This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Server Configuration Monitor

Please can you let me know when SCM will start having updates to the STIGs?

Currently only Server 2016 is available and that is 8 years old now.

You can only import in YAML format and NIST will only publish in Ansible/Chef/XML.

A better solution would be to allow xml imports for this and remove the need for SolarWinds, or us, to convert them in to YAML which I have read can be troublesome.

Parents
  • Hi.  Currently no plans to update the STIGs or add new ones, but we did add the ability for you to build and modify your own in the GUI.  You should be able to copy the current ones and modify them for your compliance needs.   Alternatively, you could contract with the a third party to build these for you. 

  • That's such a shame. SCM has the potential to be a really powerful tool but hasn't had any appreciable update since 2016.

    Are there any plans to introduce a way to import the XML STIGs that NIST provide? This would alleviate the requirement on SolarWinds to provide updates for templates and provide a much easier and simpler way for your end users to secure their environments.

Reply
  • That's such a shame. SCM has the potential to be a really powerful tool but hasn't had any appreciable update since 2016.

    Are there any plans to introduce a way to import the XML STIGs that NIST provide? This would alleviate the requirement on SolarWinds to provide updates for templates and provide a much easier and simpler way for your end users to secure their environments.

Children
No Data