Configuration settings

There are several advanced configuration settings for Security Analysis. To find them in configuration, do the following steps:

  1. Click the Configuration tab in the Arellia Security Manager console.
  2. In the tree navigate to Settings > Configuration > Infrastructure > Configuration Settings.
     
  3. In the right pane, click the Select a product menu and click Thycotic Security Analsysis Solution.
     
  4. Settings will display in the right-pane Configuration settings.
     

Descriptions of configuration settings

  • Always download SCAP content: If you select this checkbox, then SCAP content will always be downloaded from the source during import; otherwise content will only be re-downloaded if newer data is available.

  • Deadlock retry delay: You can set the number of milliseconds to delay after a SCAP resource import fails due to a deadlock exception.

  • Check OVAL entity versions: If you select this check box, then OVAL entities will be imported only if there is no existing entity with the same ID, or if the imported entity version is newer.

  • Duplicate key retry delay: You can set the number of milliseconds to delay after a SCAP resource import fails due to a duplicate key exception.

  • Maximum deadlock retries:  You can set the number of times you can attempt to import a SCAP resource that has failed due to a deadlock exception.

  • Maximum duplicate key retries: You can set the number of times you can attempt to import a SCAP resource that has failed due to a duplicate key exception.

  • Generate OVAL definitions with schema version: You can set the schema version to use for OVAL definition documents generated for an agent. Leave it blank to use the latest documents generated.

  • Validate client analysis documents:  If you select this check box, then the client analysis XML documents will be validated when generated on the server.

  • Validate SCAP XML:  If you select this check box, then source SCAP XML documents will be validated during imports.

  • XCCDF client item generation timeout: The timeout in seconds for generating client items.

  • XCCDF client item refresh interval:  The number of minutes between XCCDF client item refresh.