As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Technical Articles ID:
KB72961
Last Modified: 4/8/2024
Environment
Policy Auditor (PA) 6.x
Summary
IMPORTANT: When Microsoft releases new operating systems or Service Packs, the original PA product guides might not reflect the current support policy for those platforms. Most of the following information is available in the product, installation guides, and release notes. Some of the information is available only in the Product Management statements published in the Knowledge Base.
Our product software, upgrades, maintenance releases, and documentation are available on the Product Downloads site.
Added "PA 6.5.8" to the "Product release information" section.
Added "TA 5.8.x" support details to the "Trellix Agent (TA) / McAfee Agent (MA) support" section.
December 29, 2023
Added "ePO 5.10 SP1 Update 2" to the "ePO server support with PA 6.x extension" section.
December 19, 2023
Added "PA 6.5.7" to the "PA Agent plug-in platforms and support" section.
Added "Red Hat Enterprise Linux 9", "Microsoft Windows 11 version 22H2", and "Microsoft Windows 11 version 23H2" to the "PA Agent plug-in platforms and support" section.
November 14, 2023
Added "PA 6.5.7" to the "Product release information" section.
Contents
Click to expand the section you want to view:
1 PA 6.5.7 update release is only for clients and there is no ePO extension. 2 PA 6.4.2 was released exclusively for Mac OS X endpoints to support host inventory scanning.
IMPORTANT: Audit Engine Security Content Automation Package (SCAP) content updates for the following platforms are no longer provided as of May 2020:
CentOS
Debian 8 and prior
HP-UX
IBM AIX
Mac OS X 10.11 and prior
Microsoft Windows 2000
Microsoft Windows 2003
Microsoft Windows XP
Microsoft Windows Vista
Microsoft Windows 8
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows 7
Red Hat Enterprise Linux 5 and prior
Sun Solaris
SUSE Linux Enterprise Server 12 SP3 and prior
Operating System
PA
6.5.7
PA
6.5.5
6.5.6
PA
6.5.2–
6.5.4
PA
6.5.0– 6.5.1
PA
6.4.32
PA
6.4.21
PA
6.4.1
PA
6.4
PA
6.3
Mac OS X 14.0 (64-bit only) Sonoma
Yes
Yes
No
No
No
No
No
No
No
Mac OS X 13.0 (64-bit only) Ventura
Yes
Yes
No
No
No
No
No
No
No
Mac OS X 12.0 (64-bit only) Monterey
Yes
Yes
Yes
No
No
No
No
No
No
Mac OS X 11.0 (64-bit only) Big Sur
Yes
Yes
Yes
No
No
No
No
No
No
Mac OS X 10.15 (64-bit only)
Yes
Yes
Yes
-
Yes
Yes
Yes
Yes
Yes
Mac OS X 10.14 (64-bit only)
Yes
Yes
Yes
-
Yes
Yes
Yes
Yes
Yes
Mac OS X 10.13(64-bit only)
-
-
-
-
Yes
Yes
Yes
Yes
Yes
Mac OS X 10.12(64-bit only)
-
-
-
-
Yes
Yes
Yes
Yes
Yes
Mac OS X 10.11(64-bit only)
-
-
-
-
Yes
Yes
Yes
Yes
Yes
Mac OS X 10.10 (64-bit only)
No
No
No
No
No
No
Yes
Yes
Yes
Mac OS X 10.9(64-bit only)
No
No
No
No
No
No
Yes
Yes
Yes
Mac OS X 10.8(64-bit only)
No
No
No
No
No
No
No
No
Yes
CentOS 7
Yes
Yes
Yes
Yes
Yes
-
No
No
Yes
CentOS 6
-
-
-
-
Yes
-
No
No
Yes
CentOS 5
No
No
No
No
No
-
No
No
Yes
Debian 10
Yes
Yes
Yes
Yes
Yes
-
Yes
Yes
Yes
Debian 9
Yes
Yes
Yes
Yes
Yes
-
Yes
Yes
Yes
Debian 8
Yes
Yes
Yes
Yes
Yes
-
Yes
Yes
Yes
Debian 7
Yes
Yes
Yes
Yes
-
-
No
No
Yes
Oracle Linux 73
No
No
No
No
No
-
No
No
Yes
Oracle Linux 63
No
No
No
No
No
-
No
No
Yes
Red Hat Enterprise Linux 9
Yes
Yes
-
-
-
-
-
-
-
Red Hat Enterprise Linux 83
Yes
Yes
Yes
Yes
Yes
-
Yes
Yes
Yes
Red Hat Enterprise Linux 7 Server
Yes
Yes
Yes
Yes
Yes
-
Yes
Yes
Yes
Red Hat Enterprise Linux 6
(32-bit and 64-bit)
-
-
-
-
Yes
-
Yes
Yes
Yes
Red Hat Enterprise Linux WS 5
(32-bit and 64-bit, 32-bit Agent on 64-bit hardware)
-
-
-
-
-
-
No
No
Yes
Red Hat Enterprise Linux ES 5
(32-bit and 64-bit, 32-bit Agent on 64-bit hardware)
-
-
-
-
-
-
No
No
Yes
Red Hat Enterprise Linux AS 5
(32-bit and 64-bit, 32-bit Agent on 64-bit hardware)
-
-
-
-
-
-
No
No
Yes
SUSE Linux Enterprise Server 12 (SP3/SP4)
(32-bit and 64-bit hardware)
Yes
Yes
Yes
Yes
Yes
-
Yes
Yes
Yes
SUSE Linux Enterprise Server 11
(32-bit and 64-bit hardware)
-
-
-
-
-
-
Yes
Yes
No
Windows 2022 Server
Yes
Yes
Yes
Yes
No
-
No
No
No
Windows 2019 Server
Yes
Yes
Yes
Yes
Yes
-
-
-
-
Windows 2016 Server
Yes
Yes
Yes
Yes
Yes
-
Yes
Yes
Yes
Windows 2012 Server
-
-
-
-
-
-
Yes
Yes
Yes
Windows 2012 Server R2
Yes
Yes
Yes
Yes
Yes
-
Yes
Yes
Yes
Windows Server 2008
(32-bit and 64-bit)
-
-
-
-
-
-
Yes
Yes
Yes
Windows Server 2008 Core editions
(32-bit and 64-bit)
-
-
-
-
-
-
No
No
No
Windows Server 2008 R2
(32-bit and 64-bit)
-
-
-
-
Yes
-
Yes
Yes
Yes
Windows Server 2008 R2 Core
(32-bit and 64-bit)
-
-
-
-
Yes
-
No
No
No
Microsoft Windows 11 version 23H2
Yes
Yes
-
-
-
-
-
-
-
Microsoft Windows 11 version 22H2
Yes
Yes
-
-
-
-
-
-
-
Microsoft Windows 11
Yes
Yes
Yes
Yes
-
-
No
No
No
Microsoft Windows 10 version 22H2
Yes
Yes
Yes
Yes
-
-
No
No
No
Microsoft Windows 10 version 21H2
Yes
Yes
Yes
Yes
-
-
No
No
No
Windows 10 version 21H1 (May 2021 Update)
Yes
Yes
Yes
Yes
-
-
No
No
No
Windows 10 version 20H2 (October 2020 Update)
Yes
Yes
Yes
Yes
-
-
No
No
No
Windows 10
Windows 10 Threshold 2
Windows 10 Anniversary Edition
Yes
Yes
Yes
Yes
Yes
-
Yes
Yes
Yes
Windows 10 Version 1607 (Creators Update)
Yes
Yes
Yes
Yes
Yes
-
Yes
Yes
Yes
Windows 10 Version 1703 (Creators Update)
Yes
Yes
Yes
Yes
Yes
-
Yes
Yes
Yes
Windows 10 Version 1709 (Fall Creators Update)
Yes
Yes
Yes
Yes
Yes
-
Yes
Yes
Yes
Windows 10 Version 1803 (April 2018 Update)
Yes
Yes
Yes
Yes
Yes
-
Yes
Yes
Yes
Windows 10 Version 1809 (October 2018 Update)
Yes
Yes
Yes
Yes
Yes
-
Yes
Yes
Yes
Windows 10 Version 1903 (May 2019 Update)
Yes
Yes
Yes
Yes
Yes
-
Yes
Yes
Yes
Windows 10 Version 1909 (November 2019 Update)
Yes
Yes
Yes
Yes
Yes
-
Yes
Yes
Yes
Windows 10 Version 2004 (May 2020 Update)
Yes
Yes
Yes
Yes
Yes
-
Yes
Yes
Yes
Windows 8.1 (Update 1 and 2)
Yes
Yes
Yes
Yes
Yes
-
Yes
Yes
Yes
Windows 8
No
No
No
No
No
-
Yes
Yes
Yes
Windows 7 (32-bit and 64-bit)
No
No
No
No
Yes
-
Yes
Yes
Yes
Windows Vista
Native 32-bit and 64-bit Agent
No
No
No
No
No
-
Yes
Yes
Yes
Ubuntu 18.04
Yes
Yes
No
No
No
No
No
No
No
Ubuntu 20.04
Yes
Yes
No
No
No
No
No
No
No
1
PA 6.4.2 was released exclusively for Mac OS X endpoints to support host inventory scanning.
2
PA 6.4.3 agent uses MA MessageBus Architecture.
3
SCAP content includes both compliance and update checks.
NOTE: As part of the SCAP package cleanup activity, the legacy platforms, benchmarks, and localization checks are cleaned up. The removed benchmarks are available in the file attached to this article: Benchmarks-removed.pdf.
Supported Microsoft Applications:
Microsoft Office 2019 and SharePoint applications
Microsoft Office 2016 and SharePoint applications
Microsoft Office 2013 and SharePoint applications
Microsoft Office 2010 and SharePoint applications
NOTE:Microsoft Silverlight and Microsoft Exchange Server aren't supported.
Microsoft ended mainstream support for Windows Server 2008/2008 R2 on January 13, 2015, and will end extended support on January 14, 2020. For details, go to the Windows Server Documentation page. For best results and optimal security, upgrade to a newer supported operating system.
Microsoft ended extended support for Windows Server 2003 SP2 on July 14, 2015. As of the end of 2015, the only product we support with Windows Server 2003 SP2 is Application and Change Control.
1 The minimum ePO version support is 5.3.1 Build 188. 2IMPORTANT: An upgrade to ePO 5.9 requires that older versions of the PA extension be uninstalled before the upgrade. If you upgrade from ePO 5.3.1, you can upgrade to PA 6.3 before the ePO upgrade, instead of uninstalling the old version. After the upgrade to ePO 5.9 is complete, install PA 6.3.
1PA 6.3.x is compliant with the SCAP1.2 standard. You can continue to use third-party or custom content that uses versions of OVAL before 5.10.1. The content must be valid for the OVAL 5.10.1 schema and compliant with the same SCAP 1.2 standard. Custom content is defined as content created using the Benchmark Editor interface in previous versions of PA. Or, its content is not delivered through regular Audit Engine Content updates.
The table below lists the requirements for PA Agent plug-in support on Windows systems:
Component
Requirements
Processor
Intel Pentium class, Celeron, or compatible processor; 166-MHz processor or higher
Free disk space for Agent plug-in
300 MB
Free disk space for other components
Sufficient disk space on client computers for each of our products that you plan to deploy. For more information, see the corresponding product documentation.
Free Memory
20 MB RAM
Network environment
Microsoft or Novell NetWare networks. NetWare networks require TCP/IP.
Network Interface Card (NIC)
10 Mbps or higher
When an Advanced Host Assessment (AHA) scan is run, information is gathered regarding all installed internet browsers, and their extensions and plug-ins.
The following table contains a list of all supported browsers for Windows-based and Linux-based endpoints:
EOL period—The time frame that runs from the day we announce product discontinuation, until the last date that we formally support the product. In general, after the EOL period is announced, no enhancements are made.
EOL date—The last day that the product is supported, according to the terms of our standard support offering.