Creating an audit

In the SA Client, there are several ways to create an audit.

You can:

• Select a managed server as the source of the audit, to run the audit on a single server.
  See Creating an audit from a server.

• Select a group of managed servers as the source of the audit, to run the audit on all servers in that group.
  See Creating an audit from a group of servers.
• Create a new audit from the SA Library.
  See Creating an audit from the SA Library.
• Create an audit that is based on the server configuration captured in a snapshot.
  See Creating an audit from a snapshot.
• Create an audit that is based on the audit policy.
  See Creating an audit from an audit policy.

Creating an audit from a server

When you create a new audit from a managed server, the audit uses the selected server as the source of the audit. You can choose another server or snapshot for the audit source, or even not choose a source and define your own custom rules.

To audit a managed server, the server must be reachable and you must have access to the server.

To create an audit from a server:

1. In the navigation pane, select Devices > Servers > All Managed Servers.
2. Select a server.
3. From the Actions menu, select Create > Audit to open the Audit window.

For further information, see Audit configuration .

Creating an audit from a group of servers

When you create an audit from a group of servers, the audit will evaluate all accessible servers in that group. However, the audit will evaluate only those servers in a group for which your user has access.

To audit a group of servers:

1. In the navigation pane, select Devices > Device Groups.
2. In the content pane, select Public or private.
3. In the content pane, select a group of servers to audit.
4. From the Actions menu, select Create > Audit to open the Audit window.

When you perform an audit by selecting a group of servers, the group of servers becomes the target. If the audit rule requires a source, you must specify one. See Audit configuration .

Creating an audit from the SA Library

To create an audit from the SA Library:

1. In the navigation pane, select Library > By Type > Audit and Remediation.
2. In the navigation pane, expand Audits.
3. Select an operating system: Windows or Unix.
4. From the Actions menu, select New to open the Audit window.

See Audit configuration .

Creating an audit from a snapshot

You can select any snapshot in the SA Library and create an audit that is based on the server configuration captured in the snapshot. The snapshot will serve as the source of the audit; however, after you create the new audit from the snapshot, you can also select a different snapshot or server as the source.

To create an audit from a snapshot:

1. In the navigation pane, select Library > By Type > Audit and Remediation.
2. In the navigation pane, expand SnapshotSpecifications.
3. Select an operating system: Windows or Unix.
4. From the Actions menu, select New to open the Snapshot Specification window.

See Audit configuration .

Creating an audit from an audit policy

Audit policies are designed to be used by audits. When you create an audit from an audit policy, the audit policy is linked to the audit. When updates are made to that audit policy, all changes are reflected in the audit.

To create an audit from an audit policy:

1. In the navigation pane, select Library > By Type > Audit and Remediation.
2. In the navigation pane, expand Audit Policies.
3. Select an operating system: Windows or Unix.
4. From the Actions menu, select New to open the Audit Policy window.

See Audit configuration .