SCM - Download Problem

All replies

• 

  

  1

  Sign in to vote

  If you can't download baselines from SCM because of proxy and download restriction, you can download them manually and import into SCM. Here are baseline URLs.

  Microsoft Office 2007 SP2 Security Baseline	http://go.microsoft.com/fwlink/?LinkId=179819	This collection includes the security baselines for Office 2007 SP2.	1	Tue, 9 Feb 2010
  Windows XP SP3 Security Baseline	http://go.microsoft.com/fwlink/?LinkId=179822	This collection includes the security baselines for Windows XP SP3.	1	Tue, 9 Feb 2010
  Windows Server 2003 SP2 Security Baseline	http://go.microsoft.com/fwlink/?LinkId=179823	This collection includes the security baselines for Windows Server 2003 SP2.	1	Tue, 9 Feb 2010
  Windows Vista SP2 Security Baseline	http://go.microsoft.com/fwlink/?LinkId=179821	This collection includes the security baselines for Windows Vista SP2.	1	Tue, 9 Feb 2010
  Windows Server 2008 SP2 Security Baseline	http://go.microsoft.com/fwlink/?LinkId=179825	This collection includes the security baselines for Windows 2008 SP2.	1	Tue, 9 Feb 2010
  Internet Explorer 8 Security Baseline	http://go.microsoft.com/fwlink/?LinkId=179808	This collection includes the security baselines for Internet Explorer 8.	1	Tue, 9 Feb 2010
  Windows 7 Security Baseline	http://go.microsoft.com/fwlink/?LinkId=179807	This collection includes the security baselines for Windows 7.	1	Tue, 9 Feb 2010

   

  Michael Tan

  • Marked as answer by Jeffrey M - MSFT Thursday, July 8, 2010 3:39 PM

  Wednesday, July 7, 2010 11:24 PM
• 

  

  0

  Sign in to vote

  Thanks.

  One still wonders why a Microsoft tool cannot get this information in a seamless manner when we are using a Microsoft proxy.

  Wednesday, October 20, 2010 3:34 PM
• 

  

  0

  Sign in to vote

  Great point David – so we went ahead and fixed the proxy issue J

  http://blogs.technet.com/b/secguide/archive/2010/11/18/new-version-of-scm-causes-peace-on-earth.aspx

   

  Jeff dot Sigman at microsoft dot com
  {Programmer Dude}
  Microsoft | Solution Accelerators

   

  PS – here is the best place to find the baselines (if you want to download manually)
  http://social.technet.microsoft.com/wiki/contents/articles/microsoft-security-compliance-manager-scm-baseline-download-help.aspx 

  • Proposed as answer by David McKenzie Thursday, December 2, 2010 2:09 PM

  Wednesday, December 1, 2010 11:17 PM
• 

  

  0

  Sign in to vote

  Thank you Jeff

  ---

  David McKenzie

  Thursday, December 2, 2010 2:09 PM
• 

  

  0

  Sign in to vote

  
  No worries David! Party on…

   

  Jeff dot Sigman at microsoft dot com
  {Programmer Dude}
  Microsoft | Solution Accelerators

   

  Thursday, December 2, 2010 4:18 PM
• 

  

  0

  Sign in to vote

  dang,  I get

  Unable to download this file.  Please check your internet connection.  The server committed a protocol violation.  Section=ResponseStatusLine.

  time to get network tracing it seems.

  Friday, December 3, 2010 2:37 AM
• 

  

  0

  Sign in to vote

  nm, authenticating proxy issues

  2551 1:54:28 PM 3/12/2010 41.4371477  10.139.210.204 10.139.170.10 HTTP HTTP:Request, HEAD http://go.microsoft.com/fwlink/, Query:LinkId=179827 {HTTP:1104, TCP:1103, IPv4:442}
  2552 1:54:28 PM 3/12/2010 41.4388408  10.139.170.10 10.139.210.204 HTTP HTTP:Response, HTTP/1.1, Status: Proxy authentication required, URL: http://go.microsoft.com/fwlink/Using Multiple Authetication Methods, see frame details {HTTP:1104, TCP:1103, IPv4:442}

  no biggie since the location for updates is well documented.

  Friday, December 3, 2010 3:00 AM
• 

  

  0

  Sign in to vote

  Wow! We are really unhappy with your proxy server for some reason. I’ve never seen this one before. Couple questions:

  1.)  Do other apps on your machine have any issues? Like Windows Media Player or such?

  2.)  What proxy server OS/product/version is this?

  We’ll keep updating the wiki with baseline links, but sorry about the trouble! 

   

  Jeff dot Sigman at microsoft dot com
  {Programmer Dude}
  Microsoft | Solution Accelerators

  Monday, December 6, 2010 4:42 PM
• 

  

  0

  Sign in to vote

  That would be a product called Webmarshal, probably slightly old version.   Authentication with it seems to be black magic sometimes. 

  Its not uncommon for other apps (such as Windows Media player) to pop up a dialog box asking for credentials (which are just the domain creds typed in again). IE, firefox, other apps just work.  and then some apps just trip up.

  I'm not in the office this week, but next week I might grab some fuller traces, and have a chat to the guys who run WebMarshal, see if they can explain what authentication it works with.

  cheers

  Tuesday, December 7, 2010 11:09 PM
• 

  

  0

  Sign in to vote

  Sounds good man, thanks for getting back to me. We decided in SCM to *not* prompt for any creds on failure (we could prompt and then retry with those creds based on the HTTP failure code) – but we may decide to go down that road if we hear of more reports of failures like this…
  
  

   

   

  Jeff dot Sigman at microsoft dot com
  {Programmer Dude}
  Microsoft | Solution Accelerators

  Wednesday, December 8, 2010 9:16 PM