Product Name
CIS-CAT Pro Assessor-CLI
Product Version
v4.1+
Date
Problem
I watched the Assessor Webinar but it doesn't discuss how to use the MacOS GUI
I am looking for resources for starting a MacOS scan from a MacOS Host via the Assessor GUI.
Solution
At this time, you cannot run the Assessor-GUI on a Mac. Because you cannot launch an executable on a standard Unix/Linux/Mac OS you’ll need to start the Assessments via Assessor-CLI using Terminal.
While we do not have any Webinars that are specific for Mac assessments, if you navigate to the WorkBench Recorded Webinars page you can view the following available SecureSuite Member® Webinars (amongst many others).
CIS-CAT Pro
Using CIS- CAT in 11 Steps
CIS-CAT Pro Assessor v4 – Remote Scanning 101
Centralized Scanning 101: Scanning Multiple Endpoints with CIS-CAT Pro Assessor
Learn about CIS-CAT Pro Assessor V4 GUI
While the Webinars are geared towards Windows Assessments hosted on a Windows system, Assessor-CLI for Unix/Linux uses the same configuration files and basic commands as Assessor-CLI for Windows.
Here is the information for running Assessor-CLI: Command Line Interface (CLI) | CIS-CAT Pro Assessor v4 which segues into a list all of the basic Assessor-CLI commands you’ll use, and further down more in depth commands to call on specific Benchmarks. Basic operation of CIS-CAT Pro Assessor CLI | User Guide v4 Assessor
The most basic of options will be something to the effect of
Assessor-CLI_v4.14.0/Assessor-CLI> sudo ./Assessor-CLI.sh -i - html
This command calls on the Assessor tool as sudo, launches an interactive scan (-i), and will produce an HTML (-html) report to your /reports directory when you complete the scan.
All of the config. files for Assessor-CLI and the Assessor-GUI are the same, and accomplish the same tasks as if you manually entered the information into the GUI every time. The big difference is you’ll need to make a remote SSH connection, and not a WinRM connection as mentioned in the webinars.
This section of the guide discusses using the Remote Assessment - Sessions Configuration file | CIS-CAT Pro Assessor v4 for Linux. This is the file that would load into the GUI on the “Load Configuration File” screen, or manually enter into the GUI. Here is an additional note on Remote Setup for Unix/Linux/OSX | Configuration Guide | CIS-CAT Pro Assessor v4
You will need sudo permissions to run the scans as well as open access to the various file systems on your system including, but not limited to, /var, var/tmp, /temp, app Data, and Program Files.
We are considering releasing an Assessor-GUI for Mac later in 2022. If this is something you would like to see us develop, please open a Feature Enhancement Request stating your interest for a MacOS Gui, and CIS Support will make sure the CIS-CAT Product Owners and Developers receive this request!
Add Comment