mickey58 commited on
Commit
fd0f2bd
·
verified ·
1 Parent(s): 5b59281

Upload and.txt

Browse files
Files changed (1) hide show
  1. and.txt +1536 -0
and.txt ADDED
@@ -0,0 +1,1536 @@
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
+ <and>
2
+ <!--MOBIS-AgentIP-->
3
+ <add asArray="true">
4
+ <varstring name="MOBIS-AgentIP" scope="event"/>
5
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
6
+ </add>
7
+ <add asArray="false">
8
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
9
+ <agentIPAddress />
10
+ </add>
11
+ <set>
12
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
13
+ <string value=" " preserveCase="true"/>
14
+ </set>
15
+
16
+ <!--MOBIS-connectedServer-->
17
+ <add asArray="true">
18
+ <varstring name="MOBIS-connectedServer" scope="event"/>
19
+ <dnsHostAvailable name="10.10.156.141" />
20
+ </add>
21
+
22
+
23
+
24
+ <or>
25
+ <like expr="%NDIS%">
26
+ <evtAdapterName />
27
+ </like>
28
+ <like expr="%remote%">
29
+ <evtAdapterName />
30
+ </like>
31
+ <like expr="%Bluetooth Device%">
32
+ <evtAdapterName />
33
+ </like>
34
+ <like expr="%Apple%">
35
+ <evtAdapterName />
36
+ </like>
37
+ <like expr="%iphone%">
38
+ <evtAdapterName />
39
+ </like>
40
+ </or>
41
+ <in>
42
+ <evtOperationType />
43
+ <list>
44
+ <constOpNetwork />
45
+ <constOpNetworkEx />
46
+ </list>
47
+ </in>
48
+ </and><and>
49
+ <!--MOBIS-AgentIP-->
50
+ <add asArray="true">
51
+ <varstring name="MOBIS-AgentIP" scope="event"/>
52
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
53
+ </add>
54
+ <add asArray="false">
55
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
56
+ <agentIPAddress />
57
+ </add>
58
+ <set>
59
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
60
+ <string value=" " preserveCase="true"/>
61
+ </set>
62
+
63
+ <!--MOBIS-connectedServer-->
64
+ <add asArray="true">
65
+ <varstring name="MOBIS-connectedServer" scope="event"/>
66
+ <dnsHostAvailable name="10.10.156.141" />
67
+ </add>
68
+
69
+
70
+
71
+ <or>
72
+ <like expr="%NDIS%">
73
+ <evtAdapterName />
74
+ </like>
75
+ <like expr="%remote%">
76
+ <evtAdapterName />
77
+ </like>
78
+ <like expr="%Bluetooth Device%">
79
+ <evtAdapterName />
80
+ </like>
81
+ <like expr="%Apple%">
82
+ <evtAdapterName />
83
+ </like>
84
+ <like expr="%iphone%">
85
+ <evtAdapterName />
86
+ </like>
87
+ </or>
88
+ <in>
89
+ <evtOperationType />
90
+ <list>
91
+ <constOpNetwork />
92
+ <constOpNetworkEx />
93
+ </list>
94
+ </in>
95
+ </and>
96
+ <and>
97
+ <!--MOBIS-AgentIP-->
98
+ <add asArray="true">
99
+ <varstring name="MOBIS-AgentIP" scope="event"/>
100
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
101
+ </add>
102
+ <add asArray="false">
103
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
104
+ <agentIPAddress />
105
+ </add>
106
+ <set>
107
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
108
+ <string value=" " preserveCase="true"/>
109
+ </set>
110
+
111
+ <!--MOBIS-connectedServer-->
112
+ <add asArray="true">
113
+ <varstring name="MOBIS-connectedServer" scope="event"/>
114
+ <dnsHostAvailable name="10.10.156.141" />
115
+ </add>
116
+
117
+
118
+
119
+ <or>
120
+ <like expr="%NDIS%">
121
+ <evtAdapterName />
122
+ </like>
123
+ <like expr="%remote%">
124
+ <evtAdapterName />
125
+ </like>
126
+ <like expr="%Bluetooth Device%">
127
+ <evtAdapterName />
128
+ </like>
129
+ <like expr="%Apple%">
130
+ <evtAdapterName />
131
+ </like>
132
+ <like expr="%iphone%">
133
+ <evtAdapterName />
134
+ </like>
135
+ </or>
136
+ <in>
137
+ <evtOperationType />
138
+ <list>
139
+ <constOpNetwork />
140
+ <constOpNetworkEx />
141
+ </list>
142
+ </in>
143
+ </and>
144
+ <and>
145
+ <!--MOBIS-AgentIP-->
146
+ <add asArray="true">
147
+ <varstring name="MOBIS-AgentIP" scope="event"/>
148
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
149
+ </add>
150
+ <add asArray="false">
151
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
152
+ <agentIPAddress />
153
+ </add>
154
+ <set>
155
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
156
+ <string value=" " preserveCase="true"/>
157
+ </set>
158
+
159
+ <!--MOBIS-connectedServer-->
160
+ <add asArray="true">
161
+ <varstring name="MOBIS-connectedServer" scope="event"/>
162
+ <dnsHostAvailable name="10.10.156.141" />
163
+ </add>
164
+
165
+
166
+
167
+ <or>
168
+ <like expr="%NDIS%">
169
+ <evtAdapterName />
170
+ </like>
171
+ <like expr="%remote%">
172
+ <evtAdapterName />
173
+ </like>
174
+ <like expr="%Bluetooth Device%">
175
+ <evtAdapterName />
176
+ </like>
177
+ <like expr="%Apple%">
178
+ <evtAdapterName />
179
+ </like>
180
+ <like expr="%iphone%">
181
+ <evtAdapterName />
182
+ </like>
183
+ </or>
184
+ <in>
185
+ <evtOperationType />
186
+ <list>
187
+ <constOpNetwork />
188
+ <constOpNetworkEx />
189
+ </list>
190
+ </in>
191
+ </and>
192
+ <and>
193
+ <!--MOBIS-AgentIP-->
194
+ <add asArray="true">
195
+ <varstring name="MOBIS-AgentIP" scope="event"/>
196
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
197
+ </add>
198
+ <add asArray="false">
199
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
200
+ <agentIPAddress />
201
+ </add>
202
+ <set>
203
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
204
+ <string value=" " preserveCase="true"/>
205
+ </set>
206
+
207
+ <!--MOBIS-connectedServer-->
208
+ <add asArray="true">
209
+ <varstring name="MOBIS-connectedServer" scope="event"/>
210
+ <dnsHostAvailable name="10.10.156.141" />
211
+ </add>
212
+
213
+
214
+
215
+ <or>
216
+ <like expr="%NDIS%">
217
+ <evtAdapterName />
218
+ </like>
219
+ <like expr="%remote%">
220
+ <evtAdapterName />
221
+ </like>
222
+ <like expr="%Bluetooth Device%">
223
+ <evtAdapterName />
224
+ </like>
225
+ <like expr="%Apple%">
226
+ <evtAdapterName />
227
+ </like>
228
+ <like expr="%iphone%">
229
+ <evtAdapterName />
230
+ </like>
231
+ </or>
232
+ <in>
233
+ <evtOperationType />
234
+ <list>
235
+ <constOpNetwork />
236
+ <constOpNetworkEx />
237
+ </list>
238
+ </in>
239
+ </and>
240
+ <and>
241
+ <!--MOBIS-AgentIP-->
242
+ <add asArray="true">
243
+ <varstring name="MOBIS-AgentIP" scope="event"/>
244
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
245
+ </add>
246
+ <add asArray="false">
247
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
248
+ <agentIPAddress />
249
+ </add>
250
+ <set>
251
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
252
+ <string value=" " preserveCase="true"/>
253
+ </set>
254
+
255
+ <!--MOBIS-connectedServer-->
256
+ <add asArray="true">
257
+ <varstring name="MOBIS-connectedServer" scope="event"/>
258
+ <dnsHostAvailable name="10.10.156.141" />
259
+ </add>
260
+
261
+
262
+
263
+ <or>
264
+ <like expr="%NDIS%">
265
+ <evtAdapterName />
266
+ </like>
267
+ <like expr="%remote%">
268
+ <evtAdapterName />
269
+ </like>
270
+ <like expr="%Bluetooth Device%">
271
+ <evtAdapterName />
272
+ </like>
273
+ <like expr="%Apple%">
274
+ <evtAdapterName />
275
+ </like>
276
+ <like expr="%iphone%">
277
+ <evtAdapterName />
278
+ </like>
279
+ </or>
280
+ <in>
281
+ <evtOperationType />
282
+ <list>
283
+ <constOpNetwork />
284
+ <constOpNetworkEx />
285
+ </list>
286
+ </in>
287
+ </and>
288
+ <and>
289
+ <!--MOBIS-AgentIP-->
290
+ <add asArray="true">
291
+ <varstring name="MOBIS-AgentIP" scope="event"/>
292
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
293
+ </add>
294
+ <add asArray="false">
295
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
296
+ <agentIPAddress />
297
+ </add>
298
+ <set>
299
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
300
+ <string value=" " preserveCase="true"/>
301
+ </set>
302
+
303
+ <!--MOBIS-connectedServer-->
304
+ <add asArray="true">
305
+ <varstring name="MOBIS-connectedServer" scope="event"/>
306
+ <dnsHostAvailable name="10.10.156.141" />
307
+ </add>
308
+
309
+
310
+
311
+ <or>
312
+ <like expr="%NDIS%">
313
+ <evtAdapterName />
314
+ </like>
315
+ <like expr="%remote%">
316
+ <evtAdapterName />
317
+ </like>
318
+ <like expr="%Bluetooth Device%">
319
+ <evtAdapterName />
320
+ </like>
321
+ <like expr="%Apple%">
322
+ <evtAdapterName />
323
+ </like>
324
+ <like expr="%iphone%">
325
+ <evtAdapterName />
326
+ </like>
327
+ </or>
328
+ <in>
329
+ <evtOperationType />
330
+ <list>
331
+ <constOpNetwork />
332
+ <constOpNetworkEx />
333
+ </list>
334
+ </in>
335
+ </and>
336
+ <and>
337
+ <!--MOBIS-AgentIP-->
338
+ <add asArray="true">
339
+ <varstring name="MOBIS-AgentIP" scope="event"/>
340
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
341
+ </add>
342
+ <add asArray="false">
343
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
344
+ <agentIPAddress />
345
+ </add>
346
+ <set>
347
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
348
+ <string value=" " preserveCase="true"/>
349
+ </set>
350
+
351
+ <!--MOBIS-connectedServer-->
352
+ <add asArray="true">
353
+ <varstring name="MOBIS-connectedServer" scope="event"/>
354
+ <dnsHostAvailable name="10.10.156.141" />
355
+ </add>
356
+
357
+
358
+
359
+ <or>
360
+ <like expr="%NDIS%">
361
+ <evtAdapterName />
362
+ </like>
363
+ <like expr="%remote%">
364
+ <evtAdapterName />
365
+ </like>
366
+ <like expr="%Bluetooth Device%">
367
+ <evtAdapterName />
368
+ </like>
369
+ <like expr="%Apple%">
370
+ <evtAdapterName />
371
+ </like>
372
+ <like expr="%iphone%">
373
+ <evtAdapterName />
374
+ </like>
375
+ </or>
376
+ <in>
377
+ <evtOperationType />
378
+ <list>
379
+ <constOpNetwork />
380
+ <constOpNetworkEx />
381
+ </list>
382
+ </in>
383
+ </and>
384
+ <and>
385
+ <!--MOBIS-AgentIP-->
386
+ <add asArray="true">
387
+ <varstring name="MOBIS-AgentIP" scope="event"/>
388
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
389
+ </add>
390
+ <add asArray="false">
391
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
392
+ <agentIPAddress />
393
+ </add>
394
+ <set>
395
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
396
+ <string value=" " preserveCase="true"/>
397
+ </set>
398
+
399
+ <!--MOBIS-connectedServer-->
400
+ <add asArray="true">
401
+ <varstring name="MOBIS-connectedServer" scope="event"/>
402
+ <dnsHostAvailable name="10.10.156.141" />
403
+ </add>
404
+
405
+
406
+
407
+ <or>
408
+ <like expr="%NDIS%">
409
+ <evtAdapterName />
410
+ </like>
411
+ <like expr="%remote%">
412
+ <evtAdapterName />
413
+ </like>
414
+ <like expr="%Bluetooth Device%">
415
+ <evtAdapterName />
416
+ </like>
417
+ <like expr="%Apple%">
418
+ <evtAdapterName />
419
+ </like>
420
+ <like expr="%iphone%">
421
+ <evtAdapterName />
422
+ </like>
423
+ </or>
424
+ <in>
425
+ <evtOperationType />
426
+ <list>
427
+ <constOpNetwork />
428
+ <constOpNetworkEx />
429
+ </list>
430
+ </in>
431
+ </and>
432
+ <and>
433
+ <!--MOBIS-AgentIP-->
434
+ <add asArray="true">
435
+ <varstring name="MOBIS-AgentIP" scope="event"/>
436
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
437
+ </add>
438
+ <add asArray="false">
439
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
440
+ <agentIPAddress />
441
+ </add>
442
+ <set>
443
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
444
+ <string value=" " preserveCase="true"/>
445
+ </set>
446
+
447
+ <!--MOBIS-connectedServer-->
448
+ <add asArray="true">
449
+ <varstring name="MOBIS-connectedServer" scope="event"/>
450
+ <dnsHostAvailable name="10.10.156.141" />
451
+ </add>
452
+
453
+
454
+
455
+ <or>
456
+ <like expr="%NDIS%">
457
+ <evtAdapterName />
458
+ </like>
459
+ <like expr="%remote%">
460
+ <evtAdapterName />
461
+ </like>
462
+ <like expr="%Bluetooth Device%">
463
+ <evtAdapterName />
464
+ </like>
465
+ <like expr="%Apple%">
466
+ <evtAdapterName />
467
+ </like>
468
+ <like expr="%iphone%">
469
+ <evtAdapterName />
470
+ </like>
471
+ </or>
472
+ <in>
473
+ <evtOperationType />
474
+ <list>
475
+ <constOpNetwork />
476
+ <constOpNetworkEx />
477
+ </list>
478
+ </in>
479
+ </and>
480
+ <and>
481
+ <!--MOBIS-AgentIP-->
482
+ <add asArray="true">
483
+ <varstring name="MOBIS-AgentIP" scope="event"/>
484
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
485
+ </add>
486
+ <add asArray="false">
487
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
488
+ <agentIPAddress />
489
+ </add>
490
+ <set>
491
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
492
+ <string value=" " preserveCase="true"/>
493
+ </set>
494
+
495
+ <!--MOBIS-connectedServer-->
496
+ <add asArray="true">
497
+ <varstring name="MOBIS-connectedServer" scope="event"/>
498
+ <dnsHostAvailable name="10.10.156.141" />
499
+ </add>
500
+
501
+
502
+
503
+ <or>
504
+ <like expr="%NDIS%">
505
+ <evtAdapterName />
506
+ </like>
507
+ <like expr="%remote%">
508
+ <evtAdapterName />
509
+ </like>
510
+ <like expr="%Bluetooth Device%">
511
+ <evtAdapterName />
512
+ </like>
513
+ <like expr="%Apple%">
514
+ <evtAdapterName />
515
+ </like>
516
+ <like expr="%iphone%">
517
+ <evtAdapterName />
518
+ </like>
519
+ </or>
520
+ <in>
521
+ <evtOperationType />
522
+ <list>
523
+ <constOpNetwork />
524
+ <constOpNetworkEx />
525
+ </list>
526
+ </in>
527
+ </and>
528
+ <and>
529
+ <!--MOBIS-AgentIP-->
530
+ <add asArray="true">
531
+ <varstring name="MOBIS-AgentIP" scope="event"/>
532
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
533
+ </add>
534
+ <add asArray="false">
535
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
536
+ <agentIPAddress />
537
+ </add>
538
+ <set>
539
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
540
+ <string value=" " preserveCase="true"/>
541
+ </set>
542
+
543
+ <!--MOBIS-connectedServer-->
544
+ <add asArray="true">
545
+ <varstring name="MOBIS-connectedServer" scope="event"/>
546
+ <dnsHostAvailable name="10.10.156.141" />
547
+ </add>
548
+
549
+
550
+
551
+ <or>
552
+ <like expr="%NDIS%">
553
+ <evtAdapterName />
554
+ </like>
555
+ <like expr="%remote%">
556
+ <evtAdapterName />
557
+ </like>
558
+ <like expr="%Bluetooth Device%">
559
+ <evtAdapterName />
560
+ </like>
561
+ <like expr="%Apple%">
562
+ <evtAdapterName />
563
+ </like>
564
+ <like expr="%iphone%">
565
+ <evtAdapterName />
566
+ </like>
567
+ </or>
568
+ <in>
569
+ <evtOperationType />
570
+ <list>
571
+ <constOpNetwork />
572
+ <constOpNetworkEx />
573
+ </list>
574
+ </in>
575
+ </and>
576
+ <and>
577
+ <!--MOBIS-AgentIP-->
578
+ <add asArray="true">
579
+ <varstring name="MOBIS-AgentIP" scope="event"/>
580
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
581
+ </add>
582
+ <add asArray="false">
583
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
584
+ <agentIPAddress />
585
+ </add>
586
+ <set>
587
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
588
+ <string value=" " preserveCase="true"/>
589
+ </set>
590
+
591
+ <!--MOBIS-connectedServer-->
592
+ <add asArray="true">
593
+ <varstring name="MOBIS-connectedServer" scope="event"/>
594
+ <dnsHostAvailable name="10.10.156.141" />
595
+ </add>
596
+
597
+
598
+
599
+ <or>
600
+ <like expr="%NDIS%">
601
+ <evtAdapterName />
602
+ </like>
603
+ <like expr="%remote%">
604
+ <evtAdapterName />
605
+ </like>
606
+ <like expr="%Bluetooth Device%">
607
+ <evtAdapterName />
608
+ </like>
609
+ <like expr="%Apple%">
610
+ <evtAdapterName />
611
+ </like>
612
+ <like expr="%iphone%">
613
+ <evtAdapterName />
614
+ </like>
615
+ </or>
616
+ <in>
617
+ <evtOperationType />
618
+ <list>
619
+ <constOpNetwork />
620
+ <constOpNetworkEx />
621
+ </list>
622
+ </in>
623
+ </and>
624
+ <and>
625
+ <!--MOBIS-AgentIP-->
626
+ <add asArray="true">
627
+ <varstring name="MOBIS-AgentIP" scope="event"/>
628
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
629
+ </add>
630
+ <add asArray="false">
631
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
632
+ <agentIPAddress />
633
+ </add>
634
+ <set>
635
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
636
+ <string value=" " preserveCase="true"/>
637
+ </set>
638
+
639
+ <!--MOBIS-connectedServer-->
640
+ <add asArray="true">
641
+ <varstring name="MOBIS-connectedServer" scope="event"/>
642
+ <dnsHostAvailable name="10.10.156.141" />
643
+ </add>
644
+
645
+
646
+
647
+ <or>
648
+ <like expr="%NDIS%">
649
+ <evtAdapterName />
650
+ </like>
651
+ <like expr="%remote%">
652
+ <evtAdapterName />
653
+ </like>
654
+ <like expr="%Bluetooth Device%">
655
+ <evtAdapterName />
656
+ </like>
657
+ <like expr="%Apple%">
658
+ <evtAdapterName />
659
+ </like>
660
+ <like expr="%iphone%">
661
+ <evtAdapterName />
662
+ </like>
663
+ </or>
664
+ <in>
665
+ <evtOperationType />
666
+ <list>
667
+ <constOpNetwork />
668
+ <constOpNetworkEx />
669
+ </list>
670
+ </in>
671
+ </and>
672
+ <and>
673
+ <!--MOBIS-AgentIP-->
674
+ <add asArray="true">
675
+ <varstring name="MOBIS-AgentIP" scope="event"/>
676
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
677
+ </add>
678
+ <add asArray="false">
679
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
680
+ <agentIPAddress />
681
+ </add>
682
+ <set>
683
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
684
+ <string value=" " preserveCase="true"/>
685
+ </set>
686
+
687
+ <!--MOBIS-connectedServer-->
688
+ <add asArray="true">
689
+ <varstring name="MOBIS-connectedServer" scope="event"/>
690
+ <dnsHostAvailable name="10.10.156.141" />
691
+ </add>
692
+
693
+
694
+
695
+ <or>
696
+ <like expr="%NDIS%">
697
+ <evtAdapterName />
698
+ </like>
699
+ <like expr="%remote%">
700
+ <evtAdapterName />
701
+ </like>
702
+ <like expr="%Bluetooth Device%">
703
+ <evtAdapterName />
704
+ </like>
705
+ <like expr="%Apple%">
706
+ <evtAdapterName />
707
+ </like>
708
+ <like expr="%iphone%">
709
+ <evtAdapterName />
710
+ </like>
711
+ </or>
712
+ <in>
713
+ <evtOperationType />
714
+ <list>
715
+ <constOpNetwork />
716
+ <constOpNetworkEx />
717
+ </list>
718
+ </in>
719
+ </and>
720
+ <and>
721
+ <!--MOBIS-AgentIP-->
722
+ <add asArray="true">
723
+ <varstring name="MOBIS-AgentIP" scope="event"/>
724
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
725
+ </add>
726
+ <add asArray="false">
727
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
728
+ <agentIPAddress />
729
+ </add>
730
+ <set>
731
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
732
+ <string value=" " preserveCase="true"/>
733
+ </set>
734
+
735
+ <!--MOBIS-connectedServer-->
736
+ <add asArray="true">
737
+ <varstring name="MOBIS-connectedServer" scope="event"/>
738
+ <dnsHostAvailable name="10.10.156.141" />
739
+ </add>
740
+
741
+
742
+
743
+ <or>
744
+ <like expr="%NDIS%">
745
+ <evtAdapterName />
746
+ </like>
747
+ <like expr="%remote%">
748
+ <evtAdapterName />
749
+ </like>
750
+ <like expr="%Bluetooth Device%">
751
+ <evtAdapterName />
752
+ </like>
753
+ <like expr="%Apple%">
754
+ <evtAdapterName />
755
+ </like>
756
+ <like expr="%iphone%">
757
+ <evtAdapterName />
758
+ </like>
759
+ </or>
760
+ <in>
761
+ <evtOperationType />
762
+ <list>
763
+ <constOpNetwork />
764
+ <constOpNetworkEx />
765
+ </list>
766
+ </in>
767
+ </and>
768
+ <and>
769
+ <!--MOBIS-AgentIP-->
770
+ <add asArray="true">
771
+ <varstring name="MOBIS-AgentIP" scope="event"/>
772
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
773
+ </add>
774
+ <add asArray="false">
775
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
776
+ <agentIPAddress />
777
+ </add>
778
+ <set>
779
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
780
+ <string value=" " preserveCase="true"/>
781
+ </set>
782
+
783
+ <!--MOBIS-connectedServer-->
784
+ <add asArray="true">
785
+ <varstring name="MOBIS-connectedServer" scope="event"/>
786
+ <dnsHostAvailable name="10.10.156.141" />
787
+ </add>
788
+
789
+
790
+
791
+ <or>
792
+ <like expr="%NDIS%">
793
+ <evtAdapterName />
794
+ </like>
795
+ <like expr="%remote%">
796
+ <evtAdapterName />
797
+ </like>
798
+ <like expr="%Bluetooth Device%">
799
+ <evtAdapterName />
800
+ </like>
801
+ <like expr="%Apple%">
802
+ <evtAdapterName />
803
+ </like>
804
+ <like expr="%iphone%">
805
+ <evtAdapterName />
806
+ </like>
807
+ </or>
808
+ <in>
809
+ <evtOperationType />
810
+ <list>
811
+ <constOpNetwork />
812
+ <constOpNetworkEx />
813
+ </list>
814
+ </in>
815
+ </and>
816
+ <and>
817
+ <!--MOBIS-AgentIP-->
818
+ <add asArray="true">
819
+ <varstring name="MOBIS-AgentIP" scope="event"/>
820
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
821
+ </add>
822
+ <add asArray="false">
823
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
824
+ <agentIPAddress />
825
+ </add>
826
+ <set>
827
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
828
+ <string value=" " preserveCase="true"/>
829
+ </set>
830
+
831
+ <!--MOBIS-connectedServer-->
832
+ <add asArray="true">
833
+ <varstring name="MOBIS-connectedServer" scope="event"/>
834
+ <dnsHostAvailable name="10.10.156.141" />
835
+ </add>
836
+
837
+
838
+
839
+ <or>
840
+ <like expr="%NDIS%">
841
+ <evtAdapterName />
842
+ </like>
843
+ <like expr="%remote%">
844
+ <evtAdapterName />
845
+ </like>
846
+ <like expr="%Bluetooth Device%">
847
+ <evtAdapterName />
848
+ </like>
849
+ <like expr="%Apple%">
850
+ <evtAdapterName />
851
+ </like>
852
+ <like expr="%iphone%">
853
+ <evtAdapterName />
854
+ </like>
855
+ </or>
856
+ <in>
857
+ <evtOperationType />
858
+ <list>
859
+ <constOpNetwork />
860
+ <constOpNetworkEx />
861
+ </list>
862
+ </in>
863
+ </and>
864
+ <and>
865
+ <!--MOBIS-AgentIP-->
866
+ <add asArray="true">
867
+ <varstring name="MOBIS-AgentIP" scope="event"/>
868
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
869
+ </add>
870
+ <add asArray="false">
871
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
872
+ <agentIPAddress />
873
+ </add>
874
+ <set>
875
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
876
+ <string value=" " preserveCase="true"/>
877
+ </set>
878
+
879
+ <!--MOBIS-connectedServer-->
880
+ <add asArray="true">
881
+ <varstring name="MOBIS-connectedServer" scope="event"/>
882
+ <dnsHostAvailable name="10.10.156.141" />
883
+ </add>
884
+
885
+
886
+
887
+ <or>
888
+ <like expr="%NDIS%">
889
+ <evtAdapterName />
890
+ </like>
891
+ <like expr="%remote%">
892
+ <evtAdapterName />
893
+ </like>
894
+ <like expr="%Bluetooth Device%">
895
+ <evtAdapterName />
896
+ </like>
897
+ <like expr="%Apple%">
898
+ <evtAdapterName />
899
+ </like>
900
+ <like expr="%iphone%">
901
+ <evtAdapterName />
902
+ </like>
903
+ </or>
904
+ <in>
905
+ <evtOperationType />
906
+ <list>
907
+ <constOpNetwork />
908
+ <constOpNetworkEx />
909
+ </list>
910
+ </in>
911
+ </and>
912
+ <and>
913
+ <!--MOBIS-AgentIP-->
914
+ <add asArray="true">
915
+ <varstring name="MOBIS-AgentIP" scope="event"/>
916
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
917
+ </add>
918
+ <add asArray="false">
919
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
920
+ <agentIPAddress />
921
+ </add>
922
+ <set>
923
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
924
+ <string value=" " preserveCase="true"/>
925
+ </set>
926
+
927
+ <!--MOBIS-connectedServer-->
928
+ <add asArray="true">
929
+ <varstring name="MOBIS-connectedServer" scope="event"/>
930
+ <dnsHostAvailable name="10.10.156.141" />
931
+ </add>
932
+
933
+
934
+
935
+ <or>
936
+ <like expr="%NDIS%">
937
+ <evtAdapterName />
938
+ </like>
939
+ <like expr="%remote%">
940
+ <evtAdapterName />
941
+ </like>
942
+ <like expr="%Bluetooth Device%">
943
+ <evtAdapterName />
944
+ </like>
945
+ <like expr="%Apple%">
946
+ <evtAdapterName />
947
+ </like>
948
+ <like expr="%iphone%">
949
+ <evtAdapterName />
950
+ </like>
951
+ </or>
952
+ <in>
953
+ <evtOperationType />
954
+ <list>
955
+ <constOpNetwork />
956
+ <constOpNetworkEx />
957
+ </list>
958
+ </in>
959
+ </and>
960
+ <and>
961
+ <!--MOBIS-AgentIP-->
962
+ <add asArray="true">
963
+ <varstring name="MOBIS-AgentIP" scope="event"/>
964
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
965
+ </add>
966
+ <add asArray="false">
967
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
968
+ <agentIPAddress />
969
+ </add>
970
+ <set>
971
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
972
+ <string value=" " preserveCase="true"/>
973
+ </set>
974
+
975
+ <!--MOBIS-connectedServer-->
976
+ <add asArray="true">
977
+ <varstring name="MOBIS-connectedServer" scope="event"/>
978
+ <dnsHostAvailable name="10.10.156.141" />
979
+ </add>
980
+
981
+
982
+
983
+ <or>
984
+ <like expr="%NDIS%">
985
+ <evtAdapterName />
986
+ </like>
987
+ <like expr="%remote%">
988
+ <evtAdapterName />
989
+ </like>
990
+ <like expr="%Bluetooth Device%">
991
+ <evtAdapterName />
992
+ </like>
993
+ <like expr="%Apple%">
994
+ <evtAdapterName />
995
+ </like>
996
+ <like expr="%iphone%">
997
+ <evtAdapterName />
998
+ </like>
999
+ </or>
1000
+ <in>
1001
+ <evtOperationType />
1002
+ <list>
1003
+ <constOpNetwork />
1004
+ <constOpNetworkEx />
1005
+ </list>
1006
+ </in>
1007
+ </and>
1008
+ <and>
1009
+ <!--MOBIS-AgentIP-->
1010
+ <add asArray="true">
1011
+ <varstring name="MOBIS-AgentIP" scope="event"/>
1012
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1013
+ </add>
1014
+ <add asArray="false">
1015
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1016
+ <agentIPAddress />
1017
+ </add>
1018
+ <set>
1019
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1020
+ <string value=" " preserveCase="true"/>
1021
+ </set>
1022
+
1023
+ <!--MOBIS-connectedServer-->
1024
+ <add asArray="true">
1025
+ <varstring name="MOBIS-connectedServer" scope="event"/>
1026
+ <dnsHostAvailable name="10.10.156.141" />
1027
+ </add>
1028
+
1029
+
1030
+
1031
+ <or>
1032
+ <like expr="%NDIS%">
1033
+ <evtAdapterName />
1034
+ </like>
1035
+ <like expr="%remote%">
1036
+ <evtAdapterName />
1037
+ </like>
1038
+ <like expr="%Bluetooth Device%">
1039
+ <evtAdapterName />
1040
+ </like>
1041
+ <like expr="%Apple%">
1042
+ <evtAdapterName />
1043
+ </like>
1044
+ <like expr="%iphone%">
1045
+ <evtAdapterName />
1046
+ </like>
1047
+ </or>
1048
+ <in>
1049
+ <evtOperationType />
1050
+ <list>
1051
+ <constOpNetwork />
1052
+ <constOpNetworkEx />
1053
+ </list>
1054
+ </in>
1055
+ </and>
1056
+ <and>
1057
+ <!--MOBIS-AgentIP-->
1058
+ <add asArray="true">
1059
+ <varstring name="MOBIS-AgentIP" scope="event"/>
1060
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1061
+ </add>
1062
+ <add asArray="false">
1063
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1064
+ <agentIPAddress />
1065
+ </add>
1066
+ <set>
1067
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1068
+ <string value=" " preserveCase="true"/>
1069
+ </set>
1070
+
1071
+ <!--MOBIS-connectedServer-->
1072
+ <add asArray="true">
1073
+ <varstring name="MOBIS-connectedServer" scope="event"/>
1074
+ <dnsHostAvailable name="10.10.156.141" />
1075
+ </add>
1076
+
1077
+
1078
+
1079
+ <or>
1080
+ <like expr="%NDIS%">
1081
+ <evtAdapterName />
1082
+ </like>
1083
+ <like expr="%remote%">
1084
+ <evtAdapterName />
1085
+ </like>
1086
+ <like expr="%Bluetooth Device%">
1087
+ <evtAdapterName />
1088
+ </like>
1089
+ <like expr="%Apple%">
1090
+ <evtAdapterName />
1091
+ </like>
1092
+ <like expr="%iphone%">
1093
+ <evtAdapterName />
1094
+ </like>
1095
+ </or>
1096
+ <in>
1097
+ <evtOperationType />
1098
+ <list>
1099
+ <constOpNetwork />
1100
+ <constOpNetworkEx />
1101
+ </list>
1102
+ </in>
1103
+ </and>
1104
+ <and>
1105
+ <!--MOBIS-AgentIP-->
1106
+ <add asArray="true">
1107
+ <varstring name="MOBIS-AgentIP" scope="event"/>
1108
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1109
+ </add>
1110
+ <add asArray="false">
1111
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1112
+ <agentIPAddress />
1113
+ </add>
1114
+ <set>
1115
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1116
+ <string value=" " preserveCase="true"/>
1117
+ </set>
1118
+
1119
+ <!--MOBIS-connectedServer-->
1120
+ <add asArray="true">
1121
+ <varstring name="MOBIS-connectedServer" scope="event"/>
1122
+ <dnsHostAvailable name="10.10.156.141" />
1123
+ </add>
1124
+
1125
+
1126
+
1127
+ <or>
1128
+ <like expr="%NDIS%">
1129
+ <evtAdapterName />
1130
+ </like>
1131
+ <like expr="%remote%">
1132
+ <evtAdapterName />
1133
+ </like>
1134
+ <like expr="%Bluetooth Device%">
1135
+ <evtAdapterName />
1136
+ </like>
1137
+ <like expr="%Apple%">
1138
+ <evtAdapterName />
1139
+ </like>
1140
+ <like expr="%iphone%">
1141
+ <evtAdapterName />
1142
+ </like>
1143
+ </or>
1144
+ <in>
1145
+ <evtOperationType />
1146
+ <list>
1147
+ <constOpNetwork />
1148
+ <constOpNetworkEx />
1149
+ </list>
1150
+ </in>
1151
+ </and>
1152
+ <and>
1153
+ <!--MOBIS-AgentIP-->
1154
+ <add asArray="true">
1155
+ <varstring name="MOBIS-AgentIP" scope="event"/>
1156
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1157
+ </add>
1158
+ <add asArray="false">
1159
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1160
+ <agentIPAddress />
1161
+ </add>
1162
+ <set>
1163
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1164
+ <string value=" " preserveCase="true"/>
1165
+ </set>
1166
+
1167
+ <!--MOBIS-connectedServer-->
1168
+ <add asArray="true">
1169
+ <varstring name="MOBIS-connectedServer" scope="event"/>
1170
+ <dnsHostAvailable name="10.10.156.141" />
1171
+ </add>
1172
+
1173
+
1174
+
1175
+ <or>
1176
+ <like expr="%NDIS%">
1177
+ <evtAdapterName />
1178
+ </like>
1179
+ <like expr="%remote%">
1180
+ <evtAdapterName />
1181
+ </like>
1182
+ <like expr="%Bluetooth Device%">
1183
+ <evtAdapterName />
1184
+ </like>
1185
+ <like expr="%Apple%">
1186
+ <evtAdapterName />
1187
+ </like>
1188
+ <like expr="%iphone%">
1189
+ <evtAdapterName />
1190
+ </like>
1191
+ </or>
1192
+ <in>
1193
+ <evtOperationType />
1194
+ <list>
1195
+ <constOpNetwork />
1196
+ <constOpNetworkEx />
1197
+ </list>
1198
+ </in>
1199
+ </and>
1200
+ <and>
1201
+ <!--MOBIS-AgentIP-->
1202
+ <add asArray="true">
1203
+ <varstring name="MOBIS-AgentIP" scope="event"/>
1204
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1205
+ </add>
1206
+ <add asArray="false">
1207
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1208
+ <agentIPAddress />
1209
+ </add>
1210
+ <set>
1211
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1212
+ <string value=" " preserveCase="true"/>
1213
+ </set>
1214
+
1215
+ <!--MOBIS-connectedServer-->
1216
+ <add asArray="true">
1217
+ <varstring name="MOBIS-connectedServer" scope="event"/>
1218
+ <dnsHostAvailable name="10.10.156.141" />
1219
+ </add>
1220
+
1221
+
1222
+
1223
+ <or>
1224
+ <like expr="%NDIS%">
1225
+ <evtAdapterName />
1226
+ </like>
1227
+ <like expr="%remote%">
1228
+ <evtAdapterName />
1229
+ </like>
1230
+ <like expr="%Bluetooth Device%">
1231
+ <evtAdapterName />
1232
+ </like>
1233
+ <like expr="%Apple%">
1234
+ <evtAdapterName />
1235
+ </like>
1236
+ <like expr="%iphone%">
1237
+ <evtAdapterName />
1238
+ </like>
1239
+ </or>
1240
+ <in>
1241
+ <evtOperationType />
1242
+ <list>
1243
+ <constOpNetwork />
1244
+ <constOpNetworkEx />
1245
+ </list>
1246
+ </in>
1247
+ </and>
1248
+ <and>
1249
+ <!--MOBIS-AgentIP-->
1250
+ <add asArray="true">
1251
+ <varstring name="MOBIS-AgentIP" scope="event"/>
1252
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1253
+ </add>
1254
+ <add asArray="false">
1255
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1256
+ <agentIPAddress />
1257
+ </add>
1258
+ <set>
1259
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1260
+ <string value=" " preserveCase="true"/>
1261
+ </set>
1262
+
1263
+ <!--MOBIS-connectedServer-->
1264
+ <add asArray="true">
1265
+ <varstring name="MOBIS-connectedServer" scope="event"/>
1266
+ <dnsHostAvailable name="10.10.156.141" />
1267
+ </add>
1268
+
1269
+
1270
+
1271
+ <or>
1272
+ <like expr="%NDIS%">
1273
+ <evtAdapterName />
1274
+ </like>
1275
+ <like expr="%remote%">
1276
+ <evtAdapterName />
1277
+ </like>
1278
+ <like expr="%Bluetooth Device%">
1279
+ <evtAdapterName />
1280
+ </like>
1281
+ <like expr="%Apple%">
1282
+ <evtAdapterName />
1283
+ </like>
1284
+ <like expr="%iphone%">
1285
+ <evtAdapterName />
1286
+ </like>
1287
+ </or>
1288
+ <in>
1289
+ <evtOperationType />
1290
+ <list>
1291
+ <constOpNetwork />
1292
+ <constOpNetworkEx />
1293
+ </list>
1294
+ </in>
1295
+ </and>
1296
+ <and>
1297
+ <!--MOBIS-AgentIP-->
1298
+ <add asArray="true">
1299
+ <varstring name="MOBIS-AgentIP" scope="event"/>
1300
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1301
+ </add>
1302
+ <add asArray="false">
1303
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1304
+ <agentIPAddress />
1305
+ </add>
1306
+ <set>
1307
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1308
+ <string value=" " preserveCase="true"/>
1309
+ </set>
1310
+
1311
+ <!--MOBIS-connectedServer-->
1312
+ <add asArray="true">
1313
+ <varstring name="MOBIS-connectedServer" scope="event"/>
1314
+ <dnsHostAvailable name="10.10.156.141" />
1315
+ </add>
1316
+
1317
+
1318
+
1319
+ <or>
1320
+ <like expr="%NDIS%">
1321
+ <evtAdapterName />
1322
+ </like>
1323
+ <like expr="%remote%">
1324
+ <evtAdapterName />
1325
+ </like>
1326
+ <like expr="%Bluetooth Device%">
1327
+ <evtAdapterName />
1328
+ </like>
1329
+ <like expr="%Apple%">
1330
+ <evtAdapterName />
1331
+ </like>
1332
+ <like expr="%iphone%">
1333
+ <evtAdapterName />
1334
+ </like>
1335
+ </or>
1336
+ <in>
1337
+ <evtOperationType />
1338
+ <list>
1339
+ <constOpNetwork />
1340
+ <constOpNetworkEx />
1341
+ </list>
1342
+ </in>
1343
+ </and>
1344
+ <and>
1345
+ <!--MOBIS-AgentIP-->
1346
+ <add asArray="true">
1347
+ <varstring name="MOBIS-AgentIP" scope="event"/>
1348
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1349
+ </add>
1350
+ <add asArray="false">
1351
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1352
+ <agentIPAddress />
1353
+ </add>
1354
+ <set>
1355
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1356
+ <string value=" " preserveCase="true"/>
1357
+ </set>
1358
+
1359
+ <!--MOBIS-connectedServer-->
1360
+ <add asArray="true">
1361
+ <varstring name="MOBIS-connectedServer" scope="event"/>
1362
+ <dnsHostAvailable name="10.10.156.141" />
1363
+ </add>
1364
+
1365
+
1366
+
1367
+ <or>
1368
+ <like expr="%NDIS%">
1369
+ <evtAdapterName />
1370
+ </like>
1371
+ <like expr="%remote%">
1372
+ <evtAdapterName />
1373
+ </like>
1374
+ <like expr="%Bluetooth Device%">
1375
+ <evtAdapterName />
1376
+ </like>
1377
+ <like expr="%Apple%">
1378
+ <evtAdapterName />
1379
+ </like>
1380
+ <like expr="%iphone%">
1381
+ <evtAdapterName />
1382
+ </like>
1383
+ </or>
1384
+ <in>
1385
+ <evtOperationType />
1386
+ <list>
1387
+ <constOpNetwork />
1388
+ <constOpNetworkEx />
1389
+ </list>
1390
+ </in>
1391
+ </and>
1392
+ <and>
1393
+ <!--MOBIS-AgentIP-->
1394
+ <add asArray="true">
1395
+ <varstring name="MOBIS-AgentIP" scope="event"/>
1396
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1397
+ </add>
1398
+ <add asArray="false">
1399
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1400
+ <agentIPAddress />
1401
+ </add>
1402
+ <set>
1403
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1404
+ <string value=" " preserveCase="true"/>
1405
+ </set>
1406
+
1407
+ <!--MOBIS-connectedServer-->
1408
+ <add asArray="true">
1409
+ <varstring name="MOBIS-connectedServer" scope="event"/>
1410
+ <dnsHostAvailable name="10.10.156.141" />
1411
+ </add>
1412
+
1413
+
1414
+
1415
+ <or>
1416
+ <like expr="%NDIS%">
1417
+ <evtAdapterName />
1418
+ </like>
1419
+ <like expr="%remote%">
1420
+ <evtAdapterName />
1421
+ </like>
1422
+ <like expr="%Bluetooth Device%">
1423
+ <evtAdapterName />
1424
+ </like>
1425
+ <like expr="%Apple%">
1426
+ <evtAdapterName />
1427
+ </like>
1428
+ <like expr="%iphone%">
1429
+ <evtAdapterName />
1430
+ </like>
1431
+ </or>
1432
+ <in>
1433
+ <evtOperationType />
1434
+ <list>
1435
+ <constOpNetwork />
1436
+ <constOpNetworkEx />
1437
+ </list>
1438
+ </in>
1439
+ </and>
1440
+ <and>
1441
+ <!--MOBIS-AgentIP-->
1442
+ <add asArray="true">
1443
+ <varstring name="MOBIS-AgentIP" scope="event"/>
1444
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1445
+ </add>
1446
+ <add asArray="false">
1447
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1448
+ <agentIPAddress />
1449
+ </add>
1450
+ <set>
1451
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1452
+ <string value=" " preserveCase="true"/>
1453
+ </set>
1454
+
1455
+ <!--MOBIS-connectedServer-->
1456
+ <add asArray="true">
1457
+ <varstring name="MOBIS-connectedServer" scope="event"/>
1458
+ <dnsHostAvailable name="10.10.156.141" />
1459
+ </add>
1460
+
1461
+
1462
+
1463
+ <or>
1464
+ <like expr="%NDIS%">
1465
+ <evtAdapterName />
1466
+ </like>
1467
+ <like expr="%remote%">
1468
+ <evtAdapterName />
1469
+ </like>
1470
+ <like expr="%Bluetooth Device%">
1471
+ <evtAdapterName />
1472
+ </like>
1473
+ <like expr="%Apple%">
1474
+ <evtAdapterName />
1475
+ </like>
1476
+ <like expr="%iphone%">
1477
+ <evtAdapterName />
1478
+ </like>
1479
+ </or>
1480
+ <in>
1481
+ <evtOperationType />
1482
+ <list>
1483
+ <constOpNetwork />
1484
+ <constOpNetworkEx />
1485
+ </list>
1486
+ </in>
1487
+ </and>
1488
+ <and>
1489
+ <!--MOBIS-AgentIP-->
1490
+ <add asArray="true">
1491
+ <varstring name="MOBIS-AgentIP" scope="event"/>
1492
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1493
+ </add>
1494
+ <add asArray="false">
1495
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1496
+ <agentIPAddress />
1497
+ </add>
1498
+ <set>
1499
+ <varstring name="temp-CustomRuleDataSE" scope="event"/>
1500
+ <string value=" " preserveCase="true"/>
1501
+ </set>
1502
+
1503
+ <!--MOBIS-connectedServer-->
1504
+ <add asArray="true">
1505
+ <varstring name="MOBIS-connectedServer" scope="event"/>
1506
+ <dnsHostAvailable name="10.10.156.141" />
1507
+ </add>
1508
+
1509
+
1510
+
1511
+ <or>
1512
+ <like expr="%NDIS%">
1513
+ <evtAdapterName />
1514
+ </like>
1515
+ <like expr="%remote%">
1516
+ <evtAdapterName />
1517
+ </like>
1518
+ <like expr="%Bluetooth Device%">
1519
+ <evtAdapterName />
1520
+ </like>
1521
+ <like expr="%Apple%">
1522
+ <evtAdapterName />
1523
+ </like>
1524
+ <like expr="%iphone%">
1525
+ <evtAdapterName />
1526
+ </like>
1527
+ </or>
1528
+ <in>
1529
+ <evtOperationType />
1530
+ <list>
1531
+ <constOpNetwork />
1532
+ <constOpNetworkEx />
1533
+ </list>
1534
+ </in>
1535
+ </and>
1536
+