Alerts are being sent to PSDetect for System Auditing and Reporting reports although set threshold (NETIQKB31171)

fact
VigilEnt Security Agent for iSeries 5.4/7.0

fact
VigilEnt Security Agent for AS/400 5.3/6.3

fact
VigilEnt Security Agent for iSeries PSDetect

fact
System Auditing and Reporting

symptom
Alerts are being sent to PSDetect  for System Auditing and Reporting reports although set threshold was not met.

fix

This is a known issue and has been resolved in the following PTF's:

• Version 5.3 - PTF 1A00151
• Version 5.4 - PTF 1A01551

The listed PTF's can be obtained by contacting NetIQ Technical Support or by the following link:

• https://www.netiq.com/f/support/VigilentUpdates.asp?PagePath=%2Fsupport%2Fvsa%2Fextended%2Fhotfixes%2Easp

note

The following is a list of some reports that experience false alerts:

• User Profiles SECADM SECOFR ALLOBJ
• Profile Special Auts/Exclude *NONE
• Profiles W/O Limit Device Sessions
• Profiles w/LMTCPB= *NO or *PARTIAL
• Profile Pwd Expiration Intvl *NE 0

 

Formerly known as NETIQKB31171