Can I restrict a specific subnet/host to specific server in CSS?

I would like to restrict a specific subnet/host to access the same server. Can I do that?
Thanks

Hi,
You can configure an ACL on the CSS. This should achieve what you are trying to do.
For more details, check
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v8.20/configuration/security/guide/Access.html#wp1133930
I hope this helps
Daniel

Similar Messages

  • Mac using Acrobat Pro v9 can't connect to shared review hosted on Sharepoint server.

    A person at our company has a Mac with Acrobat Pro v9 and can't connect to our shared review hosted on a Sharepoint server. The shared review is initiated from a PC using Acrobat Pro X.
    They can access/login to the Sharepoint server via Safari on the same computer both inside the company and from outside.
    They used to have it working just fine for months, then suddenly (recently) it stopped working and it just keeps saying that it can't connect.
    When trying to connect, Acrobat doesn't ask for credentials. I've tried hunting down where those credentials are stored to try and delete them to force it to ask again, but no luck there either.
    I also have a Mac (but I'm running Acrobat Pro XI and now DC) and I can access the same shared review that doesn't work for them. And I can't seem to break it for me (as an effort to figure out their problem).
    Any helpful guidance on how to get things back on track would be greatly appreciated. My head hurts from beating it against my desk. :-|
    Thanks!

    Several of us encountered the same issue running MAC OS X on Acrobat Pro XI.  I'm tagging your question to see if someone provides a solution.

  • Can't connect to my wesite host (Network Solutions) Server.

    When trying to connect through the Expression Web application to my Website Host Server, I get an Server error: Error 2 opening registry key Software/microsoft/shared tools/web server extensions/ports/port 80. It has something to do with a Front Page Extension.
    My website was hosted with Network Solutions for close to ten years, and I had a Front Page Extension issue in the past which was resolved at the host sever. Not anymore, tech personnel (farmed out to non English speaking entities) is not helpful at all.
    Searching for answers, I got suggestions to do a registry modification (Registry Key Permissions), but I cannot find an entry "Web Server Extensions" in my registry. Is there any way to resolve my problem?  
     

    Thanks for the prompt response. I was afraid that I am screwed having build my website with Front Page and later migrated to Expression Web.
    Network Solutions is in the process of updating to Windows Server 2012 R2.
    Dear Hosting Customer, Tomorrow, your Network Solutions hosting package will be updated to Windows Server 2012 R2, resulting in a brief interruption of your hosting service.
    This update is necessary to keep your server up to date, secure and running properly. The migration will take place tomorrow, and will last approximately 1 hour. NOTE: AWStats user credential has changed. Please use your default ftp credentials if you need
    to access the awstats page directly. Next Steps: In
    order for this migration to run smoothly, we need you to do a couple of things depending on your package set up.
    FrontPage Extensions: FrontPage extensions will no longer be available.
    As a result, customers with FrontPage Extensions will need to update their sites in order for them to continue to work.
    .NET 1.1 or Earlier Platforms: .NET 1.1 will no longer be supported
    after the Windows update. Customers with .NET need to update their site in order for them to continue to work.
    External Domain Pointers: Customers with external domains. (Domain
    names not registered with Network Solution or are not using Network Solution name servers) pointing to a Windows 2003 hosting package need to update their ADNS for the domain with a new IP address.
    Your new IP address is 209.17.116.7
    NetSol Domains: Customers with a NetSol domain and pointing to a
    Windows 2003 hosting package will have their A record changed automatically. No intervention on their part is needed
    In addition to many Network Solutions features that continue to be supported, there are new features you will get with this upgrade.
    Now I have to find a way to update my site, and any suggestion on how to go about it would be appreciated.
    Thanks,
    Oskar F. Neuhold

  • How can i restrict the Expenditure Type values at a specific OU ?

    Dear Guys,
    I would like to ask about the Expenditure Types,
    I have implemented two projects for different Operating Units ,
    when navigating to any Projects responsibilty,and navigating the Expenditure Type field
    the values exist are all the values implemented across the OU not the values entered at this OU
    How can i restrict the Expenditure Type values at a specific OU
    Regards
    Amr Hussien

    Hello
    When you set up a project there is an option called Transaction Control.
    This option allow you to list the allowed or restricted elements of costs for the project.
    You may enter the transaction control on a project template and that will be copied to any new project.
    The cost elements may be expenditure types, expenditures categories, suppliers, employees, etc.
    In your case, I suggest to set up specific project templates for each operating units. On each template enter the list of allowed expenditures types for that OU.
    Doing so, the system restricts users from entering any expenditure item, supplier invoice, purchase cost etc, against an expenditure type, which is not allowed.
    Dina

  • Is it possible in SAP that I can restrict a specific delivery with shipment

    Hi All,
    Is it possible in SAP that I can restrict a specific delivery can be attached with specific shipment?
    Example,
    I have a delivery type "A", which can only be attached with Shipment type "Z".
    Thanks in advance.

    I don't think it is possible, However you can restrict that through selection criteria of VT04.

  • Is it possible in SAP that I can restrict a specific delivery can be attach

    Hi All,
    Is it possible in SAP that I can restrict a specific delivery can only be attached with specific shipment?
    Example,
    I have a delivery type "A", which can only be attached with Shipment type "Z".
    Thanks in advance.

    NO.
    You can only specify a selection variant to select certain type of deliveries.

  • Number of recipients restricted with specific host exceptions

    iMS Version: 6.1
    I have a need to restrict all senders of email to 10 recipients in a single email message. However, one specific host needs to be able to send to an unlimited (or just a large number) number of recipients on a single message.
    From some reading, this isn't all that easy to set up. However, since the exception host is known (by IP/name), we are hoping that simplifies things. Any thoughts?
    (the exception host is a server which houses a learning management system. That system allows the professor to send email to the students in the course)

    Hi,
    Possible to achieve. Requires a few steps though.
    1. Isolate off traffic from your LMS system (in this example represented by 1.2.3.4) to a new source channel:
    Create a new mapping table in the style of the INTERNAL_IP mapping table (add to the mappings file) e.g. FRIENDLY_IP
    FRIENDLY_IP
      $(1.2.3.4/32)  $Y
      *  $NAdd a rewrite rule (imta.cnf) to direct traffic from the FRIENDLY_IP range to the tcp_friendly source channel (needs to be ABOVE the INTERNAL_IP rewrite rule which looks almost the same):
    ! Do mapping lookup for "friendly", non-internal IP addresses
    [] $E$R${FRIENDLY_IP,$L}$U%[$L]@tcp_friendly-daemonCreate a new tcp_friendly channel. This should look the same as your existing tcp_intranet channel e.g.
    ! tcp_friendly
    tcp_friendly smtp mx single_sys subdirs 20 dequeue_removeroute maxjobs 7 pool SMTP_POOL maytlsserver allowswitchchannel saslswitchchannel tcp_auth missingrecipientpolicy 4
    tcp_friendly-daemon2. Increase the recipient level on the tcp_friendly channel by adding the "recipientlimit <limit>" keyword e.g.
    tcp_friendly smtp mx single_sys subdirs 20 dequeue_removeroute maxjobs 7 pool SMTP_POOL maytlsserver allowswitchchannel saslswitchchannel tcp_auth missingrecipientpolicy 4 recipientlimit 1003. Lock down the recipient limit for other traffic.
    Edit the channel definitions for other source channels (such as tcp_local/tcp_intranet/tcp_submit/tcp_auth) and add a smaller recipient (recipientlimit 10) e.g.
    tcp_intranet smtp mx single_sys subdirs 20 dequeue_removeroute maxjobs 7 pool SMTP_POOL maytlsserver allowswitchchannel saslswitchchann
    el tcp_auth missingrecipientpolicy 4 recipientlimit 10Then run ./imsimta cnbuild ; ./imsimta restart for it to take effect. You should see emails from your LMS system coming from tcp_friendly rather then tcp_local/tcp_intranet.
    Recommend you run through and test these steps on a development/test system first of course.
    Regards,
    Shane.

  • Direcrt GL account activation restriction to specific PO's

    Dear All,
    We have activated the direct GL account posting(G/L account tab), which tab appears in MIRO.
    Can we restrict this GL account tab appearence for specific PO types only?
    Please suggest the possibilities.
    Regards

    Hi All,
    even i have the same requirment as my clint need that MIRO is done of specific PO by authorised employee.
    like i have 2 PO type A & B. and two employee respectivly. then Emp 1 can only do MIRO for PO A and Emp 2 can do MIRO for PO B. Strictly...
    what would be the standard setting or some other ...
    thanks in Advance
    Edited by: Sandeep Singh Chauhan on May 8, 2010 9:20 AM

  • How can I restrict certain apps to cellular data only?

    Product Name: iPhone 6
    Product iOS: 8.3
    Background: I listen to Pandora at work through my iPhone 6. My work has pandora traffic blocked through their WiFi network. I want to keep my iPhone connected to the work WiFi because 1) I don't want to turn on and off my WiFi on my phone 2) I want to my email and other apps to use WiFi since they are not blocked.
    Current Workarounds (not a solutions):
    1) Turn off and on WiFi on iPhone 6- This is a pain/hassle and I forget to turn the WiFi back on.
    2) Switching to a different streaming music providers that aren't blocked by work WiFi- I pay for Pandora One and I like this service the best. I really don't want to switch.
    3) Download music to iPhone memory- I pay for Pandora One and I'd like to use it.
    4) Jailbreak- Not sure if this a solution but I'd rather not jailbreak my device.
    Question: How can I restrict certain apps (Pandora) to use cellular data only?
    Best Regards,
    Chasen

    The network settings in iOS are global and do not support assigning specific networks to specific apps. You cannot do what you describe.

  • How can i restrict user to access database object (procedure) or JSP

    Hi
    I have 9ias infrastructure 902, on win2k box with 9i DB.
    and I have one PL/SQL web application and another J2EE application both are hosted by 9ias 902.
    Now we are looking forward to couple both with SSO.
    I have deloyed samples of both and works fine.
    Each application have different set of users, i mean there is no common user.
    How can i restrict user not to view the web page which is not authorised to them.
    as far as i understand from the Grocery demo is pick the role (which is a string only) from OID and programaticall apply security via if else endif construct.
    can any one through light upto my concern.
    regards
    [email protected]

    Hey Mary
    No i haven't try to do that via pl/sql....
    as the our application is j2ee app... deployed in oc4j.. with sso and ldap....
    still finding to do so....
    what i have realized that LDAP is just to store user information in inverted tree... and one have to build separated access security mechnisum that will be applicable to j2ee system....
    thanx...
    samir....

  • Can i restrict apple mail client from downloading all emails...and allow it to pick a start date for gmail mail to sync? i am flooded with old emails, thousands on them ...eating hard drive space of my macbook pro and un necessary overhead

    can i restrict apple mail client from downloading all emails...and allow it to pick a start date for gmail mail to sync? i am flooded with old emails, thousands on them ...eating hard drive space of my macbook pro and un necessary overhead

    The genius bar technicians can check your MBP for possible hardware problems and specific software issues that you may have.  The diagnosis will be free.  Any extensive repairs will not be free.
    If you have minor software problems, you essentially will have to deal with them yourself.  Examine these two comprehensive documents for possible problem definition and solutions.  If you encounter problems that you are unable to cope with, start a new discussion and there will be persons willing to assist you in solving them.
    https://discussions.apple.com/docs/DOC-3521
    https://discussions.apple.com/docs/DOC-3353
    Ciao.

  • How can I set a specific user log on neme to a specific machine

    Greeting,
    I have a question : 
    How can I set a specific user log on name to a specific machine.
    e.g. 
    Only User.A can log on to PC.A and the other can not.
    Base On :
    Windows Server 2003
    Active Directory Version : 5.2.3790.1812

    Technically we're both right.  This depends on what scenario you're setting this up.
    1)  If you want to say only this person can log on to this machine, and it's not an enterprise solution (meaning you have a handful of computers you want restricted, not all computers) then do something like Yan Li has recommended.  However, I
    do not recommend using any DENY LOCAL LOGON user rights.  In this case, you would have to deny everyone except 'User A' and your Administrators.  If you put a user in ALLOW LOCAL LOGON and DENY LOCAL LOGON, then DENY wins and no one logs in.  Instead,
    you should remove all the settings from ALLOW LOCAL LOGON and add only User A and administrators.
    2) If this is an enterprise solution, use the LOG ON TO option I mentioned before.  Managing user right assignments per machine is very difficult and isn't a practical way to do it on a large scale.  If every user in your domain is assigned a computer
    that they can use, only that user can use that machine and that machine will effectively only allow that user.  For this to work, EVERY user must be restricted to a workstation, if no setting is present, then that user can log on anywhere.  This
    is my preferred solution still.
    Like I said, it depends on your situation to which route is better.  I hope this helps and is clear and easy to understand.
    - If you have my posts to be helpful, or the answer, please mark them appropriately.  Thank you.
    Chris Ream

  • How can I find what scom group a specific server belongs to using powershell?

    Environment:  SCOM 2007 r2
    Server in question:  Running Windows 2003 Std. (yes I know this sounds crazy)
    Why do I need this:  I noticed at the console level we have had server unexpected shutdown events which are not generating email notifications. 
    Source shows: Windows 2003 Server Standard Edition
    Alert Rule:  Windows Shutdown Unexpectedly
    From what I see these are all windows 2003 server Std edition systems.  I did a track and trace using our exchange tracking system which confirmed the alerts were not being emailed. Not sure if there is a better approach for this, but not being a sql
    expert (however I do have someone I can leverage) I am trying to see if I can somehow extract this information using powershell.
    Secondary general question:  How can I find out the current size of our scom 2007 database and the number of objkects\servers being monitored? This is prep work for a migration over to 2012.
    Thanks in advance for the help!

    1. what scom group a specific server belongs to
    function Get-GroupNames {
     [cmdletbinding()]
     param($computerFQDN)
     $containmentRel = Get-RelationshipClass -name:’Microsoft.SystemCenter.InstanceGroupContainsEntities’
    $computerClass = Get-MonitoringClass -name:”Microsoft.Windows.Computer”
    $criteria = [string]::Format(“PrincipalName = ‘{0}’”,$computerFQDN)
     try {
     $computer = Get-MonitoringObject -monitoringClass:$computerClass -criteria:$criteria
     $relatedObjects = $computer.GetMonitoringRelationshipObjectsWhereTarget($containmentRel,[Microsoft.EnterpriseManagement.Configuration.DerivedClassTraversalDepth]::Recursive,[Microsoft.EnterpriseManagement.Common.TraversalDepth]::Recursive)
     catch {
     $_
     write-host “An error occurred while querying groups of $computerFQDN”
    foreach($group in $relatedObjects)
     [array]$Groups = $groups + $group.SourceMonitoringObject.DisplayName
     if($groups) {
     return $groups
     } else {
     write-host “No groups available for $computerFQDN”
    Usage:
     Get-GroupName -ComputerFQDN myserver1
    for detail, pls. refer to
    http://techibee.com/powershell/powershell-get-scom-groups-of-a-computer-account/1129
    Roger

  • Can we hide a specific subject area in answers for selected users

    Hi,
    Can we hide a specific subject area in answers for few users. I want to expose a particular subject area for only 2 users out of 10 . Right now if i expose it all 10 ppl with answers access will see that subject area. can i hide it for the other 8 without removing their answers access.

    Log in as Admin- Setting-Administration-Manage Privileges-Search for your subject area and place appropriate restriction..

  • Can the pc out of subnet ,but in the same LAN receive video stream?

    Can the pc out of subnet ,but in the same LAN receive video stream?
    In the LAN ,the host set the Transmit IP such as 10.13.22.255, all the pc' IP address from 10.13.22.1 to 10.13.22.255 can received the video stream.
    but how can the pc out of this subnet, such as with IP 10.14.14.22 receive it.
    Thanks a lot for advance.
    Myshen

    does anyone know?
    help me please.
    Thanks very much!
    Myshen

Maybe you are looking for

  • Sending jpg to iPhone via mms not working

    I'm trying to send a jpg from my email to an iPhone via mms, i'm using the correct format [email protected] but the iPhone gets an error that reads: The part image/jpg: name=name.jpg; x-unit-mode=0644; x-mac-hide-extension=yes was removed form the me

  • Router won't stay connected for more than 45 minutes

    I have a BEFW11S4 v. 4 (firmware 1.52.02) wireless router that I've been using for years. Recently (i.e., within the past week), it has been dropping its internet connection about every 45 minutes. The network set-up is: an XP desktop connecting via

  • Itunes 10.7 crashes on startup

    Problem signature: Problem Event Name: APPCRASH Application Name: iTunes.exe Application Version: 10.7.0.21 Application Timestamp: 504d85d9 Fault Module Name: KERNELBASE.dll Fault Module Version: 6.1.7601.17651 Fault Module Timestamp: 4e211319 Except

  • I constantly get error messages that Firefox can't find a particular site.

    I experience random trouble connecting with web sites using Firefox. The error message received is typically "Sorry, we can't find "www.xxx.com". Please check the spelling of the web address." I have cleared the cache and cookies, as well as checked

  • [Your Music] Clear items in the 'Recently Played' list permanently

    Would like to have an option to clear items from the Recently Played list permanently. Hidden items reappear as soon as I connect the device to the Internet.