1 2 Previous Next 10 Replies Latest reply: Jul 23, 2013 9:52 PM by btlyric RSS

    Expected Rule Traversal When Stop Cycle Invoked

    btlyric

      If you have a rule in Global that invokes Stop Cycle, what cycles should you expect to see in Rule Tracing?

       

      Asking because I have seen two different incarnations from the same source IP.

       

      1) Request, Logging

      2) Request, Response, Logging

       

      In the case of #2, even though rule tracing stated that the Stop Cycle rule had been invoked, it then logged the full URL for the transaction. There was also, in one case, a 10 second delay between when Response cycle finished and Logging cycle started. In case #1, system logged the https://<URL.Host> and nothing additional.

       

      Restarting the MWG services changed poorly performing #2 into decently performing #1.

       

      Any ideas?

        • 1. Re: Expected Rule Traversal When Stop Cycle Invoked
          Jon Scholten

          Hi bylyric,

           

          When testing with HTTPS you may see results which may not be completley understood. I would recommend testing with HTTP to start and then deviating from there.

           

          With HTTPS there will be one trace purley for the SSL connection establishment (CONNECT and CERTVERIFY), and another for the transactions in the tunnel. This is why you may have varying results as new connections will be established and you will get new files etc...

           

          The SSL connection establishment will only show Request based cycles. Where as the tunnel will show request, response and whatever else.

           

          Best,

          Jon

          • 2. Re: Expected Rule Traversal When Stop Cycle Invoked
            btlyric

            Please correct me if I'm wrong, but if you do Stop Cycle prior to entering SSL Scanner, the connection is not intercepted by the SSL Scanner.

             

            What should I expect to see when Stop Cycle is executed before SSL Scanner is invoked?

            • 3. Re: Expected Rule Traversal When Stop Cycle Invoked
              Jon Scholten

              Hi btlyric,

               

              This assumes you have correctly stopped the cycle ;-)

               

              In transparent setups etc.. there are situations where you may think you are whitelisting something, but it might not actually be working.

               

              But to answer your question, if there is a stop cycle, then you should see no more rules executed after the action takes place. As for SSL there should not be a tunneled connection if the "SSL connection establishment" has taken place.

               

              Best,

              Jon

              • 4. Re: Expected Rule Traversal When Stop Cycle Invoked
                Jon Scholten

                Please let me know if you feel like I am off track from your original concern but I think it may be related.

                 

                Here is an example of what I mean.

                 

                Rule trace of SSL connection establishment. You will see that the Command.Name in the top properties is CONNECT. The shown cycles are Request and Request 2. In "Request" the command name is CONNECT. In "Request 2" the Command.Name is "CERTVERIFY".

                 

                retrace1_0_2013-07-09_171358.png retrace1_1cycles_2013-07-09_171358.png retrace1_2connect_2013-07-09_171358.png retrace1_3certverify_2013-07-09_171358.png

                 

                In the rule trace in the tunnel, you see that the path information is included (in my case it was simply "/"), and the Command.Name is GET.

                 

                retrace2_2013-07-09_171424.png

                 

                Let me know if this helps,

                 

                Best,

                Jon

                • 5. Re: Expected Rule Traversal When Stop Cycle Invoked
                  Jon Scholten

                  This is what it would look like if I used stop cycle:

                   

                  retrace3_globalwhitelist_2013-07-09_172313.png

                  • 6. Re: Expected Rule Traversal When Stop Cycle Invoked
                    btlyric

                    If I hadn't correctly stopped the cycle, restarting the mwg services shouldn't have resulted in a different behavior...

                     

                    However, I probably failed to adequately convey what I was asking about with the original question.

                     

                    The logic for the rule set is this:

                     

                    Global

                    - SSL Bypass: If URL.Host is in <list of domains> OR URL.DestinationIP is in <list of IPs>, Stop Cycle

                    SSL Scanner

                    ...

                     

                    Assuming that niftysslenableddomain.com is defined in one of the two lists and the Stop Cycle action is executed, since we do not go into SSL Scanner, this is what I would expect to see in rule trace data:

                     

                        <trace_info url="https://niftysslenableddomain.com"/>

                     

                    ...snipped for brevity...

                     

                                <node id="958983948418272" string="Bypass SSL" duration="0" enterTime="1373305217.121" node_type="rule">
                                        <node string="Executed action: allow, kStopCycle" node_type="executed_action"/>

                     

                        <node string="Logging" duration="0.005" enterTime="1373305222.86" node_type="cycle">

                     

                    What I wouldn't expect to see is this:

                     

                        <trace_info url="https://niftysslenableddomain.com/ServiceRequestTool/scm/mgmt/asset/aues/2_4/xwt/themes/reboot2/images/blank.gif"/>

                     

                    ...snipped for brevity...

                     

                         <node id="958983948418272" string="Bypass SSL" duration="0" enterTime="1373304398.363" node_type="rule">
                               <node string="Executed action: allow, kStopCycle" node_type="executed_action"/>

                     

                    ...snipped for brevity...

                     

                        <node string="Response" duration="0.049" enterTime="1373304400.782" node_type="cycle">

                     

                    ...snipped for brevity...

                     

                        <node string="Logging" duration="0.005" enterTime="1373304400.833" node_type="cycle">

                     

                    ...snipped for brevity...

                     

                    I didn't expect to see the path information or the Response cycle so my original question was an attempt to confirm that if Stop Cycle executes prior to SSL Scanner, the expected behavior is that which I expected to see. Which I think? you did.

                     

                     

                     

                     

                     

                     

                     

                     

                     

                     

                     

                     

                     

                     

                     

                     

                     

                     

                     

                     

                     

                     

                    <?xml version='1.0' encoding='UTF-8'?>
                    <trace>
                        <trace_info url="https://tools.cisco.com"/>
                        <node string="Request" duration="0.017" enterTime="1373305217.104" node_type="cycle">
                            <node string="Debug" duration="0.001" enterTime="1373305217.104" node_type="rulegroup">
                                <node id="958983948409524" string="Rule Tracing Engine for MS/Aruba" duration="0" enterTime="1373305217.104" node_type="rule">
                                    <node string="Executed action: allow, kContinue" node_type="executed_action"/>
                                    <node string="com.scur.engine.system.enableruleenginetracing: " duration="0" enterTime="1373305217.104" node_type="event">
                                    </node> <!--event-->
                                </node> <!--rule 'Rule Tracing Engine for MS/Aruba'-->
                                <node id="958983948414266" string="PD Storage Testing" duration="0" enterTime="1373305217.104" node_type="rule">
                                    <node string="Executed action: allow, kContinue" node_type="executed_action"/>
                                    <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Security Testing Ranges, Type: IPRangeList)" duration="0" enterTime="1373305217.104" node_type="condition">
                                        <node string="Result: true" node_type="result"/>
                                        <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Security Testing Ranges, Type: IPRangeList)" duration="0" enterTime="1373305217.104" node_type="condition">
                                            <node string="Result: true" node_type="result"/>
                                            <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.104" node_type="property"/>
                                            <list name="Security Testing Ranges" type="IPRangeList"/>
                                            <info name="Properties">
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.104" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <info name="Properties">
                                            <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.104" node_type="property"/>
                                        </info>
                                    </node> <!--condition-->
                                    <node string="setaction: Variable(958983948414288, Long) :=  Property(com.scur.engine.bucketmap.getuservarnumber, Long[8922834075]) Property(com.scur.engine.system.body.size, Long[0])" duration="0" enterTime="1373305217.104" node_type="event">
                                        <node string="Variable(958983948414288, Long)" node_type="set_action_target"/>
                                        <node type="Long" value="8922834075" string="com.scur.engine.bucketmap.getuservarnumber" duration="0" enterTime="1373305217.104" node_type="property">
                                            <node node_type="parameter_list">
                                                <node type="String" value="TrafficVolume" node_type="temporary_variable"/>
                                            </node> <!--parameter-->
                                            <node id="com.scur.engine.bucketmap.4512" string="Default" node_type="configuration"/>
                                        </node> <!--property-->
                                        <node type="Long" value="0" string="com.scur.engine.system.body.size" duration="0" enterTime="1373305217.104" node_type="property"/>
                                    </node> <!--event-->
                                    <node string="function call: String[TrafficVolume] Variable(958983948414288, Long[8922834075])" duration="0" enterTime="1373305217.104" node_type="event">
                                        <node type="String" value="TrafficVolume" node_type="temporary_variable"/>
                                        <node name="958983948414288" type="Long" value="8922834075" node_type="variable"/>
                                    </node> <!--event-->
                                </node> <!--rule 'PD Storage Testing'-->
                                <node string="PD Storage Display" duration="0.001" enterTime="1373305217.104" node_type="rulegroup">
                                    <node string="com.scur.engine.system.url.path operator matches Regex[*/mwg-internal/*/pdstorage] OR com.scur.engine.system.url.host operator equals com.scur.engine.system.hostname OR com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring term (Not evaluated part: ) OR com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList) term (Not evaluated part: ) AND (Not evaluated part: ) AND (Not evaluated part: ) term (Not evaluated part: )" duration="0.001" enterTime="1373305217.104" node_type="condition">
                                        <node string="Result: false" node_type="result"/>
                                        <node string="com.scur.engine.system.url.path operator matches Regex[*/mwg-internal/*/pdstorage]" duration="0" enterTime="1373305217.104" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node type="String" value="" string="com.scur.engine.system.url.path" duration="0" enterTime="1373305217.104" node_type="property"/>
                                            <node type="Regex" value="*/mwg-internal/*/pdstorage" node_type="temporary_variable"/>
                                            <info name="Properties">
                                                <node type="String" value="" string="com.scur.engine.system.url.path" duration="0" enterTime="1373305217.104" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <node string="com.scur.engine.system.url.host operator equals com.scur.engine.system.hostname OR com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring term (Not evaluated part: ) OR com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList) term (Not evaluated part: ) AND (Not evaluated part: ) AND (Not evaluated part: ) term (Not evaluated part: )" duration="0.001" enterTime="1373305217.104" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.url.host operator equals com.scur.engine.system.hostname OR com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring term (Not evaluated part: ) OR com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList) term (Not evaluated part: ) AND (Not evaluated part: ) AND (Not evaluated part: )" duration="0.001" enterTime="1373305217.104" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node string="com.scur.engine.system.url.host operator equals com.scur.engine.system.hostname OR com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring term (Not evaluated part: ) OR com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList) term (Not evaluated part: ) AND (Not evaluated part: )" duration="0.001" enterTime="1373305217.104" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node string="com.scur.engine.system.url.host operator equals com.scur.engine.system.hostname OR com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring term (Not evaluated part: ) OR com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList) term (Not evaluated part: )" duration="0.001" enterTime="1373305217.104" node_type="condition">
                                                        <node string="Result: false" node_type="result"/>
                                                        <node string="com.scur.engine.system.url.host operator equals com.scur.engine.system.hostname" duration="0.001" enterTime="1373305217.104" node_type="condition">
                                                            <node string="Result: false" node_type="result"/>
                                                            <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0.001" enterTime="1373305217.104" node_type="property"/>
                                                            <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                            <info name="Properties">
                                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0.001" enterTime="1373305217.104" node_type="property"/>
                                                                <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                            </info>
                                                        </node> <!--condition-->
                                                        <node string="com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring term (Not evaluated part: )" duration="0" enterTime="1373305217.105" node_type="condition">
                                                            <node string="Result: false" node_type="result"/>
                                                            <node string="com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.105" node_type="condition">
                                                                <node string="Result: false" node_type="result"/>
                                                                <node string="com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.105" node_type="condition">
                                                                    <node string="Result: false" node_type="result"/>
                                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                                    <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.105" node_type="property">
                                                                        <node node_type="parameter_list">
                                                                            <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                                        </node> <!--parameter-->
                                                                    </node> <!--property-->
                                                                    <info name="Properties">
                                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                                        <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                                        <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                                    </info>
                                                                </node> <!--condition-->
                                                                <info name="Properties">
                                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                                    <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                                    <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                                </info>
                                                            </node> <!--condition-->
                                                            <info name="Properties">
                                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                                <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                                <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                            </info>
                                                        </node> <!--condition-->
                                                        <node string="com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList) term (Not evaluated part: )" duration="0" enterTime="1373305217.105" node_type="condition">
                                                            <node string="Result: false" node_type="result"/>
                                                            <node string="com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList)" duration="0" enterTime="1373305217.105" node_type="condition">
                                                                <node string="Result: false" node_type="result"/>
                                                                <node string="com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList)" duration="0" enterTime="1373305217.105" node_type="condition">
                                                                    <node string="Result: false" node_type="result"/>
                                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                                    <list name="All Proxies" type="RegexList"/>
                                                                    <info name="Properties">
                                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                                    </info>
                                                                </node> <!--condition-->
                                                                <info name="Properties">
                                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                                </info>
                                                            </node> <!--condition-->
                                                            <info name="Properties">
                                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                            </info>
                                                        </node> <!--condition-->
                                                        <info name="Properties">
                                                            <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0.001" enterTime="1373305217.104" node_type="property"/>
                                                            <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                            <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                            <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                        </info>
                                                    </node> <!--condition-->
                                                    <info name="Properties">
                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0.001" enterTime="1373305217.104" node_type="property"/>
                                                        <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                        <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                        <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <info name="Properties">
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0.001" enterTime="1373305217.104" node_type="property"/>
                                                    <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                    <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                    <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0.001" enterTime="1373305217.104" node_type="property"/>
                                                <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.105" node_type="property"/>
                                                <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.105" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <info name="Properties">
                                            <node type="String" value="" string="com.scur.engine.system.url.path" duration="0" enterTime="1373305217.104" node_type="property"/>
                                            <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0.001" enterTime="1373305217.104" node_type="property"/>
                                            <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.105" node_type="property"/>
                                            <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.105" node_type="property"/>
                                            <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.105" node_type="property"/>
                                        </info>
                                    </node> <!--condition-->
                                </node> <!--rule set 'PD Storage Display'-->
                            </node> <!--rule set 'Debug'-->
                            <node string="Authentication" duration="0" enterTime="1373305217.105" node_type="rulegroup">
                                <node string="const condition always" duration="0" enterTime="1373305217.105" node_type="condition">
                                    <node string="Result: true" node_type="result"/>
                                </node> <!--condition-->
                                <node string="McAfee Client Proxy" duration="0" enterTime="1373305217.105" node_type="rulegroup">
                                    <node string="com.scur.engine.system.proxy.port operator equals Long[80] AND (Not evaluated part: )" duration="0" enterTime="1373305217.105" node_type="condition">
                                        <node string="Result: false" node_type="result"/>
                                        <node string="com.scur.engine.system.proxy.port operator equals Long[80]" duration="0" enterTime="1373305217.105" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node type="Long" value="9227" string="com.scur.engine.system.proxy.port" duration="0" enterTime="1373305217.105" node_type="property"/>
                                            <node type="Long" value="80" node_type="temporary_variable"/>
                                            <info name="Properties">
                                                <node type="Long" value="9227" string="com.scur.engine.system.proxy.port" duration="0" enterTime="1373305217.105" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <info name="Properties">
                                            <node type="Long" value="9227" string="com.scur.engine.system.proxy.port" duration="0" enterTime="1373305217.105" node_type="property"/>
                                        </info>
                                    </node> <!--condition-->
                                </node> <!--rule set 'McAfee Client Proxy'-->
                            </node> <!--rule set 'Authentication'-->
                            <node string="MWG" duration="0.001" enterTime="1373305217.105" node_type="rulegroup">
                                <node string="const condition always" duration="0" enterTime="1373305217.105" node_type="condition">
                                    <node string="Result: true" node_type="result"/>
                                </node> <!--condition-->
                                <node id="958983948418179" string="Remove Via and X-Forwarded-For" duration="0.001" enterTime="1373305217.105" node_type="rule">
                                    <node string="Executed action: allow, kContinue" node_type="executed_action"/>
                                    <node string="const condition always" duration="0" enterTime="1373305217.106" node_type="condition">
                                        <node string="Result: true" node_type="result"/>
                                    </node> <!--condition-->
                                    <node string="enableID: " duration="0" enterTime="1373305217.106" node_type="event">
                                    </node> <!--event-->
                                    <node string="function call: String[X-Forwarded-For]" duration="0" enterTime="1373305217.106" node_type="event">
                                        <node type="String" value="X-Forwarded-For" node_type="temporary_variable"/>
                                    </node> <!--event-->
                                </node> <!--rule 'Remove Via and X-Forwarded-For'-->
                                <node id="958983948418209" string="Bypass All MWG Admin" duration="0" enterTime="1373305217.106" node_type="rule">
                                    <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Bypass All MWG Admin, Type: IPRangeList)" duration="0" enterTime="1373305217.106" node_type="condition">
                                        <node string="Result: false" node_type="result"/>
                                        <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Bypass All MWG Admin, Type: IPRangeList)" duration="0" enterTime="1373305217.106" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            <list name="Bypass All MWG Admin" type="IPRangeList"/>
                                            <info name="Properties">
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <info name="Properties">
                                            <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                        </info>
                                    </node> <!--condition-->
                                </node> <!--rule 'Bypass All MWG Admin'-->
                                <node string="URL Checker" duration="0" enterTime="1373305217.106" node_type="rulegroup">
                                    <node string="com.scur.engine.system.url.path operator matches Regex[*/mwg-internal/*/checkurl] OR com.scur.engine.system.url.host operator equals com.scur.engine.system.hostname OR com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring term (Not evaluated part: ) OR com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList) term (Not evaluated part: ) AND (Not evaluated part: ) AND (Not evaluated part: ) term (Not evaluated part: )" duration="0" enterTime="1373305217.106" node_type="condition">
                                        <node string="Result: false" node_type="result"/>
                                        <node string="com.scur.engine.system.url.path operator matches Regex[*/mwg-internal/*/checkurl]" duration="0" enterTime="1373305217.106" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node type="String" value="" string="com.scur.engine.system.url.path" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            <node type="Regex" value="*/mwg-internal/*/checkurl" node_type="temporary_variable"/>
                                            <info name="Properties">
                                                <node type="String" value="" string="com.scur.engine.system.url.path" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <node string="com.scur.engine.system.url.host operator equals com.scur.engine.system.hostname OR com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring term (Not evaluated part: ) OR com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList) term (Not evaluated part: ) AND (Not evaluated part: ) AND (Not evaluated part: ) term (Not evaluated part: )" duration="0" enterTime="1373305217.106" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.url.host operator equals com.scur.engine.system.hostname OR com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring term (Not evaluated part: ) OR com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList) term (Not evaluated part: ) AND (Not evaluated part: ) AND (Not evaluated part: )" duration="0" enterTime="1373305217.106" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node string="com.scur.engine.system.url.host operator equals com.scur.engine.system.hostname OR com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring term (Not evaluated part: ) OR com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList) term (Not evaluated part: ) AND (Not evaluated part: )" duration="0" enterTime="1373305217.106" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node string="com.scur.engine.system.url.host operator equals com.scur.engine.system.hostname OR com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring term (Not evaluated part: ) OR com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList) term (Not evaluated part: )" duration="0" enterTime="1373305217.106" node_type="condition">
                                                        <node string="Result: false" node_type="result"/>
                                                        <node string="com.scur.engine.system.url.host operator equals com.scur.engine.system.hostname" duration="0" enterTime="1373305217.106" node_type="condition">
                                                            <node string="Result: false" node_type="result"/>
                                                            <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                            <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                            <info name="Properties">
                                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                            </info>
                                                        </node> <!--condition-->
                                                        <node string="com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring term (Not evaluated part: )" duration="0" enterTime="1373305217.106" node_type="condition">
                                                            <node string="Result: false" node_type="result"/>
                                                            <node string="com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="condition">
                                                                <node string="Result: false" node_type="result"/>
                                                                <node string="com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="condition">
                                                                    <node string="Result: false" node_type="result"/>
                                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                    <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="property">
                                                                        <node node_type="parameter_list">
                                                                            <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                        </node> <!--parameter-->
                                                                    </node> <!--property-->
                                                                    <info name="Properties">
                                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                        <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                        <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                    </info>
                                                                </node> <!--condition-->
                                                                <info name="Properties">
                                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                    <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                    <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                </info>
                                                            </node> <!--condition-->
                                                            <info name="Properties">
                                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                            </info>
                                                        </node> <!--condition-->
                                                        <node string="com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList) term (Not evaluated part: )" duration="0" enterTime="1373305217.106" node_type="condition">
                                                            <node string="Result: false" node_type="result"/>
                                                            <node string="com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList)" duration="0" enterTime="1373305217.106" node_type="condition">
                                                                <node string="Result: false" node_type="result"/>
                                                                <node string="com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList)" duration="0" enterTime="1373305217.106" node_type="condition">
                                                                    <node string="Result: false" node_type="result"/>
                                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                    <list name="All Proxies" type="RegexList"/>
                                                                    <info name="Properties">
                                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                    </info>
                                                                </node> <!--condition-->
                                                                <info name="Properties">
                                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                </info>
                                                            </node> <!--condition-->
                                                            <info name="Properties">
                                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                            </info>
                                                        </node> <!--condition-->
                                                        <info name="Properties">
                                                            <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                            <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                            <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                            <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                        </info>
                                                    </node> <!--condition-->
                                                    <info name="Properties">
                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                        <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                        <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                        <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <info name="Properties">
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                    <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                    <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                    <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <info name="Properties">
                                            <node type="String" value="" string="com.scur.engine.system.url.path" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                        </info>
                                    </node> <!--condition-->
                                </node> <!--rule set 'URL Checker'-->
                                <node string="Version Checker" duration="0" enterTime="1373305217.106" node_type="rulegroup">
                                    <node string="com.scur.engine.system.url.path operator matches Regex[*/mwg-internal/*/checkversion] OR com.scur.engine.system.url.host operator equals com.scur.engine.system.hostname OR com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring term (Not evaluated part: ) OR com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList) term (Not evaluated part: ) AND (Not evaluated part: ) AND (Not evaluated part: ) term (Not evaluated part: )" duration="0" enterTime="1373305217.106" node_type="condition">
                                        <node string="Result: false" node_type="result"/>
                                        <node string="com.scur.engine.system.url.path operator matches Regex[*/mwg-internal/*/checkversion]" duration="0" enterTime="1373305217.106" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node type="String" value="" string="com.scur.engine.system.url.path" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            <node type="Regex" value="*/mwg-internal/*/checkversion" node_type="temporary_variable"/>
                                            <info name="Properties">
                                                <node type="String" value="" string="com.scur.engine.system.url.path" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <node string="com.scur.engine.system.url.host operator equals com.scur.engine.system.hostname OR com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring term (Not evaluated part: ) OR com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList) term (Not evaluated part: ) AND (Not evaluated part: ) AND (Not evaluated part: ) term (Not evaluated part: )" duration="0" enterTime="1373305217.106" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.url.host operator equals com.scur.engine.system.hostname OR com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring term (Not evaluated part: ) OR com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList) term (Not evaluated part: ) AND (Not evaluated part: ) AND (Not evaluated part: )" duration="0" enterTime="1373305217.106" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node string="com.scur.engine.system.url.host operator equals com.scur.engine.system.hostname OR com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring term (Not evaluated part: ) OR com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList) term (Not evaluated part: ) AND (Not evaluated part: )" duration="0" enterTime="1373305217.106" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node string="com.scur.engine.system.url.host operator equals com.scur.engine.system.hostname OR com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring term (Not evaluated part: ) OR com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList) term (Not evaluated part: )" duration="0" enterTime="1373305217.106" node_type="condition">
                                                        <node string="Result: false" node_type="result"/>
                                                        <node string="com.scur.engine.system.url.host operator equals com.scur.engine.system.hostname" duration="0" enterTime="1373305217.106" node_type="condition">
                                                            <node string="Result: false" node_type="result"/>
                                                            <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                            <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                            <info name="Properties">
                                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                            </info>
                                                        </node> <!--condition-->
                                                        <node string="com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring term (Not evaluated part: )" duration="0" enterTime="1373305217.106" node_type="condition">
                                                            <node string="Result: false" node_type="result"/>
                                                            <node string="com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="condition">
                                                                <node string="Result: false" node_type="result"/>
                                                                <node string="com.scur.engine.system.url.host operator equals com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="condition">
                                                                    <node string="Result: false" node_type="result"/>
                                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                    <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="property">
                                                                        <node node_type="parameter_list">
                                                                            <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                        </node> <!--parameter-->
                                                                    </node> <!--property-->
                                                                    <info name="Properties">
                                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                        <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                        <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                    </info>
                                                                </node> <!--condition-->
                                                                <info name="Properties">
                                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                    <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                    <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                </info>
                                                            </node> <!--condition-->
                                                            <info name="Properties">
                                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                            </info>
                                                        </node> <!--condition-->
                                                        <node string="com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList) term (Not evaluated part: )" duration="0" enterTime="1373305217.106" node_type="condition">
                                                            <node string="Result: false" node_type="result"/>
                                                            <node string="com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList)" duration="0" enterTime="1373305217.106" node_type="condition">
                                                                <node string="Result: false" node_type="result"/>
                                                                <node string="com.scur.engine.system.url.host operator matches in list List(Name: All Proxies, Type: RegexList)" duration="0" enterTime="1373305217.106" node_type="condition">
                                                                    <node string="Result: false" node_type="result"/>
                                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                    <list name="All Proxies" type="RegexList"/>
                                                                    <info name="Properties">
                                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                    </info>
                                                                </node> <!--condition-->
                                                                <info name="Properties">
                                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                </info>
                                                            </node> <!--condition-->
                                                            <info name="Properties">
                                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                            </info>
                                                        </node> <!--condition-->
                                                        <info name="Properties">
                                                            <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                            <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                            <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                            <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                        </info>
                                                    </node> <!--condition-->
                                                    <info name="Properties">
                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                        <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                        <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                        <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <info name="Properties">
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                    <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                    <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                    <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <info name="Properties">
                                            <node type="String" value="" string="com.scur.engine.system.url.path" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            <node type="String" value="10.62.9.21" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            <node type="IP" value="10.62.9.21" string="com.scur.engine.system.proxy.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                        </info>
                                    </node> <!--condition-->
                                </node> <!--rule set 'Version Checker'-->
                                <node string="WhatProxy" duration="0" enterTime="1373305217.106" node_type="rulegroup">
                                    <node string="com.scur.engine.system.url.path operator matches Regex[*/WhatBAEProxy] AND (Not evaluated part: )" duration="0" enterTime="1373305217.106" node_type="condition">
                                        <node string="Result: false" node_type="result"/>
                                        <node string="com.scur.engine.system.url.path operator matches Regex[*/WhatBAEProxy]" duration="0" enterTime="1373305217.106" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node type="String" value="" string="com.scur.engine.system.url.path" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            <node type="Regex" value="*/WhatBAEProxy" node_type="temporary_variable"/>
                                            <info name="Properties">
                                                <node type="String" value="" string="com.scur.engine.system.url.path" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <info name="Properties">
                                            <node type="String" value="" string="com.scur.engine.system.url.path" duration="0" enterTime="1373305217.106" node_type="property"/>
                                        </info>
                                    </node> <!--condition-->
                                </node> <!--rule set 'WhatProxy'-->
                            </node> <!--rule set 'MWG'-->
                            <node string="McAfee Rules" duration="0.003" enterTime="1373305217.106" node_type="rulegroup">
                                <node string="const condition always" duration="0" enterTime="1373305217.106" node_type="condition">
                                    <node string="Result: true" node_type="result"/>
                                </node> <!--condition-->
                                <node string="SiteAdvisor Stand Down" duration="0" enterTime="1373305217.106" node_type="rulegroup">
                                    <node string="com.scur.engine.system.url operator matches Regex[*gateway.siteadvisor.com*]" duration="0" enterTime="1373305217.106" node_type="condition">
                                        <node string="Result: false" node_type="result"/>
                                        <node string="com.scur.engine.system.url operator matches Regex[*gateway.siteadvisor.com*]" duration="0" enterTime="1373305217.106" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            <node type="Regex" value="*gateway.siteadvisor.com*" node_type="temporary_variable"/>
                                            <info name="Properties">
                                                <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <info name="Properties">
                                            <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url" duration="0" enterTime="1373305217.106" node_type="property"/>
                                        </info>
                                    </node> <!--condition-->
                                </node> <!--rule set 'SiteAdvisor Stand Down'-->
                                <node string="ePO Requests" duration="0" enterTime="1373305217.106" node_type="rulegroup">
                                    <node string="com.scur.engine.system.command.name operator equals String[CONNECT]" duration="0" enterTime="1373305217.106" node_type="condition">
                                        <node string="Result: true" node_type="result"/>
                                        <node string="com.scur.engine.system.command.name operator equals String[CONNECT]" duration="0" enterTime="1373305217.106" node_type="condition">
                                            <node string="Result: true" node_type="result"/>
                                            <node type="String" value="CONNECT" string="com.scur.engine.system.command.name" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            <node type="String" value="CONNECT" node_type="temporary_variable"/>
                                            <info name="Properties">
                                                <node type="String" value="CONNECT" string="com.scur.engine.system.command.name" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <info name="Properties">
                                            <node type="String" value="CONNECT" string="com.scur.engine.system.command.name" duration="0" enterTime="1373305217.106" node_type="property"/>
                                        </info>
                                    </node> <!--condition-->
                                    <node id="16985" string="ePO Request Bypass" duration="0" enterTime="1373305217.106" node_type="rule">
                                        <node string="com.scur.engine.system.url.host operator equals String[127.0.0.1] OR com.scur.engine.system.url.host operator equals String[[::1]] term (Not evaluated part: )" duration="0" enterTime="1373305217.106" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.url.host operator equals String[127.0.0.1]" duration="0" enterTime="1373305217.106" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                <node type="String" value="127.0.0.1" node_type="temporary_variable"/>
                                                <info name="Properties">
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <node string="com.scur.engine.system.url.host operator equals String[[::1]] term (Not evaluated part: )" duration="0" enterTime="1373305217.106" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node string="com.scur.engine.system.url.host operator equals String[[::1]]" duration="0" enterTime="1373305217.106" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node string="com.scur.engine.system.url.host operator equals String[[::1]]" duration="0" enterTime="1373305217.106" node_type="condition">
                                                        <node string="Result: false" node_type="result"/>
                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                        <node type="String" value="[::1]" node_type="temporary_variable"/>
                                                        <info name="Properties">
                                                            <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                        </info>
                                                    </node> <!--condition-->
                                                    <info name="Properties">
                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <info name="Properties">
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.106" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'ePO Request Bypass'-->
                                </node> <!--rule set 'ePO Requests'-->
                                <node string="Transaction ID" duration="0.003" enterTime="1373305217.106" node_type="rulegroup">
                                    <node string="const condition always" duration="0" enterTime="1373305217.106" node_type="condition">
                                        <node string="Result: true" node_type="result"/>
                                    </node> <!--condition-->
                                    <node id="958983948404288" string="Generate ID" duration="0.003" enterTime="1373305217.106" node_type="rule">
                                        <node string="Executed action: allow, kContinue" node_type="executed_action"/>
                                        <node string="const condition always" duration="0" enterTime="1373305217.106" node_type="condition">
                                            <node string="Result: true" node_type="result"/>
                                        </node> <!--condition-->
                                        <node string="setaction: Variable(958983948399099, String) :=  Property(com.scur.engine.stringfilter.number.tostring, String[1373305217]) Property(com.scur.engine.stringfilter.string.replaceall, String[1060108177173371458])" duration="0.003" enterTime="1373305217.106" node_type="event">
                                            <node string="Variable(958983948399099, String)" node_type="set_action_target"/>
                                            <node type="String" value="1373305217" string="com.scur.engine.stringfilter.number.tostring" duration="0" enterTime="1373305217.106" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="Long" value="1373305217" string="com.scur.engine.datetimefilter.datetime.tonumber" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value="1060108177173371458" string="com.scur.engine.stringfilter.string.replaceall" duration="0" enterTime="1373305217.109" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="10.60.108.177173.37.145.8" string="com.scur.engine.stringfilter.string.concat" duration="0" enterTime="1373305217.106" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="String" value="10.60.108.177" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="property">
                                                                <node node_type="parameter_list">
                                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                </node> <!--parameter-->
                                                            </node> <!--property-->
                                                            <node type="String" value="173.37.145.8" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305217.106" node_type="property">
                                                                <node node_type="parameter_list">
                                                                    <node type="IP" value="173.37.145.8" string="com.scur.engine.system.destination.ip" duration="0" enterTime="1373305217.106" node_type="property"/>
                                                                </node> <!--parameter-->
                                                            </node> <!--property-->
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="." node_type="temporary_variable"/>
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                        </node> <!--event-->
                                    </node> <!--rule 'Generate ID'-->
                                </node> <!--rule set 'Transaction ID'-->
                            </node> <!--rule set 'McAfee Rules'-->
                            <node string="Global" duration="0.012" enterTime="1373305217.109" node_type="rulegroup">
                                <node string="const condition always" duration="0" enterTime="1373305217.109" node_type="condition">
                                    <node string="Result: true" node_type="result"/>
                                </node> <!--condition-->
                                <node string="Block (no logging)" duration="0" enterTime="1373305217.109" node_type="rulegroup">
                                    <node string="const condition always" duration="0" enterTime="1373305217.109" node_type="condition">
                                        <node string="Result: true" node_type="result"/>
                                    </node> <!--condition-->
                                    <node id="958983948418138" string="Block Garbage Groove Cloud Traffic (no logging)" duration="0" enterTime="1373305217.109" node_type="rule">
                                        <node string="com.scur.engine.system.url.path operator matches Regex[/2.0/*blugro[1-9]relay.groove.microsoft.com/*] OR com.scur.engine.system.url.host operator matches Regex[*blugro[1-9]relay.groove.microsoft.com] term (Not evaluated part: ) OR com.scur.engine.headerfilter.request.headers.hasmatching operator equals Boolean[true] term (Not evaluated part: ) AND (Not evaluated part: )" duration="0" enterTime="1373305217.109" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.url.path operator matches Regex[/2.0/*blugro[1-9]relay.groove.microsoft.com/*] OR com.scur.engine.system.url.host operator matches Regex[*blugro[1-9]relay.groove.microsoft.com] term (Not evaluated part: ) OR com.scur.engine.headerfilter.request.headers.hasmatching operator equals Boolean[true] term (Not evaluated part: )" duration="0" enterTime="1373305217.109" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node string="com.scur.engine.system.url.path operator matches Regex[/2.0/*blugro[1-9]relay.groove.microsoft.com/*]" duration="0" enterTime="1373305217.109" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node type="String" value="" string="com.scur.engine.system.url.path" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                    <node type="Regex" value="/2.0/*blugro[1-9]relay.groove.microsoft.com/*" node_type="temporary_variable"/>
                                                    <info name="Properties">
                                                        <node type="String" value="" string="com.scur.engine.system.url.path" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <node string="com.scur.engine.system.url.host operator matches Regex[*blugro[1-9]relay.groove.microsoft.com] term (Not evaluated part: )" duration="0" enterTime="1373305217.109" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node string="com.scur.engine.system.url.host operator matches Regex[*blugro[1-9]relay.groove.microsoft.com]" duration="0" enterTime="1373305217.109" node_type="condition">
                                                        <node string="Result: false" node_type="result"/>
                                                        <node string="com.scur.engine.system.url.host operator matches Regex[*blugro[1-9]relay.groove.microsoft.com]" duration="0" enterTime="1373305217.109" node_type="condition">
                                                            <node string="Result: false" node_type="result"/>
                                                            <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                            <node type="Regex" value="*blugro[1-9]relay.groove.microsoft.com" node_type="temporary_variable"/>
                                                            <info name="Properties">
                                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                            </info>
                                                        </node> <!--condition-->
                                                        <info name="Properties">
                                                            <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                        </info>
                                                    </node> <!--condition-->
                                                    <info name="Properties">
                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <node string="com.scur.engine.headerfilter.request.headers.hasmatching operator equals Boolean[true] term (Not evaluated part: )" duration="0" enterTime="1373305217.109" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node string="com.scur.engine.headerfilter.request.headers.hasmatching operator equals Boolean[true]" duration="0" enterTime="1373305217.109" node_type="condition">
                                                        <node string="Result: false" node_type="result"/>
                                                        <node string="com.scur.engine.headerfilter.request.headers.hasmatching operator equals Boolean[true]" duration="0" enterTime="1373305217.109" node_type="condition">
                                                            <node string="Result: false" node_type="result"/>
                                                            <node type="Boolean" value="false" string="com.scur.engine.headerfilter.request.headers.hasmatching" duration="0" enterTime="1373305217.109" node_type="property">
                                                                <node node_type="parameter_list">
                                                                    <node type="String" value="User-Agent" node_type="temporary_variable"/>
                                                                    <node type="String" value="Groove-Relay/*" node_type="temporary_variable"/>
                                                                </node> <!--parameter-->
                                                            </node> <!--property-->
                                                            <node type="Boolean" value="true" node_type="temporary_variable"/>
                                                            <info name="Properties">
                                                                <node type="Boolean" value="false" string="com.scur.engine.headerfilter.request.headers.hasmatching" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                            </info>
                                                        </node> <!--condition-->
                                                        <info name="Properties">
                                                            <node type="Boolean" value="false" string="com.scur.engine.headerfilter.request.headers.hasmatching" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                        </info>
                                                    </node> <!--condition-->
                                                    <info name="Properties">
                                                        <node type="Boolean" value="false" string="com.scur.engine.headerfilter.request.headers.hasmatching" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <info name="Properties">
                                                    <node type="String" value="" string="com.scur.engine.system.url.path" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                    <node type="Boolean" value="false" string="com.scur.engine.headerfilter.request.headers.hasmatching" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="String" value="" string="com.scur.engine.system.url.path" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                <node type="Boolean" value="false" string="com.scur.engine.headerfilter.request.headers.hasmatching" duration="0" enterTime="1373305217.109" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Block Garbage Groove Cloud Traffic (no logging)'-->
                                    <node id="958983948418148" string="Block Garbage Printers (no logging)" duration="0" enterTime="1373305217.109" node_type="rule">
                                        <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Block Garbage Printers, Type: IPRangeList)" duration="0" enterTime="1373305217.109" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Block Garbage Printers, Type: IPRangeList)" duration="0" enterTime="1373305217.109" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                <list name="Block Garbage Printers" type="IPRangeList"/>
                                                <info name="Properties">
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.109" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Block Garbage Printers (no logging)'-->
                                    <node id="958983948418154" string="Block Garbage URL Hosts (no logging)" duration="0" enterTime="1373305217.109" node_type="rule">
                                        <node string="com.scur.engine.system.url.host operator matches in list List(Name: Block Garbage URL Hosts, Type: RegexList)" duration="0" enterTime="1373305217.109" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.url.host operator matches in list List(Name: Block Garbage URL Hosts, Type: RegexList)" duration="0" enterTime="1373305217.109" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                <list name="Block Garbage URL Hosts" type="RegexList"/>
                                                <info name="Properties">
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.109" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Block Garbage URL Hosts (no logging)'-->
                                    <node id="958983948418166" string="Block Garbage URLs (no logging)" duration="0" enterTime="1373305217.109" node_type="rule">
                                        <node string="com.scur.engine.system.url.raw operator matches in list List(Name: Block Garbage URLs, Type: RegexList)" duration="0" enterTime="1373305217.109" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.url.raw operator matches in list List(Name: Block Garbage URLs, Type: RegexList)" duration="0" enterTime="1373305217.109" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url.raw" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                <list name="Block Garbage URLs" type="RegexList"/>
                                                <info name="Properties">
                                                    <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url.raw" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url.raw" duration="0" enterTime="1373305217.109" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Block Garbage URLs (no logging)'-->
                                    <node id="958983948418203" string="Block Garbage IP Ranges (no logging)" duration="0" enterTime="1373305217.109" node_type="rule">
                                        <node string="com.scur.engine.system.destination.ip operator is in range list List(Name: Block Garbage IP Ranges, Type: IPRangeList)" duration="0" enterTime="1373305217.109" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.destination.ip operator is in range list List(Name: Block Garbage IP Ranges, Type: IPRangeList)" duration="0" enterTime="1373305217.109" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="IP" value="173.37.145.8" string="com.scur.engine.system.destination.ip" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                <list name="Block Garbage IP Ranges" type="IPRangeList"/>
                                                <info name="Properties">
                                                    <node type="IP" value="173.37.145.8" string="com.scur.engine.system.destination.ip" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="IP" value="173.37.145.8" string="com.scur.engine.system.destination.ip" duration="0" enterTime="1373305217.109" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Block Garbage IP Ranges (no logging)'-->
                                </node> <!--rule set 'Block (no logging)'-->
                                <node string="Permit (no logging)" duration="0" enterTime="1373305217.109" node_type="rulegroup">
                                    <node string="const condition always" duration="0" enterTime="1373305217.109" node_type="condition">
                                        <node string="Result: true" node_type="result"/>
                                    </node> <!--condition-->
                                    <node id="958983948418227" string="Permit ocsp.disa.mil (no logging)" duration="0" enterTime="1373305217.109" node_type="rule">
                                        <node string="com.scur.engine.system.url.host operator equals String[ocsp.disa.mil] AND (Not evaluated part: )" duration="0" enterTime="1373305217.109" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.url.host operator equals String[ocsp.disa.mil]" duration="0" enterTime="1373305217.109" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                <node type="String" value="ocsp.disa.mil" node_type="temporary_variable"/>
                                                <info name="Properties">
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.109" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.109" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Permit ocsp.disa.mil (no logging)'-->
                                </node> <!--rule set 'Permit (no logging)'-->
                                <node string="Set Properties" duration="0.008" enterTime="1373305217.109" node_type="rulegroup">
                                    <node string="const condition always" duration="0" enterTime="1373305217.109" node_type="condition">
                                        <node string="Result: true" node_type="result"/>
                                    </node> <!--condition-->
                                    <node id="958983948410737" string="Get Destination IP" duration="0.007" enterTime="1373305217.109" node_type="rule">
                                        <node string="Executed action: allow, kContinue" node_type="executed_action"/>
                                        <node string="const condition always" duration="0" enterTime="1373305217.109" node_type="condition">
                                            <node string="Result: true" node_type="result"/>
                                        </node> <!--condition-->
                                        <node string="setaction: Variable(958983948407236, IP) :=  Property(com.scur.engine.system.destination.ip, IP[173.37.145.8])" duration="0.007" enterTime="1373305217.109" node_type="event">
                                            <node string="Variable(958983948407236, IP)" node_type="set_action_target"/>
                                            <node type="IP" value="173.37.145.8" string="com.scur.engine.system.destination.ip" duration="0" enterTime="1373305217.109" node_type="property"/>
                                        </node> <!--event-->
                                    </node> <!--rule 'Get Destination IP'-->
                                    <node id="958983948408019" string="DNS Lookup Reverse" duration="0" enterTime="1373305217.116" node_type="rule">
                                        <node string="Executed action: allow, kContinue" node_type="executed_action"/>
                                        <node string="958983948407236 operator is not in range list List(Name: Bypass DNS Lookup Reverse, Type: IPRangeList)" duration="0" enterTime="1373305217.116" node_type="condition">
                                            <node string="Result: true" node_type="result"/>
                                            <node string="958983948407236 operator is not in range list List(Name: Bypass DNS Lookup Reverse, Type: IPRangeList)" duration="0" enterTime="1373305217.116" node_type="condition">
                                                <node string="Result: true" node_type="result"/>
                                                <node name="958983948407236" type="IP" value="173.37.145.8" node_type="variable"/>
                                                <list name="Bypass DNS Lookup Reverse" type="IPRangeList"/>
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                        <node string="setaction: Variable(958983948407269, StringList) :=  Property(com.scur.engine.system.dns.reverselookup, StringList[tools2.cisco.com])" duration="0" enterTime="1373305217.116" node_type="event">
                                            <node string="Variable(958983948407269, StringList)" node_type="set_action_target"/>
                                            <node type="StringList" value="tools2.cisco.com" string="com.scur.engine.system.dns.reverselookup" duration="0" enterTime="1373305217.116" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node name="958983948407236" type="IP" value="173.37.145.8" node_type="variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                        </node> <!--event-->
                                    </node> <!--rule 'DNS Lookup Reverse'-->
                                    <node id="958983948418315" string="Get URL Categories" duration="0.001" enterTime="1373305217.116" node_type="rule">
                                        <node string="Executed action: allow, kContinue" node_type="executed_action"/>
                                        <node string="const condition always" duration="0" enterTime="1373305217.116" node_type="condition">
                                            <node string="Result: true" node_type="result"/>
                                        </node> <!--condition-->
                                        <node string="setaction: Variable(958983948418319, CategoryList) :=  Property(com.scur.engine.trustedsource.url.categories, CategoryList[105, 175])" duration="0.001" enterTime="1373305217.116" node_type="event">
                                            <node string="Variable(958983948418319, CategoryList)" node_type="set_action_target"/>
                                            <node type="CategoryList" value="105, 175" string="com.scur.engine.trustedsource.url.categories" duration="0.001" enterTime="1373305217.116" node_type="property">
                                                <node id="com.scur.engine.trustedsource.4569" string="Default" node_type="configuration"/>
                                            </node> <!--property-->
                                        </node> <!--event-->
                                    </node> <!--rule 'Get URL Categories'-->
                                    <node id="958983948424250" string="Get User-Agent" duration="0" enterTime="1373305217.117" node_type="rule">
                                        <node string="Executed action: allow, kContinue" node_type="executed_action"/>
                                        <node string="const condition always" duration="0" enterTime="1373305217.117" node_type="condition">
                                            <node string="Result: true" node_type="result"/>
                                        </node> <!--condition-->
                                        <node string="setaction: Variable(958983948424254, String) :=  Property(com.scur.engine.headerfilter.request.headers.getheader, String[])" duration="0" enterTime="1373305217.117" node_type="event">
                                            <node string="Variable(958983948424254, String)" node_type="set_action_target"/>
                                            <node type="String" value="" string="com.scur.engine.headerfilter.request.headers.getheader" duration="0" enterTime="1373305217.117" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="User-Agent" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                        </node> <!--event-->
                                    </node> <!--rule 'Get User-Agent'-->
                                    <node id="958983948426022" string="Get Referer" duration="0" enterTime="1373305217.117" node_type="rule">
                                        <node string="com.scur.engine.system.url.port operator not equals Long[443]" duration="0" enterTime="1373305217.117" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.url.port operator not equals Long[443]" duration="0" enterTime="1373305217.117" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="Long" value="443" string="com.scur.engine.system.url.port" duration="0" enterTime="1373305217.117" node_type="property"/>
                                                <node type="Long" value="443" node_type="temporary_variable"/>
                                                <info name="Properties">
                                                    <node type="Long" value="443" string="com.scur.engine.system.url.port" duration="0" enterTime="1373305217.117" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="Long" value="443" string="com.scur.engine.system.url.port" duration="0" enterTime="1373305217.117" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Get Referer'-->
                                    <node id="958983948409468" string="URL &gt; 90 characters, substitute URL.Host for User-Defined.URLForMailTo" duration="0" enterTime="1373305217.117" node_type="rule">
                                        <node string="com.scur.engine.stringfilter.string.length operator greater than Long[90]" duration="0" enterTime="1373305217.117" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.stringfilter.string.length operator greater than Long[90]" duration="0" enterTime="1373305217.117" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="Long" value="23" string="com.scur.engine.stringfilter.string.length" duration="0" enterTime="1373305217.117" node_type="property">
                                                    <node node_type="parameter_list">
                                                        <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url" duration="0" enterTime="1373305217.117" node_type="property"/>
                                                    </node> <!--parameter-->
                                                </node> <!--property-->
                                                <node type="Long" value="90" node_type="temporary_variable"/>
                                                <info name="Properties">
                                                    <node type="Long" value="23" string="com.scur.engine.stringfilter.string.length" duration="0" enterTime="1373305217.117" node_type="property"/>
                                                    <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url" duration="0" enterTime="1373305217.117" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="Long" value="23" string="com.scur.engine.stringfilter.string.length" duration="0" enterTime="1373305217.117" node_type="property"/>
                                                <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url" duration="0" enterTime="1373305217.117" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'URL > 90 characters, substitute URL.Host for User-Defined.URLForMailTo'-->
                                    <node id="958983948409479" string="URL&lt;= 90 characters, substitute URL for User-Defined.URLForMailTo" duration="0" enterTime="1373305217.117" node_type="rule">
                                        <node string="Executed action: allow, kContinue" node_type="executed_action"/>
                                        <node string="com.scur.engine.stringfilter.string.length operator less than equals Long[90]" duration="0" enterTime="1373305217.117" node_type="condition">
                                            <node string="Result: true" node_type="result"/>
                                            <node string="com.scur.engine.stringfilter.string.length operator less than equals Long[90]" duration="0" enterTime="1373305217.117" node_type="condition">
                                                <node string="Result: true" node_type="result"/>
                                                <node type="Long" value="23" string="com.scur.engine.stringfilter.string.length" duration="0" enterTime="1373305217.117" node_type="property">
                                                    <node node_type="parameter_list">
                                                        <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url" duration="0" enterTime="1373305217.117" node_type="property"/>
                                                    </node> <!--parameter-->
                                                </node> <!--property-->
                                                <node type="Long" value="90" node_type="temporary_variable"/>
                                                <info name="Properties">
                                                    <node type="Long" value="23" string="com.scur.engine.stringfilter.string.length" duration="0" enterTime="1373305217.117" node_type="property"/>
                                                    <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url" duration="0" enterTime="1373305217.117" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="Long" value="23" string="com.scur.engine.stringfilter.string.length" duration="0" enterTime="1373305217.117" node_type="property"/>
                                                <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url" duration="0" enterTime="1373305217.117" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <node string="setaction: Variable(958983948409473, String) :=  Property(com.scur.engine.system.url, String[https://tools.cisco.com])" duration="0" enterTime="1373305217.117" node_type="event">
                                            <node string="Variable(958983948409473, String)" node_type="set_action_target"/>
                                            <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url" duration="0" enterTime="1373305217.117" node_type="property"/>
                                        </node> <!--event-->
                                    </node> <!--rule 'URL<= 90 characters, substitute URL for User-Defined.URLForMailTo'-->
                                    <node id="958983948428403" string="Detect GLDALL Servers" duration="0" enterTime="1373305217.117" node_type="rule">
                                        <node string="com.scur.engine.system.client.ip operator is in list List(Name: GLDALL Server, Type: IPList)" duration="0" enterTime="1373305217.117" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.client.ip operator is in list List(Name: GLDALL Server, Type: IPList)" duration="0" enterTime="1373305217.117" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.117" node_type="property"/>
                                                <list name="GLDALL Server" type="IPList"/>
                                                <info name="Properties">
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.117" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.117" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Detect GLDALL Servers'-->
                                </node> <!--rule set 'Set Properties'-->
                                <node string="Block" duration="0" enterTime="1373305217.117" node_type="rulegroup">
                                    <node string="const condition always" duration="0" enterTime="1373305217.117" node_type="condition">
                                        <node string="Result: true" node_type="result"/>
                                    </node> <!--condition-->
                                    <node id="958983948404385" string="DNS Blackhole 248" duration="0" enterTime="1373305217.117" node_type="rule">
                                        <node string="958983948407236 operator equals IP[149.32.224.248]" duration="0" enterTime="1373305217.117" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="958983948407236 operator equals IP[149.32.224.248]" duration="0" enterTime="1373305217.117" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node name="958983948407236" type="IP" value="173.37.145.8" node_type="variable"/>
                                                <node type="IP" value="149.32.224.248" node_type="temporary_variable"/>
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                    </node> <!--rule 'DNS Blackhole 248'-->
                                    <node id="958983948404395" string="DNS Blackhole 249" duration="0" enterTime="1373305217.117" node_type="rule">
                                        <node string="958983948407236 operator equals IP[149.32.224.249]" duration="0" enterTime="1373305217.117" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="958983948407236 operator equals IP[149.32.224.249]" duration="0" enterTime="1373305217.117" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node name="958983948407236" type="IP" value="173.37.145.8" node_type="variable"/>
                                                <node type="IP" value="149.32.224.249" node_type="temporary_variable"/>
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                    </node> <!--rule 'DNS Blackhole 249'-->
                                    <node id="958983948404405" string="DNS Blackhole 250" duration="0" enterTime="1373305217.117" node_type="rule">
                                        <node string="958983948407236 operator equals IP[149.32.224.250]" duration="0" enterTime="1373305217.117" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="958983948407236 operator equals IP[149.32.224.250]" duration="0" enterTime="1373305217.117" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node name="958983948407236" type="IP" value="173.37.145.8" node_type="variable"/>
                                                <node type="IP" value="149.32.224.250" node_type="temporary_variable"/>
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                    </node> <!--rule 'DNS Blackhole 250'-->
                                    <node id="958983948418184" string="Block Client IP" duration="0" enterTime="1373305217.117" node_type="rule">
                                        <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Block Client IP, Type: IPRangeList)" duration="0" enterTime="1373305217.117" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Block Client IP, Type: IPRangeList)" duration="0" enterTime="1373305217.117" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.117" node_type="property"/>
                                                <list name="Block Client IP" type="IPRangeList"/>
                                                <info name="Properties">
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.117" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.117" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Block Client IP'-->
                                    <node id="958983948404415" string="Block Destination IP" duration="0" enterTime="1373305217.117" node_type="rule">
                                        <node string="958983948407236 operator is in range list List(Name: Block Destination IP, Type: IPRangeList)" duration="0" enterTime="1373305217.117" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="958983948407236 operator is in range list List(Name: Block Destination IP, Type: IPRangeList)" duration="0" enterTime="1373305217.117" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node name="958983948407236" type="IP" value="173.37.145.8" node_type="variable"/>
                                                <list name="Block Destination IP" type="IPRangeList"/>
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                    </node> <!--rule 'Block Destination IP'-->
                                    <node id="958983948422765" string="Block URL Host" duration="0" enterTime="1373305217.117" node_type="rule">
                                        <node string="com.scur.engine.system.url.host operator matches in list List(Name: Block URL Host, Type: RegexList)" duration="0" enterTime="1373305217.117" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.url.host operator matches in list List(Name: Block URL Host, Type: RegexList)" duration="0" enterTime="1373305217.117" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.117" node_type="property"/>
                                                <list name="Block URL Host" type="RegexList"/>
                                                <info name="Properties">
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.117" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.117" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Block URL Host'-->
                                    <node id="958983948407439" string="Block Server" duration="0" enterTime="1373305217.117" node_type="rule">
                                        <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Block Server, Type: IPRangeList)" duration="0" enterTime="1373305217.117" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Block Server, Type: IPRangeList)" duration="0" enterTime="1373305217.117" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.117" node_type="property"/>
                                                <list name="Block Server" type="IPRangeList"/>
                                                <info name="Properties">
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.117" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.117" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Block Server'-->
                                    <node id="958983948404428" string="Block Un-Allocated Client IP" duration="0" enterTime="1373305217.117" node_type="rule">
                                        <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Un-Allocated Client IP, Type: IPRangeList)" duration="0" enterTime="1373305217.117" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Un-Allocated Client IP, Type: IPRangeList)" duration="0" enterTime="1373305217.117" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.117" node_type="property"/>
                                                <list name="Un-Allocated Client IP" type="IPRangeList"/>
                                                <info name="Properties">
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.117" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.117" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Block Un-Allocated Client IP'-->
                                    <node id="958983948410226" string="Block Akamai NS Iface" duration="0" enterTime="1373305217.117" node_type="rule">
                                        <node string="958983948424254 operator matches Regex[Akamai NetSession Interface*] AND (Not evaluated part: )" duration="0" enterTime="1373305217.117" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="958983948424254 operator matches Regex[Akamai NetSession Interface*]" duration="0" enterTime="1373305217.117" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node name="958983948424254" type="String" value="" node_type="variable"/>
                                                <node type="Regex" value="Akamai NetSession Interface*" node_type="temporary_variable"/>
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                    </node> <!--rule 'Block Akamai NS Iface'-->
                                    <node id="958983948416567" string="Block User-Agent Maxthon" duration="0" enterTime="1373305217.117" node_type="rule">
                                        <node string="958983948424254 operator matches Regex[[Mm]axthon*] OR 958983948424254 operator equals String[MXUpdateDownloader] term (Not evaluated part: )" duration="0" enterTime="1373305217.117" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="958983948424254 operator matches Regex[[Mm]axthon*]" duration="0" enterTime="1373305217.117" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node name="958983948424254" type="String" value="" node_type="variable"/>
                                                <node type="Regex" value="[Mm]axthon*" node_type="temporary_variable"/>
                                            </node> <!--condition-->
                                            <node string="958983948424254 operator equals String[MXUpdateDownloader] term (Not evaluated part: )" duration="0" enterTime="1373305217.117" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node string="958983948424254 operator equals String[MXUpdateDownloader]" duration="0" enterTime="1373305217.117" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node string="958983948424254 operator equals String[MXUpdateDownloader]" duration="0" enterTime="1373305217.117" node_type="condition">
                                                        <node string="Result: false" node_type="result"/>
                                                        <node name="958983948424254" type="String" value="" node_type="variable"/>
                                                        <node type="String" value="MXUpdateDownloader" node_type="temporary_variable"/>
                                                    </node> <!--condition-->
                                                </node> <!--condition-->
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                    </node> <!--rule 'Block User-Agent Maxthon'-->
                                </node> <!--rule set 'Block'-->
                                <node string="Bypass" duration="0.001" enterTime="1373305217.117" node_type="rulegroup">
                                    <node string="const condition always" duration="0" enterTime="1373305217.117" node_type="condition">
                                        <node string="Result: true" node_type="result"/>
                                    </node> <!--condition-->
                                    <node id="958983948427424" string="Bypass All Microsoft Update" duration="0.001" enterTime="1373305217.117" node_type="rule">
                                        <node string="com.scur.engine.applcontrol.name operator is in list List(Name: Microsoft Update, Type: StringList)" duration="0.001" enterTime="1373305217.117" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.applcontrol.name operator is in list List(Name: Microsoft Update, Type: StringList)" duration="0.001" enterTime="1373305217.117" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="String" value="" string="com.scur.engine.applcontrol.name" duration="0.001" enterTime="1373305217.117" node_type="property"/>
                                                <list name="Microsoft Update" type="StringList"/>
                                                <info name="Properties">
                                                    <node type="String" value="" string="com.scur.engine.applcontrol.name" duration="0.001" enterTime="1373305217.117" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="String" value="" string="com.scur.engine.applcontrol.name" duration="0.001" enterTime="1373305217.117" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass All Microsoft Update'-->
                                    <node id="958983948422498" string="Bypass All WSUS Server" duration="0" enterTime="1373305217.118" node_type="rule">
                                        <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Bypass All WSUS Server, Type: IPRangeList) AND (Not evaluated part: )" duration="0" enterTime="1373305217.118" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Bypass All WSUS Server, Type: IPRangeList)" duration="0" enterTime="1373305217.118" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                <list name="Bypass All WSUS Server" type="IPRangeList"/>
                                                <info name="Properties">
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass All WSUS Server'-->
                                    <node id="958983948424215" string="Bypass All Windows Update (Server)" duration="0" enterTime="1373305217.118" node_type="rule">
                                        <node string="com.scur.engine.system.client.ip operator is in list List(Name: GLDALL Server, Type: IPList) AND (Not evaluated part: )" duration="0" enterTime="1373305217.118" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.client.ip operator is in list List(Name: GLDALL Server, Type: IPList)" duration="0" enterTime="1373305217.118" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                <list name="GLDALL Server" type="IPList"/>
                                                <info name="Properties">
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass All Windows Update (Server)'-->
                                    <node id="958983948427370" string="Bypass SSL O365 Testing" duration="0" enterTime="1373305217.118" node_type="rule">
                                        <node string="com.scur.engine.system.url.port operator equals Long[443] AND com.scur.engine.system.client.ip operator is in range list List(Name: Permit O365Testing Hosts, Type: IPRangeList) operator is in range list (Not evaluated part: )" duration="0" enterTime="1373305217.118" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.url.port operator equals Long[443]" duration="0" enterTime="1373305217.118" node_type="condition">
                                                <node string="Result: true" node_type="result"/>
                                                <node type="Long" value="443" string="com.scur.engine.system.url.port" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                <node type="Long" value="443" node_type="temporary_variable"/>
                                                <info name="Properties">
                                                    <node type="Long" value="443" string="com.scur.engine.system.url.port" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Permit O365Testing Hosts, Type: IPRangeList) operator is in range list (Not evaluated part: )" duration="0" enterTime="1373305217.118" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Permit O365Testing Hosts, Type: IPRangeList)" duration="0" enterTime="1373305217.118" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                    <list name="Permit O365Testing Hosts" type="IPRangeList"/>
                                                    <info name="Properties">
                                                        <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <info name="Properties">
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="Long" value="443" string="com.scur.engine.system.url.port" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL O365 Testing'-->
                                </node> <!--rule set 'Bypass'-->
                                <node string="Handle Servers" duration="0" enterTime="1373305217.118" node_type="rulegroup">
                                    <node string="958983948428408 operator equals Boolean[true] OR com.scur.engine.system.client.ip operator is in list List(Name: GLDALL Server, Type: IPList) term (Not evaluated part: ) AND (Not evaluated part: )" duration="0" enterTime="1373305217.118" node_type="condition">
                                        <node string="Result: false" node_type="result"/>
                                        <node string="958983948428408 operator equals Boolean[true] OR com.scur.engine.system.client.ip operator is in list List(Name: GLDALL Server, Type: IPList) term (Not evaluated part: )" duration="0" enterTime="1373305217.118" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="958983948428408 operator equals Boolean[true]" duration="0" enterTime="1373305217.118" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node name="958983948428408" type="Boolean" value="false" node_type="variable"/>
                                                <node type="Boolean" value="true" node_type="temporary_variable"/>
                                            </node> <!--condition-->
                                            <node string="com.scur.engine.system.client.ip operator is in list List(Name: GLDALL Server, Type: IPList) term (Not evaluated part: )" duration="0" enterTime="1373305217.118" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node string="com.scur.engine.system.client.ip operator is in list List(Name: GLDALL Server, Type: IPList)" duration="0" enterTime="1373305217.118" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node string="com.scur.engine.system.client.ip operator is in list List(Name: GLDALL Server, Type: IPList)" duration="0" enterTime="1373305217.118" node_type="condition">
                                                        <node string="Result: false" node_type="result"/>
                                                        <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                        <list name="GLDALL Server" type="IPList"/>
                                                        <info name="Properties">
                                                            <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                        </info>
                                                    </node> <!--condition-->
                                                    <info name="Properties">
                                                        <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <info name="Properties">
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <info name="Properties">
                                            <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                        </info>
                                    </node> <!--condition-->
                                </node> <!--rule set 'Handle Servers'-->
                                <node string="Handle ITNet-Red-Purple Servers" duration="0" enterTime="1373305217.118" node_type="rulegroup">
                                    <node string="com.scur.engine.system.client.ip operator is in range list List(Name: ITNET, Type: IPRangeList) OR com.scur.engine.system.client.ip operator is in range list List(Name: VRFPurple Servers, Type: IPRangeList) term (Not evaluated part: ) OR com.scur.engine.system.client.ip operator is in range list List(Name: VRFRed Servers, Type: IPRangeList) term (Not evaluated part: ) AND (Not evaluated part: )" duration="0" enterTime="1373305217.118" node_type="condition">
                                        <node string="Result: false" node_type="result"/>
                                        <node string="com.scur.engine.system.client.ip operator is in range list List(Name: ITNET, Type: IPRangeList) OR com.scur.engine.system.client.ip operator is in range list List(Name: VRFPurple Servers, Type: IPRangeList) term (Not evaluated part: ) OR com.scur.engine.system.client.ip operator is in range list List(Name: VRFRed Servers, Type: IPRangeList) term (Not evaluated part: )" duration="0" enterTime="1373305217.118" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.client.ip operator is in range list List(Name: ITNET, Type: IPRangeList)" duration="0" enterTime="1373305217.118" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                <list name="ITNET" type="IPRangeList"/>
                                                <info name="Properties">
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <node string="com.scur.engine.system.client.ip operator is in range list List(Name: VRFPurple Servers, Type: IPRangeList) term (Not evaluated part: )" duration="0" enterTime="1373305217.118" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node string="com.scur.engine.system.client.ip operator is in range list List(Name: VRFPurple Servers, Type: IPRangeList)" duration="0" enterTime="1373305217.118" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node string="com.scur.engine.system.client.ip operator is in range list List(Name: VRFPurple Servers, Type: IPRangeList)" duration="0" enterTime="1373305217.118" node_type="condition">
                                                        <node string="Result: false" node_type="result"/>
                                                        <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                        <list name="VRFPurple Servers" type="IPRangeList"/>
                                                        <info name="Properties">
                                                            <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                        </info>
                                                    </node> <!--condition-->
                                                    <info name="Properties">
                                                        <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <info name="Properties">
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <node string="com.scur.engine.system.client.ip operator is in range list List(Name: VRFRed Servers, Type: IPRangeList) term (Not evaluated part: )" duration="0" enterTime="1373305217.118" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node string="com.scur.engine.system.client.ip operator is in range list List(Name: VRFRed Servers, Type: IPRangeList)" duration="0" enterTime="1373305217.118" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node string="com.scur.engine.system.client.ip operator is in range list List(Name: VRFRed Servers, Type: IPRangeList)" duration="0" enterTime="1373305217.118" node_type="condition">
                                                        <node string="Result: false" node_type="result"/>
                                                        <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                        <list name="VRFRed Servers" type="IPRangeList"/>
                                                        <info name="Properties">
                                                            <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                        </info>
                                                    </node> <!--condition-->
                                                    <info name="Properties">
                                                        <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <info name="Properties">
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <info name="Properties">
                                            <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.118" node_type="property"/>
                                        </info>
                                    </node> <!--condition-->
                                </node> <!--rule set 'Handle ITNet-Red-Purple Servers'-->
                                <node string="Extended Timeout" duration="0" enterTime="1373305217.118" node_type="rulegroup">
                                    <node string="958983948407236 operator is in range list List(Name: Extended Timeout, Type: IPRangeList) OR com.scur.engine.system.url.host operator is in list List(Name: Extended Timeout Host, Type: StringList) term (Not evaluated part: )" duration="0" enterTime="1373305217.118" node_type="condition">
                                        <node string="Result: false" node_type="result"/>
                                        <node string="958983948407236 operator is in range list List(Name: Extended Timeout, Type: IPRangeList)" duration="0" enterTime="1373305217.118" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node name="958983948407236" type="IP" value="173.37.145.8" node_type="variable"/>
                                            <list name="Extended Timeout" type="IPRangeList"/>
                                        </node> <!--condition-->
                                        <node string="com.scur.engine.system.url.host operator is in list List(Name: Extended Timeout Host, Type: StringList) term (Not evaluated part: )" duration="0" enterTime="1373305217.118" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.url.host operator is in list List(Name: Extended Timeout Host, Type: StringList)" duration="0" enterTime="1373305217.118" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node string="com.scur.engine.system.url.host operator is in list List(Name: Extended Timeout Host, Type: StringList)" duration="0" enterTime="1373305217.118" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                    <list name="Extended Timeout Host" type="StringList"/>
                                                    <info name="Properties">
                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <info name="Properties">
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.118" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <info name="Properties">
                                            <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.118" node_type="property"/>
                                        </info>
                                    </node> <!--condition-->
                                </node> <!--rule set 'Extended Timeout'-->
                                <node string="Redirect HTTP" duration="0" enterTime="1373305217.118" node_type="rulegroup">
                                    <node string="com.scur.engine.system.url.port operator equals Long[80]" duration="0" enterTime="1373305217.118" node_type="condition">
                                        <node string="Result: false" node_type="result"/>
                                        <node string="com.scur.engine.system.url.port operator equals Long[80]" duration="0" enterTime="1373305217.118" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node type="Long" value="443" string="com.scur.engine.system.url.port" duration="0" enterTime="1373305217.118" node_type="property"/>
                                            <node type="Long" value="80" node_type="temporary_variable"/>
                                            <info name="Properties">
                                                <node type="Long" value="443" string="com.scur.engine.system.url.port" duration="0" enterTime="1373305217.118" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <info name="Properties">
                                            <node type="Long" value="443" string="com.scur.engine.system.url.port" duration="0" enterTime="1373305217.118" node_type="property"/>
                                        </info>
                                    </node> <!--condition-->
                                </node> <!--rule set 'Redirect HTTP'-->
                                <node string="Bypass HTTP" duration="0" enterTime="1373305217.118" node_type="rulegroup">
                                    <node string="com.scur.engine.system.url.port operator not equals Long[443]" duration="0" enterTime="1373305217.118" node_type="condition">
                                        <node string="Result: false" node_type="result"/>
                                        <node string="com.scur.engine.system.url.port operator not equals Long[443]" duration="0" enterTime="1373305217.118" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node type="Long" value="443" string="com.scur.engine.system.url.port" duration="0" enterTime="1373305217.118" node_type="property"/>
                                            <node type="Long" value="443" node_type="temporary_variable"/>
                                            <info name="Properties">
                                                <node type="Long" value="443" string="com.scur.engine.system.url.port" duration="0" enterTime="1373305217.118" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <info name="Properties">
                                            <node type="Long" value="443" string="com.scur.engine.system.url.port" duration="0" enterTime="1373305217.118" node_type="property"/>
                                        </info>
                                    </node> <!--condition-->
                                </node> <!--rule set 'Bypass HTTP'-->
                                <node string="Bypass SSL" duration="0.002" enterTime="1373305217.118" node_type="rulegroup">
                                    <node string="com.scur.engine.system.url.port operator equals Long[443] AND com.scur.engine.system.command.name operator equals String[CONNECT] OR (Not evaluated part: ) term (Not evaluated part: )" duration="0" enterTime="1373305217.118" node_type="condition">
                                        <node string="Result: true" node_type="result"/>
                                        <node string="com.scur.engine.system.url.port operator equals Long[443]" duration="0" enterTime="1373305217.118" node_type="condition">
                                            <node string="Result: true" node_type="result"/>
                                            <node type="Long" value="443" string="com.scur.engine.system.url.port" duration="0" enterTime="1373305217.118" node_type="property"/>
                                            <node type="Long" value="443" node_type="temporary_variable"/>
                                            <info name="Properties">
                                                <node type="Long" value="443" string="com.scur.engine.system.url.port" duration="0" enterTime="1373305217.118" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <node string="com.scur.engine.system.command.name operator equals String[CONNECT] OR (Not evaluated part: ) term (Not evaluated part: )" duration="0" enterTime="1373305217.118" node_type="condition">
                                            <node string="Result: true" node_type="result"/>
                                            <node string="com.scur.engine.system.command.name operator equals String[CONNECT] OR (Not evaluated part: )" duration="0" enterTime="1373305217.118" node_type="condition">
                                                <node string="Result: true" node_type="result"/>
                                                <node string="com.scur.engine.system.command.name operator equals String[CONNECT]" duration="0" enterTime="1373305217.118" node_type="condition">
                                                    <node string="Result: true" node_type="result"/>
                                                    <node type="String" value="CONNECT" string="com.scur.engine.system.command.name" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                    <node type="String" value="CONNECT" node_type="temporary_variable"/>
                                                    <info name="Properties">
                                                        <node type="String" value="CONNECT" string="com.scur.engine.system.command.name" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <info name="Properties">
                                                    <node type="String" value="CONNECT" string="com.scur.engine.system.command.name" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="String" value="CONNECT" string="com.scur.engine.system.command.name" duration="0" enterTime="1373305217.118" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <info name="Properties">
                                            <node type="Long" value="443" string="com.scur.engine.system.url.port" duration="0" enterTime="1373305217.118" node_type="property"/>
                                            <node type="String" value="CONNECT" string="com.scur.engine.system.command.name" duration="0" enterTime="1373305217.118" node_type="property"/>
                                        </info>
                                    </node> <!--condition-->
                                    <node id="958983948405033" string="Redirect SSL .mil to va903" duration="0" enterTime="1373305217.118" node_type="rule">
                                        <node string="com.scur.engine.system.hostname operator matches Regex[hh-tx10-wpw901*] AND (Not evaluated part: )" duration="0" enterTime="1373305217.118" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.hostname operator matches Regex[hh-tx10-wpw901*]" duration="0" enterTime="1373305217.118" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                <node type="Regex" value="hh-tx10-wpw901*" node_type="temporary_variable"/>
                                                <info name="Properties">
                                                    <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.118" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Redirect SSL .mil to va903'-->
                                    <node id="958983948408836" string="Redirect SSL va904 to va903" duration="0" enterTime="1373305217.118" node_type="rule">
                                        <node string="com.scur.engine.system.hostname operator matches Regex[hh-va10-wpw904*] AND (Not evaluated part: )" duration="0" enterTime="1373305217.118" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.hostname operator matches Regex[hh-va10-wpw904*]" duration="0" enterTime="1373305217.118" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                <node type="Regex" value="hh-va10-wpw904*" node_type="temporary_variable"/>
                                                <info name="Properties">
                                                    <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305217.118" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Redirect SSL va904 to va903'-->
                                    <node id="958983948427481" string="Bypass SSL Update Applications" duration="0" enterTime="1373305217.118" node_type="rule">
                                        <node string="com.scur.engine.applcontrol.name operator is in list List(Name: Update Applications, Type: StringList)" duration="0" enterTime="1373305217.118" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.applcontrol.name operator is in list List(Name: Update Applications, Type: StringList)" duration="0" enterTime="1373305217.118" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="String" value="" string="com.scur.engine.applcontrol.name" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                <list name="Update Applications" type="StringList"/>
                                                <info name="Properties">
                                                    <node type="String" value="" string="com.scur.engine.applcontrol.name" duration="0" enterTime="1373305217.118" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="String" value="" string="com.scur.engine.applcontrol.name" duration="0" enterTime="1373305217.118" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL Update Applications'-->
                                    <node id="958983948405051" string="Bypass SSL .mil" duration="0.001" enterTime="1373305217.118" node_type="rule">
                                        <node string="958983948407236 operator is in range list List(Name: .mil, Type: IPRangeList)" duration="0" enterTime="1373305217.118" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="958983948407236 operator is in range list List(Name: .mil, Type: IPRangeList)" duration="0" enterTime="1373305217.118" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node name="958983948407236" type="IP" value="173.37.145.8" node_type="variable"/>
                                                <list name=".mil" type="IPRangeList"/>
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL .mil'-->
                                    <node id="958983948406473" string="Bypass SSL .com" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="958983948407236 operator is in range list List(Name: .com, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="958983948407236 operator is in range list List(Name: .com, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node name="958983948407236" type="IP" value="173.37.145.8" node_type="variable"/>
                                                <list name=".com" type="IPRangeList"/>
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL .com'-->
                                    <node id="958983948423555" string="Bypass SSL .com.microsoft.update" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="958983948424254 operator matches in list List(Name: Windows Update User-Agents, Type: RegexList) AND (Not evaluated part: )" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="958983948424254 operator matches in list List(Name: Windows Update User-Agents, Type: RegexList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node name="958983948424254" type="String" value="" node_type="variable"/>
                                                <list name="Windows Update User-Agents" type="RegexList"/>
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL .com.microsoft.update'-->
                                    <node id="958983948423847" string="Bypass SSL update.microsoft.com" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="com.scur.engine.system.url.host operator equals String[update.microsoft.com]" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.url.host operator equals String[update.microsoft.com]" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                <node type="String" value="update.microsoft.com" node_type="temporary_variable"/>
                                                <info name="Properties">
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.119" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL update.microsoft.com'-->
                                    <node id="958983948408780" string="Bypass SSL .gov" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="958983948407236 operator is in range list List(Name: .gov, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="958983948407236 operator is in range list List(Name: .gov, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node name="958983948407236" type="IP" value="173.37.145.8" node_type="variable"/>
                                                <list name=".gov" type="IPRangeList"/>
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL .gov'-->
                                    <node id="958983948407134" string="Bypass SSL .net" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="958983948407236 operator is in range list List(Name: .net, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="958983948407236 operator is in range list List(Name: .net, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node name="958983948407236" type="IP" value="173.37.145.8" node_type="variable"/>
                                                <list name=".net" type="IPRangeList"/>
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL .net'-->
                                    <node id="958983948407118" string="Bypass SSL .org" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="958983948407236 operator is in range list List(Name: .org, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="958983948407236 operator is in range list List(Name: .org, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node name="958983948407236" type="IP" value="173.37.145.8" node_type="variable"/>
                                                <list name=".org" type="IPRangeList"/>
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL .org'-->
                                    <node id="958983948413087" string="Bypass SSL .edu" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="958983948407236 operator is in range list List(Name: .edu, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="958983948407236 operator is in range list List(Name: .edu, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node name="958983948407236" type="IP" value="173.37.145.8" node_type="variable"/>
                                                <list name=".edu" type="IPRangeList"/>
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL .edu'-->
                                    <node id="958983948422124" string="Bypass SSL .us" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="958983948407236 operator is in range list List(Name: .us, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="958983948407236 operator is in range list List(Name: .us, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node name="958983948407236" type="IP" value="173.37.145.8" node_type="variable"/>
                                                <list name=".us" type="IPRangeList"/>
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL .us'-->
                                    <node id="958983948425738" string="Bypass SSL Hodes" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Permit Hodes, Type: IPRangeList) AND (Not evaluated part: )" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Permit Hodes, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                <list name="Permit Hodes" type="IPRangeList"/>
                                                <info name="Properties">
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL Hodes'-->
                                    <node id="958983948401451" string="Bypass SSL WebEx IP Ranges" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="958983948407236 operator is in range list List(Name: WebEx IP Ranges, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="958983948407236 operator is in range list List(Name: WebEx IP Ranges, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node name="958983948407236" type="IP" value="173.37.145.8" node_type="variable"/>
                                                <list name="WebEx IP Ranges" type="IPRangeList"/>
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL WebEx IP Ranges'-->
                                    <node id="958983948406676" string="Bypass SSL ATT Connect" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="958983948424254 operator equals String[Interwise_Client] AND (Not evaluated part: )" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="958983948424254 operator equals String[Interwise_Client]" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node name="958983948424254" type="String" value="" node_type="variable"/>
                                                <node type="String" value="Interwise_Client" node_type="temporary_variable"/>
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL ATT Connect'-->
                                    <node id="958983948416539" string="Bypass SSL AdobeConnect" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="com.scur.engine.system.destination.ip operator is in range list List(Name: Bypass SSL AdobeConnect, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.destination.ip operator is in range list List(Name: Bypass SSL AdobeConnect, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="IP" value="173.37.145.8" string="com.scur.engine.system.destination.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                <list name="Bypass SSL AdobeConnect" type="IPRangeList"/>
                                                <info name="Properties">
                                                    <node type="IP" value="173.37.145.8" string="com.scur.engine.system.destination.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="IP" value="173.37.145.8" string="com.scur.engine.system.destination.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL AdobeConnect'-->
                                    <node id="958983948406687" string="Bypass SSL FedEx Ship Manager" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="958983948407236 operator is in range list List(Name: Bypass SSL FedEx Ship Manager, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="958983948407236 operator is in range list List(Name: Bypass SSL FedEx Ship Manager, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node name="958983948407236" type="IP" value="173.37.145.8" node_type="variable"/>
                                                <list name="Bypass SSL FedEx Ship Manager" type="IPRangeList"/>
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL FedEx Ship Manager'-->
                                    <node id="958983948409868" string="Bypass SSL TAN" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Bypass SSL TAN, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Bypass SSL TAN, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                <list name="Bypass SSL TAN" type="IPRangeList"/>
                                                <info name="Properties">
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL TAN'-->
                                    <node id="958983948406740" string="Bypass SSL deploy.akamaitechnologies.com" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="958983948407269 operator contains at least one match Regex[*.deploy.akamaitechnologies.com] AND (Not evaluated part: )" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="958983948407269 operator contains at least one match Regex[*.deploy.akamaitechnologies.com]" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node name="958983948407269" type="StringList" value="tools2.cisco.com" node_type="variable"/>
                                                <node type="Regex" value="*.deploy.akamaitechnologies.com" node_type="temporary_variable"/>
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL deploy.akamaitechnologies.com'-->
                                    <node id="958983948425464" string="Bypass Jira Test" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Bypass Jira Test, Type: IPRangeList) AND (Not evaluated part: )" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Bypass Jira Test, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                <list name="Bypass Jira Test" type="IPRangeList"/>
                                                <info name="Properties">
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass Jira Test'-->
                                    <node id="958983948406745" string="Bypass SSL IC Verify" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="com.scur.engine.system.client.ip operator is in range IPRange[10.68.130.26-10.68.130.26] AND (Not evaluated part: )" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.client.ip operator is in range IPRange[10.68.130.26-10.68.130.26]" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                <node type="IPRange" value="10.68.130.26-10.68.130.26" node_type="temporary_variable"/>
                                                <info name="Properties">
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL IC Verify'-->
                                    <node id="958983948410802" string="Bypass SSL WAF" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Bypass SSL WAF, Type: IPRangeList) AND (Not evaluated part: )" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.client.ip operator is in range list List(Name: Bypass SSL WAF, Type: IPRangeList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                <list name="Bypass SSL WAF" type="IPRangeList"/>
                                                <info name="Properties">
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL WAF'-->
                                    <node id="958983948420126" string="Bypass SSL Mini-Brown (ogaragroup)" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="com.scur.engine.system.client.ip operator is in range IPRange[10.68.64.0-10.68.95.255]" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.client.ip operator is in range IPRange[10.68.64.0-10.68.95.255]" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                <node type="IPRange" value="10.68.64.0-10.68.95.255" node_type="temporary_variable"/>
                                                <info name="Properties">
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL Mini-Brown (ogaragroup)'-->
                                    <node id="958983948420250" string="Bypass SSL LogMeIn" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="com.scur.engine.system.client.ip operator is in list List(Name: Remote Access Exception, Type: IPList) AND (Not evaluated part: )" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.client.ip operator is in list List(Name: Remote Access Exception, Type: IPList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                <list name="Remote Access Exception" type="IPList"/>
                                                <info name="Properties">
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL LogMeIn'-->
                                    <node id="958983948421241" string="Bypass SSL WebSocket" duration="0" enterTime="1373305217.119" node_type="rule">
                                        <node string="com.scur.engine.system.client.ip operator equals IP[149.32.187.241]" duration="0" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.client.ip operator equals IP[149.32.187.241]" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                <node type="IP" value="149.32.187.241" node_type="temporary_variable"/>
                                                <info name="Properties">
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.119" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL WebSocket'-->
                                    <node id="958983948425134" string="Bypass SSL URL Host" duration="0.001" enterTime="1373305217.119" node_type="rule">
                                        <node string="com.scur.engine.system.url.host operator matches in list List(Name: .com Host, Type: RegexList) OR com.scur.engine.system.url.host operator matches in list List(Name: .edu Host, Type: RegexList) term (Not evaluated part: ) OR com.scur.engine.system.url.host operator matches in list List(Name: .gov Host, Type: RegexList) term (Not evaluated part: ) OR com.scur.engine.system.url.host operator matches in list List(Name: .mil Host, Type: RegexList) term (Not evaluated part: ) OR com.scur.engine.system.url.host operator matches in list List(Name: .net Host, Type: RegexList) term (Not evaluated part: ) OR com.scur.engine.system.url.host operator matches in list List(Name: .org Host, Type: RegexList) term (Not evaluated part: )" duration="0.001" enterTime="1373305217.119" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.url.host operator matches in list List(Name: .com Host, Type: RegexList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                <list name=".com Host" type="RegexList"/>
                                                <info name="Properties">
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <node string="com.scur.engine.system.url.host operator matches in list List(Name: .edu Host, Type: RegexList) term (Not evaluated part: )" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node string="com.scur.engine.system.url.host operator matches in list List(Name: .edu Host, Type: RegexList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node string="com.scur.engine.system.url.host operator matches in list List(Name: .edu Host, Type: RegexList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                                        <node string="Result: false" node_type="result"/>
                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                        <list name=".edu Host" type="RegexList"/>
                                                        <info name="Properties">
                                                            <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                        </info>
                                                    </node> <!--condition-->
                                                    <info name="Properties">
                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <info name="Properties">
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <node string="com.scur.engine.system.url.host operator matches in list List(Name: .gov Host, Type: RegexList) term (Not evaluated part: )" duration="0" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node string="com.scur.engine.system.url.host operator matches in list List(Name: .gov Host, Type: RegexList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node string="com.scur.engine.system.url.host operator matches in list List(Name: .gov Host, Type: RegexList)" duration="0" enterTime="1373305217.119" node_type="condition">
                                                        <node string="Result: false" node_type="result"/>
                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                        <list name=".gov Host" type="RegexList"/>
                                                        <info name="Properties">
                                                            <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                        </info>
                                                    </node> <!--condition-->
                                                    <info name="Properties">
                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <info name="Properties">
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.119" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <node string="com.scur.engine.system.url.host operator matches in list List(Name: .mil Host, Type: RegexList) term (Not evaluated part: )" duration="0.001" enterTime="1373305217.119" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node string="com.scur.engine.system.url.host operator matches in list List(Name: .mil Host, Type: RegexList)" duration="0.001" enterTime="1373305217.119" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node string="com.scur.engine.system.url.host operator matches in list List(Name: .mil Host, Type: RegexList)" duration="0.001" enterTime="1373305217.119" node_type="condition">
                                                        <node string="Result: false" node_type="result"/>
                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0.001" enterTime="1373305217.119" node_type="property"/>
                                                        <list name=".mil Host" type="RegexList"/>
                                                        <info name="Properties">
                                                            <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0.001" enterTime="1373305217.119" node_type="property"/>
                                                        </info>
                                                    </node> <!--condition-->
                                                    <info name="Properties">
                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0.001" enterTime="1373305217.119" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <info name="Properties">
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0.001" enterTime="1373305217.119" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <node string="com.scur.engine.system.url.host operator matches in list List(Name: .net Host, Type: RegexList) term (Not evaluated part: )" duration="0" enterTime="1373305217.12" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node string="com.scur.engine.system.url.host operator matches in list List(Name: .net Host, Type: RegexList)" duration="0" enterTime="1373305217.12" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node string="com.scur.engine.system.url.host operator matches in list List(Name: .net Host, Type: RegexList)" duration="0" enterTime="1373305217.12" node_type="condition">
                                                        <node string="Result: false" node_type="result"/>
                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.12" node_type="property"/>
                                                        <list name=".net Host" type="RegexList"/>
                                                        <info name="Properties">
                                                            <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.12" node_type="property"/>
                                                        </info>
                                                    </node> <!--condition-->
                                                    <info name="Properties">
                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.12" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <info name="Properties">
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.12" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <node string="com.scur.engine.system.url.host operator matches in list List(Name: .org Host, Type: RegexList) term (Not evaluated part: )" duration="0" enterTime="1373305217.12" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node string="com.scur.engine.system.url.host operator matches in list List(Name: .org Host, Type: RegexList)" duration="0" enterTime="1373305217.12" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node string="com.scur.engine.system.url.host operator matches in list List(Name: .org Host, Type: RegexList)" duration="0" enterTime="1373305217.12" node_type="condition">
                                                        <node string="Result: false" node_type="result"/>
                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.12" node_type="property"/>
                                                        <list name=".org Host" type="RegexList"/>
                                                        <info name="Properties">
                                                            <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.12" node_type="property"/>
                                                        </info>
                                                    </node> <!--condition-->
                                                    <info name="Properties">
                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.12" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <info name="Properties">
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.12" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.119" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Bypass SSL URL Host'-->
                                </node> <!--rule set 'Bypass SSL'-->
                                <node string="Bypass - Migrate Necessary to Bypass HTTP" duration="0.001" enterTime="1373305217.12" node_type="rulegroup">
                                    <node string="958983948421541 operator not equals Boolean[true] AND 958983948428408 operator not equals Boolean[true] operator not equals (Not evaluated part: )" duration="0" enterTime="1373305217.12" node_type="condition">
                                        <node string="Result: true" node_type="result"/>
                                        <node string="958983948421541 operator not equals Boolean[true]" duration="0" enterTime="1373305217.12" node_type="condition">
                                            <node string="Result: true" node_type="result"/>
                                            <node name="958983948421541" type="Boolean" value="false" node_type="variable"/>
                                            <node type="Boolean" value="true" node_type="temporary_variable"/>
                                        </node> <!--condition-->
                                        <node string="958983948428408 operator not equals Boolean[true] operator not equals (Not evaluated part: )" duration="0" enterTime="1373305217.12" node_type="condition">
                                            <node string="Result: true" node_type="result"/>
                                            <node string="958983948428408 operator not equals Boolean[true]" duration="0" enterTime="1373305217.12" node_type="condition">
                                                <node string="Result: true" node_type="result"/>
                                                <node name="958983948428408" type="Boolean" value="false" node_type="variable"/>
                                                <node type="Boolean" value="true" node_type="temporary_variable"/>
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                    </node> <!--condition-->
                                    <node id="958983948422816" string="Permit &amp; Set Properties (Client)" duration="0.001" enterTime="1373305217.12" node_type="rule">
                                        <node string="com.scur.engine.system.url.raw operator matches in list List(Name: Permit URL (Adobe), Type: RegexList) OR com.scur.engine.system.url.raw operator matches in list List(Name: Permit URL (CRL), Type: RegexList) term (Not evaluated part: ) OR com.scur.engine.system.url.raw operator matches in list List(Name: Permit URL (Microsoft), Type: RegexList) term (Not evaluated part: ) OR com.scur.engine.system.url.raw operator matches in list List(Name: Permit URL (Oracle), Type: RegexList) term (Not evaluated part: ) AND (Not evaluated part: )" duration="0.001" enterTime="1373305217.12" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.url.raw operator matches in list List(Name: Permit URL (Adobe), Type: RegexList) OR com.scur.engine.system.url.raw operator matches in list List(Name: Permit URL (CRL), Type: RegexList) term (Not evaluated part: ) OR com.scur.engine.system.url.raw operator matches in list List(Name: Permit URL (Microsoft), Type: RegexList) term (Not evaluated part: ) OR com.scur.engine.system.url.raw operator matches in list List(Name: Permit URL (Oracle), Type: RegexList) term (Not evaluated part: )" duration="0.001" enterTime="1373305217.12" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node string="com.scur.engine.system.url.raw operator matches in list List(Name: Permit URL (Adobe), Type: RegexList)" duration="0" enterTime="1373305217.12" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url.raw" duration="0" enterTime="1373305217.12" node_type="property"/>
                                                    <list name="Permit URL (Adobe)" type="RegexList"/>
                                                    <info name="Properties">
                                                        <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url.raw" duration="0" enterTime="1373305217.12" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <node string="com.scur.engine.system.url.raw operator matches in list List(Name: Permit URL (CRL), Type: RegexList) term (Not evaluated part: )" duration="0" enterTime="1373305217.12" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node string="com.scur.engine.system.url.raw operator matches in list List(Name: Permit URL (CRL), Type: RegexList)" duration="0" enterTime="1373305217.12" node_type="condition">
                                                        <node string="Result: false" node_type="result"/>
                                                        <node string="com.scur.engine.system.url.raw operator matches in list List(Name: Permit URL (CRL), Type: RegexList)" duration="0" enterTime="1373305217.12" node_type="condition">
                                                            <node string="Result: false" node_type="result"/>
                                                            <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url.raw" duration="0" enterTime="1373305217.12" node_type="property"/>
                                                            <list name="Permit URL (CRL)" type="RegexList"/>
                                                            <info name="Properties">
                                                                <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url.raw" duration="0" enterTime="1373305217.12" node_type="property"/>
                                                            </info>
                                                        </node> <!--condition-->
                                                        <info name="Properties">
                                                            <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url.raw" duration="0" enterTime="1373305217.12" node_type="property"/>
                                                        </info>
                                                    </node> <!--condition-->
                                                    <info name="Properties">
                                                        <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url.raw" duration="0" enterTime="1373305217.12" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <node string="com.scur.engine.system.url.raw operator matches in list List(Name: Permit URL (Microsoft), Type: RegexList) term (Not evaluated part: )" duration="0.001" enterTime="1373305217.12" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node string="com.scur.engine.system.url.raw operator matches in list List(Name: Permit URL (Microsoft), Type: RegexList)" duration="0.001" enterTime="1373305217.12" node_type="condition">
                                                        <node string="Result: false" node_type="result"/>
                                                        <node string="com.scur.engine.system.url.raw operator matches in list List(Name: Permit URL (Microsoft), Type: RegexList)" duration="0.001" enterTime="1373305217.12" node_type="condition">
                                                            <node string="Result: false" node_type="result"/>
                                                            <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url.raw" duration="0" enterTime="1373305217.12" node_type="property"/>
                                                            <list name="Permit URL (Microsoft)" type="RegexList"/>
                                                            <info name="Properties">
                                                                <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url.raw" duration="0" enterTime="1373305217.12" node_type="property"/>
                                                            </info>
                                                        </node> <!--condition-->
                                                        <info name="Properties">
                                                            <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url.raw" duration="0" enterTime="1373305217.12" node_type="property"/>
                                                        </info>
                                                    </node> <!--condition-->
                                                    <info name="Properties">
                                                        <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url.raw" duration="0" enterTime="1373305217.12" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <node string="com.scur.engine.system.url.raw operator matches in list List(Name: Permit URL (Oracle), Type: RegexList) term (Not evaluated part: )" duration="0" enterTime="1373305217.121" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node string="com.scur.engine.system.url.raw operator matches in list List(Name: Permit URL (Oracle), Type: RegexList)" duration="0" enterTime="1373305217.121" node_type="condition">
                                                        <node string="Result: false" node_type="result"/>
                                                        <node string="com.scur.engine.system.url.raw operator matches in list List(Name: Permit URL (Oracle), Type: RegexList)" duration="0" enterTime="1373305217.121" node_type="condition">
                                                            <node string="Result: false" node_type="result"/>
                                                            <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url.raw" duration="0" enterTime="1373305217.121" node_type="property"/>
                                                            <list name="Permit URL (Oracle)" type="RegexList"/>
                                                            <info name="Properties">
                                                                <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url.raw" duration="0" enterTime="1373305217.121" node_type="property"/>
                                                            </info>
                                                        </node> <!--condition-->
                                                        <info name="Properties">
                                                            <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url.raw" duration="0" enterTime="1373305217.121" node_type="property"/>
                                                        </info>
                                                    </node> <!--condition-->
                                                    <info name="Properties">
                                                        <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url.raw" duration="0" enterTime="1373305217.121" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <info name="Properties">
                                                    <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url.raw" duration="0" enterTime="1373305217.12" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url.raw" duration="0" enterTime="1373305217.12" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Permit & Set Properties (Client)'-->
                                    <node id="958983948418272" string="URL Host Bypass" duration="0" enterTime="1373305217.121" node_type="rule">
                                        <node string="Executed action: allow, kStopCycle" node_type="executed_action"/>
                                        <node string="958983948428408 operator not equals Boolean[true] AND com.scur.engine.system.url.host operator matches in list List(Name: URL Host Bypass, Type: RegexList) operator matches in list com.scur.engine.system.url.host operator does not match in list List(Name: URL Host Skip Bypass, Type: RegexList) operator does not match in list com.scur.engine.system.client.ip operator is not in list List(Name: GLDALL Server, Type: IPList) operator is not in list (Not evaluated part: ) AND (Not evaluated part: ) AND (Not evaluated part: )" duration="0" enterTime="1373305217.121" node_type="condition">
                                            <node string="Result: true" node_type="result"/>
                                            <node string="958983948428408 operator not equals Boolean[true]" duration="0" enterTime="1373305217.121" node_type="condition">
                                                <node string="Result: true" node_type="result"/>
                                                <node name="958983948428408" type="Boolean" value="false" node_type="variable"/>
                                                <node type="Boolean" value="true" node_type="temporary_variable"/>
                                            </node> <!--condition-->
                                            <node string="com.scur.engine.system.url.host operator matches in list List(Name: URL Host Bypass, Type: RegexList) operator matches in list com.scur.engine.system.url.host operator does not match in list List(Name: URL Host Skip Bypass, Type: RegexList) operator does not match in list com.scur.engine.system.client.ip operator is not in list List(Name: GLDALL Server, Type: IPList) operator is not in list (Not evaluated part: ) AND (Not evaluated part: ) AND (Not evaluated part: )" duration="0" enterTime="1373305217.121" node_type="condition">
                                                <node string="Result: true" node_type="result"/>
                                                <node string="com.scur.engine.system.url.host operator matches in list List(Name: URL Host Bypass, Type: RegexList)" duration="0" enterTime="1373305217.121" node_type="condition">
                                                    <node string="Result: true" node_type="result"/>
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.121" node_type="property"/>
                                                    <list name="URL Host Bypass" type="RegexList"/>
                                                    <info name="Properties">
                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.121" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <node string="com.scur.engine.system.url.host operator does not match in list List(Name: URL Host Skip Bypass, Type: RegexList) operator does not match in list com.scur.engine.system.client.ip operator is not in list List(Name: GLDALL Server, Type: IPList) operator is not in list (Not evaluated part: ) AND (Not evaluated part: )" duration="0" enterTime="1373305217.121" node_type="condition">
                                                    <node string="Result: true" node_type="result"/>
                                                    <node string="com.scur.engine.system.url.host operator does not match in list List(Name: URL Host Skip Bypass, Type: RegexList)" duration="0" enterTime="1373305217.121" node_type="condition">
                                                        <node string="Result: true" node_type="result"/>
                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.121" node_type="property"/>
                                                        <list name="URL Host Skip Bypass" type="RegexList"/>
                                                        <info name="Properties">
                                                            <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.121" node_type="property"/>
                                                        </info>
                                                    </node> <!--condition-->
                                                    <node string="com.scur.engine.system.client.ip operator is not in list List(Name: GLDALL Server, Type: IPList) operator is not in list (Not evaluated part: )" duration="0" enterTime="1373305217.121" node_type="condition">
                                                        <node string="Result: true" node_type="result"/>
                                                        <node string="com.scur.engine.system.client.ip operator is not in list List(Name: GLDALL Server, Type: IPList)" duration="0" enterTime="1373305217.121" node_type="condition">
                                                            <node string="Result: true" node_type="result"/>
                                                            <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.121" node_type="property"/>
                                                            <list name="GLDALL Server" type="IPList"/>
                                                            <info name="Properties">
                                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.121" node_type="property"/>
                                                            </info>
                                                        </node> <!--condition-->
                                                        <info name="Properties">
                                                            <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.121" node_type="property"/>
                                                        </info>
                                                    </node> <!--condition-->
                                                    <info name="Properties">
                                                        <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.121" node_type="property"/>
                                                        <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.121" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <info name="Properties">
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.121" node_type="property"/>
                                                    <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.121" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305217.121" node_type="property"/>
                                                <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305217.121" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <node string="function call: String[Bypass_All] Long[1]" duration="0" enterTime="1373305217.121" node_type="event">
                                            <node type="String" value="Bypass_All" node_type="temporary_variable"/>
                                            <node type="Long" value="1" node_type="temporary_variable"/>
                                        </node> <!--event-->
                                    </node> <!--rule 'URL Host Bypass'-->
                                </node> <!--rule set 'Bypass - Migrate Necessary to Bypass HTTP'-->
                            </node> <!--rule set 'Global'-->
                        </node> <!--cycle-->
                        <node string="Logging" duration="0.005" enterTime="1373305222.86" node_type="cycle">
                            <node string="Default" duration="0.005" enterTime="1373305222.86" node_type="rulegroup">
                                <node string="const condition always" duration="0" enterTime="1373305222.86" node_type="condition">
                                    <node string="Result: true" node_type="result"/>
                                </node> <!--condition-->
                                <node id="958983948418780" string="Ignore handshakefailed from Coaching AUP - Dropbox Download" duration="0" enterTime="1373305222.86" node_type="rule">
                                    <node string="com.scur.engine.system.message.templatename operator equals String[handshakefailed] AND (Not evaluated part: )" duration="0" enterTime="1373305222.86" node_type="condition">
                                        <node string="Result: false" node_type="result"/>
                                        <node string="com.scur.engine.system.message.templatename operator equals String[handshakefailed]" duration="0" enterTime="1373305222.86" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node type="String" value="" string="com.scur.engine.system.message.templatename" duration="0" enterTime="1373305222.86" node_type="property"/>
                                            <node type="String" value="handshakefailed" node_type="temporary_variable"/>
                                            <info name="Properties">
                                                <node type="String" value="" string="com.scur.engine.system.message.templatename" duration="0" enterTime="1373305222.86" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <info name="Properties">
                                            <node type="String" value="" string="com.scur.engine.system.message.templatename" duration="0" enterTime="1373305222.86" node_type="property"/>
                                        </info>
                                    </node> <!--condition-->
                                </node> <!--rule 'Ignore handshakefailed from Coaching AUP - Dropbox Download'-->
                                <node string="Denied Log" duration="0" enterTime="1373305222.86" node_type="rulegroup">
                                    <node string="const condition always" duration="0" enterTime="1373305222.86" node_type="condition">
                                        <node string="Result: true" node_type="result"/>
                                    </node> <!--condition-->
                                    <node id="958983948398967" string="Write access_denied.log" duration="0" enterTime="1373305222.86" node_type="rule">
                                        <node string="com.scur.engine.system.response.statuscode operator equals Long[403] OR com.scur.engine.system.blockreasonid operator not equals Long[0] term (Not evaluated part: )" duration="0" enterTime="1373305222.86" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.system.response.statuscode operator equals Long[403]" duration="0" enterTime="1373305222.86" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="Long" value="200" string="com.scur.engine.system.response.statuscode" duration="0" enterTime="1373305222.86" node_type="property"/>
                                                <node type="Long" value="403" node_type="temporary_variable"/>
                                                <info name="Properties">
                                                    <node type="Long" value="200" string="com.scur.engine.system.response.statuscode" duration="0" enterTime="1373305222.86" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <node string="com.scur.engine.system.blockreasonid operator not equals Long[0] term (Not evaluated part: )" duration="0" enterTime="1373305222.86" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node string="com.scur.engine.system.blockreasonid operator not equals Long[0]" duration="0" enterTime="1373305222.86" node_type="condition">
                                                    <node string="Result: false" node_type="result"/>
                                                    <node string="com.scur.engine.system.blockreasonid operator not equals Long[0]" duration="0" enterTime="1373305222.86" node_type="condition">
                                                        <node string="Result: false" node_type="result"/>
                                                        <node type="Long" value="0" string="com.scur.engine.system.blockreasonid" duration="0" enterTime="1373305222.86" node_type="property"/>
                                                        <node type="Long" value="0" node_type="temporary_variable"/>
                                                        <info name="Properties">
                                                            <node type="Long" value="0" string="com.scur.engine.system.blockreasonid" duration="0" enterTime="1373305222.86" node_type="property"/>
                                                        </info>
                                                    </node> <!--condition-->
                                                    <info name="Properties">
                                                        <node type="Long" value="0" string="com.scur.engine.system.blockreasonid" duration="0" enterTime="1373305222.86" node_type="property"/>
                                                    </info>
                                                </node> <!--condition-->
                                                <info name="Properties">
                                                    <node type="Long" value="0" string="com.scur.engine.system.blockreasonid" duration="0" enterTime="1373305222.86" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="Long" value="200" string="com.scur.engine.system.response.statuscode" duration="0" enterTime="1373305222.86" node_type="property"/>
                                                <node type="Long" value="0" string="com.scur.engine.system.blockreasonid" duration="0" enterTime="1373305222.86" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Write access_denied.log'-->
                                </node> <!--rule set 'Denied Log'-->
                                <node string="Virus Log" duration="0" enterTime="1373305222.86" node_type="rulegroup">
                                    <node string="const condition always" duration="0" enterTime="1373305222.86" node_type="condition">
                                        <node string="Result: true" node_type="result"/>
                                    </node> <!--condition-->
                                    <node id="10178" string="Write foundViruses.log" duration="0" enterTime="1373305222.86" node_type="rule">
                                        <node string="com.scur.engine.antivirus.av.infected operator equals Boolean[true]" duration="0" enterTime="1373305222.86" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node string="com.scur.engine.antivirus.av.infected operator equals Boolean[true]" duration="0" enterTime="1373305222.86" node_type="condition">
                                                <node string="Result: false" node_type="result"/>
                                                <node type="Boolean" value="false" string="com.scur.engine.antivirus.av.infected" duration="0" enterTime="1373305222.86" node_type="property"/>
                                                <node type="Boolean" value="true" node_type="temporary_variable"/>
                                                <info name="Properties">
                                                    <node type="Boolean" value="false" string="com.scur.engine.antivirus.av.infected" duration="0" enterTime="1373305222.86" node_type="property"/>
                                                </info>
                                            </node> <!--condition-->
                                            <info name="Properties">
                                                <node type="Boolean" value="false" string="com.scur.engine.antivirus.av.infected" duration="0" enterTime="1373305222.86" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                    </node> <!--rule 'Write foundViruses.log'-->
                                </node> <!--rule set 'Virus Log'-->
                                <node string="Monitor Outbound" duration="0" enterTime="1373305222.86" node_type="rulegroup">
                                    <node string="958983948409629 operator equals Boolean[true]" duration="0" enterTime="1373305222.86" node_type="condition">
                                        <node string="Result: false" node_type="result"/>
                                        <node string="958983948409629 operator equals Boolean[true]" duration="0" enterTime="1373305222.86" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node name="958983948409629" type="Boolean" value="false" node_type="variable"/>
                                            <node type="Boolean" value="true" node_type="temporary_variable"/>
                                        </node> <!--condition-->
                                    </node> <!--condition-->
                                </node> <!--rule set 'Monitor Outbound'-->
                                <node string="Monitor Log" duration="0" enterTime="1373305222.86" node_type="rulegroup">
                                    <node string="17488 operator equals Boolean[true]" duration="0" enterTime="1373305222.86" node_type="condition">
                                        <node string="Result: false" node_type="result"/>
                                        <node string="17488 operator equals Boolean[true]" duration="0" enterTime="1373305222.86" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node name="17488" type="Boolean" value="false" node_type="variable"/>
                                            <node type="Boolean" value="true" node_type="temporary_variable"/>
                                        </node> <!--condition-->
                                    </node> <!--condition-->
                                </node> <!--rule set 'Monitor Log'-->
                                <node string="ArcSight East Log" duration="0.004" enterTime="1373305222.86" node_type="rulegroup">
                                    <node string="com.scur.engine.system.hostname operator matches Regex[hh-va10-wpw*] AND 958983948416984 operator not equals Boolean[true] operator not equals 17488 operator not equals Boolean[true] operator not equals (Not evaluated part: ) AND (Not evaluated part: )" duration="0" enterTime="1373305222.86" node_type="condition">
                                        <node string="Result: true" node_type="result"/>
                                        <node string="com.scur.engine.system.hostname operator matches Regex[hh-va10-wpw*]" duration="0" enterTime="1373305222.86" node_type="condition">
                                            <node string="Result: true" node_type="result"/>
                                            <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305222.86" node_type="property"/>
                                            <node type="Regex" value="hh-va10-wpw*" node_type="temporary_variable"/>
                                            <info name="Properties">
                                                <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305222.86" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <node string="958983948416984 operator not equals Boolean[true] operator not equals 17488 operator not equals Boolean[true] operator not equals (Not evaluated part: ) AND (Not evaluated part: )" duration="0" enterTime="1373305222.86" node_type="condition">
                                            <node string="Result: true" node_type="result"/>
                                            <node string="958983948416984 operator not equals Boolean[true]" duration="0" enterTime="1373305222.86" node_type="condition">
                                                <node string="Result: true" node_type="result"/>
                                                <node name="958983948416984" type="Boolean" value="false" node_type="variable"/>
                                                <node type="Boolean" value="true" node_type="temporary_variable"/>
                                            </node> <!--condition-->
                                            <node string="17488 operator not equals Boolean[true] operator not equals (Not evaluated part: )" duration="0" enterTime="1373305222.86" node_type="condition">
                                                <node string="Result: true" node_type="result"/>
                                                <node string="17488 operator not equals Boolean[true]" duration="0" enterTime="1373305222.86" node_type="condition">
                                                    <node string="Result: true" node_type="result"/>
                                                    <node name="17488" type="Boolean" value="false" node_type="variable"/>
                                                    <node type="Boolean" value="true" node_type="temporary_variable"/>
                                                </node> <!--condition-->
                                            </node> <!--condition-->
                                        </node> <!--condition-->
                                        <info name="Properties">
                                            <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305222.86" node_type="property"/>
                                        </info>
                                    </node> <!--condition-->
                                    <node id="958983948407820" string="Write arcsight-east|west.log" duration="0.004" enterTime="1373305222.86" node_type="rule">
                                        <node string="Executed action: allow, kContinue" node_type="executed_action"/>
                                        <node string="const condition always" duration="0" enterTime="1373305222.86" node_type="condition">
                                            <node string="Result: true" node_type="result"/>
                                        </node> <!--condition-->
                                        <node string="setaction: Variable(1113, String) :=    Property(com.scur.engine.listfilter.stringlist.mapinlist, String[Jul]) Property(com.scur.engine.datetimefilter.datetime.tostring, String[ 08 13:40:22]) String[ ] Property(com.scur.engine.stringfilter.string.replaceifequals, String[hh-va10-wpw902]) String[ ] String[CEF:0|McAfee|Web Gateway|7.2|] Property(com.scur.engine.stringfilter.string.replaceifequals, String[200]) String[|] Property(com.scur.engine.stringfilter.string.replaceifequals, String[TCP_MISS]) String[|] Property(com.scur.engine.stringfilter.string.replaceifequals, String[0]) String[|act=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[OBSERVED]) String[ app=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[HTTP]) String[ dhost=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[tools.cisco.com]) String[ dpt=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[443]) String[ dst=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[173.37.145.8]) String[ filePath=] String[ fileType=] Property(com.scur.engine.stringfilter.string.replaceall, String[-]) String[ fsize=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[0]) String[ fname=] String[ in=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[137]) String[ out=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[261]) String[ msg=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[-]) String[ requestMethod=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[CONNECT]) String[ src=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[10.60.108.177]) String[ suser=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[-]) String[\] Property(com.scur.engine.stringfilter.string.replaceifequals, String[-]) String[ requestClientApplication=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[-]) String[ cn1Label=Conns cn1=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[16]) String[ cn2Label=Rep cn2=]  Property(com.scur.engine.stringfilter.string.replaceifequals, String[-49]) String[ cn3Label=Err cn3=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[0]) String[ cs1Label=Virus cs1=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[-]) String[ cs2Label=CType cs2=] Property(com.scur.engine.stringfilter.string.replaceall, String[-]) String[ cs3Label=CN cs3=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[-]) String[ cs4Label=Cat cs4=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[Business, Software/Hardware]) String[ cs5Label=Server cs5=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[-]) String[ cs6Label=Rep cs6=]  Property(com.scur.engine.stringfilter.string.replaceifequals, String[Minimal Risk]) String[ flexString1Label=Rule flexString1=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[URL Host Bypass]) String[ flexString2Label=App flexString2=] Property(com.scur.engine.stringfilter.string.replaceifequals, String[-]) String[ ID=] Property(com.scur.engine.stringfilter.string.replaceall, String[13733052171060108177173371458]) String[ requestContext=] Property(com.scur.engine.stringfilter.string.replaceall, String[]) String[ request=] Property(com.scur.engine.stringfilter.string.replaceall, String[https://tools.cisco.com]) String[ connRunTime=] Property(com.scur.engine.stringfilter.number.tostring, String[5]) String[ timeInTrans=] Property(com.scur.engine.stringfilter.number.tostring, String[0]) String[ timeInRule=] Property(com.scur.engine.stringfilter.number.tostring, String[21]) String[ timeFRFSClient=] Property(com.scur.engine.stringfilter.number.tostring, String[0]) String[ timeFSFRServer=] Property(com.scur.engine.stringfilter.number.tostring, String[0])" duration="0.004" enterTime="1373305222.86" node_type="event">
                                            <node string="Variable(1113, String)" node_type="set_action_target"/>
                                            <list name="1 to 12" type="StringList"/>
                                            <list name="Months" type="StringList"/>
                                            <node type="String" value="Jul" string="com.scur.engine.listfilter.stringlist.mapinlist" duration="0" enterTime="1373305222.86" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="7" string="com.scur.engine.datetimefilter.date.tostring" duration="0" enterTime="1373305222.86" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="String" value="%M" node_type="temporary_variable"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" 08 13:40:22" string="com.scur.engine.datetimefilter.datetime.tostring" duration="0" enterTime="1373305222.86" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value=" %DD %hh:%mm:%ss" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" " node_type="temporary_variable"/>
                                            <node type="String" value="hh-va10-wpw902" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.86" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305222.86" node_type="property"/>
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" " node_type="temporary_variable"/>
                                            <node type="String" value="CEF:0|McAfee|Web Gateway|7.2|" node_type="temporary_variable"/>
                                            <node type="String" value="200" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.86" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="200" string="com.scur.engine.stringfilter.number.tostring" duration="0" enterTime="1373305222.86" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="Long" value="200" string="com.scur.engine.system.response.statuscode" duration="0" enterTime="1373305222.86" node_type="property"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value="|" node_type="temporary_variable"/>
                                            <node type="String" value="TCP_MISS" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.86" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="TCP_MISS" string="com.scur.engine.system.cache.status" duration="0" enterTime="1373305222.86" node_type="property"/>
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value="|" node_type="temporary_variable"/>
                                            <node type="String" value="0" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.86" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="0" string="com.scur.engine.stringfilter.number.tostring" duration="0" enterTime="1373305222.86" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="Long" value="0" string="com.scur.engine.system.blockreasonid" duration="0" enterTime="1373305222.86" node_type="property"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value="|act=" node_type="temporary_variable"/>
                                            <node type="String" value="OBSERVED" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.86" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="" string="com.scur.engine.system.blockreason" duration="0" enterTime="1373305222.86" node_type="property"/>
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="OBSERVED" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" app=" node_type="temporary_variable"/>
                                            <node type="String" value="HTTP" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.86" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="HTTP" string="com.scur.engine.system.connection.protocol" duration="0" enterTime="1373305222.86" node_type="property"/>
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" dhost=" node_type="temporary_variable"/>
                                            <node type="String" value="tools.cisco.com" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.861" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="tools.cisco.com" string="com.scur.engine.system.url.host" duration="0" enterTime="1373305222.861" node_type="property"/>
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" dpt=" node_type="temporary_variable"/>
                                            <node type="String" value="443" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.861" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="443" string="com.scur.engine.stringfilter.number.tostring" duration="0" enterTime="1373305222.861" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="Long" value="443" string="com.scur.engine.system.url.port" duration="0" enterTime="1373305222.861" node_type="property"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" dst=" node_type="temporary_variable"/>
                                            <node type="String" value="173.37.145.8" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.861" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="173.37.145.8" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305222.861" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="IP" value="173.37.145.8" string="com.scur.engine.system.destination.ip" duration="0" enterTime="1373305222.861" node_type="property"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" filePath=" node_type="temporary_variable"/>
                                            <node type="String" value=" fileType=" node_type="temporary_variable"/>
                                            <node type="String" value="-" string="com.scur.engine.stringfilter.string.replaceall" duration="0" enterTime="1373305222.861" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="-" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.861" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="String" value="" string="com.scur.engine.stringfilter.mediatypelist.tostring" duration="0" enterTime="1373305222.861" node_type="property">
                                                                <node node_type="parameter_list">
                                                                    <node type="MediaTypeList" value="" string="com.scur.engine.mtfilter.property.ensured" duration="0" enterTime="1373305222.861" node_type="property"/>
                                                                </node> <!--parameter-->
                                                            </node> <!--property-->
                                                            <node type="String" value="" node_type="temporary_variable"/>
                                                            <node type="String" value="-" node_type="temporary_variable"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="=" node_type="temporary_variable"/>
                                                    <node type="String" value="\=" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" fsize=" node_type="temporary_variable"/>
                                            <node type="String" value="0" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.861" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="0" string="com.scur.engine.stringfilter.number.tostring" duration="0" enterTime="1373305222.861" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="Long" value="0" string="com.scur.engine.system.body.size" duration="0" enterTime="1373305222.861" node_type="property"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" fname=" node_type="temporary_variable"/>
                                            <node type="String" value=" in=" node_type="temporary_variable"/>
                                            <node type="String" value="137" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.861" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="137" string="com.scur.engine.stringfilter.number.tostring" duration="0" enterTime="1373305222.861" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="Long" value="137" string="com.scur.engine.system.bytesrecvfromserver" duration="0" enterTime="1373305222.861" node_type="property"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" out=" node_type="temporary_variable"/>
                                            <node type="String" value="261" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.861" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="261" string="com.scur.engine.stringfilter.number.tostring" duration="0" enterTime="1373305222.861" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="Long" value="261" string="com.scur.engine.system.bytesrecvfromclient" duration="0" enterTime="1373305222.861" node_type="property"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" msg=" node_type="temporary_variable"/>
                                            <node type="String" value="-" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.861" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="" string="com.scur.engine.system.message.templatename" duration="0" enterTime="1373305222.861" node_type="property"/>
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" requestMethod=" node_type="temporary_variable"/>
                                            <node type="String" value="CONNECT" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.861" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="CONNECT" string="com.scur.engine.system.command.name" duration="0" enterTime="1373305222.861" node_type="property"/>
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" src=" node_type="temporary_variable"/>
                                            <node type="String" value="10.60.108.177" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.861" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="10.60.108.177" string="com.scur.engine.stringfilter.ip.tostring" duration="0" enterTime="1373305222.861" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="IP" value="10.60.108.177" string="com.scur.engine.system.client.ip" duration="0" enterTime="1373305222.861" node_type="property"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" suser=" node_type="temporary_variable"/>
                                            <node type="String" value="-" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.861" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="" string="com.scur.engine.auth.realm" duration="0" enterTime="1373305222.861" node_type="property"/>
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value="\" node_type="temporary_variable"/>
                                            <node type="String" value="-" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.861" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="" string="com.scur.engine.auth.username" duration="0" enterTime="1373305222.861" node_type="property"/>
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" requestClientApplication=" node_type="temporary_variable"/>
                                            <node type="String" value="-" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.861" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="" string="com.scur.engine.headerfilter.request.headers.getheader" duration="0" enterTime="1373305222.861" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="String" value="User-Agent" node_type="temporary_variable"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" cn1Label=Conns cn1=" node_type="temporary_variable"/>
                                            <node type="String" value="16" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.861" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="16" string="com.scur.engine.stringfilter.number.tostring" duration="0" enterTime="1373305222.861" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="Long" value="16" string="com.scur.engine.system.client.numberofconnections" duration="0" enterTime="1373305222.861" node_type="property"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" cn2Label=Rep cn2=" node_type="temporary_variable"/>
                                            <node id="com.scur.engine.trustedsource.4569" string="Default" node_type="configuration"/>
                                            <node type="String" value="-49" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.861" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="-49" string="com.scur.engine.stringfilter.number.tostring" duration="0" enterTime="1373305222.861" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="Long" value="-49" string="com.scur.engine.trustedsource.url.reputation" duration="0" enterTime="1373305222.861" node_type="property"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" cn3Label=Err cn3=" node_type="temporary_variable"/>
                                            <node type="String" value="0" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.861" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="0" string="com.scur.engine.stringfilter.number.tostring" duration="0" enterTime="1373305222.861" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="Long" value="0" string="com.scur.engine.system.error.id" duration="0" enterTime="1373305222.861" node_type="property"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" cs1Label=Virus cs1=" node_type="temporary_variable"/>
                                            <node type="String" value="-" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.861" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="" string="com.scur.engine.stringfilter.stringlist.tostring" duration="0" enterTime="1373305222.861" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="StringList" value="" string="com.scur.engine.antivirus.av.virusnames" duration="0" enterTime="1373305222.861" node_type="property"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" cs2Label=CType cs2=" node_type="temporary_variable"/>
                                            <node type="String" value="-" string="com.scur.engine.stringfilter.string.replaceall" duration="0" enterTime="1373305222.862" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="-" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.862" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="String" value="" string="com.scur.engine.headerfilter.response.headers.getheader" duration="0.001" enterTime="1373305222.861" node_type="property">
                                                                <node node_type="parameter_list">
                                                                    <node type="String" value="Content-Type" node_type="temporary_variable"/>
                                                                </node> <!--parameter-->
                                                            </node> <!--property-->
                                                            <node type="String" value="" node_type="temporary_variable"/>
                                                            <node type="String" value="-" node_type="temporary_variable"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="=" node_type="temporary_variable"/>
                                                    <node type="String" value="\=" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" cs3Label=CN cs3=" node_type="temporary_variable"/>
                                            <node type="String" value="-" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.862" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="" string="com.scur.engine.certificatefilter.ssl.certificate.cn" duration="0" enterTime="1373305222.862" node_type="property"/>
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" cs4Label=Cat cs4=" node_type="temporary_variable"/>
                                            <node type="String" value="Business, Software/Hardware" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.862" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="Business, Software/Hardware" string="com.scur.engine.trustedsource.categorylist.tostring" duration="0" enterTime="1373305222.862" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node name="958983948418319" type="CategoryList" value="105, 175" node_type="variable"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="none" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" cs5Label=Server cs5=" node_type="temporary_variable"/>
                                            <node type="String" value="-" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.862" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="" string="com.scur.engine.headerfilter.response.headers.getheader" duration="0" enterTime="1373305222.862" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="String" value="Server" node_type="temporary_variable"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" cs6Label=Rep cs6=" node_type="temporary_variable"/>
                                            <node id="com.scur.engine.trustedsource.4569" string="Default" node_type="configuration"/>
                                            <node type="String" value="Minimal Risk" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.862" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="Minimal Risk" string="com.scur.engine.trustedsource.url.reputationstring" duration="0" enterTime="1373305222.862" node_type="property"/>
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" flexString1Label=Rule flexString1=" node_type="temporary_variable"/>
                                            <node type="String" value="URL Host Bypass" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.862" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="URL Host Bypass" string="com.scur.engine.system.rules.currentrulename" duration="0" enterTime="1373305222.862" node_type="property"/>
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" flexString2Label=App flexString2=" node_type="temporary_variable"/>
                                            <node type="String" value="-" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0.001" enterTime="1373305222.862" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="" string="com.scur.engine.applcontrol.tostring" duration="0" enterTime="1373305222.862" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="String" value="" string="com.scur.engine.applcontrol.name" duration="0" enterTime="1373305222.862" node_type="property"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="" node_type="temporary_variable"/>
                                                    <node type="String" value="-" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" ID=" node_type="temporary_variable"/>
                                            <node type="String" value="13733052171060108177173371458" string="com.scur.engine.stringfilter.string.replaceall" duration="0" enterTime="1373305222.864" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="13733052171060108177173371458" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0.001" enterTime="1373305222.863" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node name="958983948399099" type="String" value="13733052171060108177173371458" node_type="variable"/>
                                                            <node type="String" value="" node_type="temporary_variable"/>
                                                            <node type="String" value="-" node_type="temporary_variable"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="=" node_type="temporary_variable"/>
                                                    <node type="String" value="\=" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" requestContext=" node_type="temporary_variable"/>
                                            <node type="String" value="" string="com.scur.engine.stringfilter.string.replaceall" duration="0" enterTime="1373305222.864" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="" string="com.scur.engine.headerfilter.request.headers.getheader" duration="0" enterTime="1373305222.864" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="String" value="Referer" node_type="temporary_variable"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="=" node_type="temporary_variable"/>
                                                    <node type="String" value="\=" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" request=" node_type="temporary_variable"/>
                                            <node type="String" value="https://tools.cisco.com" string="com.scur.engine.stringfilter.string.replaceall" duration="0" enterTime="1373305222.864" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="String" value="https://tools.cisco.com" string="com.scur.engine.stringfilter.string.replaceifequals" duration="0" enterTime="1373305222.864" node_type="property">
                                                        <node node_type="parameter_list">
                                                            <node type="String" value="https://tools.cisco.com" string="com.scur.engine.system.url.raw" duration="0" enterTime="1373305222.864" node_type="property"/>
                                                            <node type="String" value="" node_type="temporary_variable"/>
                                                            <node type="String" value="-" node_type="temporary_variable"/>
                                                        </node> <!--parameter-->
                                                    </node> <!--property-->
                                                    <node type="String" value="=" node_type="temporary_variable"/>
                                                    <node type="String" value="\=" node_type="temporary_variable"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" connRunTime=" node_type="temporary_variable"/>
                                            <node type="String" value="5" string="com.scur.engine.stringfilter.number.tostring" duration="0" enterTime="1373305222.864" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="Long" value="5" string="com.scur.engine.system.connection.runtime" duration="0" enterTime="1373305222.864" node_type="property"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" timeInTrans=" node_type="temporary_variable"/>
                                            <node type="String" value="0" string="com.scur.engine.stringfilter.number.tostring" duration="0" enterTime="1373305222.864" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="Long" value="0" string="com.scur.engine.system.timer.timefortransaction" duration="0" enterTime="1373305222.864" node_type="property"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" timeInRule=" node_type="temporary_variable"/>
                                            <node type="String" value="21" string="com.scur.engine.stringfilter.number.tostring" duration="0" enterTime="1373305222.864" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="Long" value="21" string="com.scur.engine.system.timer.timeconsumedbyruleengine" duration="0" enterTime="1373305222.864" node_type="property"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" timeFRFSClient=" node_type="temporary_variable"/>
                                            <node type="String" value="0" string="com.scur.engine.stringfilter.number.tostring" duration="0" enterTime="1373305222.864" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="Long" value="0" string="com.scur.engine.system.timer.firstsentfirstreceivedclient" duration="0" enterTime="1373305222.864" node_type="property"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                            <node type="String" value=" timeFSFRServer=" node_type="temporary_variable"/>
                                            <node type="String" value="0" string="com.scur.engine.stringfilter.number.tostring" duration="0" enterTime="1373305222.864" node_type="property">
                                                <node node_type="parameter_list">
                                                    <node type="Long" value="0" string="com.scur.engine.system.timer.firstsentfirstreceivedserver" duration="0" enterTime="1373305222.864" node_type="property"/>
                                                </node> <!--parameter-->
                                            </node> <!--property-->
                                        </node> <!--event-->
                                        <node string="function call: Variable(1113, String[Jul 08 13:40:22 hh-va10-wpw902 CEF:0|McAfee|Web Gateway|7.2|200|TCP_MISS|0|act=OBSERVED app=HTTP dhost=tools.cisco.com dpt=443 dst=173.37.145.8 filePath= fileType=- fsize=0 fname= in=137 out=261 msg=- requestMethod=CONNECT src=10.60.108.177 suser=-\- requestClientApplication=- cn1Label=Conns cn1=16 cn2Label=Rep cn2=-49 cn3Label=Err cn3=0 cs1Label=Virus cs1=- cs2Label=CType cs2=- cs3Label=CN cs3=- cs4Label=Cat cs4=Business, Software/Hardware cs5Label=Server cs5=- cs6Label=Rep cs6=Minimal Risk flexString1Label=Rule flexString1=URL Host Bypass flexString2Label=App flexString2=- ID=13733052171060108177173371458 requestContext= request=https://tools.cisco.com connRunTime=5 timeInTrans=0 timeInRule=21 timeFRFSClient=0 timeFSFRServer=0])" duration="0" enterTime="1373305222.864" node_type="event">
                                            <node name="1113" type="String" value="Jul 08 13:40:22 hh-va10-wpw902 CEF:0|McAfee|Web Gateway|7.2|200|TCP_MISS|0|act=OBSERVED app=HTTP dhost=tools.cisco.com dpt=443 dst=173.37.145.8 filePath= fileType=- fsize=0 fname= in=137 out=261 msg=- requestMethod=CONNECT src=10.60.108.177 suser=-\- requestClientApplication=- cn1Label=Conns cn1=16 cn2Label=Rep cn2=-49 cn3Label=Err cn3=0 cs1Label=Virus cs1=- cs2Label=CType cs2=- cs3Label=CN cs3=- cs4Label=Cat cs4=Business, Software/Hardware cs5Label=Server cs5=- cs6Label=Rep cs6=Minimal Risk flexString1Label=Rule flexString1=URL Host Bypass flexString2Label=App flexString2=- ID=13733052171060108177173371458 requestContext= request=https://tools.cisco.com connRunTime=5 timeInTrans=0 timeInRule=21 timeFRFSClient=0 timeFSFRServer=0" node_type="variable"/>
                                        </node> <!--event-->
                                    </node> <!--rule 'Write arcsight-east|west.log'-->
                                </node> <!--rule set 'ArcSight East Log'-->
                                <node string="ArcSight West Log" duration="0" enterTime="1373305222.864" node_type="rulegroup">
                                    <node string="com.scur.engine.system.hostname operator matches Regex[hh-tx10-wpw*] AND (Not evaluated part: )" duration="0" enterTime="1373305222.864" node_type="condition">
                                        <node string="Result: false" node_type="result"/>
                                        <node string="com.scur.engine.system.hostname operator matches Regex[hh-tx10-wpw*]" duration="0" enterTime="1373305222.864" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305222.864" node_type="property"/>
                                            <node type="Regex" value="hh-tx10-wpw*" node_type="temporary_variable"/>
                                            <info name="Properties">
                                                <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305222.864" node_type="property"/>
                                            </info>
                                        </node> <!--condition-->
                                        <info name="Properties">
                                            <node type="String" value="hh-va10-wpw902" string="com.scur.engine.system.hostname" duration="0" enterTime="1373305222.864" node_type="property"/>
                                        </info>
                                    </node> <!--condition-->
                                </node> <!--rule set 'ArcSight West Log'-->
                                <node string="ExpandedInfo Log" duration="0" enterTime="1373305222.865" node_type="rulegroup">
                                    <node string="958983948400042 operator equals Boolean[true]" duration="0" enterTime="1373305222.865" node_type="condition">
                                        <node string="Result: false" node_type="result"/>
                                        <node string="958983948400042 operator equals Boolean[true]" duration="0" enterTime="1373305222.865" node_type="condition">
                                            <node string="Result: false" node_type="result"/>
                                            <node name="958983948400042" type="Boolean" value="false" node_type="variable"/>
                                            <node type="Boolean" value="true" node_type="temporary_variable"/>
                                        </node> <!--condition-->
                                    </node> <!--condition-->
                                </node> <!--rule set 'ExpandedInfo Log'-->
                            </node> <!--rule set 'Default'-->
                        </node> <!--cycle-->
                    </trace> Which
                    • 7. Re: Expected Rule Traversal When Stop Cycle Invoked
                      Jon Scholten

                      Some context is still missing. The example above is the rule trace inside the tunnel (Command.Name equals GET). The above does not show the SSL connection establishment (Command.Name equals CONNECT).

                       

                      Just because you execute a Stop Cycle, does not mean the next cycle will not take place. It just means the following rules in the current cycle will not be executed.

                       

                      So if you Cycle in the Request Cycle, it stops processing further rules IN the request cycle. For the example above, the Response cycle will still be processed if you have a stop cycle in the Request cycle.

                       

                      Is it your goal to bypass SSL scanning for a particular URL? That's what I think you are trying to do.

                       

                      Please show me the rule trace from the SSL connection establishment, and post the values of URL.Host and URL.Destination.IP.

                       

                      Best,

                      Jon

                      • 8. Re: Expected Rule Traversal When Stop Cycle Invoked
                        btlyric

                        After further research, testing and investigation it appears that this issue is one partially created by a global whitelist entry for a domain, maybe lack of SNI info sent from client, a resulting mix of connections that did not hit Stop Cycle because the initial CONNECT to the proxy contained an IP address and possibly some proxy connection overload. We have added an additional MWG and things seem to be functioning better. Additionally, removing the URL.Host domain from the global whitelist resulted in better performance.

                         

                        So, some more questions.

                         

                        Under Proxies -> Advanced Settings, Maximal number of client connections -- default is 25000. Is this value directly tied to what you see under Dashboard/Charts/Executive Summary?

                         

                        Number of working threads -- what is the best way to determine the optimal value?

                         

                        Listen backlog -- what is the best way to determine the optimal value? Does that tie back to a kernel value? sysctl?

                         

                        Limit for working threads doing IO in web cache -- same question again.

                        • 9. Re: Expected Rule Traversal When Stop Cycle Invoked
                          asabban

                          Hello,

                           

                          while I completely understand the wish to "tweak" the mentioned settings to obtain a maximum performance I always recommend to not touch any of the settings mentioned. The default values have been defined after long discussions, lab tests and analysis and usually there is really no noticable benefit when changing those settings. On the other hand this could lead to various unforeseen issues and support and engineering will have a very hard time in troubleshooting.

                           

                          In case there is a reason such as performance issues that cause you to look into those settings the issues should be tracked by support and changes should only be applied in case engineering/support advises to do so. Especially the working threads may seem low but the setting works for some of the largest installations I am aware of.

                           

                          Actually MWG has a "no hidden settings" philosophy which causes many settings to show up in the UI which you usually don't want to touch... As mentioned I can fully understand the intention to understand and change the defaults, but as someone who has supported the product for a couple of years I can assure that most "improvements" I have seen done by customers in regards to timeouts or memory stack sizes had a negative impact :-)

                           

                          For finding the best values I unfortunately don't know a best practice. From our end what we do is measure the "maximum throughput", e.g. how many requests can flow through MWG before we start noticing delays or seeing errors. That is rather hard to simulate, on our end it is simulated with "lab traffic", so the settings are optimized in that fashion. "Tweaking" for my understanding would mean that you adjust the settings to get the best performance for the very unique profile of traffic genrated by the users in your company. This would mean you need to capture "typical" traffic for a while and get an idea of what is special for your company. You need details such as

                           

                          - how many requests do I see? what kind of requests? (GET, POST)

                          - sizes of requests/responses

                          - HTTP/HTTPS

                          - what media types go through and how much of the traffic is for a specific media type? (jpg, gif, png, css, js, html, exe, ...)

                          - ratio of HTTP 1.0/1.1

                          - probably also include different clients and their special behaviour (e.g. maximum concurrent connections per second, window sizes, ...)

                          - what kinds of websites are called? (complex websites causing browsers to create multiple TCP connections, simple websites with few objects)

                          - what about persistent connections, caused by applications such as Office365, Google Docs, ...

                          - big uploads/downloads, "web storage" (cloud storage, dropbox, skydrive...)

                          - all the "non-HTTP" traffic that is probably somehow tunneled through MWG by non-browser applications

                          - updates such as windows updates, adobe updates, AV updates (how often, how much traffic, how many clients, ...)

                          - FTP?

                          - how much of the traffic is blocked by your MWG policies (in request cycle (= no communication to server), in response cycle (= communication to server but only error page for client)

                          - additionally other devices can influence how the data flows, such as firewalls, other involved proxies, transparent solutions such as DLPs or IDSs

                          - DNS performance

                           

                          And probably many more (I am not a QA/Performance person)... what I want to express is that it would be a very tough challenge to optimize MWG especially for your company profile and therefore living with the defaults should be suitable. Apart from that you can only change a setting and see if something changes for the users OR find a way to simulate your companies traffic as detailled as possible and measure the performance. Then change settings, measure performance again, and so on.

                           

                          While I am aware that I did not answer the question I hope it makes some sense :-)

                           

                          Best,

                          Andre

                          1 2 Previous Next