Users Guide

To delete the configuration compliance baselines:
1. Select the baseline(s) from the baselines listed on the Configuration Compliance page.
2. Click Delete and click Yes on the Confirmation prompt.
The deleted configuration baselines are removed from the Configuration Compliance page.
Refresh compliance of the configuration compliance
baselines
The compliance status check of a compliance baseline is triggered automatically if changes are made to either the attributes
of the baseline reference template or if there is any change to the configuration inventory of any of the baseline-associated
devices.
The compliance status of a configuration compliance baseline is a roll-up compliance level of the devices attached to that
configuration compliance baseline. The status of the device with least compliance (say, critical) is indicated as the status of the
whole baseline.
The overall compliance summary of all the configuration baselines is represented on a donut chart located above the Baseline
grid. The Compliance Last Run Date and Time is displayed below the chart.
Compliance status check on large baselines may take several minutes, however, you can click Refresh Compliance to get an
overall compliance summary of the devices on an as-needed basis while the large baseline compliance jobs are running.
NOTE: When the Configuration Compliance is in 'Running' status, initiating new jobs that impact baselines, such as editing
of a compliance template or baseline, is not allowed.
To initiate a refresh of the overall compliance summary of all baselines do the following:
1. Click Configuration > Configuration Compliance, the Configuration Compliance page is displayed.
2. Click Refresh Compliance.
The compliance refresh job (Load Summary of Compliance) is initiated and the overall compliance summary at that moment is
displayed and the Compliance Last Run Time is updated.
Remediate noncompliant devices
On the Compliance Report page of a baseline, you can remediate the devices that do not match the associated baseline by
changing the attribute values to match with the associated baseline attributes.
The Compliance Report page displays the following fields for the target devices that are associated with the compliance
template baseline:
● COMPLIANCE: The status of the device with least compliance (for example, critical) is indicated as the status of the
device.
● DEVICE NAME: The Name of the target device associated with the baseline.
● IP ADDRESS: The IP address of the target device.
● TYPE: Type of the target device associated.
● MODEL: Model name of the target device.
● SERVICE TAG: The service tag of the target device.
● LAST RUN TIME: The most recent date and time when the compliance baseline was run.
You can use the Advanced Filters to quickly see non-compliant devices. Also, the Select All and sorting support can be used on
Configuration compliance results. To undo the filters, click Clear Filters.
To view the drifted attributes of a noncompliant target device, select the device and click View Report. The Compliance
Report of the respective target device lists the attribute names with the expected and current values of the attributes.
To remediate one or more noncompliant devices:
1. Select Configuration > Configuration Compliance.
2. From the list of configuration compliance baselines, select the corresponding check box, and then click View Report.
3. From the list of noncompliant devices, select one or more devices, and then click Make Compliant.
4. Schedule the configuration changes to run immediately or later, and then click Finish.
To apply the configuration changes after the next server reboot, you can select the Stage configuration changes to
device(s) on next reboot option.
Managing the device configuration compliance
109