Best Practice Adding New Target to Namespace and Replication

Hi,
whats the best way to add a new target to Namespace and replication. Goal is to replace a old file Server at the end.
I did the following:
- copied the share with robocopy incl timestamps of files and folders
- created share
- added the new share as a new target as well as meshd member of the replication connection
- disabled the new member in the Namespace, so no one can Access it until dfsr is fully done and initialized
After the the new dfsr Connection was replicated through AD to all 4 Members (3 different site, 1 same site) the
following happend:
dfsr begin and almost every file was in a conflicted and copied over the the Conflict Folder. Almost all timestamps
of the Folders were changed to the current date, but the timestamps of the files not.
Thousands of eventlogs: 4412
The DFS Replication service detected that a file was changed on multiple servers. A conflict resolution algorithm was used to determine the winning file. The losing file was moved to the Conflict and Deleted folder.
Any idea why? Later on i disabled the Connections to the remote Fileservers, but that did not stop it.
My idea was to pre-seed the files with robocopy. So what would be the best way to prevent that for the next share ? Is it a better way to just add the target to a bi-directional Connection to the local Fileserver without adding to DFS-N and without copying
the files before ? Is it better to let DFSR do the hole Initial sync incl Files ?
At the end i have no loss of date but to check almost every file for conflict took Ages to finish.
Thanks a lot,
Marco

Hi,
The steps you performed are correct - compare with waiting for DFS initial replication, a manually pre-staging is recommended.
When doing the Robocopy step, wether all attributes are copied such as NTFS permissions?
After robocopy, you can add that folder as a folder target of DFS replication group - you can add it to DFS namespace after replication finished.
And if it is a Windows 2012 R2, you can prestaging DFS database for a better result.
https://social.technet.microsoft.com/Forums/windows/en-US/a06c9d25-ed04-44e9-a1f7-e1506e645d53/forum-faq-how-to-prestaging-dfsr-database-on-windows-server-2012-r2?forum=winserverfiles
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Similar Messages

  • Best practices to configure files to display and play in order?

    I'm looking for best practices to get saved recordings (songs and business trainings) on my PC correctly configured so they will show up correctly (artist, song title, track number) and play incorrect order.
    I have lots of MP3 files (and other formats) on my PC but when i transfer them to iTunes and sync to iPod they don't play in correct order or show up as unknown artist (and other issues).
    I typically have them in a folder by artist name then folder with name of course or album then each song begins with a number.
    EXAMPLE: Eagles (folder) - Hotel California (folder) - 1.HotelCalifornia.mp3, 2.NewKidInTown.mp3, etc etc.
    I've also right-clicked and went into properties and add the track number,  artist name, album name, contributing artist etc but it still comes up with these issues
    --it's also very time-consuming to do this.
    EXAMPLE: instead of it being track 1,2,3 etc it will be 1,10,11,2,21,3...
    I've tried dragging them or copying them into the "automatically add" folder and also adding to library in iTunes.
    Any help is much appreciated.

    Hi Narendra,
    Oracle User and the FTP user are 2 different users.
    I'm assuming you'll be reading the file from R12 through File Adapter and writing it to Bank using FTP Adapter.
    Oracle User is able to login into R12, do some operations, submit some concurrent programs/requests based on responsibilities and generate the file to be transferred (like in my case it did by running a Concurrent Request). The file so generated should be placed at a location from where File Adapter can read it within the BPEL process. Now to read the file, the user that is used is a SOA server user (again different from R12 user). This is the same user that you use to login into your SOA server physical box. Hence to be able to read the file, your file should have appropriate privileges (we set that as 777) so that it can be read by the SOA process (using SOA user).
    FTP user, on the other hand, is the user that allows connection to Bank FTP server. This has absolutely no connection with R12. Bank who hosts the FTP server must give you the FTP user details that you'll use inside your FTP JNDI Configuration on Weblogic. When you deploy and run your process (you don't deploy adapter), it picks up the connection details from FTP JNDI properties that you defined in weblogic.
    Hence both the jusers can be different and I don't think any best practices are required or do exist for this.
    Regards,
    Neeraj Sehgal

  • We are evaluating the use of iPod touch devices to record best practice videos on our manufacturing floor and to post to an internal Moodle web site. How can you upload a video from the iPod touch to a site other than YouTube?

    We are evaluating the use of iPod touch devices to record best practice videos on our manufacturing floor and to post to an internal Moodle web site. How can you upload a video from the iPod touch to a site other than YouTube? The Moodle upload interface is expecting a file selection dialog box like windows or OSX. I do not want to have to go through an intermediary step of messing with a pc.
    Thanks!

    It should be around 7 and a half gigs. In iTunes, across the bottom there should be a bar that show how much storage is being used and by what. (music, movies, apps, etc.) To make music take up less room, you can check the box to make it convert the music to 128kbps AAC. This lowers the quality, but with most earbuds and speakers, you can't even tell the difference.
    The iPod touch has parental controls built in. You'll find them in Settings. I think they only work for enabling/disabling Safari, Mail, YouTube, and App Store. Here's an app that does more: http://www.mobicip.com/online_safety/ipod_touch

  • Best Practices for new iMac

    I posted a few days ago re failing HDD on mid-2007 iMac. Long story short, took it into Apple store, Genius worked on it for 45 mins before decreeing it in need of new HDD. After considering the expenses of adding memory, new drive, hardware and installation costs, I got a brand new iMac entry level (21.5" screen,
    2.7 GHz Intel Core i5, 8 GB 1600 MHz DDR3 memory, 1TB HDD running Mavericks). Also got a Superdrive. I am not needing to migrate anything from the old iMac.
    I was surprised that a physical disc for the OS was not included. So I am looking for any Best Practices for setting up this iMac, specifically in the area of backup and recovery. Do I need to make a boot DVD? Would that be in addition to making a Time Machine full backup (using external G-drive)? I have searched this community and the Help topics on Apple Support and have not found any "checklist" of recommended actions. I realize the value of everyone's time, so any feedback is very appreciated.

    OS X has not been officially issued on physical media since OS X 10.6 (arguably 10.7 was issued on some USB drives, but this was a non-standard approach for purchasing and installing it).
    To reinstall the OS, your system comes with a recovery partition that can be booted to by holding the Command-R keys immediately after hearing the boot chimes sound. This partition boots to the OS X tools window, where you can select options to restore from backup or reinstall the OS. If you choose the option to reinstall, then the OS installation files will be downloaded from Apple's servers.
    If for some reason your entire hard drive is damaged and even the recovery partition is not accessible, then your system supports the ability to use Internet Recovery, which is the same thing except instead of accessing the recovery boot drive from your hard drive, the system will download it as a disk image (again from Apple's servers) and then boot from that image.
    Both of these options will require you have broadband internet access, as you will ultimately need to download several gigabytes of installation data to proceed with the reinstallation.
    There are some options available for creating your own boot and installation DVD or external hard drive, but for most intents and purposes this is not necessary.
    The only "checklist" option I would recommend for anyone with a new Mac system, is to get a 1TB external drive (or a drive that is at least as big as your internal boot drive) and set it up as a Time Machine backup. This will ensure you have a fully restorable backup of your entire system, which you can access via the recovery partition for restoring if needed, or for migrating data to a fresh OS installation.

  • Best practice for dealing with Recordsets, JDBC and JSP?

    I've spent the last three years developing web apps using JSP, Struts and Kodo JDO for persistence. All of the content for the apps was created as Java objects using model classes and saved to an Oracle db. Thus, data retrieved from the db was as instances of the model classes and then put into Struts form beans, etc.
    I changed jobs last month and am now having to use Servlets with JDBC to retrieve records from db tables and returning it into Recordsets. Oh, and I can't use Struts in my JSPs either. I'm beginning to think that I had it easy at my previous job but maybe that's just because I was used to it.
    So here are my problems/questions:
    I have two tables with a one to many relationship that I need to retrieve data from, show in a jsp and be able to update eventually.
    So here's what I am doing:
    a) In a servlet, I use a SQL statement to join the tables and retrieve the results into a Recordset.
    b) I created a class with a bunch of String attributes to copy the Recordset data into, one Recordset row per each instance of the bean and then close the Recordset
    c) I then add the beans to an ArrayList and save the ArrayList into the session.
    d) Then, in the JSP, I retrieve the ArrayList from the session and iterate over each bean instance, printing the data out to the jsp. There are some logic statements to determine when not to print redundant data caused by the one to many join.
    e) I have not written the code to update the data yet but was planning on having separate jsps for updating the (one) table and the (many) table.
    Would most of you do something similar? Would you use one SQL statement to retrieve all of the data for display and use logic to avoid printing the redundant part of the data? Or would you have used separate SQL queries, one for each table? Would you have saved the results into something other than an instance of a bean class that represents one record in the RecordSet? Would you have had a bean class with attributes other than Strings - like had a collection attribute to hold the results from the "many" table? The way that I am doing everything just seems so cumbersome and difficult compared to using Struts and JDO before.
    Your help/opinion will be greatly appreciated!

    Would you use one SQL statement to retrieve all of the data for display Yes.
    and use logic to avoid printing the redundant part of the dataNo.
    I believe in minimising the number of queries. If it is a simple one-many join on a db table, then one query is better than one + n queries.
    However I prefer to store the objects in a bean class with attributes other than strings - ie one object, with a collection attribute to hold the related "many" records.
    Does the fact you are not using Struts mean that you have to use scriptlet code? (shudder)
    Or are you using JSTL, or other custom tags?
    How about tools like Ant? Junit testing?
    The way that I am doing everything just seems so cumbersome and difficult
    compared to using Struts and JDO before.Anything different takes adjusting to. Sounds like you know what you're doing for the most part. I agree, in terms of best practices what you have described so far sounds like a step backwards from what you were previously doing.
    However I wouldn't go complaining about it too loudly, too quickly. If you're new on the block theres nothing like making a pain of yourself, and complaining how backwards the work they have done is to put your new workmates' backs up
    Look on it as a challenge. Maybe discuss it quietly with a team leader, to see if they understand how much easier/better/less error prone such approaches can be?
    Struts, cumbersome as it can be, definitely has the advantage of pushing you to follow good MVC practice.
    Good luck,
    evnafets

  • Best practice for version control B2B, ESB and BPEL

    Hello,
    we are setting up a new system using B2B, ESB and BPEL. The development team is more experienced working with PL/SQL, Oracle Workflow and we are worried that Jdeveloper generates changes to the source files during development and that we might have problems with the version control.
    Is there any best practice for setting up version control for these systems? Do we need to take anything in particular into consideration when setting up the projects?
    We are using Serena Dimensions 9.1 for version control with the add-on in Jdeveloper.
    Thanks in advance!

    I believe JDeveloper has a plugin for Dimensions.
    I havent used it but to get it, go to tools (It may be help I don't have JDeveloper on this machine to confirm) check for updates.
    If you select the thrid party check box - next, you will see an entry for dimentions.
    Configure the connection and develop as you would any other project.
    cheers
    James

  • Best Practice for New Doc Version?

    I'm a RH novice who needs to create a V1.1 doc based on the
    V1.0 source topics, TOC, and images. I'm using RH HTML X5. What is
    my best practice? The previous author left a unclear doc suggesting
    something like the following:
    Copy the current V1.xpj, V1.hhc, and V1.hhp files and rename
    them as V1.1.xpj, V1.1.hhc, and V1.1hhp
    Place the renamed files in the V1 root directory and open the
    V1.1.xpj file.
    Create and edit new content
    Not understanding RH too well, this seemed reasonable. It
    appears what he is suggesting will bring everything forward in a
    new project, but leave the V1 structure intact. I tried this, and
    it seemed to be working but I was confused by RH also making
    changes to the OLD V1.cpd and V1.pss (I don't know that those files
    are).
    So, apparently the copied files contain references to at
    least the old cpd and pss files (and maybe others). I'm concerned
    that continuing down this path will corrupt V1 and leave me
    mis-matched conventions. Some files being V1, and some being V1.1.
    Is there a how-to somewhere that can help me create a new
    version and not muddy up the old? Do any X5 gurus remember how they
    did this?
    Thanks in advance,
    Keith

    Peter,
    Hopefully you'll see this. I tried you suggestion. Opened the
    old file and renamed the project. About 10 links came up broken
    that weren't broken before. Any ideas why this would happen. I
    didn't make any changes other than the rename.
    Thanks,
    Keith

  • Best Practice on Knowledge Management, IS01 Problems and Solutions

    Been Playing with KM and looking for insight from other users (will give points) using it for ICWC.
    We have mulitple product lines where we have documents with Q & A's in each line.  As I look at moving that into CRM via IS01, I am looking for any Best Practices or recommendations.
    1. Create a single problem and solution for every question.
    2. Create a single problem (list all questions)  for every product line and create multiple solutions that are linked to that problem (solution for each question)
    3. Is LMSW a good tool for loading data in mass?
    The ICWC search brings back the 1st line on the problem & solution on the screen, meaning I try to limit the characters used so it fits on the ICWC screen, a long 1st line on the problem doesn't allow the agent to see enough of the solution without opening the link.
    Thanks,
    Edited by: Glenn Michaels on Jun 14, 2008 9:52 PM

    Hello Glenn,
    If it helps, here's a scenario about KB on my company system.
    Our call center supervisors are the persons who creates problem and solutions in our KB. They maintain it but don't use IS01 transaction. They use instead  People Centric BSP's for Problem s and solutions (they're integrated in IC webclient with the help of transaction launcher).
    Normally, they prefer creating multiple solutions to one problem, instead of single problem - single solution method. This because some questions may have multiple solutions. They could put all the solutions text in one solution object, but for maintainance purposes we think it's better to create multiple solutions object to every solution text, because if one solution becames obsete, all we have to do is unlink instead of changing the text.
    We don't use LSMW. I don't have much experience in LSMW, but if you use it, be careful to respect KB interval numbers for problems and solutions. We implement an initial set of problems and solutions in our Development system, and we passed to the Quality and Produtive system, with the precious help of sap note '728295 - Transport the SDB customization between two CRM systems' and '728668 -Transport the content of the SDB between two CRM systems'.
    One cool idea to use the KB is using Auto-suggest feature. The idea is to integrate the links between problems and solutions with, for example, service ticket categorization, using BSP Category modeler, and when an agent classifies a ticket, at the top of the screen it will appear the suggested solutions/problems for the classification choosen.
    I think that's all.
    Sorry for my poor english. Today I'm not feeling very inspirated
    Kind regards.
    Edited by: Bruno Garcia on Jun 17, 2008 9:51 PM (added note 728668)

  • Best Practice for Installation of Both Leopard and Aperture 2 upgrade.

    I've finally bought the bullet and purchased both Leopard and Aperture 2.0 upgrade. I've tried searching for a best practice to install both, but haven't been able to find one--only trouble shooting type stuff. Any suggestions, things to avoid, etc would be greatly appreciated. Even a gentle shove to a prior thread would be helpful. . . .
    Thanks for pointing me in the right direction.
    Steve

    steve hutchcraft wrote:
    I've tried searching for a best practice to install...
    • First be really sure that all your apps work well with 10.5.3 before you leave 10.4.11, which is extraordinarily stable.
    • Immediately prior to and immediately after every installation of any kind (OS, apps, drivers, etc.) got to Utilities/Disk Utility/First Aid, and Repair Permissions. Repairing Permissions is not a problem fixer per se, but anecdotally many folks with heavy graphics installations (including me) who follow that protocol seem to maintain better operating environments under the challenge of heavy graphics than folks who do not diligently do so.
    • When you upgrade the OS do a "clean install."
    • RAM is relatively inexpensive and 2 GB RAM is limiting. I recommend adding 4x2 GB RAM. One good source is OWC: http://www.owcomputing.com/.
    • After you do your installations check for updates to the OS and/or Aperture, and perform any upgrades. Remember to Repair Permissions immediately prior to and immediately after the upgrade installations.
    • If you are looking for further Aperture performance improvement, consider the Radeon HD 3870. Reviews at http://www.barefeats.com/harper16.html and at http://www.barefeats.com/harper17.html.
    Good luck!
    -Allen Wicks

  • Best practice: team based development with JDeveloper and CVS?

    Hi all!
    I was wondering of what is the best way to work with Jdev 9i and cvs on a same project with 5 developers whereas
    all developers use the same JPRs and JWS?
    Which of the files should be checked in to the central CVS repository, which should be remained on the local machine of each developer?
    I assume, all java and xml files might be stored in the cvs repository. But how can we make sure that new files written by a member of the team will be added to my project?
    If we also check in the JPR and CFG files the merge of concurrent JPRs will fail and our project will be shreddered ;-)
    My question: what is your best experience with simultanous development on same projects?
    Any idea?
    Many thanks,
    Stefan

    1. Put everything that your project needs under CVS control:
    - buildscripts
    - BC4J jarfiles
    - BC4J generated files (java, xml, xcfg, jpx, cpx)
    - .properties, package.html, gif, ...
    - docu
    - install scripts
    - starter batch or exec, ...
    2. Each developer should have a own JPR and JWS file. In a seperate location those files could be checked in frequently to easy allow the setup of a new Developer workstation
    3. Use a sourcecode formatter (e.g. jalopy) on the BC4J generated java files to reduce merge conflicts because of empty lines generated by JDev dialogs
    4. Adding new files is no problem:
    - if you add new BC4J objects (AM, VO, ASC, EO, VL) also checkin the bc4j package XML so new files will be added.
    - set in project settings common / input paths - "Scan source path ..."
    5. Deleting BC4J files is a problem, because JDev does not automatically remove them from the project. So if someone deletes BC4J objects, you should close the project and delete it manually from the jpr file
    6. Close the project before making a CVS update wih external tool like Tortoise because of JDev caches
    Regards, Markus

  • Best Practice for new BI project

    we are about to start new BI project.
    what is the best practice to start new BI project
    1. start only with FI as poc
    2. more than one module does not matter if the project was planned and scoped well
    can you give me link to best practice in starting BI projects?
    Regards

    Hi,
    Please go through following links.
    Business Intelligence : Getting Started with Business Intelligence ,Reporting, Analysis, and Planning , Data Warehousing, BI Accelerator Embedded and Process-Centric BI
    https://www.sdn.sap.com/irj/sdn/nw-bi
    The Home of SAP Business Warehouse (BW)
    http://www.erpgenie.com/sap/sapfunc/bw.htm
    SAP Business Information Warehouse
    http://help.sap.com/saphelp_nw04/helpdata/en/b2/e50138fede083de10000009b38f8cf/content.htm
    Business Intelligence : Programming in BW
    https://www.sdn.sap.com/irj/sdn/wiki?path=/display/bi/programminginBW&
    BW and Portals 2005
    https://www.sdn.sap.com/irj/sdn/bi-and-portals2005
    SAP Business Warehouse (BW) Overview
    http://gleez.com/sap/bw/overview
    Business Intelligence : Steps to get started with SAP BW
    https://www.sdn.sap.com/irj/sdn/wiki?path=/display/bi/stepstogetstartedwithSAPBW&
    SAP Business Information Warehouse Scenarios
    http://help.sap.com/bp_biv335/BI_EN/html/Bw.htm
    SAP BW Learning Guide
    http://searchsap.techtarget.com/general/0,295582,sid21_gci1077480,00.html
    SAP BW Business Warehouse - Introduction
    http://www.thespot4sap.com/Articles/SAP_BW_Introduction.asp
    Business Content Frontend Design Guidelines (NW04)
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/bda556e9-0c01-0010-83b0-d519d6deb9e9
    How To…Create and Maintain UI Patterns of BI Content
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/ad214fe9-0c01-0010-4291-a629e5ba5f90
    SAP NetWeaver BI Integrated Planning for Finance
    http://www.sap-press.de/katalog/buecher/htmlleseproben/gp/htmlprobID-113
    Info object,infocube,infosource,datasource,commn structure,extract structure ..etc..
    http://www.erpgenie.com/sapgenie/docs/MySAP%20BW%20Cookbook%20Vol%201.pdf
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/01b9395c-0e01-0010-6786-c4ee5e5d2154
    BI Performance Tuning
    FAQ - The Future of SAP NetWeaver Business Intelligence in the Light of the NetWeaver BI&Business Objects Roadmap
    Business Intelligence Journal Improving Query Performance in Data Warehouses
    http://www.tdwi.org/Publications/BIJournal/display.aspx?ID=7891
    Achieving BI Query Performance Building Business Intelligence
    http://www.dmreview.com/issues/20051001/1038109-1.html
    SAP Business Intelligence Accelerator : A High - Performance Analytic Engine for SAP Ne tWeaver Business Intelligence
    http://www.sap.com/platform/netweaver/pdf/BWP_AR_IDC_BI_Accelerator.pdf
    BI Performance Audit
    http://www.xtivia.com/downloads/Xtivia_BIT_Performance%20Audit.pdf
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/10564d5c-cf00-2a10-7b87-c94e38267742
    Enhancements in SAP BW
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/59069d90-0201-0010-fd81-d5e11994d8b5
    Customer Enhancements in SAP NetWeaver BI (Exits, BAdIs and ABAP™ in the SAP NetWeaver BI Back End)
    http://www.sap.com/community/pub/showdetail.epx?itemID=5257
    BW 3.x and 3.5 "How To" Guides List
    https://www.sdn.sap.com/irj/sdn/docs?rid=/webcontent/uuid/ee14e25d-0501-0010-11ad-8eb2861a7ec0 [original link is broken]
    Assign ponits if it helps
    Thanks & Regards
    santo

  • Best Practice : Adding Android Versions to published iPad Folio

    Hi,
    I currently have an iPad Custom Viewer with a 239 page per orientation ( yes per orientation! ) folio, this is currently available on iTunes and published.
    We are adding Android 10.1" and Android 7" versions to this now.
    What would be the best method ( ie. least work ) to add the new screen sizes to the folio ?
    My options as I see it are :
    1. Use a different Adobe ID for the Android versions. This seems like the least work. Update and republish the iPad folio with all content unprotected to enable new Web Viewer feature with new Custom Viewer.
    2. Create a brand new folio with all renditions included. The problem with this is, I don't see a way to manually add all my _V iPad layouts to the alternate layouts. I literally have to set Object Based liquid layout rules for the _H and redo the _V using the rules.
    Is there a way for me too add renditions to the existing iPad folio ? Is it as simple as adding new screen sizes to the Folio Builder tool in InDesign ? Regardless I'd still need a starting point for the alternate layouts, and need to work from the iPad versions. Which brings me back to the end of Point 2.

    Hi.
    Each "rendition" is a folio, all published under same publication account. All renditions share common product ID. It is viewer's job to choose rendition best suitable for device.
    From my own experience, I publish all my magazines both on Apple and on Android with no different renditions. Yes on 7" screen the text is a little bit small for comfortable reading.

  • Best practices for using Normalizer in ASA and in AIP-SSM

    Both PIX OS 7.x and IPS 5.x software have a concept of "traffic normalization". PIX OS on ASA can do virtual reassembly, IPS on SSM (so far as I know) can do physical reassembly and fragmentation of IP packets. Also, both ASA and SSM can do TCP normalization. For example, they both can "check inconsistent retransmissions" and protect against "TTL evasion attacks". I realize that PIX OS has only basic normalization functions and the SSM is much more configurable.
    The question is: what are the best practices here? Is it better to disable some IP/TCP PIX OS checks / IPS signatures on ASA and/or SSM? Is it better to use just SSM for traffic normalization? Does anybody has personal experience here?
    Also, there is a BugID CSCsd04327 - "ASA all out of order packets are dropped when sending to ssm"
    "When ips ssm is inline slowness is reported. show service-policy shows that the number of out of order packets reported match exactly the number of no buffer drops (even with queue-limit option). Performance hit is not the result of tcp normalization (on IPS 5.x ssm) in this case, but rather an issue with asa normalizer."
    To me it seems to be more logical to have normalization function on the firewall, but there may be drawbacks in doing this.
    So, those who're using ASA with SSM, please share your experience.
    Thx.

    Yes, this is almost correct ;)
    TCP SRP (Stream Reassemly Processor) is turned OFF on the SSM and cannot be enabled, contrary to 4200 appliances, but IP FRP (Fragmentation Reassembly Processor) is functioning on the SSM.
    The testing of 7.2(1) shows the following:
    When you configure "policy-map" to send packets to the SSM the "tcp-map" parameter "queue-limit", which has the value of zero by default, is set to an X (the X is unknown). This means that the ASA now only accepts the TCP segments which are sent in the correct order. More specifically, the gaps in SEQs are not allowed anymore. When for example, the ASA receives a TCP segment which has a SEQ within the window, but the previous TCP segment has been lost, it sends an ACK to the sender to enforce retransmition of the lost segment. As a result the sender retransmits both segments. Only after that the ASA forwards both segments to the SSM. This basically means that SSM always sees in-order TCP segments. That it is why SRP is not needed on the SSM.
    There are at least two problems however.
    The first problem is the performance impact.
    ASA now acts almost like a proxy. And, so far as I know, it doesn't support SACK (Selective ACKs). First, when the ASA does TCP SEQ randomization it doesn't change SEQ values within the SACK TCP Option. This simply breakes SACK. Second, even if you turn randomization mechanism OFF, then, I believe, the ASA will not selectively ACK the lost TCP segments, as it simply doesn't support this mechanism.
    The second problem is THE SECURITY HOLE.
    By default the ASA doesn't check TCP checksums. The 4200 appliances do check by default. But as we now know the SRP is turned OFF on the SSM... So, this means that SSM module can easily be evaded. The hacker only needs to mix attacking traffic with the random TCP segments that have bad TCP checksum. The SSM module will see the mixture of the two and will not recognize the attack. The target host will drop TCP segments with the bad checksums and see only attacking traffic... This has been successfully verified in the lab.
    Of course, this security hole can be closed with the "tcp-map" parameter "checksum-verification", but it will definitely has performance impact.
    The last note: All of the above has never been documented by Cisco. So, use at your own risk, etc.
    I hope, you will read this message, Marcoa. All of this MUST be documented. Once again, the default behaviour of the ASA opens up a big security hole.
    Regards,
    Oleg Tipisov,
    REDCENTER,
    Moscow

  • Best Practice to fetch SQL Server data and Insert into Oracle Tables

    Hello,
    I want to read sqlserver data everry half an hour and write into oracle tables ( in two different databases). What is the best practice for doing this?
    We do not have any database dblinks from oracle to sqlserver and vice versa.
    Any help is highly appreciable?
    Thanks

    Well, that's easy:
    use a TimerTask to do the following every half an hour:
    - open a connection to sql server
    - open two connections to the oracle databases
    - for each row you read from the sql server, do the inserts into the oracle databases
    - commit
    - close all connections

  • Best Practices for sharing media with iMovie and FCPX

    So I've a large iMovie Events directory, and would like to use that media with both iMovie and FCPX projects.
    I'd rather not duplicate the media, so would prefer to import as references into FCPX.
    The dilemma is that I see that it's possible to modify or move media from within the iMovie application, and therefore break the reference to that media with FCPX.
    I only see two options:  (1) Never Ever modify the location/name of media in the iMovie Events file (even from within the iMovie app) since I would break an FCPX link if that media is referenced, or (2) always import (copy) the iMovie events into the FCPX Event Library making an independent original so that I can confidently operate on those media files in either application.
    I'd surely rather not have to do (2 )(e.g. doubling my storage demands) to gain the flexibility of using either application to edit the video, but really don't want to live with the restrictions of (1).
    Thoughts / Solutions?  What might you consider as options or best practices?

    Unless there is some other reason, users should own the right to share their mailboxes - it shouldn't be something that demands administrator management (if only so that the administrators aren't swamped by user requests for sharing their mailboxes). 
    For true shared mailboxes, when the mailbox is created, full access is granted by an administrator.

Maybe you are looking for

  • Vendor master Workflow

    Hi, I am thinking of designing custom Vendor Master Create\Change Approval Workflow. (1) However I did not see any events being triggered in event trace(SWEL) while creating or changing vendor master. could anybody shed me lights on triggering WF usi

  • How can I recover an earlier version of an Apple Notes document

    Hello, I must have deleted an earlier version of an Apple Notes document. My Mac is running OS X version 10.9.2. Apple Notes runs on my Macbook Pro and my Iphone 4S, and I've seen my Apple Notes documents on Icloud. However, the particular  doucment

  • Regarding file export

    Hi, I have some problem regarding file export from java to some word or excel. I have a Jtable in which I fill the data dynamically now I wan't to get that data into an excel sheet with just one click. Regarding .doc I am writing the file but how to

  • Duplicate records in a table

    i need to find duplicate records in a table that have the same name but a different id number. only fields i am using is the id, first name, last name, middle name any help would be great thanks

  • Displaying percentage total in ALV

    Hi, We have a requirement where we have to display a percentage value along with the subtotal and the totals.  We are doing the subtotal using the sort table LVC_S_SORT-SUBTOT.  Is there any way for displaying the percentage value in the same line it