Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security ISSForum
[Top] [All Lists]

Re: [ISSForum] Troubles with installing XPU's

Subject: Re: [ISSForum] Troubles with installing XPU's
Date: Tue, 22 Nov 2005 20:13:05 -0500
I have had similar issues with Sitepro server core updates like DB,
Event Coll., Agent Mgr and Server Sensor XPU updates also. It has been
problems like I apply the update but it fails or the ver. never changes.


When ISS has helped me it has always (on the server) come down to
something in the C:\Program Files\ISS\RealSecure
SiteProtector\Application Server directory. There are a few files in
there which mark what ver. has been installed last etc. I can't remember
the details of what they have do but maybe pointing you in that
direction will help? 

With Server Sensor they have had me stop all ISS services on the SS box
and delete current.policy (and common.policy too I believe), restart the
services and push the xpu update again. That has worked for me. I have
had some really stubborn issues with xpu/sp updates. 

Maybe my experience will point you closer to an answer.



David


-----Original Message-----
From: issforum-bounces@iss.net [mailto:issforum-bounces@iss.net] On
Behalf Of Richard Franken
Sent: Tuesday, November 22, 2005 5:45 AM
To: Jason Baeder; ISSForum@iss.net
Subject: Re: [ISSForum] Troubles with installing XPU's

All,
 I did the reboot and it did not work. I checked some more stuff. The
Console states that the Core is at SP5.2 level. However, when I run an
update (since it says updates are available) it only show a SP5.1
update? I
can actully run the update, but the result is an OK message stating the
update has occured, however, it only takes a second or 10 to do so.
 For Server Sensors it's even more weird. They run at SP 4.3. I can
deinstall them, so I run them at SP 4.1. Then I can reinstall the SP4.3.
without a problem (except for the message that I need to install XPU
22.37first, which I think has not happened).
 So, to me it seems there's an administrative issue: updates are
installed,
but not correctly processed in the system, or something like that. If
anyone
has an idea: pls let me know. If not, let's wait and see what our
support
says. I will post the findings.
 regards,

Richard

 On 11/22/05, Richard Franken <rs.franken@gmail.com> wrote:

Jason,
 I too have experienced the reboots needed. The odd thing in this case
is
that de SP DB is already at 5.2, and the system shows an update to
5.1.
When I run the update, it actually updates the system. I have not yet
tried
the reboot; will do that in an hour or so.
 The strange thing is that the error message is relate to a XPU from
december 2004, one that has been installed already ( I reinstalled the
entire IDS environment in May 2005, based on the latest software
downloadable from the ISS site). We already have a ticket open with
our
supplier, but unfortunately they too haven't heard of this error
message.
 Wil try to update those components that have an update, but the
Sensors.
Then I will do a reboot, try to update the sensors and will post the
results
to the list.
 Regards,

Richard

 On 11/21/05, Jason Baeder <jason_baeder@yahoo.com> wrote:

I have not seen that particular XPU-related error before. However, I
have found that when there are updates for the SP Core or the SP
Database I need update them _first_, then _reboot_ both before
updating the sensors. Otherwise, things get really weird. I'm pretty
sure that ISS recommends updating the Database and Core first, but I
don't think they mention the reboot.

HTH,
Jason


--- Richard Franken <rs.franken@gmail.com> wrote:

Hi all,
Currently I am having issues applying ANY XPU update on a
Realsecure
Siteprotector 2.0 SP 5.2 environment. Everytime I try to update a
Server
Sensor I receive the following error:
Installing update package SiteProtector/SPSS_POLICY_20041214.xpu
Installation of update failed. Error: Could not find XPU Target.
[ID=0xc7420035]
Acquire master status on Sensor ss_SENSOR@xxx.xxx.xxx.xxx(#11)
successful.
Installing the update ...
Update file SiteProtector/SPSS_POLICY_20041214.xpu has already
been
downloaded, no need to download.
When I try to update one of the Internetscanners, I receive the
exact same
error message.
However, when I try to update the SP Core (running SP 5.2 .) it
shows
a 5.1update for the Database, it can be installed, but nothing
changes
in the
console, nor does the Available Update column change from Yes to
No.
Has anyone seen this before and know what to do? Right now I am
kinda stuck
with the situation.
Regards,

Richard
_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to
mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet
Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.





__________________________________
Yahoo! FareChase: Search multiple travel sites in one click.
http://farechase.yahoo.com



_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.


_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to 
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 
6303 Barfield Road, Atlanta, Georgia, USA 30328.

<Prev in Thread] Current Thread [Next in Thread>