Skip to main content

In user defined events, it is not apparent that an IP address will be treated as a regular expression in PAM


Technote (FAQ)


Question

When creating a user defined event, why is it not apparent you are entering a regular expression?

Related Articles:
TechNote 436157 - What are the known issues for Proventia for Crossbeam?

Cause

A period (.) specifies match any character. All periods in a DNS names should be escaped. PAM supports POSIX regular expression syntax.
Old version:
pam.userdefined.URL_Data.1000035=www.h3210.com
New version:
pam.userdefined.URL_Data.1000035=www\.h3210\.com

Answer

The policy code in the policy project automatically flows into the sensor project at /Dev/issCommon/SensorIndependence/.... Unless we explicitly integrate a new policy RPM into the The Crossbeam project, there will be an inconsistency between the LMI and SiteProtector since the tool-tip will be included in the DBSP (Databaese Service Pack) but not in the sensor project for the LMI.


If the above information does not resolve your issue, please contact IBM Security Systems Customer Support.

Historical Number

4747

Product Alias/Synonym

Proventia for Crossbeam

Rate this page:

(0 users)Average rating

Copyright and trademark information

IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.

Rate this page:


(0 users)Average rating

Add comments

Document information

Proventia Network Intrusion Prevention System for Crossbeam


Software version:
2.0


Operating system(s):
Firmware


Reference #:
1436294


Modified date:
2011-05-05

Translate my page

Content navigation