STIG first - need a definitive answer

borgan

I am about to install Orion Platform v2023.1 on a server that has NOT been STIGed yet. The Secure Configuration for the Orion Platform document states that the server should be STIGed BEFORE installation.

My question is simple - is it a requirement that the server be STIGed first, or will it work AND be supported if the STIG is applied after Orion installation.

Also, there will be a CrowdStrike sensor installed. WHen should that be done, and will any exceptions be needed for Orion to operate properly?

Thank you for any help.

jm_sysadmin

Crowdstrike is easy, do it anytime. We run it here without issue. 

The STIG question I don't have direct experience with, but I am sure the concern is that installing Orion then applying STIGs could undo some configuration. If I were to run the STIG configs after the install, I might re-run the configuration wizard. Either way, I think you should be able to find a baseline config that makes both compliance and Orion happy.