Compatibility Questionnaire: Inverse Path (TPOL – OVAL Security Compliance) — Archive
Important: The OVAL Compatibility Program was moved to "archive" status in December 2009, and replaced with the "OVAL Adoption Program." Under the OVAL Adoption Program product validation is performed by an external organization, allowing the OVAL Team to focus on educating vendors on best practices regarding the use and implementation OVAL and on how OVAL can continue to evolve as needed by the community.
Refer to the OVAL Adoption Program section for addition information and to review all products and services listed.
Organizational Information
Name of Your Organization:
Web Site:
Product Information
Product/Service Name:
Compatible Categories:
Product/Service Home Page:
Product Accessibility
The TPOL Security Compliance product is available directly from Inverse Path by contacting sales@inversepath.com.
Language Version Indication
Within the documentation section of the web interface of TPOL and the shipped manual we clearly specify the language version we support as well as the last oval.xml file timestamp shipped by MITRE that has been tested against the tool.
Additionally, for maximum clarity, we provide an OVAL_COMPLIANCE document stating any incomplete and/or unsupported part of the standard that doesn’t have 100% support.
Approach for Correction of Errors
The support team can be contacted at support@inversepath.com regarding any bug in the tool.
A patch will be shipped as soon as possible to any affected customers.
Compatibility Documentation
The whole TPOL – OVAL Security Compliance tool, as the name implies, is built around the OVAL standard, user manual and web interface clearly show this essential characteristic.
Language Support
TPOL currently supports all platforms, excluding IOS, MacOS and Microsoft Windows Schemas. We plan to support those in future releases.
Finding Elements Using OVAL
OVAL definitions can be quickly looked up using the search tool, which allows searches by OVAL ID, Version, Class, Title, Platform and Product.
Definitions are linked to Policies, when the Policies are checked against the Targets a dedicated page shows all results, specifying the Definition, Target name, Policy, the actual result and any error string with mismatches in case.
OVAL Content Importation Process Explanation
A user can import the .xml file using a dialog, he will then see the definitions in the main list and can treat them as any other definition.
OVAL definitions which are not supported cannot be imported or created within the tool, the unsupported OVAL content is clearly advertised in our documentation.
Statement of Compatibility
Have an authorized individual sign and date the following Compatibility Statement (required):
"As an authorized representative of my organization I agree that we will abide by all of the mandatory compatibility requirements as well as all of the additional mandatory compatibility requirements that are appropriate for our specific type of capability."
Name: | Andrea Barisani | |
Title: | Chief Security Engineer, Inverse Path Ltd. |
Statement of Accuracy
Have an authorized individual sign and date the following accuracy Statement (recommended):
"As an authorized representative of my organization and to the best of my knowledge, there are no errors in the correctness of our capability’s use of the OVAL Language and the interpretation of the logic."
Name: | Andrea Barisani | |
Title: | Chief Security Engineer, Inverse Path Ltd. |
Statement on Follow-on Correctness Testing Support
Have an authorized individual sign and date the following statement about your organizations willingness to support correctness testing of other capabilities, which will be managed by the Reviewing Authority and kept to reasonable levels of effort for all involved. (required):
"As an authorized representative of my organization, we agree to support the Review Authority in follow-on correctness testing activities, where appropriate types of OVAL documents might need to be exchanged with other organizations attempting to prove the correctness of their capabilities."
Name: | Andrea Barisani | |
Title: | Chief Security Engineer, Inverse Path Ltd. |
Page Last Updated: December 17, 2009