PowerSC

Hello! 

Any updates on possibilities to get proper AIX 7.3 CIS benchmark / baseline / Reporting Tool ? 

Since latest CIS-CAT does not have AIX benchmark at all , so currently we are forced to use the old CIS-CAT Pro Assessor, v3 (which is unsupported),   to be able to create security reports out of AIX  :( 

And I assume PowerSC as well contains  CIS template for AIX 7.2 only?

Or are there some new tools which I am not aware of ?

And does anyone know whether there would be any possibility to have AIX support for Openscap Tool? 

So the main questions would be :

• Is there (or will there be) CIS baseline/benchmark or PowerSC template for AIX 7.3
• What is the best Tool  to create security reports from AIX systems?
• Who / What org needs to be contacted for RFE on AIX support for Openscap Tool ?

Hi @Tommi Sihvo,

• The CIS benchmark document is not yet available for IBM AIX 7.3. Once the document is available, the Rocket team will work on updating the compliance profile in IBM PowerSC.
• Security reports for AIX can be generated from IBM PowerSC. I'm not sure if we have any additional tools for doing so. Perhaps @Madan Chukka might have additional information for you.
• @Madan Chukka, can you also help with this question?

Thanks, Debbie

Hello! 

Any updates on possibilities to get proper AIX 7.3 CIS benchmark / baseline / Reporting Tool ? 

Since latest CIS-CAT does not have AIX benchmark at all , so currently we are forced to use the old CIS-CAT Pro Assessor, v3 (which is unsupported),   to be able to create security reports out of AIX  :( 

And I assume PowerSC as well contains  CIS template for AIX 7.2 only?

Or are there some new tools which I am not aware of ?

And does anyone know whether there would be any possibility to have AIX support for Openscap Tool? 

So the main questions would be :

• Is there (or will there be) CIS baseline/benchmark or PowerSC template for AIX 7.3
• What is the best Tool  to create security reports from AIX systems?
• Who / What org needs to be contacted for RFE on AIX support for Openscap Tool ?

Hi 

Thanks for the replies Debbie!

Any timetable estimate when AIX7.3 benchmark would be available?

Br,

t

Hi @Tommi Sihvo,

• The CIS benchmark document is not yet available for IBM AIX 7.3. Once the document is available, the Rocket team will work on updating the compliance profile in IBM PowerSC.
• Security reports for AIX can be generated from IBM PowerSC. I'm not sure if we have any additional tools for doing so. Perhaps @Madan Chukka might have additional information for you.
• @Madan Chukka, can you also help with this question?

Thanks, Debbie

Hello! 

Any updates on possibilities to get proper AIX 7.3 CIS benchmark / baseline / Reporting Tool ? 

Since latest CIS-CAT does not have AIX benchmark at all , so currently we are forced to use the old CIS-CAT Pro Assessor, v3 (which is unsupported),   to be able to create security reports out of AIX  :( 

And I assume PowerSC as well contains  CIS template for AIX 7.2 only?

Or are there some new tools which I am not aware of ?

And does anyone know whether there would be any possibility to have AIX support for Openscap Tool? 

So the main questions would be :

• Is there (or will there be) CIS baseline/benchmark or PowerSC template for AIX 7.3
• What is the best Tool  to create security reports from AIX systems?
• Who / What org needs to be contacted for RFE on AIX support for Openscap Tool ?

Estimated date for AIX benchmark 7.x(7.3) is May 2024

Regards

Anoop

Hi 

Thanks for the replies Debbie!

Any timetable estimate when AIX7.3 benchmark would be available?

Br,

t

Hi @Tommi Sihvo,

• The CIS benchmark document is not yet available for IBM AIX 7.3. Once the document is available, the Rocket team will work on updating the compliance profile in IBM PowerSC.
• Security reports for AIX can be generated from IBM PowerSC. I'm not sure if we have any additional tools for doing so. Perhaps @Madan Chukka might have additional information for you.
• @Madan Chukka, can you also help with this question?

Thanks, Debbie

Hello! 

Any updates on possibilities to get proper AIX 7.3 CIS benchmark / baseline / Reporting Tool ? 

Since latest CIS-CAT does not have AIX benchmark at all , so currently we are forced to use the old CIS-CAT Pro Assessor, v3 (which is unsupported),   to be able to create security reports out of AIX  :( 

And I assume PowerSC as well contains  CIS template for AIX 7.2 only?

Or are there some new tools which I am not aware of ?

And does anyone know whether there would be any possibility to have AIX support for Openscap Tool? 

So the main questions would be :

• Is there (or will there be) CIS baseline/benchmark or PowerSC template for AIX 7.3
• What is the best Tool  to create security reports from AIX systems?
• Who / What org needs to be contacted for RFE on AIX support for Openscap Tool ?

Estimated date for AIX benchmark 7.x(7.3) is May 2024

Regards

Anoop

Hi 

Thanks for the replies Debbie!

Any timetable estimate when AIX7.3 benchmark would be available?

Br,

t

Hi @Tommi Sihvo,

• The CIS benchmark document is not yet available for IBM AIX 7.3. Once the document is available, the Rocket team will work on updating the compliance profile in IBM PowerSC.
• Security reports for AIX can be generated from IBM PowerSC. I'm not sure if we have any additional tools for doing so. Perhaps @Madan Chukka might have additional information for you.
• @Madan Chukka, can you also help with this question?

Thanks, Debbie

Hello! 

Any updates on possibilities to get proper AIX 7.3 CIS benchmark / baseline / Reporting Tool ? 

Since latest CIS-CAT does not have AIX benchmark at all , so currently we are forced to use the old CIS-CAT Pro Assessor, v3 (which is unsupported),   to be able to create security reports out of AIX  :( 

And I assume PowerSC as well contains  CIS template for AIX 7.2 only?

Or are there some new tools which I am not aware of ?

And does anyone know whether there would be any possibility to have AIX support for Openscap Tool? 

So the main questions would be :

• Is there (or will there be) CIS baseline/benchmark or PowerSC template for AIX 7.3
• What is the best Tool  to create security reports from AIX systems?
• Who / What org needs to be contacted for RFE on AIX support for Openscap Tool ?