Quick Start Guide: CIS-CAT Remote Linux Scanning From a Linux Host

Overview

This guide shows how to perform a remote Linux scanning environment for CIS-CAT Pro Assessor from a Linux system.

Requirements

• CIS-CAT Pro Assessor (CLI version without GUI)

• Installation of OpenSSH server and client software

• SSH access to the server (normally port 22)

• A user with sudo privileges

Implementation Steps

1. Navigate to the /Assessor/config directory.

2. Open the sessions.properties file using the text editor of your choice and go to the “Sample Remote Linux Connection” section. Uncomment the lines, as seen below in the screenshot, and input the values to connect to the remote target:

Open

3. Save the file.

4. Navigate back to the /Assessor directory.

5. Run the following command (note that the Benchmark will depend on the target system):

>sudo ./Assessor-CLI.sh -b benchmarks/CIS_Ubuntu_Linux_22.04_LTS_Benchmark_v1.0.0-xccdf.xml -html

Open

6. You will be prompted to enter the password for the target system and the scan will start (output truncated):

7. Once the scan is complete, you will see an “Assessment Results Summary” along with the location of the generated HTML report:

8. The /reports directory will contain the ARF.xml and HTML reports:

Keywords; Linux remote scanning quick start guide assessor

Content by Label