Checks Report

Select Security Configuration domain using Domains and click Reports to find the following report:

Checks
Shows the detailed view of various checks, their descriptions, desired values, and the overall, historical aggregate of the compliance results.
Columns
Name:

This section lists all the checks by their names. Each check represents a specific criterion or setting that must undergo validation to ensure compliance with security standards.

Description:

This part provides a detailed explanation of what each check entails. It includes the specific details of what the check monitors or evaluates within the system.

Desired Values:
  1. Each check has a 'desired value' which represents the expected or compliant state for that check.
  2. The desired value can be of different types such as integer, string, or none.
  3. It is important to note that not all checks have a designated desired value. If a check does not have a desired value, it implies that it is not modifiable, and its value will be shown as <none> or none.
  4. Checks with desired values can be configured to meet different requirements.

This part provides a detailed explanation of what each check entails. It includes the specific details of what the check monitors or evaluates within the system.

Compliance Results:

This shows the historical cumulative data depicting how the systems have adhered to each check over a period of time.

Note: The values from both the BigFix Console and CIS Benchmarks, including their desired states, can be retrieved and, if configurable, modified through the BigFix console.
Note: CIS benchmark documents are accessible in the console via fixlet descriptions of each check.
Note: The desired value is customer-defined, while the default value aligns with CIS recommendations.
Figure 1. Sample of Check Report from Security Configuration Domain
Sample of Check Report from Security Configuration Domain
Figure 2. Check with customized Desired Value

Check with customized Desired Value
Figure 3. Check with no default Desired Value

Check with no default Desired Value