IBM Tivoli and Cisco 사용자 설명서

 Chapter 6. Compliance subsystem implementation 

remediation subsystem, such as a Tivoli Configuration Manager. After the 
remediation has been performed, the remediation subsystem communicates to 
the policy collector to obtain updated status and, if necessary, perform additional 
remediation.

The compliance policies are defined on the Tivoli Security Compliance Manager 
server and are sets of rules verifying whether the data collected on the client 
meets the security policy criteria. However, it means that the data must first be 
collected using the appropriate collectors. When the Tivoli Security Compliance 
Manager is installed it contains no collectors or policies. The collectors must be 
installed first before any policies are defined. There are several ways to this, for 
example, installing them from the jar files posted on the Tivoli Security 
Compliance Manager support page or importing the already defined policy, 
which brings all the necessary collectors along and installs them on the server. 
We have chosen this second way.

As a starting point we used the sample policies provided with the IISSCN 
extension pack2 for Tivoli Configuration Manager.

To install them in your environment follow the steps below:

1. Create a temporary directory and extract the content of 

iisscn_extension_pack2.zip. Then go to the sample_policies subdirectory, 
where the following files should exist:

– IISSCN_TCM_v2.00_win2000.pol
– IISSCN_TCM_v2.00_winXP.pol
– TCMCLI.pol

2. Start the Tivoli Security Compliance Manager Administration Console by 

selecting Start

→

Console (or for Windows 2003 Start

→

→

Compliance Manager Administration Console).