Symantec Connect - Security - Discussions

CCS External Data Integration Connectors

Thomas K — Tue, 14 Feb 2012 20:12:15 +0000

I do not need a solution (just sharing information)

Pull data from other products deployed in your environment using CCS External Data Integration, part of the base CCS architecture.

To access the connectors, please login or register for the Symantec Compliance Product Group https://www-secure.symantec.com/connect/Compliance...

How to create custom check in CCS equivalent to 'find /path options' command (UNIX)

nra — Sat, 11 Feb 2012 05:59:23 +0000

I need a solution

Anyone know how to configure a CCS check for UNIX to execute 'find' command?

Like for example 'find all files under user home path with execute (x) permissions.

The predefined checks in CCS are non-editable and viewable.

Symantec Compliance Product Group

Creating custom check using "File Contents" in UNIX/Solaris

nra — Sat, 11 Feb 2012 05:23:49 +0000

I need a solution

Hi All:

A lot of technical checks in UNIX are achieved by using grep on config files from CLI.

In CCS, the "File Contents" field is a logical choice. However, I always get evaluation results "Unknown" and Current Value is "{Not requested}".

Example evaluation details results:

Object Name	Current Value	Expression
/etc/pam.conf	{Not Requested}	Content %~ '/^[^#]*rlogin auth sufficient/'

My checks is set as:

Category: Files

Field: File contents

Operator: %~

Value = /^[^#]*rlogin auth sufficient/

Data Items Filter:

File Name (with Path) = '/etc/pam.conf'

File Type = 'file'

The predefined checks are implementing this as 'proc:' so I can't copy one and modify the file patch and the search condition.

I checked the PCU2011-4 README hoping to get information about this data source field. All I get is that UNIX file content checks returned Unknown value due to some unspecified 'special characters' in the evidence. Issue has been resolved in PCU2011-2. I'm running a CCS with PCU2011-4.

I did a search in this forum about this topic but did not get similar postings.

Any KB or documentation on how to use this check effectively?

Hope somebody out there has done this before and willing to share. Thanks!

CCS 11.0

samir.saadah — Wed, 08 Feb 2012 15:34:06 +0000

I do not need a solution (just sharing information)

Dear Sir,

When CCS 11.0 will be release for Download

Thanks

Samir Saadah

How to order a report on CCS?

pholaris — Wed, 01 Feb 2012 17:45:20 +0000

I need a solution

There are just 3 reports where you can find the option to order by Check but in others the option does not appear (Customize).

I need to order somer reports by check just like they appear in the standard tree.

Reports I can order, (you can sort in Reporting->My Reports->Select Report (View)->Customize)

Asset Evaluation Result Change
Compliance by Technical Check
Asset Evaluation Result Change

Reports I can not order (Does not appear the Customize option)

Remmediation Standard View
Evaluation Result Asset View
Remediation Asset View
Evaluation Result Standard View

Does anyone know what's the criteria for sorting this last Reports and the way to sort them?

thnks a lot

Reporting Database Synchronization Job is failed

ya4ept — Wed, 01 Feb 2012 13:51:27 +0000

I need a solution

6651301

1328168677

CCS v10.0 - Data Collection PCU 2011-3 & 2011-4??

ahumphries — Wed, 01 Feb 2012 01:26:37 +0000

I need a solution

Does anyone know if there was PCUs 2011-3 and 2011-4 for the Data Collection side? I can't seem to find it anywhere.

The R&A PCU 2011-4 has a note saying:

"Note: You must install 2011-4 Update on the Control Compliance Suite Data Collection 10.0 before upgrading the Reporting and Analytics 10.0 components." """"""""

Help?

Thanks,

Aaron

Symantec Compliance Product Group

installation of the console

ya4ept — Fri, 27 Jan 2012 12:10:37 +0000

I need a solution

On the server CCS console works.

on another PC I go to http://ccs2/ccs_web. Download and install the client.

when i run the console An error occurs:

Windows Patch Assessment Meta-Document Update Error - RMS Console

Michael J Fitzpatrick — Fri, 27 Jan 2012 02:33:33 +0000

I need a solution

I recently ran the Windows Patch Assessment Meta-Document Update on my 10.5 RMS console. Since then out of 2000 servers being queried, most come back with errors right away. If I revert the files in the D:\Program Files (x86)\Symantec\RMS\Control\Windows\PatchAssessment to what was there before the update they scan just fine. The message in the scan results is this:

PFGDSMBVQE001 - Distribution Job failed to distribute jobs to SQE(PFGDSMBVQE001). Error Code: -805360850 (Query Engine: The multi job failed after exceeding maximum retries.). Affected Scope: PFGDSMBVQE001 - Query Engine: The multi job failed after exceeding maximum retries.

This is the same message for all servers. What's funny is that it can't even scan itself in the example above. BVQE001 is a Master Query Engine...

Like I said...put the .xml and .cab files back to the old ones and it works perfectly.

Is anyone else seeing this problem?

No data returned from RMS Console for RHEL server

pholaris — Mon, 23 Jan 2012 22:49:06 +0000

I need a solution

After agent installation, I can't retrieve data from RHEL server 6.0, does not matter what kind of query,

There are no errors through installation, the bvcontrold daemon is running and port 1236 is opened and I can see the RHEL server on the bv-control tree for UNIX into RMS Console.

I haven't had any kind of troubles for registering the snap-in unix with the Information Server (IS).

If I try to collect some data I get the message: "There are no items to show in this view"

Resource name and password is Ok, by other hand, intentionally I set a wrong password waiting for a authentication error but I receive the same message:"There are no items to show in this view"

any ideas?