4.1.12. Remediation

There are several methods to perform remediation. You can click on the resource name, navigate to the Security Zone → Hardening page from the top bar, and toggle the switch under the item you want to remediate. If the item requires a value, fill in the field and then click the Run button; the hardening will be applied to the target device. After closing the output windows, you will see the fail icon change to a pass icon in real time.

Another common and widely used method is bulk remediation. From the same page, click the Bulk Remediation button. On the page that opens, select the items you want to remediate, proceed by following the Next steps, and apply them collectively by clicking the Run Commands button.

To apply remediation across multiple devices, you can select devices from the same family on the Resource → Resources page and click the Bulk Configuration button. On the page that opens, select Hardening from the Select Category section and click Get Recipes. You can then choose the items you want to add or remove and apply these hardening actions to the target devices.

Using the same method, you can also select Recipe Groups from the Select Category list and apply customized groups such as company-specific, safe-only, or phased groups (Phase 1 / Phase 2) that you received from the SecHard team or prepared yourself.