Configuration and installation of SourceFire ASA

Similar Questions

• configuration and installation of biapps 11.1.1.8.1

  Hello

  I try to install and configure biapps 11.1.1.8.1 and using the installation guide

  11g Release 1 (11.1.1.8.1)

  E51478-01

  I need to do following steps

  3.3.5 updated ATG Lite

  3.3.6 update WSF

  and why is it necessary.

  Yes, you must apply these measures. ATGLite is a J2EE component that is used by BIACM. When installing BIApps RCU could have defined the BIAPPS_BIACOMP user, these will be used in ODI and update the schema BIACOMP

• Configuration and installation of 5.4 Tb DR 4100

  Hello

  Please I would like to know how to install and configure a dell DR4100. Wiring to the settings

  Thank you all,.

  your help has been very useful.

• Dell power edge T620 RAID configuration and installation of the OS

  Hello

  We have T620 DELL poweredge server my customer wants to configure RAID and istall new OS 2008 on that but DVD server disappeared. I told him I have another way to configure RAID without server DVD.

  But my customer insists on me I need its own DVD with the server machine. Please send me any ISO for T620 image so that I can download and burn to DVD.

  .

• Color LaserJet pro 200 M276nw MFP - Scan configuration and installation on Mac Yosemite

  Hi all

  I just bought a new LaserJet pro 200 color MFP M276nw and I am trying (for 4 days) to coorectly install it.

  My goal would be to use it via the wifi connection and I put it correctly by the façade.

  When I try to install the printer on wifi, I can install the printer driver, but I can't find the driver for scanning.

  I tried to connect by ethernet and the system to emphasize a multifunction scanner and the printer driver. If use them, it works correctly.

  Whenever I go out the lan cable for use in wifi it lose the scan functions.

  What I am doing wrong?

  Thank you

  Gianluigi

  Hi @gianluigi1982 ,

  I see that you have problems with scanning via the wireless network, but you can scan through an Ethernet connection.

  I would like to help.

  Do you have what drivers installed the printer? (Apple update or the 10.9 download drivers)

  I checked our laboratory with 10.10 installed on this computer and I was able to browse for printers and Scanners on the wireless network.

  Check the version of the driver installed.

  Go to the Apple preferences system, printers, and Scanners, highlight the Laserjet printers, click the print tab on the right side of the window, and select the Options and supplies.
  Under the general tab it will give the list the version of the driver.
  19.9 is one on the lab.

  Which driver you have show?

  Check the name of the driver that is installed by the printer. Make sure that it shows just the name of the printer.
  Click on the Apple menu, click System Preferences. Click on Printers & Scanners, highlight the name of the printer on the left side and right side of the screen it should show the name of the printer. (MFP Laserjet Pro 200 M276)

  If the full name of the printer is not correctly, delete and add the printer name back from the list. Click on the sign - to remove the driver and then click on the + sign to add the driver might have to drop-down list to select the name of the printer to add a click.

  In the printers and Scanners window, highlight the printer on the left side, to the right of the window, you should have a print/scan tab, click Scan, and then open Scanners and test scanning. If you do not have the scan tab, let me know.

  

  Have you added the printer as your Hello or via the IP protocol? (cannot scan through the IP Protocol)

  You use the automatic IP address or your own static IP address?

  Here is some information for scanning in OS X v10.10 Yosemite without software HP.

  Please provide detailed results if you're still having problems.

  Good day!
  Thank you.

• ASA 8.4 cleaning using Network Configuration and Service objects

  Hello

  As most of you know, firewall configurations can growth in order to be large and complex, making them difficult to understand and difficult to change.

  I have a cleaning using network firewall configuration and Service objects and groups of objects running from 8.4 who I want to. This ASA (8.4) has over 30 Web Server VM deployed behind each with the same basic configuration: one to the outside inside the IP address and port mapping (x.x.x.x:ftp to y.y.y.y:ftp, etc.) by using the following well known ports: FTP, 80, 443, 3389.

  Examples of my existing configuration:

  network of the Y.Y.Y.Y_FTP object

  Home y.y.y.66

  NAT (inside, outside) Static X.X.X.66 tcp ftp ftp service

  network of the Y.Y.Y.Y_WWW object

  Home y.y.y.66

  NAT (inside, outside) Static X.X.X.66 tcp http http service

  network of the Y.Y.Y.Y_HTTPS object

  Home y.y.y.66

  NAT (inside, outside) Static X.X.X.66 tcp 443 443 service

  network of the Y.Y.Y.Y_RDP object

  Home y.y.y.66

  NAT (inside, outside) static service tcp 3389 3389 X.X.X.66

  outside_in list extended access permit tcp any host y.y.y.66 eq ftp

  outside_in list extended access permit tcp any host y.y.y.66 eq www

  outside_in list extended access permit tcp any host y.y.y.66 eq 3389

  outside_in list extended access permit tcp any host y.y.y.66 eq 443

  The entries above for each port have to do whenever a new virtual machine is deployed behind the firewall.

  Here's my ACE project and entered the object-group service to clean up configuration.

  object-group service WWW_FTP

  Description access FTP HTTP

  the tcp destination eq ftp service object

  the purpose of the tcp destination eq ftp service - data

  the purpose of the service tcp destination eq www

  object-group service WWW_FTP_RDP

  Description access FTP RPD WWW

  the tcp destination eq ftp service object

  the purpose of the tcp destination eq ftp service - data

  the purpose of the service tcp destination eq www

  the destination eq 3389 tcp service object

  object-group service WWW_FTP_RDP_SSH

  Description access WWW RDP SSH FTP

  the tcp destination eq ftp service object

  the purpose of the tcp destination eq ftp service - data

  the purpose of the service tcp destination eq www

  the destination eq 443 tcp service object

  the destination eq 3389 tcp service object

  object-group service RDP_SSH

  Access SSH RDP description

  the destination eq 443 tcp service object

  the destination eq 3389 tcp service object

  object-group service RDP_SSH_FTP

  Access SSH FTP RDP description

  the destination eq 443 tcp service object

  the destination eq 3389 tcp service object

  the tcp destination eq ftp service object

  the purpose of the tcp destination eq ftp service - data

  object-group service RDP_FTP

  Access FTP RDP description

  the destination eq 3389 tcp service object

  the tcp destination eq ftp service object

  the purpose of the tcp destination eq ftp service - data

  outside_in list extended access allowed object-group WWW_FTP_RPD any host Y.Y.Y.Y

  outside_in list extended access allowed object-group WWW_FTP_RDP_SSH any host Y.Y.Y.Y

  outside_in list extended access allowed object-group WWW_FTP any host Y.Y.Y.Y

  outside_in list extended access allowed object-group RDP_FTP any host Y.Y.Y.Y

  outside_in list extended access allowed object-group RDP_SSH_FTP any host Y.Y.Y.Y

  outside_in list extended access allowed object-group RDP_SSH any host Y.Y.Y.Y

  The challenge lies in the consolidation of the network object entries that follow into something more condensed as the entries in the object-group service.

  network of the Y.Y.Y.Y_FTP object

  Home y.y.y.66

  NAT (inside, outside) Static X.X.X.66 tcp ftp ftp service

  network of the Y.Y.Y.Y_WWW object

  Home y.y.y.66

  NAT (inside, outside) Static X.X.X.66 tcp http http service

  network of the Y.Y.Y.Y_HTTPS object

  Home y.y.y.66

  NAT (inside, outside) Static X.X.X.66 tcp 443 443 service

  network of the Y.Y.Y.Y_RDP object

  Home y.y.y.66

  NAT (inside, outside) static service tcp 3389 3389 X.X.X.66

  Any help is greatly appreciated!

  Hello

  I'm afraid that the only part of the configuration you can really change and make more condenced is configurations ACL using configurations different ' object-group ' .

  Of course, you can also create a "object-group" for all servers that need the same ports open to further reduce the lines of actual configurations in the configuration of the CLI.

  However,.

  Regarding NAT configurations there is unfortunately no way to reduce the amount of required configurations if you use Static PAT (Port Forward) for servers. There is no way yet to ports in group for "nat" configurations.

  My question is, you have public IP addresses less at your disposal compared with the amount of different servers in your network behind the ASA?

  If you have a public IP address dedicated to each server in the network, then I suggest to use static NAT instead of static PAT. It's about the only way that the NAT configuration could be minimized.

  -Jouni

• C210 M2 hangs at "hardware platform, configuration and test".

  Hello

  We did a MMIC and update the BIOS on one of our servers to the latest version. System tells us that everything went well and the logging in the BIOS also worked well.

  The confusing thing is, even if the BIOS itself showed the correct version, the Webgui interface shows the old one.

  After leaving the BIOS screen and restarting the server twice for the installation of the OS, it now crashes after "memory test" to the 'config '. and test. step of the hardware platform.

  Even trying to perform a recovery of the BIOS translates into find resumed his success after a few seconds and then (scope of the BIOS / show details in CLI changes status of recovery of the BIOS called "None") stops.

  We´ve deleted each addtl. material such as PCI-card expansion and key USB system, cannot find error messages or stuff like that, we have simply wants this configuration and test step.

  has anyone seen similar behavior or idea how to move forward here?

  Rgds.

  Markus

  Hi Markus,.

  Try resetting the CMOS (see link below) configuration

  With the help of the J1E6 of the rider Clear CMOS (Page 36)

  http://www.Cisco.com/en/us/docs/unified_computing/UCS/c/HW/C210M1/install/C210M1.PDF

• The services configuration of firepower on Cisco asa 5506 with ASDM

  I have a few 5506 firewalls, and they are fully licensed with services of power, control, Protection, URL filtering, malware. I have intend running and configuration of all of this on the 5506 by ASDM. I was wondering if there are guides for a basic configuration and the implementation of policies available. Something to show a basic configuration which would technically begin inspection of traffic and work. Then I can edit and make changes to my taste.

  Thank you

  My recommendation to clients is to look at the Cisco Live, BRKSEC-2018presentation. Please refer to the 56 slide from for a good overview of how policies are installed in a module of firepower.

  There are also a number of other detailed guides available in the FireSIGHT Management Center product support page should you care to learn more about customization and operations. You can also find the series of videos of ASA FirePOWER on request to Labminutes.com useful to guide you on execution of operations of your system.

• Clientless and Anyconnect on same ASA

  Hello world

  I have configured Anyconnect SSL on SAA and it works fine.

  Now I also configured Clientless SSL VPN on ASA same and it does not work.

  I get the error message connection failed.

  Need to know if the Anyconnect SSL and Clientless VPN can run on the same ASA?

  Concerning

  MAhesh

  Hi Manu.

  Yes you can have both configured at the same time. I have a client with this Setup, and it works fine.

  Clientless SSL VPN requires the AnyConnect Premium license as a sine qua non. If you have configuration based on SSL VPN client AnyConnect Essentials license, which would need to be changed.

  With both types, each should have its own connection profile (tunnel-group) and group policy set - one with "ssl vpn-tunnel-Protocol" and the other customer with '-tunnel-clientless ssl vpn Protocol.

• Had problems with Windows 8 Pro that I bought after the pre version, seems when I tried to reinstall it, kept getting no configure after installation.

  Had problems with Windows 8 Pro that I bought after the pre version, seems when I tried to reinstall it, kept getting no configure after installation.  So I tried a full install without success.  Can you please give some tips to overcome this problem?  I lost the back upward with the resettlement, don't know how, but I have a QuadCore intel 9650 memory of 8 GB, 560 GTX GPU, 120 GB SSD.  Can I install windows 7 ultimate, but I prefer Windows 8 Pro and don't want to pay for it again.

  I suggest you reinstall Windows 7 first, then use your existing Windows 8 Pro key and reinstall Windows 8 Pro from the following link:

  You can download it from there and use your product key to upgrade:

  http://Windows.Microsoft.com/en-GB/Windows-8/upgrade-product-key-only

  You will need to reactivate by phone:

  Activation of the phone:

  1. press the Windows key + X , and then click run, and then type: slui.exe 4

  2. then press the ENTER"" key.

  3. Select your "country" in the list.

  4. choose the option "activate phone".

  5. stay on the phone (do not select/press all options) and wait for a person to help you with the activation.

  6. explain your problem clearly to the support person.

• [APEX 4.2] and installation of Weblogic

  Hello

  I installed Weblogic on Windows 7 to run Forms Builder 11 (on 11g server) and it works.

  Is it possible to configure this installation of Weblogic as a J2EE server to run Apex 4.2?

  Thank you very much

  You can certainly. With Weblogic, you have the possibility to use the APEX or the OHS and mod_plsql listener. See the documentation for http://docs.oracle.com/cd/E37097_01/doc/install.42/e35123/otn_install.htm

• Questions on "configure and start the server process" step during the r12 upgrade

  There is a not listed in the 11i 12.1.1 to upgrade guide, 'the Server Configure and start processes. It looks like to includes two parts, run autoconfig tire to the database and run the quick installation of second time.

  so I have two questions here:

  1. looks like the quick second installation is just autoconfig, so can I just run autoconfig instead of the second quick installation?

  2. that we'll first? automatic configuration in the database or quick installation service?

  Thank you

  1. looks like the quick second installation is just autoconfig, so can I just run autoconfig instead of the second quick installation?

  AutoConfig will not start the services so I'd run fast install and it should run the automatic configuration for you.

  2. that we'll first? automatic configuration in the database or quick installation service?

  Quick installation.

  Thank you

  Hussein

• DG4ODBC configured and working but receiving ORA-28528 for some columns

  DG4ODBC is configured and working for XE 11 GR 2, but under some circumstances receiving SQL Error: ORA-28528: heterogeneous Services data type conversion error.
  
  Configuration: DG4ODBC configured for Oracle 11 g 2 using ODBC datasource based on IBM UniVerse ODBC Driver 4.00.04.7346 UVODBC. DLL (25/08/2009), all on the same host 32-bit Windows designed to extract data from remote AIX based IBM/Rockit universe version 10.1 of the database.
  
  After 3 orders with matching results illustrate the problem:
  
  Select NO_PROD from bill_mat@dblink, including NO_PROD not in ('15', '20', '24', '6',' 10');
  
  no selected line
  
  
  Select NO_PROD, count (*) from bill_mat@dblink where NO_PROD Group ('15', '20', '24', ' 6', ' 10') of NO_PROD;
  
  NO_PROD COUNT (*)
  ---------- --------
  6 1
  20 1
  24 1
  9 out of 10
  15 1
  
  Select NO_PROD in the bill_mat@dblink;
  
  Error at startup on line 19 of order:
  Select NO_PROD from bill_mat@dblink
  Error report:
  SQL error: ORA-28528: heterogeneous Services data type conversion error
  ORA-02063: preceding line of DBLINK
  28528 00000 - "heterogeneous Services data type conversion error."
  * Cause: Is a type of data Oracle could not be converted to a non-Oracle
  data type, or a type of data non-Oracle could not be converted
  for an Oracle data type. Here are the possible reasons
  the failure of the conversion:
  -overflow problems (in the case of numbers)
  -the limits of length (in the case of strings)
  -invalid values passed in the conversion routines
  * Action: Contact customer support of the agent vendor. If the problem is
  due to differences in size between Oracle and the non-Oracle system.
  It is not possible to convert the value.
  
  
  LIST universe queries shows many ' white' values for both fields LST.WO & no PROD that issue when trying to query through DG4ODBC, in the case of the subjects table "BILL_MAT":
  
  LIST BILL. MAST LST.WO No. LOCK PROD 16:08:44 November 22, 2011 PAGE 11
  BILL. MAST... LST.WO... MOM PROD LOCK
  
  239912 10
  220419
  247992
  252739
  249709
  239913 15
  184767
  164264
  184666
  164265
  247994
  239914
  251731
  249711
  173760
  239915 20
  242137
  247490
  247894
  254156
  Press a key to continue...
  
  
  
  Interestingly, the output of this test JDBC application is different, including references to "null" values "in white" referred to as with output LIST above:
  
  import java.sql. *;
  import java. IO;
  
  public class billmat {}
  
  Public Shared Sub main (String [] argv)
  {
  try {}
  BufferedReader in = new BufferedReader (new InputStreamReader (System.in));
  
  
  
  //---------------------------
  Connect to the server U2
  //---------------------------
  
  Chain account = "universe_account";
  String userid = "username";
  String passwd = "password";
  String host = "AIX_Host";
  String url = "jdbc:ibm-u2://"+host+"/"+account+"?tracelevel=5;tracefile=qiang.trace";
  
  Load the driver and connect to the server
  Class.forName ("com.ibm.u2.jdbc.UniJDBCDriver");
  Connection con = DriverManager.getConnection (url, username, passwd);
  
  System.out.println ("successful - \n\t*---connexion * \n");
  
  
  System.out.println ("1. Select the file Bill. MAT ------------------------");
  testQuery (con);
  
  
  con. Close;
  } catch (SQLException e) {}
  System.out.println ("Ex-Message:" + e.getMessage ());
  System.out.println ("ex-code:" + e.getErrorCode ());
  System.out.println ("Ex-SQLState:" + e.getSQLState ());
  System.out.println ("Ex-Next:" + e.getNextException ());
  e.printStackTrace ();
  System.GC();
  } catch (Exception e) {}
  System.out.println ("Exception caught:" + e);
  e.printStackTrace ();
  }
  }
  
  
  /**
  * Select CUST. MAT file.
  @param con The JDBC connection object.
  */
  public static void testQuery (connection con)
  throws SQLException
  {
  Statement stmt = con.createStatement ();
  String sql = "select DISTINCT LST.WO, no. PROD, BILL's LOCK. CARPET where LST.WO is not null or not. PROD is not zero. "
  Run the SELECT statement
  ResultSet rs = stmt.executeQuery (sql);
  
  Results of the first five records
  System.out.println ("\tlist selected columns for the first five records :");
  int i = 1;
  While (rs.next () & & I < 100)
  {
  
  
  System.out.println ("\tLST_WO: \t" + rs.getString (1));
  System.out.println ("\tNO_PROD: \t" + rs.getString (2));
  System.out.println ("\tLOCK: \t" + rs.getString (3));
  
  i ++ ;
  }
  
  RS. Close();
  stmt. Close();
  System.out.println ("\n\t*---QUERY test has been successfully-* \n");
  System.out.println ("\n\tDisplay Count: \t" + i);
  }
  
  }
  
  
  
  [root@VM-Linux01 Linux] # java billmat
  
  -Successful - connection
  
  1. select in the file Bill. MAT ------------------------
  LST_WO: null
  NO_PROD: null
  LOCK:
  LST_WO: null
  NO_PROD: 10
  LOCK:
  LST_WO: null
  NO_PROD: 15
  LOCK:
  LST_WO: null
  NO_PROD: 20
  LOCK:
  LST_WO: null
  NO_PROD: 6
  LOCK:
  LST_WO: null
  NO_PROD: 24
  LOCK:
  
  -QUERY test was performed with success-
  
  
  Number of view: 7
  
  
  The reason column THAT LOCK is included above is because he is using DG4ODBC queryable and presents itself as (null) in the result of the query and provided by SQLDeveloper.
  
  Considering the above findings, it seems what ORA-28528 IS NOT associated with problems of overflow or limits of length. Instead, some kind of mapping characterset problem here seems more plausible. For example, it seems NULL value returned in the case of the columns LST_WO and NO_PROD of the distant universe database is mapping not properly in the way that a NULL value is represented in the database 11 GR 2. Y at - it % HS_ in file init DG4ODBC value that can be set to solve this problem? I'm not quite sure the range of settings that exist, but try different values for HS_LANGUAGE which did not help.
  
  There is no problem using Excel MS Query to recover data using the same system DSN and associated ODBC driver on which DG4OBDC the installation program is based on the same Windows computer where DG4ODBC is configured.
  
  Here are the current settings of DG4ODBC for this instance (initDBLINK.ora):
  
  
  HS_FDS_CONNECT_INFO = DBLINK. ODBC
  HS_FDS_TRACE_LEVEL = WE
  HS_FDS_TRACE_FILE_NAME = c: / DG_LOG
  HS_FDS_TRACE_LEVEL = 4
  HS_LANGUAGE = AMERICAN_AMERICA. WE8ISO8859P1
  # Other parameters HS_LANGUAGE attempted to solve the problem are discussed below:
  # HS_LANGUAGE = american_america.utf8
  # HS_LANGUAGE = american_america.al32utf8
  
  
  Any guidance would be greatly appreciated!
  
  Edited by: WileyCoyote 8 March 2012 13:33
  
  Edited by: WileyCoyote 8 March 2012 13:39

  A gateway trace level 255 (HS_FDS_TRACE_LEVEL0 = 255) could be interesting - also the definition of the source table (how the table is defined in the database of version 10.1 IBM/Rockit universe).

• Is it possible with the serial number of an Xserve to read the configuration and the year of production?

  Is it possible with the serial number of an Xserve to read the configuration and the year of production?

  This will show you the model and year: https://checkcoverage.apple.com/

  If a specific configuration (like the 1 TB disk instead of 500 GB for ex) will not be determined. You can only learn by starting the Xserve (or open and look into it.)

• VI Analyzer Questions: Change the default test configuration and screw "Pavilion".

  I have two things I continue to come through in VI Analyzer:

  1. are there in any case to set the default VI Analyzer so that it applies to all projects, I'm working on that?

  I tried to create a task in project A, registration of the configuration and any attempt to open this file in project B, but it says that the file could not be loaded. The reason for my question is that there are a few default options that just add errors that we don't care (e.g. Controls dialog on the façade - 99% of the LabVIEW code that we are working on is called from TestStand as code modules, so the front panel doesn't really count)

  2. can I score / report some screws as 'safe' for parser tests?

  Basically, some screws may fail some perfectly safe way VI Analyzer tests (e.g. non-stanard errors on a 'closing' VI, who doesn't have a case error structure so that the device always gets closed). I wish I had a way to mark the VI kind VI Analyzer would ignore this particular test. This would allow me to have a rule that says something like "before any construction, run the file configuration VI analyzer and make sure there is not error", as opposed to "run VI Analyzer and examine errors, decide whether or not they are important for the VI in question..." ». An extension to this question would be how do I perform a task VI Analyzer before building when the VI Analyzer screw do not accept files cfg for project based tasks.

  Any help would be greately appreciated!

  Thank you

  Shaun

  1. a project oriented .cfg file cannot be transferred between projects.  Could you possibly create a .cfg unrelated to the project file (under the option 'Start a new task' on the first page of the VI Analyzer) and use it?  He would have no file in the list, but it would have all of the configured tests as you want.  And you could start with this on your different projects .cfg file... you would just add screws based on file (on page 2 of the VI Analyzer), rather than have all come to you in a .cfg project-based.

  2. on page 4 VI Analyzer, you can exclude certain tests to run on some screws and save these settings in a .cfg.  This option is also exposed in the VI Analyzer API with VIAn exclude the VI.vi Tests.