Custom signature in CSM3.0 for IDSM2 with IPS5.1

I am trying to add a custom signature in CSM3.0 for IDSM2 which is running IPS5.1 in cat6500.I am using custom
wizard to create the custom signature ( say "sweep" ).Under sigature, IPS5.x, I could see the created custom signature but when the sigature triggers, IPS event viewer shows only the old ( built in - sweep )signature ID and not the customized one.
Just to test the changes in effect,
I tried to change the event level say "low" to "high" for one of the built in signature( sweep 2100) by editing the same.Display shows the changed level, but when the sigature triggers the IPS event viewer shows the level as "low" instead of "high".
Also I tried with enabling the check box for the option " retire".
How do I create and test the customized signature..I tried with both IDM and CSM3.0.Any suggestions...

The custom headers and client IP and port headers are inserted in every HTTP request packet. Full session headers and decoded client certificate fields are inserted in the first HTTP request packets; only the session ID is inserted in subsequent HTTP requests that use the same session ID. The servers are expected to cache the session or client certificate headers based on the session ID and use the session ID in subsequent requests to get the session and client certificate headers.

Similar Messages

  • TCP Segment Overwrite - IDSM2 with IPS5.1(1d)

    Hi,
    I have an IDSM2 running IPS5.1(1d)S220 upgraded recently from 4.x. My network has windows desktops (spanned on multiple subnets) whose default gateway is a Cisco 6500 FWSM module.
    Since I upgraded to IPS 5.x, I am seeing lots and lots of TCP Hijack and TCP Segment Overwrite alarms. The source addresses of these alarms are my windows PCs, destination addresses are Windows 2003 servers..Sometimes, the destination address is 0.0.0.0 and ports are empty.
    It is difficult to ignore so many alarms unless there is a technical explanation to see if the placement of FWSM is causing IPS to treat this as a threat.
    Can someone help me to get out of this issue?

    I found this on a previously written thread. I cannot find the thread anymore. All credit is given to the message owner. i hope the reply helps.
    mlhall of - CISCO SYSTEMS wrote:
    Oct 6, 2003, 11:06am PST
    I have several packet traces from several customers that see this alert. There appears to be a bug in the microsoft TCP stack when connections go stale. What happens is that the last successful segment's last byte is resent with a value of 0xff. This is after the other endhost has ACK'ed the sequence from the last segments.
    So for example.
    a->b seq=100 data="ABCDEFG"
    b->a ack=107 no data
    a->b seq=106 data="(0xff)"
    The last packet in the example is overwriting the G in the first packet with an 0xff. This causes the IDS to fire. We are working on detecting this stack bug in a new version.

  • IDSM with IPS5.1 " blocking" ?

    IDSM2 with IPS5.1 (on cat65K sup 720 IOS 12.2SXF) will support ? Inline ? mode.But does it support ? blocking? as well ? ??
    ? CCO document says ?Supervisor 720 with Cisco IOS supports VACL deny statements; however, IDSM-2 cannot block with Cisco IOS-style VACLs.
    ? Here VACL deny means ? not consider to monitor that particular VLAN or IP address ? right ? OR is it like totally blocking the user traffic? Or blocking the connection from the respective host/connection/IP.

    Hi Rajan,
    All sensors can block on supported network devices
    regardless of whether the sensor is configured as
    inline. In the case where an IDSM2 is installed on
    a Catalyst switch running IOS, and the user wants
    the sensor to block on the switch, the blocking
    device should be specifed as a router. The sensor
    will block with ACLs, not VACLs. Blocks can either
    be unconditional (denying all packets from the
    attacker) or connection oriented.
    One point to keep in mind is that a sensor in inline
    mode can also perform inline deny actions like "deny packet inline", "deny attacker inline", etc. These
    deny actions are unrelated to the sensor blocking
    response.
    Regards,
    Sean

  • How to load a custom waveform for use with DAQ voltage generation

    I would appreciate some advice on how to take a custom waveform (just a modified triangle wave with pauses at the tops and bottoms) and use that to control the voltage output from a DAQ. 
    Some background:  My intent is to use the waveform to control mirror scanning for a LADAR imaging application .  Because our DAQ (NI-6251) only has one clock, it cannot update the X and Y channel voltages independently. I'm using a triangle wave to control both axes, which works fine for the X direction.  However, to prevent the Y axis from incrementally steping up after every X pixel, I'd like to construct a waveform, similar to a step pyramid, so that the Y axis remains constant over the X sweep and only updates to the next row after all X pixels are collected.
    I assume I can make the desired plot in excel, and then read it in somehow - but this is where I start to get fuzzy.  Can any one point me to an example or tutorial on this?
    Some other questions:
    1. Do I needto worry about scaling? will my custom plot need to contain a specific number of points (perhaps the exact number of pixels in the image)?
    2. If I change the image dimensions, will I need to revise the control waveform in the Y axis?
    Thanks in advance,
    jimmy

    This thread didn't appear to go anywhere.  I am trying to do something similar and was looking for help.  I want to create a repeating output voltage wave based off the excel file attached(with times).  Is there a way to have my program match the output voltage and time with the table attached on a repeat and send that signal to the output?
    Thanks,
    T
    Attachments:
    Sig Gen.xlsx ‏34 KB

  • I have created a spreadsheet on numbers for ipad with a list of customers as a drop down menu. How can i make their address appear underneath when i select the customer?

    I have created a spreadsheet on numbers for ipad with a list of customers as a drop down menu. How can i make their address appear underneath when I select the customer?
    iselect the customer?

    Hi bazza,
    We won't be able to put the address from a formula into the same cell that you enter the customer's name. We can put the address in the cell under the customers name.
    First let's take James advice and concatenate the address in the address table.
    Here is the formula in G2
    =CONCATENATE(B2&"
    ",C2&"
    ",D2&"
    ",E2)
    It shows this way because after I clicked on B2 and typed [&"] (no brackets) I typed option-return
    This gives you your new line. Then I typed the closing ". I repeated this for the rest of the address.
    Next we want to bring this to your order sheet. I prefer using the two formulas OFFSET and MATCH instead of VLOOKUP.
    base tells OFFSETwhere to start counting from. Click A1.
    row-offset is for the row. we will use MATCH() -1 to give us the row.
    What MATCH does is give you the row number where something is found and you can specify an exact match. I usually construct the MATCH formula first and then cut and paste it into OFFSET. MATCH looks like this: MATCH(A2,Table 1::A,0). A2 is what we are looking for, Table 1A::A is where we are looking (the entire column A), and 0 means we want an exact match. Can you see it inside the OFFSET formula? Notice that we had to subtract 1 from its result.
    column-offset tells OFFSET which column A=0 so we want 6.
    we ignore "rows", "colomns" we don't need them.
    If this seems like too much, just break it down into small pieces.
    quinn

  • Custom signature for TOR Application

    Hi,
    I want to create custom signature to produce alert whenever any machine lunches TOR application, i have searched and found that there already two signatures cretaed 5816/0 5816/1, i have enabled them and tested it did not fire.
    I have ips in promoscous mode monitoring all vlans, working normally. I dont have ssl interception @ any device, so once TOR is establish then i dont have visibilty over the traffic.
    i need help in creating usch signature, i have took wireshark capture of traffic and all i can see on application layer is proxy connect and proxy port (see attached)
    thanks for your help.                

    Hi nkumarsr,
    I have cretaed tcp string signature for ports 9001, 9090
    and also i have added it in builtin signature 5816/0 and 5816/1
    i have luanch TOR and it is not fired, i took capture on client PC and seached for tcp.port == 9001 and 9090, it is not showing.
    do u have any other ideas ?

  • Unable to locate the xml-definition for FieldName with FieldId '1f8a351c-965d-4927-9c22-8772b7089f55' when trying to activate feature with references a custom field type

    I´ve a solution which contains a custom field type (found somewhere on the net, the custom field type maps a choice field to managed metadata). There is a second solution which contains site column and site content type definitions using the custom field
    type definition from field type solution.
    On my developement environment, there is no problem with this two solutions. When field type solution is deployed, i can deploy the content type solution and activate the feature and everything is fine.
    However if i give the two solutions to our adminstrator to deploy them into our staging environment, content type feature activation fails. Deploying the field type solution makes no problems. The field type is then available and i can manually creates
    columns with this new field type. However activating the content type solution fails with the error shown in the title of this message. The FieldID from the message is not part of my content type project. Searching the net doens´t show any results for that
    id. So i think it´s not some of the standard field id´s from sharepoint.
    Can anyone help?

     Stack Trace
    Unable to locate the xml-definition for FieldName with FieldId '1f8a351c-965d-4927-9c22-8772b7089f55', exception: Microsoft.SharePoint.SPException: Catastrophic failure (Exception from HRESULT: 0x8000FFFF (E_UNEXPECTED)) ---> System.Runtime.InteropServices.COMException (0x8000FFFF): Catastrophic failure (Exception from HRESULT: 0x8000FFFF (E_UNEXPECTED))
    at Microsoft.SharePoint.Library.SPRequestInternalClass.GetGlobalContentTypeXml(String bstrUrl, Int32 type, UInt32 lcid, Object varIdBytes)
    at Microsoft.SharePoint.Library.SPRequest.GetGlobalContentTypeXml(String bstrUrl, Int32 type, UInt32 lcid, Object varIdBytes) -
    -- End of inner exception stack trace ---
    at Microsoft.SharePoint.SPGlobal.HandleComException(COMException comEx)
    at Microsoft.SharePoint.Library.SPRequest.GetGlobalContentTypeXml(String bstrUrl, Int32 type, UInt32 lcid, Object varIdBytes)
    at Microsoft.SharePoint.SPFieldCollection.FetchFieldsFromWeb()

  • Custom signature

    I have scanned my handwritten signature for use with emails. I have been able to add this to my Outlook emails in the my office on a PC but have not been able to figure out how to create a custom signature for my iphone & ipad.
    Rob

    step 1: send your handwritten signature from your PC to your iphone and ipad.
    step 2: on your iphone and ipad, hold the picture and select copy
    step 3: Go to Settings > Mail, contacts and Calendars > Signature and paste the picture
    Done

  • WLC IPS custom signature file

    Hi,
    Where can I download the WLC IPS custom signature file? Is WLC support openLdap for user web or 802.1x authentication?
    Best Regards,
    Jackson Ku

    The documentation for 5.1 is located at:
    http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps4077/products_configuration_guide_book09186a008055de07.html
    I believe the regex you want is:
    [Mm][Aa][Ii][Ll][\t][Ff][Rr][Oo][Mm][:][\x21-\x7E]+[@][Ss][Ee][Xx].[Cc][Oo][Mm]
    The + field allows for any printable characters (but there must be at least 1) in the senders email address. You should use the SMTP state machine with the SMTP Commands state set, direction to service port 25.

  • Using IPS 6.3 customized signatures in CS MARS

    A client has a Cisco IPS 6.3 module installed in a Catalyst 6500, *with fully customized signatures* which generate thousands of alerts clearly visible in its IPS Event Viewer.
    MARS is pulling info from that IPS, but the customized signatures do not appear in any Incident. Is it possible for MARS to pull all those customized signatures??
    Thanks in advance

    The first step is to get MARS to parse the event. The next step is to create the necessary inspection rules.
    You can start here:
    http://ciscomars.blogspot.com/2008/03/custom-ips-signatures-with-cisco-mars.html

  • Custom signature- SigName

    I have created a custom signature with idsmc 2.01 and during the creation it asked for a name. I entered the name that I wanted to use for the signature but when I received an event for the signature in SecMon, the name that appeared was the default name which is equivalent to the signature engine
    SigName: STRING.TCP <defaulted>
    Can some one tell me where you update the name filed on idsmc signature configuration?

    I have rebooted the sensor as you indicated but the SigName on the custom signature that I created remain the same. (STRING.TCP)
    These are the steps that I followed to create the signature where as follows
    1. I used the management centre for ids sensors version 2.01
    2. I selected the group to which the sensor belongs
    3. I select signature/ IDS 4.x
    4. Under the selection for Select group, you have two choices built-in/custom
    5. I chose custom and then add
    6. I selected the engine string.tcp and gave the signature a name along with its selected reg-expression and other parameters.
    7. I the used the quick deploy on IDSMC to send the custom signature the group of sensors
    The signature was deployed with all of the correct values and settings but the SigName was not changed from its default.

  • IPS custom signature to filter email domain

    Using IPS 5.0.
    I'm creating custom signature on SMTP using State Name: SMTP Commands.
    My question:
    1. On the Regex String, what should i key in to disable any users from the sex.com domain to send me email. I have keyin
    [Mm][Aa][Ii][Li][\t][Ff][Rr][Oo][Mm]:^.@[Ss][Ee][Xx].[Cc][Oo][Mm]
    but i don't think this is corrent...am i ??
    2. In the State Name(SMTP), they have
    Abort, Mail Body, Mail Header, SMTP Commands and Start. Can anyone provide the information (URL) and example of how to use these....
    Thanks in advance...

    The documentation for 5.1 is located at:
    http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps4077/products_configuration_guide_book09186a008055de07.html
    I believe the regex you want is:
    [Mm][Aa][Ii][Ll][\t][Ff][Rr][Oo][Mm][:][\x21-\x7E]+[@][Ss][Ee][Xx].[Cc][Oo][Mm]
    The + field allows for any printable characters (but there must be at least 1) in the senders email address. You should use the SMTP state machine with the SMTP Commands state set, direction to service port 25.

  • Problem description: My MacBook Pro is running really slow. Applications won't open or take up to 10 min.  EtreCheck version: 2.1.5 (108) Report generated December 27, 2014 at 9:15:58 PM CST  Click the [Support] links for help with non-Apple products

    Problem description:
    My MacBook Pro is running really slow. Applications won’t open or take up to 10 min.
    EtreCheck version: 2.1.5 (108)
    Report generated December 27, 2014 at 9:15:58 PM CST
    Click the [Support] links for help with non-Apple products.
    Click the [Details] links for more information about that line.
    Click the [Adware] links for help removing adware.
    Hardware Information: ℹ️
      MacBook Pro (13-inch, Late 2011) (Verified)
      MacBook Pro - model: MacBookPro8,1
      1 2.4 GHz Intel Core i5 CPU: 2-core
      4 GB RAM Upgradeable
      BANK 0/DIMM0
      2 GB DDR3 1333 MHz ok
      BANK 1/DIMM0
      2 GB DDR3 1333 MHz ok
      Bluetooth: Old - Handoff/Airdrop2 not supported
      Wireless:  en1: 802.11 a/b/g/n
    Video Information: ℹ️
      Intel HD Graphics 3000 - VRAM: 384 MB
      Color LCD 1280 x 800
    System Software: ℹ️
      OS X 10.10.1 (14B25) - Uptime: one day 6:55:8
    Disk Information: ℹ️
      TOSHIBA MK5065GSXF disk0 : (500.11 GB)
      EFI (disk0s1) <not mounted> : 210 MB
      Recovery HD (disk0s3) <not mounted>  [Recovery]: 650 MB
      HD (disk1) /  [Startup]: 498.88 GB (5.04 GB free) (Low!)
      Core Storage: disk0s2 499.25 GB Online
      MATSHITADVD-R   UJ-8A8 
    USB Information: ℹ️
      Apple Inc. FaceTime HD Camera (Built-in)
      Apple Inc. BRCM2070 Hub
      Apple Inc. Bluetooth USB Host Controller
      Apple Inc. Apple Internal Keyboard / Trackpad
      Apple Computer, Inc. IR Receiver
    Thunderbolt Information: ℹ️
      Apple Inc. thunderbolt_bus
    Gatekeeper: ℹ️
      Mac App Store and identified developers
    Kernel Extensions: ℹ️
      /System/Library/Extensions
      [loaded] com.epson.driver.EPSONProjectorUDAudio (1.30 - SDK 10.4) [Support]
      [not loaded] com.seagate.driver.PowSecDriverCore (5.2.6 - SDK 10.4) [Support]
      /System/Library/Extensions/Seagate Storage Driver.kext/Contents/PlugIns
      [not loaded] com.seagate.driver.PowSecLeafDriver_10_4 (5.2.6 - SDK 10.4) [Support]
      [not loaded] com.seagate.driver.PowSecLeafDriver_10_5 (5.2.6 - SDK 10.5) [Support]
      [not loaded] com.seagate.driver.SeagateDriveIcons (5.2.6 - SDK 10.4) [Support]
    Problem System Launch Agents: ℹ️
      [killed] com.apple.CallHistoryPluginHelper.plist
      [killed] com.apple.coreservices.appleid.authentication.plist
      [killed] com.apple.icloud.fmfd.plist
      [killed] com.apple.telephonyutilities.callservicesd.plist
      4 processes killed due to memory pressure
    Problem System Launch Daemons: ℹ️
      [killed] com.apple.ctkd.plist
      [killed] com.apple.icloud.findmydeviced.plist
      [killed] com.apple.ifdreader.plist
      [killed] com.apple.nehelper.plist
      [killed] com.apple.wdhelper.plist
      [running] com.seagate.TBDecorator.plist [Support]
      5 processes killed due to memory pressure
    Launch Agents: ℹ️
      [not loaded] com.adobe.AAM.Updater-1.0.plist [Support]
      [loaded] com.carbonite.launchd.carbonitealerts.plist [Support]
      [running] com.carbonite.launchd.carbonitestatus.plist [Support]
      [loaded] com.coupons.coupond.plist [Support]
      [loaded] com.hp.help.tocgenerator.plist [Support]
      [loaded] com.trendmicro.itis.dca.plist [Support]
      [running] com.trendmicro.itis.uimgmt.agent.plist [Support]
    Launch Daemons: ℹ️
      [failed] com.adobe.fpsaud.plist [Support]
      [running] com.carbonite.launchd.carbonitedaemon.plist [Support]
      [loaded] com.microsoft.office.licensing.helper.plist [Support]
      [running] com.trendmicro.icore.av.plist [Support]
      [running] com.trendmicro.icore.main.plist [Support]
      [running] com.trendmicro.icore.wp.plist [Support]
      [running] com.trendmicro.itis.plugin.plist [Support]
    User Launch Agents: ℹ️
      [loaded] com.adobe.AAM.Updater-1.0.plist [Support]
      [loaded] com.google.keystone.agent.plist [Support]
      [invalid?] com.jdibackup.JustCloud.autostart.plist [Support]
      [invalid?] com.jdibackup.JustCloud.backupstart.plist [Support]
      [loaded] com.trendmicro.itis.uninstaller.plist [Support]
    User Login Items: ℹ️
      iTunesHelper Application (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
      bomgar-scc-20130819-104735 UNKNOWN (missing value)
      bomgar-scc-20130905-143949 UNKNOWN (missing value)
      USB Display Agent Application (/Applications/USB Display/USB Display.app/Contents/Resources/USB Display Agent.app)
      WDDriveUtilityHelper Application (/Applications/WD Drive Utilities.app/Contents/Resources/WDDriveUtilityHelper.app)
      WDSecurityHelper Application (/Applications/WD Security.app/Contents/Resources/WDSecurityHelper.app)
      USB Display Agent Application (/Applications/USB Display/USB Display.app/Contents/Resources/USB Display Agent.app)
      bomgar-scc-20130819-104735 UNKNOWN (missing value)
      bomgar-scc-20130905-143949 UNKNOWN (missing value)
      HP Scheduler Application (/Library/Application Support/Hewlett-Packard/Software Update/HP Scheduler.app)
      HP Product Research Application (/Library/Application Support/Hewlett-Packard/Customer Participation/HP Product Research.app)
    Internet Plug-ins: ℹ️
      SharePointBrowserPlugin: Version: 14.4.7 - SDK 10.6 [Support]
      FlashPlayer-10.6: Version: 15.0.0.223 - SDK 10.6 [Support]
      CouponPrinter-FireFox_v2: Version: 5.0.5 - SDK 10.6 [Support]
      Flash Player: Version: 15.0.0.223 - SDK 10.6 Mismatch! Adobe recommends 16.0.0.235
      QuickTime Plugin: Version: 7.7.3
      Default Browser: Version: 600 - SDK 10.10
    User internet Plug-ins: ℹ️
      npBcsMcTcIO: Version: Unknown [Support]
    Safari Extensions: ℹ️
      Trend Micro Toolbar [Installed]
    3rd Party Preference Panes: ℹ️
      Carbonite  [Support]
      Flash Player  [Support]
      Paragon NTFS for Mac ® OS X  [Support]
      Seagate Dashboard for Mac OSX  [Support]
    Time Machine: ℹ️
      Skip System Files: NO
      Mobile backups: ON
      Auto backup: YES
      Volumes being backed up:
      HD: Disk size: 498.88 GB Disk used: 493.84 GB
      Destinations:
      Jens Seagate Backup [Local]
      Total size: 999.86 GB
      Total number of backups: 6
      Oldest backup: 2014-06-24 10:33:56 +0000
      Last backup: 2014-12-17 17:14:18 +0000
      Size of backup disk: Too small
      Backup size 999.86 GB < (Disk used 493.84 GB X 3)
      My Passport for Mac [Local]
      Total size: 2.00 TB
      Total number of backups: 14
      Oldest backup: 2013-08-21 19:19:35 +0000
      Last backup: 2014-12-19 11:44:23 +0000
      Size of backup disk: Excellent
      Backup size 2.00 TB > (Disk size 498.88 GB X 3)
    Top Processes by CPU: ℹ️
          6% coreaudiod
          5% CarboniteDaemon
          4% iMovie
          3% JustCloud
          3% Wondershare Player
    Top Processes by Memory: ℹ️
      335 MB iPhoto Library Manager
      180 MB Finder
      142 MB iMovie
      70 MB Preview
      51 MB Microsoft Word
    Virtual Memory Information: ℹ️
      149 MB Free RAM
      1.04 GB Active RAM
      897 MB Inactive RAM
      1.17 GB Wired RAM
      30.53 GB Page-ins
      1.42 GB Page-outs
    Diagnostics Information: ℹ️
      Dec 26, 2014, 05:17:12 PM /Library/Logs/DiagnosticReports/iPhoto_2014-12-26-171712_[redacted].cpu_resourc e.diag [Details]
      Dec 26, 2014, 03:47:17 PM /Library/Logs/DiagnosticReports/CarboniteDaemon_2014-12-26-154717_[redacted].cp u_resource.diag [Details]
      Dec 26, 2014, 02:22:01 PM Self test - passed
      Dec 26, 2014, 11:48:03 AM /Library/Logs/DiagnosticReports/CarboniteDaemon_2014-12-26-114803_[redacted].cp u_resource.diag [Details]

    You have nearly run out of disk space.  Either purchase a larger one or start cleaning out the one you have?

  • SharePoint 2013 - Asking for password with NTLM

    Hi All,
    We have deployed a web application using NTLM with single sign on. It’s a secure site and in IIS bindings we have SSL certificate attached with this web application. However, many users are keep getting windows authentication prompt as shown:
     There are lot of blog posts that solve the issue by adjust IE settings >> Security >>
    Sites >> Advanced >> and added the site URL and
    Security
    >>   Local Intranet >> Custom Level >> At bottom choose “Automatic logon with current username and password”
    http://blog.fpweb.net/sharepoint-credentials-prompt-quick-tip/#.VPBz3vmUdUW http://www.sharepointdiary.com/2012/04/sharepoint-keeps-asking-for-password.html
    https://sysadminspot.com/windows/google-chrome-and-ntlm-auto-logon-using-windows-authentication/ (IE, Chrome, Firefox)
    http://social.education.purdue.edu/edit/2011/03/sharepoint-pw-prompts/
    I have tested the blogs posts and change the settings in our development environment
    and no windows authentication was shown with my username on the SharePoint 2013 environment. But, all related to change IE settings. In our organization, we have around
    2000 users. It be impractical to set for users for these IE settings and network team regularly pushes group polices.
    Q: Is some configuration has to be set on IIS or
    some settings on SharePoint that users don’t get windows authentication? I have tried most of options but could not resolve this issue.
    Any pointers would be greatly appreciated.    
    Cheers,    
    Aroh Shukla

    Sites go into the Intranet Zone, not the Trusted Zone. Only Intranet is configured, by default, to automatically pass credentials to SharePoint.
    Yes, there are scenarios where this may not work, e.g. if you've configured the Web Application with Kerberos but didn't configure the SPN. Or if you're using Kerberos Constrained Delegation with Domain Controllers older than Server 2012 and your users are
    in a different forest, etc.
    Trevor Seward
    Follow or contact me at...
    &nbsp&nbsp
    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

  • Enter a country for partner with type 'Sold-to Party'

    Hi
    when we try to send Delivery Scheduld to SUS from R/3 thro
    Idoc "DELINS" we are getting the following error on the SRM side
    An error occured within an XI interface: Exception
    occurredE:BBP_PD:147 -Enter a country for partner with type 'Sold-to
    Party' E:BBP_PD:428 -Enter exactly one partner of type Sold-to Party
    I:R5:553 -'Different country' field contents deleted because identical
    to 'Country' E:BS:002 -"Create" is not allowed (SUS Purchase Order
    7500000062 ) Programm: CX_BBP_BD_ERROR===============CP; Include:
    CX_BBP_BD_ERROR===============CM002; Line: 57
    we also tried referring the note 987569, we are on SP as follows
    SAP_BASIS SAPKB70010
    SRM_PLUS 550 SAPKIBK007
    SRM_SERVER 550 SAPKIBKT07
    regards,
    Anand

    Hi
    <u>We have faced a similar problem in our previous Implementation.
    This is happening in some cases, where the configuartion settingas are not correctly done.</u>
    <b>After several tentatives, I managed to solve it activing on the Customizing for Multicompany in one client.
    I have accessed to table BBPC_MARKETSET (Status of selection in a market set system) through SM30 and I have just removed the flag "Configure Market Set Procurement".</b>
    <u>Also, another option,
    check your Enhancements (customer specific) because this is a clear logical error.
    The same partner function is added twice, hence it must be deleted programmatically in the enhancement logic.
    FYI.. I usually encountered same type of issues in almost every implementation.</u>
    Hope this will help.
    Please reward suitable points, incase it suits your requirements.
    Regards
    - Atul

Maybe you are looking for

  • How to use one commandButton to execute two tasks in JSF

    I have a form in JSF page which contains different faces components. These faces bind to ADF BC to insert one row in the database when the user press commandButton. Also I need to bind the value of one inputText in that form to managed bean to execut

  • How to access an action's Due Date through the GP API

    I'm new to the GP API, and I would like to know how can I get/set an action's due date and notifications at runtime. Is it possible to create new actions and attach them to a process? Thanks in advance

  • Set password in AD LDS giving error

    Hi, I am having problem while adding user password in AD LDS. The following code is giving error. Attributes attrs = new BasicAttributes(true); attrs.put("userPassword", "VANESSA"); Can any one please help on this?

  • EVT_, SM and SMP_ tables in a user schema

    I found some tables and indexes in a user schema that this user hasn't created. 15 tables have a prefix EVT_, about 35 start with SM and about 30 have the prefix SMP_ . It seems they are some type of tables created by Oracle. What are they for and ca

  • Taxes PO Printing

    Hi, I am facing a problem while printing PO 1) I am entering taxes like Excise,VAT,CST,Cess etc    I want that taxes to be printed in PO 2) If multiple line items with diffrent tax conditions are there how can I print that in PO 3) How to treat diffr