Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Product Name

CIS-CAT Pro Assessor-CLI

Product Version

v4.1+

Date



Problem

Info

I watched the Assessor Webinar but it doesn't discuss how to use the MacOS GUI

I am looking for resources for starting a MacOS scan from a MacOS Host via the Assessor GUI.

Solution

At this time, you cannot run the Assessor-GUI on a Mac. Because you cannot launch an executable on a standard Unix/Linux/Mac OS you’ll need to start the Assessments via Assessor-CLI using Terminal.

While we do not have any Webinars that are specific for Mac assessments, if you navigate to the WorkBench Recorded Webinars page you can view the following available SecureSuite Member® Webinars (amongst many others).Webinar series on CIS-CAT Pro

  • Using CIS- CAT in 11 Steps

  • CIS-CAT Pro Assessor v4 – Remote Scanning 101

  • Centralized Scanning 101: Scanning Multiple Endpoints with CIS-CAT Pro Assessor

  • Learn about CIS-CAT Pro Assessor V4 GUI

(and many other topics!)

While the Webinars are geared towards Windows Assessments hosted on a Windows system, Assessor-CLI for Unix/Linux uses the same configuration files and basic commands as Assessor-CLI for Windows.

Here is the information for running Assessor-CLI: Command Line Interface (CLI) | CIS-CAT Pro Assessor v4 which segues into a list all of the basic Assessor-CLI commands you’ll use, and further down more in depth commands to call on specific Benchmarks. Basic operation of CIS-CAT Pro Assessor CLI | User Guide v4 Assessor

The most basic of options will be something to the effect of

Code BlockAssessor-CLI_v4.14.0/Assessor-CLI> sudo

.

/Assessor-CLI.sh -i - html

This command calls on the Assessor tool as sudo, launches an interactive scan (-i), and will produce an HTML (-html) report to your /reports directory when you complete the scan.

All of the config. files for Assessor-CLI and the Assessor-GUI are the same, and accomplish the same tasks as if you manually entered the information into the GUI every time. The big difference is you’ll need to make a remote SSH connection, and not a WinRM connection as mentioned in the webinars.

This section of the guide discusses using the Remote Assessment - Sessions Configuration file | CIS-CAT Pro Assessor v4 for Linux. This is the file that would load into the GUI on the “Load Configuration File” screen, or manually enter into the GUI. Here is an additional

Note
on Remote Setup for Unix/Linux/OSX | Configuration Guide | CIS-CAT Pro Assessor v4

You will need sudo permissions to run the scans as well as open access to the various file systems on your system including, but not limited to, /var, var/tmp, /temp, app Data, and Program Files.

Note

We are considering releasing an Assessor-GUI for Mac later in 2022. If this is something you would like to see us develop, please open a Feature Enhancement Request Support Ticket stating your interest for in a MacOS Gui, and CIS Support will make sure the CIS-CAT Product Owners and Developers receive this request!

Keywords; Mac GUI MacOS

Content by Label

Filter by label (Content by label)
showLabelsfalse
showSpacefalse
cqllabel = "sbp_fer"

Copyright © 2020 2022

Center for Internet Security®


Page Properties
hiddentrue

Action

Name(s)

Date

Linked ticket

Jira Legacy
serverSystem JIRA
serverIdb90ca2a8-9df7-3869-89db-c424866c1b16
keySUPPORT-18212

Jira Legacy
serverSystem JIRA
serverIdb90ca2a8-9df7-3869-89db-c424866c1b16
keySUPPORT-18148

Created by

Amanda McGown

Reviewed by

Approved by

Remove by