Webcam User Manual
St.BernardSoftware,Inc. ProtectingYourNetworkInvestment
June19th,2006 UpdateEXPERTPremiumv7.01EvaluationGuide 27
DownloadSecurityE XPERTTemplates
New security templates are shown in the Security Templates tab (shown below) for queried
machines.Templatesm aybeseeninMachine(shownbelow)orResearchView.Templatesare
availableforWindows2000ProfessionalandServer,XPProfessional,and2003Server.
Go to the Security Templates tab for a queried machine, right-click the template, and “Download.”
Downloadinga template parses an XML data stream andwrites newsecuritypointdatato the
configured MSDE or SQLdatabase. Bepatient, thetemplates contain a significant amountof
dataandmaytakelongerthantheaveragepatchtodownload.BluediskettesindicatetheXML
datastreamhasbeenwrittentotheMSDEorMSSQLdatabaseontheSecurityEXPERTserver
(asshownabove). Youcanseriallydownloadalltemplatesusing Research View (see notes).
Note1:ItisalwaysstronglyrecommendedthatyoudownloadoneSecurityTemplateatatime.A
templatedownloaderror(OrangeDiskette)willtypicallyoccurifattemptingtodownloadmultiple
templates.Ifadownloaderroroccurs,tryagain,downloadingonetemplate,thenthenext,etc.
Note2:Inthefuture,ifyouseeaGreydisketteforatempl ateyouknowyoualreadydownloaded
(i.e.,itusedtohaveaBluediskette),this isanindicationthatarevisedtemplatehasnowbecome
available.Thisusuallyimpliestheadditionofnewsecuritypointsandshouldnotaffectexisting
policies,scansetc.
Oncedownloadedtothe relationaldatabase,SecurityTemplatesareusedtocreateuserdefined
policies,whichareuserspecifiedsecuritypointstoassessandpotentiallyenforce.
Notethatsecuritypoints...
· are sourced from wellknown “experts” such as Microsoft and various security
organizations. Different templates support different numbersof experts, hence security
points,i.e.,templatesarenotidentical.
· mayormaynotapplytoacertainmachineconfigurations(whichindicatestypeofusage)
suchas“Server”or“Laptop”or“DesktopClient.”
Insummary,securitypointsaredeterminedbyacombinationof selectedexpertsandmachine
configuration.
Onceanamedpolicyexists,thepolicyisassignedtooneormoremachines.Assessmentand
enforcementcanthenoccur.
Iti salsopossibletocreateapolicyfrom scratch,focusingonspecificitemsofinterest.Thismay
beappropriateforassessingandsetti ngexistingmachines. Thisiswhatwewillillustratehere.










