Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: [ISSForum] Troubles with installing XPU's |
|---|---|
| Date: | Tue, 6 Dec 2005 08:55:35 +0100 |
David, thank you for thinking with us to find a solution to thsi problem. However... A co-worker of mine has been in contact with our support partner and this was not bringing us closer to a solution. I have decided last week wednesday to reinstall the entire IDS enviroment when there was no solution on monday. Yesterday I did this and today I can conclude that it's working perfectly fine again. I did not reinstall any sensors, only the core components (and threw away the database which contained useless data by now anyway). So the problem isn't solved, but evaded.... Not the way I like to do it, but the business was breathing down my neck. Thank you to all for thinking with us to find a solution: unfortunately I was forced to take a different route... regards, Richard On 12/2/05, CAUSEY, David <davidc@lmi.org> wrote:
Yes, I do have an idea concerning your problem. I'm sorry my response was not sooner. When you go to a Server Sensor in the Console and select "Apply Update" one of the next boxes that comes up has a section which allows you to pick XPU or Service Pack. If you don't pick one then it is auto-selected for you. What's happened to me before is that I don't pick either because I don't see it. Then I run the update (XPU is selected and SP is what I need) it takes about 10 seconds and acts like it is complete. But the list of previously run Command Jobs says OKAY even though nothing seems to have been updated. Make sure the right box is checked. (SP or XPU) David -----Original Message----- From: issforum-bounces@iss.net [mailto:issforum-bounces@iss.net] On Behalf Of Richard Franken Sent: Tuesday, November 22, 2005 5:45 AM To: Jason Baeder; ISSForum@iss.net Subject: Re: [ISSForum] Troubles with installing XPU's All, I did the reboot and it did not work. I checked some more stuff. The Console states that the Core is at SP5.2 level. However, when I run an update (since it says updates are available) it only show a SP5.1 update? I can actully run the update, but the result is an OK message stating the update has occured, however, it only takes a second or 10 to do so. For Server Sensors it's even more weird. They run at SP 4.3. I can deinstall them, so I run them at SP 4.1. Then I can reinstall the SP4.3. without a problem (except for the message that I need to install XPU 22.37first, which I think has not happened). So, to me it seems there's an administrative issue: updates are installed, but not correctly processed in the system, or something like that. If anyone has an idea: pls let me know. If not, let's wait and see what our support says. I will post the findings. regards, Richard On 11/22/05, Richard Franken <rs.franken@gmail.com> wrote:Jason, I too have experienced the reboots needed. The odd thing in this caseisthat de SP DB is already at 5.2, and the system shows an update to5.1.When I run the update, it actually updates the system. I have not yettriedthe reboot; will do that in an hour or so. The strange thing is that the error message is relate to a XPU from december 2004, one that has been installed already ( I reinstalled the entire IDS environment in May 2005, based on the latest software downloadable from the ISS site). We already have a ticket open withoursupplier, but unfortunately they too haven't heard of this errormessage.Wil try to update those components that have an update, but theSensors.Then I will do a reboot, try to update the sensors and will post theresultsto the list. Regards, Richard On 11/21/05, Jason Baeder <jason_baeder@yahoo.com> wrote:I have not seen that particular XPU-related error before. However, I have found that when there are updates for the SP Core or the SP Database I need update them _first_, then _reboot_ both before updating the sensors. Otherwise, things get really weird. I'm pretty sure that ISS recommends updating the Database and Core first, but I don't think they mention the reboot. HTH, Jason --- Richard Franken <rs.franken@gmail.com> wrote:Hi all, Currently I am having issues applying ANY XPU update on aRealsecureSiteprotector 2.0 SP 5.2 environment. Everytime I try to update a Server Sensor I receive the following error: Installing update package SiteProtector/SPSS_POLICY_20041214.xpu Installation of update failed. Error: Could not find XPU Target. [ID=0xc7420035] Acquire master status on Sensor ss_SENSOR@xxx.xxx.xxx.xxx(#11) successful. Installing the update ... Update file SiteProtector/SPSS_POLICY_20041214.xpu has alreadybeendownloaded, no need to download. When I try to update one of the Internetscanners, I receive the exact same error message. However, when I try to update the SP Core (running SP 5.2 .) itshowsa 5.1update for the Database, it can be installed, but nothing changes in the console, nor does the Available Update column change from Yes toNo.Has anyone seen this before and know what to do? Right now I am kinda stuck with the situation. Regards, Richard _______________________________________________ ISSForum mailing list ISSForum@iss.net TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email tomod-issforum@iss.netThe ISSForum mailing list is hosted and managed by InternetSecuritySystems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.__________________________________ Yahoo! FareChase: Search multiple travel sites in one click. http://farechase.yahoo.com_______________________________________________ ISSForum mailing list ISSForum@iss.net TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to mod-issforum@iss.net The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
_______________________________________________ ISSForum mailing list ISSForum@iss.net TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to mod-issforum@iss.net The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | [ISSForum] Simultaneous Internet Scanner jobs w/ SiteProtector?, Sims Brian |
|---|---|
| Next by Date: | Re: [ISSForum] deleting entries from global application list manually,, Roman V. Andreev |
| Previous by Thread: | Re: [ISSForum] Troubles with installing XPU's, CAUSEY, David |
| Next by Thread: | [ISSForum] Simultaneous Internet Scanner jobs w/ SiteProtector?, Sims Brian |
| Indexes: | [Date] [Thread] [Top] [All Lists] |