Compliance Management in LMS 3.2

I'm having a hard time getting Compliance Manager to accept a "banner login" command I'm attempting to use on 6500 IOS switches. I've edited the template, tried cut-&-paste, looked for the archive file on the server to directly modify it (without success), among other things. I have this feature functioning correctly on CatOS switches, but can't seem to get it properly set on IOS switches. What's the limit, as far as the template is concerned, on the number of characters with this type of command? Where are the archive configs located on the server; in the "shadow" directory?
Thanks,
Rick

Not sure what you mean when you say "not accepting", but I had some trouble with compliance templates and checking banners. My issue was with multi-line commands as mentioned in the last post of this thread: https://supportforums.cisco.com/message/638950#638950
Once I put the in the template it worked fine. The thread is discussing LMS 2.6 but was applicable in my 3.2 environment. Hope that helps.

Similar Messages

Ciscoworks 3.2 RME Compliance Management w/ 802.1x Port Configs

I am currently trying to use LMS 3.2 Compliance management to verify and alter our access port configurations for 802.1x. Below is our current configuration:
switchport access vlan XX
switchport mode access
authentication control-direction in
authentication event fail retry 0 action authorize vlan XXX
authentication event no-response action authorize vlan XXX
authentication port-control auto
authentication periodic
dot1x pae authenticator
dot1x timeout quiet-period 10
dot1x timeout tx-period 10
dot1x timeout supp-timeout 10
dot1x max-req 1
dot1x max-reauth-req 1
storm-control broadcast level 75.00
spanning-tree portfast
spanning-tree bpduguard enable
I require the configurations to be changed to:
switchport access vlan XX
switchport mode access
authentication event fail action authorize vlan XXX
authentication event no-response action authorize vlan XXX
authentication port-control auto
authentication periodic
dot1x pae authenticator
dot1x timeout tx-period 8
storm-control broadcast level 10.00
storm-control multicast level 10.00
spanning-tree portfast spanning-tree bpduguard enable
Addtionally, I require LMS to verify that the port is indeed an access port with 802.1x already applied to it before adjusting the configurations. I have tried pushing this compliance check out with a prerequisite of having "switchport mode access" applied to it, and then having the next command set state:
Submode: interface [#Ethernet*/*/*#]
- dot1x max-req 1
- dot1x max-reauth-req 1
+ no dot1x max-req 1
+ no dot1x max-reauth-req 1
This was a simple test on a single device to see if I could remove the limits on authentication and requests entered. The job states successful and there are no devices that are non-compliant, however no changes to the device configurations have been made. I seek assistance in command syntax or if there is another way to push this out, as I have about 1k network devices to go through and make these changes.

The following tempalte should do what you want:
Name: Global     SubMode: No      isPrerequisite: No
Ordered : No     Prerequisite-Commandset : none     Parent: none
Name: Switchport     SubMode: Yes      isPrerequisite: Yes
Ordered : No     Prerequisite-Commandset : none     Parent: none
interface   [#FastEthernet.*#]
+[#switchport mode access#]
Name: 802fix     SubMode: No      isPrerequisite: No
Ordered : No     Prerequisite-Commandset : Switchport     Parent: Switchport
-dot1x max-req 1
-dot1x max-reauth-req 1
Note that I have changed to [#FastEthernet.*#] to be applied on
FastEthernet interfaces.

Does Cisco Prime have a replacement product for NCM or Network Compliance Manager?

Does the Cisco Prime application development team have a product that replaces the NCM or Network Compliance Manager?

Both Prime and LMS can do baseline compliance, after a fashion. LMS's is much more mature in my estimation. Prime is more around the lines of deploying templates.
The regulatory compliance functions as of now are in only LMS's Compliance and Audit Manager (CAAM) function. It's quite useful, matching the baseline compliance features.
An LMS license is included with PI, but it does need to be on its own server (or separate VM).

Cisco Works Network Compliance Manage NCM

I'm working on the Cisco Works Network Compliance Manager.
I would like to add a device which is behind a firewall.
For this I use the option bastion host to authen. on the firewall and
to get access to the device self.
The problem is the firewall is not listing to the port 22/23, it a different port number
like example 1234.
Is it possible to change the port manually in a configfile, as the webinterface has no option for this ?
I use the version 1.7.1 the latest one.

Both Prime and LMS can do baseline compliance, after a fashion. LMS's is much more mature in my estimation. Prime is more around the lines of deploying templates.
The regulatory compliance functions as of now are in only LMS's Compliance and Audit Manager (CAAM) function. It's quite useful, matching the baseline compliance features.
An LMS license is included with PI, but it does need to be on its own server (or separate VM).

Elearning suite to Learning Management System (LMS) - how-to from an InDesign file?

We need to be able to export InDesign files to a portable SCORM format that could be loaded into various Learning Management Systems (LMS) – however, it is not obvious how we would do this? We need to publish our documents both in a book\PDF format and to various LMS systems such as Blackboard, Moodle, Angel, Desire2Learn, etc.
What am I trying to accomplish? Many of our College and University clients use Learning Management Systems (LMS). SCORM is a standardized interchange format used to provide internet ready information (e-book data, test questions, etc.) to any LMS systems. We need to export formatted InDesign documents – which for us are our Lab Manual (book) publications which include: text, graphics, pictures, etc.
Adobe advertises SCORM compatibility as part of its e-learning suite: http://help.adobe.com/en_US/elearningsuite/els/extensions/WSD40882CF-6 C5C-46c0-8D51-273830EB036B.html --- however, I cannot find anyone who can tell me how to get there from InDesign.
In addition, I find it very frustrating that after many calls to Adobe sales and technical staff that I can't find anyone who can help me with the details of how to get from InDesign to Adobe's "SCORM Packager" See: http://blogs.adobe.com/captivate/2009/01/scorm_packager.html which I believe is a part of the e-learning suite.
Is it possible to find a high level technical resource within Adobe that I could talk to who could help me with this issue --- we need to test the ability to produce SCORM compatible files from our InDesign files before we can make a purchase decision.

Adobe's Multi SCORM Packaging tool is designed to take existing single SCORM packages (in zip file format) and merge them into a multi SCORM package with a rewritten imsmanifest.xml file at the root level to tell the LMS what the package contains. This allows the LMS to build the array of links that its SCORM player requires to allow the course user to navigate from one module to another.
So if InDesign is not currently capable of creating even a single SCO SCORM package, the Adobe Multi-SCORM Packaging tool is not going to be much use to you.
In reality, the Adobe tool is quite limited in functionality. It's more designed as an add-on for Captivate to allow multi-SCORM courses to be created. Your best bet would probably be to investigate other SCORM packaging tools such as RELOAD that allow you to take content created elsewhere and add them to a SCORM package as resources.
You may need to export your InDesign content as PDF files and have these set up as individual resources or assets in the SCORM package.
However, for any of this to work with an LMS is going to require the final package to have a SCORM API (done with JavaScript) so that user interaction with the individual components of the course is relayed back to the LMS via JavaScript variables. Packaging tools such as RELOAD may be able to do this with some types of content (e.g. HTML) but I don't know if InDesign output is going to be compatible with this approach.
Have you designed your InDesign course content with interactivity in mind, or is it just straight content delivered in a documentation format?

Sun Identity Compliance Manager Questions

Hi Everyone,
We are looking for a complete list of supported managed resources for the Sun Identity Compliance Manager (SICM) tool.
Also we have the following specific questions:
1.     Does SICM have connectors/adapters to Solaris 8/9/10 and Oracle EBS (as managed resources) to perform access certification of user accounts and associated entitlements/privileges/roles.
For example: Can SICM be used to analyze/report on the status of current and newly provisioned Solaris unix-level accounts and associated RBAC roles (say) -or- Oracle EBS accounts and associated roles /responsibilities to identify if they have been certified or have any SOD conflicts?
2.     Can SICM be implemented as a fully functional stand-alone product as opposed to it being integrated with Sun Identity Manager (SIM) ?
3.     In a scenario where SIM and SICM are integrated, can SIM do a hand-off to SICM for SOD analysis and checking as part of it account provisioning workflows?
Any insight and/or pointers will be greatly appreciated!
Thanks in advance and please let me know if there is a more relevant forum to post this question.
-TS

I have resolved the problem, the problem is because of the idmmanager attribute. In onsite they are using some other idm 6.0 with some patch, so they are getting the idm manager attribute but in offshore we dont have any patch installed for getting the idm manager attribute. Do you have any idea about how to get the idm manager attribute in the idm 6.0 with some patch? Thanks for your help ya.

Compliance Management in B2B

Hi, can anyone help in how we can answer for Compliance Management in B2B

Hello,
Can you please elaborate this query to help us answer better.
Rgds,Ramesh

Adobe Captivate Help | Learning management system (LMS)

This question was posted in response to the following article: http://helpx.adobe.com/captivate/using/learning-management-system-lms.html

Hi Anjaneai, I'm having similar challenges. I want to bring captivate's quiz output into Buisness catalyst structure using the reporting functionality so that sitea administrator can receive a notification with results on each quiz submission.
Thanks

Installing Security and Compliance Manager on Windows 8.1

Hi
I am trying to install Security and Compliance Manager on my Windows 8.1 workstation. The install is trying to install SQL Express 2008 which seems to not be compatible with Windows 8.1 and that is were the install ends.
I tried installing SQL Express 2012 and then running the install but it looks like the database is not installed.
Is there a new version of Security and Compliance Manager that addresses this or does anyone know how to set up SQL to accept Compliance Manager?

Open Regedit and go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
Delete this key under Session Manager "PendingFileRenameOperations". Restart the installation and it will work fine.
Cheers,
Gulab Prasad
Technology Consultant
Blog:
http://www.exchangeranger.com    Twitter:
  LinkedIn:
   Check out CodeTwo’s tools for Exchange admins
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

Microsoft Security Compliance Manager V3 and create GPO

I have created a GPO backup from the compliance manager for Windows 7 SP1. I am trying to find documentation for the exact process of importing these settings into a newly created "blank" gpo. In review of the Backup.xml file, I can see that
it references Contoso.com (the generic MS domain for examples, etc). Is there a clear documented process for configuring the template then creating a domain GPO? Any help is greatly appreciated!
wjk

Hi,
Thanks for your post.
SCM Baselines for Windows 8.1, IE 11 and Server 2012 R2 are now live!
http://blogs.technet.com/b/secguide/archive/2014/09/04/scm-baselines-for-windows-8-1-ie-11-and-server-2012-r2-are-now-live.aspx
For more SCM related issue, i think you may ask in:
https://social.technet.microsoft.com/Forums/en-US/home?forum=compliancemanagement
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

RME - Compliance Management - Deploy strangeness

Hi All,
Here is an interesting one. Got a selection of Compliance management jobs and am having trouble with the deploy phase. Basically I am looking for the following on a series of devices and then removing it.
- [#radius-server host.*#]
So when this runs, it matches what I expect (shown below)
no radius-server host x.x.x.x auth-port 1812 acct-port 1813 key 7 XXXXXXXXXXXX
However when I deploy this, the line above remains on the device?
I have tried changing the compliance check to
- radius-server host x.x.x.x auth-port 1812 acct-port 1813 key 7 XXXXXXXXXXXX
To see if its a regex problem of some form and the job does exactly the same, i.e. it matches the line and tries to deploy however doesn't work?
Any ideas?

Hi Yidabear,
Its not a pre-requisite problem as the pre-requisites are fillfilled and hence it deploys the rest of the config to the devices in question. For some reason it is just this one line that it has a problem with. Strangely enough, we had a similar issue with the same format of TACACS server line. It seems to happen when you have the "key 7 xxxxxxxxx" value at the end? Even though it finds it and tried to remove it it fails.

How about Multiple Modular Learning in Learning management system (LMS)

Hi Experts,
Can anybody help me in understanding Multiple Modular Learning and how it can be incorporated in Learning management system (LMS)? Also I want to know whether LMS can support it? If LMS can support it then what are the methods and strategies available in Multiple Modular Learning? I need to know a lot about it and I hope you guys can urgently help me with this.
Regards
Suvasini

Hi Experts,
I am still struck on this big time.
My doubt is that in SAP E-Learning we provide students with a single sequence only Eg: Units , Followed by Lessons, Followed by Try mes ( basically excercises) , Followed by Multiple choice questions.
Is it possible for a students say for Eg: Complete the Try mes' first then understand the lessons or Learn the theory first and then do the Try mes' later. I am trying to do ways and means of doing this and also would want to know whether LMS supports this or not and how to make it work through LMS?
I will be gratefull if some one can help me on this?
Regards
Suvasini
Edited by: Suvasini R on Jan 11, 2010 1:52 PM
Edited by: Suvasini R on Jan 11, 2010 2:02 PM
Edited by: Suvasini R on Jan 11, 2010 2:02 PM

Security Compliance Manager - version 3.0.60

Does anyone know if this version of Security Compliance Manager supports Windows Server 2012 R2:
3.0.60

Hi sayerdi,
As this question is related to Security Compliance Manager (SCM), for quick and accurate response, I would like to recommend that you ask the question in the SCM forum at
https://social.technet.microsoft.com/Forums/en-US/home?forum=compliancemanagement . It is appropriate and more experts will assist you.
Additionally, there is a similar thread about SCM for Windows Server 2012 R2 for your reference.
https://social.technet.microsoft.com/Forums/en-US/9a0b831e-5d38-4b26-9191-16286f10ecab/scm-update-for-windows-81-and-windows-2012-r2?forum=compliancemanagement
Thanks,
Lydia Zhang

Microsoft Security Compliance Manager - Failed to installed

Every time I try to install Microsoft Security Compliance Manager right when I getto the part where I'm installing it, it gives me this error:
Microsoft Security Compliance Manager Setup Wizard failed while starting the installation/uninstallation The given path's format is not supported.
Then closing the installation and telling me it failed.
Please help I need to install this for a class.

Hi,
Thanks for your post.
SCM Baselines for Windows 8.1, IE 11 and Server 2012 R2 are now live!
http://blogs.technet.com/b/secguide/archive/2014/09/04/scm-baselines-for-windows-8-1-ie-11-and-server-2012-r2-are-now-live.aspx
For more SCM related issue, i think you may ask in:
https://social.technet.microsoft.com/Forums/en-US/home?forum=compliancemanagement
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Upgrading from SQL Server 2005 Compact Edition [ENU] to SQL Server 2008 Express Edition OR HIGHER for Microsoft Security Compliance Manager

I have downloaded the MS Security Compliance Manager, which is in two parts: MS SQL Server 2008 Express Edition & the SCM. The install instructions state the the server needs to be install before the SCM. So as the install continues I get
an error message, which cancels the installation. So, I am trying to install SQL 2008 EE separate from SCM. My question is:
Can I upgrade from my current SQL Server 2005 Compact Edition [ENU]
directly to SQL Server 2008 Express Edition (or higher)?

So as the install continues I get an error message, which cancels the installation.
And which error message did you got?
SQL Server Compact Edition is something different then SQL Server Express (or Standard) Edition, you can't upgrade it as you asked for,.
Olaf Helper
[ Blog] [ Xing] [ MVP]

Compliance Management in LMS 3.2

Similar Messages

Maybe you are looking for