Hi folks,

I'm using SCAP Workbench with Open SCAP to remediate CentOS 7.5 (actually 
RedHawk 7.5) systems to evaluate and apply the DISA STIG controls.

My problem isn't in getting this to work, I'm networked to the system I am 
applying controls to and remediation and report generation works fine.

However, when SCAP Workbench begins a scan it downloads the latest rules from 
the internet and uses the downloaded material to perform, the scan/remediation.

This is fine for trying things out, but ultimately what I need this for is to 
harden systems that may not ever touch or be connected to the internet.

How can I configure SCAP Workbench to use files I download elsewhere and 
installed manually on the system running SCAP Workbench.

All of these wonderful tools are useless to me unless I can do this without 
internet. The customer demands this.




William B. Boucher, BSEE
Embedded Systems Software Engineer
Information Systems Security Manager
MZA Associates Corporation
4900 Lang Ave. NE, Suite 100
Albuquerque, NM 87109-9708
Phone: 505.245.9970 x166
Fax: 505.245.9971
Cell: 505.459.7620

Open-scap-list mailing list

Reply via email to