I just learned from Qualys Support that it is not possible to assign and run a CIS benchmark check on Mongo instances with the Cloud Agent. I pretty much relied on that for our audit needs. Any advise or workarounds?
The Cloud Agent is only able to perform control checks of the operating system. If you would like to benchmark controls beyond the operating system (e.g. databases, web servers, etc) the scanner appliance (virtual or physical) will need to be used along with the appropriate authentication records.
Please feel free to contact Qualys support if you need additional assistance.
Retrieving data ...