System Center Configuration Manager Vulnerability Assessment Configuration Pack

Configuration Manager Vulnerability Assessment allows to scan managed systems for common missing security updates and misconfigurations which might make client computers more vulnerable to attack.

Download here

This release includes

  • The capability to scan’s for potential security issues that may exist because of misconfigurations on the following Microsoft Product versions
  • New Vulnerability Assessment Overall Report will display
    • List of Security, Administrative and Compliance Vulnerabilities for a specific computer.
    • List of Windows Updates Vulnerabilities (if there are any)
    • List of Windows Server Vulnerabilities (if there are any)
    • List of IIS Vulnerabilities (if there are any)
    • List of SQL Vulnerabilities (if there are any)

Example checks are:

  • Are unnecessary services installed and running?
  • Do shared folders have appropriate permissions?
  • Is Windows Firewall enabled?
  • Are strong passwords enforced?
  • Are unsecured guest accounts enabled?

 

After downloading the pack, you will need to install it which will extract the cab file into C:\Program Files (x86)\VACP (by default).

To import the Configuration Pack

  • In the Configuration Manager console, navigate to Assets and Compliance / Compliance settings / Configuration Baselines.


  • Right-click Configuration Items, Import Configuration Data to load the Import Configuration Data Wizard.


  • Click Add, browse to C:\Program Files (x86)\VACP (unless you specified another path) and select the .cab file in the install location of the .msi, and then click Open.


  • Summary of the 34 configuration Items will be shown. Click Next to continue.


  • Follow the wizard instructions.
  • There are three base lines created from the Configuration Items. The Vulnerability Assessment Configuration Pack.docx files associated highlights the details of each base line.
  • Deploy the baselines to the proper collections as desired.

 

 

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s