JOINT double and double FWSM

Similar Questions

• How JOINT can monitor interface FWSM

  Hello

  Three VLANs have been affected to the FWSM: 2 (outside), 3 (DMZ) and 4 (on the inside).

  Now, I would like to make an interface in mode inline monitoring traffic entering FWSM inside the interface.

  As the FWSM inside the interface makes sense, how can I set up JOINT monitoring.

  Rgds

  Yes the JOINT will FILL the two VLANS, there will be no ROUTING here since the two VLANS won't be in the same subnet

  You want to assign the sub-inteface 1 you created to the vs0 (virtual sensor). For each new sub-inteface you add (to a physical interface) you need to go and the virtual sensor.

  Just use the GUI, it will do everything very intuitive.

  Concerning

  Farrukh

• Joint internal and external joins in a SQL

  Oracle 11g.

  There are four tables:

  T1 (primary key: pk_t1)

  T2 (primary key: pk_t2, fk_t2_ref_t1 foreign key)

  T3 (primary key: pk_t3, fk_t3_ref_t2 foreign key)

  T4 (primary key: pk_t4, fk_t4_ref_t3 foreign key)

  That's what I want to do: inner join between the T1, T2 and T3, then an outer join with T4 (T4 may contain null lines).  Something like:

  procedure sp_test)

  p_where_clause)

  ...

  Select *.

  Of

  T1 inner joint T2 on pk_t1 = fk_t2_ref_t1

  inner town T3 on pk_t2 = fk_t3_ref_t2

  left outer join T3 on pk_t3 = fk_t4_ref_t3

  where p_where_clause;

  OR

  Select *.

  Of

  Right outer join of T4 T3 on pk_t3 = fk_t4_ref_t3

  Interior joint T2 on pk_t2 = fk_t3_ref_t2

  mixed inside T1 on pk_t1 = fk_t2_ref_t1

  where p_where_clause;

  Please help me write a correct SQL to achieve this goal.

  Thank you

  Hello

  Whenever you have a problem, please post a small example data (CREATE TABLE and only relevant columns, INSERT statements) of all the tables involved, so that people who want to help you can recreate the problem and test their ideas.

  Also post the results you want from this data, as well as an explanation of how you get these results from these data, with specific examples.

  Always say what version of Oracle you are using (for example, 11.2.0.2.0).

  See the FAQ forum: https://forums.oracle.com/message/9362002

  I'm guessing that your first attempt

  Select *.
  Of
  T1 inner joint T2 on pk_t1 = fk_t2_ref_t1
  inner town T3 on pk_t2 = fk_t3_ref_t2
  left outer join T3 on pk_t3 = fk_t4_ref_t3
  where p_where_clause;

  was close; only you want to include rather than a second copy of t3 t4, and you need to spell correctly the JOIN:

  SELECT *-you'll probably want to specify columns
  FROM t1
  INNER JOIN t2 ON pk_t1 = fk_t2_ref_t1
  T3 INNER JOIN ON pk_t2 = fk_t3_ref_t2
  LEFT OUTER JOIN t4 ON pk_t3 = fk_t4_ref_t3
  WHERE THE...

  ;

• 11g: using jointly Trinidad and Facelets

  Hi all
  
  I'm doing what should be a simple CEP with Facelets and Trinidad, but spin to an obstacle, so I thought I'd post here.
  
  I created a new Web project, select 'none' as the technology of page flow and adding without libraries of tags to the project. As soon as I did this, I'm able to add a new facelets page in my project using the 'all technology' tab on the new gallery. I create the tutorial to 'guess' standard and run - everything works fine.
  
  Now, let's say I want to change the tutorial to "guess" standard to use Trinidad components instead of the h:inputText that uses the tutorial. I add the Trinidad DURATION 11 library to my project and configure the default renderkit in faces-config. XML (without making any changes to the xhtml files at all) and set the alternative display manager in the web.xml file.
  
  At this point, if I try to run the tutorial, I get:
  

  java.lang.IllegalStateException: No RenderingContext
       at org.apache.myfaces.trinidad.render.CoreRenderer.encodeBegin(CoreRenderer.java:194)
       at org.apache.myfaces.trinidadinternal.renderkit.htmlBasic.HtmlFormRenderer.encodeBegin(HtmlFormRenderer.java:56)
       at javax.faces.component.UIComponentBase.encodeBegin(UIComponentBase.java:802)
       at javax.faces.component.UIComponent.encodeAll(UIComponent.java:934)
       at javax.faces.component.UIComponent.encodeAll(UIComponent.java:942)
       at com.sun.facelets.FaceletViewHandler.renderView(FaceletViewHandler.java:577)
       at com.sun.faces.lifecycle.RenderResponsePhase.execute(RenderResponsePhase.java:110)
       at com.sun.faces.lifecycle.Phase.doPhase(Phase.java:100)
       at com.sun.faces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:139)
       at javax.faces.webapp.FacesServlet.service(FacesServlet.java:266)
       at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
       at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
       at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:292)
       at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
       at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42)
       at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
       at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42)
       at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3496)
       at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
       at weblogic.security.service.SecurityManager.runAs(Unknown Source)
       at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2180)
       at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2086)
       at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1406)
       at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
       at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)

  This is the first question, so I take the renderkit of faces - config.xml and things seem to work OK again.
  
  For the next test, I add the definition xml ns Trinidad (xmlns:tr = "http://myfaces.apache.org/trinidad") in the file guess.xhtml of the tutorial and test - well Yes, still works.
  
  Now, I change the h:inputText to tr:inputText, h:commandButton to tr:commandButton, h:form to tr:form and h:message to tr:message in the same file and test - no go, I get the same "no rendering context stack trace."
  
  Googling for this error autour don't give me much help, unfortunately.
  
  I decided to try the simple example of the Trinity of wiki page:
  

  <tr:document
     xmlns:ui="http://java.sun.com/jsf/facelets"
     xmlns:h="http://java.sun.com/jsf/html"
     xmlns:f="http://java.sun.com/jsf/core"
     xmlns:tr="http://myfaces.apache.org/trinidad"
     title="Facelets">
  
    <tr:form>
        <tr:inputText label="Your name" id="input1" value="#{backing.name}" />
        <tr:commandButton id="button1" text="press me" action="#{backing.send}" />
    </tr:form>
  
  </tr:document>

  No, same error. How can I replace my web.xml sample one of the Trinity wiki... No, not does more :(
  
  Same deal if I add JSF to my scope of technology (who, incidentally, will let me create new facelets pages).
  
  Finally, in desperation, I add the taglibs Trinidad my project and get this mess:
  

  java.lang.NoSuchMethodError: javax.faces.context.ExternalContext.setRequest(Ljava/lang/Object;)V
       at org.apache.myfaces.trinidadinternal.config.GlobalConfiguratorImpl._isSetRequestBugPresent(GlobalConfiguratorImpl.java:543)
       at org.apache.myfaces.trinidadinternal.config.GlobalConfiguratorImpl.getExternalContext(GlobalConfiguratorImpl.java:325)
       at org.apache.myfaces.trinidadinternal.context.FacesContextFactoryImpl$CacheRenderKit.(FacesContextFactoryImpl.java:86)
       at org.apache.myfaces.trinidadinternal.context.FacesContextFactoryImpl.getFacesContext(FacesContextFactoryImpl.java:64)
       at org.apache.myfaces.trinidadinternal.context.FacesContextFactoryImpl.getFacesContext(FacesContextFactoryImpl.java:64)
       at javax.faces.webapp.FacesServlet.service(FacesServlet.java:208)
       at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
       at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
       at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:292)
       at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
       at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42)
       at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._invokeDoFilter(TrinidadFilterImpl.java:239)
       at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._doFilterImpl(TrinidadFilterImpl.java:196)
       at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl.doFilter(TrinidadFilterImpl.java:139)
       at org.apache.myfaces.trinidad.webapp.TrinidadFilter.doFilter(TrinidadFilter.java:92)
       at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42)
       at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3496)
       at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
       at weblogic.security.service.SecurityManager.runAs(Unknown Source)
       at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2180)
       at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2086)
       at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1406)
       at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
       at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)

  Any help on no defuddling my brain on this one?
  
  John

  Hi John,.

  What wiki page were you using? http://wiki.Apache.org/MyFaces/Facelets_with_Trinidad?

  Also, make sure that you have to follow (also mentioned in the wiki):
  faces-config. XML

  You don't need to configure any specials to use Facelets with Trinidad. Do not add the FaceletsViewHandler here! But make sure you have the ID of Trinidad RenderKit in this file, like:

  
  
  
  org. Apache.MyFaces.Trinidad.Core
  
  

  and

  Web.Xml
  
  org.apache.myfaces.trinidad.ALTERNATE_VIEW_HANDLER
  com.sun.facelets.FaceletViewHandler
  

  Kind regards

  ~ Simon

• Cisco JOINT and IPS hardware bypass

  Hi all

  I have a question about the Cisco JOINT, ASA - AIP - SSM (IPS) and material of the IPS 4200 bypass unit series. Please let me know if the material fails in both cases how to cross traffic. Is there any circumvention of integrated equipment built in the same

  Concerning

  Ankur

  Sorry for the late reply. I've been on vacation for a week.

  ByPass hardware is not available for the JOINT-2 no matter if you use inline vlan pairs or couples inline interface.

  For devices need special interface cards or a hardware bypass switch separate, and none of them are available on the JOINT-2.

  You must configure your network so that there is a second way around the JOINT 2 JOINT-2 failure.

  This can be done with a standard network cable.

  Suppose you have your JOINT-2 configured for inline vlan VLAN 10 matching and 20.

  Configure a standard switchport as an access port on vlan 10.

  Set up an another standard switchport as an access port on vlan 20.

  Now using a standard network cable connect these 2 all switch ports.

  Stop your JOINT-2 and traffic should now be passed through this network cable and your network connectivity must be maintained.

  Bring your JOINT-2 backup, and now spanning tree runs and will choose the JOINT-2 or the network as the main way and the other cable will set in a State of block.

  Run ' show vlan spanning-tree 10 ' and ' show vlan spanning tree 20 "to determine if the cable ports or port JOINT-2 is in a BLK State.»

  If the cable ports are in a State BLK, then you don't need to modify the spanning tree.

  If the JOINT-2 port is in a State BLK, then you need to change the spanning tree cost and/or priority for JOINT-2 port by using the following commands:

  -[No] port-channel channel_number-STP intrusion detection doesn't cost port_cost

  Defines the cost of port tree covering for the data port on the specified module. Without the option restore shipping tree covering for the data port on the module specified in the default value.

  -[not] port-channel channel_number spanning tree priority priority intrusion detection

  Sets the priority of the port spanning tree for the data port on the specified module. Without the option restores the priority of port spanning tree for the data port on the module specified in the default value.

  To learn more about spanning-tree and how these parameters interact with spanning tree you can look through this section of the user guide for the switch or to search cisco.com for documentation of spanning tree:

  http://www.Cisco.com/en/us/partner/docs/switches/LAN/catalyst6500/IOS/12.2Sx/configuration/guide/spantree.html

  NOTE: Your switch must be configured for rapid PVST for failover more rapid. Work with your administrator to switch to determine which spanning tree Protocol is used on your switch. The JOINT-2 does not work with STDS to ensure that STD is not used.

• CSPM-1 and/JOINT Support

  For customers who have purchased JOINT-1 and/CSPM 2.3.3i, seems to me like become unusable after Apr 2004 products, even if they upgrade to virtual computers.

  End of Support for signature:

  METHOD 3.0 (x) (April 2004)

  and

  CSPM 2.3.3i? (December 2003)

  Is this correct? If so, it seems that they must purchase a blade completely new and VMS 2.2 in order to to use.

  Thank you

  The f

  Correct,

  More older JOINT-1 users will have to migrate to a JOINT-2 or a device of IDS-42xx.

  There is a trade very very good strategy in place for customers to migrate towards a JOINT-2 JOINT-1.

  Please contact your Cisco sales representative to discuss an upgrade strategy and the associated costs.

  2.3.3i CSPM users should migrate to IDS MC and security monitor (2 pieces of VMS 2.2). If the user has purchased an older version of the VMS CSPM and updated with their software support contracts then they should be able to migrate to IDS MC and SecMon no additional cost.

  (Moral of the story: keep up-to-date on your assistance contracts, this support contract, that's what gives you right to the latest versions, including updates of the signature.)

  If they don't keep up to date with support contracts or bought CSPM before he was part of the VMS should contact their Cisco representative to determine the cost of migration.

  JOINT-1 both CSPM rely on the old 3.x code base. New version 4.x code base is a new architecture and was built to meet the needs of growing IDS sensors. The JOINT-1 hardware cannot run the new 4.x software so users need to migrate to new JOINT-2 hardware to run the software 4.x.

  CSPM was built according to the methods of communication in the 3.x version of the software and can not handle sensor version 4.x, so the CSPM users must migrate virtual machines to communicate with sensors version 4.x.

• IDSM2 with FWSM with contexts

  Hiya,

  I'm not a security guy so keep things simple!

  If the deployment of a FWSM with multiple contexts, and you have installed a JOINT-2:

  The JOINT split into contexts to match the FWSM contexts

  If this isn't the case, it monitors the background traffic of basket and not matter or don't care about multiple contexts.

  Hello.. looking at your chart... I suggest to try and place the JOINT-2 while traffic is inspected after that firewall policy has been verified otherwise you might end up inspection of the traffic that will be blocked by the firewall in any way. You also need to create what is called limit VLAN so that your JOINT bridge traffic between the VLANS inline... Confused... ?

  It gets a little "blue" when you try to inspect inline on a module. For example let's say you have Contexte1 with Interfaces (outside) VLAN10 VLAN20 (inside). You must create an another VLAN30 (limit VLAN). You must then assign the devices ONLY (not the interface of the ASA) of VLAN20 VLAN30 to (only change the membership to a VLAN and not the regime of intellectual property). Then on one of the JOINT-2 detection of ports, you must create a pair of inline VLAN (he uses subinterfaces) what <->VLAN20 VLAN30 bridges. In this traffic to/from your interior devices way will be through the JOINT-2 before reaching its destination

  I suggest you create a test context, allocate 2 VLANS, create the pair of inline VLAN on JOINT-2 and test... Once you are happy, you can reproduce the same configuration for the contexts of production.

  Below a brief example what you need to do for each context

  probe # configure terminal

  Sensor (config) # interface service

  Sensor(config-int) # Physics - interface GigabitEthernet0/2

  Sensor(config-int-PHY) # admin - active state

  Sensor(config-int-PHY) # INT1 description

  Sensor(config-int-PHY) # subinterface of type inline-vlan-pair

  sous-interface Sensor(config-int-PHY-INL) # 1

  vlan1 Sensor(config-int-PHY-INL-Sub) # 52

  vlan2 Sensor(config-int-PHY-INL-Sub) # 53

  Sensor(config-int-PHY-INL-Sub) # description pairs VLAN 52 and 53

  view the settings of Sensor(config-int-PHY-INL-Sub) #.

  subinterface-number: 1

  -----------------------------------------------

  Description: Default VLANpair1:

  VLAN1: 52

  VLAN2: 53

  -----------------------------------------------

  output Sensor(config-int-PHY-INL-Sub) #.

  output Sensor(config-int-PHY-INL) #.

  output Sensor(config-int-PHY) #.

  output Sensor(config-int) #.

  Apply changes:? [Yes]:

  I hope that helps... Rate if he does!

• port management and control for nm-cids

  Any body can help me to find the difference between the ip address we use to ID-sensore 1/0 interface and ip address of the sensor and its default gateway

  10.10.10.2/24,10.10.10.1

  JOINT-2 information.

  There are 8 interfaces of interest when it comes to the JOINT-2.

  4 If the interfaces belong to the JOINT-2 itself.

  4 other interfaces are the switch ports connected to these 4 JOINT-2 interfaces.

  The management of the JOINT-2 interface is ' GigabitEthernet0/2 '.

  When you assign an IP to the JOINT-2 is the interface where the IP address is assigned.

  On the backplane of the switch it will connect to a corresponding switch port.

  In the BONE of cat is "/ 2", and in the IOS is the "management-port intrusion detection module.

  These switch ports must be assigned to what ever vlan door network address assigned to the interface JOINT-2 s Gig0/2.

  The ' GigabitEthernet0/7 and GigabitEthernet0/8' JOINT-2 are the JOINT-2 control interfaces and must be assigned to the AnalysisEngine for surveillance.

  On the backplane of the switch they will connect to 2 corresponding switch ports.

  In the BONE of cat, they are "/ 7" and "/ 8", in IOS, they are "detection module of intrusion-modem 1" and "data-port 2". ""

  You will need to set these ports as capture ports if follow on promiscuity, OR vlan unique ports (access-ports) if making pair interface online monitoring or ports of junction If inline vlan pair followed to do.

  "GigabitEthernet0/1" of the JOINT-2 is not configurable on JOINT-2 and is used only for sending TCP resets in promiscuous mode.

  On the backplane of the switch it will connect to a corresponding switch port.

  In the BONE of cat is "/ 1 ' and should be left a trunk port routing all the VLANS. In IOS this port is not considered in the configuration that the user never needs to change the configuration of this port.

  There are also 3 to 6 ports that are visible in the BONE of cat. But none of these 4 ports are connected to anything on the JOINT-2 module itself and can be ignored safely. These ports are not at all in IOS.

• JOINT-2 licenses

  I inherited a few JOINT-2 modules for our 6500 switches. These have been hanging around for a while and I just need some clarification on how the modules are allowed.

  When you buy these modules they come with a basic license already as the Firewall Services Module. Or are you save with their serial number until you can use them?

  I ask because we are trying to deploy them and told me that they cannot be activated without a license key.

  Pointers would be much appreciated

  Jon

  You can set up the JOINT-2 and start using it without a license. the only thing you won't get updated signature without registration.

  As you say GET register with Cisco JOINT using the serial number and start downloading the update of the signature.

• JOINT-2 basic configuration

  Hello

  I have some experience with sensors but this is my first time setting up a C6500 with JOINT-2, and I have a few questions of design. The first question is this: can I mix the VACL and large-scale use to capture traffic in the same configuration?

  Customer actually uses VACL to capture traffic of some machines, but he wants now to monitor all traffic from and external partner via a VPN concentrator, so I guess in this case I should use SPAN to monitor VPN port: I'm wrong?

  The config that the customer is more or less the following:

  detection of intrusion data 1-port module 1 module 1-port data 1 intrusion detection capture captures allowed - vlan 1 intrusion detection module 1 data port 2 capture allowed - vlan 1

  Plan ID to access VLAN 10

  corresponds to the ip address in

  direct capture of action

  Plan ID to access VLAN 20

  corresponds to the ip address to

  action forward

  VLAN ID vlan-list filter 1

  extended IP access list

  IP enable any host 192.168.1.1

  allow a host ip 192.168.1.1

  ...

  extended IP access list

  allow an ip

  If I want to use SCOPE, which is the limitation of the number of source ports I can put in the order to "monitor the session?"

  Should I send this "span" traffic detection interface 8 (data-port 2) or I can always send to the data port 1 (detection interface 7)?

  Why there are two sensing interfaces?

  Thanks in advance...

  Ruben

  First thing to understand is that the customer should not configure data 1 and data-port port 2 to see the same traffic.

  The sensor will get duplicate packets and minimize the overall performance of the detector (spending cpu just to throw duplicates) and at worst could cause false positive and negative or even false.

  So the first thing to do is to remove the capture set up configuration data-port 2, so only 1 data port is the packet capture.

  Now that the data port 2 is released until you can configure data ports 2 for something else.

  So if you want to use the span then Yes you can now configure data-port 2 as a destination span port

  Can mix you VACL and Span configurations?

  Yes, but not on the same data port. A data port can be a vacl capture port and the second data port a destination span port.

  However, you want to try to avoid as much as possible of the duplicate packets. So you will want to try and set it up so that traffic will be normally visible on the destination span port will not also view the vacl capture port (means generally change the VACL to not only capture the traffic).

  If you use Span to monitor VPN port?

  Duration is usually the best way to ensure you get all the packages in and out of a specific port. You will need to make sure that you use a port range (instead of a span of vlan) and make sure cover you the tx and rx traffic so that you get both in and out of traffic.

  Also make sure that the traffic that you are covering the traffic not encrypted and non encrypted traffic (which would be ignored by the sensor).

  What is the limitation on the number of source ports?

  I don't know, and I think he can differ depending on your version of IOS and the type of controller. So you must read the configuration for your cat guide 6K determine the limits of your specific switch.

  Should send you traffic to "merged" to 2 ports data or data port 1?

  A data port may not be as well a VACL Capture pore and a destination Span port. So if data-port 1 is configured for the VACL Capture then it cannot be a Span destination port. Configure a port as a VACL Capture port and the port other than the destination Span port.

  Why are there 2 remote sensing interfaces?

  To do similar things to what you ask. So, you can use 2 different surveillance techniques that would not be on a single port. Or to be able to make promiscuity on a port monitoring, while inline vlan pair monitoring IDE oucederomsurlesecondport. Or use 2 ports set inline interface pair followed.

• question on the EMI and CSM

  Hello

  I installed IME to a server to manage the network IPS of 6500 package, and I would like to install on the same MCS server to manage the same Catalyst 6500 FWSM. I have several questions:

  -Can I have installed and running in the server IME and CSM sane?

  -CSM contain the same features EMI and much more?, I mean, that's enough with the CSM to manage FWSM and IDS-2 network of 6500 modules?

  -Do the MSC provides a better view of the FWSM newspapers than other applications? Which is the best tool to view the logs of the FWSM, I want to say is a tool like view newspaper checkpoint for FWSM?

  -My client has 2 Catalyst 6500 and 1 installed in each 6500 FWSM, two FWSM mode active/pasive redundancy, I consume 1 or 2 licenses of CSM?

  Thank you

  Kind regards

  Juan Luis.

  Hi Juan,

  - Can I have installed and running in the sane server IME and CSM?

  Yes.

  - Does CSM contain the same functionality of IME and more?, I mean, it is enough with CSM to manage FWSM and IDS-2 network modules of 6500?

  EMI offers various functions such as archiving and image management and implementation at level automatically and taking automatic backups, etc.

  - Does CSM provide a better view of FWSM logs than other applications?. Which is the better tool to view the logs of FWSM, I mean is there a tool like checkpoint log view for FWSM?

  CSM 4.0 is a tool that allows to display, filter, grep etc syslogs of all firewalls and IDSes.

  - My customer has 2 catalyst 6500 and 1 FWSM installed in each 6500, both FWSM running in redundancy active/pasive mode, do I consume 1 or 2 licences of CSM?

  CSM will be manage and watch one active unit only. The day before will just be a copy of the asset. So 1 license for CSM.

  I hope it answers your questions.

  PK

• Failover FWSM problem

  Hello world

  I have a question on the FWSM failover.

  I understand that I can configure? polling frequency? to detect the loss of accessibility between FWSM Active and standby FWSM and not configure? number of polling stations in attempts? This Eve FWSM recognize active FWSM fails.

  I changed? mark for 3 (minimum value) to confirm what time is necessary (elapsed) to get back successfully done.

  The result of my survey, about 30 seconds (elapsed) to take necessary supported successfully completed.

  So I think that 30 seconds is the minimum (best) time to take care that it was completed successfully, because I can change? polling frequency? not only,? number of retries?

  My understanding is correct?

  Or y at - it no parameters to speed up takes less than 30 seconds?

  Your information would be greatly appreciated.

  Best regards

  Hello

  How fast FWSM can start checking the failover process?

  Primary (config) # polltime failover [Unit] [MS] number [holdtime seconds]

  -> Unit number [MS] polltime - how fast you want the gof mark/recording of the State of the interface before the failover control process has begun.

  The amount of time between hello messages. That set the time in seconds between 1 (faster) and 15. The default value is 1 second. If you specify msec, you can set the time between 500 and 999 milliseconds.

  -> holdtime number - sets the time during which a unit must receive a message hello on the failover link, otherwise the supply unit begins the process of test for non-peers. Set the time in seconds between 15 and 45. The default value is the higher of 15 seconds or 3 times the polltime. You cannot enter a value that is less than 3 times the polltime. That means that the lowest or faster time keeping is 15 sec.

  time = 15 sec

  It is a verification of the standard during failover process to verify, before the new blade is elected active FWSM:

  1. link up/down test? A test of the VLAN State. If the link up/down test indicates the VLAN is operational, then the FWSM performs network tests. The purpose of these tests is to generate network traffic to determine which (if there are two) unit has failed. At the beginning of each test, each unit clears the number of packets received for its interfaces. At the end of each event, each unit looking to see if she has received any traffic. If so, the interface is considered operational. If a unit receives traffic for a test and the other device does not work, the unit that received no traffic is considered as impossible. If no unit has received traffic, the next test is used.

  2. test of network activity? A received network activity test. The unit counts all packets received for 5 seconds. If all the packets are received at any time during this interval, the interface is considered operational and analysis stops. If no traffic is received, at the beginning of the ARP test.

  * time = 5 seconds

  3. ARP test? A reading of the unit of ARP cache for 2 more recently acquired entries. One at a time, the unit sends ARP request to these machines, to try to stimulate the network traffic. After each request, the unit of account all traffic received for 5 seconds. If the traffic is received, the interface is considered operational. If no traffic is received, an ARP request is sent to the next machine. If at the end of the list, no traffic is received, the ping test begins.

  * time = 5 seconds

  4 spread the Ping test? A ping test which is to send a broadcast ping request. The unit has so all packets received for 5 seconds. If all the packets are received at any time during this interval, the interface is considered operational and analysis stops.

  * time = 5 seconds

  * estimated control failover time = 15 sec

  Total = 30secsonds.

  http://www.Cisco.com/en/us/products/hw/switches/ps708/products_module_configuration_guide_chapter09186a00802010c0.html#wp1109055

  Rgds,

  AK

• HP Officejet Pro 8500 a: open but still full of ink cartridges

  My HP Office Jet 8500 has just stop working. Even by replacing all black cartridges and color and the instructions given to me. I decided NOT to invest in new faces of printer and just bought a new printer. Is it possible to recycle or give them even if they are full?

  Welcome to the community of HP @JAFJ,

  I understand that you are looking to recycle your full ink cartridges. I am happy to help.i

  Below, I've posted a link of product return and recycling HP site. This site can help guide you if the recycling of ink cartridges.

  Product return HP and recycling

  Moreover, as the cartridges are not open (in the joint plastic), and in the guarantee, you can contact HP to see about phone support exchanging the cartridges.

  Contact HP:

• VSS of LabVIEW integration issue

  Hello

  I'm trying to simulate jointly VSS and Labview by running a simple example of the AWRDE example file. I get the error message that I need license of integration (see the attached screenshot) in order to use the LabVIEW block in VSS. I'm under LabVIEW 2013 Professional Edition and have the next version of AWR:

  10.02R build 5983 Rev (78833). I have Windows 7 on my computer.

  Can someone please tell me what is license integration and how to get it. We have the license for LabVIEW, as well as software AWRDE. Thank you.

  Kind regards

  Kathar

  Hi, Kathar, the best way to fix this is to upgrade to AWRDE v11.01 (available from the download link at www.awrcorp.com).

• Why the installer doesn't work?

  Hello

  I made a program that works correctly. I want to use it in another computer, without installing labview program. result, I used a Setup program, but when I do a Setup program, it does not at all. in fact, once running my Installer exe file, I can't find anything in the computer, click on and see the program. Can you help me?

  I enclose my approach to an installer.

  Best Regads

  behzad1 wrote:

  you want to use application (exe) as a joint photo, and I add the files from the installer I do them in the previous step?

  Yes, you must first build an application, and then an application installer.