Checkpoint rule changes using csmars

is it possible to see what rule changes were done on a checkpoint ngx firewall using csmars.
e.g. what rule was changed, added, deleted
Thanks

I am afraid that your question is confusing. MARS is not supposed to change the rules on any particular firewall weather its checkpoint, netscreen, pix or ASA. All you can do or find is, what rule was triggered on MARS based on a syslog message from that particular device.
MARS is sort of a passive device (until configured it for automatic mitigation, which by far till now is useless :( ) which collects the messages from all the devices in the network in the form of syslogs, correlates all the events to form sessions and presents them for rule inspection. If any of the session triggers a default of user made rules, it generate an incident.
Do let me know if i got your question wrong, otherwise plz rate if its helpful.
regards,
Mohsin

Similar Messages

  • EAS7.1 aso dimension property change using rule file.

    I have a outline having 1 dimension "Terms" as a account type and data storage as "data store".Now i am trying to load members using rule file.
    Outline: ABC (Active Alias Table: Default)
    Scenario Stored <2>
    Currency Stored
    Terms Accounts
    Now i have ceated a rule file using source file like
    "Terms","T1","Terms Hierarchies","~O","",""
    "T1","TOT"," ","~O","",""
    "T1","OTH","","~O","",""
    "OTH","Loaded Days","","~","",""
    "OTH","Loaded FX","","~","","Loaded.FX",""
    "TOT","R99"," ","~ "," "," "
    "R99","R90","","+ "," "," "
    "R90","R901","","+ "," "," "
    i am using parent child relationship and i hav cheched the option s
    like "allow property changes" and allow formula changes....in dimension build settings..the rule shows valid ..but during dimension member load it is giving me the folowing error
    "\\Outline verification errors:
    \\Member Terms has no value source. Aggregate storage outlines require non level-0 members in accounts dimension to be either non-stored members or have internal/external formula.
    \\Member [Terms] has an unspecified error.
    but if i am removing "~O" property with "O" only in data source file then the dimension member load is suuccessful...
    wat i feel is anyhow the "dimension property change is not being set"...
    can any one please tellme wat option i m missig to check in rule file..??
    your opinion and suggestion will be highly appreciated.....

    The documentation explains the difference with examples, now I was going to post the link but I might as well post the info from the link.
    Joining Fields
    You can join multiple fields into one field. The new field is given the name of the first field in the join. For example, if a data source has separate fields for product number (100) and product family (-10), you must join the fields (100-10) before loading them into the Sample.Basic database.
    Creating a Field by Joining Fields
    You can join fields by placing the joined fields into a new field. This procedure leaves the original fields intact. Creating a field is useful if you need to concatenate fields of the data source to create a member.
    For example, if a data source has separate fields for product number (100) and product family (-10), you must join the fields (100-10) before you load them into the Sample.Basic database. If, however, you want to preserve the two existing fields in the data source, you can create a field (100-10) using a join. The data source now includes all three fields (100, -10, and 100-10).
    For other rule options read - http://download.oracle.com/docs/cd/E17236_01/epm.1112/esb_dbag/ddlfield.html
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Is there a way to capture territory rule changes?

    Hello experts,
    I need to capture the change log/change history of changes of the Territory rules.
    Like if Valid To is changed, then what was the previous value existing for the field.
    Is there any way to capture this? Kindly suggest.
    Regards.
    Devashish

    Please check whether rule changes are captured in standard table  crmd_terrman_log
    Note: A class CL_CRM_TERRMAN_LOG_API  can be used to do it, This class writes to the CRM table: CRMD_TERRMAN_LOG ( table to log the info required for master data notification) and it has the following methods:
    READ_ALL
    WRITE
    CLEAR
    DELETE
    UPDATE
    Refer:
    Change log for CRMM_TERRMAN
    Regards,
    Arjun

  • Dynamic agent rule changement during approval steps

    Hi gurus,
    my question is based on a customer requirement.
    they want a n-step approval with dynamic agent determination: fine.
    then they want to maintain the substitutes: fine as well.
    But what they want to do is to change the workflow path based on the substitute.
    I mean: if the first aprover has set a substitute the first task goes to the substitute, but the following tasks have to follow the substitute hierarchy and not the original workflow path.
    So we don't think the standard system way to use the substitute is not enough, but we need to determinate in the beginning if a substitute was set for some approvers.
    The thing is that the substitute record is dynamic and has a validity end, and could be set after the workflow is started.
    Is it possible at every step recalculate the workflow path and the next approvers (so to discover if a substitute rule has be changed or created or deleted)?
    PS: we are using SRM 7.0 and the process controlled workflow.
    Thank you very much in advance!
    Regards,
    Maria

    Hi Maria
    I mean today the workflow starts and the system calculates the path based on the substitute rules active.
    OK with that.
    But what if the substitute rule change tomorrow?
        How you are saying the substitute rule change tomorrow?.  You should not assume it. You should confirm it.  You cannot implement a work flow for tomorrow's requirement. Always there will be a change even if you implement for tomorrows change. Never do that. Do only for today's requirement.  
    My question is if it's possible to every step of the work flow change the agents.
        I feel that this approach is wrong. simple view i will give u to thing. take only 2 steps
    loop.
    1) for determining the approver based on business logic in one method.
    2) use the expression in the user decision step and send the work item for approval
    endloop.
    This i have explained for simple logic, create you own logic and apply on loop and endloop. It will work.
    Regards
    vijay

  • Idoc Conversion rule, Change pointers and Filters

    Hi Experts,
        Please any one can help me out, i need material or clear picture about Idoc Conversion rule, Change pointers and Filters where we can use these concepts what is the befit for these concepts.
    Thanks in advance,
    Ramesh.

    Hi,
    Check this link. It has got some of the tutorials you are looking for.
    http://www.****************/Tutorials/ALE/ALEMainPage.htm
    Cheers
    VJ

  • BRFPlus - Control Rule maintenance using Auth checks (BADI?)

    Hello BRFPlus gurus,
    We are reviewing BRFPlus for use in our global project and here is our question.
    We want to develop some rules, for use in Business Workflow, using BRFPlus and make them available for change to users. Some of these rules are going to be based on company code and we want to control rule maintenance based on company code to ensure users can only modify/create/display rule (e.g. decision table entries) entries only for the company code that they belong to. e.g. user for company code 0001 should not be able to change decision table entry for company code 0002.
    currently we have similar rules maintained using ECC custom table maintenance and we use  table maintenance Events' to code authority checks for custom auth objects.
    I am wondering if BRFPlus has any BADI (or similar mechanism) available to allow us program these auth checks depending on 'Element' values.
    I would greatly appreciate your response.
    Thanks,
    Saurabh

    Hi Carsten,
    Thanks for making us aware of that hidden feature that we could use.
    would you mind sharing some high-leve steps that we could follow to complete the BRFPlus prototype we are doing?
    Ability to control modification of these objects using auth is one of the key criteria for prototype success .
    Looking forward to learn more about this rule engine.
    Thanks,
    Saurabh

  • SAP-PS Settlement Rule Change

    Is it possible to change settlement rule for PS project. I have a number of projects, with one settlement rule. How can I have the settlement rule changed for the subsequently created projects? How does this change affect the existing projects?
    Thanks.

    We currentlt use a settlement rule by which the projects (and the associated costs etc.) are settled for month-end closing.
    We need to change the settlement rule by which projects (and the associated costs etc.) can be settled any time as required.desired.
    Hope this explains.

  • Rule changes

    Hello,
    I'm using GW2014
    GroupWise Agent Build Version 14.0.1 -118328
    GroupWise Agent Build Date 11-09-14
    GroupWise Resource Build Date 10-07-14
    I'm able to enable/disable a rule with modifyItemRequest.
    If I want to change the sequence number of a rule, then a modifyItemRequest or a modifyItemsRequest for all rules who's sequences are changed do not work.
    Is the only solution to delete and recreate all the changed rules again? (in the correct order?)
    Hans

    Hello Preston,
    Previous post should have been a reply to the Peek mode.
    I found the problem. I assumed the sequence number was always an ascending number, but I found that rules can have the same sequence number.
    I just decremented the sequence number for the Rule I wanted to move one place up (like the GW-client rule window), the new sequence number was still larger than the sequence number of the rule above so "nothing" changed. I will have to rewrite that routine.
    Hans
    >>>
    From: Hans Boone<[email protected]>
    To:novell.devsup.gwsoap
    Date: Maandag 5 Januari 2015 18:23
    Subject: Re: Rule changes
    Hello Preston,
    Thank you.
    Is this info somewhere in the documentation?
    Hans
    >>>
    From: Preston Stephenson<[email protected]>
    To:novell.devsup.gwsoap
    Date: Maandag 5 Januari 2015 15:03
    Subject: Re: Rule changes
    I didn't have a problem just changing the sequence number of a rule.
    If you want to change all sequence numbers, you will have to change all the
    rules affected.
    Here is an example of what I did:
    <?xml version="1.0" encoding="UTF-8"?>
    <env:Envelope
    xmlns:env="http://schemas.xmlsoap.org/soap/envelope/"
    xmlns:xsd="http://www.w3.org/2001/XMLSchema"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:enc="http://schemas.xmlsoap.org/soap/encoding/"
    xmlns:ns0="http://schemas.novell.com/2005/01/GroupWise/methods">
    <env:Header>
    <ans1:session
    xmlns:ans1="http://schemas.novell.com/2005/01/GroupWise/types">MIhnDrOm7kumA
    4wS</ans1:session>
    <ans1:gwTrace
    xmlns:ans1="http://schemas.novell.com/2005/01/GroupWise/types">false</ans1:g
    wTrace>
    </env:Header>
    <env:Body>
    <ns0:modifyItemRequest>
    <ns0:id>45928581.domain.PO1.100.1776172.1.4F1.1@10 </ns0:id>
    <ns0:updates>
    <ans1:update
    xmlns:ans1="http://schemas.novell.com/2005/01/GroupWise/types"
    xsi:type="ans1:Rule">
    <ans1:sequence>1</ans1:sequence>
    </ans1:update>
    </ns0:updates>
    <ns0:recurrenceAllInstances>0</ns0:recurrenceAllInstances>
    </ns0:modifyItemRequest>
    </env:Body>
    </env:Envelope>
    What does your soap trace look like?
    Preston
    >>> On Thursday, January 01, 2015 at 7:03 AM, Hans
    Boone<[email protected]> wrote:
    > Hello,
    >
    >
    > I'm using GW2014
    >
    > GroupWise Agent Build Version 14.0.1 ‑118328
    > GroupWise Agent Build Date 11‑09‑14
    > GroupWise Resource Build Date 10‑07‑14
    >
    >
    > I'm able to enable/disable a rule with modifyItemRequest.
    >
    > If I want to change the sequence number of a rule, then a
    > modifyItemRequest or a modifyItemsRequest for all rules who's sequences
    > are changed do not work.
    >
    > Is the only solution to delete and recreate all the changed rules again?
    > (in the correct order?)
    >
    >
    > Hans

  • For one Urgent Change during performing the Approval(chnging the status to 'To be Tested') system does not recognize any changes using the CTS WBS BOM in the development system. The transaction is therefore incorrect or the status was reset by the system.

    For one Urgent Change while performing the one of the Approval before changing the status to 'To Be Tested'
    We are getting below error.
    The system does not recognize any changes using the CTS WBS BOM in the development system. The transaction is therefore incorrect or the status was reset by the system.
    COuld anyone please help us to know, How it can be resolved?
    We also have this below error.
    System Response
    If the PPF action is a condition check, the condition is initially considered as not met, and leads to another warning, an error message, or status reset, depending on the configuration.
    If the PPF action is the execution of a task in the task list, and the exception is critical, there is another error message in the document.
    Procedure
    The condition cannot be met until the cause is removed. Analyze all messages in the transaction application log.
    Procedure for System Administration
    Analyze any other messages in the task list application log, and the entries for the object /TMWFLOW/CMSCV
    Additional Information:
    System cancel RFC destination SM_UK4CLNT005_TRUSTED, Call TR_READ_COMM:
    No authorization to log on as a trusted system (Tr usted RC=0).
    /TMWFLOW/TU_GET_REQUEST_REMOTE:E:/TMWFLOW/TRACK_N:107
    For above error Table /TMWFLOW/REP_DATA_FLOWwas refreshed as well but still the same error.

    If you are in Test System, you can use function module AA_AFABER_DELETE to totally delete the depreciation area (tcode SE37, specify chart of depreciation and depreciation area), After that recreate your depreciation area and run AFBN. But before you do that, have you created a retirement transaction type that limits the posting on your new depreciation area? If not create one.
    Hope this helps.
    Thanks!
    Jhero

  • Can a Stored Procedure be called from a Rule (not using Scripted JDBC Adap)

    Hello smart people,
    Question: Can a stored procedure be called from a Rule without using the Scripted JDBC Resource Adapter?
    What's Desired: The project has very strong sql developers and average at best Java developers. We have been successful at implementing the scripted JDBC Resource Adapter which makes use of Java Bean shells. The custom Java Bean shell contains code that calls a stored procedure. We are cool with that process.
    However we would like to be able to set up a Rule that calls a Stored Procedure without jumping thru the Java Bean Shell layer. The Stored Procedures we will be developing will not access the tables in the Waveset database. Instead the Stored Procedures will be accessing custom tables in a custom database. The custom DBase will be housed on the same dBase server as the Waveset database.
    Environment: Identity Manager 7.1. Oracle 10i, and Unix OS.
    It seems to me that this task is possible, but the posts in this forum make it sound like perhaps it is not.
    Do any of you smart people agree that it should be possible or better yet has anyone implemented such an approach?
    Thanks.

    We did this by putting all of the JDBC calls into a Java class, then instantiated that class and called the methods from within a rule. An example of a rule we used is this:
    <Rule authType='UserMembersRule' name='List UserType'>
      <block>
        <defvar name='adapter'>
          <new class='com.waveset.adapter.ScriptedJdbcResourceAdapter'/>
        </defvar>
        <invoke name='setResource'>
          <ref>adapter</ref>
          <invoke name='getObject' class='com.waveset.ui.FormUtil'>
            <ref>context</ref>
            <s>Resource</s>
            <s>Banner</s>
          </invoke>
        </invoke>
        <defvar name='jdbcHelper'>
          <new class='edu.bates.JDBCHelper'>
            <invoke name='getConnection'>
              <ref>adapter</ref>
            </invoke>
          </new>
        </defvar>
        <defvar name='userList'>
          <new class='java.util.ArrayList'/>
        </defvar>
        <invoke name='addQueryToList'>
          <ref>jdbcHelper</ref>
          <s>SQL QUERY HERE</s>
          <ref>userList</ref>
        </invoke>
        <ref>userList</ref>
      </block>
      <MemberObjectGroups>
        <ObjectRef type='ObjectGroup' id='#ID#Top' name='Top'/>
      </MemberObjectGroups>
    </Rule>

  • EXIF Dates - how to add/change using exiv2 . . . is there a better way?

    Hi, everyone!
    INTRO: I'm new to Lightroom. I've gone through a few books and lots of tutorial courses on lynda and youtube, so I feel quite comfortable with LR 5's import process. This post and question is a pre-import/organizational issue.
    I have more than 30,000 old, digitized (scanned) photos dating back to the 1950s. Obviously, most of were taken with old, analog cameras. These are now organized into folders by date.
    GOAL: I want to import these photos into LR and be able to find them by metadata dates (Capture Date & Time).
    PROBLEM: Obviously, old scanned (or even more recent manipulated) photos often don't have the correct EXIF creation date info. Even worse, many (or most) of these old images don't even have an EXIF date field!
    WHAT I'VE LEARNED: Using exiv2 filename or evix2 -pt filename immediately shows whether there is or is not date info for the photo. If there isn't, exiv2 -pt filename shows nothing. If there is an EXIF date field, it will be shown.
    For all these images with no date field, if I import them into Lightroom, there of course is no date info that shows up in the Metadata panel (under Default or EXIF), nor can you change the date (because the field isn't even there).
    If exiv2 -pt filename DOES show the Exif.Image.DateTime field, then in Lightroom, you will see the Capture Time and Capture Date fields, and you will see an icon to the right of those dates that allows you to change that date.
    If exiv2 -pt filename DOES NOT show this Exif.Image.DateTime field, you can ADD this field by using the command line:
    exiv2 -M"set Exif.Image.DateTime Ascii 1965:01:25 15:45:00" filename (or whatever your date/time is).
    Now if you import this image into LR, you will find the Capture Time and Capture Date fields under the Metadata > Default panel...AND you can edit them if needed. That is, the above exiv2 -M command added the EXIF date field that LR needs in order to search by date.
    WHAT'S MY POINT, AND WHAT'S MY QUESTION? I have no problem using exiv2 to add/change an EXIF creation DateTime field one folder at a time prior to importing them into LR. This will enable me to search on those date fields**.
    My question is this: Is there an easier method?
    Surely there must be tens (hundreds?) of thousands of "older" photographers like myself who have troves of old photos that have incorrect EXIF creation date fields, or missing the date field entirely (in which case, as I stated above, cannot be added/edited using LR, PS, FileMultiTool, Graphic Converter, etc.).
    I realize that I could look at images based on the folder names or file names, or I could enter dates into tags, but such methods of finding images are not nearly as convenient as using Metadata. Therefore, if I know that an image was taken in June 1962, then I'd like the EXIF metadata to have this info so that I can search on it. To have no EXIF date field or to have a date field that is incorrect is useless.
    I'D LOVE YOUR COMMENTS! If there is an easier or better way, I'd love for you to help! There are so many experienced photographers on this forum, and more than likely many of them have old photos with incorrect or missing EXIF date fields that they've brought into LR.
    THANKS! I'll really appreciate any and all help you can offer.
    David
    ** there are other EXIF date fields that can be changed using exiv2: Exif.Photo.DateTimeOriginal, Exif.Photo.DateTimeDigitized, etc. But the principal date that LR uses to search for files is the one described above.
    P.S. I've also tried jhead -ds1965:01:25 filename (or whatever your date is) to change the date. This works ONLY IF there is already an EXIF date field present. If not, jhead will report an error and not create one. exiv2 -M will create the field.

    John,
    Thanks very much for your help! I had tried the plugin, exiv2, exiftool, and LR's Metadata menu option only on a single photo.
    You are 100% correct about LR's menu option assigning different times! Thank you for pointing this out.
    When I set the date and time for about 10 photos, LR's menu option assigned (seemingly random!) times to all of them. Why would LR do this? I can perhaps see offsetting each photo by 1 second (00, 01, 02,...), but simply assigning random times makes no sense at all. At least in the tests I just did, LR didn't shift the time by the same amount, but assigned totally (random?) times to every photo.
    Another problem that I found with the LR menu item is that it failed to change the date/time at all for several of the images I selected! The Capture Time To Exif plugin, exiv2, and exiftool had no problem at all with the same photos.
    I also looked at the ExifMeta by Rob Cole that you mentioned. It looks very powerful (and is free), but much more complex than what I need at this point.
    Therefore, I purchased the Capture Time To Exif plugin, and it works great on multiple photos.
    I now have good methods to change the date for multiple images:
    1. Prior to import: exiv2 or exiftool
    2. After import: John's Capture Time To Exif plugin
    Thank you again for your help!
    This brings me one step closer to importing my photos in a logical method.
    David

  • Business rule to use page member on form

    Hi all,
    I need to create a business rule which uses a page member on the form. Created a RTP variable and used it in the Rule.Attached the rule and selected "use members on the form" and "Hide Prompt".But, Is still asking for prompt. How to unhide the prompt?

    Is it a calc manage rule or an EAS business rule, which version of planning.
    Cheers
    John

  • How to measure voltage changes using a NI-9219 with strain gauges and use the data in labview

    I am updating an old LabView/Data Acquisition system that uses strain gauges to measure two forces (normal and axial) as well as two moments (Pitch and Roll). I am having trouble reading the voltage changes over my strain gauges using my NI-9219 as well as filtering the data with both a lowpass and smoothing filter. The program attached has the project and should have all the sub-vi's used in the program. This program was written on LabView version 8.5 and is being updated to a 2013 version of LabView. Also, the hardware previously used was a combination of a NI SCB-68 and NI USB-6251. If anyone could help me it would be greatly appreciated! 
    Attachments:
    New SSWT.zip ‏751 KB

    Hi Coffeyfj, 
    Did you ever had this set up working? The first thing that I would do as I mentioned in the previous comment would be to use one of the LabVIEW examples. I recommended to you using the (strain - Continuous Input.vi). If you can read any voltage changes with the example vi, then we will know the problem we are having is in your code. If you cannot read any voltage changes using the example I mentioned, we can start trouble shooting the hardware connections. Are you connecting the excitation voltage? If yes, Are you making the right connections. Please refer to page 19 of the following document (half and full bridge modes)
    NI 9219 Operating Instructions and Specifications - February 2009
    http://digital.ni.com/manuals.nsf/websearch/4197ED4BD126E0B486257546005851CA
    Regards,
    William Fernandez
    Applications Engineer 
    National Instruments 

  • BAPI for Price Change using Transaction VK12

    Hi All..
    Can any one help in locating a BAPI for making price changes using transaction VK12.
    Rgds

    try RV_CONDITION_MAINTENANCE

  • Is it mandatory to Restart all services after making Business Rule change?

    Hi,
    I know it may be a easy one but wanted to know is it mandatory to restart all the Planning and Essbase services if we make any changes in the Business rule
    in 9.3.1
    -KP

    No you shouldn't have to restart after rule change.
    Cheers
    John
    http://john-goodwin.blogspot.com/

Maybe you are looking for

  • IPod comes up with an error message dialog

    Installed the latest update of the iTunes application. Every time I've tried to run it, I get an error message saying iTunes has encountered an error and needs to close. Is there any way I can get into the program without having to reinstall it and c

  • Monitor is blurry

    I have a Pavilion 20bw which I've had for 6 months. Everything was working fine and now it's blurry - making reading a spreadsheet very difficult. I've followed all the instructions on the troubleshooting page and downloaded the new driver and it sti

  • Creation of file through batch job scheduling

    Hi friends, I have a situation where I need to select vendor / customer and after that I need to select one of the option between invoice or payments when User select vendor then it should create a file through schedule batch job . I am not getting h

  • ERROR "Error Applying Transforms" while installing SAP integration kit.

    i have currently installed BusinessObjects Enterprise XI3.1 SP3 Live office xcelsius 2008 Crystal reports 2008 now i want to install the integration KIT for SAP BO.  But when i start the setup it gives the error "Error Applying Transforms. Verify tha

  • Having trouble downloading photoshop CS6 trial

    I have a Macbook Pro and I am trying to download the Photoshop CS6 trial and the Flash CS6 trial to my computer, since the CC versions are not compatible with my system. So I went to this link, which I saw mentioned a few times in the Adobe forums: h