Cisco Ironport ESA System setup wizard
Hi all,
i'm installing a Cisco ESA. I configured IP of Data1 and Management and Hostname with temporary data to enable feature keys.
Now i have to migrate those parameter to final configuration except management. IF i run again the system setup wizard does it blow up
the features installed and activated?
Thanks
smaikol
If you re-run systemsetup again from the CLI - it will reset the IP and listeners you have configured, along with the network information associated. You are presented the warning message from the CLI:
WARNING: The system setup wizard will completely delete any existing 'listeners' and all associated settings including the 'Host Access Table'
- mail operations may be interrupted.
</warning>
The features themselves are still present and licensed, and should not change. During the setup wizard prompts - you are asked if you want to use and enable the features - such as Anti-Spam, Anti-Virus:
Do you want to use Anti-Spam scanning in the default Incoming Mail policy? [Y]>
Would you like to enable the Spam Quarantine? [Y]>
1. IronPort Anti-Spam
2. Intelligent Multi-Scan
3. Cloudmark Service Provider Edition
Enter the number of the Anti-Spam engine you would like to use on the default Incoming Mail policy.
[]> 1
IronPort selected for DEFAULT policy
Do you want to use Anti-Virus scanning in the default Incoming and Outgoing Mail policies? [Y]>
1. McAfee Anti-Virus
2. Sophos Anti-Virus
Enter the number of the Anti-Virus engine you would like to use on the default Incoming and Outgoing Mail policies.
[]> 2
Sophos selected for DEFAULT policy
Do you want to use Anti-Malware scanning in the default Incoming Mail policies? [Y]>
Advanced Malware Protection selected for DEFAULT policy
Do you want to enable Outbreak Filters? [Y]>
Outbreak Filters enabled.
Allow the sharing of limited data with SenderBase? [Y]>
You have successfully configured Outbreak Filters and SenderBase.
</setup>
Usually, it is just simpler if you are re-IPing the ESA from a temporary IP to permanent IP to just change the information associated via ifconfig and modify the interface as needed, or on the GUI use Network > IP Interfaces.
-Robert
Similar Messages
-
Managed System Setup Wizard Status " ? " SPS 15
Dear All,
I have a problem with my SMD.
I have already upgrade the Solution Manager 4.0 from SPS 13 to SPS 15.
I want to setup E2E Root Cause Analysis for CRM system.
So I configured SMSY since I didn't configure SLD yet.
I've already installed SMD Agent in managed system successfully also.
When I run the Diagnostics Setup -> Managed System -> Setup WIzard,
in the Setup Parameter Step , it said that " No SMD Agent is currently available (ie not assigned). Please install an agent for jktgrhxsapc1 or unassign an existing agent in Agent Administration Why is that so ?
In the Agent Administration ( DIagnostics Administration -> Managed SYstem -> Agent Administration) found that the agent is online.
Second, In managed system setup wizard - System Selection Step, there's an unknown system with SID '???' and the status said that 'Some SMD Agent Runnning on host not belonging any successfully published solution' . Where can we find the log if we have an error when publishing solution ?
Thanks in advance,
AdhiHi Labinot,
I have checked the agent log looks like no error,
id loaded TTL refType
applications:com.sap.smd.agent.application.global.configuration true 0 strong
applications:com.sap.smd.agent.application.tracing true 0 strong
applications:com.sap.smd.agent.application.wilyhost true 0 strong
applications:com.sap.smd.agent.application.flightrecorderdumpscan true 0 strong
applications:com.sap.smd.agent.application.telnet true 0 strong
applications:com.sap.smd.agent.application.filesystem true 0 strong
applications:com.sap.smd.agent.application.logviewer true 0 strong
applications:com.sap.smd.agent.application.remotesetup true 0 strong
applications:com.sap.smd.agent.application.database true 0 strong
applications:com.sap.smd.agent.application.datacollector true 0 strong
applications:com.sap.smd.agent.application.runtime true 0 strong
applications:com.sap.smd.agent.application.connectors true 0 strong
applications:com.sap.smd.agent.application.wily true 0 strong
Apr 10, 2008 7:13:07 PM [Thread[SMDAgent connection thread,5,main]] Info [p4://jktgrhxsapl1:50604] Registration done.
Apr 10, 2008 7:13:07 PM [Thread[SMDAgent connection thread,5,main]] Info [p4://jktgrhxsapl1:50604] Agent ready.
Apr 10, 2008 7:27:25 PM [Thread[Thread-37,5,main]] Info Returned service object :com.sap.smd.core.runtime.agent.LogService@14cee41f
Apr 10, 2008 7:27:26 PM [Thread[Thread-34,5,main]] Info Returned service object :com.sap.smd.core.runtime.agent.LogService@14cee41f
any other idea?
-Adhi- -
Managed System Setup Wizard: which J2EE-Admin-User
Hello,
I'm running the managed system setup wizard in the diagnostic.
In the setup of the parameters, I have to enter the J2EE-Admin-User. But which one?
I tried:
SMD_AGT_ADM (Dialog user with admin roles on both stacks)
SMD_AGT_ADM (Communications user with admin roles on both stacks)
The user was created by me before the setup. But regardless of the user settings, I get the following error:
A logon failure occured on frces4139/SM7/00 (192.168.1.139).
System Setup aborted, to prevent locking the User Account.
Please check error details, specify a valid User/Password if necessary, and start Setup again
Any ideas? Which user or user settings have to be maintained?
Thanks,
JanHello,
I think the user you need to enter here is the j2ee_admin user or another user with SAP_J2EE_ADMIN role.
Regards,
Benjamin Rouger -
Error while running the diagnositc system setup wizard
Hello All,
When I am running the diagnstics setup wizard,I am getting the following warning for SSO.SMD is the SID for my solution manager system and it is ABAP+JAVA system:
SSO Setup : both Java and Abap stacks are using a ticket certificate with identical DN : 'CN=SMD'
SSO will not work with such add-in configurations. Please refer to Details below for manual actions to be taken, and run this setup step again.
Step SSO Details
Either the Java ticket certificate or the Abap ticket certificate of the managing system (ABAP Host=localhost sys=01 client=200) must be deleted and re-created, using a Subject DN other than 'CN=SMD'
For ABAP stack : please use transaction STRUSTSSO2 to delete the system PSE, and recreate the PSE Own Certificate with a different name (NB : this will destroy any existing SSO Setup on ABAP side)Or, for Java stack : please refer to SAP Note 701205, section 'J2EE', third bullet and note attachments (ReplacingPublicKey.pdf) for doing it on Java stack
Also I am getting an error:
The upgrader doesnt run,it says the SMD upgrader will be run
What does this mean
Please help
RohitThanks Jagan
I have run upgrader as u mentioned here
Just needed to confirm
Well I will correct the SSO as u mentioned,Thanks
Also I am getting an error for wily interscopy while I run the setup for managed system
I will post that in a diferent post
Thanks
Rohit -
Diagnostics System: Managed System Setup Wizard
Hi there!
I have installed the Host Agent and Diagnostic Agent on a test-system successfully. Now I have tried to start the Setup Wizard for managed systems (http://<hostname>:port/smd). The system collection was no problem, but the Setup Parameters. If I choose the directories of the "System Install Path", the "Instance Path" and also the "Instance Number" the following Message appears: "No Diagnostics Agent available at this time Please install or start an SMD Agent for <hostname>".
I don't know the reason, because the Diagnostic Agent is running and I think my parameters will be okay:
System Install Path: usr/sap/DAA/
Instance Path: usr/sap/DAA/SMDA97/
Instance Numer: 97
Is there a failure?
I look forward to your reply!
Best reagrds,
AndreasHi there!
I have found an interesting warning:
Managing System '<hostname>' is registered in the SLD but the CIM declaration is not valid, the agents cannot be attached correctly. check SLD Managing system declaration. (detail: CIM_ERR_FAILED: Cannot find SAP_BCCentralServiceInstance of SAP_J2EEEngineCluster SAP_J2EEEngineCluster.CreationClassName="SAP_J2EEEngineCluster",Name="<hostname>" in SLD LR)
I think it is the reason for my problems .. Can anybody help me?
Best regards,
Andreas -
SMD - MANAGED SYSTEM SETUP WIZARD.
Hi,
I'm on Solman SPS 15, trying to setup EWA for portals.
Ran the managed system setup, got the error.
Step DataCollect Details
Initial Data Collect ERROR for host XXXXXXX
!! Exception : Tue Jun 24 11:03:08 EDT 2008 | storeComponentVersion(...):ComponentVersion ComponentVersion [SAP J2EE ENGINE 7.00][01200314690200004229][N/A][N/A]:Cannot insert/update/delete the component '[IComponent: key=1199734241239977, name=SAP J2EE ENGINE 7.00, internalVersion=7.00 PatchLevel 29172.450, ppmsId=01200314690200004229, date=Tue Jun 24 11:03:06 EDT 2008, status=[N], mod=[M], messageServer=XXXXX:3901, masterComponent=true]'! Please see log for next warning(s).
com.sap.sup.admin.scheduler.exception.FatalTaskExecutionException: Tue Jun 24 11:03:08 EDT 2008 | storeComponentVersion(...):ComponentVersion [SAP J2EE ENGINE 7.00][01200314690200004229][N/A][N/A]:Cannot insert/update/delete the component '[IComponent: key=1199734241239977, name=SAP J2EE ENGINE 7.00, internalVersion=7.00 PatchLevel 29172.450, ppmsId=01200314690200004229, date=Tue Jun 24 11:03:06 EDT 2008, status=[N], mod=[M], messageServer=XXXXXX:3901, masterComponent=true]'! Please see log for next warning(s).
at com.sap.sup.admin.scheduler.task.remote.AbstractGatherRemoteTask.checkTaskResult(AbstractGatherRemoteTask.java:42)
at com.sap.sup.admin.scheduler.task.remote.config.InitialConfigGatherTask.parseXml(InitialConfigGatherTask.java:107)
at com.sap.sup.admin.scheduler.task.remote.config.InitialConfigGatherTask.process(InitialConfigGatherTask.java:68)
at com.sap.sup.admin.scheduler.config.DataCollect.execute(DataCollect.java:138)
at com.sap.sup.admin.setup.AppCfgTasks.runInitialDataCollect(AppCfgTasks.java:57)
at com.sap.sup.admin.setup.SetupStep.execute(SetupStep.java:305)
at com.sap.smd.agent.plugins.remotesetup.SapInstance.setup(SapInstance.java:263)
at com.sap.sup.admin.setup.SapCluster.setup(SapCluster.java:655)
at com.sap.sup.admin.setup.SapCluster.access$000(SapCluster.java:28)
at com.sap.sup.admin.setup.SapCluster$SetupRunner.run(SapCluster.java:903)
at java.lang.Thread.run(Thread.java:534).
Plz advise.
Thx in advance.#1.#00144F17012A00C700000018000066BD0004506CFD4B5C16#1214328943107#/Applications/AdminConsole/ConfigurationChangeReportingUpload#sap.com/tcwddispwda#com.sap.sup.admin.upload.configreport.xml.ConfigurationChangeHandler#J2EE_ADMIN#16932##XXXXX_SID_28888050#J2EE_ADMIN#0964c860421111dd94ec00144f17012a#Thread[Thread-83,5,SAPEngine_Application_Thread[impl:3]_Group]##0#0#Error#1#/Applications/AdminConsole/ConfigurationChangeReportingUpload#Plain###[7498] storeComponentVersion(...):ComponentVersion [SAP J2EE ENGINE 7.00][01200314690200004229][N/A][N/A]:Cannot insert/update/delete the component '[IComponent: key=1214257551084558, name=SAP J2EE ENGINE 7.00, internalVersion=7.00 PatchLevel 29172.450, ppmsId=01200314690200004229, date=Tue Jun 24 13:35:42 EDT 2008, status=[N], mod=[M], messageServer=XXXXX:3901, masterComponent=true].
I found this in application log
Edited by: Kobby bryant on Jun 24, 2008 7:39 PM -
Cisco ironport esa compressed files
hi,
can a cisco esa c170 filter exe files contained in an attached compressed folder ( .zip, .rar), if it is possible, can any one please help us with the steps to do so?
thanks,It is possible, yes. This characteristic is part of the AsyncOS, not the hardware appliance, so it will work with any device (hardware or virtual).
Please refer to:
http://www.cisco.com/c/dam/en/us/td/docs/security/esa/esa8-5-6/ESA_8-5-6_User_Guide.pdf
Attachment Filenames and Single Compressed Files within Archive Files
This example shows how to match single compressed files in archives such as those created by gzip:
quarantine_gzipped_exe_or_pif:
if (attachment-filename == '(?i)\\.(exe|pif)($|.gz$)') {
quarantine("Policy");
Also please refer to:
Table 9-6 Attachment Groups (continued)
Attachment Group Name
Compressed
Scanned File Types
• ace(ACEArchivercompressedfile)
• arc(SQUASHCompressedarchive)
• arj(RobertJungARJcompressedarchive)
• binhex
• bz(Bzipcompressedfile)
• bz2(Bzipcompressedfile)
• cab(Microsoftcabinetfile)
• gzip*(Compressedfile-UNIXgzip)
• lha(CompressedArchive[LHA/LHARC/LHZ])
• rar(Compressedarchive
• sit(Compressedarchive-Macintoshfile[Stuffit]) • tar*(Compressedarchive)
• unix(UNIXcompressfile)
• zip*(Compressedarchive-Windows)
• zoo(ZOOCompressedArchiveFile)
* These file types can be “body-scanned”
As you can see above, rar is in the list and so is zip.
I hope that helps.
Best regards,
-Valter -
Audit logging on Cisco Ironport ESA and WSA
How do I audit the admin activity for changes done on the Ironport appliances. The log subscriptions does not log the actions performed by a administrator on the GUI.
How do I audit the admin activity for changes done on the Ironport appliances. The log subscriptions does not log the actions performed by a administrator on the GUI.
-
No hosts found in SMD Managed Sytem Setup Wizard
Dear Experts,
I connected a Portal system to SMD server. I manaualy defined the system in SMSY instead of SLD.
When I went to the SMD Managed System Setup Wizard, it reported"No instances or
servers are defined for this system. Please check its definition in SMSY before proceeding to setup".
I've carefully checked all system definition in SMSY. I wonder if others have come across the similiar
problem, sincerely hoping for your advice.
Best Regards,
KarlHi, David,
I just can't find my installed agents in SLD view. But under Agent administration Agent Tab I can see them with status green. I installed agent without registration to SLD, but user directly P4 connection.
I tried go SMD view, I can see my agents there , and it has a column SLD settings, push SLD settings,
I clicked to push SLD settings, but an error occured:(Failed to send SLD settings to remote agent: sapeppap01 (detail: Failed to save new SLD settings; nested exception is: java.lang.StringIndexOutOfBoundsException: String index out of range: -1).
Best Regards,
Karl -
Solution Manage Diagnostics - error in the system setup
Hello,
I have installed SMD and I installed one system with the Setup Wizard of the SMD. According to the result of the setup, it was successful.
However, when I do a self check in SMD, I get the five following errors in the Monitored Setup node :
5 error(s) found:
No DB agent autoconfig status found in SMD repository for sv42/SM1. Please make sure system has been setup in Monitored Setup.
No JVM startup parameters setting status found in SMD repository for sv42/SM1. Please make sure system has been setup in Monitored Setup.
No Roles assignment status found in SMD repository for sv42/SM1. Please make sure system has been setup in Monitored Setup.
No SSO Setup status found in SMD repository for sv42/SM1. Please make sure system has been setup in Monitored Setup.
No Telnet agent autoconfig status found in SMD repository for sv42/SM1. Please make sure system has been setup in Monitored Setup.
Can anybody help me ?
Thank youIf you goto http://server:port/smd >>> Diagnostic Setup >>> Diagnostic System >>> Setup Wizard, do you have a message similar to:
Last Diagnostics setup wizard execution on Tue Oct 09 13:34:44 2007 :
- 0 setup steps disabled by user
- 13 setup steps succesfully executed
- 0 setup steps executed with warnings
- 0 setup steps in error
If you do, your Diagnostic server is correctly setup.
For Managed system, same thing, http://server:port/smd >>> Diagnostic Setup >>> Managed Systems >>> Setup Wizard, or check setup results to make sure it's completed. -
Hi,
Do we need to re run managed system setup wizard, each time system stack or EHP is updated ? or even when solman stack is updated ?
Reason: We recently updated solman to SPS27 after which I dont see any data collection happening specially for User Load for ABAP systems
and none for java
BR,
ShyamHello,
Run transaction solman_setup and check in the OVERVIEW what are the Open Activities listed in Basic and Initial Configuration.
All activities there must be redone, grey, red or green.
In these tasks there will be the Diagnostics Configuration. This step includes setting the Maintenance Mode ON and OFF, which will stop all agents and deploy the new software to them (the so-called agelets that are delivered centrally from Solman LM-SERVICE to the managed system's SMD Agent).
This is all you must execute after a LM-SERVICE upgrade.
Therefore there's no reason to rerun the whole setup wizard, as it may cause issues with wrong parameters in the setup wizard. If the managed system is working perfectly and this is only an upgrade, it is not recommended to do the setup wizard again.
Best regards,
Guilherme
Edited by: Guilherme Balbinot on Jul 15, 2011 8:37 AM
Edited by: Guilherme Balbinot on Jul 15, 2011 8:41 AM -
System shows wrong product version in smsy and SMD Setup Wizard
Hi
We have a SOLMAN EHP1 SPS22 running. The Satellite systems are correctly registered in SLD, also the SOLMAN Fetchjobs is running successfully.
I wanted to run the SMD Setup for a NetWeaver ABAP system, when I click in the Setup Wizard on the System the following link is under Managed Products apears: [NOT DIAGNOSTICS RELEVANT] .
By clicking the link you get the products to be managed, but i only two products are for selection.
SAP ERP 6.0 and SAP FSCM 6.0.
In smys checked the assignment in Systems --> <SID> in the Header Tab I clicked Installed Product version. The List in the Pulldown menu in "Product" are the same as above: SAP ERP 6.0 and SAP FSCM 6.0.
I tried to assign the product manually with no luck. Running the Solman_setup for the Diagnostics did not solve the problem either.
Thanks for your help
MuratHi Stuart,
In SolMan, goto t-code SMSY-> Product Definitions-> Select any product.
On the right hand side, click on the button "System Roles"-> Click "Select Product".
Now activate the relevant product as required by clicking on the "Active" checkbox.
Hope this helps!
Regards,
Rinkal -
Two choices for System Selection in SMD Setup Wizard
Hello,
we started to install the SMD. First everything was fine, but now we can select two agents for one system in the setup wizard.
The correct system is green lighted because the setup was successful. The other wrong system is not configurd and so the hole system in the overview is grey.
What did we wrong. Can anyone help us???
Thx
ThorstenHi,
Login in to solman smd,
Diagnostics Administration - Landscape Management - Select u'r solution- drill down to the instance & delete(right click).
That should do. -
Error While running Setup Wizard in SolMan Managed Systems
Hello,
I am getting the error listed below while I am trying to setup an Agent in SolMan Diag.
While I am running Setup Wizard, I am giving the message server port (50100) the same as I am getting from the systeminfo page: http://<My Server Name>:50100/sap/monitoring/SystemInfo.
When I change this port with 50104 which is my P4 port, It takes it and then gives me a message that "P4 port is unknown".
Any input?
Regards,
Ray
Failure with Message Server
An error occured while communicating with Message Server <My Server Name>:50100 through the host <My Server Name>: Error to retrieve the process from Message Server (detail: com.sap.bc.proj.jst
artup.impl.JStartupClusterControlExceptionImpl: The message server did not respond within 60 sec. Please check if the message server is running and if the socket connection has been established.); nes
ted exception is:
com.sap.bc.proj.jstartup.impl.JStartupClusterControlExceptionImpl: The message server did not respond within 60 sec. Please check if the message server is running and if the socket connection has bee
n established.(cause=com.sap.bc.proj.jstartup.impl.JStartupClusterControlExceptionImpl The message server did not respond within 60 sec. Please check if the message server is running and if the socket
connection has been established.)
Please check Message Server host/port, or enter the P4 ports in cluster table.Hi furious
I have the same error , and finally I am find the solution, this error due to the enterprise admin permission, so go to main configuration tree (as shown on screenshot) click properties, click enterprise admin, click advance, again click enterprise
admin, click edit and select "this object and all descendant object" on Applies to option (as per screenshot) and select full control
after that you prepare your organization and It will works
cheers.................... -
Cisco IronPort AsyncOS 6.7.6-068 for Management GA Notification
Cisco is pleased to announce the General Availability (GA) of a new major release of AsyncOS 6.7.6-068 for
Management to all customers. This release applies to all our Security Management Appliances (M-Series).
AsyncOS 6.7.6-068 for Management enables Centralized Tracking and Reporting for the new features introduced in AsyncOS 7.0 for Email.
New Features and Enhancements in AsyncOS 6.7.6-068 for Management
New Feature: Centralized support for the reporting and tracking changes in the AsyncOS for Email release 7.0:
RSA Data Loss Prevention
Marketing Message Detection
New Feature: Reporting by ESA Groups
Enhanced: Domain-Based Executive Summary Report now configurable by:
Domain of Email Server
Domain of Email Address
Fixes in AsyncOS 6.7.6-068 for Management
Fixed: MemoryError after losing Housekeeper thread [Defect ID: 52048]
Fixed: The Show Details link results in a timeout [Defect ID: 51558]
Fixed: Safelist/Blocklist should be exportable via CLI [Defect ID: 43360]
Fixed: LDAP Query strips spaces [Defect ID: 46099]
Fixed: Tracking database time does not update after system timezone is changed [Defect ID: 49407]
Fixed: Application error when accessing Online Help from the End User Spam Quarantine page [Defect ID: 52395]
This release has gone through our beta program, internal soak tests and is also running in production at our FCS customers.
Please upgrade at your convenience and let us know how you like this new release!
Cheers,
JakobHi,
We identified an issue in AsyncOS 6.7.6-068 for Management that under certain circumstances can cause loss of historical reporting data when reporting groups are configured. To ensure a high quality release, further testing on our side is required.
6.7.6-068 is no longer available for upgrade to your M-Series appliances.
If you already upgraded to 6.7.6-068 we strongly recommend to disable group based reporting to avoid being affected.
We expect to release a new improved build of 6.7.6 shortly and apologize for any inconvenience or confusion this might have caused.
If you are required to upgrade to 6.7.6 before a new build is available, please contact Cisco IronPort Customer Support.
I'll let you know once the new build is available...
Best Regards,
Jakob
Maybe you are looking for
-
Created playlist not showing up when iPhone is plugged in
I'm using an iPhone 5s on iOS 8.1.2. I have created music playlists on my phone but when its plugged in they would not show up on the sidebar. My library shows up fine but when i try to look for my playlists they aren't there!!! Any help would me muc
-
MSPS 2013 - related a document to the project tasks - Icon is not visible in project schedule
When adding a document (related Items) to the project tasks in a project schedule at the task does not see the icon of the document. Although the icon issue or risk when binding is visible. And the icon is also seen in the "Projects Center" Also rela
-
Oracle Apps Lot Genealogy Navigator Window Problem
Hi, I don't know much about the Oracle Apps Inventory module so please bear with me on this one. We are currently on R11.5.10.2 and I am trying to get lot drilldown in the lot genealogy navigator window. However, when I enter the lot no./item no. and
-
Popup message 'Export In Progress' during export creation.
Hello, Having problems closing a popup window which displays "Export in Progress" after my code creates the file and before I set response.setContentType and the Content-Disposition header (trying to close after is pointless). The problem is I can't
-
Troubles with Safari after downloading Safari Beta for Mac
I recently installed the new Safari Beta and have been having problems ever since. My browser constatly crashes and closes. It is a real pain in the arse. Is there any way to go back to the previous non-Beta version of Safari so i can stop this probl