Web Client Guide

322
ProScan Portlet | Change Management / ProScan
Simple (CIsco ACL)
To match the following rows in a Cisco ACL:
access-list 159 permit icmp any any
access-list 159 permit tcp any any eq smtp
access-list 159 permit tcp any any eq www
To match these lines, simply create a compliance policy for
Config Term contains
(line contents)
for each line.
Complex (Juniper)
When you have a multi-line statement to match, with varying elements, regular expressions are
necessary. For example:
lab@MyServer# show protocols
bgp {
group internal {
type internal
export nhs
neighbor 10.1.1.1
}
}
In the above statement, the goal is to ensure an export policy in the BGP group internal called
nhs
.
A suggested regex expression to match with the goal:
bgp/s+{/n/s+group/s+internal/s+{/n/s+type/s+internal;/n/s+export/s+nhs
NOTE:
Make sure you check Multi-line Support.
Another example:
lab@MyServer# show policy-options
policy-statement nhs {
term set-nhs {
then {
next-hop self;
}
}
}
The following regex statement matches this example: