Downloading Profiles
We maintain a list of frequently-requested SCAP content available from well-known sources and make this list it available on the Download Profiles page. There are other sources of content that you are welcome to import You can then import these downloads plus other content into the database and for use within your policies (see Importing Profiles to handle thesefor more information, go to Import profiles).
First Steps
...
To download profiles, do the following steps:
- In the Security Manager Console, click the Profiles tab.
- At the bottom of the left pane, click the Download Profiles link. On the right side, you will see a list of profiles available from various sources.
- Locate the profile(s) of interest. Expand the row by clicking the expand indicator in the first column.Check the box of you want to download and click the plus sign to the left of the profile name to expand the list of downloads.
Select the profile version or options you
would like to have downloaded and imported into the databasewant to download by clicking the box to the left of the profile name.
Info Refer to the content author if you need clarification of the content or differences of versions. The link to the content appears to the right if you wish to To manually download and review the content prior to importing it, click the URL to the right of the content Description and Author.
- Click the Import Profiles button at the bottom to start the background tasks that perform the downloading and importing.
Updates to
...
profiles
Once After you import profiles are imported, the check box on the left of the profile selections will be disabled. If any changes are detected in the author's source, the row background (in the list of profiles) will appear green to indicate there is updated content available and the check box will be available for you to select to import the updates to these profiles. Simply check Select the boxes profiles as you did when first imported and then click Import Profiles button at the bottom.
| Anchor | ||||
|---|---|---|---|---|
|
What to
...
expect
Many of these downloads will contain multiple profiles that get imported in the background. This process may take a few minutes or multiple hours, depending on the size of the content and load on the server. However, this all happens automatically and does not require any other user interaction.
Once the profiles have been imported, they will appear on the left side, organized by applicable platform and benchmark.
Verify
...
profile import process
To verify the status of the import process, open the Resource Explorer console and open the SCAP Content resource that was created for this profile. The details of the import are listed in the Data Class named SCAP Content. Any validation errors that occurred will be listed in the Event Class named SCAP Data Validation Errors.
| Info |
|---|
The names of these elements on the left side of the tree are defined by the author within the SCAP content itself. You can change the names by editing the profile after import. |
Import data without Internet access
If you don't have Internet connectivity on the system you're using to install and configure Security Analysis Solution (SAS), then download the SCAP profiles on a machine that is connected to the Internet and copy them to a folder on the unconnected system.
You can download the SCAP profiles from the following URLs:
http://iase.disa.mil/stigs/scap/Pages/index.aspx
https://web.nvd.nist.gov/view/ncp/repository?tier=4&startIndex=0