cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
544
Views
0
Helpful
3
Replies

ACS 4.0 and IBM TSCM

mugurelgherghe
Level 1
Level 1

Hi,

I try to load NAC attributes for IBM Corporation (TSCM) from ftp server (NAC Attributes Management), but these don't appear in System

Configuration -> Logging Configuration -> CSV Failed Attempts File Configuration or CSV Passed Authentications File Configuration.

My server is ACS 4.0 appliance. On ACS 3.3 my NAC attributes is works well.

[attr#0]

vendor-id=2

vendor-name=IBM Corporation

application-id=50

application-name=SCM

attribute-id=00020

attribute-name=Policy Version

attribute-profile=in out

attribute-type=string

[attr#1]

vendor-id=2

vendor-name=IBM Corporation

application-id=50

application-name=SCM

attribute-id=00021

attribute-name=Violation count

attribute-profile=in out

attribute-type=unsigned integer

[attr#2]

vendor-id=2

vendor-name=IBM Corporation

application-id=50

application-name=SCM

attribute-id=00010

attribute-name=Action

attribute-profile=out

attribute-type=String

I loaded list with attributes for Symantec on ACS 4.0 and these is OK, but for Tivoli Security Compliance don't works.

PLS, help me if you have a solutions!

Thanks!

1 Accepted Solution

Accepted Solutions

chenyokechuan
Level 1
Level 1

Hi,

Yup, you can't have a space between the vendor-name, i have case that after loaded the file i can't see the attribute from ACS Appliance, but can see it appear at logging. After reboot the ACS SE it ok.

I have NAC deployment with IBM TSCM also, can you share the experince? what version of TSCM client we should use? i only can get the version 5.1.0 but it look like need version 5.1.2 above only can patch the latest update.

Thanks

View solution in original post

3 Replies 3

mugurelgherghe
Level 1
Level 1

It works with:

[attr#0]

vendor-id=2

vendor-name=IBM_Corporation

application-id=50

application-name=SCM

attribute-id=00020

attribute-name=Policy Version

attribute-profile=in out

attribute-type=string

[attr#1]

vendor-id=2

vendor-name=IBM_Corporation

application-id=50

application-name=SCM

attribute-id=00021

attribute-name=Violation count

attribute-profile=in out

attribute-type=unsigned integer

[attr#2]

vendor-id=2

vendor-name=IBM_Corporation

application-id=50

application-name=SCM

attribute-id=00010

attribute-name=Action

attribute-profile=out

attribute-type=String

Without "space" character in vendor-name.

chenyokechuan
Level 1
Level 1

Hi,

Yup, you can't have a space between the vendor-name, i have case that after loaded the file i can't see the attribute from ACS Appliance, but can see it appear at logging. After reboot the ACS SE it ok.

I have NAC deployment with IBM TSCM also, can you share the experince? what version of TSCM client we should use? i only can get the version 5.1.0 but it look like need version 5.1.2 above only can patch the latest update.

Thanks

Hi!

I want to use IBM Tivoli Security Compliance Manager V5.1.1.1. PLS tell me what remediation server use. TPM?

Thanks!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: