When I want to view my IPS Security Events policy, etc, I select all and use the integrated export function, leaving no extension. When I open this using MS Excel, I select XML List. This provides me an easy to use, filter, and view snapshot.
I do not know how to export a policy snapshot from Server Sensor, however. -- Pete Marion Security Architecture Room 435 (717) 214-6581 CONFIDENTIALITY NOTE This electronic message transmission, which includes any files transmitted with it, may contain confidential or privileged information and is only intended for the individual or entity named above. If you have received this email in error, please purge it and all attachments and notify me immediately . Message: 1 Date: Wed, 21 Mar 2007 08:40:36 -0400 From: "Juan Roa" <[EMAIL PROTECTED]> Subject: Re: [ISSForum] Policy export ? To: Ray Cotten <[EMAIL PROTECTED]> Cc: [email protected] Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset=ISO-8859-1 Ray Cotten <[EMAIL PROTECTED]> writes: >How do you export your ISS policy files (RSDP, HIDS, & Inline) so they >are in a viewable (readable) format. >There were some freeware perl scripts that worked on inline policies in >version 7 but now with new firmware, SP6.2 etc.. even these don't work >anymore. Does anyone have anything that will export policy file into >something readable? > >Thanks, > >Ray I am looking for the same tool a lot time ago.... Anyone ? Thanks Juan Roa Salinas IEI - SOC Senior Manager - ISS-Certified Specialist (ISS-CS) Phone: (56 2) 6403981, (56 9) 7486538 e-mail: [EMAIL PROTECTED] web site: www.orion.cl Orion 2000 S.A. - Chile Soluciones en Seguridad de la Informacion Empresa certificada BS 7799:2002 | ISO 9001:2000 ---------------------------------------------------- La informacion contenida en esta transmision es confidencial, amparada por secreto profesional y esta dirigida exclusivamente a el o los destinatarios indicados. Cualquier uso, reproduccion, divulgacion o distribucion por otras personas que su(s) destinatario(s) esta estrictamente prohibida. Las opiniones expresadas en este correo son las de su autor y no son necesariamente compartidas o apoyadas por la compania. --------------------------------------------------- _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
