<div dir="ltr"><p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Product:</span></b></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">BigFix Compliance</span><span lang="EN" style="font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Title:</span></b><span lang="EN" style="color:black"><br>
</span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Updated DISA STIG Checklist for Red Hat Enterprise Linux 8</span></p>
<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Security Benchmark:</span></b><span lang="EN" style="color:black"><br>
</span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Red Hat Enterprise Linux 8 STIG SCAP Benchmark V2R7</span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Published
Sites:</span></b><span lang="EN" style="color:black"><br>
</span><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">DISA STIG Checklist for RHEL 8</span><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">, site
version 26</span><span lang="EN" style="color:black"><br>
</span><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">(The
site version is provided for air-gap customers.)</span></p>
<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Details:</span></b></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> Total New
Fixlets: 6</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> Total Updated
Fixlets: 7</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> Total Deleted
Fixlets: 10</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> Total Fixlets
in Site: 363</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">New Fixlets:</span></b></p>
<p class="gmail-MsoListParagraphCxSpFirst" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span><span style="font-family:Calibri,sans-serif;color:black">RHEL 8 must
implement DOD-approved encryption in the bind package.</span><span style="font-family:Calibri,sans-serif"></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span><span style="font-family:Calibri,sans-serif;color:black">RHEL 8 IP tunnels
must use FIPS 140-3-approved cryptographic algorithms.</span><span style="font-family:Calibri,sans-serif"></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span><span style="font-family:Calibri,sans-serif;color:black">RHEL 8 must not
install packages from the Extra Packages for Enterprise Linux (EPEL)
repository.</span><span style="font-family:Calibri,sans-serif"></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span><span style="font-family:Calibri,sans-serif;color:black">RHEL 8 must have
the crypto-policies package installed.</span><span style="font-family:Calibri,sans-serif"></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span><span style="font-family:Calibri,sans-serif;color:black">RHEL 8
cryptographic policy must not be overridden.</span><span style="font-family:Calibri,sans-serif"></span></p>
<p class="gmail-MsoListParagraphCxSpLast" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span style="font-size:12pt;line-height:115%">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-family:Calibri,sans-serif;color:black">RHEL 8 must automatically exit interactive command
shell user sessions after 10 minutes of inactivity.</span><span lang="EN" style="color:black"><br>
<br>
</span><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Updated
Fixlets:</span></b><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span><span style="font-family:Calibri,sans-serif;color:black">The systemd
Ctrl-Alt-Delete burst key sequence in RHEL 8 must be disabled.</span><span style="font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span style="color:black">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-family:Calibri,sans-serif;color:black">The RHEL 8 SSH client must be configured to use only DOD-approved
encryption ciphers employing FIPS 140-3-validated cryptographic hash algorithms
to protect the confidentiality of SSH client connections.</span></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span><span style="font-family:Calibri,sans-serif;color:black">The RHEL 8 SSH
server must be configured to use only DOD-approved encryption ciphers employing
FIPS 140-3-validated cryptographic hash algorithms to protect the
confidentiality of SSH server connections.</span><span style="font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span style="color:black">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-family:Calibri,sans-serif;color:black">The RHEL 8 SSH server must be configured to use only Message
Authentication Codes (MACs) employing FIPS 140-3-validated cryptographic hash
algorithms to protect the confidentiality of SSH server connections.</span></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span><span style="font-family:Calibri,sans-serif;color:black">The RHEL 8 SSH
client must be configured to use only DOD-approved Message Authentication Codes
(MACs) employing FIPS 140-3-validated cryptographic hash algorithms to protect
the confidentiality of SSH client connections</span><span style="font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span><span style="font-family:Calibri,sans-serif;color:black">RHEL 8 must use a
Linux Security Module configured to enforce limits on system services.</span><span style="font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span><span style="font-family:Calibri,sans-serif;color:black">RHEL 8 must
enable the SELinux targeted policy.</span><span style="font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Deleted Checks:</span></b></p>
<p class="gmail-MsoListParagraphCxSpFirst" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span style="font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-family:Calibri,sans-serif">The RHEL
8 SSH daemon must be configured to use system-wide crypto policies.</span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span style="font-family:Symbol;color:black">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-family:Calibri,sans-serif;color:black">RHEL 8 must not have the rsh-server package installed.</span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span style="font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-family:Calibri,sans-serif;color:black">The RHEL 8 operating system must implement
DoD-approved encryption in the OpenSSL package.</span><span style="font-family:Calibri,sans-serif"></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span style="font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-family:Calibri,sans-serif;color:black">The RHEL 8 operating system must implement
DoD-approved TLS encryption in the OpenSSL package.</span><span style="font-family:Calibri,sans-serif"></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span style="font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-family:Calibri,sans-serif;color:black">The RHEL 8 operating system must implement
DoD-approved TLS encryption in the GnuTLS package.</span><span style="font-family:Calibri,sans-serif"></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span style="font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-family:Calibri,sans-serif;color:black">RHEL 8 SSH server must be configured to use only
FIPS-validated key exchange algorithms.</span><span style="font-family:Calibri,sans-serif"></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span style="font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-family:Calibri,sans-serif;color:black">Local RHEL 8 initialization files must not execute
world-writable programs.</span><span style="font-family:Calibri,sans-serif"></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span style="font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-family:Calibri,sans-serif;color:black">RHEL 8 must display the date and time of the last
successful account logon upon logon.</span><span style="font-family:Calibri,sans-serif"></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span style="font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-family:Calibri,sans-serif;color:black">RHEL 8 must audit any script or executable called by
cron as root or by any privileged user.</span><span style="font-family:Calibri,sans-serif"></span></p>
<p class="gmail-MsoListParagraphCxSpLast" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span style="font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-family:Calibri,sans-serif;color:black">RHEL 8 temporary user accounts must be provisioned
with an expiration time of 72 hours or less.</span><span style="font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Additional
details:</span></b></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Both analysis and remediation
checks are included.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Some of the checks allow you to
use the parameterized setting to enable customization for compliance
evaluation. Note that parameterization and remediation actions require the
creation of a custom site.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Improved a few checks by adding
the pending restart feature to them. The pending restart feature works in the
following ways:</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">The action results will show
“Pending Restart” instead of “Fixed” for those checks which require OS reboot.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> The check will show relevant for those
endpoints until they are rebooted.</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Post reboot of the endpoint the action results will
show as “Fixed” and the check will be compliant.</span></p>
<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Actions to take:</span></b></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">To subscribe to the above site, you can use the
License Overview Dashboard to enable and gather the site. Note that you must be
entitled to the BigFix Compliance product and you must be using BigFix version
10.0 and later.</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> If you use custom sites, update your custom
sites accordingly to use the latest content. You can synchronize your content
by using the Synchronize Custom Checks wizard. For more information, see </span><span lang="EN" style="color:black"><a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html"><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;color:rgb(0,136,204);text-decoration:none">Using the Synchronize Custom Checks wizard</span></a></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">More information:</span></b><span lang="EN" style="color:black"><br>
</span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">To know more about the BigFix
Compliance SCM checklists, please see the following resources:</span></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">BigFix Forum:</span><span lang="EN" style="color:black"><br>
<a href="https://forum.bigfix.com/c/release-announcements/compliance"><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;color:rgb(0,136,204);text-decoration:none">https://forum.bigfix.com/c/release-announcements/compliance</span></a></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">BigFix Compliance SCM Checklists:</span><span lang="EN" style="color:black"><br>
<a href="https://bigfix-wiki.hcltechsw.com/wikis/home?lang=enus#!/wiki/BigFix%20Wiki/page/SCM%20Checklists"><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;color:rgb(0,136,204);background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;text-decoration:none">Welcome to Wikis</span></a></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">We hope you find this latest
release of SCM content useful and effective. Thank you!</span></p>
<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><i><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">– The BigFix Compliance team</span></i></p></div>