Chapman, Ralph H wrote: > DHHS has not described their modifications to the FDCC audit > requirements in a SCAP compliant XCCDF format. > > So, how do I create a XCCDF file that can be later converted using xTool > to an .audit file?
Hi Ralph, Tenable does not offer any guidance on writing polices in XCCDF. However, we've written a great deal of SCAP and FDCC polices in the Nessus .audit format which tests for the same configuration settings required by FDCC. These are available on our Customer Support Portal. You'll also find they are very easy to edit and understand. Ron Gula Tenable Network Security _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
