Release Notes

Audit Integration Component 6.1

September 13, 2006

Notice
The content in this document represents the current view of Altiris as of the date of publication. Because Altiris responds continually to changing market conditions, this document should not be interpreted as a commitment on the part of Altiris. Altiris cannot guarantee the accuracy of any information presented after the date of publication. 2006 Altiris. All rights reserved. Altiris, the Altiris logo, BootWorks, Inventory Solution, LabExpert, PC Transplant, RapiDeploy, and RapidInstall are registered trademarks of Altiris, Inc. in the United States. Carbon Copy is a registered trademark licensed to Altiris, Inc. in the United States and a trademark of Altiris, Inc. in other countries. Altiris eXpress, Deployment Server, Deployment Solution, My IT Forum, Notification Server, Vision, Web Reports and other product names are trademarks of Altiris, Inc. in the United States and other countries. AuditExpress, Scan on Detect, and SecurityExpressions are trademarks of Pedestal Software Inc. in the United States. Audit on Connect and Audit on Detect are trademarks of Pedestal Software inc. in the United States and other countries. Pedestal Software, Inc. is a wholly owned subsidiary of Altiris, Inc. All other brand names are trademarks or registered trademarks of their respective companies. Information in this document is subject to change without notice. For the latest documentation, visit our Web site at www.altiris.com

RNT: D

Contents
SECTION 1 OVERVIEW............................................................................................................................ 3 1.1 Document Purpose .......................................................................................................................... 3 1.2 Background...................................................................................................................................... 3 1.3 Additional Documentation................................................................................................................ 3
1.3.1 Altiris Information Resources ...............................................................................................................3

1.4 Contacting Customer Support ......................................................................................................... 4 SECTION 2 INSTALLATION AND UPGRADING...................................................................................... 5 2.1 System Requirements ..................................................................................................................... 5 2.2 Where to Download the Software ............................................................................................ 5 2.3 Upgrade Steps................................................................................................................................. 5 SECTION 3 WHATS NEW? ...................................................................................................................... 6 3.1 SecurityExpressions data integrated ............................................................................................... 6 3.2 Solution name change ..................................................................................................................... 6 SECTION 4 KNOWN ISSUES ................................................................................................................... 7 4.1 Connecting to a SQL-Server security-audit database ..................................................................... 7 4.2 Security-audit database must be case insensitive .......................................................................... 7 4.3 Installing SecurityExpressions......................................................................................................... 7 4.4 Using Altiris Agent to perform agentless auditing in the security-management application............ 7 4.5 Running the solution on Altiris Console 6.5 (AeXHD14049) ........................................................... 7 4.6 Errors when generating Web reports with no data (LB44094) ........................................................ 7 4.7 Security-policy categories and SecurityExpressions....................................................................... 7

RELEASE NOTES

AUDIT INTEGRATION COMPONENT

PAGE 2 OF 8

Section 1 Overview
1.1 Document Purpose
Please read the following document carefully. This document lists important issues and topics concerning the product. We recommend that you read the entire document before you install the software.

1.2 Background
The Audit Integration Component adds security-audit features to the Notification Server infrastructure to help you eliminate security vulnerabilities throughout your organizations global network. The solution transfers security-audit data from the security-management application into Notification Server so you can apply the data to Notification Server tasks such as updating collections, refining notification policies, designing reports, and creating Altiris Helpdesk and Alert Management tickets.

1.3 Additional Documentation

Altiris product documentation is available in Microsoft HTML Help (.CHM) and Adobe Acrobat (.PDF) formats. To view Altiris product documentation in .PDF format, use Adobe Acrobat Reader (available at: http://www.adobe.com/products/acrobat/readstep2.html). Documentation files are installed in the following directory on the Notification Server computer: C:\Program Files\Altiris\eXpress\Notification Server\NSCap\Help The following documentation is provided with this solution: Audit Integration Component Users Guide Audit Integration Component Help You can access documentation from the Altiris Console by clicking the following icons in the upperright corner of the console: Access the contextual online help by clicking the online help icon. Access an index of all installed help by clicking the index icon.

1.3.1 Altiris Information Resources

Source What Information it Includes Information about new features, update instructions, and known issues for each release. Includes Altiris formal documentation such as Release Notes, Help, Reference Guides, Best Practice Articles, and Where to Find it

Altiris Documentation

http://www.altiris.com/support/documentation

RELEASE NOTES

AUDIT INTEGRATION COMPONENT

PAGE 3 OF 8

Technical Reference Articles. Altiris Knowledgebase Altiris Juice: an online magazine for Altiris users Online Forums Comprehensive collection of articles, incidents, and http://kb.altiris.com/ issues for Altiris solutions. Best Practices, tips and tricks, and articles for users of Altiris solutions.

http://www.altiris.com/juice

Forums for Altiris solutions http://forums.altiris.com/ and suites.

1.4 Contacting Customer Support

Altiris has performed extensive testing before releasing the product. If you find a problem or have questions, please contact customer support at http://www.altiris.com/support by completing the form provided. You may also send an email message to support@altiris.com or call +1 617 559 3116. World Wide Web: http://www.altiris.com

RELEASE NOTES

AUDIT INTEGRATION COMPONENT

PAGE 4 OF 8

Section 2 Installation and Upgrading

2.1 System Requirements
Before you install the software, make sure you meet all of the following hardware and software requirements for both the integration component and the security-management application. Notification Server 6.0 Service Pack 2 or later, installed and ready to use a new, dedicated, case-insensitive database manually created with Microsoft SQL Server 2000 or later to use as the security audit database, with a system data-source name (DSN) already set up and pointing to this database. This must be a separate SQL server database, although it can reside within the same SQL Server. if using SecurityExpressions as the security-management application, version 3.4.1 or later all system requirements listed in the security-management applications release notes Altiris Agent installed on every computer you plan to audit. If you plan to audit any UNIX or Linux computers using the security audit agent, you must have Altiris Agent for UNIX and Linux installed on Notification Server.

2.2 Where to Download the Software

The Audit Integration Component solution can be downloaded from Notification Servers Solutions Center to install for the first time or upgrade from previous versions. AuditExpress is included with the solution. You can install AuditExpress straight from Altiris Console. SecurityExpressions is not included with the solution. You can download it from http://www.altiris.com/Download.aspx to install for the first time or upgrade from previous versions.

2.3 Upgrade Steps

This version of the solution allows you to upgrade the integration component seamlessly from previous versions using the Solutions Center. From there, you can upgrade the security management application and any security audit agents you use. 1. Download the integration component from the Solutions Center to update features and automatically restore data. 2. Upgrade and configure the security-management application. 3. Upgrade any security audit agents installed on target computers.

RELEASE NOTES

AUDIT INTEGRATION COMPONENT

PAGE 5 OF 8

Section 3 Whats New?

3.1 SecurityExpressions data integrated
Now you can use the solution to transfer audit data from SecurityExpressions as well as AuditExpress to Notification Server for use with Notification Server tasks. Since both securitymanagement applications use the same security audit database, this is made easy. The same security audit agents, collections, notification policies, and Web reports work with both kinds of data.

3.2 Solution name change

Since you can use both SecurityExpressions data and AuditExpress data with the solution, the solutions name changed from AuditExpress Integration Component to Audit Integration Component. The name was changed in both the solutions interface and in the documentation.

RELEASE NOTES

AUDIT INTEGRATION COMPONENT

PAGE 6 OF 8

Section 4 Known Issues

4.1 Connecting to a SQL-Server security-audit database
While Notification Server automatically creates the SQL Server database it uses when you install it, the security-management application does not create SQL Server databases. Since the integrated component communicates with SQL Server databases only, you or your database administrator must manually create a new, dedicated, case-insensitive security audit database before installing the security-management application. This must be a separate SQL server database, although it can reside within the same SQL Server. After installing the security-management application, you must connect it to this newly created database. When you run the security-management application for the first time, it creates the necessary database tables for you.

4.2 Security-audit database must be case insensitive

When you create the security audit database using Microsoft SQL Server, you must make sure the database you create is case insensitive. To learn more about creating case-insensitive databases using Microsoft SQL Server, check Microsofts documentation.

4.3 Installing SecurityExpressions

Whereas AuditExpress comes with the solution and you can install AuditExpress from the solution, you must obtain and install SecurityExpressions separately.

4.4 Using Altiris Agent to perform agentless auditing in the securitymanagement application
You must install the Altiris Agent on every target computer you plan to audit, even if youre not using the security audit agent to access the target computer in the security-management application.

4.5 Running the solution on Altiris Console 6.5 (AeXHD14049)

If you run the solution on Altiris Console 6.5 with Console Data Pack version 6.5.1144 or earlier installed, the Configure > Solutions menu lists the solution under the name AuditExpress Integration Component instead of Audit Integration Component.

4.6 Errors when generating Web reports with no data (LB44094)

Generating Web reports about security audit data in Altiris Console causes an overflow error when 1) there is no security audit data imported or 2) when the reports query returns no results.

4.7 Security-policy categories and SecurityExpressions

Like AuditExpress, SecurityExpressions collects data based on security policies. Unlike AuditExpress, these security policies dont contain separate categories of security checks. In
RELEASE NOTES AUDIT INTEGRATION COMPONENT PAGE 7 OF 8

places where you need to select or enter a security-policy category to complete a task, the only option available in the Category field will be the same as the security policy. These places are: New Collection wizard New Notification Policy wizard Purging Maintenance page Audit Detail views Reports tab, generating and viewing Web reports

RELEASE NOTES

AUDIT INTEGRATION COMPONENT

PAGE 8 OF 8