CSAT Crashing due to Industry Average Service


Product Name

CIS CSAT Pro - SecureSuite CIS Controls Self Assessment Tool

Product Version

All

Date

Jun 8, 2022



 

Problem

CSAT Pro is not loading and I am getting multiple errors in the logs.

 

Solution

Look through the log file for an error similar to the one below:

07/06/2022 11:58:32.887 INFO org.cisecurity.dxl.industry.IndustryAverageServiceFacade - Submission Payload contains 3750 assessment sub-control submissions 07/06/2022 11:58:32.887 INFO org.cisecurity.dxl.industry.IndustryAverageServiceFacade - OnAssessmentSubControlValidationChange: Submitting (on-prem) Assessment Sub-Control Score 07/06/2022 11:58:32.887 INFO org.cisecurity.dxl.base.CsatDxlUtilities - [START] Request to Service Topic --> /cis/member/csat/industry/average/submit 07/06/2022 11:58:32.887 INFO org.cisecurity.dxl.base.CsatDxlUtilities - [START] Pinging Service Topic --> /cis/member/csat/industry/average/submit 07/06/2022 11:58:33.012 INFO org.cisecurity.dxl.base.CsatDxlUtilities - Fabric is connected 07/06/2022 11:58:33.012 INFO org.cisecurity.dxl.base.CsatDxlUtilities - Topic is /cis/member/csat/industry/average/submit 07/06/2022 11:58:33.012 INFO org.cisecurity.dxl.base.CsatDxlUtilities - Topic is listening. 07/06/2022 11:58:33.012 INFO org.cisecurity.dxl.base.CsatDxlUtilities - [ END ] Pinging Service Topic --> /cis/member/csat/industry/average/submit; Success --> true 07/06/2022 11:58:33.027 INFO org.cisecurity.dxl.base.CsatDxlUtilities - Invoking synchronous request 07/06/2022 11:58:33.074 ERROR com.opendxl.client.DxlClient - connectionLost: Connection lost, disconnection strategy will be invoked.

 If there are a large amount of assessment sub-control submissions, such as in line 1 above, please try the following the below steps. The below steps are temporarily preventing CSAT from being able to connect to the CIS services and then trying to start CSAT. If things are working, then we are re-connecting to the CIS services and opting back into the industry average service.

  1. In the csat-config.yml file, modify the csat>integration>config file path to point to an invalid file path (e.g., slightly modify the path, so that CSAT won’t be able to find where the dxlclient.config file is located). This will prevent CSAT from being able to connect to CIS services, such as the industry average service.

  2. Start CSAT and confirm whether or not it works.

  3. If CSAT is now running, go to the System Integration page and opt out of the industry average service.

  4. Stop CSAT

  5. In the csat-config.yml file, modify the csat>integration>config file path to point to the correct path where the dxlclient.config file is located.

  6. Start CSAT and confirm whether or not it works.

  7. If CSAT is now running, go to the System Integration page and opt in to the industry average service and test that CSAT is connected to the service.

Keywords; CSAT Pro Not Loading Access

Content by Label


Copyright © 2022

Center for Internet Security®