Hi,
If I would be my call...I would put efforts directly to AIX 7.3 (and have backwards compatible with 7.2) rather than doing anything anymore for 7.1 or 7.2 ....
We all know that AIX is secure as it can be, but it does not help you in cases where you need to ensure the same for some new customers who do not AIX that much >> They will ask about the security etc, and it will definitely not be too convincing & "street creditable" to say "Yes, we are using CIS standard benchmark...originated from AIX7.1...from year 2013.." << No wonder some people have the feeling of AIX being in sunsetting mode. :(
Br,
tommi
------------------------------
Tommi Sihvo, Lead Service Architect
Tietoevry, Compute Services
email
tommi.sihvo@tietoevry.com mobile +358 (0)40 5180 Finland
------------------------------
Original Message:
Sent: Fri October 14, 2022 09:44 AM
From: Emiel van ter Beek
Subject: About AIX CIS benchmark & Tools + PowerSC
Hi Bhargavi,
You mean the AIX 7.1 CIS profile?
When will AIX 7.2 CIS profile be available?
Regards,
------------------------------
Emiel van ter Beek
Original Message:
Sent: Fri October 14, 2022 09:14 AM
From: Bhargavi Reddy
Subject: About AIX CIS benchmark & Tools + PowerSC
Hi! Thierry,
This Benchmark was published on Sep 30th 2022. Did not get an opportunity to review and upgrade the rules in PowerSC yet but is on the roadmap for 1Q2023.
------------------------------
Bhargavi Reddy
Original Message:
Sent: Thu October 13, 2022 06:35 AM
From: Thierry Huche
Subject: About AIX CIS benchmark & Tools + PowerSC
Hi,
.
The CIS IBM AIX 7.1 Benchmark v2.1.0 is available at https://workbench.cisecurity.org/files/4119 but the latest version of PowerSC 2.1.0.2 still use the CISv1.xml profile, do you known how to import the CISv2 profile in PowerSC ?
.
Thanks.
------------------------------
-----------------------------------
Thierry Huché
Power Systems Brand Technical Specialist
IBM France
Original Message:
Sent: Fri July 29, 2022 03:00 AM
From: Marlon Vela
Subject: About AIX CIS benchmark & Tools + PowerSC
Estimados
Buenas noches, le saluda Marlon desde Ecuador, pude ver su comentario dentro de la pagina community.ibm.com; la razón de mi correo es para consultarle si por si acaso conoce de la existencia del archivo XML que esté orientado CIS AIX 7.1 v2.0.0; de lo que he revisado solo encuentro la plantilla: CIS_IBM_AIX_7.1_Benchmark_v1.1.0.xml; disculpen si le consulto esto pero veo que ustedes están más al tanto de estos temas.
Revisé dentro del portal https://workbench.cisecurity.org/; pero solo encontré la plantilla xml v1.1.0
De antemano muchas gracias por su respuesta.
Saludos Cordiales.
Marlon Vela
Correo: mvela@tecnoav.com
------------------------------
Marlon Vela
Original Message:
Sent: Thu April 21, 2022 10:20 AM
From: Emiel van ter Beek
Subject: About AIX CIS benchmark & Tools + PowerSC
According to development:
CIS for AIX 7.2 will be implemented in the second half of this year.
We want a CIS profile for IBMi also, but ther is a "best practices" profile only.
I had to create an Idea (rfe) for that on request of development.: Add CIS (benchmark) compliance profile for | IBM Power Ideas Portal
Vote please, thanks!
Emiel van ter Beek
------------------------------
Emiel van ter Beek
Original Message:
Sent: Mon November 08, 2021 09:25 AM
From: Bhargavi Reddy
Subject: About AIX CIS benchmark & Tools + PowerSC
PowerSC 2.0.0.1 was released on Oct 15th just a few days after the benchmark was published (Oct 4th). We will open a ticket and track these changes for the upcoming PowerSC release.
------------------------------
Bhargavi Reddy
Original Message:
Sent: Thu November 04, 2021 02:21 AM
From: Tommi Sihvo
Subject: About AIX CIS benchmark & Tools + PowerSC
I noticed CIS AIX 7.1 v2.0.0 benchmark was published a while ago
We are using CIS benchmarks as Standard security baseline for our AIX servers, so I'm always interested how different benchmarks & Tools are aligned,
so if possible, I would have some questions:
- How about the PowerSC 2.0.1 AIX CIS template, is it based already on the new benchmark?
- And what is the status for AIX72 (and upcoming AIX73) benchmarks? To be honest, I feel bit bad when needed to refer to AIX71 benchmarks in Security Audit, customer queries etc occasions for AIX72 environments..
Thanks for replies already beforehand!
------------------------------
Tommi Sihvo, Lead Service Architect
TietoEVRY, Compute Services
email tommi.sihvo@tieto.com mobile +358 (0)40 5180 Finland
------------------------------