{"type":"doc","content":[{"type":"paragraph"},{"type":"layoutSection","content":[{"type":"layoutColumn","attrs":{"width":50.0},"content":[{"type":"paragraph","content":[{"text":"Product Name","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"layoutColumn","attrs":{"width":50.0},"content":[{"type":"paragraph","content":[{"text":"CIS-CAT Pro Assessor v4 ","type":"text"}]}]}]},{"type":"layoutSection","content":[{"type":"layoutColumn","attrs":{"width":50.0},"content":[{"type":"paragraph","content":[{"text":"Product Version","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"layoutColumn","attrs":{"width":50.0},"content":[{"type":"paragraph","content":[{"text":"All","type":"text"}]}]}]},{"type":"layoutSection","content":[{"type":"layoutColumn","attrs":{"width":50.0},"content":[{"type":"paragraph","content":[{"text":"Date","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"layoutColumn","attrs":{"width":50.0},"content":[{"type":"paragraph","content":[{"type":"date","attrs":{"timestamp":"1669680000000"}},{"text":" ","type":"text"}]}]}]},{"type":"rule"},{"type":"rule"},{"type":"paragraph"},{"type":"heading","attrs":{"level":2},"content":[{"text":"Problem","type":"text"}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"How to scan multiple servers with multiple databases with CIS-CAT Pro Assessor v4?","type":"text"}]}]},{"type":"paragraph"},{"type":"heading","attrs":{"level":2},"content":[{"text":"Solution","type":"text"}]},{"type":"paragraph","content":[{"text":"A configuration.xml file is needed to scan multiple server instances. ","type":"text"}]},{"type":"paragraph","content":[{"text":"This guide offers an example to what the configuration.xml file should look like: ","type":"text"},{"text":"Parsing errors when creating configuration.xml file for Database Assessments","type":"text","marks":[{"type":"link","attrs":{"href":"https://cisecurity.atlassian.net/servicedesk/customer/kb/view/2056028420"}}]}]},{"type":"paragraph","content":[{"text":"If running multiple assessments against the same Benchmark, the same session can be used with multiple JDBC strings set in the value id’s:","type":"text"}]},{"type":"codeBlock","content":[{"text":" \n \n jdbc:sqlserver://CIS-SERVER:1433;databaseName=TestDB;domain=WIN-DOMAIN;user=jsmith;password=qw3rty;instanceName=TestInstance;\n jdbc:sqlserver://WINTEST:1433;DatabaseName=TestDB;user=user;password=password;instanceName=TestInstance;\n \n ","type":"text"}]},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"If two different Benchmarks need to be run, for example MS SQL 2019 Benchmark and a SQL 2012 Benchmark, an individual session for each different Benchmark will need to be added. For example: ","type":"text"}]},{"type":"codeBlock","content":[{"text":" \n \n jdbc:sqlserver://CIS-SERVER:1433;databaseName=TestDB;domain=WIN-DOMAIN;user=jsmith;password=qw3rty;instanceName=TestInstance;\n jdbc:sqlserver://WINTEST:1433;DatabaseName=TestDB;user=user;password=password;instanceName=TestInstance;\n \n \n \n \n \n jdbc:sqlserver://CIS-SERVER:1433;databaseName=TestDB;domain=WIN-DOMAIN;user=jsmith;password=qw3rty;instanceName=TestInstance;\n \n ","type":"text"}]},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"To run this configuration.xml, there is an option to import while running the Assessor GUI, or this can be done from the command line assessment using the -cfg command: ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://ccpa-docs.readthedocs.io/en/latest/User%20Guide%20-%20Assessor/#command-line-options"}},{"text":" ","type":"text"}]},{"type":"paragraph","content":[{"text":"The configuration sample document that comes in the Assessor-CLI bundle (under the Assessor\\config directory) also offers some helpful tips. This is the official documentation on using a config xml file - ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://ccpa-docs.readthedocs.io/en/latest/User%20Guide%20-%20Assessor/#using-a-configuration-xml-file"}}]},{"type":"paragraph"},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"When scanning multiple Databases for a single instance, CIS-CAT Pro Assessor will scan all the databases, but not all recommendations will get scanned, and the title of the HTML report will only show the last database. ","type":"text"}]},{"type":"paragraph","content":[{"text":"See also: ","type":"text"},{"text":"Minimum login permissions for SQL assessment","type":"text","marks":[{"type":"link","attrs":{"href":"https://cisecurity.atlassian.net/servicedesk/customer/kb/view/1932918873"}}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Keywords; multiple many database assessment","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Content by Label","type":"text"}]},{"type":"extension","attrs":{"layout":"default","extensionType":"com.atlassian.confluence.macro.core","extensionKey":"contentbylabel","parameters":{"macroParams":{"showLabels":{"value":"false"},"showSpace":{"value":"false"},"cql":{"value":"label = \"sbp_fer\""}},"macroMetadata":{"macroId":{"value":"859103c5-b44f-40af-88fc-b9ef3c431177"},"schemaVersion":{"value":"4"},"title":"Content by Label"}},"localId":"b84f6799-774c-4713-979c-93a52236b44f"}},{"type":"rule"},{"type":"layoutSection","content":[{"type":"layoutColumn","attrs":{"width":33.33},"content":[{"type":"paragraph","content":[{"text":"Copyright © 2022","type":"text"}]}]},{"type":"layoutColumn","attrs":{"width":33.33},"content":[{"type":"paragraph","content":[{"text":"Center for Internet Security®","type":"text"}]}]},{"type":"layoutColumn","attrs":{"width":33.33},"content":[{"type":"paragraph","content":[{"text":"Privacy Policy","type":"text","marks":[{"type":"link","attrs":{"href":"https://www.cisecurity.org/privacy-policy/"}}]}]}]}]},{"type":"rule"},{"type":"paragraph"},{"type":"bodiedExtension","attrs":{"layout":"default","extensionType":"com.atlassian.confluence.macro.core","extensionKey":"details","parameters":{"macroParams":{"hidden":{"value":"true"}},"macroMetadata":{"macroId":{"value":"17614376-1753-4b82-82bc-7480a7110f7c"},"schemaVersion":{"value":"1"},"title":"Page Properties"}},"localId":"1f8c1a49-7581-45c0-a6a8-ba33da55fbe0"},"content":[{"type":"table","attrs":{"layout":"default","localId":"b7846d33-7c53-4d58-92e6-1212a7480dca"},"content":[{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"background":"#deebff","rowspan":1,"colwidth":[105.0]},"content":[{"type":"paragraph","content":[{"text":"Action","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"background":"#deebff","rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph","content":[{"text":"Name(s)","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"background":"#deebff","rowspan":1,"colwidth":[141.0]},"content":[{"type":"paragraph","content":[{"text":"Date","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"background":"#ffffff","rowspan":1,"colwidth":[105.0]},"content":[{"type":"paragraph","content":[{"text":"Linked ticket","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"background":"#ffffff","rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph","content":[{"type":"inlineCard","attrs":{"url":"https://cisecurity.atlassian.net/browse/SUPPORT-23065"}},{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"background":"#ffffff","rowspan":1,"colwidth":[141.0]},"content":[{"type":"paragraph"}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[105.0]},"content":[{"type":"paragraph","content":[{"text":"Created by","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph","content":[{"type":"mention","attrs":{"id":"5e6a48612a0bb00ce0340ea1","text":"@Nick Romanzo"}},{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[141.0]},"content":[{"type":"paragraph"}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[105.0]},"content":[{"type":"paragraph","content":[{"text":"Reviewed by","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph","content":[{"text":"SBP Product Technical Support Team","type":"text","marks":[{"type":"link","attrs":{"href":"https://cisecurity.atlassian.net/people/team/fdddccb7-3c69-4a0e-8ca9-3bf1dccd8ed3"}}]},{"text":" (","type":"text"},{"type":"mention","attrs":{"id":"5e8b453ef135980b7bce221e","text":"@Amanda McGown"}},{"text":" ","type":"text"},{"type":"mention","attrs":{"id":"62ceb5de10fcc6f7ae3e8335","text":"@Allan Cornwell"}},{"text":" ","type":"text"},{"type":"mention","attrs":{"id":"60dcb5420717c60069e2e79f","text":"@Andrew Dannenberger"}},{"text":" ","type":"text"},{"type":"mention","attrs":{"id":"5bf31c63b11eb44b84a4fe49","text":"@Chris Boldiston"}},{"text":" ","type":"text"},{"type":"mention","attrs":{"id":"5e6a48612a0bb00ce0340ea1","text":"@Nick Romanzo"}},{"text":" ","type":"text"},{"type":"mention","attrs":{"id":"611aa440ee947000717ce069","text":"@Parami Swenson (Unlicensed)"}},{"text":" ","type":"text"},{"type":"mention","attrs":{"id":"62aa662fa80881006f62f28f","text":"@Perfect Tangban"}}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[141.0]},"content":[{"type":"paragraph"}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[105.0]},"content":[{"type":"paragraph","content":[{"text":"Approved by","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph","content":[{"text":"SBP Product Technical Support Team","type":"text","marks":[{"type":"link","attrs":{"href":"https://cisecurity.atlassian.net/people/team/fdddccb7-3c69-4a0e-8ca9-3bf1dccd8ed3"}}]},{"text":" (","type":"text"},{"type":"mention","attrs":{"id":"5e8b453ef135980b7bce221e","text":"@Amanda McGown"}},{"text":" ","type":"text"},{"type":"mention","attrs":{"id":"62ceb5de10fcc6f7ae3e8335","text":"@Allan Cornwell"}},{"text":" ","type":"text"},{"type":"mention","attrs":{"id":"60dcb5420717c60069e2e79f","text":"@Andrew Dannenberger"}},{"text":" ","type":"text"},{"type":"mention","attrs":{"id":"5bf31c63b11eb44b84a4fe49","text":"@Chris Boldiston"}},{"text":" ","type":"text"},{"type":"mention","attrs":{"id":"5e6a48612a0bb00ce0340ea1","text":"@Nick Romanzo"}},{"text":" ","type":"text"},{"type":"mention","attrs":{"id":"611aa440ee947000717ce069","text":"@Parami Swenson (Unlicensed)"}},{"text":" ","type":"text"},{"type":"mention","attrs":{"id":"62aa662fa80881006f62f28f","text":"@Perfect Tangban"}},{"text":")","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[141.0]},"content":[{"type":"paragraph"}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[105.0]},"content":[{"type":"paragraph","content":[{"text":"Remove by","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[480.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[141.0]},"content":[{"type":"paragraph"}]}]}]}]}],"version":1}

Browser not supported