Hi,
In my test environment, I run a default query "PA: MS Critical Patch Status", then click "Patched" status, then open the audit check result details.
In that page, I don't know what does "Check Result" mean....
Do you anyone teach me the details of "Check Result"?
Regards,
on 12/06/13 5:35:43 EDT AMSolved! Go to Solution.
That field is more confusing than it should be. For patch checks, the logic is a little different than for compliance or policy type checks. In other words, a "false" check result for a patch check will cause the actual rule within the benchmark to show up as a "pass". It's probably best to stick with the higher level results of pass/fail or in the case of this query/monitor patched/unpatched.
That field is more confusing than it should be. For patch checks, the logic is a little different than for compliance or policy type checks. In other words, a "false" check result for a patch check will cause the actual rule within the benchmark to show up as a "pass". It's probably best to stick with the higher level results of pass/fail or in the case of this query/monitor patched/unpatched.
Corporate Headquarters
6220 America Center Drive
San Jose, CA 95002 USA