Product:
BigFix Compliance
Title:
Scan Exclusion Tasks for Deploy & Run Scan for Linux Checklist.
This workflow separates scan configuration from execution for custom, consistent and repeatable scanning. Exclusions are stored on the endpoint and automatically applied by the Deploy and Run task, overriding manual “Deploy and Run task” Take Action inputs. Exclusions can be updated anytime using the Add or Remove Scan Exclusion tasks without changing the scan workflow.
What’s New?
Add Scan Exclusions – Adds and stores custom scan exclusion values on the endpoint.
Remove Scan Exclusions – Removes previously stored scan exclusion values from the endpoint.
Measured Values - Scan Exclusions - Displays the endpoint scan exclusion configuration and related settings, including excluded directories, mounts, filesystems, inode threshold, and configuration file status.
What’s Covered
This enhancement applies to the following SCM checklists:
Released Checklists
| SL Number | Checklist Name | Site Version |
|---|---|---|
| 1 | CIS Checklist for RHEL 7 | 65 |
| 2 | CIS Checklist for RHEL 8 | 43 |
| 3 | CIS Checklist for RHEL 9 | 17 |
| 4 | CIS Checklist for RHEL 10 | 5 |
Action to take:
To subscribe to the above site, you can use the License Overview Dashboard to enable and gather the site. Note that you must be entitled to the BigFix Compliance product and you must be using BigFix version 10.0 and later.
To use the Add Scan Exclusions, Remove Scan Exclusions, and Measured Values - Scan Exclusions tasks in a custom site, create custom copies of the tasks or export them from the external site and import them into your custom site before deployment. The Deploy and Run task can be synchronized from the external site to the custom site. If synchronization is not possible, create a custom copy of the task or export it from the external site and import it into your custom site before deployment.
More information:
To know more about the BigFix Compliance SCM checklists, please see the following resources:
BigFix Forum:
https://forum.bigfix.com/c/release-announcements/compliance
BigFix Compliance SCM Checklists: CIS Compliance Checklist
We hope you find this latest release of SCM content useful and effective.
Thank you!
– The BigFix Compliance team