On 6/6/17 11:05 PM, Fen Labalme wrote:
> While rsyslog is an option, we use filebeat with SSL/TLS. Many ways to
> manage as you say. Testing and validation methods need to support
> tailoring.

IMHO it's scope creep to support every possible 3rd party solution.
OS-level config checks should be scoped to evaluated native OS-level
capabilities.

With that said, for things that are configured through 3rd party means,
how have you been getting by? Addendum to certification test plans?
_______________________________________________
scap-security-guide mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to