ACE multiple loadbalancing policies help

Hi
I've configured my ACE to loadbalance all hits on a 2 servers farm. It's working, fine.
Now I want to loadbalance hits with a specific url on another farm, and it's not working (hits with the specific url are not logged in the new policy)
Here is what I've added :
1. A class-map to get my url :
class-map type http loadbalance match-all CLASSMAP_L7match http header Host header-value my.domain.com
2. A policy-map :
policy-map type loadbalance first-match POLICYMAP_L7  class CLASSMAP_L7    serverfarm FARM_2
3. A policy-map to get the L7 policy map :
policy-map multi-match POLICYMAP_L3L4  class L4-WEB-IP    loadbalance vip inservice    loadbalance policy POLICYMAP_L7    appl-parameter http advanced-options HTTP_PARAMETER_MAP
4. added the service policy on my interface
interface vlan 265  service-policy input ALREADY_EXISTING_POLICIES  service-policy input POLICYMAP_L3L4
I have to precise my class-map L4-WEB-IP is defined as
class-map match-all L4-WEB-IP  2 match virtual-address 17x.xx.xxx.xxx tcp eq www
So basically, when I'm trying a show service-policy POLICYMAP_L3L4 summary, I've got 0 hits.
So the other service policy (implementing the same class L4-WEB-IP, of course) is taking all the traffic.
Any thoughts ? Thanks for the help.

Hi Pablo
Thanks for the answer.
You're right, I'd deleted it since I was testing. I have put it back now, and... same result.
(loading subdomain.domain.com)
show service-policy POLICYMAP_L3L4 summary => Hit Count doesn't change
show service-policy WEB-to-vIPs summary          => Hit Count increase
To be ok, here is the full configuration again, with the corrections.
probe tcp PROBE_TCP  interval 30  passdetect interval 60rserver host 55LABS  ip address 172.16.0.1  inservicerserver host MICHELINE  ip address 172.16.0.2  inserviceserverfarm host FARM_55LABS  predictor leastconns  probe PROBE_TCP  rserver 55LABS    inservice  rserver MICHELINE    inserviceserverfarm host FARM_PHP  predictor leastconns  probe PROBE_TCP  rserver MICHELINE    inserviceparameter-map type http HTTP_PARAMETER_MAP  persistence-rebalanceclass-map match-all CLASSMAP_L3L4  2 match virtual-address xxx.xxx.xxx.161 tcp eq wwwclass-map type http loadbalance match-all CLASSMAP_L7  2 match http header Host header-value "subdomain.domain.com"class-map match-all L4-HTTPS-IP  2 match virtual-address xxx.xxx.xxx.161 tcp eq httpsclass-map match-all L4-WEB-IP  2 match virtual-address xxx.xxx.xxx.161 tcp eq wwwclass-map type management match-all REMOTE_ACCESS  2 match protocol ssh anyclass-map type management match-all TEST  2 match protocol icmp anypolicy-map type management first-match REMOTE_MGMT_ALLOW_POLICY  class REMOTE_ACCESS    permitpolicy-map type management first-match TEST_ALLOW  class TEST    permitpolicy-map type loadbalance http first-match HTTPS_POLICY  class class-default    serverfarm FARM_55LABS    insert-http x-forward header-value "%is"policy-map type loadbalance first-match POLICYMAP_L7  class CLASSMAP_L7    serverfarm FARM_PHPpolicy-map type loadbalance http first-match WEB_L7_POLICY  class class-default    serverfarm FARM_55LABS    insert-http x-forward header-value "%is"policy-map multi-match POLICYMAP_L3L4  class CLASSMAP_L3L4    loadbalance vip inservice    loadbalance policy POLICYMAP_L7    loadbalance vip icmp-reply active    nat dynamic 1 vlan 2369    appl-parameter http advanced-options HTTP_PARAMETER_MAPpolicy-map multi-match WEB-to-vIPs  class L4-WEB-IP    loadbalance vip inservice    loadbalance policy WEB_L7_POLICY    loadbalance vip icmp-reply active    nat dynamic 1 vlan 2369    appl-parameter http advanced-options HTTP_PARAMETER_MAP  class L4-HTTPS-IP    loadbalance vip inservice    loadbalance policy HTTPS_POLICY    loadbalance vip icmp-reply active    nat dynamic 1 vlan 2369    appl-parameter http advanced-options HTTP_PARAMETER_MAPinterface vlan 265  ip address xxx.xxx.xxx.170 255.255.255.240  peer ip address xxx.xxx.xxx.171 255.255.255.240  access-group input ANY  service-policy input REMOTE_MGMT_ALLOW_POLICY  service-policy input WEB-to-vIPs  service-policy input POLICYMAP_L3L4  class CLASSMAP_L3L4    loadbalance vip inservice    loadbalance policy POLICYMAP_L7    loadbalance vip icmp-reply active    nat dynamic 1 vlan 2369    appl-parameter http advanced-options HTTP_PARAMETER_MAPpolicy-map multi-match WEB-to-vIPs  class L4-WEB-IP    loadbalance vip inservice    loadbalance policy WEB_L7_POLICY    loadbalance vip icmp-reply active    nat dynamic 1 vlan 2369    appl-parameter http advanced-options HTTP_PARAMETER_MAP  class L4-HTTPS-IP    loadbalance vip inservice    loadbalance policy HTTPS_POLICY    loadbalance vip icmp-reply active    nat dynamic 1 vlan 2369    appl-parameter http advanced-options HTTP_PARAMETER_MAPinterface vlan 265  ip address xxx.xxx.xxx.170 255.255.255.240  peer ip address xxx.xxx.xxx.171 255.255.255.240  access-group input ANY  service-policy input REMOTE_MGMT_ALLOW_POLICY  service-policy input WEB-to-vIPs  service-policy input POLICYMAP_L3L4  no shutdowninterface vlan 2369  ip address 172.31.255.250 255.240.0.0  alias 172.31.255.249 255.240.0.0  peer ip address 172.31.255.251 255.240.0.0  access-group input ANY  nat-pool 1 172.31.255.248 172.31.255.248 netmask 255.240.0.0 pat  service-policy input TEST_ALLOW  no shutdownft track interface  VLAN265  track-interface vlan 265  peer track-interface vlan 265  priority 50  peer priority 5
Thanks again.
Laurent

Similar Messages

  • Is there any other way to achieve per user call forward restriction other than to create multiple voice policies?

    Hello,
    We mentioned the environment details below:
    Environment
    In our PBX environment, currently a user can forward calls to any local (within a region) internal extension. But for external PSTN call forwarding, a user needs to send a request and be approved by their manager. And the forwarding restriction
    is applied such that user is only allowed to forward to that particular PSTN number - to prevent toll fraud.
    Moving forward to Lync, using voice policy's call forwarding and simultaneous ring PSTN usages, I can set it to allow forward and simultaneous ring to custom PSTN usage and a custom route that will only send calls to these pre-approved
    external numbers.
    Outcome
    But in such a scenario,
     sSince all the custom external allowed numbers will have to be put into a single Route match table, User A will be able to successfully
    set up call forward to User B's number. (if they come to know about it somehow, that is)
    rü 
    Route matching list will be very long due to the number of users per hubsite that has call forwarding enabled.
    Questions
    Is there any other way to achieve per user call forward restriction other than to create multiple voice policies ? MSPL may be ?  
    2. Is there a limit in the number of entries you can have on the Route pattern matching regex expression ?
    Please advise. MANY THANKS.

    1) I think multiple policies may be your best bet, though it's not a fun one to manage, I agree.  MSPL could do it, but it would be more complex to maintain in the end.  Even gateways have limitations on routes.
    2) I'm not aware of a limit, though I'm not saying there's isn't one.  But if you hit it, you could move to a second usage/route combo.
    I'd suggest building out some PowerShell usage/route creation/organization script for this so it's not something that would need to be maintained within the GUI.
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
    SWC Unified Communications
    This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

  • HOW TO - Create new from clipboard and process multiple files - please help

    Need help - have new version of photoshop on trial only ATM...
    Want to know - HOW TO:
    1. Create new from clipbaord
    2. Process multiple files
    Please help.

    For clipboard copy, I start with File > New and the size will be set to what's in the clipboard. Then once the new file is opened, Edit > Paste will place the clipboard contents as a layer in the new document.
    You must remember to use the command Layer > Flatten Image of you want to save as jpeg or any other file format that doesn't support layers.
    For processing multiple files,
    File > Automate > Batch or
    File > Scripts > Image Processor...
    Check the User guide or google information for those commands if you have specific needs.
    Gene

  • How do I total across multiple Tables? Help!

    how do I total across multiple Tables? Help!
    I feel like a complete noob.

    Hi Marc,
    There is no function explicitly for that sort of array calculation in Numbers.
    My favorite way is to use a list of Table Names and the INDIRECT(ADDRESS) function combination to produce a SUM across tables. I'm making the assumption that you want to do something like adding up all the values in a particular cell of multiple tables.  For example "give me the total of all the A1 cells in tables T1, T2, T3 and T4".  For this I would use the formula:
    =INDIRECT(ADDRESS(1,1,1,,A))
    to grab the cell contents of the table names mentioned in column A of a summary table.  Once you have them collected in your summary table, add them up.
    Here's a screen shot...
    Hope that gives you an idea for approaching this problem.
    Jerry

  • Multiple Access Policies

    I have the WRT54G2 and am trying to set up multiple access policies but am having trouble. Basically I want to restrict my kids devices from access at night during the week and allow access later during the weekends.
    I have the policies set up as:
    Policy 1: Su, M, Tu, W, Th allow 7am to 10:30pm (2 MAC addresses)
    Policy 2: Fri, Sat allow 24 hours (same 2 MAC addresses)
    The first policy works just fine, stopping access at 10:30. However, access is denied on Friday and Saturday, the second policy never seeming to kick in.
    I've tried multiple configurations to no effect. For example, adding Friday and Saturday to the first policy (which allows access until 10:30 of course). I also tried having the second policy start at 10:30pm (and earlier) and ending just before midnight.
    What am I doing wrong here?
    Thanks.

    Try to design your policies as 'deny' the timeslots you want your kids not to be allowed access

  • Security exception when provisioning using multiple access policies

    We have upgraded our eDirectory connector to version 9.0.4.12. When provisoning manually all process tasks work correctly. However, when provisioning through an access policy or multiple access policies, once the edirectory Create User task runs it creates a security exception and all other connectors fail to provision until retried. We have set the system config parameter of Access Policy Multiple Resource Enhancement to TRUE and we have set the account discirminator in the process form to Server. Why would it fail?

    I have the same problem. Have you solved your problem, if so please let me know what the solution is.
    Einar �rn

  • Belong to Multiple Access Policies

    Hello,
    I am curious about everyone else's experience with access policies being maintained by groups, and some users belonging to multiple groups and multiple access policies. Example:
    John Doe belongs to group1 and group2
    Order
    1
    AccessPolicyA
           Selected groups: group1
           Blocks access to URL xyz.com
    2
    AccessPolicyB
           Selected groups: group2
           Allows access to URL xyz.com
    Will the WSA check all access policies that John Doe authenticates to? Or will it stop and use the first access policy that he hits, in this example AccessPolicyA?

    It is a bit of a hassle, but we had to reorder our access policies thinking in a top down approach as well.
    Also you can create AD global security groups specifically for Internet access if you'd like.  Prefix it with something that makes sense so they are all together in AD.  We use IG-  (IG stands for Internet Group).  So we have AD groups called IG-RestrictedInternet or IG-SocialMedia.
    If your in Restricted intenret, your totally restricted  except for a few sites we allow.  If your not in a group you have general internet access except for time wasting stuff like facebook.  If your in IG-SocialMedia then you have all the general internet access PLUS social media like facebook, linkedin, etc...  This is usually given to marketing or HR people.
    So while annoying, there are ways to think about how to handle this.  I can see your point say you are a Manager of the marketing department. Well you might be in an AD group for marketing as well as an AD group for management.  In this case our Management policy would come above the marketing policy.  So if your not doing specific groups then you can just order them by employee position hierarchy with usually management / hr on top.

  • SSL Multiple Tunnel Groups with Multiple group policies

    Hello folks.
    Have a query and cant seem to find an answer on the web.
    I have configured SSL Clientless VPN on a lab ASA5510, using 2 tunnel groups, one for enginneers and one for staff, mapped to 2 different group policies, each with different customisation. I have mapped the AD groups to the tunnel groups using both ACS and now LDAP (currently in use), both working successfully, using group lock and LDAP map of IETF-Radius-Class to Group name ensures engineers get assigned to the engineers tunnel group and staff get mapped to the staff tunnel group only.
    The question i have is....is there a way to use a single tunnel group to map the user based on AD group which will then use the correct Group-policy (1 tunnel group to multiple group-polciies). I have seen examples of doing this with different URLs but want to know if they can all use the same URL and avoid using the drop down list using aliases.
    It may be a simple "No" but it would be nice to know how to do it without using the URLs or drop down list. Users are easily confused ......

    Easy. Disable the drop-down list, and use the authentication-server (LDAP or Radius) in the DefaultWEBVPNGroup. By default when you browse to the ASA, it will be using the DefaultWEBVPNGroup. Let LDAP or Radius take care of the rest.
    You will get the functionality you are looking for.
    HTH
    PS. If this post was helpful, please rate it.

  • Can I get the IP of a device that connects to the internet?  My device stolen.  Need this info to get police help

    Hi, My iPad1 is stolen. There is no way to track - the only option is erase.  So I did.  It was erased yesterday, which means it connects to the internet.  If I can have the IP, the police can help me.
    Yesterday some agent told me you apple guys can only reveal the IP information to the police.  But when I call the police officer and talked to your Higher Agent, even sharing his police badge Number, She told me that you don't store IP info.  I felt being fooled.  Sorry to say so.
    Could u please do me a favor to escalate this?  Since there are lots of Valuable and Sensitive data on my other stolen devices.  I definitely will be super appreciated if I can get my stuff back.
    Please don't say no to me.  I am a IT person myself.  I am pretty sure there must be some traces on the server(s) of Apple, maybe in some log files.
    Please do HELP me!
    Thanks!
    Peng

    Please be aware that you are not communicating with Apple when you post in these forums. These are user-to-user support forums, so in almost all cases the only people who will reply to your posts are, like me, your fellow users.
    And no, Apple cannot determine the IP address of your device. There is absolutely no way they could. Nothing they do would track and store the IP address of your iPad. Even with an IP address, and even assuming it was a current IP address, locating the device from that IP address would be very difficult and require probably multiple court orders and a lot of effort. I very much doubt that the police would go to that much trouble for a single stolen iPad.
    Sorry, but there is nothing Apple nor any of us here can do to help you.
    Regards.

  • ACE 4710 Loadbalancer Weblogic Issues

    Hi Guys,
    Having some issues with my Loadbalancer and weblogic. Eventually i want to SSL Forwarding and everything set up but as of now I can only access the VIP under port 7001 (default weblogic port.) How would i get it so I can access via HTTP. My Config is below.
    PA-ACE-4700-SLB/Admin# changeto Prod-Support
    PA-ACE-4700-SLB/Prod-Support# show run
    Generating configuration....
    access-list allow line 8 extended permit ip any any
    probe icmp PROBE_SERVICE_ICMP
      interval 5
      passdetect interval 5
      receive 5
    probe tcp TCP443_PROBE
      port 443
      interval 5
      passdetect interval 5
      receive 5
      connection term forced
      open 2
    probe tcp TCP7001_PROBE
      port 7001
      interval 5
      passdetect interval 5
      receive 3
      connection term forced
      open 2
    probe tcp TCP80_PROBE
      interval 5
      passdetect interval 5
      receive 3
      connection term forced
      open 2
    rserver host 228-WLS11host1
      ip address 192.168.211.228
      inservice
    rserver host 229-WLS11host2
      ip address 192.168.211.229
      inservice
    serverfarm host WLS11-7001
      probe TCP7001_PROBE
      rserver 228-WLS11host1
        inservice
      rserver 228-WLS11host1 7001
      rserver 229-WLS11host2
        inservice
      rserver 229-WLS11host2 7001
    sticky http-cookie ACE_COOKIE-7001 7001_STICKY
      cookie insert browser-expire
      replicate sticky
      serverfarm WLS11-7001
    class-map type http loadbalance match-any L5
      2 match http url .*
    class-map match-all WLS11-7001-CLASS
      2 match virtual-address 192.168.211.50 tcp any
    policy-map type loadbalance first-match WLS11-7001-Policy
      class L5
        sticky-serverfarm 7001_STICKY
    policy-map multi-match WLS11-SLB
      class WLS11-7001-CLASS
        loadbalance vip inservice
        loadbalance policy WLS11-7001-Policy
        loadbalance vip icmp-reply active
        nat dynamic 1 vlan 1000
    interface vlan 1000
      ip address 192.168.211.226 255.255.255.0
      access-group input allow
      nat-pool 1 192.168.211.50 192.168.211.50 netmask 255.255.255.255 pat
      service-policy input WLS11-SLB
      no shutdown
    ip route 0.0.0.0 0.0.0.0 192.168.211.235
    Thanks for any help you can provide.

    Hummm,
    Andy
    1) Can you modify this?
    class-map type http loadbalance match-any L5
      2 match http url .*
    to look like this:
    class-map type http loadbalance match-any L5
      2 match http url /.*
    2)Can you do this:
    serverfarm host WLS11-7001
      probe TCP7001_PROBE
      rserver 228-WLS11host1 7001
      inservice
      rserver 229-WLS11host2 7001
      inservice
    3)Can you clear all the browser´s cookies and/or open a new browser window? It might be possible that some clients are stuck to the servers with does not have hardcoded the port.
    4)Can you do:  clear stats loadbalance?(won´t affect anything)
    5)Then generate traffic
    6)Then get:
    #show service-policy WLS11-SLB class-map WLS11-7001-CLASS detail
    #show stat http
    Jorge

  • Active directory Schema - Multiple password policies

    Hi All,
    I am new to AD and would need some suggestion to configure AD. I want to set up AD(2008 R2) for three categories of users: individual, dealers and organisations. Each dealer and each organisation will have further sub-categories based
    on their location. I want to set up separate password policies for the above three categories using AD. I wanted to create them as separate OUs. So I would have multiple OUs for each dealer per location (e.g. individual, dealer1loc1, dealer1loc2,
    dealer2loc3 and so on)
    I know the concept of PSO(Password Settings Object) and that it can only be applied to OU using shadow groups and batch file (to copy users from OU to Shadow Groups). The issue is that the OUs would keep getting added as per requirement (would
    be  creating new OUs using C#) and then the management of PSO or shadow groups or batch file would be very complicated, not sure if it can be automated.
    Also, I have budet constraints to add new servers for each domain and separate password policies.
    What could be the possible solution to separate password policies and set up this user structure in Active Directory. I am using W2k8 R2.
    Thanks.

    Thanks Mahdi. In this case, the OUs would get created at run time, so the script needs to get updated at run time as well. I guess this will be not easy to automate.
    Also, can you confirm if I can set up separate password policies by creating sub domain(e.g. example.com will be divided into sales.example.com and admin.example.com and this would further be divided as melourne.sales.example.com and sydney.sales.example.com)
    and I can set separate password policies for sales.example.com and admin.example.com.
    By adding child domains,it is like you are killing a mosquito with a rocket launcher, if you know what I mean. adding child domains increase the cost and administration and also adds complexity to your environment.
    From technical perspective it is OK to have child domains, but if I were you I would not add that much complexity to my environment because of a script. I would spend enough time or get help form a skilled script writer to edit the script. Also I am saying
    that editing your script to a fully automated script is not impossible, it just needs enough time and skills.
    Mahdi Tehrani   |  
      |  
    www.mahditehrani.ir
    Please click on Propose As Answer or to mark this post as
    and helpful for other people.
    This posting is provided AS-IS with no warranties, and confers no rights.
    How to query members of 'Local Administrators' group in all computers?

  • SRP547W Multiple IPSec policies through single IKE policy

    I am trying to create a VPN between an SRP547W and a Cisco IOS router, in this case a UC540.I am running firmware 1.2.4 (003) Jan 11 2012
    Now I can do this with an SRP527W and many other routers successfully. Including other IOS routers 1801, 1941 etc.
    The issue I have is on the SRP547W I cannot create more than one IPSec Policy through a single IKE policy. I require this to route multiple vlans to our remote site.
    When I try to add an additional IPSec Policy I am give the error "IKE policy has been used by other IPSec policy"
    This is possible to do on the SRP527W with latest firmware. I have tried rolling back to earlier firmware but instead I am given an error about overlap.
    Latest release note for this firmware suggest this issue was already resolved.
    Any help much appreciated.

    Hello Matthew,
    Sorry to hear you are having difficulty.
    I was able to test this on firmware 1.02.01 and get the overlap error that you mention. I resolved it by choosing "IP address & subnet mask" in the local selection field. When I used "IP Address" I received the same error unless I changed the IP address to something (other that the one used in the first policy) under the local traffic selection then it allowed a succesful submission. The remote traffic selector or ip address doesn't not have any bearing on the error.
    Are you using the same local IP address for each IPSec policy and if you are, try changing the local IP selector to IP+Subnet mask. Also as a reminder, the number of IPSec policies is based on bandwidth limitations and most often no more that 2 site-to-site tunnels can connect at a single time.
    Please let me know if this helps.
    Best regards,
    Wesley S.
    Cisco SBSC

  • I am having a big problem. I am not getting notifications from snapchat and only snapchat. I've made sure every notification setting was on and it just won't work. I have also restored my phone and deleted the app and re-downloaded it multiple times. Help

    I am having a big problem. I am not getting notifications from snapchat and only snapchat. I've made sure every notification setting was on and it just won't work. I have also restored my phone and deleted the app and re-downloaded it multiple times. It just wont give me my notifications. Help please.

    Go to Settings > Privacy > Location Services.
    Turn off SnapChat.
    Go to Settings > Notification Center
    Turn off SnapChat.
    Restart the device.
    Go to Settings > Privacy > Location Services.
    Turn on SnapChat.
    Go to Settings > Notification Center
    Turn on SnapChat.
    Test the issue.

  • Need assistance searching records from multiple tables - Please Help!

    Hi, I've been trying to solve this problem for several weeks now, and I have exhausted all of my knowledge and experience.  I need help, and I hope someone here can give me some direction.
    I am using VB 2008, and the CR that comes bundled with VS 2008 Pro.  My database is a SQL Server 2005 CE v3.5 (a *.sdf file).  I am connecting to the database through a dataset, and I am displaying the report in a CrystalReportViewer.
    My dataset consistes of two tables:
    1) tblCustomers which has a primary key "CustID", and contains only customer contact and personal information. 
    2) tblDateVisited which has a primary key of "VisitID", but it also has a column titled "CustID". Basically, every time a customer visits the business, details of that visit are recorded in tblDateVisited, and that record is associated with the customer by their CustID.
    Here's what I'm trying to accomplish:  I want to be able to display only Customer records when the customer has visited and that visit matches certain criteria.  Right now, I am trying to match visits from the "tblVisitDate.PlayerType" column.  If the customer has ever had a visit where they matched a particular player type, I want to see those customer records.
    I don't know what I'm doing wrong, though.  I can search a dataset if I am only querying one table and pulling records from that table.  However, whenever I try to add a second table and perform queries on that table to get records from the first table, I can't return any records. 
    If it helps, I am trying to use one CrystalReportViewer to display multiple reports (user choice) and here's how I'm loading the report into the viewer:
    Me.tblCustomersTableAdapter.Fill(Me.dsPlayerTypeReports.tblCustomers)
    Me.tblDateVisitedTableAdapter.Fill(Me.dsPlayerTypeReports.tblDateVisited)
    Me.ReportFile.SetDataSource(dsPlayerTypeReports.Tables(1))
    I am suspicious that my problem is in the Tables(1) method.  It confuses me that I can only assign one table as a datasource when I obviously need access to two tables to make this selection work. 
    Whatever the case, I'm at the end of my rope with this one.  I'm not prone to giving up, but I'm at a dead end currently. 
    Any attempt to assist me with this will be greatly appreciated, successful or not.
    Thanks in advance!
    -Will

    No, I am connected via ADO.NET.  I don't think SQL CE can connect through ODBC (or if it can, I haven't been able to figure out how, yet).  So this isn't a stored procedure.
    When I examine the link, I can only choose an Inner Join or a Left Outer Join.  Right Outer and Full Outer are not available.  Could this be a problem with the dataset I'm using?
    Could you explain what you mean by display all of the records and then choose the selection criteria?

  • Multiple Adobe CEF Helper, Conhost, icalcs.exe in Windows 8.1 Autostart

    While checking some autostart apps, that I could possibly deactivate, I found something strange.
    There are multiple entries for "Adobe CEF helper", "Conhost" and "icacls.exe". All grouped under the Adobe Creative Cloud.
    On my other machine, Conhost and icalcs.exe don't appear at all and Adobe CEF helper only once.
    They do not noticeably create any errors, however, it's not feeling right. I don't know exactly when these entries appeared for first time. The device is pretty new and I just installed a bunch of work related software like Office 365, Adobe CC, Chrome, ...
    When installing Filezilla, some bloatware/adware was automatically installed on the system (blame sourceforge, see download comments over there). Currently I'm testing Kaspersky Internet Security, 30 days trial. But I don't think none of them is to blame.
    I would personally like to avoid reinstalling Adobe CC, because it lasts forever.
    Q: What might have caused these entries? Should I correct it? And how should I correct it?
    System: Windows 8.1 64bit on an fairly new ASUS GL550JK.
    Thanks.

    Update: I reinstalled the whole system and it still shows up.
    Directly after the installation of Adobe CC, only Adobe CC showed up in the Autostart menu. Even after a restart still nothing (and the entry still had "boot time - no measured"). After the boot time was measured, same subentries as above appeared.

Maybe you are looking for

  • Payment Terms no working

    Hi Friends I have a vendor  5025786 for co.code 1200, who has consignment documents as well as IR's posted through MIRO. The payment terms on the master record is NT30, but when the consignment documents get posted to the vendor's account it does not

  • Slow download speeds for my photo/travel blog downloads- how can I speed up

    I am trying to make some modifications to my iweb photo/travel blog site to shorten the time it takes to download, particularly on visitors using pc's. It takes over a minute to download a days post if visitor has ultra fast connection speed and 2 or

  • Parsing XML with html tags for style

    I'm using flash to pull in XML data, but I want to use html tags to be able to style the text. When I add any html, it treats it as a sub-node and ignores the data. Also, line breaks in the xml are being converted to double spaced paragraphs? The rel

  • PHP to coldfusion software

    Does anyone know if there is a software to convert php to coldfusion or what is the quickest way to do this. We have extremly large sites which are all done in php and we prefer to use cf so my boss wants it converted. Any suggestions

  • Exchange 2013 EAC will not run with Exchange 2010 CAS\HT servers shut down.

    Hi Folks, A little background - We have just migrated all our user mailboxes and public folders to Office 365 using a hybrid configuration. Now that the migration is essentially finished, I'd like to decommission our on-prem Exchange infrastructure a