NetChk Configure Licence - Workstations

Full Control Over the Management of Your Network

Get up and running quickly with Shavlik baselines or create your own policies, either by scanning a “gold standard” machine or customizing to your unique requirements. Shavlik NetChk Configure helps you administer a strong password policy, eliminate unwanted services, manage virtual machines, check firewalls, deploy USB policies, assess disk encryption, control registry and browser settings, perform antivirus checks, and ultimately lock down your workstations and servers.

User Accounts and Groups

Configure helps you quickly find and fix risky user accounts, find poorly secured file shares, check improper group membership, and monitor Access Control Lists.

Compliance

Knowing your network allows you to create an accurate mapping of configuration settings to internal policy or regulatory frameworks that you may use to prove compliance with: SCAP, Common Criteria, FDCC, FISMA, USGCB, PCI, and SOX.

• Ease of Use: Go from install to scanning in 30 minutes or less. Offers a robust user experience, all from a single console.
• Automated policy baseline development and enforcement: Shavlik NetChk Configure uses policies to define the products and the configuration settings checks to evaluate during a particular scan. There are three predefined baseline policies. In addition, you can create your own custom policies that define the specific configuration checks required by your organization.
• Manage Migration from Physical to Virtual Machines: Shavlik NetChk Configure offers a tight coupling with VMware’s vSphere or Virtual infrastructure to more closely manage virtual machines hosted on ESX or ESXi servers to contain configuration drift and to quickly distinguish physical versus virtual machines.
• Policy Cloning & Distribution: Offers advanced "Gold Standard" scanning automation that saves time and increases accuracy. You quickly and easily clone a new policy using the configuration checks configured on a machine that represents your organization’s gold standard. This enables you to leverage existing, approved system configurations. It also makes it very easy to create a security IT infrastructure that can be measured against a pre-defined industry configuration baseline.
• Policy Mapping and Regulatory Audit: Addresses current regulations like PCI, SOX, GLBA, HIPAA, FDCC and FISMA that place new demands on information security. Audit systems using the links between best practices content and auditing standards such as ISO 27002 and NIST 800-53. Use these standards to develop powerful security standards to drive an overall security policy.
• Downloadable PCI DSS Template: NetChk Configure and the downloadable PCI DSS template work together to assist retailers and financial institutions to comply with industry regulations. We gather the proof points for many of the 12 PCI DSS requirements including performing age checking.
  • Shares: A share is any resource that can be accessed by other users or computers on a network. Shavlik NetChk Configure can scan for and collect information about shares it identifies on scanned machines.
  • Group Membership: Shavlik NetChk Configure can scan for and collect information about groups it identifies on scanned machines. A group is typically granted certain privileges on a machine. By extension, the members of a group are afforded the same privileges granted to the group. Understanding who is a member of a group can help you limit the number of people able to perform certain functionality.
  • Audit-Ready Reporting: Easily create a variety of "audit ready" reports that will demonstrate that the proper configuration controls are in place and operational. These reports can also provide alignment between the various regulations (PCI, SOX, HIPAA, etc.) and the requirements of either internal or external auditors who utilize industry standard policy frameworks to measure compliance and prove "due care" has been taken.
  • Scheduled scanning and policy enforcement: You can use the Schedule feature to specify when and how often a scan should be run. You can regularly run scans at a specific time using a specified recurrence pattern. For example, using this option, a scan could be run every night at midnight, or every Saturday at 9 PM, or on the first day of every month at 11 PM, or at any other user selected time and interval.
    
    In addition, by enabling the Auto Enforce option you can automatically enforce the policy by correcting any discrepancies found on the scanned machines. The enforcement is performed immediately after the scan.
  • Exporting and importing policies: Allows you to export an existing policy to an XML file. This makes the policy available to be imported by other installations of Shavlik NetChk Configure.
  • Custom Check Wizard: Enables you to expand upon the numerous out-of-box checks by creating your own custom compliance checks. This allows you to track items that are unique to your organization. The custom checks are added to a custom policy and referenced whenever that policy is used in a compliance scan.