Hi, I don't understand what you mean. Each time SCM checks a configuration against the active policies, it raises an alarm if policy criteria is not meet. When creating the policy, you can specify if you want raise a minor/major/critical alarm at the device level or at a policy level.
The criteria can be defined using different comparison types (contains, does not contain, contain reg expr, does not contain reg expr). In this "window" you can specify several comparisons so you can select: contain access-list 75 permit 192.1.1.1 contain access-list 75 permit 10.1.1.1 does not contain reg expr access-list 75 permit [#!192\.1\.1\.1|10\.1\.1\.1#] Here, you can also define what command lines should be run in order to make the configuration compliant with that policy. Configuration is checked for policy violations each time you capture it (manually, global sync or scheduled sync). I hope this can help you. Regards. James. On Tue, Jun 14, 2011 at 7:56 PM, Brian Saunders <[email protected]> wrote: > Hello, > > > > I would like to replace Ciscoworks with Spectrum Configuration Manager and > had some questions about the Policy Manager. Within Ciscoworks I can > specify which commands should be in a configuration and also state that any > commands that don’t match those specified will be flagged as non-compliant - > example: > > > > ##states these two lines should be there > > + access-list 75 permit 192.1.1.1 > > + access-list 75 permit 10.1.1.1 > > > > ##states anything not matching these two ip addresses will be flagged as > non-compliant > > - access-list 75 permit [#!192\.1\.1\.1|10\.1\.1\.1#] > > > > I know it’s possible when configuring a policy in Spectrum Configuration > Manager that you can specify which commands should and should not be there > but having trouble figuring out if you can state anything not matching these > commands should be flagged. Anyone have any suggestions? > > > > Thanks, > > > > Brian Saunders > > Network Engineer > > Scottrade, Inc. > > All e-mail sent to and from this address will be retained by the Scottrade > corporate e-mail system and is subject to review by someone other than the > recipient. E-mail transmissions may not be secure; contact us at > 1-800-619-SAVE for more information. > > --To unsubscribe from spectrum, send email to [email protected] with the > body: unsubscribe spectrum [email protected] --- To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected]
