BES Client Setting: Encrypted Reports
Log In or Register to download the BES file, and more.

0 Votes

Description

This task can be used to control whether the BES Client encrypts its reports back to the BES Server. It also requires the BES Clients to run the relay selection algorithm immediately.

If the BES Client is set to require encryption to send reports, the BES Client will not send any reports if no encryption certificate could be found, or if the parent relay does not support receipt of encrypted documents.

If the BES Client is set to use encryption if possible, the BES Client will attempt to use encryption but will send its reports in cleartext if encryption is impossible.

If the BES Client is set to disable encryption, the BES Client will not encrypt its reports to the BES Server even if encryption is possible.

Note: Do not set the "Reapply" behavior when taking this action or you may cause the BES Client to constantly perform auto relay selection.

Important Note: Depending on the details of your network, causing all the BES Clients to simultaneously do relay autoselection might cause a heavy load on the routers while they handle the ICMP traffic from the BES Clients. If you are worried about this, use the "temporal distribution" option in the Execution tab of the Take Action dialog when sending this action.


Property Details

ID413
TitleBES Client Setting: Encrypted Reports
CategoryBES Client Setting
Download Size0
SourceBigFix
Source ID<Unspecified>
Source Severity<Unspecified>
KeywordsBES Client encryption Clients reports
Added by on 10/17/2012 1:15:23 PM
Last Modified by on 10/17/2012 1:15:23 PM
Counters 3704 Views / 2 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Relevance

Used in 219 fixlets   * Results in a true/false
Show indented relevance
(if exists property "in proxy agent context" then ( not in proxy agent context ) else true )
Used in 91 fixlets and 24 analyses   * Results in a true/false
Show indented relevance
version of client >= "5.1"
Used in 4 fixlets   * Results in a true/false
Show indented relevance
version of client >= "7.1"

Actions

Action 1

Action Link Click here to set the BES Client to use encryption for reports if possible. (Recommended for most deployments)
Script Type BigFix Action Script
setting "_BESClient_Report_Encryption"="Optional" on "{parameter "action issue date" of action}" for client
relay select
Success Criteria

This action will be considered successful when the applicability relevance evaluates to false.

Action 2

Action Link Click here to set the BES Client to require encryption to send reports. (Use for highest security - Please use with caution and read all information above)
Script Type BigFix Action Script
setting "_BESClient_Report_Encryption"="Required" on "{parameter "action issue date" of action}" for client
relay select
Success Criteria

This action will be considered successful when the applicability relevance evaluates to false.

Action 3

Action Link Click here to set the BES Client to disable encryption for reports. (Default behavior)
Script Type BigFix Action Script
setting "_BESClient_Report_Encryption"="None" on "{parameter "action issue date" of action}" for client
relay select
Success Criteria

This action will be considered successful when the applicability relevance evaluates to false.


Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!