Symantec Security Expressions Server - Manual (Page 28)

SecurityExpressions Server User Guide
20
(weighted total of OK results ÷ (weighted total of OK rules + weighted total of Not
OK rules)) × 100
Example
An audit contains four rules:
• 1 High Priority
• 1 Medium Priority
• 1 Low Priority
• 1 no priority or impact, and no Weight key exists
The weight values are:
• High:1.5
• Medium:1.0
• Low:0.5
The rule with no priority or impact set assumes a weight of 1.0, which happens to also be the
default Medium priority weight in this example. If none of the rules return Info or Error, the
weighted total of all rules is:
((1 Ч 1.5) + (1 Ч 1.0) + (1 Ч 0.5) + (1 Ч 1.0) + 0) = 4.0
So, if the high-priority rule returns Not OK and the other three rules return OK, the score will be
the actual weighted total for OK rule results [i.e. (1Ч1.0)+(1Ч0.5)+(1Ч1.0)] divided by the
weighted total of all rules [i.e. 4.0], multiplied by 100:
2.5 ч 4.0 Ч 100 = 63
Target Options
The Agent & Service Configuration options are for Windows target systems only. The SSH Agent
Authentication options are for UNIX target systems only.
Agent & Service Configuration
The Agent & Service Configuration options let you manage the remote execution of scripts and
programs.
Default method for remote execution on Windows
When a method for executing scripts and programs is not explicitly given in a rule or security
check, the application uses the method selected. When set to Automatic, the application tries
to run executables using all other methods until it finds a compatible method. It tries the
methods in this order:
1. Task Scheduler - Uses the Windows Task Scheduler to remotely execute scripts and
programs.
2. WMI - Uses Windows Management Instrumentation, which is typically enabled on all
Windows platforms, to remotely execute scripts and programs.