|
| Contact Us | Downloads | News — May 15, 2008 | Search |
Compatibility Questionnaire: Configuresoft (Enterprise Configuration Manager)
General Capability Questions |
Accuracy Questions |
Documentation Questions |
Capability Specific Questions |
Statements
Organizational InformationName of Your Organization:Configuresoft
Web Site:Product InformationProduct/Service Name:Enterprise Configuration Manager
Compatible Categories: OVAL Systems Characteristics Consumer (Planned)
OVAL Definition Producer (Planned) OVAL Definition Consumer OVAL Results Producer OVAL Results Consumer (Planned) Product/Service Home Page:Product AccessibilityProvide a short description of how and
where your capability is made available to your customers and the public:
Configuresoft will initially provide a downloadable module that upgrades
the current Enterprise Configuration Manager (ECM) product with OVAL
features and functionality. The OVAL upgrade will be available from
www.configuresoft.com. At a future release, the OVAL module will be
installed by default.
Language Version IndicationDescribe how and where the capability indicates
the version of the OVAL Language used to validate, create, or update
its content:
Configuresoft is leveraging the OEM'd ThreatGuard OVAL v5.0 certified engine. Approach for Correction of ErrorsIndicate how a user who discovers an error in the capability's use of OVAL can report the error:
User can call tech support toll-free or email Configuresoft:
Monday - Friday, 6am - 6pm, Mountain Time Describe the approach to responding to the above error reports and how applicable fixes will be applied:
Configuresoft will address all error reports initially via our tech support engineers. Items that cannot be immediatley addressed are automatically referred to 3 groups: QA (responsible for verifying and documenting the error), Dev support (responsible for the fix), and Product Management, (responsible for tracking the whole process to closure, including notification to the user). Compatibility DocumentationProvide a copy, or directions to the location, of where the documentation describes OVAL and OVAL Compatibility for any customers:
OVAL documentation will be delivered in a text file for user review. Language SupportIndicate the component schemas and/or individual OVAL Tests that the capability does not support for each category of OVAL Compatibility being applied for:
Undetermined at this time. Waiting for documentation from ThreatGuard.
Finding Elements Using OVALProvide details regarding how users can identify and find individual OVAL content (through OVAL-IDs) that is being consumed by the capability. For example, how can a user determine which definitions have been consumed and what the result of each definition is:
All details regarding OVAL content, and the results from each definition are presented in graphical reports for the user. OVAL Content Importation Process ExplanationIf the capability does not support consuming OVAL content at runtime, explain the documented process by which users can submit OVAL content for interpretation by the capability, including how quickly submitted content is made available to the capability:
Configuresoft ECM provides for consumption of OVAL content at runtime
via the OEM'd ThreatGuard engine.
Statement of CompatibilityHave an authorized individual sign and date the following Compatibility Statement (required): "As an authorized representative of my organization I agree that we will abide by all of the mandatory compatibility requirements as well as all of the additional mandatory compatibility requirements that are appropriate for our specific type of capability."
Statement of AccuracyHave an authorized individual sign and date the following accuracy Statement (recommended): "As an authorized representative of my organization and to the best of my knowledge, there are no errors in the correctness of our capability's use of the OVAL Language and the interpretation of the logic."
Statement on Follow-on Correctness Testing SupportHave an authorized individual sign and date the following statement about your organizations willingness to support correctness testing of other capabilities, which will be managed by the Reviewing Authority and kept to reasonable levels of effort for all involved. (required): "As an authorized representative of my organization, we agree to support the Review Authority in follow-on correctness testing activities, where appropriate types of OVAL documents might need to be exchanged with other organizations attempting to prove the correctness of their capabilities."
Page Last Updated: May 01, 2007 |
|
|||||||||||||||||||
 |
||
