Dmz configuration

I have been trying to configure dmz in beehive 1.3 release
Done all the configuration steps in
http://download.oracle.com/docs/cd/E10534_01/bh.100/e10481/dmz.htm#CCHIEJHE
Step A & Step B.
Not having currently any firewall in between the dmz and application tier and ssl turned to "false" in opmn.xml of dmz tier.
But the dmz instance is not been shown with the command <Oracle home>/opmn/bin/opmnctl @cluster status
What could have gone wrong??
Help is deeply appreciated..
Thanks
raghu

Thanks indeed for the help.....
Well the real issue with the opmn @cluster status got resolved.
I changed the ssl to "false" in the beehive instance also.
opmnctl @cluster status
Processes in Instance: dmz.beehivedmz.beehive.com
--------------------------------------------------------------+---------
ias-component | process-type | pid | status
--------------------------------------------------------------+---------
BTI | BTI | 10139 | Alive
ASG | ASG | N/A | Down
HTTP_Server | HTTP_Server | 10138 | Alive
Processes in Instance: beehive.beehive.beehive.com
--------------------------------------------------------------+---------
ias-component | process-type | pid | status
--------------------------------------------------------------+---------
BTI | BTI | 23206 | Alive
ASG | ASG | N/A | Down
OC4JGroup:default_group | OC4J:BEECORE | 23205 | Alive
OC4JGroup:default_group | OC4J:BEEAPP | 24500 | Alive
OC4JGroup:default_group | OC4J:BEEMGMT | 23203 | Alive
OC4JGroup:default_group | OC4J:oc4j_soa | 23202 | Alive
HTTP_Server | HTTP_Server | 23201 | Alive
However the command beectl list_properties --component CURRENTSITE:OpmnCluster is not showing the dmz instance?????????
-----------------------------+--------------------------------------------------
Property name | Property value
-----------------------------+--------------------------------------------------
Alias |
-----------------------------+--------------------------------------------------
NotificationServerSslEnabled | true
-----------------------------+--------------------------------------------------
Opmns | opmn_zimbra.beehive.beehive.com , d68f2410-b7bf-4
| e4e-9208-d9057abade12 , opmn_beehive.beehive.beeh
| ive.com , 0c7e73a3-96ed-4e3f-8ce3-9ea52bc9c539
-----------------------------+--------------------------------------------------
Site | CURRENTSITE
-----------------------------+--------------------------------------------------
4 Record(s) displayed.
How can that happen!!!

Similar Messages

R12 DMZ configuration

Hi All,
I am planning to configure DMZ in my env.
Application : 2 Node
Database : RAC 11gR2
OS : AIX 6.1
Application version : R12.1.3
Using 1 Cisco Hardware load balancer
Query:
I am planning to go for option 'Using Hardware Load Balancers With No External Web Tier' as I dont want to to put my Application server to external world.
I am planning to create vritual machine in Apps Node 1.
for this Do I need a seperate loadbalancer or can I use the same load balancer used for internal Application servers?
What all configuration changes I should suggest to out network team for this DMZ configuration?
Please suggests
Thanks in advance

You can refer Option 2.5: Using Hardware Load Balancers With No External Web Tier from MOS note:
Oracle E-Business Suite R12 Configuration in a DMZ [ID 380490.1]
You can also refer Cisco part for Hardware load balancer from
Implementing Load Balancing On Oracle E-Business Suite - Documentation For Specific Load Balancer Hardware [ID 727171.1]
thanks

Implementing a Reverse Proxy Alone in a DMZ Configuration....???

Hii All ,
have anybody implemented this configuration..??
Implementing a Reverse Proxy Alone in a DMZ Configuration - R12 [ID 726953.1]
we planning to implement this configuration, please guide me if anybdy implemented and working with this configuration.
Thanks
RB

Hi,
1)in that document they have used 10g webcache as reverse proxy... but in my case already modproxy in place can i use this modproxy in place of 10g webcache..?A number of options exist for choosing a reverse proxy -- See (Oracle E-Business Suite R12 Configuration in a DMZ [ID 380490.1]), Appendix D: Reverse Proxy Configuration
It is also explained in this article.
In-Depth: Demilitarized Zones and the E-Business Suite
http://blogs.oracle.com/stevenChan/2006/05/indepth_demilitarized_zones_an.html
2)i have 2 web nodes loadbalancing through reverseproxy, do i need to configure the external web node on both the web nodes ..according to the above doc..?You do not need to have a dedicated reverse proxy for each web tier node (see the second diagram in this doc).
Advanced Deployment Architectures for Oracle E-Business Suite (OpenWorld 2008 Recap)
http://blogs.oracle.com/stevenChan/2008/11/advanced_deployment_architectures_for_oracle_ebs.html
Thanks,
Hussein

RV082 DMZ Configuration Question - Point to Point

Hello,
We have 2 offices in different countries both using the RV082 router. Currently both offices have an internet connection on WAN1 and that is working fine.
We are adding a Point to Point circuit between the two offices, and my question is on the RV082 configuration on each side.
I was going to configure WAN2 in DMZ mode on each router, then connect the point to point circuit to the WAN2 port. On the China side, the DMZ IP will have to be a private address (192.168.177.1), while the DMZ port on the San Diego side will be a public IP.
We need internal computers to be able to go to the internet normally through WAN1, but also go through WAN2 if they are trying to reach the other network. I will be adding routes on each RV082 for this.
Is there anything wrong with this configuration? Do I need to change the routers from Gateway to Router mode? Does it matter if the DMZ WAN2 port has a private IP address?
Any advice or tips are greatly appreciated!
Thank you in advance,
Eric

Thanks Tom but that thread is not exactly what I was looking for. Mainly I just want to know if the RV082 can act as a fully functioning router with the two WAN ports going to different networks. So the LAN side would hit the router, look at the routing table and know which WAN port to go out of. Using the DMZ seems like it will work, but I have never tried it so I wanted to throw it out there and see if anyone has done this before.

ISA-570 DMZ configuration?

Our configuration is a little tricky, but certainly not uncommon. Our ISP provides a single static WAN IP x.x.x.162/30 (gateway is x.x.x.161), then has provisioned 2 ranges of public IP's in different subnets. One is y.y.y.112/29 and the other is z.z.z.32/28.   We use the "z" range for our DMZ and when we lease office space to a tenant they get the "y" range.
We have been using an RV082 in "router mode" as the first inside device, some firewall rules here to protect our servers/device in the DMZ ranges. Then a 2nd RV082 between that and our LAN running in "gateway mode" to provide traditional NAT & firewall for the private network.
Recently, we increased the speed of our ISP fiber to 100M. The RV082's don't really have the processing power to keep up with this, so we are trying to replace them with a more capable device. The ISA-570 was recommended as it is rated to perform at or above 100M for VPN and Stateful firewall.
The ISA-570 appears to have the capability to do advanced routing functions, so it would seem there should be a way to combine our two RV's into one ISA. The ISA has a "routing mode" that you toggle on or off. When routing mode is ON it disables all NAT functions, so that won't work. I need to configure this with routing mode OFF, but figure out how to put in custom Routing or NAT rules since our Public IP ranges are in different subnets from our primary WAN IP. We have tried many config options with no success.
I'll see if I can diagram this as quickly as possible...
WAN port - IP x.x.x.162/30   (gateway x.x.x.161 - Centurylink's device)
DMZ1 - z.z.z.32/28 (port 9 configured with IP of z.z.z.33)
DMZ2 - don't worry about this for now - if we get one working we can get both working
No matter what I try, the DMZ range either gets NAT'ed through the WAN IP, or loses internet connection.
Is there a way to do this with this device? (My residential U-verse router can do this) Is there another device that will allow me to function as a router and gateway at the same time? I have tried static routing rules, RIP.... got desperate and tinkered with static/advanced NAT, Dynamic PAT, etc, but I don't really have any training in routing protocols and syntax, so I'm a little lost there.
** The only thing we haven't tried is setting the DMZ as a private range and configuring static NAT. Reprogramming all the DMZ NIC's of the servers is something I'd like to avoid. Furthermore, this really turns it into just another private LAN subnet which could be handled as a VLAN, so then what is the purpose of having so-called "DMZ" as a special classification in the ISA's config?   More confusing is the ISA-570 will program for multiple DMZ ranges, so there must be something we're missing... If not, then it's like having a rack full of new servers and only one free port on the switch.

Good morning
Thanks for using our forum
My name is Johnnatan and I am part of the Small business Support community. I apologife for the problems you are having, as your Cisco partner contact said, you are looking for a enterprise device, like the ASA. If you use your ISA as “gateway” it disables the “router” mode features and viceversa. I hope you find this answer useful,
*Please mark the question as Answered or rate it so other users can benefit from it"
Greetings,
Johnnatan Rodriguez Miranda.
Cisco Network Support Engineer.

DMZ Configuration for entire 11.5.10.2 instance

Hi All,
We are having SCM, financials and hrms(core without sshr,Irecritment/OLM)
modules implementation for one of our client ( 11.5.10.2 on Solaris 10).
Clients have ordered Hardware as folows.
2 No's Externel application servers with network loadbalancer
2 No's Internal Application servers with network load balancer
2 No's database servers with RAC
For 11.5.10.2 on Sun solaris.
My doubt is we are not using any i-modules(means Web enabled modules) but
client requirement is they have to use this application from internet as
well as from LAN/WAN users.
Is We can Do entire application DMZ for internet users and How ? Please
let me know the steps?
This is the first time i am configuring DMZ. can you please help me out
Thanks and Regards
Vasu

If you are not following the standard DMZ config you should at least consider putting in a reverse proxy server. You will probably want to investigate the built in url filter to see if you can utilize it. There are also security companys that provide tools and consulting services that could be of help, http://www.integrigy.com comes to mind.
I don't like the idea of exposing the entire ebusiness suite on the internet. Unless you can keep up with all of the security patches the risk to your business may outway the benefit.

DMZ Configuration for Sourcing

Hi,
We're configuring DMZ to enable Sourcing module for a bank to provide supplier access. One of the key concern for the bank is how much of DB is exposed through external web-server. Any thoughts on this one? Does the external web server (in DMZ) talk to DB directly without going through internal app server? Will the file upload hit DB directly without going through App Node?
In case if the answers to above questions are yes then what are the alternatives available to avoid DB being exposed through external server directly?
Thanks,
Viral Dhruv

Hi Viral,
Does the external web server (in DMZ) talk to DB directly without going through internal app server?
Yes, It the external domain (DMZ) communicates directly with the DB without the intervention of internal apps node.
The main objective of setting up a DMZ is to deploy security on the internal data. When setting up DMZ you have the option of including multiple firewalls so that data access is restricted. This is well explained in the below note.
Please see:
Oracle E-Business Suite R12 Configuration in a DMZ (Doc ID 380490.1)
In case if the answers to above questions are yes then what are the alternatives available to avoid DB being exposed through external server directly?
Please see:
How To Configure Firewall When Remoting Container Sits Inside DeMilitarized Zone (DMZ) (Doc ID 1149388.1)
Hints and Tips for Troubleshooting the URL Firewall (410-Gone on DMZ External Tiers) (Doc ID 460564.1)
Thanksk &
Best Regards,
Asif

RV082 Port Forwarding or DMZ Configuration Assistance

Greetings Community,
I have an RV082 V2 with 2.0.2.01-tm and I am having trouble with getting my Sprint Airvana to connect properly to the mobile service. Many suggestions I've read on the Sprint forums indicate putting the Airvana in the DMZ generally allows the device to work properly; however, none have the RV series routers for tips on how to do this appropriately. This device used to work fine behind the RV082, but I reset it one day and it no longer works.
The Airvana is a femtocell/router device with a WAN port and 3 LAN ports. If I connect the Airvana directly to my cable modem, I get the appropriate connection and can then make calls through the device instead of through the Sprint connection; I live in a basement unit and get crappy signal without the device. This proves the device works and that my ISP is not blocking the ports. Sprint indicates the device uses UDP 53, 67, 68, 500 and 4500. Their support sucks and they insist I put the Airvana before my router. I absolutely do not want to use the Airvana as the router. There are almost no configuration options in the router interface and it needs to be rebooted somewhat regularly, which would drop internet access throughout the house for 10-15 minutes while it reboots and finally establishes an internet connection.
As soon as put the Airvana behind the RV082, I no longer get the appropriate connection. I can, however, plug my computer into one of the LAN ports on the Airvana and connect to the internet in general. I have the router assign a static IP to the Airvana, and tried forwarding the required UDP ports to the IP. This did not fix the problem.
I can certainly troubleshoot the port forwarding issues, but I would also like to look into putting the device into the DMZ, if possible. I've not worked much in this area, so I am unsure how to appropriately configure the router to allow this to happen. Is it possible to have the Airvana in the router DMZ without having a public IP for the device itself? It seems this is something that can be done, but I could be mistaken. If so, how is that done?
Please feel free to ask any clarifying questions and I thank you in advance for any assistance you may provide.

I apologize in the delay in getting back to this post; however, it dropped to the bottom of my priority list for a while. As a workaround, I used the Airvana device as my router temporarily; however, I have the time again and would like to get it setup behind the RV082 again.
It does not appear the device supports UPnP. I had that enabled for some other applications already.
According to http://tinyurl.com/AirvanaPorts I need the following UDP ports open: 53, 67, 68, 500, 4500. Another suggestion from a Sprint rep was to also open/forward TCP 5060 and 5061. I have the ports forwarded to the device as shown below and have confirmed the device has the correct IP address. The device gets a valid internet connection (verified by plugging a computer into one of the LAN ports on the Airvana device; however, it still does not connect to the Sprint service like it should. I am guessing there is another port and/or the Sprint article has incorrect information.
To check this, I'm thinking I need to set the device up in the DMZ, but I'm not sure exactly what I need to do for proper configuration. Is it as easy as enabling the DMZ port and plugging the device in, or are there other settings needed? Is there anything else I may be missing for the Port Forwarding?

Upgrade from 12.1.1 to 12.1.3 with DMZ configured

Hi All
Required patches for Upgrade
9239089
9239090
9239095
9817770
9966055
Step 1: shut down all the application services and database.
Step 2: Take a cold backup of both file systems (APPS Tier and DB Tier)
Step 3: Start the database listener and keep database in open state.
Step 4: Ensure the binutils -2.17.50.6-6.0.1.el5 .
If it is higher than above version downgrade it to avoid the error of                relink module “MSSCPP”.
Step 5: Increase the size of table space APPS_TS_TX_DATA, SYSAUX and enable
auto extend on to the added datafile
Step 6: To check the datafile location and file ID query the below SQL statement
SQL>select file_name, tablespace_name from dba_data_files where               tablespace_name='APPS_TS_TX_DATA' order by file_name;
Step 7: To increase the table space size, query the below SQL statement.
SQL>ALTER TABLESPACE APPS_TS_TX_DATA add datafile '/u01/oracle/TESTEBS/db/apps_st/data/a_txn_data_05.dbf' size 3G autoextend on;
Step 8: unzip the necessary patches and give the permissions to application user
             to access the patches.
Step 9: Apply R12.AD.B.DELTA.3 - Patch 9239089
Create $ORACLE_HOME/appsutil/admin on the database server.
Copy adgrants.sql (UNIX) from this patch directory 9239089 to $ORACLE_HOME/appsutil/admin.
Set the environment to point to ORACLE_HOME on the database server.
Use SQL*Plus to run the script- $ sqlplus "/ as sysdba"
SQL> @$ORACLE_HOME/appsutil/admin/adgrants.sql APPS
Enable maintenance mode with adadmin, and set the environment to correct apps environment.
Apply 9239089 using adpatch tool
It prompts us the default location of the patch. We have to give the location of patch where its stored.
It prompts us driver file which was in the patch directory, we have to give it e.g.: u9239089.drv
Step 10: Apply Oracle E-Business Suite Release 12.1.3 patch 9239090
It prompts us the default location of the patch, we have to give the location. Example [/d01/oracle/NewVis/apps/12.1.3/9239090]
It prompts us the driver file for the patch, we have to give the file.
Example: [u9239090.drv] which was in the patch directory.
Step 11: Apply the Online help file patch 9239095
It prompts us the driver file for the patch, we have to give the file.
Example: [u9239095.drv] which was in the patch directory.
Step 12: Apply the consolidated patch 9817770
It prompts us the driver file for the patch, we have to give the file.
Example: [u9817770.drv] which was in the patch directory.
Step 13: Apply the help patch 9966055
It prompts us the default location of the patch, we have to give the location. Example [/d01/oracle/NewVis/apps/12.1.3/9966055]
It prompts us the driver file for the patch, we have to give the file.
Example: [u9966055.drv] which was in the patch directory.
Step 14: Run Autoconfig
Source the application env file. Then run autoconfig in apps tier.
$ $ADMIN_SCRIPTS_HOME/adautocfg.sh
Now generate the appsutil.zip file.
$ perl /bin/admkappsutil.pl
Copy appsutil.zip file in DB_HOME. Unzip the appsutil.zip file.
After sourcing the database env file run autoconfig in database tier.
Step 15: Run Pre-Clone
Now run preclone in db tier first, then in apps tier
perl adpreclone.pl dbTier
perl adpreclone.pl appsTier
These are all the steps we used to follow in the normal environments
Kindly let us the procedure to follow in the DMZ environments.
Regards
Niranjan

Did you make sure the database patches listed in 761570.1 are applied before applying 12.1.3 upgrade patch? I don't see them listed in your post.
I just checked 12.1.1 freshly installed instance and found following patches missing on 11.1.0.7.0 database which is installed with 12.1.1
6460304
7684818
8639653
8940108
9066130
9554727
9743057
7319922 - Only for Linux x86_64
Regards,
Sayeed Salahuddin

DMZ configuration WRT610N for 2 IP addresses Help needed

How can I set up DMZ for 2 IP addresses in WRT610N. Please help. Thanks

How would I solve this problem then. I have to servers on the network. One is Linux and other one is Windows. I'm buying block of 5 IP addresses from provider. One is assingned to .250 internal address and other one is .240. I would like to assign public addresses to them. At my work we have Neutopia box and have about 4 servers behind it with internal IP addresses. In netopia box have a table populated with addresses internal and external. Please, help. Thanks

ASA / DMZ configuration

Hi:
I have to allow traffic from my DMZ into my LAN
I have created the following access list and will apply to DMZ interface:
interface Ethernet0/1
nameif inside
security-level 100
ip address 192.168.200.1 255.255.255.0
interface Ethernet0/2
nameif dmz
security-level 50
ip address 10.0.0.1 255.255.255.248
access-list dmz2in permit tcp host 10.0.0.3 host 192.168.200.38 eq 25
access-list dmz2in permit udp host 10.0.0.3 host 192.168.200.10 eq 53
access-list dmz2in permit udp host 10.0.0.3 host 192.168.200.10 eq 123
access-list dmz2in permit tcp host 10.0.0.3 host 192.168.200.10 eq 389
access-group dmz2in in interface dmz
Do I need to specify a 1-1 "static" map between DMZ and LAN or visa versa?
Static (dmz,inside) 192.168.23.0 255.255.255.0 192.168.23.0 255.255.255.0
What am i missing?
Thank you

Hello Stan,
The access-list are great by the way
Now you might have to do it as you already have NAT in place ( PAT/NAT,etc) so if you have this or NAT-control enabled then you will need it
static (inside,dmz) 192.168.200.0 192.168.200.0
static (dmz,inside) 10.0.0.0 10.0.0.0
regards

Accessing E-business suite in another network without configuring DMZ

Hi
How can i enable to access E-business sutie externally or to a different location.I dont want to setup the DMZ configurations and reverse proxy.Our Company have another Remote branch and they are not in same network.How can they able to access the E-business suite without enabling DMZ and reverse proxy.Is there anything like make the
IP of the Apps server as public will solve the issue ?
rgds
rosh

To make it public, you just need to change the IP Address of the application and the database servers to the real one and follow the steps in the following notes. Once you are done, the system will be accessible to the users then.
Note: 338003.1 - How to change the hostname and/or port of the Database Tier using AutoConfig
https://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=338003.1
Note: 341322.1 - How to change the hostname of an Applications Tier using AutoConfig
https://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=341322.1

DMZ Apache with OAS WebCache configuration for 11i

Hi,
We have the following configuration in place (using note DMZ Configuration with Oracle E-Business Suite 11i [ID 287176.1])
1. Browser (https) --> Internet --> |firewall| --> DMZ Apache reverse proxy server (https) --> |firewall| --> External 11i webtier (http) --> Internal 11i apptier --> Database
Now, we want to change it, so that the following configuration can work.
2. Browser (https) --> Internet --> |firewall| --> DMZ Apache reverse proxy server (https) --> |firewall| --> OAS WebCache (https) --> Internal 11i apptier --> Database
no cluster, no load balancer, no RAC in this configuration.
The user access are the same in #1 and #2: External users access 11i via "partners.external.com", while internal users use "employees.internal.com". Apache server in DMZ is the Entry Point.
Note "Installing and Configuring Web Cache 10.1.2 and Oracle E-Business Suite 11i [ID 306653.1]" is to set up WebCache as Entry Point for 11i. If we use it, external users are not able to access 11i system with "partners.external.com".
Question:
can #2 configuration be set up and work? which Oracle doucuments to follow?
Thanks in advance,

Hi,
with following steps in 306653.1, profiles s_webentryhost and s_login_page are set with WebCache servername.
The access for internal users is working with URL https://webcachesername.internal.com/oa_servlets/AppsLogin
but external users cannot log in: at logon page, after typing username/password,
the logon page is refreshed back to the same logon page. If typing a wrong password, "Login failed" error shows as expected.
Thanks,

How to Read file from Application in DMZ Server (page on DMZ)

Hi All,
i am trying open a file from application server from OAF page on DMZ server .
i am getting the error 'either not supported file type or file is damaged '.
i am taking the path of production server to read the file from DMZ server .
Please let me know what is the issue .
Thanks
Raju

Please post the details of the application release, database version and OS.
i am trying open a file from application server from OAF page on DMZ server .Is the issue with all OAF pages or with specific ones only?
i am getting the error 'either not supported file type or file is damaged '.Please check Apache log files for details about the error (error_log* and access_log*).
i am taking the path of production server to read the file from DMZ server .What type of DMZ configuration you have?
Thanks,
Hussein

Log Out Page is Not working in R12.1.3 DMZ

Hi Everyone ,
Good Evening.
Apps Version : 12.1.3
DB Version 11.2.0.3
PLatform : AIX 6.1
Arch : LBR ---> Reverse Proxy ----> EXternal Middle Tier (DMZ) --- DB
I am able to login to External Middle tier using the URL ( https://LBR.Domain/OA_HTML/AppsLocalLogin.jsp. I am able to navigate the links like preferences , Diagnostic , Home. But As soon as I am clicking on the log out link , I am getting http 500 error.
One this Which I have Observer that Lou out Url is changing to the host name of the server instead of LBR Name as
( https://hostname.domain/OA_HTML/AppsLocalLogin.jsp?cancelUrl=/OA_HTML/AppsLocalLogin.jsp&_logoutRedirect=y&langCode=US)
I have already followed the doc on Metalinks but no luck. Have tried to run the Autoconfig and bouncing of application but no luck. Enabled the Debug for OC4J but couldn't get any thing
Advanced Configurations and Topologies for Enterprise Deployments of E-Business Suite 11i [ID 217368.1]
Oracle E-Business Suite R12 Configuration in a DMZ (Doc ID 380490.1)
MOS Doc 380489.1 (Using Load-Balancers with Oracle E-Business Suite Release 12)
Tips and Queries for Troubleshooting Advanced Topologies (Doc ID 364439.1)
Enabling SSL in Oracle E-Business Suite Release 12 (Doc ID 376700.1)
Case History: Implementing a Reverse Proxy Alone in a DMZ Configuration - R12 (Doc ID 726953.1)
Regards
Sourabh Gupta

Access LOG
192.25.91.72 - - [12/Jan/2013:03:19:51 -0800] "GET /OA_HTML/AppsLocalLogin.jsp HTTP/1.1" 302 654
192.25.91.72 - - [12/Jan/2013:03:20:09 -0800] "GET /OA_HTML/RF.jsp?function_id=33375&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=Qs-5KmFWI7wTvCh5zUbV0Q&oa
s=kukIe_oeKd3-mIFqpYDc-g.. HTTP/1.1" 200 36832
192.25.91.72 - - [12/Jan/2013:03:20:12 -0800] "GET /OA_MEDIA/nlsgb.gif HTTP/1.1" 404 224
192.25.91.72 - - [12/Jan/2013:03:20:13 -0800] "GET /favicon.ico HTTP/1.1" 404 217
192.25.91.72 - - [12/Jan/2013:03:20:43 -0800] "POST /OA_HTML/OA.jsp?page=/oracle/apps/fnd/sso/login/webui/MainLoginPG&_ri=0&_ti=1178971693&language_code=US&requestUrl=&oapc=2&oa
s=yYEcdVDqcyn1J76kQdGvIg.. HTTP/1.1" 302 297
192.25.91.72 - - [12/Jan/2013:03:20:49 -0800] "GET /OA_HTML/OA.jsp?OAFunc=OAHOMEPAGE HTTP/1.1" 200 23961
192.25.91.72 - - [12/Jan/2013:03:20:51 -0800] "GET /favicon.ico HTTP/1.1" 404 217
192.25.91.72 - - [12/Jan/2013:03:20:51 -0800] "POST /OA_HTML/RF.jsp?function_id=MAINMENUREST&security_group_id=0 HTTP/1.1" 200 527
192.25.91.72 - - [12/Jan/2013:03:20:58 -0800] "GET /OA_HTML/OALogout.jsp?menu=Y HTTP/1.1" 302 255
192.25.91.72 - - [12/Jan/2013:03:20:59 -0800] "GET /OA_HTML/AppsLogout HTTP/1.1" 302 474
192.25.91.72 - - [12/Jan/2013:03:21:21 -0800] "GET /OA_HTML/xxatatgibeCAcdLogin.jsp HTTP/1.1" 200 4955
192.25.91.72 - - [12/Jan/2013:03:21:22 -0800] "GET /favicon.ico HTTP/1.1" 404 217
Error-Log ====================
[Sat Jan 12 05:27:42 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1700): [client 192.25.91.72] [ecid: 1357997262:192.25.89.136:17825804
:0:16,0] mod_oc4j: Response header 3, Key: Location, Value: https://LBR:443/OA_HTML/AppsLogout
[Sat Jan 12 05:27:42 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1748): [client 192.25.91.72] [ecid: 1357997262:192.25.89.136:17825804
:0:16,0] mod_oc4j: sending response chunk to client: 243 bytes
[Sat Jan 12 05:27:42 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_main.c(554): [client 192.25.91.72] [ecid: 1357997262:192.25.89.136:17825804:0:16,0]
mod_oc4j: Successfully serviced the request by worker: home.
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(845): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Sending request to: hostname.cos.domain.com:21530
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(900): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: num request headers: 13
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 0, Key: Accept, Value: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 1, Key: Accept-Charset, Value: ISO-8859-1,utf-8;q=0.7,*;q=0.3
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 2, Key: Accept-Encoding, Value: gzip,deflate,sdch
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 3, Key: Accept-Language, Value: en-US,en;q=0.8
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 4, Key: Connection, Value: Keep-Alive
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 5, Key: Cookie, Value: OTST_pses=ZGF3942C49577C19434B20BB2BFC38217F24B83798344666F7EBDA8A2CE821953ED87BB7860DF6137DC51AB7F3AB1DD1D7; JSESSIONID=
1d74eb5633089116f24c2c69ae565cbadc116765f9bbba7ef053c2d31f9f18a2.e38QahiPbxuObi0LbxeKaN0Kch0Re0; rvprod=; AGRL=thcgn_ivteb36%40lnubb.pb.va%7C%3A%3Bbde49ffdb22662e94721e6e73d7c20
f4%3A%3DUmaluUp4qT5fgOwL8NFUGg%3D%3D%3A%3B57f4c9dc1bf265e6378a7ea00a65338f%3A%3DUmaluUp4qT5fgOwL8NFUGg%3D%3D%3A%3B4ed5d2eaed1a1fadcc41ad1d58ed603e%3A%3DUmaluUp4qT5fgOwL8NFUGg%3D
%3D%3A%3Bdb486e4cdf8b2048591e59f683319c4c%3A%3DUmaluUp4qT5fgOwL8NFUGg%3D%3D%3A%3B459d9fca17e3a950deae755d13578292%3A%3DUmaluUp4qT5fgOwL8NFUGg%3D%3D%3A%3Bed89387bcd11937a7a92a99a
2cbfb5d7%3A%3Dox20hZArLI714LpPDtK%2Fhw%3D%3D%3A%3Bef21925fada6dfb684b5d8ec72114bb1%3A%3DATXmBagSN%2B8f817OiRKOyg%3D%3D%3A%3Bf7a42fe7211f98ac7a60a285ac3a9e87%3A%3DUmaluUp4qT5fgOw
L8NFUGg%3D%3D%3A%3B851f5ac9941d720844d143ed9cfcf60a%3A%3DUmaluUp4qT5fgOwL8NFUGg%3D%3D%3A%3B9ed39e2ea931586b6a985a6942ef573e%3A%3DUmaluUp4qT5fgOwL8NFUGg%3D%3D%3A%3Becfdd0a8fcb7da
c5ef0e651b7a6bb24c%3A%3DUmaluUp4qT5fgOwL8NFUGg%3D%3D; AGWL=; s_vi=[CS]v1|2834C339851633B7-600001A68017C480[CE]; treemenu1=none open; OTST=t3ThpFHMpGPbJV3neU811CUwTg; oracle.uix=
0^^GMT+5:30^p
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 6, Key: Host, Value: hostname.cos.domain.com:4493
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 7, Key: Referer, Value: https://LBR/OA_HTML/OA.jsp?OAFunc=OAHOMEPAGE
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 7, Key: Referer, Value: https://LBR/OA_HTML/OA.jsp?OAFunc=OAHOMEPAGE
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 8, Key: User-Agent, Value: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 9, Key: X-Forwarded-For, Value: 192.25.91.88
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 10, Key: X-Forwarded-Host, Value: LBR
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 11, Key: X-Forwarded-Server, Value: LBR
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 12, Key: Oracle-ECID, Value: 1357997264:192.25.89.136:12451862:0:52,0
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(980): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: jvm_route: e38QahiPbxuObi0LbxeKaN0Kch0Re0
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1117): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] mod_oc4j: uri4oc4j: /OA_HTML/AppsLogout
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1668): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] Number of response headers: 8
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1700): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] mod_oc4j: Response header 0, Key: Date, Value: Sat, 12 Jan 2013 13:27:43 G
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1700): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] mod_oc4j: Response header 1, Key: Content-Type, Value: text/html
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1700): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] mod_oc4j: Response header 2, Key: Set-Cookie, Value: JSESSIONID=1d74eb5633089116f24c2c69ae565cbadc116765f9bbba7ef053c2d31f9f18a2.e38QahiPbxuObi0LbxeKaN0Kch0Re0; path=/O
A_HTML; secure
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1700): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] mod_oc4j: Response header 3, Key: Set-Cookie, Value: OTST=-1; Domain=.domain.com; Path=/; Secure
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1700): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] mod_oc4j: Response header 4, Key: Cache-Control, Value: no-cache
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1700): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] mod_oc4j: Response header 5, Key: Pragma, Value: no-cache
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1700): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] mod_oc4j: Response header 6, Key: Expires, Value: Thu, 01 Jan 1970 00:00:00 GMT
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1700): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] mod_oc4j: Response header 7, Key: Location, Value: https://hostname.cos.domain.com/OA_HTML/AppsLocalLogin.jsp?cancelUrl=/OA_HTML/AppsLocalLogin.jsp&_logoutRedirect=y&l
angCode=US
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1748): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] mod_oc4j: sending response chunk to client: 462 bytes
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_main.c(554): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:0:52,0]
mod_oc4j: Successfully serviced the request by worker: home.

Dmz configuration

Similar Messages

Maybe you are looking for