Page Comparison

Problem

An ESXi host is placed into Lockdown Mode as per the following L1/L2 Benchmark Recommendations:

• 3.20 (L1) Host must enable normal lockdown mode (Automated)

• 3.21 (L2) Host should enable strict lockdown mode

Once applied, the CIS-CAT Pro Assessor tool can no longer perform a remote assessment against the target.

Solution

Add the root user (or other applicable ESXi scan user account) to the Exceptions list as outlined in the following Recommendation:

• 3.19 (L1) Host must have an accurate Exception Users list (Manual)

This will then exempt the scan user from Lockdown mode restrictions, allowing an assessment to be conducted with the Recommendation setting properly applied.

For additional information on conducting ESXi assessments, please refer to the following Quick Start Guide:
Quick Start Guide: ESXi Assessment using GUI (Windows)

Keywords; ESXi Lockdown Mode root exception Assessor scan

Content by Label