Answered by:
SCM - Download Problem

Question
-
What URL uses the Security Compliance Manager to "Check for Baselines and "Check for Application Update" in the Tools Menu?
We use a proxy, i need to know what URLs the Security Compliance Manager use.
Can i download the Baselines manually?
Please help
Tuesday, July 6, 2010 7:30 AM
Answers
-
If you can't download baselines from SCM because of proxy and download restriction, you can download them manually and import into SCM. Here are baseline URLs.
Microsoft Office 2007 SP2 Security Baseline http://go.microsoft.com/fwlink/?LinkId=179819 This collection includes the security baselines for Office 2007 SP2. 1 Tue, 9 Feb 2010 Windows XP SP3 Security Baseline http://go.microsoft.com/fwlink/?LinkId=179822 This collection includes the security baselines for Windows XP SP3. 1 Tue, 9 Feb 2010 Windows Server 2003 SP2 Security Baseline http://go.microsoft.com/fwlink/?LinkId=179823 This collection includes the security baselines for Windows Server 2003 SP2. 1 Tue, 9 Feb 2010 Windows Vista SP2 Security Baseline http://go.microsoft.com/fwlink/?LinkId=179821 This collection includes the security baselines for Windows Vista SP2. 1 Tue, 9 Feb 2010 Windows Server 2008 SP2 Security Baseline http://go.microsoft.com/fwlink/?LinkId=179825 This collection includes the security baselines for Windows 2008 SP2. 1 Tue, 9 Feb 2010 Internet Explorer 8 Security Baseline http://go.microsoft.com/fwlink/?LinkId=179808 This collection includes the security baselines for Internet Explorer 8. 1 Tue, 9 Feb 2010 Windows 7 Security Baseline http://go.microsoft.com/fwlink/?LinkId=179807 This collection includes the security baselines for Windows 7. 1 Tue, 9 Feb 2010 Michael Tan
- Marked as answer by Jeffrey M - MSFT Thursday, July 8, 2010 3:39 PM
Wednesday, July 7, 2010 11:24 PM
All replies
-
If you can't download baselines from SCM because of proxy and download restriction, you can download them manually and import into SCM. Here are baseline URLs.
Microsoft Office 2007 SP2 Security Baseline http://go.microsoft.com/fwlink/?LinkId=179819 This collection includes the security baselines for Office 2007 SP2. 1 Tue, 9 Feb 2010 Windows XP SP3 Security Baseline http://go.microsoft.com/fwlink/?LinkId=179822 This collection includes the security baselines for Windows XP SP3. 1 Tue, 9 Feb 2010 Windows Server 2003 SP2 Security Baseline http://go.microsoft.com/fwlink/?LinkId=179823 This collection includes the security baselines for Windows Server 2003 SP2. 1 Tue, 9 Feb 2010 Windows Vista SP2 Security Baseline http://go.microsoft.com/fwlink/?LinkId=179821 This collection includes the security baselines for Windows Vista SP2. 1 Tue, 9 Feb 2010 Windows Server 2008 SP2 Security Baseline http://go.microsoft.com/fwlink/?LinkId=179825 This collection includes the security baselines for Windows 2008 SP2. 1 Tue, 9 Feb 2010 Internet Explorer 8 Security Baseline http://go.microsoft.com/fwlink/?LinkId=179808 This collection includes the security baselines for Internet Explorer 8. 1 Tue, 9 Feb 2010 Windows 7 Security Baseline http://go.microsoft.com/fwlink/?LinkId=179807 This collection includes the security baselines for Windows 7. 1 Tue, 9 Feb 2010 Michael Tan
- Marked as answer by Jeffrey M - MSFT Thursday, July 8, 2010 3:39 PM
Wednesday, July 7, 2010 11:24 PM -
Thanks.
One still wonders why a Microsoft tool cannot get this information in a seamless manner when we are using a Microsoft proxy.
Wednesday, October 20, 2010 3:34 PM -
Great point David – so we went ahead and fixed the proxy issue J
http://blogs.technet.com/b/secguide/archive/2010/11/18/new-version-of-scm-causes-peace-on-earth.aspx
Jeff dot Sigman at microsoft dot com
{Programmer Dude}
Microsoft | Solution AcceleratorsPS – here is the best place to find the baselines (if you want to download manually)
http://social.technet.microsoft.com/wiki/contents/articles/microsoft-security-compliance-manager-scm-baseline-download-help.aspx- Proposed as answer by David McKenzie Thursday, December 2, 2010 2:09 PM
Wednesday, December 1, 2010 11:17 PM -
Thank you Jeff
David McKenzieThursday, December 2, 2010 2:09 PM -
Thursday, December 2, 2010 4:18 PM
-
dang, I get
Unable to download this file. Please check your internet connection. The server committed a protocol violation. Section=ResponseStatusLine.
time to get network tracing it seems.
Friday, December 3, 2010 2:37 AM -
nm, authenticating proxy issues
2551 1:54:28 PM 3/12/2010 41.4371477 10.139.210.204 10.139.170.10 HTTP HTTP:Request, HEAD http://go.microsoft.com/fwlink/, Query:LinkId=179827 {HTTP:1104, TCP:1103, IPv4:442}
2552 1:54:28 PM 3/12/2010 41.4388408 10.139.170.10 10.139.210.204 HTTP HTTP:Response, HTTP/1.1, Status: Proxy authentication required, URL: http://go.microsoft.com/fwlink/Using Multiple Authetication Methods, see frame details {HTTP:1104, TCP:1103, IPv4:442}no biggie since the location for updates is well documented.
Friday, December 3, 2010 3:00 AM -
Wow! We are really unhappy with your proxy server for some reason. I’ve never seen this one before. Couple questions:
1.) Do other apps on your machine have any issues? Like Windows Media Player or such?
2.) What proxy server OS/product/version is this?
We’ll keep updating the wiki with baseline links, but sorry about the trouble!
Jeff dot Sigman at microsoft dot com
{Programmer Dude}
Microsoft | Solution AcceleratorsMonday, December 6, 2010 4:42 PM -
That would be a product called Webmarshal, probably slightly old version. Authentication with it seems to be black magic sometimes.
Its not uncommon for other apps (such as Windows Media player) to pop up a dialog box asking for credentials (which are just the domain creds typed in again). IE, firefox, other apps just work. and then some apps just trip up.
I'm not in the office this week, but next week I might grab some fuller traces, and have a chat to the guys who run WebMarshal, see if they can explain what authentication it works with.
cheers
Tuesday, December 7, 2010 11:09 PM -
Sounds good man, thanks for getting back to me. We decided in SCM to *not* prompt for any creds on failure (we could prompt and then retry with those creds based on the HTTP failure code) – but we may decide to go down that road if we hear of more reports of failures like this…
Jeff dot Sigman at microsoft dot com
{Programmer Dude}
Microsoft | Solution AcceleratorsWednesday, December 8, 2010 9:16 PM