Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | [ISSForum] Re: Troubles upgrading to SP5.1 / Missing events |
|---|---|
| Date: | Mon, 7 Mar 2005 09:02:32 +0100 |
Hi all, a quick update: Before people think ISS did not support us very well, that is not the case, since our support contract is not directly with ISS. I did reinstall the entire SP2 installation based on the download on the ISS site of the SP5 based installation. This went without problems. The only thing still not working are the Internet Scanners; they seem to fail on the XPU update. I will manually update them on the boxes itself, rather then from the SP console. (I mean, the Fusion correlation does make life easier for my co-workers). All in all it's been a nice learning experience. Regards, Richard Franken On Thu, 24 Feb 2005 14:57:49 +0100, Richard Franken <rs.franken@gmail.com> wrote:
Hi, we were in progress of upgrading our SP 2.0 installation to SP5.1, but the upgrade failed. All prerequisites were met. Initially the system still logged data to the database, so we started support to find out why the upgrade failed. Then someone though to try the upgrade again... That was a bad idea, since now no events at all are logged to the database, due to the fact that the event collector can't connect to the database. Support send me the EC tool, to change the account and password the EC uses to connect to the database, but this tool did not help us. Right now we have no data logged for almost a week and I am starting to believe I am better of rebuilding the entire SP2 installation, make an image, upgrade to 5.1 and test it. When found to be OK, put it in production and cut my lossed for the historical data (data we could not see in the Enterprise view anyway). What are your feelings about this? I don't want to install the system with the current database intact, since the database scheme has been extended with SP5.1 specific stuff. I am not sure as to why we now have these problems, but with a 14 Mbit line, 2500 users and over 30 public servers I feel the risk is to big to let things be... Richard S. Franken
_______________________________________________ ISSForum mailing list ISSForum@iss.net TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to mod-issforum@iss.net The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | [ISSForum] Linux Server Sensor on SuSE, Mohr James |
|---|---|
| Next by Date: | Re: [ISSForum] Badly out of date Service Packs and XPUs., Go_ISS |
| Previous by Thread: | [ISSForum] Linux Server Sensor on SuSE, Mohr James |
| Next by Thread: | [ISSForum] No TCL experience out there??, davidc |
| Indexes: | [Date] [Thread] [Top] [All Lists] |