Predefined standards for ESM

The predefined standards are the standards that are installed along with the product. The predefined standards are present in the predefined folder in the tree pane. These standards are not editable.

Each check expression in a standard is mapped to an ESM policy. You can also map multiple checks of an ESM policy to one CCS standard. The checks that a predefined standard contains map to only one ESM policy. However, in customized standards, you can map each check to different CCS standards.

Note:

You cannot edit a predefined standard. You can copy the predefined standards and then customize them as per your requirement.

See Copying and pasting a standard.

Table: CCS standard to ESM policy mapping contains the following information:

Table: CCS standard to ESM policy mapping

Predefined CCS standard

ESM policy

ESM policy installer in the product disc

ESM - CIS Legacy Security Settings Benchmark for Windows 2003 Domain Controller v2.0

Security essentials W2K3DC v2.0

Content_Updates\Policies\Security Essentials\Policies\Windows_2003_SecurityEssentials.exe

ESM - CIS Windows Server 2003 Legacy Security Settings for Domain Member Servers v2.0

Security essentials W2K3MS v2.0

Content_Updates\Policies\Security Essentials\Policies\Windows_2003_SecurityEssential.exe

ESM - CIS for Solaris 10 Benchmark v4.0

Security essentials Sol 10 v4.0

Content_Updates\Policies\Security Essentials\Policies\Solaris\Solaris10_SecurityEssentials.exe

ESM - Change Notifications for Windows

WS3 Server SOA Change

Content_Updates\Policies\Sarbanes-Oxley\Policies\Microsoft\Intel\w3s-ix86 \Windows_2003_SOA_Change_Notification.exe

ESM - Change Notifications for UNIX

Sol 8-9 SOA Change

Content_Updates\Policies\Sarbanes-Oxley\Policies\Solaris\Solaris_SOA_Change_Notification.exe

File, Folder Entitlements

File, Folder Entitlements

Content_Updates\Policies\Sarbanes-Oxley\Policies\BestPractice_Entitlement_Reporting.exe

User, Group Entitlements

User, Group Entitlements

Content_Updates\Policies\Sarbanes-Oxley\Policies\BestPractice_Entitlement_Reporting.exe

Note:

The ESM - Change Notifications for Windows and ESM - Change Notifications for UNIX standards are based on the Change Notification category of messages in Enterprise Security Manager.