[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [ISSForum] Policy export ? (Juan Roa)

When I want to view my IPS Security Events policy, etc, I select all and use the integrated export function, leaving no extension. When I open this using MS Excel, I select XML List. This provides me an easy  to use, filter, and view snapshot.

I do not know how to export a policy snapshot from Server Sensor, however.

Pete Marion 
Security Architecture
Room 435
(717) 214-6581
This electronic message transmission, which includes any files transmitted with it, may contain confidential or privileged information and is only intended for the individual or entity named above. If you have received this email in error,  please purge it and all attachments and notify me immediately .

Message: 1
Date: Wed, 21 Mar 2007 08:40:36 -0400
From: "Juan Roa" <juan.roa@xxxxxxxxxxxxx>
Subject: Re: [ISSForum] Policy export ?
To: Ray Cotten <rcotten@xxxxxxxxxxx>
Cc: issforum@xxxxxxxxxxxxxxxx
Message-ID: <fc.0084c09100a469623b9aca005cbc10ac.a46963@xxxxxxxxxxxxx>
Content-Type: text/plain; charset=ISO-8859-1

Ray Cotten <rcotten@xxxxxxxxxxx> writes:
>How do you export your ISS policy files (RSDP, HIDS, & Inline) so they
>are in a viewable (readable) format.
>There were some freeware perl scripts that worked on inline policies in
>version 7 but now with new firmware, SP6.2 etc.. even these don't work
>anymore. Does anyone have anything that will export policy file into
>something readable?

I am looking for the same tool a lot time ago....

Anyone ?


Juan Roa Salinas
IEI - SOC Senior Manager - ISS-Certified Specialist (ISS-CS)
Phone: (56 2) 6403981, (56 9) 7486538
e-mail: jroa@xxxxxxxxxxxxx
web site: www.orion.cl

Orion 2000 S.A. - Chile
Soluciones en Seguridad de la Informacion
Empresa certificada BS 7799:2002 | ISO 9001:2000
La informacion contenida en esta transmision es confidencial, amparada por
secreto profesional y esta dirigida exclusivamente a el o los
destinatarios indicados. Cualquier uso, reproduccion, divulgacion o
distribucion por otras personas que su(s) destinatario(s) esta
estrictamente prohibida.
Las opiniones expresadas en este correo son las de su autor y no son
necesariamente compartidas o apoyadas por la compania.

ISSForum mailing list

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@xxxxxxx

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.