Audit and remediation

Audit and Remediation allows you to identify which objects you want checked, where you want to check for them, and when you want to check them in your IT environment.

• Audit policies define what to check—such as files, directories, configuration values, and so on.
• Audits define where to check—such as servers and server groups.
• Audit schedules define when to check—such as one time or as a recurring job.

These capabilities help you understand how to make your managed server environment compliant and how to keep your servers compliant. In SA, you can define server configuration policies to ensure that servers in your facilities meet policy standards. When servers are found to be out of compliance—not configured the way you want them to be—you can remediate them to comply with your organization’s standards.

Using the SA Client, you can audit server configuration values based on a live server or a server snapshot, based on your own custom values, or based on pre-configured audit policies. You can also take server configuration snapshots to capture the current state of a system, so that you can compare other servers against a known baseline.

Audit policies allow you to define company or industry-wide compliance and security standards, which can then be used inside of audits, snapshot specifications, and other audit policies. Referencing audit policies in your audits or snapshot specifications helps verify that you are up to date with the latest compliance definitions in your organization.

Using Audit and Remediation, you can perform the following tasks:

• Compare servers or snapshots to reference servers or snapshots
• Create audits for repeated use
• Create audit policies that define compliance and security standards for your organization
• Associate audits with individual servers or dynamic server groups
• Remediate problems at multiple levels, including files, directories, patches, registry keys, and packages