Tuning out a specific IP or user ID in MARS 50 v4.3

I have a vendor that monitors some firewalls remotely, and with that, the MARS is always firing the alert "System Rule: Modify Network Config" because of the "Firewall user entered a command other than show" rule. I'd like to tune either their IP or their user ID within MARS to have it not send an alert when they peform their duties.
Does anyone know how to do this just for their ID or IP? Thanks, Tony

The problem with this MARS' rule is that it will hardly ever report the source / destination IP field/username fields. The username field is also always blank (specially with firewalls).
So your only option is to disable this rule for the WHOLE device itself i.e. by editing the "System Rule: Modify Network Config" in MARS. Then click on DEVICE (ANY) and select != (Not Equal To) after entering the Firewall's Reporting IP/Hostname. But of course after doing this CS-MARS won't notify you about 'any' future management activity on the device.
Or if this vendor has there own dedicated virtual context on the firewall, you can disable syslog id# 111007 for them as follows:
no logging message 111007
Regards
Farrukh

Similar Messages

  • Log out a specific user after inactivity, not all users

    I'd like to log out a specific user after a few minutes of inactivity.  Not all users.  Is there a ways to set this on a per user basis?
    I know how to do it system wide.

    Should be possible with this:
    Workgroup Manager 10.8

  • Exception handling-filter out a specific JBO code number

    Hi
    First i would like to explain that what i'm trying to achieve is 'filtering out' a specific error code using
    JboException getErrorCode() these exceptions are thrown by
    using JCLoginDialog and entering invalid user/password.
    I am using bc4j/jclient application developed using JDeveloper 9.0.3. and JDK1.4.2
    With that I'm also using the JAAS login feature,using the JCLoginDialog class.
    Everything works except when I enter a invalid user/password in the jclientlogindialog.this class has a method called getInfo(info,connEnvironment) and within this method are 'if statements' that should set the error message in the case where a invalid user/password is entered, or if the 'Cancel' button is pressed it sets a error message to "Login Cancelled".
    With my application this isn't working.
    So Im trying to filter out JBO error codes but when these
    errors occur, for example a invalid user/password is supplied,there are numerous errors and JBO code numbers in the detail stack output.
    If i try to get a JBO code number using the JboException classes' getErrorCode() it returns the first JBO-Code number it finds,but not the one i need which would be the error caused by invalid user/password.
    Thanx in advance, any help is really appreciated!
    Carl

    Carl:
    Try looking into detail exceptions and their err code. The following example method does recursive look into all details:
       boolean foundMatch(String errCode, JboException ex)
          if (errCode.equals(ex.getErrorCode()))
             return true;
          Object[] dtls = ex.getDetails();
          for (int j = 0; dtls != null && j < dtls.length; j++)
             if (dtls[j] instanceof JboException)
                if (foundMatch(errCode, (JboException) dtls[j]) == true)
                   return true;
          return false;
       }Thanks.
    Sung

  • Wmi script to find out the time when the user was added to local administration group

    Hi Friends,
    i need a script/query based on wmi/wql that find out the time when the user was added to local administration group on this computer
    Regards
    Tanoj
    OSLM ENGINEER - SCCM 2007 & 2012

    WMI does not keep security information.
    Unless you have enabled auditing, this information is not retained in any way.
    If auditing is enabled, you can write a powershell script to look for the specific event in the eventlog. More specifically, you should look for all security events with id 4732 containing the group.
    this one command does the trick
    get-eventlog -logname security -instanceid 4732 -message *administrators*
    https://technet.microsoft.com/en-us/library/dd772663(v=ws.10).aspx
    MCP/MCSA/MCTS/MCITP

  • Error for customer specific Authorization check (User Exit)

    Dear Experts,
    I am facing a problem in PM.
    I have created a maintenace plan for calibration via t code IP42 and mentioned the order type PM05. Scheduling is done for the order. I got the order number.
    I have released the order and got the inspection lot number.
    While entering the results recording through t code QE17, the reluts are out of the specified range, i have given the valuation Rejected, immediately system is giving an error message as below:
    "Error for customer specific Authorization check (User Exit)"
    Though there is no user exit activated in the system, this message is coming and not allowing the result recoring for rejection.
    If I'm entering the result recording within the specified range, then valuation is Accepted and its allowing to save.
    I have checked the following user exits:
    QQMA0002: QM: Authorization Check for Entry into Notif. Transaction
    QQMA0026: PM/SM: Auth. check when accessing notification transaction.
    The above 2 User Exits are not active.
    I have also checked a note 429066. But it says incase of any dump for that user exit only its applicable and more over the current version of the system is ECC 6.0 packae 15, where as that note is applicable upto 4.6C.
    Please some one help me on this issue.
    Thanks and Regards,
    Praveen.

    Dear Pete,
    I have cheked with my technical team, There is no hotpacks updated recently. This is the implementaion project I'm in, so performing the cycle for the first time.
    Any how I got it solved, in T code QE17, after entering the Inspection lot in next screen goto menu path Settings - User settings - Defects recording mention the reprt type and tick on Reprt type Changable.
    At the time of result recording if the valuation is Rejected then it ask for defects recording close that window if not rwequired then save, the error message no longer apperaing now.
    Regards,
    Praveen

  • How to find out the list of all user's whose passwords are expired

    Hi
    i had tried to find out the list of all user's whose passwords are expired.
    i had written some jndi code by finding the max age and then find out the current time and subtracted this current time from max age using the following code
    "Attributes attbts=ctx.getAttributes("cn=pwdpolicy");
    String maxAge=(String)attbts.get("pwdMaxAge").get();
    Date Today = new Date();
    System.out.println("maxAge"+maxAge);
    long curTime=(Today.getTime())-Long.parseLong(maxAge)*1000;"
    and then parse it and create a string time as follows
    String time=year+month+day+hour+minute+second+"Z";
    where "year" "month" etc were parsed from curTime
    now i can get the list by using following code
    "String filterCriteria="(&(objectclass=person)(pwdChangedTime>="+time+")";
    NamingEnumeration results = ctx.search(baseDN,filterCriteria, sc); "
    but the current time which i am getting is the time of my system not the time of ldap server
    so my questions are following;
    1.Can there is any way by which i can get the tivole sever's system time.
    2.If there is no way then can you suggest any other way to find out the list of user's whose passwords are expired.
    please help me.
    Thanks.
    Krishan Rathi.

    Hi,
    Thanx for ur reply..
    I got the list from the table...
    thanks,
    sivagami

  • How do I setup multiple users to use one source but manage playlists separately?  For example, play counts are specific to each user.

    How do I setup multiple users to use one source but manage playlists separately?  For example, play counts are specific to each user.

    Hi,
    Thank you for posting in Windows Server Forum.
    Here adding to the words of “Tim”, a forwarder is a DNS server on a network used to forward DNS queries for external DNS names to DNS servers outside of that network. You can also forward queries according to specific domain names using conditional forwarders.
    A DNS server on a network is designated as a forwarder by having the other DNS servers in the network forward the queries they cannot resolve locally to that DNS server. You can refer information regarding forwarders and how to configure from beneath link.
    Understanding forwarders
    http://technet.microsoft.com/en-us/library/cc782142(v=ws.10).aspx
    Configure a DNS Server to Use Forwarders
    http://technet.microsoft.com/en-us/library/cc754941.aspx
    Hope it helps!
    Regards.

  • Is it possible to lock out a specific cookie in Safari

    Is it possible to permanantly "lock out" a specific cookie in Safari? I understand using preferences to provide details and to remove specific cookies but I would like to prevent some cookies from ever being allowed. Is there an advanced blocking method I haven't found yet?

    No, you are not the only one having issue with management of cookies in Safari.
    Many have expressed a wish for blacklisting cookies.
    Safari > Preferences > Privacy  > Block cookies > Always
    Click the question mark at the bottom. This is the explanation  I got.
    "Select to always block cookies. This may prevent you from using some websites."
    I am not aware any command using terminal to accomplish the objective.
    Best.

  • How to find out the cost of SAP user for a particular user id

    Dear All,
    I got one issue like how to find out the cost of SAP user, i mean for a particular user id.
    Could you please advice me regarding this.
    Raghu

    Hello Raghu,
    I got one issue like how to find out the cost of SAP user, i mean for a particular user id.
    Could you please advice me regarding this.
    I think you need to reach out to BASIS consultant to check out the Cost involved for User ID for the SAP application.
    Regards,
    Sarthak

  • How to find out the URL of the user coming from?

    Hi folks,
    From the HttpServletRequest, is there a way to find out the URL of the user coming from?
    Thanks in advance!
    Billy

    It is strange. The link is on a different http site eg. http://www.othersite.com. The link is pointing https://www,mysite.com/index.html. I put the alert(document.referer) on the index.html. Using FireFox will show the alert http://www.othersite.com every time. However, on IE, the first time is empty. The second time I click on the link, it will show http://www.othersite.com. Very consistent.

  • Word v.X no longer printing or creating PDF files (specific to one user)

    As of yesterday I cannot print from Word (v.X 10.0) documents or create PDF files from Word documents.
    I can print by logging out and using a test user ID.
    I can print after a safe restart (which disables many functions).
    I am still able to print and create PDF files from Pages, Firefox and other programs.
    When attempting to create a PDF from a Word file through the Print dialog box, then saving as PDF, I can see the "magnifying glass" image for the PDF briefly on the desktop, then it disappears.
    Apple Care Phone Support refuses to deal with Microsoft issues (even though it appears to be a print command failing within Mac OS steps of the process, and/or a Mac OS-generated and sorted plist file corrupting the process).
    Microsoft no longer supports the software (i.e., any file you are now using ending in .doc is no longer supported).
    Has anyone had a similar problem or an idea about what to do with likely culprit files?

    Sounds like a M$ problem to me.
    Can you save an Excel file as a PDF?
    There are .plist files in user>library>preferences
    that control the last used settings in apps.
    Quit the office app.
    Trash the com.microsoft.word.plist first.
    If that doesn't work trash the com.microsoft.office.plist
    PS What does yesterday have to do with PDFs not working?
    Something change?

  • How do I open a form specific to particular user?

    Hi All,
    Please answer below questions:
    1) How do I open a form specific to particular user?i.e I want to open a form as enterable mode for one user and non-enterable mode for another user.
    2) How do I run a report specific to the particular user? i.e I want to run a report for one user here other user can not see the report.
    Thanks in Advance,
    Dhana

    1) How do I open a form specific to particular user?i.e I want to open a form as enterable mode for one user and non-enterable mode for another user.Create a new responsibility, and set QUERY_ONLY=YES -- See old threads for similar discussion.
    QUERY_ONLY
    http://forums.oracle.com/forums/search.jspa?threadID=&q=QUERY_ONLY&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
    2) How do I run a report specific to the particular user? i.e I want to run a report for one user here other user can not see the report.Through "Concurrent: Report Access Level" profile option.
    Concurrent Report Access Level [ID 736547.1]
    R12 View Concurrent Requests FAQ [ID 1261985.1]
    Can't View Request's Output Submitted By Others [ID 949703.1]
    How to View the Output of a Request Launched by Someone Else [ID 413382.1]
    Thanks,
    Hussein

  • How to include in the sub-menu a table specifies of the user - UDO

    hi, forum  
    how to include in the sub-menu a table specifies of the user 
    I created a table '@ IA_RELAT' in User-Defined Obejcts but I don't know as including in the sub-menu that I created  
    it follows my code
      Private Sub SBO_Application_MenuEvent(ByRef pVal As SAPbouiCOM.MenuEvent, ByRef BubbleEvent As Boolean) Handles SBO_Application.MenuEvent
            If (pVal.MenuUID = "MySubMenu") And (pVal.BeforeAction = False) Then
                Try
                           <u201DmyTableName->@IA_RELATu201D>
               Catch
                    SBO_Application.MessageBox("The Form already exists")
                End Try
            End If
    thank you
        End Sub

    Hi David
    Excuse me but I didn't find in MenuCreationParams Objects how to do this call of the table '@ IA_RELAT' created in User-Defined Obejcts 
    It follows my code 
    in AddMenuItems I set up the Menu and Submenu 
    in SBO_Application_MenuEvent it is where I am having difficulties of showing the table '@ IA_RELAT' created in User-Defined Obejcts 
    Thank you for any help
        Private Sub AddMenuItems()
            Dim oCreationPackage As SAPbouiCOM.MenuCreationParams
            oCreationPackage = SBO_Application.CreateObject(SAPbouiCOM.BoCreatableObjectType.cot_MenuCreationParams)
            oMenuItem = SBO_Application.Menus.Item("43520") 'moudles'
            Dim sPath As String
            sPath = Application.StartupPath
            sPath = sPath.Remove(sPath.Length - 3, 3)
            oCreationPackage.Type = SAPbouiCOM.BoMenuType.mt_POPUP
            oCreationPackage.UniqueID = "MyMenu01"
            oCreationPackage.String = "Standard cost"
            oCreationPackage.Enabled = True
            oCreationPackage.Image = sPath & "UI.bmp"
            oCreationPackage.Position = 15
            oMenus = oMenuItem.SubMenus
            Try ' If the manu already exists this code will fail
                oMenus.AddEx(oCreationPackage)
                '// Get the menu collection of the newly added pop-up item
                oMenuItem = SBO_Application.Menus.Item("MyMenu01")
                oMenus = oMenuItem.SubMenus
                '// Create s sub menu
                oCreationPackage.Type = SAPbouiCOM.BoMenuType.mt_STRING
                oCreationPackage.UniqueID = "MySubMenu"
                oCreationPackage.String = "Auxiliary Table"
                oMenus.AddEx(oCreationPackage)
            Catch er As Exception ' Menu already exists
                SBO_Application.MessageBox("Menu Already Exists")
            End Try
        End Sub
    Private Sub SBO_Application_MenuEvent(ByRef pVal As SAPbouiCOM.MenuEvent, ByRef BubbleEvent As Boolean) Handles SBO_Application.MenuEvent
    If (pVal.MenuUID = "MySubMenu") And (pVal.BeforeAction = False) Then
        Try
    SBO_Application.ActivateMenuItem(menus.Item(1).UID.IndexOf("@IA_RELAT"))
        Catch
                    SBO_Application.MessageBox("error")
        End Try
    End If
    End Sub

  • Disable variants for specific queries or users

    Hi,
    We recently upgraded to NetWeaver 2004s and are now able to create and use multiple variants for variables for queries. Both analyzer and web support this feature. Is is possible to deactivate this option so that specific queries or users are no longer able to see or create these variants?
    With regards,
    Alex

    Is there anyone who can point me in the right direction? Do I have to change a web template or customizing or something else? Please help!

  • EHP5 - Counntry specific language for users in ESS

    Hi Experts
    We are using EHP5 and facing problem while enabling country specific language for users in ESS .
    Here we have .
    u2022     Made language field blank in JCO
    u2022     Have maintained country specific language in SU01-Default and in UME
    u2022     We have maintained country specific language in browser u2026also  .
    u2022     We have maintained entry in IMG (SAPDEFAULTESS_ERP2005 )
    But itu2019s not working for us either in portal or in NWBC ( we have both connection available to our sandbox ). Other than English it works only for Germen (but not completely few services still appears in English e.g My processes )
    Your advice will be greatly appreciated  .
    Thanks
    Aditya

    Hi Deepak And Siddharth
    Thanks for your reply  . I checked language packages in SMLT and here we have status for all  languages other than English and German is  yellow ( Warning ) Also
    for NWBC in role menu only  display translation options is available only for English and German and hence  we have asked basis team to look into this ..Will  keep you posted .
    Thanks again
    Aditya

Maybe you are looking for

  • Why do app updates no longer show up for me in iTunes?

    Please don't stop reading, because I think my issue is different from similar ones I've found posts about. For the past week or so, I've been unable to update apps through iTunes. When I click "Check for Updates," it shows "Accessing iTunes Store" at

  • Log4j - issue in configuring the file name for daily rolling file adapter

    We have configured the log4j properties. We want to create back-up of log file each hour. The file name of the log file is MyApp.log and as per the below configuration after each hour backup file is created as MyApp.log<<time>> but we want that file

  • MBAM 2.5 FIPS Compliance Windows 7 SP1

    The only reference I can find with regards to FIPS and Windows 7 with MBAM is in the planning guide which says Supporting BitLocker Protectors -  Numerical password - applied automatically as part of volume encryption and does not need to be configur

  • BITC of the source timecode for playout

    Hi, I was wondering if there was a way in FCP 5 to play out a quicktime file which has BITC of the source timecode so that I can use it to double check with a conform that I will be doing on another system. I don't know FCP very well so any help you

  • Taptic Engine stop working after workout

    I don't know if others have experienced this, but so far after receiving my watch I went out and had two 5km runs, and each time I finished running the Taptic engine would stop working. For example, if I Force Touch, there's no "vibration", and no bu