[EMAIL PROTECTED] wrote: > Hello everyone, my client has a direct feed and I was wondering if there are > any preconfiguration audit files, to run a NIST check against a SQL server? > if there are, are they downloaded with the plug in feed? or do they need to > be downloaded seperately >
The current NIST .audit files are available under the Tenable support portal. There is a blog entry about it here: http://blog.tenablesecurity.com/2007/04/nist_audit_poli.html The audit policies are for XP Pro and 2003, not MS SQL. We have not published any .audit files for MS SQL server auditing yet. NIST has not published any guidence on hardenign MS SQL through their SCAP program yet which is listed here: http://nvd.nist.gov/scap/content.cfm Ron Gula, CTO Tenable Network Security _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
