Some underlying pieces have been completely rebuilt to really improve the performance of Security Compliance Enforcement (SCE) for Windows. This release also provides more detailed compliance reporting and simplifies ongoing maintenance using Puppet native modules.
SCE automates the enforcement of CIS Benchmark recommendations and DISA STIG guidance across Windows and Linux environments, helping teams maintain secure and compliant configurations at scale. SCE is available with Puppet Core and Puppet Enterprise Advanced.
Why Upgrade?
- Improve performance and scalability by reducing policy enforcement overhead.
- Gain more precise visibility into compliance changes.
- Simplify compliance operations by identifying, validating, and remediating configuration drift more efficiently.
What's New?
- Direct enforcement of Windows security and audit policies through Puppet native modules and Windows APIs, reducing reliance on third-party DSC content.
- Per-setting reporting, with each CIS control mapped to its own resource in the Puppet catalog.
Security and Maintenance Updates
This release resolves an issue that could cause CIS compliance scans to incorrectly report AutoAdminLogon settings as non-compliant on Windows Server 2019 and 2022.
Next Steps
- Read the release notes: SCE for Windows v2.3.0 release notes
- Plan your upgrade to SCE for Windows v2.3.0 !
New to SCE?
If you haven't looked at SCE before and are wondering how you can use your existing Puppet management capabilities to expand into compliance auditing and enforcement, please explore the documentation to learn how SCE helps maintain secure configurations, thus protecting systems and data.
Top comments (0)