
for Windows 2016</span></p>
<p class="MsoNormal" style="margin:14pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Security Benchmark:</span></b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
</span><span lang="EN" style="font-size:13pt;font-family:"Times New Roman",serif;color:rgb(36,36,36)">CIS Microsoft Windows
Server 2016 Benchmark, V4.0.0.<br>
<br>
</span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></p>
<p class="MsoNormal" style="margin:14pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Published Sites:</span></b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
</span><span lang="EN" style="font-size:13pt;font-family:"Times New Roman",serif">CIS Checklist for
Windows 2016 MS, site version 22.</span><span lang="EN" style="font-size:13pt;font-family:"Times New Roman",serif;color:rgb(36,36,36)"><br>
</span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(The site version is provided for air-gap customers.)</span><span lang="EN" style="font-size:13pt;font-family:"Times New Roman",serif"></span></p>
<p class="MsoNormal" style="margin:14pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Details:</span></b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Total New Fixlets: 13</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Total Updated
Fixlets:5</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Total Deleted
Fixlets: 2</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Total Fixlets in
Site: 387</span></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">NEW FIXLET</span></b><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></b></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Turn on Basic feed authentication over HTTP' is set to
'Disabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Configure multicast DNS (mDNS) protocol' is set to
'Disabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L2) Ensure 'Turn off default IPv6 DNS Servers' is set to 'Enabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Do not apply the Mark of the Web tag to files copied from
insecure sources' is set to 'Disabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Control whether exclusions are visible to local users' is
set to 'Enabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Enable EDR in block mode' is set to 'Enabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L2) Ensure 'Convert warn verdict to block' is set to 'Enabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Configure real-time protection and Security Intelligence
Updates during OOBE' is set to 'Enabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L2) Ensure 'Configure Brute-Force Protection aggressiveness' is set to
'Enabled: Medium' or higher </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Configure Remote Encryption Protection Mode' is set to
'Enabled: Audit' or higher </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L2) Ensure 'Configure how aggressively Remote Encryption Protection
blocks threats' is set to 'Enabled: Medium' or higher </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Scan excluded files and directories during quick scans' is
set to 'Enabled: 1' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Trigger a quick scan after X days without any scans' is set
to 'Enabled: 7'</span></p>
<p class="MsoNormal" style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> </span></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">UPDATED FIXLET</span></b><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></b></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">○<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Enable
Certificate Padding' is set to 'Enabled''</span><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></b></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">○<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Configure RPC packet level privacy setting for incoming
connections' is set to 'Enabled' (moved from 18.4.1 to 18.7.8)</span><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">○<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Network access: Named Pipes that can be accessed
anonymously' is configured (MS only) -
Renamed</span><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">○<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1)Ensure 'Network access: Remotely accessible registry paths' is
configured - Renamed</span><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">○<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1)Ensure 'Network access: Remotely accessible registry paths and
sub-paths' is configured - Renamed</span><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"></span></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">DELETED FIXLET</span></b><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></b></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">○<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Turn off
Microsoft Defender AntiVirus' is set to 'Disabled'</span><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></b></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">○<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> (L1) Ensure 'Toggle user control
over Insider builds' is set to 'Disabled'</span><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"></span></p>
<p class="MsoNormal" style="margin:14pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:13pt;font-family:"Times New Roman",serif"><br>
</span><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Published Sites:</span></b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
</span><span lang="EN" style="font-size:13pt;font-family:"Times New Roman",serif">CIS Checklist for
Windows 2016 DC, site version 22.</span><span lang="EN" style="font-size:13pt;font-family:"Times New Roman",serif;color:rgb(36,36,36)"><br>
</span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(The site version is provided for air-gap customers.)</span></p>
<p class="MsoNormal" style="margin:14pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Details:</span></b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Total New Fixlets: 13</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Total Updated
Fixlets:5</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Total Deleted
Fixlets: 2</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Total Fixlets in
Site: 384</span></p>
<p class="MsoNormal" style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> </span></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">NEW FIXLET</span></b><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></b></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Turn on Basic feed authentication over HTTP' is set to
'Disabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Configure multicast DNS (mDNS) protocol' is set to
'Disabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L2) Ensure 'Turn off default IPv6 DNS Servers' is set to 'Enabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Do not apply the Mark of the Web tag to files copied from
insecure sources' is set to 'Disabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Control whether exclusions are visible to local users' is
set to 'Enabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Enable EDR in block mode' is set to 'Enabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L2) Ensure 'Convert warn verdict to block' is set to 'Enabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Configure real-time protection and Security Intelligence
Updates during OOBE' is set to 'Enabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L2) Ensure 'Configure Brute-Force Protection aggressiveness' is set to
'Enabled: Medium' or higher </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Configure Remote Encryption Protection Mode' is set to
'Enabled: Audit' or higher </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L2) Ensure 'Configure how aggressively Remote Encryption Protection
blocks threats' is set to 'Enabled: Medium' or higher </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Scan excluded files and directories during quick scans' is
set to 'Enabled: 1' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Trigger a quick scan after X days without any scans' is set
to 'Enabled: 7' </span></p>
<p class="MsoNormal" style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> </span></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">UPDATED FIXLET</span></b><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></b></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">○<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Enable
Certificate Padding' is set to 'Enabled''</span><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></b></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">○<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Configure RPC packet level privacy setting for incoming
connections' is set to 'Enabled' (moved from 18.4.1 to 18.7.8)</span><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">○<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Network access: Named Pipes that can be accessed
anonymously' is configured (DC only) -
Renamed</span><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">○<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1)Ensure 'Network access: Remotely accessible registry paths' is
configured - Renamed</span><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">○<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1)Ensure 'Network access: Remotely accessible registry paths and
sub-paths' is configured - Renamed</span><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"></span></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">DELETED FIXLET</span></b><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></b></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">○<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(L1) Ensure 'Turn off
Microsoft Defender AntiVirus' is set to 'Disabled'</span><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></b></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">○<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> (L1) Ensure 'Toggle user control
over Insider builds' is set to 'Disabled'</span><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"></span></p>
<p class="MsoNormal" style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Metadata has been incorporated into all the checks.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Both
analysis and remediation checks are included</span><span lang="EN" style="font-size:10.5pt;font-family:Roboto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Some of the checks allow
you to use the parameterized setting to enable customization for compliance
evaluation. Note that parameterization and remediation actions require the
creation of a custom site.</span></p>
<p class="MsoNormal" style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> </span></p>
<p class="MsoNormal" style="margin:14pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Actions to take:</span></b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:none;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">To subscribe to the above
site, you can use the License Overview Dashboard to enable and gather the site.
Note that you must be entitled to the BigFix Compliance product, and you must
be using BigFix version 10 and later.</span></p>
<p class="MsoNormal" style="margin:0in 0in 14pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:none;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">If you use custom sites,
update your custom sites accordingly to use the latest content. You can
synchronize your content by using the Synchronize Custom Checks wizard. For
more information, see </span><span lang="EN" style="color:black"><a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html?hl=using%2Csynchronize%2Ccustom%2Cchecks%2Cwizard"><span style="font-size:10.5pt;font-family:"Helvetica Neue";color:rgb(5,99,193)">https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html?hl=using%2Csynchronize%2Ccustom%2Cchecks%2Cwizard</span></a></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></p>
<p class="MsoNormal" style="margin:14pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">More information:</span></b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
To know more about the BigFix Compliance SCM checklists, please see the
following resources:</span></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:none;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">BigFix Forum:<br>
</span><span lang="EN" style="color:black"><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforum.bigfix.com%2Fc%2Frelease-announcements%2Fcompliance&data=05%7C01%7CBigFix-Scrum-Earth%40hcl.com%7C61ec2d6bab7045a6665a08da698269dc%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637938306089268982%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=lZlCjKlTnGZJa3%2Bj3qG%2BCnAoYrbdp3vJhKfbSIBzAk8%3D&reserved=0"><span style="font-size:10.5pt;font-family:"Helvetica Neue";color:rgb(0,136,204)">https://forum.bigfix.com/c/release-announcements/compliance</span></a></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></p>
<p class="MsoNormal" style="margin:0in 0in 14pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:none;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">BigFix Compliance SCM
Checklists:<br>
</span><span lang="EN" style="color:black"><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbigfix-wiki.hcltechsw.com%2Fwikis%2Fhome%3Flang%3Den-us%23!%2Fwiki%2FBigFix%2520Wiki%2Fpage%2FSCM%2520Checklists&data=05%7C01%7CBigFix-Scrum-Earth%40hcl.com%7C61ec2d6bab7045a6665a08da698269dc%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637938306089268982%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=85r4DuoxmRhQGtFLNdDeWVnEczSvEM%2BtlYxQcbAAdCU%3D&reserved=0"><span style="font-size:10.5pt;font-family:"Helvetica Neue";color:rgb(0,136,204)">https://bigfix-wiki.hcltechsw.com/wikis/home?lang=en-us#!/wiki/BigFix%20Wiki/page/SCM%20Checklists</span></a></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></p>
<p class="MsoNormal" style="margin:14pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">We hope you find this
latest release of SCM content useful and effective. </span><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:14pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Thank you!</span></p>
<p class="MsoNormal" style="margin:14pt 0in 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">– The
BigFix Compliance team</span></p></div>