
benchmarks determine compliance with its rules, but they also return results that can be
converted to a human-readable format.
Server setting categories
You should configure Policy Auditor’s server settings before you begin using the product. McAfee
supplies default settings, but you might want to use different server settings to fit your
organizational needs.
These server setting category sections describe each setting, thus helping you to make informed
decisions as to whether you should change the default settings.
Audit score category
Policy Auditor allows you to set the names used to describe the four audit score categories.
McAfee recommends that you keep the default settings but you may change them to fit your
organizational needs or existing security policies.
DescriptionAudit Score Category
High
Audit score - Category High
Low
Audit score - Category Low
Medium
Audit score - Category Medium
Unknown
Audit score - Category Unknown
Default scoring model
Policy Auditor supports the four standard XCCDF scoring models. These scoring models are
described in more detail in the
Scoring Audits
section. Policy Auditor uses the flat unweighted
scoring model normalized to a value of 100 as its default scoring model.
Audit score
Policy Auditor allows you to change the default score in order to help you determine a score
that constitutes passing an audit or failing an audit. A score equal to or less than the Maximum
Low Score is considered be below the desired level that you want a system to achieve.
DescriptionAudit Score
Any audit score below this setting will have a category of
Low if you use the default settings.
Maximum Low Score
Any audit score above this setting will have a category of
High if you use the default settings
Minimum High Score
Any audit score below this setting means that the audit
has failed.
Audit Score - Fail
Configuring Policy Auditor
Server setting categories
13McAfee Policy Auditor 5.0 Product Guide
Comentarios a estos manuales