[Panic] IETF SACM Endpoint Compliance Profile

"Fitzgerald-McKay, Jessica M" <jmfitz2@radium.ncsc.mil> Thu, 15 March 2018 18:31 UTC

Return-Path: <jmfitz2@radium.ncsc.mil>
X-Original-To: panic@ietfa.amsl.com
Delivered-To: panic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 92B06120727 for <panic@ietfa.amsl.com>; Thu, 15 Mar 2018 11:31:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level:
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aKrxrKBoKvNf for <panic@ietfa.amsl.com>; Thu, 15 Mar 2018 11:31:14 -0700 (PDT)
Received: from upbd19pa10.eemsg.mail.mil (upbd19pa10.eemsg.mail.mil [214.24.27.85]) by ietfa.amsl.com (Postfix) with ESMTP id F244E120227 for <panic@ietf.org>; Thu, 15 Mar 2018 11:31:10 -0700 (PDT)
Received: from emsm-gh1-uea11.ncsc.mil ([214.29.60.3]) by upbd19pa10.eemsg.mail.mil with ESMTP/TLS/AES256-SHA; 15 Mar 2018 18:31:08 +0000
X-IronPort-AV: E=Sophos;i="5.48,311,1517875200"; d="scan'208";a="10646933"
IronPort-PHdr: 9a23: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
X-IPAS-Result: A2BTAQCOu6pa/7Xj1wpeHQEBBQELAYQ0gSKNYJEQgjWRRhSBfgojhG0Cg1U0GAECAQEBAQEBAgGBEoI4JAGCSz4/EgEaJEIXDwEEDg0ThQyxJohfggUFCQGFJINpiBECAwGBLwESASGDNoIRIAOBJgGGGZBgBwIChgSKcIN8h2GJK4Z/gSoegRlxglyBJ5BsjmaBIoEYAQEB
Received: from msht-gh1-uea02.corp.nsa.gov ([10.215.227.181]) by emsm-gh1-uea11.NCSC.MIL with ESMTP; 15 Mar 2018 18:31:05 +0000
Received: from MSMR-GH1-UEA02.corp.nsa.gov (10.215.227.180) by MSHT-GH1-UEA02.corp.nsa.gov (10.215.227.181) with Microsoft SMTP Server (TLS) id 14.3.361.1; Thu, 15 Mar 2018 14:31:04 -0400
Received: from MSMR-GH1-UEA10.corp.nsa.gov ([169.254.15.221]) by MSMR-GH1-UEA02.corp.nsa.gov ([10.215.227.180]) with mapi id 14.03.0361.001; Thu, 15 Mar 2018 14:31:03 -0400
From: "Fitzgerald-McKay, Jessica M" <jmfitz2@radium.ncsc.mil>
To: "'panic@ietf.org'" <panic@ietf.org>
CC: "Haynes Jr., Dan" <dhaynes@mitre.org>
Thread-Topic: IETF SACM Endpoint Compliance Profile
Thread-Index: AdO8iz1YUEzr6xX8RBOzhXV2sQQ6BA==
Date: Thu, 15 Mar 2018 18:30:59 +0000
Message-ID: <F9582DD87D06A345BF3641AD5C12417A01B9CDAF0E@MSMR-GH1-UEA10.corp.nsa.gov>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.215.237.212]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/panic/R6te18rZ_PIKr8motUqZs0n0ggQ>
Subject: [Panic] IETF SACM Endpoint Compliance Profile
X-BeenThere: panic@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Posture Assessment Through Network Information Collection \(panic\)" <panic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/panic>, <mailto:panic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/panic/>
List-Post: <mailto:panic@ietf.org>
List-Help: <mailto:panic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/panic>, <mailto:panic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 15 Mar 2018 18:37:33 -0000

All,

We've updated the draft Endpoint Compliance Profile (ECP) in IETF SACM (https://datatracker.ietf.org/doc/draft-ietf-sacm-ecp/). The SACM WG asked that the ECP describe how one could use network device-centric protocols and data models (such as NETCONF, NETMOD, and YANG) to describe event-driven collection of endpoint posture data. We tried to generalize the architecture in the ECP to accommodate for both client endpoints and network devices, but haven't fully addressed the details of a NETCONF/NETMOD/YANG solution might be implemented. 

I've like to get this group's feedback on the architecture. If you have thoughts, please email the group, or join the SACM WG discussion on Thursday, if you are able. 

Thanks,
Jess