- Community Home
- >
- Networking
- >
- IMC
- >
- Compliance Policy - Software version - IMC 7.0
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Forums
Discussions
Discussions
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-01-2013 02:08 PM
11-01-2013 02:08 PM
Compliance Policy - Software version - IMC 7.0
Is it possible to setup a Compliance Policy to check that our HP switches are running the latest software? I see there are several PCI Compliance Policies already in IMC, but none of them reference the device software.
Also - do the checks only look at running backups or do they scan the switches themselves?
If it's not possible in a Compliance Policy, is there any other feature in IMC that can alert us if/when a software update is released for the HP resources in IMC?
Thanks.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-01-2013 07:41 PM
11-01-2013 07:41 PM
Re: Compliance Policy - Software version - IMC 7.0
HP may have some service where you can sign up for email notification of updates - I know they do for HP Software releases, but I haven't investigated a similar service for HP Networking.
You can use the Software Baseline feature to set a baseline required OS version, and check that against your systems to see if they are running the right version.
Compliance Policies offer three choices for running checks:
* Latest saved running config
* Latest saved startup config
* Display command output.
This last option lets you define a command to run, and IMC will go out to the devices, run the command, and check the output against your compliance policies. This is useful for things like NTP - you can run "show ntp status", and check that the output shows "Clock is synchronised".
I've written a series of posts on using IMC Compliance - it might be helpful: http://lkhill.com/series/imc-compliance/
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-06-2014 09:03 AM
12-06-2014 09:03 AM
Re: Compliance Policy - Software version - IMC 7.0
G'day!
Tnx for your perfect http://lkhill.com/series/imc-compliance/
I have a question about imc-compliance: is it possible to capture (redirect) output for display command to external file? I need to get results for 'show lockout-mac' performed on multiple switches. I could easily do it on PCM+ (check "Capture output to a file") but I can not understand how to do it on IMC.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-12-2014 09:57 PM
12-12-2014 09:57 PM
Re: Compliance Policy - Software version - IMC 7.0
DSV,
If you create a CLI script (Configuration Templates withing Configuration Center) and deploy it to the device it will show you the running results in a window in real time. You can also continue doing other things, and go back to the "deployment task" page then click on the link for the previously ran task. Then for each device you will have an icon to see the CLI running results (per device)
Below is the running process window, but you can get the same detail per device after the fact as well.
The other method would be to use the "copy command-output '<command to be run>' tftp <tftp ip> <filename>" (if the device is Procurve) this will dump the results of each command to a tftp server. You could use a parameter for the ${filename} so you can make each one unique, but that method would be pretty cumbersome at scale, and you would end up with a file for each device anyway.
There is not a function I'm aware of to dump the results output of compliance policy or configuration script to an external file, but you can view the CLI output of each within the interface.
PL