Hello MR. Andrew,
Please try the following where I have experienced the same problem
On the Server Sensor machine:
1. Stop the issDaemon service.
2. Rename the current.policy file to current.old in the \Program
Files\ISS\issSensors\ directory.
3. Start the issDaemon service.
In SiteProtector Console:
1. Wait for the Sensor to become ACTIVE.
2. Apply the policy you desire.
Regards,
Abdulkareem M. Al-Raie SSCP,ISS-CE
Information Security Consultant
Elite Computer Solutions
P.O. Box: 58915
Riyadh, 11515
Kingdom of Saudi Arabia
http://www.elite.com.sa <http://www.elite.com.sa/>
Tel.: + (966 1) 4086504
Mobile: +966 (50) 4496521
________________________________
From: issforum-bounces@iss.net on behalf of Andrew Plato
Sent: Thu 10/6/2005 12:09 PM
To: issforum@iss.net
Subject: [ISSForum] Server Sensors that just die
This is a daunting little problem I have had lately. Server sensors that
just croak. They stop working. When you try to restart them, you get an
error that the OS cannot find the file specified. Nothing will restart
them - rebooting, nothing. The issdeamon is running. Just not the
Buffer Overflow / IPS engine.
The only fix I have been able to discover is to reinstall SS and start
over.
Anybody have any info on this? I checked the Knowledge Base on this, but
nothing.
Also, when is ISS going to put out a new Server Sensor build. I am tired
of installing it and then having to go through the whole service pack
update. Can't we get a repackage?
Oh, and while I am complaining - where the heck is "Proventia
Server??!?!?"
_____________________________________
Andrew Plato, CISSP
President / Principal Consultant
ANITIAN ENTERPRISE SECURITY
Your Expert Partner for Security & Networking
3800 SW Cedar Hills Blvd, Suite 280
Beaverton, OR 97005
503-644-5656 Office
503-214-8069 Fax
503-201-0821 Mobile
www.anitian.com
_____________________________________
PGP/GPG public key available at: http://www.anitian.com/corp/keys.htm
_______________________________________________
ISSForum mailing list
ISSForum@iss.net
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet Security Systems,
6303 Barfield Road, Atlanta, Georgia, USA 30328.
_______________________________________________
ISSForum mailing list
ISSForum@iss.net
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet Security Systems,
6303 Barfield Road, Atlanta, Georgia, USA 30328.
