Import or Export Command Filter Lists

Use the following procedure to create and manage command filter lists using a CSV file.
capamnew
HID_ImportExportCommandFilters
Use the following procedure to create and manage command filter lists using a CSV file.
Follow these steps:
  1. Go to
    Policies, Manage Policy Filters
    .
    The
    Command Filters
    page appears.
  2. Select the
    Import/Export
    button.
    The Import/Export command filters window appears.
  3. A sample file is available by selecting the
    Download Sample File
    button. Copy the sample file to a new file, and edit it for your use.
  4. All columns are required fields. See Set up Command Filter Lists (CFL) for detailed information about these fields.
    • Type:
      Command Filter List
    • List Name:
      This text populates the
      Name
      field on the Command Filters list page.
    • List Type:
      white or black
      Use "white: for a Whitelist, which is a list of commands that a user may use. All other commands are prohibited.
      Use "black" for a Blacklist, which is a list of commands that a user may not use. All other commands are permitted.
    • Keyword:
      Enter the command or command subset to be restricted. Multiple commands for the same list are designated by multiple CSV line items using the same List Name.
    • Alert:
      t or f for true or false
      If true, immediately notify the monitoring administrator of any use of this command.
    • Block
      :
      t or f for true or false
      If true, this command is canceled and prevented from executing.
    • Regexp
      :
      t or f for true or false
      If true, the Keyword field is evaluated as a regular expression when matching a command. If there is a match, apply any Alert or Block specified.
  5. Use the
    Choose File
    button to select the completed CSV file for import and select
    Import Command Filters
    to upload.
    The list is now effective, and available for inspection or editing on the
    Command Filters
    list page.
If you include a blacklist line in the CSV file with the same key fields (
Type
List Name
List Type
, and 
Keyword
) found in an earlier line, the latter line replaces the earlier line. The values that are applied for 
Alert
Block
, and 
Regexp
 are the last values read, or the values in the last key-matching line.
Export Command Filters
Use the
Export Command Filters
button to export existing SFLs to a CSV file. These lists can be stored, modified, and imported or reimported later.