With regard to access to the URL parameters of the form oracle on the duration

Similar Questions

• Installation of VM with VPN client access to the network local provents

  What is the best approach for the connection to the VPN in the following scenario?

  We want to install VM for our projects as VPN client networking (using the cisco vpn client). In many cases the VPN profile that is configured by the client is configured to prevent access to the local network, but rather the tunnels all through the VPN.

  I tried the NAT and Bridged networks and once you connect to the VPN client, the conectitivy of the virtual machine is limited to the VMWare console. SSH and other connections no longer work.

  Thanks for any idea.

  I'd VNC - that's what I use for a VM XP that uses the client VPN SecuRemote CheckPoint blocking the same way (wisely) off incoming traffic when the connection is made to the other end of the VPN.

  Just paste lines similar to the following in your .vmx file when the virtual machine is shut down:

  RemoteDisplay.vnc.enabled = TRUE
  RemoteDisplay.vnc.port = '5910 '.
  RemoteDisplay.vnc.password = 'somepassword '.
  RemoteDisplay.vnc.keymap = 'uk '.

  Note that you point your VNC client software on the IP address (and port of your .vmx file) to your server 2.0, not the virtual machine host. Use a different port for each computer virtual you need simultaneous to access.

• Remote VPN with PIX without access to the local network

  Hi @all,

  I ve running into problems and I have not found any solution. Can someone check my config?

  Facts:

  PIX 501 6.3 (3)

  4.04 VPN client

  Wanted solution: access to HO via VPN

  VPN tunnel will be established, I get an IP address, but I can´t the systems behind the pix and the pix of access itself.

  To the VPN Client Staticts, I see outgoing packets, but no entrant (if I send a ping to peer behind the pix)

  I hope someone can help me

  Attached is my config:

  PIX 501 and 506/506e pix are not supported in v7 due to the fact that the cpu is not able to deal with the extended features of v7.

  PIX 520 is not supported I guess it's because of the fact that the model is discontinued.

• With regard to Apex configuring the listener using Weblogic Server.

  Dear all,

  Well, I have configured my interlocutor Apex in my Web server and everything worked fine. But my requirement is like I need for my URL should like this format http://hostname/ReportServer: port/dev/apex but by default, as we know it comes as http://hostname/ReportServer: port/apex/dev (as I gave the url mapping path/dev). So I tried by changing its name as DEV while deploying the APEX. File. WAR and I gave the root context than dev. Now question is even if configuration directory given i like "dev" but still its showing as 'Listener not configured'. Pls someone help me in this. Help is very appreciated.

  My configuration file is "/home/oracle/apex_listener.2.0.3.221.10.13/dev"

  But even once apex named subdirectory is created inside this dev automatically.

  In regards to this link, I had an idea but its incomplete since his unanswered, so I'm bit confused too.

  https://community.Oracle.com/thread/2134379

  I thought to change httpd.conf file and give redirect URL but I'm not sure that can we redirect modulewise as separate 'apex' named subdirectory is created in "dev" then configuration gets effect as how it will work and mod_rewrite option I have seen but can't understand as including one to pick up. Please suggest...

  My Version of the apex is 4.2.3

  Apex listener Version is 2.0.3

  As appropriate, any other information please ask me.

  Kind regards

  Nitesh Perron.

  Dear all,

  Finally I found the solution for this.  I put here so that it can be useful to others who may face difficulties like me,.

  Floorconstruction:

  After changing the root of context just start your deployed war file and test it.

  While reaching the URL,

  Web page showing "listener apex not configured" and it will show you the location of the configuration on the Web page itself.

  Then you simply copy all directories and subdirectories (that were created when you set up your database using the file. War) at the location that shown on the Web page.

  As we change the root context so a named directory context root allows to create inside the path configured, if web is unable to find configurations because it happens inside the different directory so just copy everything and try. It worked for me very smoothly.

  My position was ' /home/oracle/apex_listener.2.0.3.221.10.13/apex"(before changing the context root in weblogic server).

  Then after the change and start the deployment once again, it became ' /home/oracle/apex_listener.2.0.3.221.10.13/dev', since I gave my root of context like "dev."

  So here I just copied directory "apex" on the dev directory and it worked fine and I got my desired URL as http://localhost:port/dev/apexhttp://localhostport .

  And all applications also works very well.

  Still, I felt its not correct way to view security, but this is the solution I found and I will try apache to redirect my URL.

  Thank you

  Kind regards

  Nitesh Perron.

• With regard to execution of the signature ID files - 5500 - IE.asp

  Hello

  Can someone help me understand the vulnerability resides in the signature. What I realized is that fires when running on the .asp file browser.

  Will we filter these alarm by tweaking the IPS signature. Or it will create questions in the future?

  Also, please share any doc or site where I can read and understand about the signing of the IPS.

  Hello

  Just wondering if I have responded to this request. If so, please mark this as asnwered.

  Thank you and best regards,

  Assia

• With regard to execution of the quarter report

  Hello
  
  I need to put a filter on the report so that the report runs for the quarter. If I run the report today it must run for the quarter ended.
  
  Please help me.

  As I said, this SQL will give you the first day of the quarter. You must have another SQL statement that gives you the last day of the previous quarter. Once you have the dates, you can build a "between the filter" on your date to get all the dates in the term field.

  PS I don't mind followed by questions, but please recognize that you already have with 'useful' or 'proper' points, in this case "correct." Thank you.

• Access to the administration via VPN to 887 after config setup pro

  Hi all

  Ive just made a three 887w for a client in a few branches, and as this is the first time I have deployed these devices, I decided to go with the GUI (downloaded config pro 2.3) to get the configuration made that I had some constraints of time to get them in place (sometimes I go with the graphical interface first and then look back at the CLI to see what as its been) (, then hand it in Notepad to get a better understanding of the new features of the CLI may be gone and allowed).

  One thing I again, that I was going to do face was my first experience of the firewall IOS area type of config...

  At this point, I'm still unclear on the config (where why Im posting here I guess!) - but the main problem I have at the moment is with managing access to devices.

  Particularly with regard to access to the administration of headquarters inside the IP address of the branch routers.

  I should mention that the branch routers are connected to Headquarters by connections IPSec site-to-site VPN and these connections are all very good, all connectivity (PC server, PC, printer, etc.) is very well... I can also send packets (using the inside of the interface as a source) ping from branch routers to servers on the headquarters LAN.

  Set up access to administration using config pro to allow access to the router on the subnet headquarters (on its inside interface), as well as the local subnet and also SSH access to a specific host from the internet - the local subnet and the only host on the internet can access the router very well.

  I'm not sure if the problem is with the ZBF config or if its something really obvious Im missing! -Ive done routers branch several times previously, so with this being the first config ZBF I did, so I came to the conclusion that there must be something in the absence of my understanding.

  Any help greatly appreciated... sanitized config below!

  Thanks in advance

  Paul

  version 15.1
  no service button
  tcp KeepAlive-component snap-in service
  a tcp-KeepAlive-quick service
  horodateurs service debug datetime localtime show-timezone msec
  Log service timestamps datetime localtime show-timezone msec
  encryption password service
  sequence numbers service
  !
  hostname name-model
  !
  boot-start-marker
  boot-end-marker
  !
  logging buffered 51200
  recording console critical
  enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxx
  !
  No aaa new-model
  !
  iomem 10 memory size
  clock timezone PCTime 0
  PCTime of summer time clock day March 30, 2003 01:00 October 26, 2003 02:00
  Service-module wlan-ap 0 autonomous bootimage
  !
  Crypto pki trustpoint TP-self-signed-2874941309
  enrollment selfsigned
  name of the object cn = IOS - Self - signed - certificate - 2874941309
  revocation checking no
  rsakeypair TP-self-signed-2874941309
  !
  !
  TP-self-signed-2874941309 crypto pki certificate chain
  certificate self-signed 01
  

  no ip source route
  !
  !
  DHCP excluded-address IP 10.0.0.1 10.0.0.63
  DHCP excluded-address IP 10.0.0.193 10.0.0.254
  !
  DHCP IP CCP-pool
  import all
  Network 10.0.0.0 255.255.255.0
  default router 10.0.0.1
  xxxxxxxxx.com domain name
  Server DNS 192.168.xx.20 194.74.xx.68
  Rental 2 0
  !
  !
  IP cef
  no ip bootp Server
  IP domain name xxxxxxx.com
  name of the server IP 192.168.XX.20
  name of the server IP 194.74.XX.68
  No ipv6 cef
  !
  !
  Authenticated MultiLink bundle-name Panel

  parameter-card type urlfpolicy websense cpwebpara0
  Server 192.168.xx.25
  source-interface Vlan1
  allow mode on
  parameter-card type urlf-glob cpaddbnwlocparapermit0
  model citrix.xxxxxxxxxxxx.com

  license udi pid xxxxxxxxxxx sn CISCO887MW-GN-E-K9
  !
  !
  username xxxxxxx privilege 15 secret 5 xxxxxxxxxxxxxxxxxxxxx
  username privilege 15 secret 5 xxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxx
  !
  !
  !
  !
  synwait-time of tcp IP 10
  !
  type of class-card inspect correspondence sdm-cls-VPNOutsideToInside-1
  game group-access 106
  type of class-card inspect entire game SDM_SHELL
  match the name of group-access SDM_SHELL
  type of class-card inspect entire game SDM_SSH
  match the name of group-access SDM_SSH
  type of class-card inspect entire game SDM_HTTPS
  match the name of group-access SDM_HTTPS
  type of class-card inspect all match sdm-mgmt-cls-0
  corresponds to the SDM_SHELL class-map
  corresponds to the SDM_SSH class-map
  corresponds to the SDM_HTTPS class-map
  type of class-card inspect entire game SDM_AH
  match the name of group-access SDM_AH
  type of class-card inspect entire game SDM_ESP
  match the name of group-access SDM_ESP
  type of class-card inspect entire game SDM_VPN_TRAFFIC
  match Protocol isakmp
  match Protocol ipsec-msft
  corresponds to the SDM_AH class-map
  corresponds to the SDM_ESP class-map
  type of class-card inspect the correspondence SDM_VPN_PT
  game group-access 105
  corresponds to the SDM_VPN_TRAFFIC class-map
  type of class-card inspect entire game PAC-cls-insp-traffic
  match Protocol cuseeme
  dns protocol game
  ftp protocol game
  h323 Protocol game
  https protocol game
  match icmp Protocol
  match the imap Protocol
  pop3 Protocol game
  netshow Protocol game
  Protocol shell game
  match Protocol realmedia
  match rtsp Protocol
  smtp Protocol game
  sql-net Protocol game
  streamworks Protocol game
  tftp Protocol game
  vdolive Protocol game
  tcp protocol match
  udp Protocol game
  inspect the class-map match PAC-insp-traffic type
  corresponds to the class-map PAC-cls-insp-traffic
  type of class-map urlfilter match - all cpaddbnwlocclasspermit0
  Server-domain urlf-glob cpaddbnwlocparapermit0 match
  type of class-card inspect entire game PAC-cls-icmp-access
  match icmp Protocol
  tcp protocol match
  udp Protocol game
  class-map type urlfilter websense match - all cpwebclass0
  match any response from the server
  type of class-card inspect correspondence ccp-invalid-src
  game group-access 100
  type of class-card inspect correspondence ccp-icmp-access
  corresponds to the class-ccp-cls-icmp-access card
  type of class-card inspect sdm-mgmt-cls-ccp-permit-0 correspondence
  corresponds to the class-map sdm-mgmt-cls-0
  game group-access 103
  type of class-card inspect correspondence ccp-Protocol-http
  http protocol game
  !
  !
  type of policy-card inspect PCB-permits-icmpreply
  class type inspect PCB-icmp-access
  inspect
  class class by default
  Pass
  type of policy-card inspect sdm-pol-VPNOutsideToInside-1
  class type inspect sdm-cls-VPNOutsideToInside-1
  inspect
  class class by default
  drop
  type of policy-card inspect urlfilter cppolicymap-1
  urlfpolicy websense cpwebpara0 type parameter
  class type urlfilter cpaddbnwlocclasspermit0
  allow
  Journal
  class type urlfilter websense cpwebclass0
  Server-specified-action
  Journal
  type of policy-map inspect PCB - inspect
  class type inspect PCB-invalid-src
  Drop newspaper
  class type inspect PCB-Protocol-http
  inspect
  service-policy urlfilter cppolicymap-1
  class type inspect PCB-insp-traffic
  inspect
  class class by default
  drop
  type of policy-card inspect PCB-enabled
  class type inspect SDM_VPN_PT
  Pass
  class type inspect sdm-mgmt-cls-ccp-permit-0
  inspect
  class class by default
  drop
  !
  security of the area outside the area
  safety zone-to-zone
  zone-pair security PAC-zp-self-out source destination outside zone auto
  type of service-strategy inspect PCB-permits-icmpreply
  zone-pair security PAC-zp-in-out source in the area of destination outside the area
  type of service-strategy inspect PCB - inspect
  source of PAC-zp-out-auto security area outside zone destination auto pair
  type of service-strategy inspect PCB-enabled
  sdm-zp-VPNOutsideToInside-1 zone-pair security source outside the area of destination in the area
  type of service-strategy inspect sdm-pol-VPNOutsideToInside-1
  !
  !
  crypto ISAKMP policy 1
  BA 3des
  preshared authentication
  Group 2
  ISAKMP crypto key address 194.105.xxx.xxx xxxxxxxxxxxx
  !
  !
  Crypto ipsec transform-set esp-SHA-ESP-3DES-3des esp-sha-hmac
  !
  map SDM_CMAP_1 1 ipsec-isakmp crypto
  Description Tunnel to194.105.xxx.xxx
  the value of 194.105.xxx.xxx peer
  game of transformation-ESP-3DES-SHA
  match address VPN - ACL
  !
  !
  !
  !
  !
  interface BRI0
  no ip address
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  penetration of the IP stream
  encapsulation hdlc
  Shutdown
  Multidrop ISDN endpoint
  !
  ATM0 interface
  no ip address
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  penetration of the IP stream
  No atm ilmi-keepalive
  !
  point-to-point interface ATM0.1
  Description $ES_WAN$
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  penetration of the IP stream
  PVC 0/38
  aal5mux encapsulation ppp Dialer
  Dialer pool-member 1
  !
  !
  interface FastEthernet0
  !
  interface FastEthernet1
  !
  interface FastEthernet2
  !
  interface FastEthernet3
  !
  wlan-ap0 interface
  description of the Service interface module to manage the embedded AP
  IP unnumbered Vlan1
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  penetration of the IP stream
  ARP timeout 0
  !
  interface GigabitEthernet0 Wlan
  Description interface connecting to the AP the switch embedded internal
  !
  interface Vlan1
  Description $ETH - SW - LAUNCH, INTF-INFO-HWIC $$ $4ESW $FW_INSIDE$
  the IP 10.0.0.1 255.255.255.0
  IP access-group 104 to
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  penetration of the IP stream
  IP nat inside
  IP virtual-reassembly
  Security members in the box area
  IP tcp adjust-mss 1452
  !
  interface Dialer0
  Description $FW_OUTSIDE$
  IP address 81.142.xxx.xxx 255.255.xxx.xxx
  IP access-group 101 in
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  penetration of the IP stream
  NAT outside IP
  IP virtual-reassembly
  outside the area of security of Member's area
  encapsulation ppp
  Dialer pool 1
  Dialer-Group 1
  Authentication callin PPP chap Protocol
  PPP chap hostname xxxxxxxxxxxxxxxx
  PPP chap password 7 xxxxxxxxxxxxxxxxx
  No cdp enable
  map SDM_CMAP_1 crypto
  !
  IP forward-Protocol ND
  IP http server
  23 class IP http access
  local IP http authentication
  IP http secure server
  IP http timeout policy slowed down 60 life 86400 request 10000
  !
  !
  IP nat inside source overload map route SDM_RMAP_1 interface Dialer0
  IP route 0.0.0.0 0.0.0.0 Dialer0
  !
  SDM_AH extended IP access list
  Note the category CCP_ACL = 1
  allow a whole ahp
  SDM_ESP extended IP access list
  Note the category CCP_ACL = 1
  allow an esp
  SDM_HTTP extended IP access list
  Note the category CCP_ACL = 0
  permit tcp any any eq www
  SDM_HTTPS extended IP access list
  Note the category CCP_ACL = 0
  permit any any eq 443 tcp
  SDM_SHELL extended IP access list
  Note the category CCP_ACL = 0
  permit tcp any any eq cmd
  SDM_SNMP extended IP access list
  Note the category CCP_ACL = 0
  allow udp any any eq snmp
  SDM_SSH extended IP access list
  Note the category CCP_ACL = 0
  permit tcp any any eq 22
  SDM_TELNET extended IP access list
  Note the category CCP_ACL = 0
  permit tcp any any eq telnet
  scope of access to IP-VPN-ACL list
  Note ACLs to identify a valuable traffic to bring up the VPN tunnel
  Note the category CCP_ACL = 4
  Licensing ip 10.0.0.0 0.0.0.255 192.168.xx.0 0.0.0.255
  Licensing ip 10.0.0.0 0.0.0.255 10.128.xx.0 0.0.255.255
  Licensing ip 10.0.0.0 0.0.0.255 160.69.xx.0 0.0.255.255
  !
  recording of debug trap
  Note category of access list 1 = 2 CCP_ACL
  access-list 1 permit 10.0.0.0 0.0.0.255
  access-list 23 allow 193.195.xxx.xxx
  Note access-list 23 category CCP_ACL = 17
  access-list 23 permit 192.168.xx.0 0.0.0.255
  access-list 23 allow 10.0.0.0 0.0.0.255
  Access-list 100 category CCP_ACL = 128 note
  access-list 100 permit ip 255.255.255.255 host everything
  access-list 100 permit ip 127.0.0.0 0.255.255.255 everything
  access-list 100 permit ip 81.142.xxx.xxx 0.0.0.7 everything
  Access-list 101 remark self-generated by SDM management access feature
  Note access-list 101 category CCP_ACL = 1
  access-list 101 permit tcp host 193.195.xxx.xxx host 81.142.xxx.xxx eq 22
  access-list 101 permit tcp host 193.195.xxx.xxx host 81.142.xxx.xxx eq 443
  access-list 101 permit tcp host 193.195.xxx.xxx host 81.142.xxx.xxx eq cmd
  access-list 101 tcp refuse any host 81.142.xxx.xxx eq telnet
  access-list 101 tcp refuse any host 81.142.xxx.xxx eq 22
  access-list 101 tcp refuse any host 81.142.xxx.xxx eq www
  access-list 101 tcp refuse any host 81.142.xxx.xxx eq 443
  access-list 101 tcp refuse any host 81.142.xxx.xxx eq cmd
  access-list 101 deny udp any host 81.142.xxx.xxx eq snmp
  access-list 101 permit ip 160.69.0.0 0.0.255.255 10.0.0.0 0.0.0.255
  access-list 101 permit ip 10.128.0.0 0.0.255.255 10.0.0.0 0.0.0.255
  access-list 101 permit ip 192.168.xx.0 0.0.0.255 10.0.0.0 0.0.0.255
  access-list 101 permit udp host 194.105.xxx.xxx host 81.142.xxx.xxx eq non500-isakmp
  access-list 101 permit udp host 194.105.xxx.xxx host 81.142.xxx.xxx eq isakmp
  access-list 101 permit host 194.105.xxx.xxx host 81.142.xxx.xxx esp
  access-list 101 permit ahp host 194.105.xxx.xxx host 81.142.xxx.xxx
  access list 101 ip allow a whole
  Note access-list 102 CCP_ACL category = 1
  access-list 102 permit ip 192.168.xx.0 0.0.0.255 everything
  access-list 102 permit ip host 193.195.xxx.xxx all
  access-list 102 permit ip 10.0.0.0 0.0.0.255 any
  Note access-list 103 self-generated by SDM management access feature
  Note access-list 103 CCP_ACL category = 1
  access-list 103 allow ip host 193.195.xxx.xxx host 81.142.xxx.xxx
  Note access-list 104 self-generated by SDM management access feature
  Note access-list 104 CCP_ACL category = 1
  access-list 104 permit tcp 192.168.xx.0 0.0.0.255 host 10.0.0.1 eq telnet
  access-list 104 permit tcp 10.0.0.0 0.0.0.255 host 10.0.0.1 eq telnet
  access-list 104 permit tcp 192.168.xx.0 0.0.0.255 eq on host 10.0.0.1 22
  access-list 104 permit tcp 10.0.0.0 0.0.0.255 host 10.0.0.1 eq 22
  access-list 104 permit tcp 192.168.xx.0 0.0.0.255 host 10.0.0.1 eq www
  access-list 104 permit tcp 10.0.0.0 0.0.0.255 eq to host 10.0.0.1 www
  access-list 104 permit tcp 192.168.xx.0 0.0.0.255 host 10.0.0.1 eq 443
  access-list 104 permit tcp 10.0.0.0 0.0.0.255 host 10.0.0.1 eq 443
  access-list 104 permit tcp 192.168.xx.0 0.0.0.255 host 10.0.0.1 eq cmd
  access-list 104 permit tcp 10.0.0.0 0.0.0.255 host 10.0.0.1 eq cmd
  access-list 104 tcp refuse any host 10.0.0.1 eq telnet
  access-list 104 tcp refuse any host 10.0.0.1 eq 22
  access-list 104 tcp refuse any host 10.0.0.1 eq www
  access-list 104 tcp refuse any host 10.0.0.1 eq 443
  access-list 104 tcp refuse any host 10.0.0.1 eq cmd
  access-list 104 deny udp any host 10.0.0.1 eq snmp
  104 ip access list allow a whole
  Note access-list 105 CCP_ACL category = 128
  access-list 105 permit ip host 194.105.xxx.xxx all
  Note access-list 106 CCP_ACL category = 0
  access-list 106 allow ip 192.168.xx.0 0.0.0.255 10.0.0.0 0.0.0.255
  access-list 106 allow ip 10.128.0.0 0.0.255.255 10.0.0.0 0.0.0.255
  access-list 106 allow ip 160.69.0.0 0.0.255.255 10.0.0.0 0.0.0.255
  Note category from the list of access-107 = 2 CCP_ACL
  access-list 107 deny ip 10.0.0.0 0.0.0.255 160.69.0.0 0.0.255.255
  access-list 107 deny ip 10.0.0.0 0.0.0.255 10.128.0.0 0.0.255.255
  access-list 107 deny ip 10.0.0.0 0.0.0.255 192.168.xx.0 0.0.0.255
  access-list 107 allow ip 10.0.0.0 0.0.0.255 any
  Dialer-list 1 ip protocol allow
  not run cdp

  !
  !
  !
  !
  allowed SDM_RMAP_1 1 route map
  corresponds to the IP 107
  !
  !
  control plan
  !
  !
  Line con 0
  local connection
  no activation of the modem
  line to 0
  line 2
  no activation-character
  No exec
  preferred no transport
  transport of entry all
  line vty 0 4
  access-class 102 in
  privilege level 15
  local connection
  transport input telnet ssh
  !
  Scheduler allocate 4000 1000
  Scheduler interval 500
  NTP-Calendar Update
  130.159.196.118 source Dialer0 preferred NTP server
  end

  Hi Paul,.

  Here is the relevant configuration:

  type of policy-card inspect PCB-enabled

  class type inspect sdm-mgmt-cls-ccp-permit-0
  inspect

  
  

  type of class-card inspect sdm-mgmt-cls-ccp-permit-0 correspondence
  corresponds to the class-map sdm-mgmt-cls-0
  game group-access 103

  
  

  type of class-card inspect all match sdm-mgmt-cls-0
  corresponds to the SDM_SHELL class-map
  corresponds to the SDM_SSH class-map
  corresponds to the SDM_HTTPS class-map

  
  

  type of class-card inspect entire game SDM_SHELL
  match the name of group-access SDM_SHELL
  type of class-card inspect entire game SDM_SSH
  match the name of group-access SDM_SSH
  type of class-card inspect entire game SDM_HTTPS
  match the name of group-access SDM_HTTPS

  
  

  SDM_SHELL extended IP access list
  Note the category CCP_ACL = 0
  permit tcp any any eq cmd
  SDM_SSH extended IP access list
  Note the category CCP_ACL = 0
  permit tcp any any eq 22
  SDM_HTTPS extended IP access list
  Note the category CCP_ACL = 0
  permit any any eq 443 tcp

  
  

  Note access-list 103 self-generated by SDM management access feature
  Note access-list 103 CCP_ACL category = 1
  access-list 103 allow ip host 193.195.xxx.xxx host 81.142.xxx.xxx

  The above configuration will allow you to access the router on the 81.142.xxx.xxx the IP address of the host 193.195.xxx.xxx using HTTPS/SSH/SHELL. To allow network 192.168.16.0/24 access to the router's IP 10.0.0.1, add another entry to the access list 103 as below:

  access-list 103 allow ip 192.168.16.0 0.0.0.255 host 10.0.0.1

  This should take enable access to this IP address for hosts using ssh and https. Try this out and let me know how it goes.

  Thank you and best regards,

  Assia

• BlackBerry smartphones anyone using VIP access with Paypal payment method in the world of BlackBerry?

  I'm in trouble. I suspect either BlackBerry World does not support two-factor authentication, or I'm doing something wrong. If you use with Paypal VIP access into the world of BlackBerry and to do with success, please tell me how you do it.

  Background...

  Today I received the error described at http://support.blackberry.com/kb/articleDetail?ArticleNumber=000036300

  I had created Paypal in BlackBerry World before I had activated two-factor authentication in Paypal, but I made purchases since then without problem, until today.

  I deleted Paypal but could not add it back.

  I found this old thread which shows the BlackBerry World does not have authentication to two factors, but this is an old thread and maybe things have changed.

  http://supportforums.BlackBerry.com/T5/downloaded-applications/problem-using-PayPal-in-app-world/TD-...

  I tried with just: password right and I tried with password and code added at the end of the password.

  Follow-up...

  Finally, it worked.

  Think about the possibility that BlackBerry World supports authentication two factor and that maybe I have do the procedure correctly, but maybe there is a temporary break in the system somewhere, I kept trying periodically.

  Finally, it worked. Even after moments before getting the same error, it finally worked.

  So, to confirm: If you configure paypal as method of payment in the world of BlackBerry, and you use two-factor authentication with paypal in conjunction with VIP access, enter your PayPal username and password and then add the authentication code on the end of your password.

  Suggestions if you get an error saying message try again later: wait a minute. Look for the code update and use this code immediately. Do not use a code that is subject to maturity; wait for a charge code and use it immediately. If you still get an error message, try again several times, with a charge code every time. If you still get an error message, wait a few moments and try again.

• Restrict access to the administration to WLC5500

  Hi all
  We have configured all our devices in WLC5500 with a service port interface, which helps us to management and monitoring. Given that in our situation, the management interface is accessible from enterprise networks, this means that desktop clients have the ability to achieve the WLC logon screens.

  Is the only way to restrict access to ports to place an on the management interface access ports, or am I missing a GUI/SSH secret command / button that will allow me to disable or limit the management of devices through the management interface?

  In which case I'll have to use an ACL on the WLC management interface, are there any known issues with denying them access to the ports http, https, telnet, ssh and LWAPs trying to connect?

  Thank you
  Leon

  You have hit it on the nose.  You must have an ACL that blocks the terminals "non-admin" to http/https/telnet/ssh/snmp on the device.  as long as you have the permit ip any at the end of the ACL, you should have no problems, or explicitly allow udp 5246/5247

• How to keep creative clouds working without access to the Internet?

  I'll be out of the country for two weeks with virtually no access to the internet. How can I make sure that creative cloud will continue to work if there is no way to confirm the activation?

  Hi there-

  As you may know, a license check is performed every 30 days:

  http://www.Adobe.com/products/creativecloud/FAQ.html

  Do I need a continuous Internet access to use my Creative Suite apps?

  Because your Creative Suite applications are installed directly on your computer, you will not have a continuous Internet connection to use on a daily basis. However, you need to be online when you install and license your software and at least once every 30 days thereafter. The software warns you when you connect to the Internet for a license status check.

  However, if the product can not check your permit at the 30-day mark, a period of 7 days will begin to give you a little extra time. If you are not able to access the internet within 7 days, your applications will be blocked (Source: http://forums.adobe.com/message/4513667#4513667)

  Unfortunately, there is no way to "force" the verification process to ensure that the audit is not right because you start your 2 weeks away.

  Here are a few forum threads that contain more discussion of this issue:

  http://forums.Adobe.com/message/4747308

  http://forums.Adobe.com/message/4746582

  Good luck

• With regard to the update system - restriction of access to records admin app

  Regarding the system update in this thread to update system - restricting access to folders app admin , I can not answer in this thread because I'm not a mod and there is no reply button.

  My question concerns the public record, what we do with it?

  S ' there is a placed file in it can it use liquid?

  - I assumed that the front-end server can access this directory, but (from the front end) we won't be able to use the new API v3?

  - Other applications access to the updated files? That is to say. He says in public, it is that? It is not safe at all in other words?

  -Is the case more as a temporary workspace or the (public) long-term storage? Can other apps delete files there? That is to say. I might need to make sure that a file exists before you assume it's there.

  Hello

  1. The files in the folder admin app can run modules and liquid (if you do not use another library of client-side library which is in conflict with the liquid syntax)
  2. Yes, front-end can access files on this folder (you cannot list the contents of the folder of front end) and you can access the REST API using module_data; direct access to the API is not possible, because you will need to be authenticated
  3. Yes, other applications can access the files put there, same as possible that nobody knows the URL of the page
  4. It is a public storage for long-term applications. Apps cannot delete files in other folders for apps, but they can read;

  Cristinel

• How to pass the time slot to the dashboard in URL parameters

  Hi all

  Does anyone have example on how to spend the time slot to the dashboard in URL parameters?

  That's what I tried. Normally, the dashboard has timeRange as a required context, I deleted and added "startTime" and "end" like required context, so that I can spend 2 timestamps in URL, and then I created a 'extra context' called "timeRange", which calls a WCF function to create a CustomTimeRange, it works pretty well. But the problem is if I have exploration down this dashboard to a different dashboard, the slot not transmitted properly. So I guess, I was not the right way. Does anyone have an example?

  Thank you

  Xiaoning

  1 re: timeRange not spent in drilldown pages

  Please confirm that you have defined one or more entries in context "Required". If you do not, please add a (like "hostName") and re - test. It work?

  2. with 'nologin' user URL redirects to the login screen

  Yes, what is expected. With nologin user, you should always use the form http://foglight_fms:80/console/foglight_ext?viewId=system:mywcfmodule.1?hostName=myhost of the URL rather than the

  form of http://foglight_fms:80/console/page/System:mywcfmodule.1?hostname=myhost .

  It would be great if you could post a brief description of your design dashboard once you have this work. That sounds like something that the other members of the Foglight community would be very interested!

  Kind regards

  Brian Wheeldon

• ID of Session apex and the Google URL parameters

  I think my question is maybe too obscure to get an answer... but I hope...

  I maintain a site that has links to resources for Oracle Certification tests (documentation, articles, videos, books, etc.):

  http://www.oraclecertificationprep.com/Apex/f?p=OCPSG:main

  The site is (obviously) use Application Express as a backend.  My problem is that even if I have the keys pages/tabs/configured to use the Session ID 0, somehow, not nonzero is creeping in session ID.  I really wouldn't worry except that Google ends up getting URL with zero session id indexed for the Googlebot to go.  The result is that Google gets errors of analysis which he maintains have reported to me.  I have delete - more pop up. I delete those, repetition...

  There is a feature in the page of Google Webmaster tools to set up "Parameters of URL" make Google to know what parts of a URL are temporary and should not be treated as a separate URL entry.  However, there are warnings if you configure the incorrect URL parameters, you will end up by excluding indexing course pages at all.

  So my question is (finally) if someone used Google Webmaster tools to set up the ID of session as parameters, and if so, how they went to do.

  Hello

  I'm not sure that you can configure ignore the id of session on tools for webmasters.

  Try to add the canonical link to your pages with zero session id.

  Official Google Webmaster Central blog: specify your canonical

  Or create application processes always redirect to zero session if the url session id is something else.

  Kind regards

  Jari

• Content Presenter: CMIS-based datasource request with URL parameters

  Hi all
  
  I am trying to create a page containing a content presenter taskflow is based on a query CMIS containing URL parameters. In the properties of my component, I defined the following query for my data source:
  
  + SELECT * from ora: t:IDC:GlobalProfile WHERE ora:p:xqblIntranetSubGroep =' ${param.qblSubGroep}'+.
  
  I have a qblSubGroep setting of URL containing the value 'Nieuws '.
  
  Somehow my page doesn't show any content. It seems that the value of the parameter is not passed to the data source query. When I change my request to
  
  SELECT * from ora: t:IDC:GlobalProfile WHERE the ora: p:xqblIntranetSubGroep = 'Nieuws '.
  
  so I hard-code the value of my URL parameter in my query, content expected items are shown.
  
  Also, I have another page with a content taskflow presenter for something unique, based on the data source:
  
  + ${' #dDocName WebCenterSpaces-CMU: ""} ${param.dDocName} +.
  
  In this case, parameter values to URL for dDocName are properly transferred, and the content presenter shows the document with dDocName entered in the URL.
  
  Does anyone have an idea on how to solve this probem?
  
  Kind regards
  
  Harold

  Use the following EMPS:

  ${"SELECT * from ora: t:IDC:GlobalProfile WHERE the ora: p:xqblIntranetSubGroep =-" "} ${param.qblSubGroep} ${" '------"}

• Access to the content protectred URIs on Solaris (sparcv9) with WLS 10.3.5 and Apache2

  I had begun to ask questions about it on another thread, but since I had listed this one as replied and which is different from the original question on this thread... I felt it is better to create its own thread.
  
  
  Description of the problem: Environment Details:
  -Server1 - 64-bit Intel RHEL5
  Fusion Middleware Identity Management - 11.1.1.2
  WLS 10.3.2
  DOHAD, OID, OVD
  DB 10.2.0.4
  
  -2 32-bit Intel RHEL5 Server
  OAM 10.1.4.3
  OHS 11.1.1.2
  
  -Server 3 64-bit SparcV9 Webhost - app deployed as protected uri
  WLS 10.3.5
  Apache2
  WebGate 10.1.4.3
  
  We believe that we have completed everything regarding the possibility of including a solaris host in our list of hosts associated with OAM. We have installed some hosters with XP and RHEL5.6 successfully using SST 11.1.1.2. It is the first time the creation of a Web host on Sparc. The webgate has been created and the software installed, the deployed app protected, etc... Everything that we did for Linux and XP in the past we did for this Sparc host. The only differences are the SUN OS, Apache2 and WLS 10.3.5. To me, that those are all acceptable for these Oracle products and versions.
  
  When we try to access the Sparc protected URI... nothing happens. The browser remains empty... the url does not change to display the login.html oamsso (as the other do installs)... nothing is returned... no errors, no comments... just a browser empty.
  
  Make an apachectl-l I get the following:
  
  Compiled in modules:
  Core.c
  prefork.c
  http_core.c
  mod_so.c
  
  Mod_so.c is included.
  
  If I go directly to the protected through 7001 instead of the 8890 - uri the httpd.conf of port is configured to listen on - the page is displayed. If I open the oamsso/login.html using 8890... It displays. But if I use 8890 to make appear the uri protected... as described above nothing displays.
  
  Another thing, since the Sparc host is "headless" - as described by our SysAdmin... not access directly via the console of Sun and no gui via the sun host access since there is no Sun console just the server - we need access to the graphical interface via a browser on the same network. The browser is actually on the OAM host.
  
  Of apache2 error_log on SUN host:
  
  Message 14:35:51Sending 15/07/2011: 13 0
  Protocol = NAP version = 3 older = 1
  Message 14:35:51Received 15/07/2011: 13 0
  Protocol = NAP version = 3 older = 1
  15/07/2011 negotiate message 14:35:51Sending NMP m: 0 0
  m = open
  15/07/2011 negotiate message 14:35:51Received NMP m: 0 0
  m = open
  Message 14:35:51Sending 15/07/2011: 14 0
  cm = challenge mtisunfireHost_AG = b516f1a00c2a95ee
  Message 14:35:51Received 15/07/2011: 14 0
  cm = access_svrid1 = 95520d6315ad3865 m = d challenge my 3% 25 rt = 1
  Message 14:35:51Sending 15/07/2011: 15 0
  response = 531be0a851cb2773c90aa0c91d9f779c
  Message 14:35:51Received 15/07/2011: 15 0
  response = 2b62c22a9458e962c35d8d7d358f4fc1 m = d my 3% 25 rt = 1
  Message 14:35:51Sending 15/07/2011: 0 8
  cm = ct = 0 = 3 version mtisunfireHost_AG
  Message 14:35:51Received 15/07/2011: 0 8
  ci=id%3dmtisunfireHost_AG%20maxConnections%3d1%20debug%3d0%20maxSessionTime%3d24%20sleepFor%3d60%20security%3dopen%20failoverThreshold%3d1%20aaaTimeoutThreshold%3d%20cookieSessionTime%3d3600%20maxCacheElems%3d100000%20cacheTimeout%3d1800%20configLastUpdateTime%3d1310754351%20preferredHost%3dmtisunfire:8890%20state%3dEnabled%20primaryCookieDomain%3d%20idleSessionTimeout%3d3600%20accessClientPasswd%3d02434564584046435641510409%20primaryServer1%3dhost%253dirsam-oam.dchc.smil.mil%2520port%253d8887%2520numOfConnections%253d1%20denyOnNotProtected%3d0%20cachePragmaHeader%3dno-cache%20cacheControlHeader%3dno-cache%20ipValidation%3d1 st=ma%3d25%20mi%3d2%20sg%3d32%20sm%3d rt=1
  [Fri 15 Jul 14:35:52 2011] [notice] child pid 18581 exit signal Segmentation fault (11)
  [Fri 15 Jul 14:35:58 2011] [notice] child pid 18582 exit signal Segmentation fault (11)
  [Fri 15 Jul 14:36:01 2011] [notice] child pid 18583 exit signal Segmentation fault (11)
  [Fri 15 Jul 14:36:04 2011] [notice] child pid 18585 exit signal Segmentation fault (11)
  [Fri 15 Jul 14:36:07 2011] [notice] child pid 18586 exit signal Segmentation fault (11)
  [Fri 15 Jul 14:36:11 2011] [notice] child pid 18590 exit signal Segmentation fault (11)
  [Fri 15 Jul 14:36:12 2011] [notice] child pid 18591 exit signal Segmentation fault (11)
  [Fri 15 Jul 14:36:14 2011] [notice] child pid 18592 exit signal Segmentation fault (11)
  [Fri 15 Jul 14:36:15 2011] [notice] child pid 18593 exit signal Segmentation fault (11)
  [Fri 15 14:36:16 Jul 2011] [notice] child pid 18594 exit signal Segmentation fault (11)
  [Fri 15 Jul 14:38:35 2011] [notice] child pid 18595 exit signal Segmentation fault (11)
  [Fri 15 Jul 14:38:38 2011] [notice] child pid 18596 exit signal Segmentation fault (11)
  
  
  I believe that apache is currently configured properly at this point, but cannot understand what Miss them us.

  I would say that OAM does support Apache (depending on the version of Apache certified and BONES). However, there are so many distributions out there and it can be configured with countless options, be compiled with a number of different compilers and include a number of modules that compatibility issues is to ask. Distribution of Solaris - also Oracle - is a concrete example. I also experienced problems with the version of Apache comes with some versions of Linux (for different reasons than the Solaris bundle) for which the simplest solution has also to download and compile from source. I guess that's the reason of what has told you about the support of generic Apache, if of course, I don't know the context.

  Kind regards
  Colin