Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security ISSForum
[Top] [All Lists]

Re: [ISSForum] Fusion problems after SP upgrade SP6

Subject: Re: [ISSForum] Fusion problems after SP upgrade SP6
Date: Thu, 6 Apr 2006 13:59:47 -0700 (PDT)
Hey Charles,
Your interest and reply is very much appreciated. I
have no real issue with the re-arranging of the
options, I can get used to that. I've been using SP
now for 3 years. We have quite a bit of sensors to
manage as well.

One issue I have with the SP GUI is the need for the
ability to cancel updates. That option seems to have
disappeared. And although we had it on the old
version, it was still not very functional. Can we get
a true cacelling option for updates? With my problems,
I have to wait the full 20 minutes to wait out the
"rollback" or where it tells you it's awaiting the
version to change. It seems that there should be a
more comprehensive way to simply cancel the current
update and roll it back. 

Another operational issue I am having is that the
Agent Manager will not stay online and the events are
no loger coming in, real time. For example, I have
only one alert for my network sensors, from 2AM this
morning. There is SQL job that presents the alerts to
the SP console, and it seems to be running, but I'm
curious if anyone else is having this problem, with
events being populated into SP?

Once I get everything runnning, I hope these problems
go away with it. 

As far as how busy SP6 had made ISS support, I think
it is in fact an issue, I have been working on issues
for two weeks now, and have never had such....subpar
support...from ISS in the 3 or so years I've had the
products. It is much more difficult to get to talk to
anyone, it usually takes a day or two to finally talk
to someone. I've received maybe one return call out or
at least 5 callback requests, and I also see that the
support line has acknowledged the increased workload;
they have an automated message stating that fact and
today I waited on hold for 20 minutes before I even
got to the overflow person. I'm not complaining; I can
deal with that, ths is just an observation. Thanks for
listening!

Cheese!
Marc

--- "Banton, Charles (ISS Atlanta)" <CBanton@iss.net>
wrote:

I am the Product manager for SiteProtector and the
thread was brought to
my attention.  I wanted to offer some info but also
would like to
receive your feedback as well.  If you could respond
through our new an
improved enhancement portal it will enable you to
monitor the progress
of the enhancement request as it is included in the
upcoming releases.
This new enhancement request portal provides an
opportunity for you to
review other requests to provide your opinion of
their value.  I hope
you will take advantage of the updated enhancement
request system
through your MYISS portal.  Or you can contact me
directly.

Jean,
Which details in the same window from the right
click are you referring
to?

When adding agents from the asset tab it is possible
from the
Object|New|Agent menu option.  It pre-fills the
asset you have selected
in order to finish registering it.  Would it be
better to offer the
right click add agent option from the right click
menu in the asset tab?


Overall there have been a low number of customers
experiencing
difficulties with the update.  Comparing the size of
the release with
other SiteProtector Service Pack releases.  The ISS
Support organization
is not overwhelmed and has commented that they are
very happy with the
quality of the release.    
 

-----Original Message-----
From: issforum-bounces@atla-mm1.iss.net On Behalf Of
jean.levert@bell.ca
Sent: Tuesday, April 04, 2006 9:41 AM
To: snort_on_acid@yahoo.com;
issforum@atla-mm1.iss.net
Subject: Re: [ISSForum] Fusion problems after SP
upgrade SP6

I agree with you Marc, this upgrade made things
worst for me also. There
are several things I used to do with a right-click
(details in same
window, add new agent manually from the Asset tab,
etc...) I'm really
disappointed, it doesn't seem we can rollback to the
previous SP
either.....

Jean

-----Original Message-----
From: issforum-bounces@iss.net
[mailto:issforum-bounces@iss.net] On
Behalf Of SN ORT
Sent: April 3, 2006 12:49 PM
To: issforum@iss.net
Subject: Re: [ISSForum] Fusion problems after SP
upgrade SP6

Ever since I installed SP 6, my SiteProtector has
been down. Agent
Manager won't stay online and won't update. Been on
the phone for weeks
with ISS and their support is very dissappointing at
this point in time.
Anyone else having SP6 issues? And how much is this
overwhelming
support? I can'tget anything worked on because the
techs have no time to
call me back. This is very frustrating. And I don't
think we can turn
back either. Let's hear any other problems out
there!

Cheese!
Marc


---------Original Message------------
Message: 1
Date: Mon, 3 Apr 2006 09:04:00 +0200
From: "Richard Franken" <rs.franken@gmail.com>
Subject: [ISSForum] Fusion problems after SP upgrade
SP6
To: "Issforum@Iss. Net" <issforum@iss.net>
Message-ID:
<ATLMAIEXCP083IaUvsX00066d47@atlmaiexcp08.iss.local>
Content-Type: text/plain; charset=ISO-8859-1

Hi all,

I am running a Siteprotector 2.0 environment, which
has been upgraded to
SP6. We also use the Fusion module. After the
upgrade the Fusion module
was in no way usable. So, we decided to reinstall
Fusion.
We deregistered Fusiom
from SP, deinstalled Fusion from the server,
rebooted the server,
installed the latest Fusion 2.0 downloaded from ISS
and registered it
with SP. So far so good.

Now we have the problem that Fusion doesn't work.
Every time the ISSDaemon
service is stopped/started or the server rebooted,
the event log shows
(amongst others, but this one seems to be the most
important one) the
following message:

net.iss.sma.fusion.FusionException: Error creating
connection pool

(connectString=jdbc:ids://10.2.15.21:12/conn?dsn='DRIVER={SQL
Server};SERVER=10.2.15.21;database=RealSecureDB',
userName=SecurityFusionModule_FUSION):
java.net.ConnectException: Connection
refused: connect

net.iss.sma.fusion.dbutilities.SqlServer.createConnectionPool(Unknown
Source)

net.iss.sma.fusion.dbutilities.SqlServer.<init>(Unknown
Source)

net.iss.sma.fusion.dbutilities.DbManager.registerSqlServer(Unknown
Source)

net.iss.sma.fusion.dbutilities.DbManager.initServerConfigs(Unknown
Source)

net.iss.sma.fusion.dbutilities.DbManager.initOptionsFromCurrentPolicy(Un
known
Source)

net.iss.sma.fusion.FusionEngine.initOptionsFromCurrentPolicy(Unknown
Source)

net.iss.sma.fusion.FusionEngine.initFromPolicyAndCommandLine(Unknown
Source)
net.iss.sma.fusion.FusionEngine.startEngine(Unknown
Source)

Does anyone have any idea what causes this and how
this can be resolved?

thank you in advance,

Richard


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam
protection around
http://mail.yahoo.com 

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam
protection around
http://mail.yahoo.com 

_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to
mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by
Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA
30328.


_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to
mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by
Internet Security

=== message truncated ===


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam
protection around 
http://mail.yahoo.com 

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to 
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 
6303 Barfield Road, Atlanta, Georgia, USA 30328.

<Prev in Thread] Current Thread [Next in Thread>