Infrastructure Configuration overview

Detect failures in configuration tests

Panaseer’s Infrastructure Configuration solution provides continuous assurance that devices comply with established configurations. By monitoring and visualizing configuration compliance through metrics and dashboards, Panaseer highlights misconfigurations, unauthorized changes, and configuration drifts to assist IT, security, and compliance teams in maintaining control.

The platform adds business context to misconfigured devices, enabling teams to identify and prioritize actions effectively. Panaseer’s configuration inventory and automated tracking tools reduce the manual workload for compliance teams, supporting faster, more accurate audits.

Benefits

The Infrastructure Configuration domain provides detailed reports that drastically reduce time spent on identification of non-compliant devices and subsequent remediation, plus auditing and accountability.

Specifically, the domain enables the following:

• Configuration test failures review: You can analyse all configuration tests failures across tools, categorizing by properties to identify the most affected devices and common configuration issues.
• Enhanced audit support: Deliver detailed context and insights into your organization’s configuration management practices, streamlining the audit process and ensuring transparency.
• Panaseer Device Inventory integration: The domain provides business context for prioritizing devices with configuration issues, enhancing device management efficiency.
• SLA performance assessment: Evaluate adherence to SLAs concerning the resolution timeline for failed configuration tests.
• Compliance assessment: Measure compliance against industry benchmarks like CIS or other vendor-provided standards, including pass-rates for custom benchmarks.
• Exception management: Track exceptions granted and exclude these from key metrics to maintain accuracy in reporting.

How Infrastructure Configuration works

Panaseer’s Infrastructure Configuration solution consolidates data from multiple tools into a single dashboard, providing a complete view of the configuration program with out-of-the-box metrics. The platform tracks pass/fail rates, tool coverage, and exclusions, allowing organizations to measure against established benchmarks, such as CIS, or customized internal standards.

Metrics help prioritize misconfigurations based on the number of failures, allowing teams to focus on configurations with the highest impact. By fixing the most critical misconfigurations, organizations can significantly reduce the total list of outstanding issues, improving configuration compliance overall.

Typical use cases

• How many total infrastructure configuration tests have we run? Track the total count of configuration tests across all tools used.
• What is the pass/fail rate of configuration tests? Measure the pass/fail percentage to assess compliance levels.
• What do we need to fix, and when? Use SLA metrics to track the remediation of misconfigurations within defined thresholds.
• Is our infrastructure configuration aligned with best practices? Measure configurations against industry benchmarks, such as CIS, or custom internal standards.
• How many exceptions have we granted for misconfigurations? Monitor exceptions and determine if they remain appropriate over time.

This solution offers prioritized insights into configuration compliance, empowering organizations to focus resources on critical issues and streamline configuration management for improved security and compliance.