CONFIDENCE: SECURED DATASHEET
TRIPWIRE CONFIGURATION
HIGHLIGHTS
Comprehensive
uu network
COMPLIANCE MANAGER
coverage
CONFIGURATION AUDITING, FIM AND CHANGE ANALYSIS
Agentless
uu file integrity
monitoring including checksum, Ensuring that systems are always prop- COMPREHENSIVE AUDIT SUPPORT
change originator, file size, erly configured is critical for compliance Using innovative agentless technology,
version creation date and and security initiatives. But gaining Tripwire Configuration Compliance
modified date visibility into system configurations and Manager continuously identifies all
their compliance status is a significant IP-enabled systems that are active on a
Sophisticated
uu risk challenge, especially with the rapid network, including servers, desktops,
prioritization algorithms identify rate of change in enterprise networks. laptops, routers, switches and firewalls.
the most urgent problems Additionally, demonstrating to auditors The solution then enumerates the
Flexible
uu reporting and that systems are compliant can be a applications and configuration of each
manual, time consuming project that is system, providing detailed information
dashboards provide compliance
inefficient and potentially ineffective. on thousands of configuration variables.
data to the appropriate Tripwire CCM identifies and assesses
audience Tripwire Configuration Compliance virtually everything on the network,
Manager (CCM) automates enterprise- from routing table entries and access
wide configuration auditing, change control lists to Active Directory group
analysis and file integrity monitoring, policy objects and application miscon-
providing continuous visibility into the figurations, all without requiring agent
compliance of IT system configura- software on the endpoints.
tions and the impact of changes. Its
integrated policy engine compares actual Tripwire CCM continuously audits each
configurations to internal policy or system’s configuration and compares
best practice benchmarks, and priori- any configuration changes with relevant
tizes the risk and compliance impact best practice and industry standard
of configuration changes. Automating policies from NIST, CIS and Microsoft.
configuration auditing enables a greater Tripwire CCM also provides policies for
level of security and dramatically reduces specific regulations such as PCI, SOX
preparation time for IT audits conducted and HIPAA.
for regulations such as Payment Card
Industry Data Security Standard (PCI), Tripwire Configuration Compliance
Sarbanes-Oxley (SOX) and HIPAA. Manager’s robust reporting capabilities
Tripwire CCM’s continuous change- and web-based dashboards provide details
centric process lowers costs and increases on the compliance of system configura-
uptime by ensuring that systems also tions through a range of customizable
remain configured in compliance with reports—from technical reports designed
organizational policies.
RISK-BASED SECURITY MANAGEMENT SOLUTIONS
for IT and security teams to compliance
framework reports such as CobiT, SAS-70
or ISO 17799—for managerial and audit
audiences. The automated reports make
preparation for IT audits efficient and
comprehensive while the dashboards
give administrators a variety of real-time
perspectives into the compliance status of
every system on the network.
Tripwire Configuration Compliance
Manager can also be integrated with
configuration or change management TRIPWIRE
uu CONFIGURATION COMPLIANCE MANAGER provides pre-built policies and
processes to address any configuration benchmarks from NIST, CIS and Microsoft, and also supports customized,
compliance deviations identified. When user-generated policies.
the solution identifies out-of-compliance
configurations or changes it can imme-
diately notify administrators, open »»Integrated Policy Engine and Rich »»Open Architecture — Tripwire
trouble tickets and update the CMDB. Policy Library — Tripwire CCM Configuration Compliance Manager
Additionally, issues can be prioritized comes with a rich library of pre-built can operate standalone or as part of
based on the business value of the assets policies, including prescriptive policies a federated CMDB, such as the HP
affected. from NIST, CIS and Microsoft and Universal CMDB and the IBM Tivoli
regulatory policies including PCI, CCMDB. Tripwire CCM is the author-
FASTER AUDIT PREPARATION SOX and HIPAA. The policy engine itative source of policy and compliance
THROUGH COMPLIANCE enables customizing these policies for data for the HP Universal CMDB, and
MANAGEMENT an organization’s particular needs or it provides the sole source of policy and
The Tripwire Configuration Compliance for creating new policies. With just one compliance status into the IBM Tivoli
Manager agentless configuration audit- click, you can even create a policy based CCMDB.
ing solution provides four key technology on the configuration of a particular
breakthroughs that enable fast and effec- system (such as the “gold” image for
tive audit preparation: new servers).
»»Agentless Architecture — Because »»Configuration Change Analysis —
it does not require the installation of Tripwire CCM not only enumerates the
software agents on devices, Tripwire configuration of IT systems in detail, it
Configuration Compliance Manager identifies how these configurations are
can monitor a wide variety of systems changing and whether these changes
not typically supported by some agent- require attention. When Tripwire CCM
based applications, including routers, identifies a compliance deviation, it
switches, and firewalls. Monitoring of can escalate the issue in a number of
mobile devices can be made operational ways, including alerting administrators
by a small team in a matter of hours. or opening a trouble ticket. Further, all
Tripwire CCM even provides file configuration changes are recorded for
integrity monitoring without the use of audit and control purposes.
agents.
uu Tripwire is a leading global provider of risk-based security and compliance management solutions that
enable organizations to effectively connect security to the business. Tripwire delivers foundational security controls
like security configuration management, file integrity monitoring, log and event management, vulnerability management,
and security business intelligence with performance reporting and visualization. u
LEARN MORE AT [Link] OR FOLLOW US @TRIPWIREINC ON TWITTER.
©2013 Tripwire, Inc. Tripwire is a registered trademarks of Tripwire, Inc.
All other product and company names are property of their respective owners. All rights reserved. NCCCM1r 201306
