Product Name
CIS-CAT Pro Assessor v4
Product Version
any
Date
Problem
An ESXi host is placed into Lockdown Mode as per the following L1/L2 Benchmark Recommendations:
Once applied, the CIS-CAT Pro Assessor tool can no longer perform a remote assessment against the target.
Solution
Add the root user (or other applicable ESXi scan user account) to the Exception Users list as outlined in the following Recommendation:
If using a non-root account, the user must also be explicitly added to the DCUI.Access list:
This will then exempt the scan user from Lockdown mode restrictions, allowing an assessment to be conducted with the Recommendation settings properly applied.
For additional guidance on conducting ESXi assessments using CIS-CAT Pro Assessor, please refer to the following Quick Start Guide:
Quick Start Guide: ESXi Assessment using GUI (Windows)
Add Comment