What's new in SCAP Extensions version 3.0

 

Applies To: System Center 2012 Configuration Manager SP1, System Center 2012 Configuration Manager SP2, System Center 2012 R2 Configuration Manager, System Center 2012 R2 Configuration Manager SP1

Use this section to learn what’s new in this version compared to the version 2.1 release.

SCAP Extensions version 3.0 for System Center Configuration Manager:

  • Fully supports converting SCAP Content to Compliance Settings baselines for:

    • System Center 2012 Configuration Manager SP1

    • System Center 2012 Configuration Manager SP2

    • System Center 2012 R2 Configuration Manager

    • System Center 2012 R2 Configuration Manager SP1.

  • Supports SCAP version 1.2 and is backward compatible with SCAP versions 1.1 and 1.0.

    • Supports Extensible Configuration Checklist Description Format (XCCDF) version 1.2.

    • Supports Open Vulnerability and Assessment Language (OVAL) versions up to 5.10.

    • Supports generating Asset Reporting Format (ARF) 1.1 reports.

    • Supports Common Platform Enumeration (CPE) 2.3

    • Supports Common Vulnerabilities and Exposures (CVE)

    • Supports Common Configuration Enumeration (CCE) version 5

    • Supports USGCB Internet Explorer 8, USGCB Windows 7 and USGCB Windows 7 Firewall.

  • Allows selection of SCAP Source Data Streams, and XCCDF benchmarks and profiles for conversion.

  • Allows selection of a standalone OVAL file or an OVAL file paired with an OVAL external variable file.

  • Supports generating the Cyberscope Lightweight Asset Summary Results (LASR) report.

  • Supports generating SCAP reports based on collections in addition to reports based on a single machine.

  • Allows conversion to multiple Configuration Baselines from a single source to achieve better load-and-balancing on the client during evaluation.

  • Uses Windows PowerShell scripts instead of VBScripts in the Configuration Items for all OVAL test types.

  • • No longer needs to deploy an inventory tool to client machines, such as SCMDCM.exe used in the prior release.