Event Explorer 4.0.3 Q&A

[SandraCarielli]

Event Explorer 4.0.3 was released today.  Any questions?  Post here!

[RSAAdmin]

EE 4.0.3 mentions NICP authentication support and the release notes direct you to the 4.0 SP4 release notes (not listed under the main enVision documentation folder on SCOL, by the way). The SP4 release notes do not contain the word NICP. What is this feature? David

[RSAAdmin]

It is explained in the release notes for SP4 Patch 2 which I think was released today or yesterday.

Paul

[RSAAdmin]

Interesting. Reading through the patch notes, I'm still not entirely clear what uses the NIC Protocol to connect. Is this just for multi-site and EE communications? What is the risk involved with the previous (NIC0) version of the protocol? David

[RSAAdmin]

From reading the patch notes, EE connections use NICP to connect to the NIC server service which could be on a DSRV or on the single appliance site.  On a multi-appliance site the separate appliances also use NICP to connect to the NIC Server service on the DSRV.  NICP0 would accept non-authenticated connections and most times when a critical service allows itself to be access without authentication there is an inherent risk.

Again, this is just from what I read in the document.

Paul

[SergeyBarbashi1]

Hi,

After installing Event Explorer 4.0.3, I can't run it, Event Explorer receives next message:

"An error has occured. See the log file

C:\Users\klopkov\EventExplorer\.metadata\.log"

I'm attaching this ".log" file.

After that I've tested 4.0.2, 4.0.1 version but the result is the same.

OS - Windows 7.

Does anybody had the same problem?

[RSAAdmin]

When you launch the Event Explorer desktop icon, are you running it as administrator?

George

[RSAAdmin]

Understood. It would be helpful to have more explanation of this from RSA directly. Specifically, what can be done over this protocol? Could someone connect to a non-authenticated NICP session and retrieve all data? Can data be modified or submitted via this protocol? Is data encrypted over this protocol (either v0 or the new v1)? This is a very short and unhelpful write up (by RSA) for what has the potential to be a serious vulnerability. David

[SergeyBarbashi1]

George,

Yes, I'm runnig it as administrator.

[RSAAdmin]

I just installed (upgrading from 4.0.2 to 4.0.3) on a Windows 7 Desktop and am not having an issue with running it.  Your best option would probably be to open up a support case. 

Paul