Product Name
CIS-CAT Pro Assessor v4
Product Versionany
v4.x.x+
Date
31 Jul
Problem
An ESXi host is placed into Lockdown Mode as per the following L1/L2 Benchmark Recommendations:
Once applied, the CIS-CAT Pro Assessor tool can no longer perform a remote assessment against the target.
Solution
Add the root
user (or other applicable ESXi scan user account) to the Exceptions Exception Users list as outlined in the following Recommendation:
If using a non-root
account, the user must also be explicitly added to the DCUI.Access list:
This will then exempt the scan user from Lockdown mode restrictions, allowing an assessment to be conducted with the Recommendation setting properly applied. For additional information guidance on conducting ESXi assessments using CIS-CAT Pro Assessor, please refer to the following Quick Start Guide:
Quick Start Guide: ESXi Assessment using GUI (Windows)
Keywords; ESXi Lockdown Mode root exception Assessor scan
Content by Label
Filter by label (Content by label) | ||||||
---|---|---|---|---|---|---|
|
Page Properties | ||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||||||||||||||||
|