Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: [ISSForum] Troubles with installing XPU's |
|---|---|
| Date: | Tue, 22 Nov 2005 20:13:05 -0500 |
I have had similar issues with Sitepro server core updates like DB, Event Coll., Agent Mgr and Server Sensor XPU updates also. It has been problems like I apply the update but it fails or the ver. never changes. When ISS has helped me it has always (on the server) come down to something in the C:\Program Files\ISS\RealSecure SiteProtector\Application Server directory. There are a few files in there which mark what ver. has been installed last etc. I can't remember the details of what they have do but maybe pointing you in that direction will help? With Server Sensor they have had me stop all ISS services on the SS box and delete current.policy (and common.policy too I believe), restart the services and push the xpu update again. That has worked for me. I have had some really stubborn issues with xpu/sp updates. Maybe my experience will point you closer to an answer. David -----Original Message----- From: issforum-bounces@iss.net [mailto:issforum-bounces@iss.net] On Behalf Of Richard Franken Sent: Tuesday, November 22, 2005 5:45 AM To: Jason Baeder; ISSForum@iss.net Subject: Re: [ISSForum] Troubles with installing XPU's All, I did the reboot and it did not work. I checked some more stuff. The Console states that the Core is at SP5.2 level. However, when I run an update (since it says updates are available) it only show a SP5.1 update? I can actully run the update, but the result is an OK message stating the update has occured, however, it only takes a second or 10 to do so. For Server Sensors it's even more weird. They run at SP 4.3. I can deinstall them, so I run them at SP 4.1. Then I can reinstall the SP4.3. without a problem (except for the message that I need to install XPU 22.37first, which I think has not happened). So, to me it seems there's an administrative issue: updates are installed, but not correctly processed in the system, or something like that. If anyone has an idea: pls let me know. If not, let's wait and see what our support says. I will post the findings. regards, Richard On 11/22/05, Richard Franken <rs.franken@gmail.com> wrote:
Jason, I too have experienced the reboots needed. The odd thing in this case
is
that de SP DB is already at 5.2, and the system shows an update to
5.1.
When I run the update, it actually updates the system. I have not yet
tried
the reboot; will do that in an hour or so. The strange thing is that the error message is relate to a XPU from december 2004, one that has been installed already ( I reinstalled the entire IDS environment in May 2005, based on the latest software downloadable from the ISS site). We already have a ticket open with
our
supplier, but unfortunately they too haven't heard of this error
message.
Wil try to update those components that have an update, but the
Sensors.
Then I will do a reboot, try to update the sensors and will post the
results
to the list. Regards, Richard On 11/21/05, Jason Baeder <jason_baeder@yahoo.com> wrote:I have not seen that particular XPU-related error before. However, I have found that when there are updates for the SP Core or the SP Database I need update them _first_, then _reboot_ both before updating the sensors. Otherwise, things get really weird. I'm pretty sure that ISS recommends updating the Database and Core first, but I don't think they mention the reboot. HTH, Jason --- Richard Franken <rs.franken@gmail.com> wrote:Hi all, Currently I am having issues applying ANY XPU update on a
Realsecure
Siteprotector 2.0 SP 5.2 environment. Everytime I try to update a Server Sensor I receive the following error: Installing update package SiteProtector/SPSS_POLICY_20041214.xpu Installation of update failed. Error: Could not find XPU Target. [ID=0xc7420035] Acquire master status on Sensor ss_SENSOR@xxx.xxx.xxx.xxx(#11) successful. Installing the update ... Update file SiteProtector/SPSS_POLICY_20041214.xpu has already
been
downloaded, no need to download. When I try to update one of the Internetscanners, I receive the exact same error message. However, when I try to update the SP Core (running SP 5.2 .) it
shows
a 5.1update for the Database, it can be installed, but nothing changes in the console, nor does the Available Update column change from Yes to
No.
Has anyone seen this before and know what to do? Right now I am kinda stuck with the situation. Regards, Richard _______________________________________________ ISSForum mailing list ISSForum@iss.net TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to
mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet
Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.__________________________________ Yahoo! FareChase: Search multiple travel sites in one click. http://farechase.yahoo.com
_______________________________________________ ISSForum mailing list ISSForum@iss.net TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to mod-issforum@iss.net The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328. _______________________________________________ ISSForum mailing list ISSForum@iss.net TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to mod-issforum@iss.net The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | [ISSForum] [[SPAM]] Problem with URL filter -Proventia M, Marko Antic |
|---|---|
| Next by Date: | Re: [ISSForum] [[SPAM]] Problem with URL filter -Proventia M, Andres Riancho |
| Previous by Thread: | Re: [ISSForum] Troubles with installing XPU's, Richard Franken |
| Next by Thread: | [ISSForum] IDS monitor HTTPs traffic, Italo Tapia |
| Indexes: | [Date] [Thread] [Top] [All Lists] |