Engine E2 Question

Dear Sir/Madam,
I manage four Cisco IPS sensors SSM-20. I am currently running 6.0(3) E1 and do not particularly want to upgrade to 6.0(4) because of the following;
CSCsm60273 AIP-SSM stays in Unresponsive state after ASA5500's bootup
I have a number of power downs this year but need to continue to install signature updates but will be unable to if I do not upgrade to 6.0(4) E2 as per your comment below,
Warning: After E2 is released, your sensors must be running release 5.1(7)E2 or 6.0(4)E2 to continue to install signature updates.
I would prefer to stay on 6.0(3) and upgrade to E2 (as this version is eligibale for engine upgrade) and wait until caveat CSCsm60273 is resolved - hopefully in 6.0(5)but I then will not be able to apply the signature updates.
Please can you assist me?
Thanks in advance for your time.
Rich,

Understand that CSCsm60273 is not specific to 6.0(4). It can also happen with the 6.0(3) you are already running and likely earlier versions as well.
It will also not be fixed in 6.0(5).
Instead it has been determined to be a bug in the ASA/Rommon and not in the IPS image.
So it can not be fixed in 6.0(5), and instead needs a new ASA and/or Rommon to get the fix.
So this bug should not affect your decision on whether or not to upgrade to 6.0(4).
As for E2 understand that 6.0(3) is NOT elligible for upgrade to E2. E2 will only be created for 6.0(4).
The 6.0(3) elligibility for E2 ran out at the end of April.
The signature policy states "b) Signature update support for service packs of currently supported major and minor software releases will be supported for at least sixty (60) days following the introduction of a new service pack."
So 6.0(3) was fully supported for signature updates (and therefore engine updates) for 60 days after 6.0(4) released.
6.0(4) released at the end of February so 6.0(3) support was only guaranteed for 60 days which was the end of April.
Now in May there is no longer any guarantee of signature support (or engine updates) for 6.0(3).
So long as E2 has not released you can still install the E1 signature updates on any E1 sensor (including 6.0(3)E1). But when E2 is released it will only support 6.0(4). It will not support 6.0(3) because when E2 releases it will have been more than 60 days since 6.0(4) was released.
NOTE: E2 will also support the latest service pack on the 5.1 train which is 5.1(7).

Similar Messages

Rules Engine Design Questions

Rules Engine Questions:
1. Rules are processed in the order they are created in dictionary file if the priorities are the same. Is it true?
for eg: if the order you see on the screen in rules dictionary window is:
     rule1 --> set var1 = 10
     rule2 --> set var1 = 20
     rule3 --> set var1 = 30
     rule4 --> set var1 = 40
     rule5 --> set var1 = 50
     result would be 50
2. I want to use the rules engine for validations.
Eg: Can we check for the requiredness of xsd validations using rules engine? or this should be done else where?
eg:
If my xml is below, then can I use rules engine to check
<Firstname>
<LastName> and
<Address1>
for emptyness and pass back saying that the validation failed because <LastName> and <Address1> are empty.
<Customer>
     <Firstname>aaa<Firstname>
     <LastName> <LastName>
     <Email>ccc<Email>
     <Address>
          <Address1> </Address>
     </Address>
I have a response xml:
     <ValidationResult>
          <Result>Failed<Result>
          <Message>all required fields are not present<Message>
     <ValidationResult>
So my rules should be
     check for <Firstname>
          Assert new ValidationResult ('success', ..)
     check for <LastName>
          Assert new ValidationResult ('failed', ..)
     check for <Email>
          Assert new ValidationResult ('success', ..)
     check for <Address1>
          Assert new ValidationResult ('failed', ..)
and since last rule is failed, will rules engine send back failed? or what is the strategy for order of rules that get fired?
For the above scenario what would be the best design solution?

This is a complicated question but I will try my best to give you the best solution:
#In answer to your question regarding the order that rules fire unless you use priority you cannot garantee the order that the rules fire. The Oracle rules engine uses the Rete algorithm to establish the order in which to fire the rules and this is generally based upon the data passed into the rules. Therefore if the result of rule 4 may effect rule 1 then the rules engine will run rule 4 before rule 1.
The scenario you have provided is slightly different however and I woudl suggest the following.
Instead of passing out a single result from your ruleset pass our an array of results meaning you could effectively run all your rules and pass out all rules that failed. Be wary of checking for nulls however because if nothing is passed into a field then the rules engine will not create that element in the rules fact and the rule will never fire.
To create a array of results you will need to create a function which creates the result fact for you and then addes each result in turn.
If you woudl like more information let me know and I will help out as much as I can.

Content engine DNS question

We're using the content engines to cache web & ftp traffic.
If we have multiple DNS servers listed, does the content engine use them from top-down (if not found from 1st, go to next), or in rotation (like round-robin)??
We have multiple domains that require multiple DNS servers to work together, and there are DNS records that only each DNS server knows about.
The server I listed on top has records that are more frequently requested, so I'm hoping it's the top-down fashion.

Content Engines with ACNS 5.1 software can intercept DNS requests that have been issued to DNS servers (forwarders or recursive) that traverse the interception device. Upon receiving a request, the Content Engine transmits that response to the client if it has a current cached response. For more information refer
http://cisco.com/en/US/products/sw/conntsw/ps491/products_configuration_guide_chapter09186a00801cc94b.html#wp1108669

Content Engine basic question

I just started with a content engine and wanted to enable streaming media. Is there a way to enable streaming media?

Thanks for your help. here is some info:
Model: ce565
Version: Release 5.2.5 (build b9)

Action engine/array question

Im sure there is an easily corrected mistake I'm making. I am going to be making an action engine where I need elements added to an array, and after the array is full, toss away old data and add the new data. If someone can tell me why this array is continuing to be all zeros i'd appreciate it. Probably misuse or misunderstanding of one of the array functions. If someone could put a photo of the corrected VI rather than attach the actual VI it I'd appreciate it as I wont be on a computer with Labview until Monday. Thanks.
CLA, LabVIEW Versions 2010-2013
Solved!
Go to Solution.
Attachments:
actionengine.vi ‏22 KB

If you could just take a last look at this and make any more comments I'd appreciate it. I'm trying to learn how to do this stuff as efficiently as possible the first time so I don't have to backtrack/relearn. I'll take advice on anything, except tunnel and wiring as I think I can fix that myself. I'm more worried about the actual coding. And yes, I am aware my front panels aren't organized
Message Edited by for(imstuck) on 01-22-2009 02:59 PM
CLA, LabVIEW Versions 2010-2013
Attachments:
actionengine.vi ‏67 KB
test_action_engine.vi ‏144 KB

Comet Engine - Newbie Question

I'm trying to set up a Comet driven application as described in Jean-Francois Arcand's blogs.
I have installed JSAS9 which I presume is now the official version of Glassfish but when I start the chat example I get an error that
com/sun/enterprise/web/connector/grizzly/comet/CometHandler
can't be found.
Is Comet a separate download or do I need to update the classpath or ...?
Thanks

Found the answer on the java.net Forums and eventually by applying a little common sense.

Exception Processing Question -Reply

I don't use Forte (yet--that's why I joined the mailing list), but since your
question is a generic "engineering practices" question, I'll chime in. I do
use exceptions both in C++ in Delphi, and have developed some opinions
about how to use them:
- Use exceptions for handling "behavior unexpected in the normal course
of your algorithm". In other words, instead of returning error codes
when something goes wrong, throw an exception.
One example of this is in a parser: if you get an illegal token, just throw
an exception.
- When you need to make a choice based on a return status, don't throw
an exception. In the parser example, if you get token 'A', you need to do
one thing and if you get token 'B' you need to do another.
- There's a fine distinction between "handling an error" and "making a
choice", and there are cases where you could argue one way or the
other. I'd say that an error throws an exception when it would normally
terminate the normal flow of execution. For example, "out of memory" or
"illegal token".
- Catch exceptions at "high level" process start/end points, or where it is
required to clean up resources held and rethrow.
- Don't catch exceptions in every single method--it defeats the purpose.
User Interfaces:
- If your user-interface dictates a logical place to unwind no further,
catch exceptions there. For example: In the Windows world most apps
are a window with a menu. If you pull down and pick a menu item to
execute a command, and that command throws an exception, the
exception should be caught, a modal message box indicating the error
should be presented, and then when the user clicks "ok", the program
returns to its normal waiting state with the window intact.
- If you have a modal dialog up, throwing an exception should either stop
at the dialog's event loop or take the dialog down with it.
I'd say that on-screen data validation should NOT use exceptions
because "user typing invalid data" is expected behavior for a UI.
Besides, the UI designer should be smart enough to deal with giving you
a good model for data validation. OTOH, if you take the data out of the
dialog and then pass the information as parameters to a function, and
that function can't handle one of the parameter values, it should throw an
exception.
Nevertheless, if your dialog runs out of memory for some reason, it
should throw an exception and the dialog should come down.
Hope this helps.
-- Conrad Herrmann
Jerry Fatcheric <[email protected]> 07/24/96 03:29am >>>
I have a toss up question for 50 points -
We have finished the first phase of our project and have place
exception processing in the places where we saw exceptions could be
raise. But what about those other exceptional exceptions?
Is this just good programming practice to have a high level generic
exception handler (and what should it really do??) or is it critical.
In addition, when handling data validation on specific widgets on a
screen (e.g. the account number entered must be one of the existing
10,000 valid ones), should this be handled via exception processing or
should it just be handled with code in the event loop?
Any opinions - please I don't want to hear the Forte Party line.
I would like to hear opinions based upon real experience.
Jerry Fatcheric
Relational Options, Inc.
Florham Park, New Jersey
201-301-0200
201-301-00377 (FAX) [email protected]

We have finished the first phase of our project and have place
exception processing in the places where we saw exceptions could
be raise. But what about those other exceptional exceptions?
Is this just good programming practice to have a high level
generic exception handler (and what should it really do??) or
is it critical.IMHO, you need to program for these ones that could occur because
if you don't the exception will still happen except without
your normal graceful (or standard) approach manner. I think it is good programming
practice to trap on the ones you think can possible occur if they require
something different in how they react. Otherwise, use of GenericException
with a proper response is called for.
>
In addition, when handling data validation on specific widgets
on a screen (e.g. the account number entered must be one of the
existing 10,000 valid ones), should this be handled via exception
processing or should it just be handled with code in the event loop?
I use event loop processing because most of the time I am also
keeping the user on the same widget after cancelling all events
posted. So, in effect they are back where they started from.
Any opinions - please I don't want to hear the Forte Party line.
I would like to hear opinions based upon real experience.
Jerry Fatcheric
[email protected]@Sagesoln.com
my 2 cents, or should I say my attempt at 50 points, Jerry.
Len Leber
ATG Partners

Report server engine

Hi
I using fusion middleware 11.1.2, i have report server and want to create multi engine, my question is if one engine crash is other engine still working or crash with first one,
Regards

I test it, if one engine crash never 2nd engine run

Questions re: Licensing & Feature Availability of the DSC module

Hello,
I transferred a project to another development PC. When I opened it, some of my network shared variables (NSV's) were flagged with Feature Errors: "Initial Value: Not licensed or cannot be edited outside of LabVIEW." I found out that it's because I didn't install the DSC Module on the newer machine; removing the "initial value" feature made the error message disappear.
That error itself wasn't a big deal, but it got me thinking and investigating. http://www.ni.com/white-paper/4679/en says:
If you want to use the features of the LabVIEW DSC Module, you must host the shared variables on Windows. The LabVIEW DSC Module adds the following functionality to network-published shared variables:
· Historical logging to NI Citadel database.
· Networked alarms and alarm logging.
· Scaling.
· User-based security.
· Initial value.
· The ability to create custom I/O servers.
· Integration of the LabVIEW event structure with the shared variable.
· LabVIEW VIs to programmatically control all aspects of shared variables and the shared variable engine.
Question 1
I did not realize that the Initial Value feature was part of the DSC Module. If I use it in a project, does that mean that my customer would need to buy a DSC runtime license? (I'm not using any other DSC feature)
Question 2
In my project, the NSV's in question were hosted on a cRIO target, yet my prototype (which had Initial Value enabled) ran happily without issues. This contradicts the documentation above which says "you must host the shared variables on Windows". Is this expected?
Question 3
I created a new NSV on my new machine (which doesn't have DSC installed). I saw the "Scaling" option. Is Scaling part of the DSC module or not?
Question 4
Initial Value and Scaling are generic features, unrelated to data logging/supervisory control. Why are they in the DSC Module? Should they not be in the base SV Engine?
Solved!
Go to Solution.

Hi,
1. Yes, any build that uses DSC features require a runtime license.
2. That's a recommendation for more reliable operations.
3. No, it is a native LabVIEW capability. The DSC modules simply adds more features regarding communication to protocols, alarming, etc
4. Initial value, Yes. Scaling, no. I believe is for easy access. Old school method is the one shown in here at the section "Initialize Your Shared Variables".
For more information about DSC visit this page.
Alejandro | Academic Program Engineer | National Instruments

PI 7.11 - Alert creation for RFC Exceptions does not work

Hi folks!
In our PI 7.11 SP04 system we have created an Alert Category as well as an Alert Rule to be informed about errorneous messages in the Integration Engine (ABAP).
The scenario is synchronous SOAP Axis to sRFC, where the RFC answers with an exception that is transferred to a SOAP Fault response message.
Now we see messages with Application Errors in the Integration Engine, but no alert is created. Having a look at the alert creation log using report SXMSALERT_LOGREADER shows us that the system even does not try to create an alert for these messages. Alerts are only created for errors in the Adapter Engine.
Question:
Why does the system not create alerts in this case and how can we achieve this?
Thanx for any hint!
Kind Regards,
Volker

Hi!
Additional information for all:
When forcing an error like "receiver not found" both kinds of alerts are created: AE Alert and IE Alert. Thus in general the alert configuration and the alert rule for IE errors are correct and working - only not for RFC exceptions ....
Regards,
Volker

Does WCS come with the 5508 WLC?

Forum
I am providing a quote to a client for a wireless installation. I have two 5508 boxes and about 40 AP's on the quote, as well as associated SmartNet.
I was reading how the Cisco Unified Wireless Network is comprised of:
Controllers
Access Points
The Cisco Wireless Control System (WCS)
Cisco Mobility Services Engine
My questions are:
1. Does WCS come installed on the Controller? Is this something that the customer receives simply by virtue of the fact that they are purchasing the Controller? Or is this a separate piece of software with a cost?
2. What exactly is the Cisco Mobility Services Engine? What does it do that the Controller will not? How would I sell one to a customer?
Thank You
Kevin

WCS is a Windows 2003 application (so not "on the controller") that is completely separate and has to be purchased separately with different levels of licensing for different feature sets.
WCS is most useful when having several WLCs to manage and is offered when you buy a lot of stuff I think.
WCS alone brings better reporting features (graphs, pdf reports, ...) and maps to visualize everything.
MSE is a kind of "calculation appliance" that you link to your WCS to locate all clients and rogues in real-time on the map. Only that. But it's a cool enough feature :-) Without MSE you can only view one client at a time (when entering its mac address in the search field) on WCS maps.
Nicolas

SRM system object within Portal: WAS settings with Webdispatcher

Hello Portal experts,
we have SAP EHP4 ERP system (only ABAP stack).
In order to use some SRM functionality we installed SAP EP (EHP1) and creates a appropriate system object within portal.
We use a Webdispatcher, so we have to replace within WAS area the local address by the address of Webdispatcher and appropriated port (webserver:567).
The tests of this system object looks as follows:
The address of http://webserver:567 can be retrieved
The problem are the results of following tests:
http://webserver:567/sap/bc/ping
http://webserver:567/sap/bc/webdynpro
These errors occured because the both pathes /sap/bc/ping and /sap/bc/webdynpro do not exist on Portal/Java engine.
Questions:
How can we connect ABAP backend to Portal with extra Webdispatcher?
What are the setting within WAS area?
kind regards

Hi Thom,
Is your webdispatcher in front of your portal? or in front of the ICM of your Backend System?
If the applications that you want to enable via your EP are of the type: WD for ABAP, BSP, IAC or ITS then you should also have a webdispatcher in front of your Backend System (in addition to on in front of your portal).
Please check the following link:
http://help.sap.com/saphelp_nw70ehp1/helpdata/en/48/9a9a6b48c673e8e10000000a42189b/frameset.htm
On this page, scroll down to the last example. Although the image is there to explain "High Availability of the SAP Web Dispatcher" it gives you a good view on the request respond steps.
One rule of thumb is that the EP system itself doesn't act as a reverse-proxy. In other words, if an iView points to a WD 4 ABAP application on the Backend then the actual WD4ABAP application is rendered in an iFrame.
From a technical/connection point of view the client (browser) has 2 connections, one to the EP and 1 tot the Backend.
Allot of people do not realize this when they start there project...
Cheers, hope this helps you a bit....
B

Add new customer fields on Basic Data Header of Bid Invitations

Add new fields on Basic Data of Header of BID INVITATIONS and other screens. I found many notices sap that it indicates that I can use badi BBP_CUF_BADI_2, both how does it?
I understand that method MODIFY_MODE_QUOT is due to implement because he is the one that allows to use in way edition the screen. In this method only CV_MODE ='E'.
In which method I assign the structure with the new fields or customer fields?
In where I indicate to him in that screen must add the new fields or customer fields?
I need to implement more methods to add the new fields the headed one of basic data of BID INVITATIONS.
Thank you.

Perhaps some answer for you can be found here:
in this forum thread: Bidding Engine general questions :-(
I have moved your thread from the general Business Process Expert forum to here as I think it has a better chance of being answered.
cheers,
Marilyn

Address parameters in the signature definitions (4.1)

Is there any way to change the action triggered by the signature based upon the network/host source/destination address in all kinds of engines? In Atomic engine it is possible - for example triggering different levels of alarms, based upon the victim network address. What about the all other engines?

Question: Is there any way to change the action triggered by the signature based upon the network/host source/destination address in all kinds of engines?
Response: No. When the signature is defined the selected actions will take place regardless of the addresses (unless the alarm is filtered).
Question: In Atomic engine it is possible - for example triggering different levels of alarms, based upon the victim network address. What about the all other engines?
Answer: No In version 4.x the alarm is either triggered and the actions taken, or the alarm is filtered and no actions are taken.
SIDE NOTE:
Some of this changes in version 5.0.
You still won't be able to assign specific actions for a given address set. But combinations of some of the added features may come close to providing you the granularity you are asking for.
I would suggest posting this question again after 5.0 is released. Then I will be able to go into feature details and give you some hints and tricks to get close to what you are asking for.

Looping a query without cursor

Hi everybody
i want to know that is there is any way by which we can loop through Resultset of a query without using cursor for loop in plsql
vipul

No. Reason:
Any SQL statement in PL/SQL is a cursor. Any rows "obtained" from a cursor, is fetched via a read-cursor-loop mechanism.
This can be an explicit cursor, where you open the cursor and manually code the loop with the FETCH statement.
It can be an implicit cursor, where you simply code something like [SELECT col INTO var FROM table] - in which case PL/SQL still creates a cursor and still uses a cursor fetch to read the result of that cursor.
PL/SQL is no different than Java or Delphi or C in this aspect. It takes a SQL statement and deliver that to the SQL Engine. The SQL Engine deals with SQL statements as cursors. It returns a cursor handle to the caller. The caller then has to fetch the rows from the cursor.
What makes PL/SQL different is that the PL/SQL language and compiler integrates so tightly with SQL, that you can mix two different programming languages in the same source code. Unlike Java, Delpi and C, you can code native SQL inside your PL/SQL code. The PL/SQL compiler is clever enough to know what it can execute, and which source lines are SQL that need to be "wrapped and delivered" to the SQL Engine.
Question though - why do you ask for another method? What do you view as a problem with using a cursor loop to fetch rows?

Engine E2 Question

Similar Messages

Maybe you are looking for