PowerSC

Power Security and Cyber Resilience

IBM Power offers a robust suite of security technologies designed to provide a solid foundation for security in your IT environment. 


#Power

 View Only

  • 1.  AIX 7.3 CIS benchmark & Tools + PowerSC (again :)

    Posted Fri January 19, 2024 03:30 AM

    Hello! 

    Any updates on possibilities to get proper AIX 7.3 CIS benchmark / baseline / Reporting Tool ? 

    Since latest CIS-CAT does not have AIX benchmark at all , so currently we are forced to use the old CIS-CAT Pro Assessor, v3 (which is unsupported),   to be able to create security reports out of AIX  :( 

    And I assume PowerSC as well contains  CIS template for AIX 7.2 only?

    Or are there some new tools which I am not aware of ?

    And does anyone know whether there would be any possibility to have AIX support for Openscap Tool? 

    So the main questions would be :

    • Is there (or will there be) CIS baseline/benchmark or PowerSC template for AIX 7.3
    • What is the best Tool  to create security reports from AIX systems?
    • Who / What org needs to be contacted for RFE on AIX support for Openscap Tool ?



    ------------------------------
    Tommi Sihvo, Lead Service Architect
    Tietoevry, Compute Services
    email tommi.sihvo@tietoevry.com mobile +358 (0)40 5180 Finland
    ------------------------------

    #PowerSC


  • 2.  RE: AIX 7.3 CIS benchmark & Tools + PowerSC (again :)

    Posted Mon January 29, 2024 09:59 AM

    Hi @Tommi Sihvo,

    • The CIS benchmark document is not yet available for IBM AIX 7.3. Once the document is available, the Rocket team will work on updating the compliance profile in IBM PowerSC.
    • Security reports for AIX can be generated from IBM PowerSC. I'm not sure if we have any additional tools for doing so. Perhaps @Madan Chukka might have additional information for you.
    • @Madan Chukka, can you also help with this question?

    Thanks, Debbie



    ------------------------------
    Debbie Quick
    ------------------------------



  • 3.  RE: AIX 7.3 CIS benchmark & Tools + PowerSC (again :)

    Posted Tue January 30, 2024 12:44 AM

    Hi 

    Thanks for the replies Debbie!

    Any timetable estimate when AIX7.3 benchmark would be available?

    Br,

    t



    ------------------------------
    Tommi Sihvo, Lead Service Architect
    Tietoevry, Compute Services
    email tommi.sihvo@tietoevry.com mobile +358 (0)40 5180 Finland
    ------------------------------

    Original Message


  • 4.  RE: AIX 7.3 CIS benchmark & Tools + PowerSC (again :)

    Posted Fri February 02, 2024 03:24 AM

    Estimated date for AIX benchmark 7.x(7.3) is May 2024

    Regards

    Anoop



    ------------------------------
    Anoop Mourya
    ------------------------------

    Original Message


  • 5.  RE: AIX 7.3 CIS benchmark & Tools + PowerSC (again :)

    Posted Wed February 26, 2025 04:10 AM
    Hello Anoop,

    We're looking into how well our AIX systems are keeping up with security best practices, especially the CIS IBM AIX benchmarks. We saw that the newest benchmark for AIX 7.2 (version 1.1.0) came out on September 30, 2023.
     
    We're wondering:
     
    Are the CISv2_Lev1 and CISv2_Lev2 profiles in PowerSC2.2 based on that latest AIX 7.2 CIS version?
    How well does PowerSC match up with that CIS benchmark for AIX 7.3?
     
    Just trying to make sure we're on the right track with security.

    Best regards,


    ------------------------------
    Peter Furtado
    ------------------------------

    Original Message


  • 6.  RE: AIX 7.3 CIS benchmark & Tools + PowerSC (again :)

    Posted Wed February 26, 2025 05:31 AM

    Hi,

    Thanks for raising this topic again Peter!

    Totally agree on your thoughts & concerns; I raised this idea:

    AIX Security reporting tool

    about a year ago, last update seems to be August/2024, so hoping to hear news regarding this from PowerSC team soon as well, 

    Br,

    tommi

    Ibm remove preview
    AIX Security reporting tool
    View this on Ibm >



    ------------------------------
    Tommi Sihvo, Lead Service Architect
    Tietoevry Tech Services
    email tommi.sihvo@tietoevry.com mobile +358 (0)40 5180 Finland
    ------------------------------

    Original Message


  • 7.  RE: AIX 7.3 CIS benchmark & Tools + PowerSC (again :)

    Posted Thu February 27, 2025 07:27 AM

    Hi! Peter,

        PowerSC is up to date with regulations specified for AIX 7.2 version 1.1.0 which was published on September 30th 2023. This same profile should work on AIX 7.3 as well. Now we are working on implementing Latest CIS regulations published on September 25thth 2024,  applicable for all AIX Levels. This should be released at the end of March. You can use existing CISv2_Lev1 and Lev2 profiles or wait until the next release to comply with most recent standard.

    Bhargavi

       



    ------------------------------
    Bhargavi Reddy
    ------------------------------

    Original Message


Related Content