{"id":1067,"date":"2022-09-07T11:16:53","date_gmt":"2022-09-07T11:16:53","guid":{"rendered":"https:\/\/anakage.in\/blog\/?p=1067"},"modified":"2022-11-02T10:59:08","modified_gmt":"2022-11-02T10:59:08","slug":"endpoint-compliance-detection-and-auto-remediation","status":"publish","type":"post","link":"https:\/\/www.anakage.com\/blog\/endpoint-compliance-detection-and-auto-remediation\/","title":{"rendered":"Non Compliance Detection and Auto Remediation"},"content":{"rendered":"<h2><\/h2>\n<h2><strong>Introduction<\/strong><\/h2>\n<p>End point Non-Compliance detection &amp; auto-remediation app \u00a0is a Windows OS client-server application where compliance criteria across multiple Agents installed at end points can be monitored and any deviation rectified automatically. All detected non-compliance and remediation status across multiple Products is reported in one single view providing Enterprise wide view.<\/p>\n<h3><strong>Compliance Parameters details<\/strong><\/h3>\n<p>The dashboard displays Product wise a set of monitored parameters and settings as detected at end points. <u>The product categories on which compliance parameters are configurable <\/u>can be categorized as following:<\/p>\n<ul>\n<li><strong>Protection<\/strong>: Antivirus, Firewall, Hard drive encryption<\/li>\n<li><strong>Operating system: <\/strong>Windows<\/li>\n<li><strong>Software<\/strong>: Java, Chrome, Browser, MS Office, Flash<\/li>\n<li><strong>Network<\/strong>: Secure web etc.<\/li>\n<li><strong>Data Loss Prevention: <\/strong>Symantec<\/li>\n<li><strong>System<\/strong>: Patching, Disc space<\/li>\n<li><strong>Communication management and tracking<\/strong>: Video or any text-based reminder with action enforcement mechanisms on end users<\/li>\n<\/ul>\n<h3><strong>Illustrative view of Products and monitored Parameters<\/strong><\/h3>\n<p>The following is the summary of the available metrics and corresponding configurations<\/p>\n<table>\n<tbody>\n<tr>\n<td width=\"139\">\n<h5><strong>Product\/Category<\/strong><\/h5>\n<\/td>\n<td width=\"306\">\n<h5><strong>Potential Issues<\/strong><\/h5>\n<\/td>\n<td width=\"193\">\n<h5><strong>Remediation parameters<\/strong><\/h5>\n<\/td>\n<\/tr>\n<tr>\n<td width=\"139\"><strong>Antivirus (Symantec)<\/strong><\/td>\n<td width=\"306\">Devices without a corporate antivirus represent a security risk. Even if a device has the corporate security solution installed, it is important to verify that this product is working correctly<\/td>\n<td width=\"193\">\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Version<\/p>\n<p>\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Non-infection<\/p>\n<p>\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Service installed &amp;\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 running<\/p>\n<p>\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Update<\/p>\n<p>\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Scan and auto\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0protect\u00a0 compliance<\/p>\n<p><strong>\u00a0<\/strong><\/td>\n<\/tr>\n<tr>\n<td width=\"139\"><strong>Firewall<\/strong><\/td>\n<td width=\"306\">If Firewall solution is not working correctly, there might occur issues in network access<\/td>\n<td width=\"193\">\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Service enabled<\/p>\n<p>\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Service running<\/td>\n<\/tr>\n<tr>\n<td width=\"139\"><strong>Hard Drive Encryption (Bitlocker)<\/strong><\/td>\n<td width=\"306\">Devices without hard drive encryption can cause issues in data confidentiality inside organization<\/td>\n<td width=\"193\">\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Encryption method<\/p>\n<p>\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Conversion status<\/td>\n<\/tr>\n<tr>\n<td width=\"139\"><strong>Data loss prevention\u00a0<\/strong><strong>(Symantec)<\/strong><\/td>\n<td width=\"306\">DLP and data protection purposes in accordance with applicable laws and internal policies in information security<\/td>\n<td width=\"193\">\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Installed<\/p>\n<p>\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Version<\/p>\n<p>\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Files<\/p>\n<p>\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Service running<\/td>\n<\/tr>\n<tr>\n<td width=\"139\"><strong>Adobe<\/strong><\/td>\n<td width=\"306\">Adobe Reader\/Flash requires to be of latest version as old versions are often subject to security vulnerabilities and can cause documents to be formatted incorrectly<\/td>\n<td width=\"193\">\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Installed<\/p>\n<p>\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Version<\/td>\n<\/tr>\n<tr>\n<td width=\"139\"><strong>Patching<\/strong><\/td>\n<td width=\"306\">Trying to manually manage patches is not only a huge headache but also a major risk for organization. even with a patch management software, organizations with multiple servers and computers, ensuring that all of them are updated must be ensured<\/td>\n<td width=\"193\">\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Patching<\/p>\n<p>\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Disk space<\/p>\n<p>\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 SCCM scan<\/td>\n<\/tr>\n<tr>\n<td width=\"139\"><strong>Secure web (Websense)<\/strong><\/td>\n<td width=\"306\">As secure web provides access to various internal and external sites, it is important to ensure that it\u2019s working properly. Otherwise it may cause security issues<\/td>\n<td width=\"193\">\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Installed<\/p>\n<p>\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Version<\/td>\n<\/tr>\n<tr>\n<td width=\"139\"><strong>OS<\/strong><\/td>\n<td width=\"306\">Running a non-standard OS can result in security issues as IT services are usually tested on a limited set of operating systems<\/td>\n<td width=\"193\">\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Version<\/td>\n<\/tr>\n<tr>\n<td width=\"139\"><strong>Communication management and tracking<\/strong><\/td>\n<td width=\"306\">Employee training tracking and reminder invocation helps in better user engagement<\/td>\n<td width=\"193\">\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 View status<\/p>\n<p>\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Snooze numbers<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3><strong>How the Platform works<\/strong><\/h3>\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\"aligncenter size-full wp-image-1068\" src=\"https:\/\/anakage.com\/blog\/wp-content\/uploads\/2020\/01\/Screenshot-11.png\" alt=\"\" width=\"645\" height=\"351\" srcset=\"https:\/\/www.anakage.com\/blog\/wp-content\/uploads\/2020\/01\/Screenshot-11.png 645w, https:\/\/www.anakage.com\/blog\/wp-content\/uploads\/2020\/01\/Screenshot-11-632x344.png 632w\" sizes=\"(max-width: 645px) 100vw, 645px\" \/><\/p>\n<h3><strong>Deployment\u00a0mode<\/strong><\/h3>\n<p><a href=\"https:\/\/anakage.in\/proactive-and-self-healing-cobots.html\" target=\"_blank\" rel=\"noopener noreferrer\">Anakage<\/a> compliance platform provides both agent based (installed at end point) and agent less (by scheduled push through SCCM or through distribution platforms) solutions<\/p>\n<ul>\n<li>\n<h4><strong style=\"font-size: 23px;\">Agent Less Solution deployment<\/strong><\/h4>\n<\/li>\n<\/ul>\n<p>Compliance exe runs on the end points at the schedule specified from SCCM and after run and post actions, it self destructs leaving zero footprints. So no exe installation is required at the end points. And all the performed compliance task actions get reported on the reporting portal.<\/p>\n<ul>\n<li>\n<h4><strong>Agent Based Solution deployment<\/strong><\/h4>\n<\/li>\n<\/ul>\n<p>Agent based exe is installed at the end points (installation can be done through SCCM or other software distribution tools) and checks compliance status at predefined intervals.<\/p>\n<table>\n<tbody>\n<tr>\n<td width=\"213\">\n<h5 style=\"text-align: left;\">Parameter<\/h5>\n<\/td>\n<td style=\"text-align: left;\" width=\"213\">\n<h5>Agent Less Solution Deployment<\/h5>\n<\/td>\n<td width=\"213\">\n<h5><\/h5>\n<h5 style=\"text-align: left;\">Agent Based Solution deployment<\/h5>\n<p><strong>\u00a0<\/strong><\/td>\n<\/tr>\n<tr>\n<td width=\"213\"><strong>Environment<\/strong><\/td>\n<td width=\"213\">Designed for centralized environments<\/td>\n<td width=\"213\">Best for frequently disconnected machines or machines in the DMZ<\/td>\n<\/tr>\n<tr>\n<td width=\"213\"><strong>Authority<\/strong><\/td>\n<td width=\"213\">A central authority does all the deploying and scanning which has to be defined and monitored in-house<\/td>\n<td width=\"213\">Each agent does its own scanning and deploying based on policies defined on the central console<\/td>\n<\/tr>\n<tr>\n<td width=\"213\"><strong>Software distribution mechanism and Network coverage<\/strong><\/td>\n<td width=\"213\">Ideal for networks with large amounts of bandwidth and good SCCM(or other software distribution tool) coverage<\/td>\n<td width=\"213\">Ideal for distributed networks with remote locations that have limited bandwidth<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>\u00a0<\/strong><\/p>\n<h3><strong>Features<\/strong><\/h3>\n<h4><strong>1. Regulatory Remediation Integration: Compliance remediation with both scheduled and manual triggering<\/strong><\/h4>\n<p>Not only it collects and report compliance status, <a href=\"https:\/\/anakage.com\/blog\/reduce-support-compliance-automation\/\" target=\"_blank\" rel=\"noopener noreferrer\">Compliance remediation and automation platform<\/a> comes with the capability to remediate issues for certain metric parameters. Solution fixation can be either scheduled (agent initiated) or manual (admin initiated). The manual solution fixation can be invoked from admin portal.<\/p>\n<p>In admin portal, all the compliance parameter statuses get reported. For a particular compliance parameter, i.e. antivirus scan compliant- if there are a few end points which are not antivirus scan compliant, it will appear as \u2018fail\u2019 entries.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-full wp-image-1069\" src=\"https:\/\/anakage.com\/blog\/wp-content\/uploads\/2020\/01\/Screenshot-12.png\" alt=\"\" width=\"625\" height=\"347\" \/><\/p>\n<p>If the \u2018fail\u2019 button is clicked, it will show the details of the end points for which the compliance failed. \u00a0Admin can manually trigger compliance solution for the \u2018fail\u2019 entries by clicking on the \u2018Fix\u2019 button.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-full wp-image-1070\" src=\"https:\/\/anakage.com\/blog\/wp-content\/uploads\/2020\/01\/Screenshot-13.png\" alt=\"\" width=\"613\" height=\"305\" \/><\/p>\n<p>Upon clicking the \u2018Fix\u2019 button , a screen will come up allowing admin to select end points and action type.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1071\" src=\"https:\/\/anakage.com\/blog\/wp-content\/uploads\/2020\/01\/Screenshot-14.png\" alt=\"\" width=\"619\" height=\"295\" \/><\/p>\n<h4><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1072\" src=\"https:\/\/anakage.com\/blog\/wp-content\/uploads\/2020\/01\/Screenshot-15.png\" alt=\"\" width=\"633\" height=\"277\" srcset=\"https:\/\/www.anakage.com\/blog\/wp-content\/uploads\/2020\/01\/Screenshot-15.png 633w, https:\/\/www.anakage.com\/blog\/wp-content\/uploads\/2020\/01\/Screenshot-15-632x277.png 632w\" sizes=\"(max-width: 633px) 100vw, 633px\" \/><strong>2. Complete\u00a0Enterprise wide Compliance\u00a0Reporting in one single dashboard<\/strong><\/h4>\n<p>All the predefined compliance parameters can be monitored from one central dashboard without any need for scripting or coding.<\/p>\n<h4><strong>3. Multi attribute Reporting and Visualization<\/strong><\/h4>\n<p>In the reporting portal, it is possible to view the report from different aspects- compliance status for different products with the corresponding end point and location facility\/business unit details helping admin to follow the evolution of the compliance status and check if the overall compliance is improving or regressing. Options of reporting at Solution level, individual Product parameter level besides Facility, geography or Business unit wise are also available<\/p>\n<ul>\n<li>\n<h6><u>Overall Product wise report<\/u><\/h6>\n<\/li>\n<\/ul>\n<p>It shows the product wise drop down for which the compliance status is checked.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1073\" src=\"https:\/\/anakage.com\/blog\/wp-content\/uploads\/2020\/01\/Screenshot-16.png\" alt=\"\" width=\"697\" height=\"429\" srcset=\"https:\/\/www.anakage.com\/blog\/wp-content\/uploads\/2020\/01\/Screenshot-16.png 697w, https:\/\/www.anakage.com\/blog\/wp-content\/uploads\/2020\/01\/Screenshot-16-632x389.png 632w\" sizes=\"(max-width: 697px) 100vw, 697px\" \/><\/p>\n<ul>\n<li>\n<h6><u>Product parameter (compliance parameters predefined for each product) wise<\/u><u> report<\/u><\/h6>\n<\/li>\n<\/ul>\n<p>Under any product it shows the particular parameter compliance status which are configured. Like for \u2018secure web\u2019 product, the compliance parameters are \u2018installed\u2019 (installed properly or not) or \u2018version\u2019 (version updated or not) &#8211; against these parameters it will show the compliance status.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1074\" src=\"https:\/\/anakage.com\/blog\/wp-content\/uploads\/2020\/01\/Screenshot-17.png\" alt=\"\" width=\"623\" height=\"275\" \/><\/p>\n<ul>\n<li>\n<h6><u>Compliance before and after status report<\/u><\/h6>\n<\/li>\n<\/ul>\n<p>There are options to have dashboards showing the compliance status at Parameter level before and after running the compliance exe (weather manual or scheduled). If some parameter shows \u2018false\u2019 (non compliant) before running the exe (in initial data), it gets remediated (if possible) and the taken actions also gets reported (in final data).<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1075\" src=\"https:\/\/anakage.com\/blog\/wp-content\/uploads\/2020\/01\/Screenshot-18.png\" alt=\"\" width=\"669\" height=\"277\" srcset=\"https:\/\/www.anakage.com\/blog\/wp-content\/uploads\/2020\/01\/Screenshot-18.png 669w, https:\/\/www.anakage.com\/blog\/wp-content\/uploads\/2020\/01\/Screenshot-18-632x262.png 632w\" sizes=\"(max-width: 669px) 100vw, 669px\" \/><\/p>\n<ul>\n<li>\n<h6><u>Location facility wise report<\/u><\/h6>\n<\/li>\n<\/ul>\n<p>It shows the compliance data for different locations or business units providing a precise view of compliance for different segments of the organization.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1076\" src=\"https:\/\/anakage.com\/blog\/wp-content\/uploads\/2020\/01\/Screenshot-19.png\" alt=\"\" width=\"627\" height=\"281\" \/><\/p>\n<p>All these reports can be downloaded from the portal and on the basis of the report; the IT Ops\/Info Sec can inform engineers to take required actions.<\/p>\n<h5 style=\"text-align: center;\"><strong>Experience Non Compliance Detection and Auto Remediation and discover what\u00a0<a href=\"http:\/\/www.anakage.in\/\" target=\"_blank\" rel=\"noopener noreferrer\">Anakage<\/a>\u00a0can do for your organization.<\/strong><\/h5>\n<h3 style=\"text-align: center;\"><a href=\"http:\/\/anakage.in\/contact-us.html\" target=\"_blank\" rel=\"noopener noreferrer\"><strong>Schedule a Demo<\/strong><\/a><\/h3>\n<h3 style=\"text-align: center;\"><strong><a href=\"http:\/\/anakage.in\/index.html\" target=\"_blank\" rel=\"noopener noreferrer\">Visit our Website<\/a><\/strong><\/h3>\n<p><strong>\u00a0<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Introduction End point Non-Compliance detection &amp; auto-remediation app \u00a0is a Windows OS client-server application where compliance criteria across multiple Agents [&hellip;]<\/p>\n","protected":false},"author":16,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_themeisle_gutenberg_block_has_review":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[2,4,5,32,278,44,1],"tags":[115,114,116,146,80,111,52],"coauthors":[86,83],"class_list":["post-1067","post","type-post","status-publish","format-standard","hentry","category-anakage-for-on-the-job-help","category-anakage-for-enterprises","category-training","category-desktop-and-end-user-support-automation-platform","category-end-point-compliance-non-compliance-detection-and-remediation","category-it-for-digital-transformations","category-uncategorized","tag-agent-based-solution-deployment","tag-agent-less-solution-deployment","tag-compliance-remediation-and-automation-platform","tag-it-help-desk-automation","tag-remote-assistance-windows-10","tag-self-service-automation","tag-service-desk-automation"],"views":328,"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.anakage.com\/blog\/wp-json\/wp\/v2\/posts\/1067","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.anakage.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.anakage.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.anakage.com\/blog\/wp-json\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/www.anakage.com\/blog\/wp-json\/wp\/v2\/comments?post=1067"}],"version-history":[{"count":0,"href":"https:\/\/www.anakage.com\/blog\/wp-json\/wp\/v2\/posts\/1067\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.anakage.com\/blog\/wp-json\/wp\/v2\/media?parent=1067"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.anakage.com\/blog\/wp-json\/wp\/v2\/categories?post=1067"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.anakage.com\/blog\/wp-json\/wp\/v2\/tags?post=1067"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.anakage.com\/blog\/wp-json\/wp\/v2\/coauthors?post=1067"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}