DATASHEET (TRIPWIRE)

Tripwire State Analyzer

Automated “why” reporting for security and audit efficiency
Keeping your organization safe and compliant is challenging and complex.
Security is more effective when you have documented baselines for a system’s
configuration, usually in the form of a security policy. These policies specify
recommended or required system configurations, including applications,ports, services, and security basics. But ask yourself: How can I validate thatmy systems are configured according to my security policy? Can I automatethat process? Can I provide justification for my established policy? Can I easily
manage my policy, especially as it applies to assets and groups of assets?
This reconciliation process poses a significant challenge that often involves
lots of time, resources, manual checks, cross-system comparisons, andapproval processes.

The Solution: Tripwire State Analyzer

Fortra’s Tripwire® State Analyzer works in tandem with Tripwire Enterprise andTripwire IP360™ to offer an automated, flexible solution to this security challenge.

How Does Tripwire State Analyzer Help You?

With Tripwire State Analyzer, you manage your policies centrally and getreports on approval, as well as unauthorized system settings of multiple types.
In addition, you can automatically include the justification for a given setting inthe same report to speed up the auditing process.
Tripwire State Analyzer enables you to define a set of required or permitted

PRODUCT SUMMARY

Tripwire Enterprise is a strategic
business tool. Organizations
around the world leverage
its capabilities for better,
faster and more cost effective
cyberthreat protection andcompliance.
Tripwire State Analyzer extends
these capabilities for Tripwirecustomers around the globe,
across many industries,including those who needto adhere to strict NERC CIP
and PCI DSS compliancerequirements. It is also a
powerful tool to address manyof the Center for Internet
Security’s CIS Controls.

system settings. When a system is examined, a comprehensive report ofauthorized and unauthorized settings is generated along with the justification
information. This report enumerates the settings that are out of compliance,and can be configured to provide justification for why the change was allowed.
This provides an automatic audit trail of changes and justifications, as well as
unauthorized changes as they happen. Tripwire State Analyzer saves time andincreases accuracy for both business- and audit-driven compliance policies.
With Tripwire State Analyzer you can:• Define records in centralized Allowlist configurations that containapproved configuration items• Automate the validation of detected system configurations against yourAllowlist configurations

Fortra.com

Page 1Fortra Datasheet• Generate detailed system configuration reports ofauthorized and unauthorized configurations• Integrate with FoxGuard to improve the process ofvalidating software and patches
The solution supports the collection and reconciliation of thefollowing configuration items:

Tripwire State Analyzer

For more information on Tripwire’s NERC solutions, visit theNERC Compliance Solution section at tripwire.com.

CIS Controls

The Center for Internet Security’s CIS Controls are a
recommended set of actions for cyber defense that provide
specific and actionable ways to stop today’s most pervasive• Network Ports

and dangerous attacks.

• Local Users

Tripwire State Analyzer is a powerful tool to address the• Local Groups• Services• Installed Software• Local Shares• Persistent RoutesPCI Requirements

Tripwire delivers continuous and unmatched PCI complianceby our unique integration of policy management, file

following:• Control 2: Inventory and Control of Software Assets• Control 4: Secure Configuration of Enterprise Assets andSoftware• Control 5: Account Management• Control 6: Access Control Management• Control 13: Network Monitoring and Defense• Control 16: Application Software Security

integrity monitoring (FIM), vulnerability assessment and log
intelligence. Tripwire State Analyzer specifically addresses
PCI v4.0 Requirement 1.2.5 (v3.2.1 Requirement 1.1.6), which
relates to the documentation and business justification foruse of all services, protocols, and allowed ports.

NERC CIP Requirements

The application also lends its power—alongside Tripwire
Enterprise, Tripwire IP360 and Tripwire LogCenter®—to help
you address the requirements contained in these NERC
CIPv6 standards:• CIP-007 R1: Ports and Services — The app can monitor
ports and services and compare current state against
a tailored set of customer-specific approved port andservices, alerting when monitoring detects a variance.
• CIP-007 R2: Security Patch Management — The app
can identify software versions and installed patches
and compare current state against a tailored set ofPatch Management customer-specific approved
software versions and patches, alerting when there is avariance on specific BCAs.
• CIP-010 R1: Configuration Change Management — The
app can identify and authorize application software/versions, custom software, logical network accessible
ports, and security patches.

Fortra.com

Tripwire Axon®
agent

1 ALLOWLIST

Authorized ports
with justification

2 COMPARE
againstopen ports onserver

3 LIST OF
APPROVED AND
UNAPPROVED
PORTS

Includes justification

Overview of Tripwire State Analyzer’s process flow in the context of network port
allowlisting.
Step 1: User defines an allowlist of authorized network ports
Step 2: Tripwire State Analyzer interrogates the system and compares any
open ports to the list of authorized ports
Step 3: Report is generated, listing authorized and unauthorized open ports

Page 2Fortra Datasheet

Tripwire State Analyzer

Save Time with Customized Detailed
Reports

Tripwire State Analyzer increases automation and efficiency
and can be customized for each unique enterprise, enabling
you to save time and resources:• Automate the validation of detected system
configurations• Generate detailed system configuration reports ofauthorized and unauthorized configurations• Increase audit preparation efficiency

Tripwire State Analyzer allows for quick, high-level overviews of all assessment
data from multiple consoles in a single source, which can be viewed in greater
detail—down to the per-node level.

Report by
Asset

Unauthorized andAuthorized
Applications

Tripwire State Analyzer reports on authorized, unauthorized as well as unusedsettings, regardless of type.

About Fortra
Fortra is a cybersecurity company like no other. We’re creating a simpler, stronger future for ourcustomers. Our trusted experts and portfolio of integrated, scalable solutions bring balance andFortra.com

control to organizations around the world. We’re the positive changemakers and your relentless ally toprovide peace of mind through every step of your cybersecurity journey. Learn more at fortra.com.

© Fortra, LLC and its group of companies. All trademarks and registered trademarks are the property of their respective owners.

(fta-tw-ds-0223-r1-hm)