**The Live Network connector(LNc) is deprecated and replaced with the Marketplace Connector(MpC). MpC can be used to optionally obtain and latest content for NA & SA. More details are available on MpC page.**
**This content can be imported into Server Automation product only through Marketplace Connector(MpC).**
Security and Compliance
IT organizations are increasingly required to cut costs, while still maintaining a secure and compliant infrastructure.
The Security & Compliance Service for Server Automation is a subscription service that delivers security vulnerability policies and up to date compliance policies to immediately identify issues in your environment. The policies include built-in remediation so you can swiftly fix security or compliance issues without expending a lot of resources.
The Security & Compliance Service for Server Automation provides a one-of-a-kind security service that delivers server based security vulnerabilities. Unlike traditional alerts that are typically delivered via email and therefore very difficult and time consuming to act on, security alerts are delivered as actionable audit policies that integrate seamlessly into Server Automation and allow customers to quickly identify all vulnerable servers in their IT environment, significantly reducing the vulnerability window.
The Security & Compliance Service for Server Automation provides several policies to assist organizations with managing compliance.
There are two types of policies available - Compliance Library Policies and Regulatory Policies. The Compliance Library Policies include an array of user-customizable checks to audit and remediate commonly-used objects on platforms, such as Local Security Settings on Windows or RPMs on Linux. Regulatory Policies provide pre-defined values for audit and remediation according to guidelines such as PCI, SOX, or CIS.
Download latest Marketplace Connector (MpC) here.
**Security & Compliance Content availability with Python 2 and 3 Compatibility for Server Automation **
As Python 2 has approached its end of life, Server Automation Security & Compliance Content written in Python 2 must be updated to make it Python 2 and Python 3 compatible to support both existing and future versions of Server Automation. The updated content is been published in a phased manner and it is a prerequisite to enable Python 2 & 3 compatibility on your Server Automation before importing the newer version of content. To enable the python 2 & 3 compatibility on your Server Automation cores/satellites/agents you need to follow instructions provided as part of the Python 2 and 3 Compatibility Announcement made to the SA community.
The Python 2 & 3 compatible Windows Compliance Check Library and Unix Compliance Check Library are made available on a new stream “cc_library_py3”. The old stream "cc_library" is obsolete and no more updates are made available on that stream. It is a must to configure the Market Place Connector (mpc) with the new stream "cc_library_py3". For more information on new or updated compliance content, please see Compliance Content Release Notes published with every release of the content.
Suggested for you are based on app category, product compatibility, popularity, rating and newness. Some apps may not show based on entitlements. Learn more about entitlements.
Vulnerability Content for RHEL9
SHA256 Checksum
4161cf8c3b4b0780ebc693c2d107722b3f98b26d4b74ae24ce0d54942666985c ton_vc_rhel9-332-20240325.zip
Vulnerability Content for RHEL8
SHA256 Checksum
2c82104da41bc915a42005979c00720c1b85d2db8d0d2c6f043af906d9104a29 ton_vc_rhel8-332-20240325.zip
Vulnerability Content for SUSE12
SHA256 Checksum
c9c97ec88cdaef99f28fa92fde01b54395d94ecb8830a32c47244808782fce6c ton_vc_suse12-332-20240325.zip
Vulnerability Content for suse15
SHA256 Checksum
96b40aa76e34ae530bce85613bafe647722ee9580222729a6949e34dd4f6ffbf ton_vc_suse15-332-20240325.zip
Vulnerability Content Release Notes - latest
Vulnerability Content for RHEL7
SHA256 Checksum
130370df9588f74c9a518f04c82532b67da988a62576a8e2cb0e9956e6e89417 ton_vc_rhel7-332-20240325.zip
Vulnerability Service Release Notes - 2024
Release Notes for Compliance Service for Server Automation for 2024
Compliance Service Release Notes - latest
Meta data for MpC is now Python 2/3 compatible
Compliance content library for Server Automation which is compatible with Python2 and Python3.
SHA256 Checksum:
CIS Compliance Content for Windows
Updated CIS Microsoft Windows Server 2022 Benchmark v2.0.0 with post remedial actions supported for SA 2022.11 and above
SHA256Checksum
sa_cis_win2k12-2022.03-456.zip 3d1c5daff62972bb5feb369cdb2667534b70 95a5fcccec736e831473cb2c9645
sa_cis_win2k12r2-2022.03-456.zip 1c8f67b8948b369c195771e6f14a4ffaaff9e1 94f155d16cffb57a9ada0ce37c
sa_cis_win2k16-2023.04-60.zip 39a8bb78ffdfe767c0e06934a8553e2bcaf4b8db355dfeb39803b5ca34ab2564
sa_cis_win2k19-2023.09-72.zip 2e12b37a364c814fce55b9606c398c7047339a8ae957ca668ec3dc3eea9c1725
sa_cis_win7-2022.03-456.zip c1ff36ab26a4de0ab458e56cd73836f53f36a ffc165cf64dd957fe8f6f5c5ff9
sa_cis_win10-2021.12-429.zip c3614df130eb228680f036e5eb5cd0b1b4f43e56af06 33004cba0c368bde3600
sa_cis_win2k22-2023.12-74.zip 91f01a59d9ba71bd97ed14c7436b3bf57583d31da7f58c454feae14655de8118
CIS Compliance Content for RHEL
SHA256 Checksum:
sa_cis_rhel9-2023.09-72.zip 1bab8dfbc5d9776e1065db673806265bbcdc0d9b7db57ba86b71068d38e84bd0
sa_cis_rhel8-2023.12-74.zip c38f22477fabdae6ded12457ad657ddff0abd450582c7958df59f4e152c9758b
sa_cis_rhel7-2023.09-72.zip 30050d35aeb6931921e0e98bc37205b6037b730f883350fd9c6e8e2de29827ff
sa_cis_rhel6-2022.04-466.zip 651b4dd847e4a61753c0233a6762d97dea9188c9f942d379c93d843c4c514c54
Vulnerability Service Release Notes - 2023
Release Notes for Compliance Service for Server Automation for 2023
CIS Compliance Content for oel
sa_cis_oel6-2022.04-466.zip adb7b8c7a81547c8c204ae605afe1674d5148180220c14712fa258437a806252
sa_cis_oel7-2023.09-72.zip 7d56262f1766f2c37fb36cf7bb30d3515b3a7bcdc868d8b9160145fea2554fdb
sa_cis_oel8-2022.04-466.zip 6e58a3f976744e4425f8985d956bbdbcc8f2dc7ace122f497cdf7374be1b477e
sa_cis_oel9-2022.09-486.zip e06dfb723c9a21bbbb9c5deb773270ecd18c58d274fbf8d50254795071006997
SOX Compliance Content for UNIX
SHA256 Checksum
sa_sox_rhel-2023.09-72.zip 9599d0fca670ecf1981c04b085b2b1e0cbf95f3c80a219d49dfa5913fc1453c8
sa_sox_sol11-2022.04-466.zip a4189d66f09b93935e19fce71ea61c55c5b6536e7dffa27af1c96d8a9dd836c3
CIS Compliance Content for suse
sa_cis_suse_12-2023.09-72.zip b69cbc0693bc4857c94372366063fda0a275c9de6331a37294caeef67477f93c
sa_cis_suse11-2022.01-435.zip a019cab726674bf5b12485f9e81d35f2763a258e7f6bb38273e5da55330ac637
sa_cis_suse15-2022.04-466.zip 73110d0690868d6ea0325041dafa54b7f24859afd117b2f4efeed358863b257f
Fisma Compliance Content for Unix
SHA256 Checksum
sa_fisma_rhel-2023.09-72.zip 9c3812f9173c6fd72724914fe0c4000a867ee152b3b1b36dafc817d5475afba9
Hipaa Complaince Content for Unix
SHA256 Checksum
sa_hipaa_rhel-2023.09-72.zip 461c286a58b5112faca346fdea78ba5a869ea3a2dafe9b482d0333f2321df2a0
CIS Compliance Content for Ubuntu
SHA256 Checksum
sa_cis_ubuntu14-2023.09-72.zip fb00c764c1156b5908cadb36500183647387527210f1a8e6adbe0e673f89ad7c
CIS Compliance Content for Centos
sa_cis_centos7-2023.09-72.zip 16ad9fc5297dfeeaaad4983c78a8a3f26e335049b0714b7a149ee2c2af4a0633
DISA Compliance Content for Unix and Windows
SHA256 Checksum:
Vulnerability Content for RHEL6
SHA256 Checksum
815fdf4899fe7cf8f293fb136cd5a5c13b393d84f7d42a93bfd30c4ef5848d61 ton_vc_rhel6-317-20230808.zip
Vulnerability Service Release Notes - 2022
Release Notes for Compliance Service for Server Automation for 2022
Vulnerability Content for win2k22
SHA256 Checksum
e5eba4e798c2de886ca882953ffdfc75f7308e32b69f93657346e398296c7777 ton_vc_win2k22-301-20220830.zip
Vulnerability Content for win2k19
SHA256 Checksum
cd30c59c8840f8d2169fba4cc00b189c1964d467f4415055e549ec2396252cb2 ton_vc_win2k19-301-20220830.zip
Vulnerability Content for Windows2012
SHA256 Checksum
5bb15febcfce79f2f24c2c3515fdbc868b7c292d07b003307d55ffeb97fda825
ton_vc_win2k12-285-20220726.zip
Vulnerability Content for Windwos2012R2
SHA256 Checksum:
bf49552296ea1ab4f564e0a21fe4a609cd2aa1d821ee9b8f7f6e284680423893
ton_vc_win2k12r2-285-20220726.zip
Vulnerability Content for Windows 2016
SHA256 Checksum:
8bbf95f829cbdf8d55c9beda4a296d03b2288ec0395dbff16c6f347bf295123e
ton_vc_win2k16-285-20220726.zip
Vulnerability Content for SUSE11
SHA256 Checksum
820170b14607169e8cbab9a1fd30f41723070b5311dcb6f1f24403bae12a8de9
ton_vc_suse11-263-20220530.zip
ISO Compliance content for Unix Platforms
SHA256 Checksum
sa_iso270001_rhel-2022.04-466.zip ea4963a1663f43673c0580738ee416c64e96d3d655509f4f0d5e5e540de40930
PCI Compliance content for Unix platforms
SHA256 Checksum
sa_pci_rhel_3_2-2021.07-260.zip 4a02ceccde6912a1f9a7664ea6361448dcbc5219bd4f71567a5d1497 8c094a72
sa_pci_sol11_3_2-2022.04-466.zip 598018dac498ac697befaa749c2a72844f5550010e155857ac7112c4c93bf881
ISO Compliance content for Windows Platforms
SHA256Checksum
sa_iso270001_win2k12-2022.03-456.zip aed089da900d5f8acc5bd99911213ddc54b 775bcf71e98fe339e0b12a7030088
sa_iso270001_win2k12r2-2022.03- 456.zip abacd14a104468060e48104167b0f58fcf28 19c9744b05046069d07eb6c35a27
sa_iso270001_win2k16-2022.03-456.zip 6269052485c758043fdb106a9bfaffd45bd4 32a8f35042fa831f70311c2a03c4
sa_iso270001_win2k19-2022.03-456.zip 6386e93b42dec90b3c34ea782f10090f2782 9f472b12ec4dec36c3d85d4145af
Fisma Compliance Content for Windows
SHA256Checksum
sa_fisma_win2k12r2-2022.03-456.zip 783726118c0d5466c006db9a1c96cc420f16 c2a539097a81014e2c391fd906f2
sa_fisma_win2k16-2022.03-456.zip 7a35812f12590e94f87230c4e7bf8935a1dc c49c978dbe5ceecbf3ba86f80b26
sa_fisma_win2k19-2022.03-456.zip 5e0098582607519ab3cecb01f7164992420 dc78a8bfecf2e34d39d222bc5ca93
PCI Compliance Content for Windows
sa_pci_win2k19-2021.12- 356.zip cb0211ecbd08be8f7cbb4ac1bd9ea0b59efa28034a63 c828dc69c07ebca9e88e
sa_pci_win2k22-2021.12- 356.zip c2394cfe47f7c85b187975a3aa3cb351b8a73e4a1ee0 76e0249ac28d4d740a03
sa_pci_win7_3_2-2022.03-456.zip 48af98fea5b8c949175f5e7e33caa35a5906 993c02ed423bc93710fa4214842c
sa_pci_win2k16-2022.03-456.zip f26e5e6a70f891eb7a27fafb7584f1152027b 8c0b78c46ed7ff1ebf1456a3b80
sa_pci_win2k12r2_3_2-2022.03-456.zip 144d878ddf05233cb29dfc828fcbf15ae152c 12dd387fd3563cee2f5cbc9a110
sa_pci_win2k12_3_2-2022.03-456.zip 71854862f5c22b0b5e218770f1762558190a 47fd5bd399bbf547b8b8fa91e606
SOX Compliance Content for Windows
sa_sox_win2k19-2021.12- 356.zip e5021a2731e888d5dcc11b75d50595ea622f9f710c23 25c7f1d79aeffb21b66a
sa_sox_win2k22-2021.12- 356.zip e66002d9d174690829bfbb60690b32e8255de3db9c3 ee5aacb79b15b504867b3
Vulnerability Content For HPUX
SHA256 Checksum
ton_vc_hpux11-260-20210730.zip 4d93240cdeaddf09ec89b4c5a863f6c536d29b9d17980392976fd54a bdc8363f
Vulnerability Content for AIX7.1
SHA256 Checksum
ton_vc_aix71-260-20210730.zip d9bdddc0156d544422f5aafdbec796b6a3613aa4f8137164cc7c8475 2ed54f03
CIS Compliance Content for Solaris
SHA256 Checksum:
sa_cis_sol11-2021.04-224.zip e7c97f039c58fb20cae57ce43d1466aac5da27640079a037aa6e41b20b9d1f7e
Release Notes for Compliance Service for Server Automation for 2020
Release Notes for Compliance Service for Server Automation for 2018-2019
Compliance content for Library
Release Notes for Vulnerability Service for Server Automation for 2018-2019
Vulnerability content for SMO
Vulnerability Content for Windows 2008R2
Vulnerability Content for Windows 2008
This document has the details about compliance content for different benchmark policies with stream names for importing the content into SA Core.
This document has the details about Vulnerability content with stream names for importing the content into SA Core.
This document deals with the generic steps on how to perform a manual import of content builds using MpC tool.
CIS Compliance Content for esx
Hipaa Compliance Content for Windows
Vulnerability Content for AIX6.1
Vulnerability Content for Solaris 10
CIS Compliance Content for HPUX
Vulnerability Content for suse10
CIS Compliance Content for aix
Release Notes for Compliance Service for Server Automation for 2017
Vulnerability Service Release Notes - 2017
List of supported CVEs
Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox
