Router and switch auditing tool (RAT)

[darin.marais]

Hello Cisco community,

Is anyone here familiar with the tool called "CIS-CAT Lite"

Can this tool be used to audit the security of Cisco configuration files? 

Do we need to "PRO" version or is the Lite version sufficient?

[Mark Malone · Accepted solution]

Im not familiar with it but in the Cisco section of the docs it says its needs pro to asses Cisco devices

https://ccpa-docs.readthedocs.io/en/latest/User%27s%20Guide/#cisco-configuration-assessment

https://ccpa-docs.readthedocs.io/en/latest/Configuration%20Guide/

Cisco Configuration Assessment

CIS-CAT Pro Assessor v4 includes the capability to assess Cisco networking devices in two ways. Users can choose to connect directly to an online network device, via SSH, using a privileged account and perform evaluations against the current running configuration. New to v4, users now have the ability to export device configurations, specifically the full output of the show tech-support command, to a file, and CIS-CAT Pro Assessor v4 can parse that output and perform the assessment. Specifying the path to the exported configuration file is through the "session" configurations. Detailed information on "sessions" can be found in the CIS-CAT Pro Assessor Configuration Guide.