Ciscoworks Firewall Module Support

/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
We are using Firewall Modules in our Cat6500(s) (WS-SVC-FWM with FWSM 4.0(4)) to provide centralized firewall services to our users. I have been asked if there is any support for these blades in Ciscoworks. I don’t think these types of blade services have been integrated into Ciscoworks yet. We have the same issue with our wireless blades (WiSM)
I’m mostly interested on the ability to backup context configurations from the Firewall blades.
LMS 3.2 with RME 4.3.1 among others.
Thanks for any information.
Jorge A Jiles

The answer is yes, RME 4.3.1 support configuration management with the WS-SVC-FWM
Please refer to this link for a complete list of supported devices and modules.
http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/3.2/device_support/table/lms32sdt.html
However, there is a enhancement bug opened as well that I think you will be interested in based on
the ability to backup context configurations from the Firewall blades.
http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsl65838
CSCsl65838 Bug Details
Multicontext Firewalls should have ALL contexts archived from admin
Symptom:For firewalls that support multiple contexts, RME does not archive all the context configs if just the admin context IP is in the seedfile.
Conditions:Firewalls that support multiple contexts.
Workaround:Manage each context configuration as an individual, separate device in RME.
Further Problem Description:This capability should be added to RME so that the customer is not required to have IP reachability to each context and individually put that context into RME.All the contexts can be accessed from the Admin context by changeto context system. Then either fetch the configs from the file system (dir) or changeto each context and get its config.

Similar Messages

Function modules supported by seal system used to print drawing documents

Hi,
As per my current requirement, while create purchase order (ME21N), the drawing document (which are linked with materials of the PO) should print along with the PO form (smartform). The drawing are stored in the Auto CAD system. Seal software has already installed to print drawing documents.
But I would like to know the function modules supported by seal system used to print drawing documents.
Thank you.
Tulasi

Tulasi,
May be you can approach it this way
create a ztable with fields matnr and graphic object(check STXBITMAPS table for the attributes of this field) and upload the drawings against every material.Now you will have a table containing the matnr and the corresponding drawing in the table which can be used for further processing.
Hope any of the SDN experts here will suggest a better solution.
Kiran.

Cisco Firewall Module 6509

Hi there,
I'm encountering a problem uploading a file when passing through the firewall module using a .NET application. Without passing through the firewall module, it only takes about 3 seconds for a 1mb file, however when passing through the firewall module, it takes around 1 minute or more. What settings can be done to resolve this issue?
The file upload is done via a .NET 2.0 desktop application, and uploading to the server, which is running on IIS port 80.

Hi Bro
I don't think this is a FWSM issue, but then again you never know :-) There could be few possibilities,
a) Is there QOS / MFP configured in your FWSM context?
b) Is your FWSM overloaded e.g. CPU/Memory Utilization?
c) How big are these uploaded files (>100Mb)? This is because the FWSM backplane is 5.5Gbps.

ACE Module support loadbalance rmi, ajp, jms, etc?

Hello,
Do you know if ACE Module support balance the follow protocols:
1. rmis
2. ajp
3. jms
4. IIOP
5. CORBA
6. IIOPS
I know that ACE module support http, https and tcp/udp port.
Best Regards

Hi Alvaro,
There are no specific handlers in ACE for the protocols listed. RMI over IIOP and majority of CORBA implementations are TCP socket based and typically require persistent (Sticky) assignments to real servers if load-balanced, so generic ACE loadbalancing predictors, probes and sticky features should suffice. If you need to do a deeper inspection you can use the Generic Protocol Parsing, and custom Probe (TCL) capabilities to track content of interest. Same applies for JMS and AJP, although there are different transports for these prototocls (i.e. JMS over HTTP) which may change configuration requirements.
In general, since these protocols are used for stateful application integration, long running transactions, messaging, and data access...and they are very sensitive to object namespace/target references you should detail individual use case requirements and applicability of external application delivery controller based load balancing (i.e. using ACE).
Let me know if this helps or if you need more detail. Thanks. -George

Feature request: Slideshow module support for video files

I'm very excited about your MTS support!
Feature request: Slide show module support for video files...
Say you have 10 takes to choose from. Are you able to almost like SLIDESHOW view the 10 clips full screen so you can decide, like a playlist? Or rate them as they play? It would also be great, like SLIDESHOW to be able to export a MP4 with a title, the 10 clips you are working with, and maybe add an end title and a song, just like SLIDESHOW.
I have found editing stills like this in slideshow far faster than in any other editing program.
Basically, I just need a fast means to view or export an MP4 of a set of video clips to review. You are almost there.
great job!!!
Max

I was also disappointed that video is not supported in the slideshow module -I currently have to use another solution when I want stills mixed with videos, would be great to be ablo to keep it all in LR!

Is the ACE Module support IPV6?

dear all
is the ACE module support IPV6?
best regards

The ACE does not currently support IPv6 but it is being looked at to be added to the feature set.

Dual Cat6k with Firewall module scenario

Hi All,
Does anyone have design guides for Core Cat6k L2/L3 network with Firewall modules in two different chassis ?
Thanks,
Praful

Try:
http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_guide_chapter09186a008048e64c.html
http://www.cisco.com/en/US/products/hw/switches/ps708/products_installation_and_configuration_guide_chapter09186a00801c589c.html

Firewall Module with HSRP switches

Hello ,
We have implemented HSRP configuration between the core switches for 20 VLANs, as the following:
HSRP Configuration for switch 1;
Interface Vlan4
Description âVLAN Descriptionâ
Ip address 192.168.8.2 255.255.255.0
Standby 5 ip 192.168.8.1
Standby 5 timer 5 15
Standby 5 preempt
HSRP Configuration for switch 2;
Interface Vlan4
Description âVLAN Descriptionâ
Ip address 192.168.8.3 255.255.255.0
Standby 5 ip 192.168.8.1
Standby 5 timer 5 15
Standby 5 priority 50
Standby 5 preempt
Now, Only on the active core switch we have inserted a firewall Module to protect VLANs communication to each other while we dont have firewall on the standby switch. Im planning to implement firewall only on one switch if the VLAN fail the traffic will be diverted on the second switch without firewalling.
Would you please assist me on Firewall configuration when i have HSRP running as per my config.
Regards,

The transparent firewall feature greatly simplifies deployment in the data center for protecting hosts. The transparent firewalls also fit into existing networks with no Layer 3 changes and transparently pass Layer 3 traffic from routers, allowing interoperability with IP services such as Hot Standby Router Protocol (HSRP), Virtual Router Redundancy Protocol (VRRP), Gateway Load Balancing Protocol (GLBP), Multicast, and non-IP traffic such as Internetwork Packet Exchange (IPX), Multiprotocol Label Switching (MPLS), and bridge protocol data units (BPDUs).

Firewall Module with Confiugured HSRP switches

Hello ,
We have implemented HSRP configuration between the core switches for 20 VLANs, as the following:
HSRP Configuration for switch 1;
Interface Vlan4
Description âVLAN Descriptionâ
Ip address 192.168.8.2 255.255.255.0
Standby 5 ip 192.168.8.1
Standby 5 timer 5 15
Standby 5 preempt
HSRP Configuration for switch 2;
Interface Vlan4
Description âVLAN Descriptionâ
Ip address 192.168.8.3 255.255.255.0
Standby 5 ip 192.168.8.1
Standby 5 timer 5 15
Standby 5 priority 50
Standby 5 preempt
Now, Only on the active core switch we have inserted a firewall Module to protect VLANs communication to each other while we dont have firewall on the standby switch. Im planning to implement firewall only on one switch if the VLAN fail the traffic will be diverted on the second switch without firewalling.
Would you please assist me on Firewall configuration when i have HSRP running as per my config.
Regards,

HSRP provides two servicesIP redundancy and a Virtual IP (VIP) address. Each HSRP group may provide either or both of these services. Cisco IOS firewall stateful failover uses the IP redundancy services from only one HSRP standby group. It can use the VIP address from one or more HSRP groups. Use the following task to configure HSRP on the outside and inside interfaces of the router.
http://cisco.com/en/US/products/ps6441/products_feature_guide09186a00806106ea.html#wp1149287

Does LV 7.0 PDA module support Microsoft Windows Mobile 2003 software for PocketPC?

I am evaluating the possible use of PDA
that runs Microsoft Windows Mobile 2003 software
for PocketPC and would like to know if the
LabVIEW 7.0 PDA module supports this software.
I am planning to scan barcodes with this PDA
and transmit this data over a WLAN to database.
Thanks!

Depending on the Pocket PC PDA type it is practical to add a barcode reader attachment and then use this as keyboard input into the PDA. You can look at a Grabba barcode Reader attachment (www.grabba.com)
I work for Grabba in R&D and we are looking at demand in this area (which is why I was looking at the forum to try and determine whether a need exists).
If we can help you let us know. I would be interested in knowing where you think this will help you. We have our own ideas but input from the field is most welcome.
cheers

Firewall module

dear
we are having firewall module in datacenter switch which is not in production i have a task to configure now there are total 80 server which are in difftrent zone
so plz help me how to connfigure using multi context & any documentation to refer and configure
thanks

Managing Security Contexts
http://www.cisco.com/en/US/docs/security/fwsm/fwsm31/configuration/guide/contxt_f.html
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide, 3.1
http://www.cisco.com/en/US/docs/security/fwsm/fwsm31/configuration/guide/fwsm_cfg.html
Regards,
Arul

Module supported

dear,
we have 7606 chassis with SUP720-B
is the bellow modules will support IPv6 and let me know if there is any limitation for IPv6 for the bellow modules:
1)
WS-X6724-SFP
Catalyst 6500 24-port GigE Mod: fabric-enabled (Req. SFPs)
WS-X6748-SFP
Catalyst 6500 48-port GigE Mod: fabric-enabled (Req. SFPs)
2)
WS-X6704-10GE
Cat6500 4-port 10 Gigabit Ethernet Module (req. XENPAKs)
3)
WS-SVC-FWM-1-K9
Firewall blade for 6500 and 7600, VFW License Separate
WS-SVC-IDS2-BUN-K9
600M IDSM-2 Mod for Cat
thank you in advance

The line cards should support IPv6 without any trouble,
FWSM has some IPv6 support, but IPv6 may cause higher CPU usage on the FWSM:
http://www.cisco.com/en/US/partner/products/hw/modules/ps2706/products_qanda_item09186a00801e9e26.shtml
IDSM-2 does not have IPv6 support. http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5729/ps5713/ps4077/ps9157/product_bulletin_c25-504716_ps2113_Products_Bulletin.html

Single 8gb module supported? (Mid 2010 Core i5 15" MBP 6,2)

I have a mid-2010 15 inch MBP which can support a maximum of 8GB ram.
This is traditionally 2x4gb, and the economics of 2x4gb vs 1x8gb make more sense. The Apple docs _do_ say that the sizes supported are 2gb and 4gb.
The problem is that it turns out that I have a bad memory slot - I get "bad ram" beeps if I use the "inner" slot. Right now I'm limited to 4gb just because of this.
I'm wondering if the memory manager will support a single 8GB module in the remaining "working" slot.
These new 8gb modules have become available for the new 2011 MBPs, which would solve my problem if they worked.
Has anyone tried this out, or have any reasons to support my €100 experiment to see if it'll work?
Thanks

Have an answer to my own question. In essence, no, this doesn't work.
Tried an 8GB module rated for the newer macbooks. The mac starts and runs up to a point. Then there's a freeze.

ACE module support for IPv6 ?

what is the latest on IPv6 support for ACE module? I saw something saying 2HCY10, but that's where we are now. Any documentation pointers to current compatability and or roadmap are greatly appreciated.
thanks
Bob O.

As mklemovitch described in the following thread, IPv6 will be
supported on ACE30 module but not in the initial release.
There is no plan for ACE20 module.
https://supportforums.cisco.com/message/3192517#3192517
I'm not sure but maybe around Q3 CY11 or later.
I cannot see the documentation regarding this feature on CCO.
I would suggest to contact your account team for details.
Regards,
Yuji

CiscoWorks Assistant Doesnt support the installed CM & DFM Version

We have Cisco Works 3.1 installed with following details :
1. CiscoWorks Common Services 3.2.0 31 2. Campus Manager 5.1.3 01
3. CiscoView 6.1.8
4. CiscoWorks Assistant 1.1.0
5. Device Fault Manager 3.1.3
6. Internetwork Performance Monitor 4.1.0
7. Integration Utility 1.8.0
8. LMS Portal 1.1.0
9. Resource Manager Essentials 4.2.0
When i try to access CW Assistant (e.g. Workflow) i get error :
CWA27: CWA Does not support the installed Campus Manager & DFM version.
I have tried updating CW Assistant modeul, it says no updates available.

It could be any of the three bugs below, most likely the first two:
CSCsw35439, CSCsv59291, or CSCsk19350. The first two you'd need to contact TAC to get the patches. For the last one, it may be specific to LMS 3.0 only, though you can download the patch directly from http://www.cisco.com/cgi-bin/tablebuild.pl/cwa10
Here're two old threads talking about those bugs:
http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Network%20Infrastructure&topic=Network%20Management&topicID=.ee71a02&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cd42614
http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Network%20Infrastructure&topic=Network%20Management&topicID=.ee71a02&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.2cbe45e8/0#selected_message

Ciscoworks Firewall Module Support

Similar Messages

Maybe you are looking for