(imported comment written by SystemAdmin)
Arnaud
i did what you have requested and as usual the action complete successfully and the policy not applied , and in the log file " BESFirewallCtrl.log" i can see the same error message
"
Thu, 04 Dec 2008 08:28:10 -0500
– -1 – Could not change firewall policy. Firewall XML is not formatted correctly "
i did export to the Action and here is it
=========================================================================
<?xml version="1.0" encoding="UTF-8"?>
BigFix Firewall - Deploy Firewall Policy: Block
(exists key “HKEY_LOCAL_MACHINE\SOFTWARE\CA\HIPSEngine\Products\BigFixFW” whose (exists value “UninstallCmdLine” of it) of registry) AND (name of it = “Win2000” OR name of it = “WinXP” OR name of it = “Win2003” OR name of it = “WinVista” OR name of it = “Win2008”) of operating system
<![CDATA[
if {NOT exists folder ((value “FirewallPolicyPath” of key “HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Firewall\ComplianceFirewallMap” of registry) as string)}
delete __appendfile
delete mkdir.bat
appendfile @ECHO OFF
appendfile mkdir “{((value “FirewallPolicyPath” of key “HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Firewall\ComplianceFirewallMap” of registry) as string)}” > NUL 2> NUL
copy __appendfile mkdir.bat
wait “{pathname of client folder of site “BESSupport”}\RunQuiet.exe” mkdir.bat
delete mkdir.bat
endif
delete __createfile
createfile until __Done_With_FileCreation
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<Rule id=“NS1” priority=“low” dir=“in_out” prot=“tcp_udp” locport="
" remport="
" remaddr="
" app="
" account=“both” desc=“Block”>
__Done_With_FileCreation
delete “Block.xml”
move __createfile “Block.xml”
if {exists files ((value “InstallDir” of keys “HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Firewall” of registry as string) & “FirewallPolicy\Block.xml”)}
move “{(value “InstallDir” of keys “HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Firewall” of registry as string) & “FirewallPolicy\Block.xml”}” “{(value “InstallDir” of keys “HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Firewall” of registry as string) & “FirewallPolicy” & (preceding text of first “.xml” of “Block.xml” &”"& ((((year of it as string & (if(length of it<2) then (“0”&it) else it) of (month of it as integer as string) & (if(length of it<2) then (“0”&it)else (it)) of (day_of_month of it as string)) of (date ("+0000" as time zone) of it)) & "" & (((if(length of it<2) then (“0”&it)else it) of (hour_of_day of it as string) & (if(length of it<2) then (“0”&it)else it) of (minute_of_hour of it as string) & (if(length of it<2) then (“0”&it)else it) of (second_of_minute of it as string)) of (time ("+0000" as time zone) of it))) of (parameter “action issue date” of action as time)) & “.xml”)}"
endif
move “Block.xml” “{(value “InstallDir” of keys “HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Firewall” of registry as string) & “FirewallPolicy\Block.xml”}”
continue if {(exists service “UmxAgent” whose (state of it = “Running”) AND exists service “UmxCfg” whose (state of it = “Running”) AND exists service “UmxFwHlp” whose (state of it = “Running”) AND exists service “UmxPol” whose (state of it = “Running”))}
wait “{(value “InstallDir” of keys “HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Firewall” of registry as string) & “BESFirewallCtrl.exe”}” -z 0 -p “{(value “InstallDir” of keys “HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Firewall” of registry as string) & “FirewallPolicy\Block.xml”}”
]]>
false
false
false
false
true
P1DT23H59M5S
false
NoRequirement
AllUsers
false
false
false
false
false
false
true
false
false
=====================================================================
Thanks
Regards
Ahmed Hamed