How do you configure interface compliance rules

NCM also does not show which interface is in violation in the config file.  I have to search the config file each time.  There must be a way to automate the search and remediation script.

Hello Christopher,

You can try with "search in block" option:

Advanced Config Search(block search and/or search)

String:

\d.*\n(.*\n)*.*no\sip\sredirects

(remember to choose RegEx expression)

SEARCH CONFIG FILE/BLOCK: Config block

Config block start: interface\sVlan

Config block end: !

(remember to choose RegEx expression)

With this setting you can figure which interface should be configured.

About script automation, maybe Config Change Templates will help.

Regards,

Mateusz

Thank you very much.  This is exactly what I was looking for.  I have it working.  That is a good idea with the Config change template for correcting it.  I wish there was a way to select a config change template for the remediation.  I think I'll put that out there as a feature request.  If I had that, I could put a lot of STIG content out there for others to use too.

Do you know how I can do a rule to search for a string with multiple lines, such as a login banner with many lines, parenthesis, blank lines, and returns?  When I put a section of it in the String field, it still comes up as a violation that it is not contained in the the config when indeed it is in the config.  It works if I just look for one line at a time.  I need to ensure the correct banner is applied, so I need to check the whole thing at once.  

You should check if there is no additional "space" char after a line. You can also try with .* (dot and asterisk) before ending line (\n).

Keep in mind that if you select RegEx expression in string, you must use backslash for escape special characters (e.g. parenthesis).

Regards,

Mateusz