<?xml version="1.0" encoding="UTF-8" ?>
<configure xmlns="http://schemas.xmlsoap.org/encoding/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://schemas.xmlsoap.org/encoding/ ConfigXMLSchema.xsd">
    <fileGroup treeRootName="Cisco Secure Client" directoryName="Cisco Secure Client\Secure Firewall Posture">
        <title>Secure Firewall Posture</title>
        <file id="csc-posture-install" directoryName="Install Logs">
            <default>true</default>
            <description>Posture install logs</description>
            <gui>
                <label>_tr("Posture install logs")</label>
                <file_type>log</file_type>
            </gui>
            <dart>
                <required>false</required>
                <os opsys="linux">
                    <file_copy_action>
                        <action>
                            <loc>/opt/cisco/secureclient/securefirewallposture/log/posture-*.log</loc>
                            <clear_log apply="false"/>
                        </action>
                    </file_copy_action>
                </os>
                <os opsys="win">
                    <file_copy_action>
                        <action>
                            <loc>%TEMP%\cisco-secure-client*-posture-*.log</loc>
                            <clear_log apply="false"/>
                        </action>
                        <action>
                            <loc>%WINDIR%\Temp\cisco-secure-client*-posture-*.log</loc>
                            <clear_log apply="false"/>
                        </action>
                    </file_copy_action>
                </os>
            </dart>
        </file>
        <file id="csc-posture-logs" directoryName="Logs">
            <default>true</default>
            <description>Posture application logs</description>
            <gui>
                <label>_tr("Posture application logs")</label>
                <file_type>log</file_type>
            </gui>
            <dart>
                <required>false</required>
                <os opsys="win">
                    <file_copy_action>
                        <action>
                            <loc>%LOCALAPPDATA%\Cisco\Cisco Secure Client\Secure Firewall Posture\log\*</loc>
                            <clear_log apply="true"></clear_log>
                        </action>
                    </file_copy_action>
                    <use_extern_action>
                        <action>
                            <path>%LOCALAPPDATA%\Cisco\Cisco Secure Client\Secure Firewall Posture\lib</path>
                            <args>WaDiagnose.exe --log_path "%LOCALAPPDATA%\Cisco\Cisco Secure Client\Secure Firewall Posture\log\WaDiagnose.txt" --debug_log_output_path "%LOCALAPPDATA%\Cisco\Cisco Secure Client\Secure Firewall Posture\log" --driver_prevent_install true --auto_exit true</args>
                            <clear_log apply="false"/>
                            <temp_out>%LOCALAPPDATA%\Cisco\Cisco Secure Client\Secure Firewall Posture\log\WaDiagnose.txt</temp_out>
                        </action>
                        <action>
                            <path>%PROGRAMFILES%\Cisco\Cisco Secure Client\Secure Firewall Posture\lib</path>
                            <args>WaDiagnose.exe --log_path "%LOCALAPPDATA%\Cisco\Cisco Secure Client\Secure Firewall Posture\log\WaDiagnose_clientfull.txt" --debug_log_output_path "%LOCALAPPDATA%\Cisco\Cisco Secure Client\Secure Firewall Posture\log\v4clientfull" --driver_prevent_install true --auto_exit true</args>
                            <clear_log apply="false"/>
                            <temp_out>%LOCALAPPDATA%\Cisco\Cisco Secure Client\Secure Firewall Posture\log\WaDiagnose_clientfull.txt</temp_out>
                        </action>
                        <action>
                            <path>%WINDIR%\system32</path>
                            <args>wevtutil epl "Cisco Secure Client - Secure Firewall Posture" %TEMP%\securefirewallposture_evtx.evtx</args>
                            <clear_log apply="true">wevtutil cl "Cisco Secure Client - Secure Firewall Posture"</clear_log>
                            <temp_out>%TEMP%\securefirewallposture_evtx.evtx</temp_out>
                        </action>
                        <action>
                            <path>%WINDIR%\system32</path>
                            <args>wevtutil epl "Cisco Secure Firewall Posture" %TEMP%\securefirewallposture_standalone_evtx.evtx</args>
                            <clear_log apply="true">wevtutil cl "Cisco Secure Firewall Posture"</clear_log>
                            <temp_out>%TEMP%\securefirewallposture_standalone_evtx.evtx</temp_out>
                        </action>
                        <action>
                            <plugin/>
                            <args>wineventlog.exe -l "Cisco Secure Client - Secure Firewall Posture" -f %TEMP%\SecureFirewallPosture.txt</args>
                            <clear_log apply="false"/>
                            <temp_out>%TEMP%\SecureFirewallPosture.txt</temp_out>
                        </action>
                        <action>
                            <plugin/>
                            <args>wineventlog.exe -l "Cisco Secure Firewall Posture" -f %TEMP%\securefirewallposture_standalone_evtx.txt</args>
                            <clear_log apply="false"/>
                            <temp_out>%TEMP%\securefirewallposture_standalone_evtx.txt</temp_out>
                        </action>
                        <action>
                            <plugin/>
                            <args>wineventlog.exe -l Application -s CiscoSD -f %WinDir%\temp\csd_sd_logs.txt</args>
                            <clear_log apply="false"/>
                            <temp_out>%WinDir%\temp\csd_sd_logs.txt</temp_out>
                        </action>
                        <action>
                            <plugin>wineventlog.exe</plugin>
                            <args>wineventlog.exe -l Application -s CiscoHostScan -f %WinDir%\temp\csd_hostscan_logs.txt</args>
                            <clear_log apply="false"/>
                            <temp_out>%WinDir%\temp\csd_hostscan_logs.txt</temp_out>
                        </action>
                        <action>
                            <plugin/>
                            <args>wineventlog.exe -l Application -s csd -f %WinDir%\temp\csd_sd_logs.txt</args>
                            <clear_log apply="false"/>
                            <temp_out>%WinDir%\temp\csd_logs.txt</temp_out>
                        </action>
                        <action>
                            <path>%WINDIR%\system32</path>
                            <args>cmd.exe /C "copy "%APPDATA%\Cisco\Cisco Secure Client\Secure Firewall Posture\csd.log" "%TEMP%\csd_3.4.log""</args>
                            <clear_log apply="false"/>
                            <temp_out>%TEMP%\csd_3.4.log</temp_out>
                        </action>
                        <action>
                            <path>%WINDIR%\system32</path>
                            <args>cmd.exe /C "copy "%APPDATA%\Cisco\Cisco Secure Client\Secure Firewall Posture\hostscan.log" "%TEMP%\hostscan_3.4.log""</args>
                            <clear_log apply="false"/>
                            <temp_out>%TEMP%\hostscan_3.4.log</temp_out>
                        </action>
                        <action>
                            <path>%WINDIR%\system32</path>
                            <args>cmd.exe /C "copy "%APPDATA%\Cisco\Cisco Secure Desktop\Cache\hostscan.log" "%TEMP%\hostscan_vault.log""</args>
                            <clear_log apply="false"/>
                            <temp_out>%TEMP%\hostscan_vault.log</temp_out>
                        </action>
                        <action>
                            <path>%WINDIR%\system32</path>
                            <args>cmd.exe /C "copy "%WINDIR%\System32\config\systemprofile\AppData\Roaming\Cisco\Cisco Secure Client\Secure Firewall Posture\csd.log" "%TEMP%\csd_3.4_SBL.log""</args>
                            <clear_log apply="false"/>
                            <temp_out>%TEMP%\csd_3.4_SBL.log</temp_out>
                        </action>
                        <action>
                            <path>%WINDIR%\system32</path>
                            <args>cmd.exe /C "copy "%WINDIR%\SysWOW64\config\systemprofile\AppData\Roaming\Cisco\Cisco Secure Client\Secure Firewall Posture\csd.log" "%TEMP%\csd_3.4_SBL.log""</args>
                            <clear_log apply="false"/>
                            <temp_out>%TEMP%\csd_3.4_SBL.log</temp_out>
                        </action>
                        <action>
                            <path>%WINDIR%\system32</path>
                            <args>cmd.exe /C "copy "%WINDIR%\System32\config\systemprofile\AppData\Roaming\Cisco\Cisco Secure Client\Secure Firewall Posture\hostscan.log" "%TEMP%\hostscan_3.4_SBL.log""</args>
                            <clear_log apply="false"/>
                            <temp_out>%TEMP%\hostscan_3.4_SBL.log</temp_out>
                        </action>
                        <action>
                            <path>%WINDIR%\system32</path>
                            <args>cmd.exe /C "copy "%WINDIR%\SysWOW64\config\systemprofile\AppData\Roaming\Cisco\Cisco Secure Client\Secure Firewall Posture\hostscan.log" "%TEMP%\hostscan_3.4_SBL.log""</args>
                            <clear_log apply="false"/>
                            <temp_out>%TEMP%\hostscan_3.4_SBL.log</temp_out>
                        </action>
                        <action>
                            <path>%WINDIR%\system32</path>
                            <args>cmd.exe /C "copy "%WINDIR%\System32\config\systemprofile\AppData\Local\Cisco\Cisco Secure Client\Secure Firewall Posture\log\hostscan.log" "%TEMP%\hostscan_SBL.log""</args>
                            <clear_log apply="false"/>
                            <temp_out>%TEMP%\hostscan_SBL.log</temp_out>
                        </action>
                        <action>
                            <path>%WINDIR%\system32</path>
                            <args>cmd.exe /C "copy "%WINDIR%\SysWOW64\config\systemprofile\AppData\Local\Cisco\Cisco Secure Client\Secure Firewall Posture\log\hostscan.log" "%TEMP%\hostscan_SBL.log""</args>
                            <clear_log apply="false"/>
                            <temp_out>%TEMP%\hostscan_SBL.log</temp_out>
                        </action>
                    </use_extern_action>
                    <file_copy_action>
                        <action>
                           <loc>%LOCALAPPDATA%\Cisco\Cisco Secure Client\Secure Firewall Posture\log\v4DebugInfo*</loc>
                           <clear_log apply="false"/>
                        </action>
                        <action>
                           <loc>%LOCALAPPDATA%\Cisco\Cisco Secure Client\Secure Firewall Posture\log\v4clientfull</loc>
                           <clear_log apply="false"/>
                        </action>
                    </file_copy_action>
                    <use_extern_action>
                        <action>
                           <path>%WINDIR%\System32</path>
                           <args>cmd.exe /C "del "%LOCALAPPDATA%\Cisco\Cisco Secure Client\Secure Firewall Posture\log\v4DebugInfo*""</args>
                        </action>
                        <action>
                           <path>%WINDIR%\System32</path>
                           <args>cmd.exe /C "rmdir /q /s "%LOCALAPPDATA%\Cisco\Cisco Secure Client\Secure Firewall Posture\log\v4clientfull""</args>
                        </action>
                        <action>
                           <path>%WINDIR%\System32</path>
                           <args>cmd.exe /C "del "%LOCALAPPDATA%\Cisco\Cisco Secure Client\Secure Firewall Posture\log\*transport.log""</args>
                        </action>
                    </use_extern_action>
                </os>
                <os opsys="linux">
                    <use_extern_action>
                        <action>
                            <path>$HOME/.cisco/secureclient/securefirewallposture/lib</path>
                            <args>wadiagnose --log_path $HOME/.cisco/secureclient/securefirewallposture/log/wadiagnose.txt --debug_log_output_path $HOME/.cisco/secureclient/securefirewallposture/log --driver_prevent_install true --auto_exit true</args>
                            <clear_log apply="false"/>
                            <stdout/>
                        </action>
                    </use_extern_action>
                    <use_extern_action>
                        <action>
                            <path>/opt/cisco/secureclient/securefirewallposture/lib</path>
                            <args>wadiagnose --log_path $HOME/.cisco/secureclient/securefirewallposture/log/wadiagnose_clientfull.txt --debug_log_output_path $HOME/.cisco/secureclient/securefirewallposture/log/v4clientfull --driver_prevent_install true --auto_exit true</args>
                            <clear_log apply="false"/>
                            <stdout/>
                        </action>
                    </use_extern_action>
                    <file_copy_action>
                        <action>
                            <loc>$HOME/.cisco/secureclient/securefirewallposture/log/*</loc>
                            <clear_log apply="true"/>
                        </action>
                    </file_copy_action>
                    <use_extern_action>
                        <action>
                            <args>rm -rf $HOME/.cisco/secureclient/securefirewallposture/log/v4DebugInfo*</args>
                            <clear_log apply="false"></clear_log>
                            <stdout/>
                        </action>
                        <action>
                            <args>rm -rf $HOME/.cisco/secureclient/securefirewallposture/log/v4clientfull</args>
                            <clear_log apply="false"></clear_log>
                            <stdout/>
                        </action>
                        <action>
                          <args>rm -rf $HOME/.cisco/secureclient/securefirewallposture/log/*transport.log</args>
                          <clear_log apply="false"></clear_log>
                        <stdout/>
                      </action>
                    </use_extern_action>
                </os>
                <os opsys="mac">
                    <use_extern_action>
                        <action>
                            <path>$HOME/.cisco/secureclient/securefirewallposture/lib64</path>
                            <args>waDiagnose --log_path $HOME/.cisco/secureclient/securefirewallposture/log/waDiagnose.txt --debug_log_output_path $HOME/.cisco/secureclient/securefirewallposture/log --driver_prevent_install true  --auto_exit true</args>
                            <clear_log apply="false"/>
                            <stdout/>
                        </action>
                    </use_extern_action>
                    <use_extern_action>
                        <action>
                            <path>/opt/cisco/secureclient/securefirewallposture/lib64</path>
                            <args>waDiagnose --log_path $HOME/.cisco/secureclient/securefirewallposture/log/waDiagnose_clientfull.txt --debug_log_output_path $HOME/.cisco/secureclient/securefirewallposture/log/v4clientfull --driver_prevent_install true --auto_exit true</args>
                            <clear_log apply="false"/>
                            <stdout/>
                        </action>
                    </use_extern_action>
                    <file_copy_action>
                        <action>
                            <loc>$HOME/.cisco/secureclient/securefirewallposture/log/*</loc>
                            <clear_log apply="true"/>
                        </action>
                    </file_copy_action>
                    <use_extern_action>
                        <action>
                            <args>rm -rf $HOME/.cisco/secureclient/securefirewallposture/log/v4DebugInfo*</args>
                            <clear_log apply="false"></clear_log>
                            <stdout/>
                        </action>
                        <action>
                            <args>rm -rf $HOME/.cisco/secureclient/securefirewallposture/log/v4clientfull</args>
                            <clear_log apply="false"></clear_log>
                            <stdout/>
                        </action>
                       <action>
                            <args>rm -rf $HOME/.cisco/secureclient/securefirewallposture/log/*transport.log</args>
                            <clear_log apply="false"></clear_log>
                            <stdout/>
                      </action>
                    </use_extern_action>
                </os>
            </dart>
        </file>
        <file id="csc-posture-dmp" directoryName="Crash Reports">
            <default>true</default>
            <description>Posture dump files</description>
            <gui>
                <label>_tr("Posture dump files")</label>
                <file_type>log</file_type>
            </gui>
            <dart>
                <required>false</required>
                <os opsys="win">
                    <file_copy_action>
                        <action>
                            <loc gather_newest="true">%WINDIR%\Temp\cscan.exe*.mdmp</loc>
                            <clear_log apply="true"/>
                        </action>
                        <action>
                            <loc gather_newest="true">%WINDIR%\Temp\cstub.exe*.mdmp</loc>
                            <clear_log apply="true"/>
                        </action>
                        <action>
                            <loc gather_newest="true">%WINDIR%\Temp\ciscod.exe*.mdmp</loc>
                            <clear_log apply="true"/>
                        </action>
                        <action>
                            <loc gather_newest="true">%WINDIR%\Temp\cnotify.exe*.mdmp</loc>
                            <clear_log apply="true"/>
                        </action>
                        <action>
                            <loc gather_newest="true">%TEMP%\cscan.exe*.mdmp</loc>
                            <clear_log apply="true"/>
                        </action>
                        <action>
                            <loc gather_newest="true">%TEMP%\cstub.exe*.mdmp</loc>
                            <clear_log apply="true"/>
                        </action>
                        <action>
                            <loc gather_newest="true">%TEMP%\ciscod.exe*.mdmp</loc>
                            <clear_log apply="true"/>
                        </action>
                        <action>
                            <loc gather_newest="true">%TEMP%\cnotify.exe*.mdmp</loc>
                            <clear_log apply="true"/>
                        </action>
                    </file_copy_action>
                </os>
                <os opsys="mac">
                    <file_copy_action>
                        <action>
                            <loc gather_newest="true">$HOME/Library/Logs/DiagnosticReports/cscan*</loc>
                            <clear_log apply="true"/>
                        </action>
                        <action>
                            <loc gather_newest="true">$HOME/Library/Logs/DiagnosticReports/cstub*</loc>
                            <clear_log apply="true"/>
                        </action>
                        <action>
                            <loc gather_newest="true">$HOME/Library/Logs/DiagnosticReports/ciscod*</loc>
                            <clear_log apply="true"/>
                        </action>
                        <action>
                            <loc gather_newest="true">$HOME/Library/Logs/DiagnosticReports/cnotify*</loc>
                            <clear_log apply="true"/>
                        </action>
                        <action>
                            <loc gather_newest="true">/Library/Logs/DiagnosticReports/cscan*</loc>
                            <clear_log apply="true"/>
                        </action>
                        <action>
                            <loc gather_newest="true">/Library/Logs/DiagnosticReports/cstub*</loc>
                            <clear_log apply="true"/>
                        </action>
                        <action>
                            <loc gather_newest="true">/Library/Logs/DiagnosticReports/ciscod*</loc>
                            <clear_log apply="true"/>
                        </action>
                        <action>
                            <loc gather_newest="true">/Library/Logs/DiagnosticReports/cnotify*</loc>
                            <clear_log apply="true"/>
                        </action>
                    </file_copy_action>
                </os>
                <os opsys="linux">
                    <file_copy_action>
                        <action>
                            <loc gather_newest="true">/var/crash/*_ciscod.*</loc>
                             <clear_log apply="true"/>
                        </action>
                        <action>
                            <loc gather_newest="true">/var/crash/*_cscan.*</loc>
                            <clear_log apply="true"/>
                        </action>
                        <action>
                            <loc gather_newest="true">/var/crash/*_cstub.*</loc>
                            <clear_log apply="true"/>
                        </action>
                    </file_copy_action>
                </os>
            </dart>
        </file>
    </fileGroup>
	<fileGroup treeRootName="Legacy - Cisco AnyConnect Secure Mobility Client" directoryName="Legacy - Cisco AnyConnect Secure Mobility Client\Cisco AnyConnect Posture Module">
		<title>Cisco AnyConnect Posture Module</title>
		<file id="posture-install">
			<default>false</default>
			<description>Posture install logs</description>
			<gui>
				<label>_tr("Posture install logs")</label>
				<file_type>log</file_type>
			</gui>
			<dart>
				<required>false</required>
				<os opsys="linux">
					<file_copy_action>
						<action>
							<loc>/opt/cisco/hostscan/log/posture-*.log</loc>
							<clear_log apply="false"/>
						</action>
					</file_copy_action>
				</os>
				<os opsys="win">
					<file_copy_action>
						<action>
							<loc>%TEMP%\anyconnect*-posture-*.log</loc>
							<clear_log apply="false"/>
						</action>
						<action>
							<loc>%WINDIR%\Temp\anyconnect*-posture-*.log</loc>
							<clear_log apply="false"/>
						</action>
					</file_copy_action>
				</os>
			</dart>
		</file>
		<file id="posture-logs">
			<default>false</default>
			<description>Posture application logs</description>
			<gui>
				<label>_tr("Posture application logs")</label>
				<file_type>log</file_type>
			</gui>
			<dart>
				<required>false</required>
				<os opsys="win">
					<file_copy_action>
						<action>
							<loc>%LOCALAPPDATA%\Cisco\Cisco HostScan\log\*</loc>
							<clear_log apply="true"/>
						</action>
					</file_copy_action>
					<use_extern_action>
						<action>
							<plugin/>
							<args>wineventlog.exe -l "Cisco AnyConnect Posture Module" -f %TEMP%\Posture.txt</args>
							<clear_log apply="false"/>
							<temp_out>%TEMP%\Posture.txt</temp_out>
						</action>
						<action>
							<path>%LOCALAPPDATA%\Cisco\Cisco HostScan\lib</path>
							<args>WaDiagnose.exe --log_path "%LOCALAPPDATA%\Cisco\Cisco HostScan\log\WaDiagnose.txt" --debug_log_output_path "%LOCALAPPDATA%\Cisco\Cisco Hostscan\log" --driver_prevent_install true --auto_exit true</args>
							<clear_log apply="false"/>
							<temp_out>%LOCALAPPDATA%\Cisco\Cisco HostScan\log\WaDiagnose.txt</temp_out>
						</action>
						<action>
							<path>%PROGRAMFILES%\Cisco\Cisco HostScan\lib</path>
							<args>WaDiagnose.exe --log_path "%LOCALAPPDATA%\Cisco\Cisco HostScan\log\WaDiagnose_clientfull.txt" --debug_log_output_path "%LOCALAPPDATA%\Cisco\Cisco Hostscan\log\v4clientfull" --driver_prevent_install true --auto_exit true</args>
							<clear_log apply="false"/>
							<temp_out>%LOCALAPPDATA%\Cisco\Cisco HostScan\log\WaDiagnose_clientfull.txt</temp_out>
						</action>
						<action>
							<path>%WINDIR%\system32</path>
							<args>wevtutil epl "Cisco AnyConnect Posture Module" %TEMP%\Posture.evtx</args>
							<clear_log apply="true">wevtutil cl "Cisco AnyConnect Posture Module"</clear_log>
							<temp_out>%TEMP%\Posture.evtx</temp_out>
						</action>
						<action>
							<plugin/>
							<args>wineventlog.exe -l Application -s CiscoSD -f %WinDir%\temp\csd_sd_logs.txt</args>
							<clear_log apply="false"/>
							<temp_out>%WinDir%\temp\csd_sd_logs.txt</temp_out>
						</action>
						<action>
							<plugin>wineventlog.exe</plugin>
							<args>wineventlog.exe -l Application -s CiscoHostScan -f %WinDir%\temp\csd_hostscan_logs.txt</args>
							<clear_log apply="false"/>
							<temp_out>%WinDir%\temp\csd_hostscan_logs.txt</temp_out>
						</action>
						<action>
							<plugin/>
							<args>wineventlog.exe -l Application -s csd -f %WinDir%\temp\csd_sd_logs.txt</args>
							<clear_log apply="false"/>
							<temp_out>%WinDir%\temp\csd_logs.txt</temp_out>
						</action>
                        <action>
							<path>%WINDIR%\system32</path>
							<args>cmd.exe /C "copy "%APPDATA%\Cisco\Cisco HostScan\csd.log" "%TEMP%\csd_3.4.log""</args>
							<clear_log apply="false"/>
							<temp_out>%TEMP%\csd_3.4.log</temp_out>
						</action>
						<action>
							<path>%WINDIR%\system32</path>
							<args>cmd.exe /C "copy "%APPDATA%\Cisco\Cisco HostScan\hostscan.log" "%TEMP%\hostscan_3.4.log""</args>
							<clear_log apply="false"/>
							<temp_out>%TEMP%\hostscan_3.4.log</temp_out>
						</action>
						<action>
							<path>%WINDIR%\system32</path>
							<args>cmd.exe /C "copy "%APPDATA%\Cisco\Cisco Secure Desktop\Cache\hostscan.log" "%TEMP%\hostscan_vault.log""</args>
							<clear_log apply="false"/>
							<temp_out>%TEMP%\hostscan_vault.log</temp_out>
						</action>
						<action>
							<path>%WINDIR%\system32</path>
							<args>cmd.exe /C "copy "%WINDIR%\System32\config\systemprofile\AppData\Roaming\Cisco\Cisco HostScan\csd.log" "%TEMP%\csd_3.4_SBL.log""</args>
							<clear_log apply="false"/>
							<temp_out>%TEMP%\csd_3.4_SBL.log</temp_out>
						</action>
						<action>
							<path>%WINDIR%\system32</path>
							<args>cmd.exe /C "copy "%WINDIR%\SysWOW64\config\systemprofile\AppData\Roaming\Cisco\Cisco HostScan\csd.log" "%TEMP%\csd_3.4_SBL.log""</args>
							<clear_log apply="false"/>
							<temp_out>%TEMP%\csd_3.4_SBL.log</temp_out>
						</action>
						<action>
							<path>%WINDIR%\system32</path>
							<args>cmd.exe /C "copy "%WINDIR%\System32\config\systemprofile\AppData\Roaming\Cisco\Cisco HostScan\hostscan.log" "%TEMP%\hostscan_3.4_SBL.log""</args>
							<clear_log apply="false"/>
							<temp_out>%TEMP%\hostscan_3.4_SBL.log</temp_out>
						</action>
						<action>
							<path>%WINDIR%\system32</path>
							<args>cmd.exe /C "copy "%WINDIR%\SysWOW64\config\systemprofile\AppData\Roaming\Cisco\Cisco HostScan\hostscan.log" "%TEMP%\hostscan_3.4_SBL.log""</args>
							<clear_log apply="false"/>
							<temp_out>%TEMP%\hostscan_3.4_SBL.log</temp_out>
						</action>
						<action>
							<path>%WINDIR%\system32</path>
							<args>cmd.exe /C "copy "%WINDIR%\System32\config\systemprofile\AppData\Local\Cisco\Cisco HostScan\log\hostscan.log" "%TEMP%\hostscan_SBL.log""</args>
							<clear_log apply="false"/>
							<temp_out>%TEMP%\hostscan_SBL.log</temp_out>
						</action>
						<action>
							<path>%WINDIR%\system32</path>
							<args>cmd.exe /C "copy "%WINDIR%\SysWOW64\config\systemprofile\AppData\Local\Cisco\Cisco HostScan\log\hostscan.log" "%TEMP%\hostscan_SBL.log""</args>
							<clear_log apply="false"/>
							<temp_out>%TEMP%\hostscan_SBL.log</temp_out>
						</action>
                    </use_extern_action>
                    <file_copy_action>
                        <action>
                           <loc>%LOCALAPPDATA%\Cisco\Cisco Hostscan\log\v4DebugInfo*</loc>
                           <clear_log apply="false"/>
                        </action>
                        <action>
                           <loc>%LOCALAPPDATA%\Cisco\Cisco Hostscan\log\v4clientfull</loc>
                           <clear_log apply="false"/>
                        </action>
                    </file_copy_action>
                    <use_extern_action>
                        <action>
                           <path>%WINDIR%\System32</path>
                           <args>cmd.exe /C "del "%LOCALAPPDATA%\Cisco\Cisco Hostscan\log\v4DebugInfo*""</args>
                        </action>
                        <action>
                           <path>%WINDIR%\System32</path>
                           <args>cmd.exe /C "rmdir /q /s "%LOCALAPPDATA%\Cisco\Cisco Hostscan\log\v4clientfull""</args>
                        </action>
                    </use_extern_action>
                </os>
				<os opsys="linux">
					<use_extern_action>
						<action>
							<path>$HOME/.cisco/hostscan/lib</path>
							<args>wadiagnose --log_path $HOME/.cisco/hostscan/log/wadiagnose.txt --debug_log_output_path $HOME/.cisco/hostscan/log --driver_prevent_install true --auto_exit true</args>
							<clear_log apply="false"/>
							<stdout/>
						</action>
					</use_extern_action>
					<use_extern_action>
						<action>
							<path>/opt/cisco/hostscan/lib</path>
							<args>wadiagnose --log_path $HOME/.cisco/hostscan/log/wadiagnose_clientfull.txt --debug_log_output_path $HOME/.cisco/hostscan/log/v4clientfull --driver_prevent_install true --auto_exit true</args>
							<clear_log apply="false"/>
							<stdout/>
						</action>
					</use_extern_action>
					<file_copy_action>
						<action>
							<loc>$HOME/.cisco/hostscan/log/*</loc>
							<clear_log apply="true"/>
						</action>
					</file_copy_action>
					<use_extern_action>
						<action>
							<args>rm -rf $HOME/.cisco/hostscan/log/v4DebugInfo*</args>
							<clear_log apply="false"/>
							<stdout/>
						</action>
						<action>
							<args>rm -rf $HOME/.cisco/hostscan/log/v4clientfull</args>
							<clear_log apply="false"/>
							<stdout/>
						</action>
					</use_extern_action>
				</os>
				<os opsys="mac">
					<use_extern_action>
						<action>
							<path>$HOME/.cisco/hostscan/lib</path>
							<args>waDiagnose --log_path $HOME/.cisco/hostscan/log/waDiagnose.txt --debug_log_output_path $HOME/.cisco/hostscan/log --driver_prevent_install true --auto_exit true</args>
							<clear_log apply="false"/>
							<stdout/>
						</action>
					</use_extern_action>
					<use_extern_action>
						<action>
							<path>$HOME/.cisco/hostscan/lib64</path>
							<args>waDiagnose --log_path $HOME/.cisco/hostscan/log/waDiagnose.txt --debug_log_output_path $HOME/.cisco/hostscan/log --driver_prevent_install true  --auto_exit true</args>
							<clear_log apply="false"/>
							<stdout/>
						</action>
					</use_extern_action>
					<use_extern_action>
						<action>
							<path>/opt/cisco/hostscan/lib</path>
							<args>waDiagnose --log_path $HOME/.cisco/hostscan/log/waDiagnose_clientfull.txt --debug_log_output_path $HOME/.cisco/hostscan/log/v4clientfull --driver_prevent_install true --auto_exit true</args>
							<clear_log apply="false"/>
							<stdout/>
						</action>
					</use_extern_action>
					<use_extern_action>
						<action>
							<path>/opt/cisco/hostscan/lib64</path>
							<args>waDiagnose --log_path $HOME/.cisco/hostscan/log/waDiagnose_clientfull.txt --debug_log_output_path $HOME/.cisco/hostscan/log/v4clientfull --driver_prevent_install true --auto_exit true</args>
							<clear_log apply="false"/>
							<stdout/>
						</action>
					</use_extern_action>
					<file_copy_action>
						<action>
							<loc>$HOME/.cisco/hostscan/log/*</loc>
							<clear_log apply="true"/>
						</action>
					</file_copy_action>
					<use_extern_action>
						<action>
							<args>rm -rf $HOME/.cisco/hostscan/log/v4DebugInfo*</args>
							<clear_log apply="false"/>
							<stdout/>
						</action>
						<action>
							<args>rm -rf $HOME/.cisco/hostscan/log/v4clientfull</args>
							<clear_log apply="false"/>
							<stdout/>
						</action>
					</use_extern_action>
					<file_copy_action>
						<action>
							<loc gather_newest="true">$HOME/Library/Logs/DiagnosticReports/cscan_*</loc>
							<clear_log apply="false"/>
						</action>
					</file_copy_action>
				</os>
			</dart>
		</file>
	</fileGroup>
    <fileGroup treeRootName="Secure Firewall Posture" directoryName="Cisco Secure Client\Secure Firewall Posture\Logs">
        <file id="SFP-v4Debug-runtime-user-logs" directoryName="SFPV4DebugRTUserLogs">
            <default>true</default>
            <description>SFP v4Debug runtime user logs</description>
            <gui>
                <label>_tr("SFP v4Debug runtime user logs")</label>
                <file_type>log</file_type>
            </gui>
            <dart>
                <required>false</required>
                <os opsys="win">
                    <file_copy_action>
                        <action>
                            <loc>%LOCALAPPDATA%\Cisco\Cisco Secure Client\Secure Firewall Posture\v4DebugInfo*</loc>
                            <clear_log apply="false"/>
                        </action>
                    </file_copy_action>
                    <use_extern_action>
                        <action>
                            <path>%WINDIR%\System32</path>
                            <args>cmd.exe /C "del "%LOCALAPPDATA%\Cisco\Cisco Secure Client\Secure Firewall Posture\v4DebugInfo*""</args>
                        </action>
                    </use_extern_action>
                </os>
                <os opsys="linux">
                    <file_copy_action>
                        <action>
                            <loc>$HOME/.cisco/secureclient/securefirewallposture/v4DebugInfo*</loc>
                            <clear_log apply="false"/>
                        </action>
                    </file_copy_action>
                    <use_extern_action>
                        <action>
                            <args>rm -rf $HOME/.cisco/secureclient/securefirewallposture/v4DebugInfo*</args>
                            <clear_log apply="false"></clear_log>
                            <stdout/>
                        </action>
                    </use_extern_action>
                </os>
                <os opsys="mac">
                    <file_copy_action>
                        <action>
                            <loc>$HOME/.cisco/secureclient/securefirewallposture/v4DebugInfo*</loc>
                            <clear_log apply="true"/>
                        </action>
                    </file_copy_action>
                    <use_extern_action>
                        <action>
                            <args>rm -rf $HOME/.cisco/secureclient/securefirewallposture/v4DebugInfo*</args>
                            <clear_log apply="false"></clear_log>
                            <stdout/>
                        </action>
                    </use_extern_action>
                </os>
            </dart>
        </file>
        <file id="SFP-v4Debug-runtime-service-logs" directoryName="SFPV4DebugRTServiceLogs">
            <default>true</default>
            <description>SFP v4Debug runtime service logs</description>
            <gui>
                <label>_tr("SFP v4Debug runtime service logs")</label>
                <file_type>log</file_type>
            </gui>
            <dart>
                <required>false</required>
                <os opsys="win">
                    <file_copy_action>
                        <action>
                            <loc>%PROGRAMFILES%\Cisco\Cisco Secure Client\Secure Firewall Posture\v4DebugInfo*</loc>
                            <clear_log apply="false"/>
                        </action>
                    </file_copy_action>
                    <use_extern_action>
                        <action>
                            <path>%WINDIR%\System32</path>
                            <args>cmd.exe /C "del "%PROGRAMFILES%\Cisco\Cisco Secure Client\Secure Firewall Posture\v4DebugInfo*""</args>
                        </action>
                    </use_extern_action>
                </os>
                <os opsys="linux">
                    <file_copy_action>
                        <action>
                            <loc>/opt/cisco/secureclient/securefirewallposture/v4DebugInfo*</loc>
                            <clear_log apply="false"/>
                        </action>
                    </file_copy_action>
                    <use_extern_action>
                        <action>
                            <args>rm -rf /opt/cisco/secureclient/securefirewallposture/v4DebugInfo*</args>
                            <clear_log apply="false"></clear_log>
                            <stdout/>
                        </action>
                    </use_extern_action>
                </os>
                <os opsys="mac">
                    <file_copy_action>
                        <action>
                            <loc>/opt/cisco/secureclient/securefirewallposture/v4DebugInfo*</loc>
                            <clear_log apply="false"/>
                        </action>
                    </file_copy_action>
                    <use_extern_action>
                        <action>
                            <args>rm -rf /opt/cisco/secureclient/securefirewallposture/v4DebugInfo*</args>
                            <clear_log apply="false"></clear_log>
                            <stdout/>
                        </action>
                    </use_extern_action>
                </os>
            </dart>
        </file>
    </fileGroup>
</configure>
