Hello all,
Can anyone advise whether FlexNet Manager Suite on-premise meets the CIS Benchmarks?
Ref: https://www.cisecurity.org/cis-benchmarks/
regards,
Peter
Jul 11, 2021 08:01 PM
If I understand the CIS Benchmarks right, this is a method for benchmarking a system, not a software product in isolation of an installed and operational system. I'm not aware of any organization that has assessed their FlexNet Manager Suite On-premises system against the CIS Benchmarks, but that doesn't mean it hasn't been done. I think Flexera may have done some assessment against CIS Benchmarks (or possibly others) in relation to the FlexNet Manager Suite Cloud system.
Jul 12, 2021 08:52 PM
If I understand the CIS Benchmarks right, this is a method for benchmarking a system, not a software product in isolation of an installed and operational system. I'm not aware of any organization that has assessed their FlexNet Manager Suite On-premises system against the CIS Benchmarks, but that doesn't mean it hasn't been done. I think Flexera may have done some assessment against CIS Benchmarks (or possibly others) in relation to the FlexNet Manager Suite Cloud system.
Jul 12, 2021 08:52 PM
Thanks Chris,
In this case, the customer uses a tool called GateKeeper to ensure that all applications that are deployed on to cloud workloads meet policies that are based on the CIS benchmarks. I guess that an example of this would be to verify that the Flexera Kubernetes inventory agent component does not violate the OpenShift CIS Benchmark.
Your answer at least confirms that the on-premise FNMS components have not been explicitly validated against any CIS benchmarks.
Peter
Jul 13, 2021 02:21 AM