New Audit Conditional Functionality: Auto Else and Rollup

Summary

Two new features are being released to support deduplication of audit content, bring additional parity to audit results against industry guidance, and improve clarity about the intent of audit checks.

Auto Else - a feature that allows for the removal of an “else” clause within a conditional, with automatic display of output should the conditional checks fail. This is useful for deduplication of content and should result in a dramatic reduction in our audit content file size.

Rollup - a feature that will capture the results of all checks within a condition block for reporting as a single recommendation result. This is useful for ensuring result parity against source guidance. For example, previously we might write multiple checks to test for unique items supporting a single recommendation. With this feature we can test for those unique items and aggregate them into a single result.

Target Release Date

Immediate 

Additional Notes

Please see the newly published documentation at https://docs.tenable.com/nessus/compliance-checks-reference/Content/AppendixConditionalAutoElseRollup.htm for information and implementation.

Tenable audit files will be published with these changes in future versions. Please note that future audit updates may display fewer results as the parity of checks to industry guidance is brought in line with each other. Overall the audit scan results should align with guidance documentation 1:1.