ISE 1.2 - AV/AS Remediation missing vendors

Trying to create a remediation rule in ISE 1.2 patch 3 and the drop down list for the AV/AS Vendor Name is not scrollable so I am not able to select our AS/AV vendor. See picture below:

You're right. I just tested this and was able to scroll down using the down arrow on the keyboard.

Similar Messages

Missing Vendor

Hi Experts,
After running F110 successfully bank rejected payment due to missing vendor name in payment order.
Only first name appearing in payment order.second name not appearing.
I checked in vendor master record but its correct.
Can anyone tellme is there any other check points?
Regards
R.Sasikumar

Hi Sasikumar,
Please check the following for second name not appearing in the bank payment order:
In FBZP, you have to configure Paying Company Code and in the configuration you assign Form for the Payment Advice using a SAP Script. Click on this SAP Scipt and it will display you the Bank Letter. Then Click on Windows button. Here you can see different windows defined for the Bank letter. There is one window defined for Address.
Seelct the Window for Address and click on the Text Elements. System will display you the design of the Bank Letter. Here you can then see what has been provided for the Payee Name under field REGUH - *
Regards,
Sanjay

Missing Vendors after upgrade

Dear super experts,
After an upgrade from EBP 3.0 to SRM 5.0, Server 5.5 and the creation of the PPOMV_BBP, we are experiencing problems with the existing vendors on SRM.
The vendors exists on R/3, but about half of them are missing from SRM. The upgrade was done according to the guide, including 'BBP_XPRA_ORGEH_TO_VENDOR_GROUP'
The BBP_VENDOR_UPDATE_DATA_JOB has also been run without any luck.
Would any of you have an idea of what we can do to get the remaining vendors to SRM?
cheers
Katrin.

Hi Yann,
The missing vendors are shown in BP. As for bbpmainint I cannot say for the moment, as consultants do not have access to this. Currently we are awaiting confirmation from client that the missing vendors exists in bbpmaintint.
Update, it was just confirmed that the vendors exists in bbpmaintint.
//katrin
Message was edited by:
Katrin

ISE and WLC for posture remediation

Please can anybody clarify a few things in relation to ISE and wireless posture.
1) Is the ACL-POSTURE-REDIRECT used for remediation, or is it just an ACL to redirect only some traffic to kickoff posture checking?
2) Can/Should a dACL/wACL be specified as a remediation ACL?
3) Do the WLC ACLs have to be written in long format (manually specifying source and dest ports/doesny direction any work?)
4) Does anybody have working example ACLs for posture redirect (cpp) and remediation (dACL)?
5) Any other advice or pointers would be helpful too as no docs i have found so far, be it TrustSec2, CiscoLive or anything else, dont seem to help me understand WLC posture and remediation
thanks
Nick

Nick,
Answers are inline:
1) Is the ACL-POSTURE-REDIRECT used for remediation, or is it just an ACL to redirect only some traffic to kickoff posture checking? This is for both (if ports 8905..are included) then this is for initial redirection, and remediation
2) Can/Should a dACL/wACL be specified as a remediation ACL? Wireless does not support DACL, you will have to reference another ACL in the the authorization policy, the new versions have the Airespace ACL field, where you will have the ACL defined locally on the wlc.
3) Do the WLC ACLs have to be written in long format (manually specifying source and dest ports/doesny direction any work?) Yes you have to add two entries, for example for all traffic redirection to ise...source = any, destination=iseipadd, source port=any, destination port=any direction=any action=permit
source=iseipaddr, destination ip = any, source port=any, destination port=any, direction=any action permit. Its not the easiest but I will attach a screenshot that will show you my example.
4) Does anybody have working example ACLs for posture redirect (cpp) and remediation (dACL)? ISE doesnt support DACLs so when you build your authorization profile in ISE you select the web authentication type (Posture Discovery) after that the ACL field will come up, there you will "call" the posture ACL which is defined on your controller.
5) Any other advice or pointers would be helpful too as no docs i have found so far, be it TrustSec2, CiscoLive or anything else, dont seem to help me understand WLC posture and remediation Keep in mind that you have to have radius NAC and AAA override enabled under the advanced settings for COA to work.
You have to turn on COA under the global settings in ISE (Administration > Profiling > Coa Type > Reauth)
Then you have to build your policies so that when a user connects to the network they are redirected to the download the nac agent (this is where the Posture Discovery and redirect ACL work in tandem).
Once the client download the nac agent and is compliant the report is forwarded to ISE where a COA event is triggered.
Then the client will reauthenticate and will hit another policy that will give them access once their machine is compliant, you can set the ACLs for restricted access, use dynamic vlan assignment, or just send the access-accept.
Thanks,
Tarik Admani
*Please rate helpful posts*

Payment Recommendation layout - missing vendors

Good Day Experts,
After going through the Payment Wizard, there the step where SAP will Recommendation which vendors to pay and how much.
My customer usually prints this out for some internal procedures.
I have 3 Vendors listed on screen, the first vendor has two details lines, second and third vendors each with one detail line.
When i click to print there layout. the results shows the first vendor with both A/P Invoices, but the second and third vendors are missing. The vendor code, name and details are not listing on the report.
I do however see the Total amount including the spacing for the extra vendors.
Has anyone ever seen something like this?
BTW i also tried to print each orginal SAP layout and crystal layout
I still get the same symptoms.
Thank for your attention
Anthony

Thanks for your feed back.
I still find it a little strange.
Anthony

WHT report S_P00_07000134 missing vendor credit memos

Dear All,
Report S_P00_07000134 is missing to show vendor credit memos having doc type KG, I have checked config in Define output types, vednor cr memos is already active ,also tried with variety of input selection parameters but not getting these documents, can someone pls advise the reason behind it, or is there anything missing ?
Thanks in Advance.
Nilesh

Hi,
Please find the below link it will help full for you............
No records were selected - S_P00_07000134
Naresh

Missing vendor in DME file

Hi Experts,
I would like to know that I have generated the APP payment run for 5 vendor, however, in the DMe file I can only see 4 vendor are listed, Can I know what can be the possible reason behind not including the 1 vendor in the DME file. In the APP run its clearly showing 5 completed, 5 generated however, the DMe file does not include the one vendor. Can some one help me to understand this issue. How it work? I am getting Error message "Message No. BFIBL02 160", I went to scn link for the same issue since this error is showing due to extraction of more than one DME file. I wanted to know why one of the vendor is missing in the DME file.
Thanking you all in Advance.
Regards:
Jamshed

Hi,
In APP run its clearly showing 5 completed, 5 generated however, the DMe file does not include the one vendor, SO if the VMd has missing payment method then it could show some error,
Regards:
Jamshed Khan

Missing Vendor Number Range

Dear Expert,
By mistake while uploading FI Vendor master to system we had given the Vendor Number in the template.
The vendor number range is maintained as internal.
All the vendor was updated and it is showing also.
But when in system we try to create new vendor it is showing account already exists.
We checked the number range the current Number is still zero.
Is there any program or any method that we can bring this current status sync with existing vendor master we had uploaded into the system.

Hi,
check T-code XKN1, tick "status", update the current number to the needed one.
Best regards, Christian

Missing Vendors in SRM550

Hi we have transferred vendors all ok in the past but something strange has happened.
I can see the vendors in the GUI version in transaction BP i can search anf find them no bother, they are also present in table VENMAP, but when in SRM via internet explorer and a search ios carried out they cannot be seen.
Any ideas guys and gals???

I went to TCODE, PPOSV_BBP but i cannot see the vendors in this transaction, how do i get them there?
Also a vendor that was created yesterday is in this table, but there are 5 vendors created 31st March that are not there,
All vendors have the same P Org.
Plot thickens
in the tcode BBPGETVD what is the object id used for and where is this set against the vendor?
Edited by: Steve Cane on Apr 2, 2008 9:54 AM

Vendors are not replicated

Hi Everyone,
I am working on SRM 7.0 - ECC 6.0 landscape with Classic Scenario. When I try to replicate vendors with BBPGETVD only 2 vendors got replicated out of 288. Now when I try to replicate them again I receive a message saying "All backend descriptions are already assigned in the system". I had seen this message earlier when you try to replicate vendors that are already replicated. So I tried to use BBPUPDVD to see if I can update and get the missing vendors. However, when I get to the second screen I see that only those 2 vendors that has been replicated are considered to be updated and the remaining 286 vendor are given in a list as missing vendors.
Can you please help me to understand why these vendors are not getting replicated? Can it be that they have missing information so SRM do not consider them for replication?
Thank you in advance,
asli

see our dave important point.
Error repliacting vendors
Yes, just make sure that the external range in SRM starts with your lowest vendor number in ECC and ends with the highest possible number.
There will only be 1 range in SRM but it must cover all 5 ranges in ECC.
Just make sure your internal range in SRM does not overlap with any of your vendors in ECC or you will have major problems. I like to give SRM a very high range for internal business partners, then you can use most of the numbers for your external ranges to match ECC.
br
Muthu

*SAP Query on Vendor Master*

Hello SAP Gurus,
I have created a SAP query joining SAP tables LFM1, LFA1 & ADRCT.
The join condition is LIFNR for LFM1 & LFA1.
The join condition for LFA1 & ADRCT is ADDRNUMBER.
The query is intended to pick the following fields
Vendor, POrg, ABC indicator & Remark(field in ADRCT table)
Problem:
I have 20 records created for LFM1/LFA1, but the query retrieves only 5 records which has value in remark field. Balance 15 records which had null value in remark field is not getting displayed.
Request:
Is there a way to retrieve all the 20 records, so that users can know what are the missing vendors(15) which did not have remark field updated. If I remove the join condition between LFA1 & ADRCT all the 20 records are displayed. User wants to execute the query for all the vendors for a particular PORG.
Thanks in advance for your inputs.
Regards,
Narayan.

Hi Ramesh,
Thanks for your immediate response.
I have linked all the common fields. But still it is not working.
Any idea why this is happening.
Regards,
Narayan.

Vendor in Sales order

Dear All,
i have created access sequence with the table Sales org/Vendor (VKORG / LIFNR).
i maintained the vendor in customer master as partner function "VN".
i have created condition type with that access seq & assigned in pricing procedure.
i have created the Cond record for the same in VK11.
But when create Sales order,this condition type does not pick up the values.
in analysis in condition tab...it shows that it is missing Vendor (VN)....
But Vendor is available in Partnee screen.........
Any idea?????

hi,
this needs to be done by adding new fields to the pricing communication structure. please read the following SAP help. this will help
New Fields for Pricing
Basics of modification in pricing
The following communication structures are relevant in pricing:
KOMK (pricing communication header)
KOMP (pricing communication item)
KOMG (allowed fields for condition structures)
For technical reasons, communication structure KOMG is used. It combines the fields from KOMK and KOMP that are relevant for pricing in the standard system and are offered in the field catalog of condition tables. If you want to use a new field in the field catalog, you must add the field to KOMP or KOMK in the following INCLUDES:
header data in INCLUDE KOMKAZ in KOMK
item data in INCLUDE KOMPAZ in KOMP
When you use INCLUDES, the field is automatically added to KOMG and the field catalog.
The routines for assigning values to the new fields in order processing are found in member MV45AFZZ. Use the following user exits:
USEREXIT_PRICING_PREPARE_TKOMK (header fields)
USEREXIT_PRICING_PREPARE_TKOMP (item fields)
The routines for assigning values to the new fields in billing are found in member RV60AFZZ. Use the following user exits:
USEREXIT_PRICING_PREPARE_TKOMK (header fields)
USEREXIT_PRICING_PREPARE_TKOMP (item fields)
Examples for using new fields in pricing
Example 1
In the first example, parts of a document field are to be used in pricing. You want to use the first three digits of the product hierarchy (PRODH) for pricing, for example. Proceed as follows:
1. Check the data elements in the standard system.
2. Since there is no such data element you have to create the new data element ZZPRODH1. Also create a domain with the length "3" and the data type "CHAR" for the new data element.
Remember that new data fields must start with the letters "ZZ" or "YY", since SAP reserved these letters to protect them from being overwritten during a release upgrade.
3. Check whether the product hierarchy (PRODH) is found at header or at item level.
In table VBAP, document field PRODH is defined as an item field.
4. Integrate the field name ZZPRODH in the communication structure KOMP using the INCLUDE KOMPAZ and allocate the data element PRODH to it.
5. Activate the structure.
6. Check in which table the field PRODH exists.
The field is in table VBAP (sales document: item data).
7. Assign a value to the new field in the FORM routines for sales order processing and billing using the appropriate user exits:
In sales order processing the user exit is found in member MV45AFZZ. The complete statement is:
FORM USEREXIT_PRICING_PREPARE_TKOMP.
MOVE VBAP-PRODH(3) TO TKOMP-ZZPRODH.
ENDFORM.
The routines for assigning a value to the new fields in billing are found in member RV60AFZZ. The statement is as follows:
FORM USEREXIT_PRICING_PREPARE_TKOMK
MOVE XVBRP-PRODH(3) TO TKOMP-ZZPRODH.
ENDFORM.
8. Allocate the specifications A, V and 001 to the field ZZPRODH in table T681F. Use "E" has been added for fields in rebate processing.
Example 2
In the second example, you want to use a partner function, created in Customizing for partner maintenance, for pricing.
Assume that the partner function was created for a sales representative of the partner type PE. Z1 is defined as a mandatory function for the customer master record, therefore automatically set in the document and available in the internal partner table XVBPA.
To use the new partner function for pricing, proceed in the same way as for the previous examples.
9. Create a new data element, in this example, data element ZZVRTZ1 with domain PERNR.
10. Include the field ZZVRTZ in KOMK using KOMKAZ and allocate data element ZZVRTZ1 to it.
For order processing, a value is assigned to the field in the user exit for member MV45AFZZ. The entries in the user exits are protected during a release upgrade. The statement is as follows:
FORM USEREXIT_PRICING_PREPARE_TKOMK.
PERFORM XVBPA_LESEN (SAPFV45K) USING 'Z1' VBAP-POSNR SY_TABIX.
MOVE XVBPA-PERNR TO TKOMK-ZZVRTZ.
ENDFORM.
For billing, a value is assigned to the field in the user exit of member RV60AFZZ. The entries in the user exits are protected during a release upgrade. The statement is as follows:
FORM USEREXIT_PRICING_PREPARE_TKOMK.
PERFORM_XVBPA_SELECT_USING'Z1'.
MOVE XVBPA-PERNR TO TKOMK_ZZVRTZ1.
ENDFORM.

CIF: Vendor transfer

Hi All:
I have been trying to send Vendors over to APO thru CIF, I could see a bunch but couple of them just dont get across. I tried sending them alone in a seperate Integration model I get the same message that (vendor) <b>location does not exist</b>.
The next time I tried sending the vendors with SA's, Inforecords and contracts I get the same message. On SMQ2 in APO I get Function: /SAPAPO/CIF_TPSRC_INBOUND
Which I tried to execute just to get a message <b>Function module does not exist or EXCEPTION raised</b>.
Please help, have a good week ahead.
Mono

Mono Al
Using transaction se38, enter RIMODINI as the program name and execute.
You should have a selection screen for your integration models. Enter the integration model you want and execute. You should now have a list containing the models you want to re-initialise. On execution now, the full model information will be resent (rather than the delta logic).
Hopefully your missing vendors will now come across.

ISE and SIEM integration

Hi,
One of the major concerns regarding security solutions is the way they interact. ISE specifically, is compatible with most of the SIEMs available today, as stated by Cisco (http://www.cisco.com/en/US/prod/vpndevc/ecosystem.html).
In my particular case, I want to integrate ISE with ArcSight.
For ArcSight to correctly parse the syslog messages that ISE sends, you have to install/configure an ISE smartconnector.
What I'm missing though is how does ArcSight instructs ISE to take specific actions on users/devices that are involved in a network attack.
Please check: http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5712/ps11640/at_a_glance_c45-728401.pdf
SIEM/TD partners may utilize ISE as a conduit for taking mitigation actions within the Cisco network infrastructure. SIEM/TD platforms can instruct ISE to undertake quarantine or access-block actions on users and/or device based on ISE policies that have been defined for such actions.
Thanks!
Octavian

There is no such docs available till now for ArcSight integration with ISE. I also found only these two links:
http://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/at_a_glance_c45-728401.pdf
http://www.cisco.com/c/dam/en/us/solutions/enterprise-networks/context-aware-mobility-solution/profile_arcsight_c07-538803.pdf

ISE acting as Radius Proxy Client?

Hi,
I have an issue where a remote company has there internal redius server and I have my ISE radius server.
When there users come to my site, they can authenticate with my wireless and my ISE server proxies the request to there home site to be authenticated and tells me if I should allow them access or not.
So standard radius proxy and it all works well when my ISE server begins the exchange.
However if my staff go to there site the reverse is not working, they are proxying the requests back OK, and I can see on the firewall and router the incomming radius packets destined to my ISE server. But there is no recourd on the ISE server of ever reciving them and it all times out.
Is tehre some thing I need to do to allow ISE to act as the client in a radius proxy set up?
Cheers.
Oh I am running version 1.2

Hi Aaron,
Check the Cisco ISE dashboard (Operations > Authentications) for any indication regarding the nature of RADIUS communication loss. (Look for instances of your specified RADIUS usernames and scan the system messages that are associated with any error message entries.)
Log into the Cisco ISE CLI5 and enter the following command to produce RADIUS attribute output that may aid in debugging connection issues:
test aaa group radius new-code
If this test command is successful, you should see the following attributes:
Connect      port
Connect NAD      IP address
Connect      Policy Service node IP address
Correct      server key
Recognized      username or password
Connectivity      between the NAD and Policy Service node
You can also use this command to help narrow the focus of the potential problem with RADIUS communication by deliberately specifying incorrect parameter values in the command line and then returning to the administrator dashboard (Operations > Authentications) to view the type and frequency of error message entries that result from the incorrect command line. For example, to test whether or not user credentials may be the source of the problem, enter a username and or password that you know is incorrect, and then go look for error message entries that are pertinent to that username in the Operations > Authentications page to see what Cisco ISE is reporting.)
Note This command does not validate whether or not the NAD is configured to use RADIUS, nor does it verify whether the NAD is configured to use the new AAA model.
The Cisco ISE network enforcement device (switch) is missing the radius-server vsa send accounting command.
Verify that the switch RADIUS configuration for this device is correct and features the appropriate command(s).
For more details please go through the following link:
http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/troubleshooting_guide/ise_tsg.html#pgfId-192989

ISE 1.2 - AV/AS Remediation missing vendors

Similar Messages

Maybe you are looking for