Troubleshooting
Problem
Selecting one of the entries in the IBM Spectrum Control Reports menu fails to launch to IBM Cognos due to an error when Cognos Application Firewall and third party XSS checking is enabled. The generated URL is invalid.
Symptom
DPR-ERR-2079 Firewall Security Rejection. Your request was rejected by the security firewall. Your request was rejected by the security firewall. CAF rejection details are available in the log.
 |
Cause
Cognos Application Firewall (CAF) validation and third party XSS checking are enabled in the IBM Cognos Configuration.
The URLs generated by Spectrum Control to connect with Cognos do not support CAF validation and XSS checking.
Resolving The Problem
If Jazz for Service Management 1.1.0.3 and Tivoli Common Reporting 3.1.0.2 were installed using the installation image included in the Spectrum Control bundles, these options will be set to false and disabled by default, allowing the generated URLs to work. If you enabled CAF validation and XSS, disable them and restart the Jazz for Service Management services to make it work again. See APAR IT23433.
If you're finding that CAF validation and XSS checking were enabled by default, check the versions of Jazz for Service Management and Tivoli Common Reporting that you are using. Newer versions might have it enabled by default. Only the versions included with the Spectrum Control bundles should be used. Reinstall with the correct versions to resolve.
Check the installed versions using the tag files found in the following location:
\IBM\JazzSM\properties\version
Was this topic helpful?
Document Information
Modified date:
22 February 2022
UID
swg22011724