McAfee Policy Auditor
Reduce compliance cost by automating the IT audit process

Features & Benefits:

Streamline proof of compliance
Use prebuilt policy templates that eliminate manual effort and demonstrate adherence to key industry mandates and internal governance policies, including PCI DSS, SOX, GLBA, HIPAA, FISMA, and the best-practice frameworks ISO 27001 and COBIT. Policy Auditor includes a purpose-built PCI dashboard that delivers a consolidated view of the state of compliance by PCI requirement/control.

Receive unprecedented integration with McAfee ePO and Vulnerability Manager
Use McAfee ePolicy Orchestrator (ePO) software to lower cost of ownership by consolidating endpoint security management and compliance management, easing agent deployment, administration, and reporting. Integration with McAfee Vulnerability Manager enables organizations to consolidate agent and agentless audits.

Get the latest standards in compliance validation
Keep updated on compliance standards. Security Content Automation Protocol (SCAP) validation by the National Institute of Standards and Technology (NIST) enables agencies to comply with the Federal Desktop Core Configuration (FDCC) standard.

Customize and extend Policy Auditor IT controls checking
Create rules from any scripting language supported by the system being audited to extend the check capabilities of Policy Auditor. Sample languages include VBScript, batch files, Perl, and Python.

Prevent disruption to critical business applications with blackout window
Set the frequency of data capture to support automated reports with accurate data. To prevent disruption to critical business applications, a blackout window lets IT operations block audit data capture during key business periods.

Get Fast, automated import of industry benchmarks
Download benchmarks from authoritative sites. Within minutes, view detailed security guidance to confirm regulatory compliance or design your own internal governance policies based on security community best practices.

Prove Compliance with Key Industry Mandates

By mapping IT controls against predefined policy content, McAfee Policy Auditor software automates manual audit processes and helps you report consistently and accurately against internal and external policies. McAfee Policy Auditor software ships with benchmark templates for a variety of compliance mandates: PCI DSS, (Policy Auditor includes a PCI dashboard that delivers a consolidated view of the state of compliance by PCI requirements/controls) SOX, HIPAA, FISMA, and several others. It also supports the best-practice frameworks ISO 27001 and COBIT. Platforms covered include Microsoft Windows, Oracle Solaris, Red Hat Linux, CentOS, HP/UX, IBM AIX, and Apple Macintosh (Mac) OS-X platforms.

Cut Management Effort with McAfee ePolicy Orchestrator® Software Integration

Seamless integration with McAfee ePolicy Orchestrator® (McAfee ePO™) software eases agent deployment, management, and reporting. The single McAfee ePO console lowers cost of ownership by consolidating endpoint security management and compliance management. You save money on hardware, training, and operational costs and get unified control over the policies and protection on each host.

Unified Policy Audits Reduce Time to Compliance

Organizations can run consolidated audits across both managed (agent-based) and unmanaged (agentless) systems. From the McAfee ePO console, they can define and select a unified policy benchmark once and have the assessment performed across many different asset types. This reduces the effort needed to run audits and, for the first time, provides organizations with a single, unified report across all assets.

Use Scripting to Extend McAfee Policy Auditor Software Check Capabilities

Create rules from any scripting language supported by the system being audited to extend the check capabilities of policy agents further. Sample languages include VBScript, batch files, Perl, and Python.

Four McAfee Policy Auditor software tabs in the McAfee ePO console make it easy to deploy policies and manage audit processes.

Meet the New Standard in Compliance Validation: SCAP

McAfee Policy Auditor software sets a new standard with its implementation of the Secure Content Automation Protocol (SCAP) family. This open standard enables interoperability among products and services and helps reduce audit time, expense, and effort. Supported protocols include:

• eXtensible Checklist Configuration Description Format (XCCDF)
• Open Vulnerability and Assessment Language (OVAL)
• Common Vulnerabilities and Exposures (CVE)
• Common Configuration Enumeration (CCE)
• Common Platform Enumeration (CPE)
• Common Vulnerability Scoring System (CVSS)

Import and Adapt Industry Benchmarks in Minutes

Through SCAP support and its own innovative engineering, McAfee helps you validate compliance easily, even when benchmarks and policies change. Download benchmarks from authoritative sites, such as the Federal Desktop Core Configuration (FDCC) benchmark on the NIST website, and view detailed security guidance to benchmarks. Uniform benchmarks limit misinterpretations among security teams and external auditors.

Ensure Up-to-Date Data and Reduce Disruptions

An innovative continuous audit model helps security and audit teams ensure data is current and accurate. It eliminates manual data generation for internal and external audits. To prevent disruption to critical business applications, a blackout window lets IT operations specify times when audits may not be conducted.

Align Business and Audit Processes

Audits are never convenient, but they can now be less disruptive. You can document and grant waivers to justify deviations from policy, and set expiration dates to limit exposure.

• Exemption—Excuses a system from all audits
• Suppression—An exception that is suppressed from reports

Simplify Trouble Ticketing

When audits detect issues, McAfee ePO helps you create tickets and track them easily. Optional integrations let you push tickets to third-party trouble ticketing systems like BMC Remedy.

Continuous Compliance Through McAfee Change Control Software

Audit and remediate and then prevent unauthorized changes, ensuring continuous compliance to policy.

Powerful, graphical dashboards help you measure, monitor, and report compliance.

System Requirements:

Operating Systems

• Microsoft Windows 7
• Microsoft Windows Vista
• Microsoft Windows XP Pro
• Microsoft Windows 2000 (Advanced/Professional), 2003 (Enterprise/Standard), 2008
• Microsoft Windows XP, 2003, 2008 R1
• Red Hat Enterprise Linux 3.0
• Red Hat Enterprise Linux (AS, ES, WS) 4.0, 5.0, 5.1
• MAC OS X 10.4, 10.5
• HP-UX (RISC) 11iv1, 11iv2
• AIX (Power5, Power6) 5.3 TL8 SP5, 6.1 TL2 SP0

Documentation:

Download the McAfee Policy Auditor Datasheet (PDF).