Configure a Group Membership Check control to list the members of a local group. You tell us the group name to be evaluated and the maximum number of results to return. We'll tell you the group members, including users, aliases and groups.
Help me with the settings |
||||||||||||
|
The statement you provide is like the control name that describes what it is and how it should be implemented in the environment. You'll also need to decide which category the control belongs to. This is important because users can search and filter controls by category, they can also search by keywords in the statement. |
||||||||||||
|
The scan parameters are used to gather data needed for compliance evaluation at scan time. Click Add Parameters, and make these settings: Group Name - This is the group name to be evaluated. Max Return Value - This is the maximum number of results you want returned for this group. In your report, the Extended Evidence for this control will show group statistics and indicate whether this limit was reached. Control Data Type and Description The actual value returned for this control is a String List, meaning we'll return a list of matches in the scan results. A control description is also required. |
||||||||||||
Tell me about Control Technologies Your control may apply to many technologies. Select each technology you're interested in and provide a rationale statement and expected value. Time Saving Tip: If you plan to enter the same settings for each technology you only need to do it once. Make your selections in the "Default Values" section first and then select the check box for each technology you want. You'll see that the settings get copied automatically to each technology that you select. Make these settings: Rationale - Enter a rationale statement describing how the control should be implemented for each technology. Cardinality - Select a cardinality for the control. Tell me about these cardinalities A list of strings in the scan results (X) is compared to a list of strings defined for the control (Y). The control values include the default value (a string) and a cardinality. The possible cardinalities are described below.
Operator - The operator can be a "regular expression list" or a "string list". We'll use the operator to compare the scan results to the default value. Default Value. Enter the expected value for each technology as a list of regular expressions or strings. The list of strings returned in the scan results will be compared to the list of strings defined for the control. Learn more You can lock the Cardinality, Operator or Default Value if you don't want users to be able to change these values in the Policy Editor. |
||||||||||||
|
Add up to 10 references for the control. These may be references to internal policies, documents and web sites. For each reference, enter a description, a URL or both. When providing a URL, you must start the URL with http://, https:// or ftp://. For example, enter http://www.qualys.com to link to the Qualys web site. Once added users have the option to include references in policy reports.. |