Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: [ISSForum] Fusion problems after SP upgrade SP6 |
|---|---|
| Date: | Thu, 6 Apr 2006 13:59:47 -0700 (PDT) |
Hey Charles, Your interest and reply is very much appreciated. I have no real issue with the re-arranging of the options, I can get used to that. I've been using SP now for 3 years. We have quite a bit of sensors to manage as well. One issue I have with the SP GUI is the need for the ability to cancel updates. That option seems to have disappeared. And although we had it on the old version, it was still not very functional. Can we get a true cacelling option for updates? With my problems, I have to wait the full 20 minutes to wait out the "rollback" or where it tells you it's awaiting the version to change. It seems that there should be a more comprehensive way to simply cancel the current update and roll it back. Another operational issue I am having is that the Agent Manager will not stay online and the events are no loger coming in, real time. For example, I have only one alert for my network sensors, from 2AM this morning. There is SQL job that presents the alerts to the SP console, and it seems to be running, but I'm curious if anyone else is having this problem, with events being populated into SP? Once I get everything runnning, I hope these problems go away with it. As far as how busy SP6 had made ISS support, I think it is in fact an issue, I have been working on issues for two weeks now, and have never had such....subpar support...from ISS in the 3 or so years I've had the products. It is much more difficult to get to talk to anyone, it usually takes a day or two to finally talk to someone. I've received maybe one return call out or at least 5 callback requests, and I also see that the support line has acknowledged the increased workload; they have an automated message stating that fact and today I waited on hold for 20 minutes before I even got to the overflow person. I'm not complaining; I can deal with that, ths is just an observation. Thanks for listening! Cheese! Marc --- "Banton, Charles (ISS Atlanta)" <CBanton@iss.net> wrote:
I am the Product manager for SiteProtector and the thread was brought to my attention. I wanted to offer some info but also would like to receive your feedback as well. If you could respond through our new an improved enhancement portal it will enable you to monitor the progress of the enhancement request as it is included in the upcoming releases. This new enhancement request portal provides an opportunity for you to review other requests to provide your opinion of their value. I hope you will take advantage of the updated enhancement request system through your MYISS portal. Or you can contact me directly. Jean, Which details in the same window from the right click are you referring to? When adding agents from the asset tab it is possible from the Object|New|Agent menu option. It pre-fills the asset you have selected in order to finish registering it. Would it be better to offer the right click add agent option from the right click menu in the asset tab? Overall there have been a low number of customers experiencing difficulties with the update. Comparing the size of the release with other SiteProtector Service Pack releases. The ISS Support organization is not overwhelmed and has commented that they are very happy with the quality of the release. -----Original Message----- From: issforum-bounces@atla-mm1.iss.net On Behalf Of jean.levert@bell.ca Sent: Tuesday, April 04, 2006 9:41 AM To: snort_on_acid@yahoo.com; issforum@atla-mm1.iss.net Subject: Re: [ISSForum] Fusion problems after SP upgrade SP6 I agree with you Marc, this upgrade made things worst for me also. There are several things I used to do with a right-click (details in same window, add new agent manually from the Asset tab, etc...) I'm really disappointed, it doesn't seem we can rollback to the previous SP either..... Jean -----Original Message----- From: issforum-bounces@iss.net [mailto:issforum-bounces@iss.net] On Behalf Of SN ORT Sent: April 3, 2006 12:49 PM To: issforum@iss.net Subject: Re: [ISSForum] Fusion problems after SP upgrade SP6 Ever since I installed SP 6, my SiteProtector has been down. Agent Manager won't stay online and won't update. Been on the phone for weeks with ISS and their support is very dissappointing at this point in time. Anyone else having SP6 issues? And how much is this overwhelming support? I can'tget anything worked on because the techs have no time to call me back. This is very frustrating. And I don't think we can turn back either. Let's hear any other problems out there! Cheese! Marc ---------Original Message------------ Message: 1 Date: Mon, 3 Apr 2006 09:04:00 +0200 From: "Richard Franken" <rs.franken@gmail.com> Subject: [ISSForum] Fusion problems after SP upgrade SP6 To: "Issforum@Iss. Net" <issforum@iss.net> Message-ID: <ATLMAIEXCP083IaUvsX00066d47@atlmaiexcp08.iss.local> Content-Type: text/plain; charset=ISO-8859-1 Hi all, I am running a Siteprotector 2.0 environment, which has been upgraded to SP6. We also use the Fusion module. After the upgrade the Fusion module was in no way usable. So, we decided to reinstall Fusion. We deregistered Fusiom from SP, deinstalled Fusion from the server, rebooted the server, installed the latest Fusion 2.0 downloaded from ISS and registered it with SP. So far so good. Now we have the problem that Fusion doesn't work. Every time the ISSDaemon service is stopped/started or the server rebooted, the event log shows (amongst others, but this one seems to be the most important one) the following message: net.iss.sma.fusion.FusionException: Error creating connection pool
(connectString=jdbc:ids://10.2.15.21:12/conn?dsn='DRIVER={SQL
Server};SERVER=10.2.15.21;database=RealSecureDB', userName=SecurityFusionModule_FUSION): java.net.ConnectException: Connection refused: connect
net.iss.sma.fusion.dbutilities.SqlServer.createConnectionPool(Unknown
Source)
net.iss.sma.fusion.dbutilities.SqlServer.<init>(Unknown
Source)
net.iss.sma.fusion.dbutilities.DbManager.registerSqlServer(Unknown
Source)
net.iss.sma.fusion.dbutilities.DbManager.initServerConfigs(Unknown
Source)
net.iss.sma.fusion.dbutilities.DbManager.initOptionsFromCurrentPolicy(Un
known Source)
net.iss.sma.fusion.FusionEngine.initOptionsFromCurrentPolicy(Unknown
Source)
net.iss.sma.fusion.FusionEngine.initFromPolicyAndCommandLine(Unknown
Source) net.iss.sma.fusion.FusionEngine.startEngine(Unknown Source) Does anyone have any idea what causes this and how this can be resolved? thank you in advance, Richard __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com _______________________________________________ ISSForum mailing list ISSForum@iss.net TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to mod-issforum@iss.net The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328. _______________________________________________ ISSForum mailing list ISSForum@iss.net TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to mod-issforum@iss.net The ISSForum mailing list is hosted and managed by Internet Security
=== message truncated === __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com _______________________________________________ ISSForum mailing list ISSForum@iss.net TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to mod-issforum@iss.net The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: [ISSForum] Fusion problems after SP upgrade SP6, Kettlewell, Larry [KO] |
|---|---|
| Next by Date: | Re: [ISSForum] Proventia M, Danilov, Jaroslav |
| Previous by Thread: | Re: [ISSForum] Fusion problems after SP upgrade SP6, Banton, Charles \(ISS Atlanta\) |
| Next by Thread: | Re: [ISSForum] Fusion problems after SP upgrade SP6, ismail syed |
| Indexes: | [Date] [Thread] [Top] [All Lists] |