Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Overview

This guide will show how to set up a remote Linux scanning environment for CIS-CAT Pro Assessor from a Windows system using a CMD prompt.

Requirements

  • PowerShell installed on Windows system with Assessor

  • PowerShell LanguageMode is not configured to ConstrainedLanguage

    • ConstrainedLanguage mode blocks assessor actions as CIS-CAT PowerShell scripts cannot be dot-sourced

    • Verify LanguageMode using this command: PS> $ExecutionContext.SessionState.LanguageMode

Jump to:

Table of Contents
minLevel3
maxLevel3
outlinefalse
typeflat
separatorpipe
printablefalse

Implementation Steps

  1. Navigate to \Assessor\config and open the sessions.properties file with Notepad++ or the text editor of your choice. NOTE: The version of Assessor you are using will likely be different, so be sure to change the version number in the path.

  2. Edit the “Sample Remote Linux Connection” section by uncommenting (deleting the # symbol) the lines below.

...

Note

On the Linux target, ensure that you have a firewall rule in place to allow port 22.

Guided Video Resource on setting up CIS-CAT Pro Assessor for Remote Linux Scanning

...

Additional Troubleshooting Information

Network diagram for remote scan setup

...