IBM Support

IJ10376: NAME CHANGE MADE TO A NETWORK HIERARCHY OBJECT IS NOT REFLECTED IN THE QRADAR ADMIN -> SECURITY PROFILES

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as Permanent restriction.

Error description

  • It has been identified that Admin -> Security Profiles
    Management does not reflect name changes made in the Assigned
    network under the Network Hierarchy.
    For example:
    1. Navigate to Admin -> Network Hierarchy -> Server_Network.
    Create new server network e.g. Test_servers, CIDR 192.168.0.1/24
    2. Navigate to Admin -> Security Profiles. Create a new
    security profile and name it e.g. Test_Security_Profile.
        Under Networks tab -> Assigned Networks, assign the network
    Test_servers to it.  Assign any log source to it.
    3. Deploy changes.
    4. Navigate to Admin -> Network Hierarchy -> Server_Network.
    Edit Test_servers name to Test_servers_NEW
    5. Deploy changes.
    6. Navigate to Admin -> Security Profiles. Select the
    Test_Security_Profile and go to Networks tab.
    Expected Result: The name under Assigned Networks should be
    Test_servers_NEW
    Actual Result: Test_servers is shown in the Assigned Networks.
    The name did not get changed to Test_servers_NEW.
    

Local fix

  • No workaround available.
    

Problem summary

  • Permanent restriction, problem was found but will not be fixed
    for now. We are working on a long-term plan of
    rewriting/refactoring the authentication modules to resolve
    security and usability issues. We will update documentations to
    explain the extra steps needed when renaming a Network Hierarchy
    name.
    

Problem conclusion

  • Permanent restriction, problem was found but will not be fixed
    for now. We are working on a long-term plan of
    rewriting/refactoring the authentication modules to resolve
    security and usability issues. We will update documentations to
    explain the extra steps needed when renaming a Network Hierarchy
    name.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IJ10376

  • Reported component name

    QRADAR SOFTWARE

  • Reported component ID

    5725QRDSW

  • Reported release

    728

  • Status

    CLOSED PRS

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-10-09

  • Closed date

    2020-01-10

  • Last modified date

    2020-01-10

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

[{"Business Unit":{"code":"BU048","label":"IBM Software"}, "Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"728","Edition":""}]

Document Information

Modified date:
10 January 2020