I’ve been trying to import CIS Benchmark SCAP content using the aptly named SCAP Import tool and every time I try to import any XCCDF file from the bundle I downloaded from the
CIS Benchmarks Download Site
, I get a
*XML validation error:
{0
}
error.
Is there any way to get a more useful error message from the tool? I’ve validated the XML file for at least structure using the W3C’s XML Validator and the validator at
The current version of the SCAP Import Wizard cannot handle the CIS SCAP feeds. It can only handle a small range of feeds reliably. This wiki page goes into more detail:
There is a new version of the SCAP Import Wizard that is currently being certified. It should be able to consume the CIS 2008 and Windows 7 feeds, although a few bug fixes in the content itself may be required to get things to work. This version of the wizard will not be available until after it has been certified.
Thanks for the background information. I hate to ask, but is there any ETA on when that new Import Wizard will be released? Some folks we’ll be supporting use CIS benchmarks and we’d been counting on the ability to import the SCAP Content to monitor compliance with the baseline.
Is there any other way to import CIS Content or do we have to wait for the updates? Any chance it’ll be offered as a Site?