![]() This can result in differences occurring between the CIS Benchmark PDF recommendations identified as “Automated” and the CIS-CAT report. Some CIS Benchmark recommendations may not be supported for automation in CIS-CAT. Future and past CIS Benchmark versions for the technologies supported may work with the current or past CIS-CAT tool versions, but are not guaranteed and should be used at each organization's discretion. The CIS-CAT tool, on each release performs some regression testing, where possible, for most Benchmark versions released with the CIS-CAT bundle. The CIS Benchmarks are tested with the prior, official CIS-CAT version at the time automated Benchmark content is announced as supported in CIS-CAT. Navigate to CIS WorkBench for more information. As Members are working to upgrade systems within their organization to more current technology, CIS offers end of life CIS Benchmark automated assessment content on the CIS WorkBench. Please contact CIS Support for additional coverage requests.ĬIS Benchmarks that have reached end of life are no longer officially supported for use with CIS-CAT. CIS-CAT Pro Assessor v4 supported CIS Benchmarks will be present in the benchmark directory of your downloaded CIS-CAT bundle and contain "oval" and "xccdf" in the filename. Please see the CIS-CAT Pro Assessor CLI User's Guide for more information regarding configuration of these values.įor some older Windows platforms such as Microsoft Windows Server 2008 R2, it is required to be current with service pack updates in order for the assessment to process without error.ĬIS-CAT Pro Assessor v4 is currently a standards-based application focused on vendor-supported technology platforms and applications where OVAL coverage is available. Note that any benchmark listed below which displays a bulleted list of " id:description" information are those benchmarks which contain "interactive values". The benchmarks utilize standards included in the Security Content Automation Protocol, such as the eXtensible Configuration Checklist Description Format (XCCDF) and the Open Vulnerability and Assessment Language (OVAL). CIS Benchmark CoverageĬIS currently distributes CIS-CAT with production support for the following benchmarks. ![]() This document provides information about the assessment capabilities of CIS-CAT Pro Assessor v4, such as included benchmarks, OVAL test types, scripting capabilities, etc.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |