cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
505
Views
0
Helpful
2
Replies

GLBA Reporting - 'commands other than show'

atomike10
Level 1
Level 1

We are trying to run a report that shows all commands on firewalls within a given day for our PCI audits.  With the MARS, any command other than show, obviously gives the above output in the email sent to managers and you must log in to see the actual commands.  This can get very tedious if several commands were inputted that day.  Is there a way to modify the report to actually list the commands instead of giving this generic description?

Thanks,

Michael

2 Replies 2

Not applicable

Have you tried running the report type as "All Matching Event Raw Messages"?  It's not 100% clean exactly, but it does include the commands issued.

That worked perfectly.


Thanks,