Hi folks,
I'm using SCAP Workbench with Open SCAP to remediate CentOS 7.5 (actually
RedHawk 7.5) systems to evaluate and apply the DISA STIG controls.
My problem isn't in getting this to work, I'm networked to the system I am
applying controls to and remediation and report generation works fine.
However, when SCAP Workbench begins a scan it downloads the latest rules from
the internet and uses the downloaded material to perform, the scan/remediation.
This is fine for trying things out, but ultimately what I need this for is to
harden systems that may not ever touch or be connected to the internet.
How can I configure SCAP Workbench to use files I download elsewhere and
installed manually on the system running SCAP Workbench.
All of these wonderful tools are useless to me unless I can do this without
internet. The customer demands this.
Help.
Thanks,
--Bill
William B. Boucher, BSEE
Embedded Systems Software Engineer
Information Systems Security Manager
MZA Associates Corporation
4900 Lang Ave. NE, Suite 100
Albuquerque, NM 87109-9708
Phone: 505.245.9970 x166
Fax: 505.245.9971
Cell: 505.459.7620
[email protected]<mailto:[email protected]>
_______________________________________________
Open-scap-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/open-scap-list
