Backup or redundant ISP with FWSM and security contexts...

Hello guys,
I am in a middle of a dessign problem. We have 2 ISP, and we have a FWSM running multiple contexts, my context that is receiving all the static translations for all my published servers is the one where i want to configure default gateway tracking (so it can go out to an "outside2" interface in case the primary fails) and use the second ISP link for internet access and static nat. Just the exact way the ASA works.
I am not quite sure it works with FWSM.
Thanks a lot!
emilio

Hello Emilio,
You cannot configure SLA monitoring on the FWSM at this moment.
Maybe in the future this great feature will be added to this modules.
I know the 6500 supports it so you can try to set it up there.
Regards,
Julio

Similar Messages

Problem with FWSM and L3 interface in same switch

I have two 6513s with an 802.1q trunk connecting them. Each switch has redundant Sup720s running in Native mode, IOS ver 12.2(18)SXF (they were initially running SXD3). A FWSM (ver 2.3(3), routed mode, single context) is in each switch, setup in failover mode.
I can not get a PC, in a vlan that has the layer 3 interface defined on the switch with the active FWSM in it, to communicate with devices "behind" the FWSM. If I move the layer 3 configuration for that vlan to the other 6513, everything works fine.
The MSFCs are on the inside of the firewall, they have a layer 3 interface configured in the same vlan as the FWSM "inside" interface. Several "same security level" interfaces are defined on the FWSM and used to protect server farms. I am using OSPF on the MSFCs and FWSM and the routing table is correct.
The FWSM builds connections for attempts made by the PC with the layer 3 interface defined on the same switch as the active FWSM just fine, so this is not a FWSM ACL problem.
A ping of the FWSM "inside" interface from a PC with the layer 3 interface defined on the same switch as the active FWSM fails, even though debug icmp trace on the FWSM shows the request and the response. A packet capture, using the NAM-2, shows only the request packets. I have captured on the common vlan and the FWSM backplane port channel interface.
Just to add to the confusion, if I capture in the same places, but do the ping from a PC that is in a vlan with the layer 3 interface defined in the 6513 that does not contain the active FWSM, which works fine, I see the request and reply on the common vlan capture, but only the request on the port channel capture.
This problem has been there from the beginning of this implementation and has not changed with IOS and FWSM software upgrades. I have experienced this with any and all vlans that I tried to define the layer 3 interface for on the switch with the active FWSM. I have MLS turned on.
If anyone else has experienced this and solved it, or knows what is going on, I would appreciate any insight.
Thanks.
Keith

I will have to get setup to record more data, but I do know the FWSM showed a ping request and a ping reply at the "inside" interface.
I believe my problem is related to the IOS command "firewall multiple-vlan-interfaces" which I put in place to allow IPX traffic to be brought around the FWSM. The little documentation that there is for this command, states that policy routing may need to be implemented to prevent ip packets from going around the firewall. I do not have any policy routing in place.
I also do not have any active layer three interfaces defined for any of the vlans assigned to the firewall except the "inside" interface. So my resoning was that I did not need to be concerned about ip packets having a way around the FWSM. My suspicion is that this command and the fact that I have mls on is causing some type of a problem which results in the packet being "lost" when it needs to be going through the MSFC in the switch with the active FWSM to get to the PC. Hopefully that makes some sense.
Do you have any idea where better documention on using the "firewall multiple-vlan-interfaces" may be, or a better explanation of all that is happening inside the switch when that command is used?
Thanks.

Bursting with translation and security attributes?

Hi folks,
I've been lurking on the forum for a while and despite not always finding a solution, existing threads normally pointed me in the right direction - so thanks :)
I'm working on EBS 11.5.10 with the latest Bi-Publisher 5.6.3 (5472959) and bursting (5968876) patches installed.
I have successfully done the following individual AR Invoice Bi-Publisher tasks:
1. translated an invoice RTF template by attaching an xliff file to the data definition,
2. applied security attributes to the template to restrict updates on the resulting PDF,
3. burst a custom AR invoice print and emailed the resultant pdf's.
The PDF generated by the combined Invoice print correctly applies the translation and security attributes; however when I run the "XML Publisher Report Bursting Program" to the XML file the resultant burst PDF's do not apply the translation or security attributes. I assume this a limitation of bursting control files? If so, is this on the list of future enhancements to Bi-Publisher?
Here's an example of my control file document entry, I have included locale and pdf-security entries - these don't cause an error but equally don't generate the desired result (p.s. I know I'm emailing on a PRI filter - it's just a test):
<xapi:document output-type="pdf" delivery="att_email">
<xapi:template type="rtf"
location="/usr/tmp/xxxINVOICE3.rtf"
locale="fr-US"
pdf-security="true" pdf-encryption-level="1" pdf-permissions-password="xxxxxx"
filter=".//G_INVOICE_HEADER[PRINTING_OPTION='PRI']" >
</xapi:template>
</xapi:document>
Thanks
Dave

=================
==Properties Idea's
=================
You would have happened to try applying the security stuff in the application for your template? Try that and see if the pdf properties get set.
If that doesn't work your left with two options:
1. create a java concurrent program and set the properties manually.
2. Log a tar.
=================
==local idea's
=================
Are you sure you don't have to create template config for the locale? i suspect that's why it's not applying the xliff translation. Also, your NLS_LANG needs to be set to FRENCH for the approriate template to be applied. If your logged-in as english your french format template will not be applied, neither will the translation. As an example you can query vl table and you'll only get american (us) but if you alter your session you'll get the translation for that language when your query the table.
location="xdo://xxxAR.xxx_XML_PRINT.fr.US"
try it out and see if that works. Note: This will only work if your session NLS_LANG is set to FRENCH.

Using Search Help with ALV and Dynamic context node

The topic subject already describes my situation.
I have to create, populate and remove context nodes at runtime, and bind them to an ALV, to let user display the data or modify the data. The nodes I create are always typed with a table name, but the table name is of course, dynamic.
This is all working: what's not working is help for entries inside the ALV; since the table has foreign keys and domains with check tables or fixed values, I expected that search helps were detected and managed by the framework.
Instead, no help search is displayed except the input help based on data-type of the one "Date" input fields.
I think I have to work on the dynamic node creation, and not on the ALV itself, since the latter only takes the node/attributes information, but i could be wrong. I tried with both the two following codings:
CALL METHOD lo_nd_info_root->add_new_child_node
    EXPORTING
      static_element_type          = vs_tabname
      name                         = 'SAMPLE_NODE_NAME'
*    is_mandatory                 = abap_false
*    is_mandatory_selection       = abap_false
     is_multiple                  = abap_true
     is_multiple_selection        = abap_false
*    is_singleton                 = abap_false
      is_initialize_lead_selection = abap_false
      is_static                    = abap_false
    RECEIVING
      child_node_info              = lo_nd_info_data .
cl_wd_dynamic_tool=>create_nodeinfo_from_struct(
      parent_info = lo_nd_info_root
      node_name = 'SAMPLE_NODE_NAME'
      structure_name = vs_tabname
      is_multiple = abap_true ).
The result is the same...is there any way to let the ALV know what search helps it has to use, and doesn't force me to manually build a VALUE_SET to be bound on the single attributes? There are many tables, with many fields, and maintaining this solution would be very costly.

I have checked with method GET_ATTRIBUTE_VALUEHELP_TYPE of interface IF_WD_CONTEXT_NODE_INFO, on an attribute which i know to have a search help (Foreign key of a check table).
The method returns 'N', that is the constant IF_WD_VALUE_HELP_HANDLER~CO_VH_TYPE_NO_HELP. So, the framework was not able to find a suitable search help.
Using method GET_ATTRIBUTE_VALUE_HELP of the same interface, on the same attribute, returns me '111', which is constant C_VALUE_HELP_MODE-AUTOMATIC.
Therefore, the WD framework knows it has to automatically detect a value help, but fails to find one.
Also, this means in my opinion that the ALV and the dynamic external mapping are not the culprits: since node creation, no help is detected for any attribute but the date. Honestly, I don't have a clue on what's happening.

Time Machine backup/restore on iMac with SSD and HD...

Time Machine backs up the SSD and HD on my iMac into one "sparse bundle" for the computer. I need some direction on how to get to the HD backup in order to restore individual files and folders.
PLEASE do not give an answer like "Just enter Time Machine and click Restore." I have been trying to get this to work for hours - if it was so easy, I would not be asking. (I don't mean to sound rude so please don't be offended.)
Thanks for any help.

Sorry, Bob, I see that I didn't say at the beginning of this discussion, but the SSD has all my applications and OS X system. The purpose for the SSD is to run the system and apps faster, while having all files/documents on the slower and larger HD.
So my home folder (my UserName) in the left panel is on the SSD. I have no problem accessing the SSD backups in Time Machine.
When I choose the MacHD in Time Machine, I cannot select a date from the timeline of backups on the far right because all the backups are grayed out (not available). Choosing the SSD gives no access to the files from the separate HD.
I also have a MacBook Pro. It is backed up to the same Time Capsule using Time Machine and has its own separate "sparse bundle." But the iMac puts both of its separate drives into the same sparse bundle. I asked the Apple Support person I spoke with the other day whether I should have separated them before doing the backup, but he said no - it is backed up correctly.
Does anybody out there know if Apple has any specific support articles about using the two separate drives on one computer, whether for backup and restore or for any other purposes?

Problems with RemoteObject and security sandbox errors

I'm having trouble with an AS3 AMF RemoteObject request that is hosted on Google App Engine. I have a crossdomain.xml file in the root of the domain, and also one at the remoting endpoint.
Here are the contents of the root crossdomain.xml:
<?xml version="1.0"?>
<cross-domain-policy>
<site-control permitted-cross-domain-policies ="all"/>
<allow-access-from domain="*.appspot.com"/>
<allow-access-from domain="*.{appid}.appspot.com"/>
<allow-access-from domain="*.{appid}.com"/>
<allow-access-from domain="*.{appid}.org"/>
</cross-domain-policy>
I have replaced my application's ID with {appid}. In the endpoint crossdomain.xml, it says the exact same thing, except it omits the <site-control> tag.
Loading the swf file and testing it on my machine works just fine... I think that may have something to do with me having the debugger version of Flash Player. When I push it up to App Engine to make it public, other clients access it and get a Client.Error.MessageSend Channel.Security.Error error Error #2048 url: http://05-alpha.latest.{appid}.appspot.com/_rpc/data.
I am using Flex 4 beta, and the App Engine Python runtime. I have tried full wildcard in the crossdomain, and even accessing the data endpoint at a relative URL so as to avoid this error.
Someone please help! Thanks in advance.

The error happens regardless of where I access it (the beta URL, the production URL, etc).
That's literally all the actionscript code for the remote object... I've included an extended snippet below, but I have no idea why the SWF would be trying to access localhost.
Even on my development machines (where it seems to work), there's nothing running on the host/port combo it's trying to access.
Extended AS3:
FatCatStage.mxml:
<s:RemoteObject id="dataService" showBusyCursor="false" destination="data" endpoint="/_rpc/data" />
main.mxml:
<fx:Script>
<![CDATA[
fatCatStage.dataService.RetrieveFirstGraph.addEventListener( ResultEvent.RESULT, fatCatStage.graphInitialize );
fatCatStage.dataService.RetrieveFirstGraph();
public function doGraphChange(event:ResultEvent):void
if(event.result.result!='failure')
var GraphData:Object = event.result.response;
this.lastGraphData = GraphData;
fatCatViz.removeAll()
var root:GenericSprite = fatCatViz.addNodeElement(GraphData.object,null,this.center,GraphData.object.key);
for each ( var Connection:Object in GraphData.object.connections )
this._recursiveGraph(root, Connection, center, 3);
else
Alert.show('There was an internal graphing error. Please try again.');
fatCatViz.updateInternalStructure();
this.intervalSet = setInterval(timedReLayout,500);
]]>
</fx:Script>
That's all of the relevant actionscript for the entire application. Where is it referencing localhost?

Business Objects XI R2 SP2 with Tomcat and Security Manager enabled

XI R2 SP2 Unix server:
I need to start the tomcat that is embedded in Business Objects with Security Manager enabled. Is there a writeup on how to do that? This changes the port that tomcat runs on, so do I just change all references to the port that it is currently running? Is it that simple?
Thanks for any advice!

It sounds like an issue that would need to be troubleshot by an engineer. Can you open a message with support?
Cluster members for client tools are defined in the windows registry. Does infoview work?
Regards,
Tim

Problems with Yahoo and security on my new iMac

I just got my new iMac last weekend and I have had a Yahoo email account for years.
Now all of sudden last night, I got an email from Yahoo saying I was signed up for some Phone Out Service and there was an account set up in my user name. (so they must have gotten my user name and password somehow)
It looks like a Japanese name and some other credit card number on my account. How does this happen? Should I be worried? Has anyone else had this happen to them?
The billing dept. got back to me and took all that Phone Out stuff off my account, but they didn't say how it got there in the first place! I'm really concerned about this. I think I'll close out my whole Yahoo account. (I have changed my password, etc.)
Has anything like this happened to anyone else? I'm just really concerned about how this happened, someone must have gotten into my account somehow (with my user name and password), makes me worry they could get into something else more important. Is there anything I can do to prevent this?
I was told I didn't need antivirus or internet protection, etc. I just turned on my firewall the other day and did log into my email a couple times before I turned it on. But maybe my info was stolen somewhere else (I have logged in my email on public computers).
Any advice anyone? Is my iMac safe? Should I get some kind of internet protection? I'm still waiting to hear more from Yahoo as to how this happened.
Thanks so much.

traces7 wrote:
I'm just nervous that they somehow got into my new iMac and still can. Is there more I should do to protect it?
Thanks again!
Are you on high speed internet behind a hardware firewall such as a router? Or are you on a dial up modem?
If you are high speed and don't have a router I'd highly recommend you purchase one. They are not very expensive. If you do have a router its unlikely they got into your computer and more likely someone got the information from a public source. A router protects you by only allowing in solicited data from the site you are visiting and blocks uncalled for probes. If you are on dial-up its a good idea to turn on the software firewall.
It's very easy for someone to go to a public computer, install a small piece of monitoring software from a usb memory stick, remove the stick and then leave the program running for a period of time collecting user names and passwords. After a week or so the thief returns to the computer, re-inserts his usb stick, downloads the collected information to the stick and leaves with the data.
Other ways they can get information is from public wifi spots such as cafes or hotel rooms. All someone has to do is join the network, and from their own computer monitor the internet traffic on the unsecured connection and collect data.
Unless you store your passwords on the computer there's nothing there for anyone to get into. If they tried to install a piece of software you would have had to have given permission to install it just like any other piece of software. But if you do think your computer has been compromised the only sure way to know it's safe again would be to re-format the hard drive and re-install your OS and data.
Message was edited by: pogster

Problems with Scrollbar and Security.allowDomain("*")

When I use Security.allowDomain) the scrollbar stops work when my app is used in swfloader.
If I remove Security.allowDomain() will my app not work in FireFox.
I'm using Weborb .net.

The app that using my app is on an other server. On both sides we have crossdomain.xml:
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-to domain="*"/>
<allow-access-from domain="*" secure="false"/>
</cross-domain-policy

HT5914 Using AppleScript with Accessibility and Security features in Mavericks

I have an AppleScript that works fine when run from the AppleScript Editor and has an errorr when run as an App. This problem is described by the following knowledgebase article: http://support.apple.com/kb/HT5914 However, in my case the first error appears, but the second dialog does not. I've tried Signing the AppleScript, but the error remains. Any suggestions?

A regular AppleScript application saves its properties to the script in the application bundle, which is seen as a new (different) application. If your script doesn't need to keep its properties (e.g. to save some current value for the next run), you can try making the script read only, then add the application to the Privacy list.

Apps 11i, Discoverer, and Security

Just an FYI for those out who are having problems picking up Apps Security when trying to implement Oracle Discoverer on top of Apps 11i. We have struggled over the past six weeks to have Discoverer pick up Apps Security and have finally found a combination that works. If anyone else is having a similar problem and would like the details of our configuration, please e-mail me at [email protected]

Hi,
If you have an issue with Discoverer and security, your best option is to post a question in the Discoverer forum (Discoverer
Rod West

TM doesn't see its backup after migrating to new iMac and restoring system.

TM doesn't see its backup even though it still exists on the HD. I just migrated to a new iMac. After using OS X disc to 'Restore System From Backup' with TM backup it was showing the latest backup attempt had failed. The same disk was highlighted under TM Preferences too. But once I reset it TM began to make a new backup under a new folder/computer name (adding a number to the end). Is there a way to make TM see the existing BU and continue on?
Message was edited by: Sakahara

I'll try to recall to the best of my memory what I did... It's been stressful, frustrating, trying to deal with it.
Computers:
1) iMac6,1 (Late 2006) Intel 2.16 GHz Nvidia OS X 10.5.6
2) iMac8,1 (Early 2008) Intel 2.8 GHz ATI OS X 10.5.4
Perform final backup of iMac #1 with TM and SuperDuper!
Shut down and disconnect.
Hook up iMac #2 and power up.
After OS X intro select 'Transfer from another Mac' with Set Up Assistant (note: this was from the SD! backup).
Everything was selected for transfer; Users, Apps, Network,..etc. (I assumed it would update OS X too).
Transfer complete.
Restart.
Log in.*
* I have both Admin and User account. I noticed things weren't performance was off; log in was slow (Menu Bar items took longer to display, clock too), and generally overall apps,..etc seemed slow. Apps were asking for license and reg info too.
Second attempt (restore system from TM backup):
Startup from OS X 10.5.6 disc.
Erase HD with DU.
Select 'Restore System from Backup'.
Select TM backup.
After that completed, restart computer.
And that brings us to now. Well, sort of.
So what is the proper way to migrate as it were from between two different Intel iMac's? I have to assume I transfered over system files that caused a conflict with the new iMac's HW, correct? What can I do now? I've already performed new backups of both SD! and TM. I didn't think it mattered since either way the backups come from my old system. I'm guessing I should have updated OS X first on the new iMac and only selected User files, Apps, Network settings,.. etc., for transfer, or maybe installed apps fresh. I thought I was doing it correctly.
The new iMac still seems off with performance to me. I've tried performing multiple 'Repair Disk Permissions' too. There are about 32 differing permissions but DU doesn't seem able to repair them as they come up again and again. Here are some examples;
2009-05-15 09:23:47 -0700: Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
2009-05-15 09:23:47 -0700: Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/PlugIns/DVD.frappliance/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
2009-05-15 09:23:47 -0700: Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/PlugIns/FRSettings.frappliance/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
2009-05-15 09:23:47 -0700: Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/PlugIns/FRSources.frappliance/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
2009-05-15 09:23:47 -0700: Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/PlugIns/Movies.frappliance/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
2009-05-15 09:23:52 -0700: Permissions differ on "System/Library/PrivateFrameworks/iPhotoAccess.framework/Versions/A/CodeResourc es", should be -rw-r--r-- , they are lrw-r--r-- .
2009-05-15 09:23:52 -0700: Permissions differ on "System/Library/PrivateFrameworks/iPhotoAccess.framework/Versions/A/Resources/P lugins/BlackAndWhiteEffect.IAPlugin/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
2009-05-15 09:23:52 -0700: Permissions differ on "System/Library/PrivateFrameworks/iPhotoAccess.framework/Versions/A/Resources/P lugins/CubeTransition.IAPlugin/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
2009-05-15 09:23:52 -0700: Permissions differ on "System/Library/PrivateFrameworks/iPhotoAccess.framework/Versions/A/Resources/P lugins/DissolveTransition.IAPlugin/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
2009-05-15 09:23:52 -0700: Permissions differ on "System/Library/PrivateFrameworks/iPhotoAccess.framework/Versions/A/Resources/P lugins/DropletTransition.IAPlugin/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
2009-05-15 09:23:52 -0700: Permissions differ on "System/Library/PrivateFrameworks/iPhotoAccess.framework/Versions/A/Resources/P lugins/FadeThroughBlackTransition.IAPlugin/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
My final attempt to straighten this out is to install from OS X disc fresh (erase/install). Transfer only User files, Network settings, anything pertinent to my Users (email, browser, keychain,..),... and nothing else. Reinstall 3rd-Party Apps. I had to do this before after updating from Tiger to Leopard because it didn't take well.
Any help/insight appreciated.

I am so fed up with Apple and their lack of testing on Security Updates!!!!

I am so fed up with Apple, i have lost all hope in them whatsoever. Today i installed the Security Update 2007-009 1.1 and when prompted to restart did so, only to wait 5 minutes with my computer just idling and not restarting. So I then went to the apple menu to restart but still nothing happened. Pushed the Power button on my Mac and it brought up the dialog box for:
...Log off...Restart...Shutdown
But then it quickly logged-out giving me no time to even click on restart , so i logged back in , tried again, and of course it did the same thing again, so i logged back in and force shutdown holding down the power button for 5 seconds. Finally it shut down so i then Powered it back up, logged in with no problems.
Since the Security Update includes the update of Logic 8.0.1, I went straight to it in applications but found the Logic icon & Logic Node icon replaced by Blue folder icons. Upon clicking on Logic i was prompted with an error stating that it could not open because the file was corrupt, so i decided to delete Logic and along with Logic Node and empty the trash so that it would remove all its files. But now when i clicked on Trash, the window would not come up. I tried just empty trash from the dock but it would not empty the trash either. I can not open any finder window from my dock's Finder Icon.
I can open finder by clicking on Macintosh HD on my desktop but when i navigate through my folders all of my file icons have these weird sort of Distorted Scan lines through them.
So i decided i would open disk utility and try and repair whatever the **** is going on. Pressed verify Disk and it tried to Verify the disk but came back a minute after idling, giving me this error:
Verifying volume “Macintosh HD”
Checking HFS Plus volume.
Checking Extents Overflow file.
Checking Catalog file.
Checking multi-linked files.
Checking Catalog hierarchy.
Checking Extended Attributes file.
Checking volume bitmap.
Checking volume information.
Invalid volume free block count
(It should be (It should be 4 instead of 6294237)
Volume Header needs minor repair
The volume Macintosh HD needs to be repaired.
Error: The underlying task reported failure on exit
1 HFS volume checked
Volume needs repair
Here is a screenshot of Disk Utility: http://i58.photobucket.com/albums/g269/DjViral/Picture1.png
So obviously something is wrong because it reported failure on exit and Disk Utility will not even let me click on "Repair Disk", it is just faded out, un-click-able.
I would like to know what is wrong, and why Apple is releasing such **** as Security Updates. I mean isn't the whole point of a security update to make your computer more secure. Is this a joke or something?
I have lost all respect for you Apple. Not too mention this happened only 2 months ago with your last security update and i had to get my computer serviced which took 3 weeks. You better explain yourselves, apologize and start getting your sorry act together.

when prompted to restart did so, only to wait 5 minutes with my computer just idling and not restarting. So I then went to the apple menu to restart but still nothing happened. Pushed the Power button on my Mac
You should not have done that, it is a process that should never be interrupted.
For next time:
There are no guarantees, but following this procedure when installing updates and upgrades on your Mac will go a long way towards avoiding unpleasant after effects and ‘post-update stress disorder’.
It is also worth noting that it is an extreme rarity for updates to cause upsets to your system, but they may well reveal pre-existing ones, particularly those of which you may have been unaware. If you are actually aware of any glitches, make sure they are fixed before proceeding further.
So before you do anything else:
If you can, make a full backup first.
Turn off sleep mode for both screen and hard disk.
Disconnect all peripherals except your keyboard and mouse.
1. Repair Permissions (in Disk Utility)
2. Verify the state of your hard disk using Disk Utility. If any faults are reported, restart from your install disk (holding down the C key), go to Disk Utility, and repair your startup disk. Restart again to get back to your startup disk.
At least you can now be reasonably certain that your system does not contain any obvious faults that might cause an update/upgrade to fail.
3. Download the correct version of the COMBO update from the Apple download site. If your car runs on gasoline you would not want to fill the tank with diesel, so don’t try to install the PPC updater on an Intel Mac!
If you prefer to download updates via Software Update in the Apple menu (which would ensure that the correct version for your Mac was being downloaded), it is not recommended to allow SU to install major (or even minor) updates automatically. Set Software Update to just download the updater without immediately installing it. There is always the possibility that the combined download and install (which can be a lengthy process) might be interrupted by a power outage or your cat walking across the keyboard, and an interrupted install will almost certainly cause havoc. Once it is downloaded, you can install at a time that suits you. You should make a backup copy of the updater on a CD in case you ever need a reinstall.
Using the Combo updater ensures that all system files changed since the original 10.4.0 are included, and any that may have been missed out or subsequently damaged will be repaired. The Delta updater, although a temptingly smaller download, only takes you from the previous version to the new one, i.e. for example from 10.4.9 to 10.4.10. Software Update will generally download the Delta updater only. The preferable Combo updater needs to be downloaded from Apple's download site.
Now proceed as follows:
4. Close all applications.
5. Unplug all peripherals except your keyboard and mouse.
6. Install the update/upgrade. Do not under any circumstances interrupt this procedure. Do not do anything else on your computer while it is installing. Be patient.
7. When it ask for a restart to complete the installation, click restart. This can take longer than normal, there are probably thousands of files to overwrite and place in the correct location. Do nothing while this is going on.
8. Once your Mac is awake, repair permissions again, and you should be good to go!
If your Mac seems slightly sluggish or ‘different’, perform a second restart. It can’t hurt and is sometimes efficacious!
9. Open a few of your most used applications and check that all is OK. In this connection please remember that not all manufacturers of third party applications and plug-ins, add-ons, haxies etc, will have had time to do any necessary rewrites to their software to make them 10.4.10. compliant. Give them a weeks or two while you regularly check their websites for updates. This applies particularly to plug-ins for Safari 3.
N.B. Do not attempt to install two different updates at the same time as each may have different routines and requirements. Follow the above recommendations for each update in turn.
Lastly, Apple's own article on the subject of Software Update may also be useful reading:
http://docs.info.apple.com/article.html?artnum=106695

Problem with Rescue and Recovery after installing Norton Internet Security 2010

Hi all.
It's my first time in this forum.
I have a problem, with Rescue and Recovery, after installing Norton Internet Security 2010 on my T43.
The message I get it:
"Rescue and Recovery is unable to back up the file 'C:\Documents and settings\all Users\Application Data\ Norton\ 00000082\00000109\000003c1\cltMLS1.bat' Because the file is either corrupted or being used by another application. Please close any application that could be using the file.
I tried to close the Norton but I couldn't find how.
Tanks
Doron71

Hi and welcome to the forum,
the reason for this situation is, that the antivir files are protected from being modified.
This is the reason, why this file cannot be backed up. I assume, that you would get much more such messages, as there are surelly multiple files files, that are protected like this.
So the solution is to block folders from being archived. Please start RnR application and in the configuration set this folder as the excluded one.
This will skip the backup of this file and will fix your situation.
Please let me know, if you have covered this.
Cheers

Two active active ISPs with load balancing, publishing and VPN connection

Hi,
I wonder how to enable a scenario where i have to use two ISP's to share 30/70 load on our internet traffic, have to configure almost 60 internal websites already published using microsoft TMG firewall and connect client VPN connections and site-to-site vpn connections. I know that ASA firewall has limitation when using security contexts. Is good idea that how to achieve this gool?
I previously tried connecting four sites running ASA devices with this fifth site running Microsoft TMG firewall but i was able to connect only two ASA firewalls using site-to-site VPN, though I was able to connect remaining two as well but last two were not able to access ASA-TMG resources. furthermore behavious of two ASA-TMG connected sites was strange: sometime i was not able to access cross site resources from one machine but was able to do so from another machine.
I noticed that two of ASA sites connected with TMG site has different internal IP class (e.g site one 192.168.0.* and site two using 172.16.*.*) while remaining two have same class like the first site e.g 192.168.128.* and 192.168.100.*
Did anyone has experiance connecting TMG-ASA with multiple sites within same IP class scenario?
OR
How to enable same features using Cisco devices as they are on a single Microsoft TMG?
Best,
Saulat (Contact# 0092-321-4025587)

Sulat,
You can load balance between the two ISPs. That is not possible. But, we do have some options that I have discussed here:
Hope the above link gives you some ideas to utilize both your ISP links.
-Kureli

Backup or redundant ISP with FWSM and security contexts...

Similar Messages

Maybe you are looking for