Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security ISSForum
[Top] [All Lists]

[ISSForum] Re: Troubles upgrading to SP5.1 / Missing events

Subject: [ISSForum] Re: Troubles upgrading to SP5.1 / Missing events
Date: Mon, 7 Mar 2005 09:02:32 +0100
Hi all, 

a quick update: Before people think ISS did not support us very well,
that is not the case, since our support contract is not directly with
ISS.

I did reinstall the entire SP2 installation based on the download on
the ISS site of the SP5 based installation. This went without
problems. The only thing still not working are the Internet Scanners;
they seem to fail on the XPU update. I will manually update them on
the boxes itself, rather then from the SP console.

(I mean, the Fusion correlation does make life easier for my co-workers).

All in all it's been a nice learning experience.

Regards,

Richard Franken


On Thu, 24 Feb 2005 14:57:49 +0100, Richard Franken
<rs.franken@gmail.com> wrote:
Hi,

we were in progress of upgrading our SP 2.0 installation to SP5.1, but
the upgrade failed. All prerequisites were met. Initially the system
still logged data to the database, so we started support to find out
why the upgrade failed.
Then someone though to try the upgrade again...
That was a bad idea, since now no events at all are logged to the
database, due to the fact that the event collector can't connect to
the database. Support send me the EC tool, to change the account and
password the EC uses to connect to the database, but this tool did not
help us.
Right now we have no data logged for almost a week and I am starting
to believe I am better of rebuilding the entire SP2 installation, make
an image, upgrade to 5.1 and test it. When found to be OK, put it in
production and cut my lossed for the historical data (data we could
not see in the Enterprise view anyway).
What are your feelings about this?

I don't want to install the system with the current database intact,
since the database scheme has been extended with SP5.1 specific stuff.
I am not sure as to why we now have these problems, but with a 14 Mbit
line, 2500 users and over 30 public servers I feel the risk is to big
to let things be...

Richard S. Franken

_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to 
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 
6303 Barfield Road, Atlanta, Georgia, USA 30328.

<Prev in Thread] Current Thread [Next in Thread>
  • [ISSForum] Re: Troubles upgrading to SP5.1 / Missing events, Richard Franken <=