
Include or exclude all items
You can set a policy to include or exclude items. Setting Include All Items at the top level creates a
valid policy that includes all the recommended settings. Setting Exclude All Items at the top level
deselects all items in the policy. To set the include or exclude option, use the following steps:
NOTE: You can also include or exclude items at the subcategory level.
1. Start the HP Imaging and Printing Security Center and click the Policies tab.
2. Select the policy from the list and click Edit.
3. Decide on the highest level in the category tree that you want to set, or select a specific
category.
For example, if you select Policy Categories (the highest category level in the tree), all items in
all of the subcategories in the policy are set. If you select the Authentication category, all items
in the Authentication category are set.
4. Right-click on the category level or category, and select Include All Items or Exclude All Items
from the menu options.
Set severity, remediation, and unsupported behavior
Remediation options are available for each item in the policy, and can include the severity level to
report during an assessment, whether to remediate a failure, and how to report an unsupported
feature. You can use the policy's default remediation settings, individually set the options for each
item in the policy, or set remediation options to apply to a specific policy category.
NOTE: By default, the advanced Remediation and Unsuported Behavior settings are displayed.
To hide the settings, click View and then deselect Advanced Policy Settings. The Severity setting
is always displayed for each policy item.
●
Set Severity Indicates the security risk of the assessed feature when not in compliance with the
policy. Select from High, Medium, or Low.
●
Set Remediation This advanced option indicates whether the item is remediated during an
assessment.
NOTE: The global remediation setting applies to all policies and takes precedence over a
policy's advanced remediation settings. For example, if global remediation is set to Disable
device remediation (Report Only), no device remediation is done regardless of the
Remedation setting in the policy's Advanced Policy Settings. For information about the global
remediation setting, see
Verify global remediation setting on page 9.
◦
Enable Out-of-compliance items are changed to match the policy's setting.
◦
Disable Out-of-compliance items are reported. However, HP IPSC will not change the item
on the device. (Use HP Web Jetadmin, the HP Embedded Web Server, or change the
Remediation setting for the item and rerun the assessment.)
●
Set Unsupported Behavior This advanced option defines how to report a feature that is not
supported by the device during an assessment.
◦
Fail Reports a failure when the item does not exist on the device.
◦
Ignore (default) Does not report the item. For example, if a device does not support a fax,
you would not want to be notified that a fax PIN is not set.
18 Chapter 3 Use the HP Imaging and Printing Security Center ENWW
Commentaires sur ces manuels