Help with Mitigation Policy

Hello Friends,
I need to configure Mitigation policy in ARM to force mitigation/remediation only for High Risks. I have followed all the steps mentioned in the link SAP GRC 10.0 Access request submission - Risk analysis need to exclude medium risk , however it does not seem to be working.
Can anyone please share any configuration document or web link providing guidance on the config steps.
Regards,
Rohit Shetty

Hi Rohit,
Manually.....
I think that is part of manual step as you have marked risk analysis mandatory, so at certain stage you are forcing risk analysis, you can specify this as manual process to perform this on risk level "High" and I guess as you might have set detaur if SoD found, so on that step you can setup manual process to consider remediation and mitigation only for High risk levels.
Automation......
If you want to automate risk level based selection, I think you will have to create a Routing rule so you can use it as detaur for condition (IF risk is "High").
I have not build this, but you can check if feasible.
BR,
Mangesh

Similar Messages

Help with Group Policy

Hello all,
I am new to Group Policy. Server is running Windows 2008 R2. All client on Win 7. I have made a folder redirect by creating it on Default Domain Policy instead of creating gpo. Is there a downfall and if so, how do i redo and have it fix ?

What if i just let stay without doing or creating the new gpo? let it be on the DDP. any issue will arise or possibilities that might will mess with the system or client pc connected to domain ?
You can let it be, it will not cause harm with anything at all.
It is fine, in a small and simple network, which does not change often, for these things to remain.
If you have a complex network, with many different GP configurations required, having such settings in your DDP can then be a problem, to achieve your desired different/granular settings, e.g. different settings for different departments.
If the DDP (which applies to all departments) contains this setting, then, how do you set it differently for two departments?
But if your network is small and simple, it's fine to do this.
If you have no expectation that in the future it will cause constraint for you, it's fine like this.
You can always change it later, but, it might be more effort then, compared to now?
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Need help with weblogic.policy file

I'm running WebLogic 5.1 sp10 on Solaris 2.8 with Java 1.3.1_b24.
WebLogic is installed in directory:
/tech/lpp/webmstr/bea/weblogic5
If I turn on jdbc logging:
weblogic.jdbc.enableLogFile=true
weblogic.jdbc.logFileName=jdbc.log
I get the following when WebLogic attempts to create a connection pool:
java.security.AccessControlException: access denied (java.sql.SQLPermission setLog)
My weblogic.policy looks like:
grant codeBase "file:/tech/-" {
permission java.io.FilePermission "${/}tech${/} "read,write,delete,execute";
Any help is greatly appreciated.
Thanks,
Kevin

Naveen,
That did it!
Many Thanks,
Kevin
"Naveen $[email protected]$" <[email protected]> wrote:
Hi,
Within the grant block that is at the end of the weblogic.policy file,
try
adding the following entry :
permission java.sql.SQLPermission "setLog", "*";
Thanks,
-- Naveen
"Kevin Toomey" <[email protected]> wrote in message
news:3c0bad4a$[email protected]..
I'm running WebLogic 5.1 sp10 on Solaris 2.8 with Java 1.3.1_b24.
WebLogic is installed in directory:
/tech/lpp/webmstr/bea/weblogic5
If I turn on jdbc logging:
weblogic.jdbc.enableLogFile=true
weblogic.jdbc.logFileName=jdbc.log
I get the following when WebLogic attempts to create a connection pool:
java.security.AccessControlException: access denied(java.sql.SQLPermission setLog)
My weblogic.policy looks like:
grant codeBase "file:/tech/-" {
permission java.io.FilePermission "${/}tech${/}"read,write,delete,execute";
Any help is greatly appreciated.
Thanks,
Kevin

Help with ipsecurity policy

im working on a windows server 2012 standard machine and am trying to create an ip security policy rule, on windows server 2008 i could block ip address from the internal lan on a machine running rras and dhcp dns, but now if i assign a new ip security
policy it does not effect the lan only the server computer someone help please

Hi,
Sorry to say that I am not clear about your needs. Did you mean that the older IPsec policy didn’t work after create a new one? If I misunderstood
anything, please feel free to let me know and I would appreciate if you can provide more detailed information.
Please pay attention that only one policy can be assigned to a computer at a time. Assigning another policy will automatically unassign
the currently assigned policy. In addition, you must create a mirrored policy on the other computer and assign that policy to that computer if you want to assign computer-to-computer IPsec policy. You need use Group Policy if you want to assign a policy to
many computers.
More information:
How to Block an IP Address using IPSec How to Block an IP Address using IPSec
https://www.serverintellect.com/support/windowsserversecurity/ipsec-blockip/
Note: Microsoft is providing this information as a convenience to you. Please
make sure that you completely understand the risk before retrieving any suggestions from the above link.
Best regards,
Susie

Deploying Files with Group Policy - Help Needed

Hi,
I am trying to use group policy to deploy files and folders to our server estate. The policy I have created first creates a folder on each server's C drive and then coppies a set of files to this folder from a network share. The folder creation works fine
but the files copy fails. In the Application logs on the servers it displays the following error:
The computer 'ILMT' preference item in the 'GPO - Servers_Production_ALL {CC026B58-FA3B-4399-AA00-AE8E844B2B47}' Group Policy object did not apply because it failed with error code '0x80070005 Access is denied.' This error was suppressed.
Can anyone advise what exactly does not have access here? I don't know what I need to enable to get this to work.
Can anyone help?
Many thanks
James

The copy is on a file server share. presumably if I just give everybody read access to the share that would suffice?
No it won't.
"Sharing" requires several actions:
a) create the folder
b) share the folder
c) grant NTFS permissions on the folder
I think you've neglected action (c).
For your scenario, you need to grant the "server computers" read permissions to the folder.
You can add individual computer accounts, or a group, or "domain computers".
(In a similar way, you could grant access to a user, a group, or "domain users")
[if you need everybody (users) *AND* everything (computers), you could grant permissions to "authenticated users" since that principal includes *BOTH* users and also computers]
Note that "domain computers" and "authenticated users" include all types of domain member computers, i.e. servers, workstations, etc.
Also, note that granting a "computer account" access to a folder or share, does *NOT* mean that a user account on that computer can access the remote share, i.e. permission is granted to the computer account, and a logged-in user account on
that computer does not inherit any kind of access to the remote share by virtue of being logged in.
This means that the computer can access the share but the user cannot access the share. Because the computer account is an identity/principal of it's own accord.
[None of which really has anything to do with Group Policy at all - it's how Windows does file sharing and ACLs... ;)
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Help with Javascript/Calculations

Hello,
Have a building use policy for school.
Need help with checkboxes and default values. I can get javascript/math to work when I click check box.
Someone wants to rent a room they check the rentRoom checkbox. Then the enter how many rooms 1,2,3 etc.. The value for the rentRoom checkbox is $25.
I can get it when the checkbox for rentRoom is selected the rentRoom.Total computes correctly. However, what I want is when the form opens up a default value of $0.00 to be in there. I also want if someone goes back and unchecks the rentRoom checkbox the value goes back to $0.00 not just blank. Right now I am getting the error the value entered does not match the value of the field. That is if I put the default value in options. Basically, I can't seem to figure out the javascript code to get this to work.
Am I asking for too much, can someone guide me to javascript to help me out.
I have tried if/then statements and switch statements. I just can't figure out how to get it to for lack of better a word - toggle back and forth.
If this is not possible please tell me. If it is too complicated tell me. I am not using livecycle for this as we had a word document and I just used the find form fields. I am also using Adobe Acrobat 8 Professional.
Thanks

Hello,
Thanks that looks good. I am still missing something but the calc doesn't work when I put in my variables. I will work with it more but nothing happens.
The one thing is I have the default value of the checkbox as 15 so don't know if that messes it up.
Right now I get the default value of $0.00 all the time. When I click on the check box on/off it doesn't do the calcs.
sorry, any more input, what am i missing??
I also changed the syntax error that was posted on your origianl post. You had == 'Off" I changed that to 'Off'

Windows Server 2008 R2 with multiple Roles OS Rebuild, Need help with Certificates.

Hi,
I have rebuilt a Server for my client and I require help with certificates..
I am unsure exactly what to do to get this server working as it was.
Example, The Windows Server 2008 R2 has Microsoft Exchange, DNS, DHCP, ADDS, FileServices,Network Policy and access Services and Webservices roles installed on a single box.
Since the Server OS Rebuild I am getting 2 issues that pop up usually when Outlook in opened on a client Workstation,
I have not dont anything certificate wise to the server since OS Install, and the messages I get and best described here
I seen on a backdrive, a few certificate files I dont know if we can use these files for anything but we have the following files of drive E (Backup)
e:\server.xxxx.com.au\gd_iis_intermediates.p7b
e:\server.xxxx.com.au\server.xxxx.com.au.crt
e:\ssl\2013-2018.cer
1st Message is about a Proxy certificate I dont get this often but saw it today and my client clicked ok too quickly.
I have seen it and didnt see it again after trying to close outlook and reopen
I looked up google images and tried to find it...
It's like this, (There is a problem with the proxy server's security certificate.
The security certificate is not from a trusted certifying authority.)
2nd Message is about Security Alert, Autodiscover.xxxx.com.au Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the sites security certificate.
-X- The security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certificating authority
-TICK- The security certificate date is valid
-X- The name on the security certificate is invalid or does not match the name of the site
Do you want to preceed
[Yes][No][View Certificate ...]
3rd Message is very Close to the 2nd Message, is about Security Alert, xxxx-server.xxxx.local, Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the sites security certificate.
-X- The security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certificating authority
-TICK- The security certificate date is valid
-TICK- The name on the security certificate is invalid or does not match the name of the site
Do you want to preceded
[Yes][No][View Certificate ...]
If you can help guide me thou this as I'm very new to setting up certificates. I had a friend tell me about something in DNS.. but he has been super busy and I want to learn what to do.
Thank-You.

Hiya,
quite a lot has the same confusions as you do, so I've written a simple explanation on the subjet of certificates
http://jesperarnecke.wordpress.com/2014/03/22/certificates-simple-explanation/
Let me know if that helps you and if you need further assistance.

Help with a kernel panic?

Hi, all,
My new (two weeks old) Macbook pro has been randomly restarting, sometimes two or three times a day. I talked with Apple Support and they had me repair the disc permissions, which wound up being quite lendthy ... something like 147 pages in Word when I copied and pasted the report. I've not had one since, but I'm hoping to get this nipped in the bud as I'm a photographer and need to get this guy stable so I can start taking it on jobs with me. I'm not tech savy enough to understand a panic report, so can anyone help with this one:
Sun Nov 17 16:40:28 2013
panic(cpu 2 caller 0xffffff800acdc19e): Kernel trap at 0xffffff800acd0740, type 14=page fault, registers:
CR0: 0x000000008001003b, CR2: 0xffffff8070e025b0, CR3: 0x000000000d120000, CR4: 0x00000000001606e0
RAX: 0xffffff800b2cf138, RBX: 0x0000000000005b59, RCX: 0xffffff80123470f0, RDX: 0x0000000000005b59
RSP: 0xffffff8133de3c38, RBP: 0xffffff8133de3c60, RSI: 0x0000000000000001, RDI: 0xffffff8070e025b0
R8: 0x000000000000000b, R9: 0x0000000000000010, R10: 0x0000000000000001, R11: 0xffffff800ac2fe30
R12: 0xffffff80123470f0, R13: 0x00000000000f1ca3, R14: 0x0000000000000001, R15: 0x0000000000000001
RFL: 0x0000000000010286, RIP: 0xffffff800acd0740, CS: 0x0000000000000008, SS: 0x0000000000000010
Fault CR2: 0xffffff8070e025b0, Error code: 0x0000000000000000, Fault CPU: 0x2
Backtrace (CPU 2), Frame : Return Address
0xffffff8133de38c0 : 0xffffff800ac22f69
0xffffff8133de3940 : 0xffffff800acdc19e
0xffffff8133de3b10 : 0xffffff800acf3606
0xffffff8133de3b30 : 0xffffff800acd0740
0xffffff8133de3c60 : 0xffffff800aca84ff
0xffffff8133de3d80 : 0xffffff800b07e670
0xffffff8133de3ef0 : 0xffffff800b0df18f
0xffffff8133de3f00 : 0xffffff800b098b5c
0xffffff8133de3f20 : 0xffffff800ac4a15a
0xffffff8133de3fb0 : 0xffffff800acd6aa7
BSD process name corresponding to current thread: kernel_task
Mac OS version:
13A603
Kernel version:
Darwin Kernel Version 13.0.0: Thu Sep 19 22:22:27 PDT 2013; root:xnu-2422.1.72~6/RELEASE_X86_64
Kernel UUID: 1D9369E3-D0A5-31B6-8D16-BFFBBB390393
Kernel slide: 0x000000000aa00000
Kernel text base: 0xffffff800ac00000
System model name: MacBookPro9,2 (Mac-6F01561E16C75D06)
System uptime in nanoseconds: 3436389922308
last loaded kext at 1951067507788: com.apple.driver.AppleUSBCDC        4.2.1b2 (addr 0xffffff7f8ca7a000, size 20480)
last unloaded kext at 2048107604106: com.apple.driver.AppleUSBCDC    4.2.1b2 (addr 0xffffff7f8ca7a000, size 16384)
loaded kexts:
com.apple.filesystems.autofs 3.0
com.apple.iokit.IOBluetoothSerialManager   4.2.0f6
com.apple.driver.AudioAUUC          1.60
com.apple.driver.X86PlatformShim   1.0.0
com.apple.driver.AGPM        100.14.11
com.apple.driver.AppleMikeyHIDDriver     124
com.apple.driver.AppleHDA 2.5.2fc2
com.apple.driver.AppleUpstreamUserClient            3.5.13
com.apple.iokit.IOUserEthernet        1.0.0d1
com.apple.driver.AppleMikeyDriver            2.5.2fc2
com.apple.iokit.BroadcomBluetoothHostControllerUSBTransport 4.2.0f6
com.apple.Dont_Steal_Mac_OS_X   7.0.0
com.apple.driver.AppleIntelHD4000Graphics          8.1.8
com.apple.driver.AppleSMCLMU    2.0.4d1
com.apple.driver.AppleHWAccess    1
com.apple.driver.AppleLPC 1.7.0
com.apple.driver.AppleThunderboltIP          1.0.10
com.apple.driver.AppleIntelFramebufferCapri          8.1.8
com.apple.driver.SMCMotionSensor            3.0.4d1
com.apple.driver.AppleSMCPDRC 1.0.0
com.apple.driver.AppleBacklight       170.3.5
com.apple.driver.AppleMCCSControl          1.1.12
com.apple.driver.AppleUSBTCButtons        240.2
com.apple.driver.AppleIRController 325.7
com.apple.driver.AppleUSBTCKeyboard     240.2
com.apple.AppleFSCompression.AppleFSCompressionTypeDataless       1.0.0d1
com.apple.AppleFSCompression.AppleFSCompressionTypeZlib 1.0.0d1
com.apple.BootCache 35
com.apple.iokit.SCSITaskUserClient 3.6.0
com.apple.driver.XsanFilter   404
com.apple.iokit.IOAHCIBlockStorage           2.4.0
com.apple.driver.AppleUSBHub       650.4.4
com.apple.driver.AirPort.Brcm4331 700.20.22
com.apple.iokit.AppleBCM5701Ethernet     3.6.9b9
com.apple.driver.AppleUSBEHCI     650.4.1
com.apple.driver.AppleSDXC           1.4.0
com.apple.driver.AppleAHCIPort     2.9.5
com.apple.driver.AppleUSBXHCI    650.4.3
com.apple.driver.AppleFWOHCI      4.9.9
com.apple.driver.AppleRTC 2.0
com.apple.driver.AppleSmartBatteryManager          161.0.0
com.apple.driver.AppleACPIButtons           2.0
com.apple.driver.AppleHPET           1.8
com.apple.driver.AppleSMBIOS       2.0
com.apple.driver.AppleACPIEC       2.0
com.apple.driver.AppleAPIC            1.7
com.apple.driver.AppleIntelCPUPowerManagementClient 216.0.0
com.apple.nke.applicationfirewall      153
com.apple.security.quarantine            3
com.apple.driver.AppleIntelCPUPowerManagement           216.0.0
com.apple.kext.triggers           1.0
com.apple.iokit.IOSerialFamily          10.0.7
com.apple.driver.DspFuncLib            2.5.2fc2
com.apple.vecLib.kext            1.0.0
com.apple.iokit.IOAudioFamily        1.9.4fc11
com.apple.kext.OSvKernDSPLib       1.14
com.apple.iokit.IOBluetoothFamily 4.2.0f6
com.apple.iokit.IOBluetoothHostControllerUSBTransport 4.2.0f6
com.apple.iokit.IOSurface      91
com.apple.driver.AppleHDAController        2.5.2fc2
com.apple.iokit.IOHDAFamily         2.5.2fc2
com.apple.driver.AppleSMBusPCI   1.0.12d1
com.apple.iokit.IOFireWireIP            2.2.5
com.apple.iokit.IOAcceleratorFamily2          98.7.1
com.apple.AppleGraphicsDeviceControl      3.4.12
com.apple.driver.X86PlatformPlugin 1.0.0
com.apple.driver.AppleSMC 3.1.6d1
com.apple.driver.IOPlatformPluginFamily    5.5.1d27
com.apple.driver.AppleBacklightExpert        1.0.4
com.apple.iokit.IONDRVSupport     2.3.6
com.apple.driver.AppleSMBusController     1.0.11d1
com.apple.iokit.IOGraphicsFamily    2.3.6
com.apple.driver.AppleThunderboltDPInAdapter    2.5.0
com.apple.driver.AppleThunderboltDPAdapterFamily        2.5.0
com.apple.driver.AppleThunderboltPCIDownAdapter        1.4.0
com.apple.driver.AppleUSBMultitouch        240.6
com.apple.iokit.IOUSBHIDDriver    650.4.4
com.apple.driver.AppleUSBMergeNub         650.4.0
com.apple.driver.AppleUSBComposite        650.4.0
com.apple.iokit.IOSCSIMultimediaCommandsDevice          3.6.0
com.apple.iokit.IOBDStorageFamily 1.7
com.apple.iokit.IODVDStorageFamily          1.7.1
com.apple.iokit.IOCDStorageFamily 1.7.1
com.apple.iokit.IOAHCISerialATAPI           2.6.0
com.apple.iokit.IOSCSIArchitectureModelFamily    3.6.0
com.apple.driver.AppleThunderboltNHI      1.9.2
com.apple.iokit.IOThunderboltFamily          2.8.5
com.apple.iokit.IOUSBUserClient     650.4.4
com.apple.iokit.IO80211Family        600.34
com.apple.iokit.IOEthernetAVBController   1.0.3b3
com.apple.driver.mDNSOffloadUserClient   1.0.1b4
com.apple.iokit.IONetworkingFamily           3.2
com.apple.iokit.IOAHCIFamily        2.6.0
com.apple.iokit.IOUSBFamily           650.4.4
com.apple.iokit.IOFireWireFamily    4.5.5
com.apple.driver.AppleEFINVRAM            2.0
com.apple.driver.AppleEFIRuntime 2.0
com.apple.iokit.IOHIDFamily           2.0.0
com.apple.iokit.IOSMBusFamily      1.1
com.apple.security.sandbox   278.10
com.apple.kext.AppleMatch 1.0.0d1
com.apple.security.TMSafetyNet     7
com.apple.driver.AppleKeyStore      2
com.apple.driver.DiskImages 371.1
com.apple.iokit.IOStorageFamily       1.9
com.apple.iokit.IOReportFamily       21
com.apple.driver.AppleFDEKeyStore           28.30
com.apple.driver.AppleACPIPlatform          2.0
com.apple.iokit.IOPCIFamily            2.8
com.apple.iokit.IOACPIFamily         1.4
com.apple.kec.corecrypto      1.0
com.apple.kec.pthread            1
System Profile:
Model: MacBookPro9,2, BootROM MBP91.00D3.B09, 2 processors, Intel Core i5, 2.5 GHz, 10 GB, SMC 2.2f41
Graphics: Intel HD Graphics 4000, Intel HD Graphics 4000, Built-In, 1024 MB
Memory Module: BANK 0/DIMM0, 8 GB, DDR3, 1600 MHz, 0x859B, 0x43543130323436344246313630422E433136
Memory Module: BANK 1/DIMM0, 2 GB, DDR3, 1600 MHz, 0x02FE, 0x45424A3230554638424455302D474E2D4620
AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0xF5), Broadcom BCM43xx 1.0 (5.106.98.100.22)
Bluetooth: Version 4.2.0f6 12982, 3 services, 23 devices, 1 incoming serial ports
Network Service: Wi-Fi, AirPort, en1
Serial ATA Device: WDC WD10JPVX-75JC3T0, 1 TB
Serial ATA Device: HL-DT-ST DVDRW GS41N
USB Device: Hub
USB Device: FaceTime HD Camera (Built-in)
USB Device: USB-PS/2 Optical Mouse
USB Device: Hub
USB Device: Hub
USB Device: BRCM20702 Hub
USB Device: Bluetooth USB Host Controller
USB Device: IR Receiver
USB Device: Apple Internal Keyboard / Trackpad
Thunderbolt Bus: MacBook Pro, Apple Inc., 25.1

My new (two weeks old) Macbook pro
If by chance you are still within 14 days of receipt of this Mac you can still do an exchange.
No way should a new Mac generate a kernel panic.
Standard return policy information > Apple Help - Returns and Refund
My new (two weeks old) Macbook pro
Remove anything connected via USB then restart your Mac to test.

Need help with overlapping divs!

Hey everyone,
I'm working on another website and I have come up against a common problem for newbie designers from what I hear, the dreaded overlapping div problem! I have a 2 column fixed layout with a floating left div. My left div has my nav bar and various images. When my main content div has more content than the left floating div, the left div border does not reach the footer! Until now, I have gotten by with just hitting return in my left column div until it reaches the footer. I am sure it is not the right way to do it but it has worked so far. The problem is, now one of the pages has the left column div overlapping onto the footer! I did some reading and I am guessing it involves either the box properties or clear float which I am not too familiar with.
Any advice would be stellar! I know this is just another stumbling block to get over but I would feel so much better if I was doing it the right way.
Here are screens of my issue,
And here is my code for the page in question.
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<link rel="shortcut icon" href="http://www.xldesignsonline.com/fchi/favicon.ico">
<title>Full Circle Home Inspections</title>
<link href="_css/main.css" rel="stylesheet" type="text/css" />
<style type="text/css">

</style>
<script src="Scripts/swfobject_modified.js" type="text/javascript"></script>
</head>
<body class="twoColFixLtHdr">
<div id="container">
<div id="header">
 <h1>
</h1></div>
<div id="sidebar1">
 <h3 align="center">
 <object id="FlashID" classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" width="200" height="620">
 <param name="movie" value="_assets/menu.swf" />
 <param name="quality" value="high" />
 <param name="wmode" value="opaque" />
 <param name="swfversion" value="6.0.65.0" />
 
 <param name="expressinstall" value="Scripts/expressInstall.swf" />
 
 
 <object type="application/x-shockwave-flash" data="_assets/menu.swf" width="200" height="620">
 
 <param name="quality" value="high" />
 <param name="wmode" value="opaque" />
 <param name="swfversion" value="6.0.65.0" />
 <param name="expressinstall" value="Scripts/expressInstall.swf" />
 
 <div>
 <h4>Content on this page requires a newer version of Adobe Flash Player.</h4>
 <a href="http://www.adobe.com/go/getflashplayer"><img src="http://www.adobe.com/images/shared/download_buttons/get_flash_player.gif" alt="Get Adobe Flash player" width="112" height="33" /></a>
 </div>
 
 </object>
 
 </object>
 </h3>
 
 
 <a href="http://www.nachi.org/"><img src="_images/interNACHI.png" alt="InterNACHI" width="190" height="164" border="0" /></a>
 
 
 <a href="http://www.nachi.org/education.htm"><img src="_images/education-seal-small.gif" alt="education seal" width="150" height="150" border="0" /></a>
 
 
 <a href="http://www.iac2.org/"><img src="_images/iac2-all.gif" width="174" height="126" alt="IAC" /></a>
 
 
 <a href="http://www.inspectopia.com/profile.b.507.r.16181.u.03bcfb.html"><img src="_images/logo_top.png" alt="Inspectopedia" width="190" height="45" border="0" /></a>
 
 
 <a href="http://www.energystar.gov/"><img src="_images/img_energy_star_partner.jpg" width="160" height="191" alt="Energy Star Partner" /></a>
 
 
 <a href="http://cjenterprises.myshaklee.com/us/en/welcome.html#"><img src="_images/Shaklee.gif" alt="Shaklee" width="119" height="160" border="0" /></a>
 
 
 <a href="http://activerain.com/"><img src="_images/ARLogoSmall.gif" alt="Active Rain" width="135" height="36" border="0" /></a>
 
 
 <a href="http://www.insiderpages.com/b/15246780294"><img src="_images/insider_pages.gif" alt="Insider Pages" width="89" height="37" border="0" /></a>
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
</div>
<div id="mainContent">
 <h2>Radon Gas Inspection</h2>
 <div id="paragraphFloat">
 <h5>What Is Radon?</h5>
 Radon is a cancer causing radioactive gas. You cannot see, smell or taste radon, but it may be a problem in your home. The Surgeon General has warned that radon is the second leading cause of lung cancer in the United States today. 
 <div id="apDiv1">
 <div align="center"><a href="http://www.epa.gov/radon/video/epa-epu.wmv"><img src="_images/psa_revised.jpg" alt="What Is Radon?" width="200" height="172" border="0" /></a></div></div></div>
 If you smoke and your home has high radon levels, you're at high risk for developing lung cancer. Some scientific studies of radon exposure indicate that children may be more sensitive to radon. This may be due to their higher respiration rate and their rapidly dividing cells, which may be more vulnerable to radiation damage. 
 
 <h5>Why Is It Dangerous?</h5>
 The U.S. Environmental Protection Agency (US EPA) and the Surgeon General's Office have estimated that as many as 20,000 lung cancer deaths are caused each year by radon. Radon is the second leading cause of lung cancer. Radon-induced lung cancer costs the United States over $2 billion dollars per year in both direct and indirect health care costs.
According to the US EPA, nearly 1 in 3 homes checked in seven states and on three Indian lands had screening levels over 4 pCi/L, the EPA's recommended action level for radon exposure.
The alpha radiation emitted by radon is the same alpha radiation emitted by other alpha generating radiation sources such as plutonium.
A family whose home has radon levels of 4 pCi/l is exposed to approximately 35 times as much radiation as the Nuclear Regulatory Commission would allow if that family was standing next to the fence of a radioactive waste site. (25 mrem limit, 800 mrem exposure)
 At the 4 pCi/l EPA action guideline level, radon carries approximately 1000 times the risk of death as any other EPA carcinogen. It is important to note that the action level is not a safe level, as there are no "safe" levels of radon gas.
 
<h5>How Does It Get Into My Home?</h5>
 Radon is a radioactive gas. It comes from the natural decay of uranium that is found in nearly all soils. It typically moves up through the ground to the air above and into your home through cracks and other holes in the foundation. Your home traps radon inside, where it can build up. Any home may have a radon problem. This means new and old homes, well-sealed and drafty homes, and homes with or without basements.
 Radon from soil gas is the main cause of radon problems. Sometimes radon enters the home through well water. In a small number of homes, the building materials can give off radon, too. However, building materials rarely cause radon problems by themselves.
Radon gets in through:
<ul>
<li>Cracks in solid floors
 <div id="apDiv3">
 <div align="center"><a href="http://www.fullcirclehomeinspections.com/_assets/CitizensGuideRadon.pdf"><img src="_images/citguidecoverradon.jpg" alt="Guide To Radon" width="154" height="200" border="0" /></a></div>
 </div>
</li>
<li>Construction joints</li>
<li>Cracks in walls</li>
<li>Gaps in suspended floors</li>
<li>Gaps around service pipes</li>
<li>Cavities inside walls</li>
<li>Surrounding water supply</li>
</ul>
 
<h5>What Can I Do?</h5>
 Radon is a national environmental health problem. Elevated radon levels have been discovered in every state. The US EPA estimates that as many as 8 million homes throughout the country have elevated levels of radon. Current state surveys show that 1 home in 5 has elevated radon levels.
 Testing is the only way to know your home's radon levels. There are no immediate symptoms that will alert you to the presence of radon. It typically takes years of exposure before any problems surface. 
Let Full Circle Home Inspections ensure your family and your home are protected and safe from radon exposure!
 
<h5>Radon Myths</h5>
MYTH: Scientists are not sure that radon really is a problem.
<blockquote>
FACT: Although some scientists dispute the precise number of deaths due to radon, all the major health organizations (like the Centers for Disease Control and Prevention, the American Lung Association and the American Medical Association) agree with estimates that radon causes thousands of preventable lung cancer deaths every year. This is especially true among smokers, since the risk to smokers is much greater than to non-smokers.
</blockquote>
MYTH: Radon testing is difficult, time-consuming and expensive.
<blockquote>
FACT: Radon testing is easy. You can test your home yourself or hire a qualified radon test company. Either approach takes only a small amount of time and effort.
</blockquote>
MYTH: Homes with radon problems can't be fixed.
<blockquote>
FACT: There are simple solutions to radon problems in homes. Hundreds of thousands of homeowners have already fixed radon problems in their homes. Most homes can be fixed for about the same cost as other common home repairs; check with one or more qualified mitigators. Call your <a href="http://www.epa.gov/radon/whereyoulive.html">state radon office</a> for help in identifying qualified mitigation contractors.
</blockquote>
MYTH: Radon affects only certain kinds of homes.
<blockquote>
FACT: House construction can affect radon levels. However, radon can be a problem in homes of all types: old homes, new homes, drafty homes, insulated homes, homes with basements, and homes without basements. Local geology, construction materials, and how the home was built are among the factors that can affect radon levels in homes.
</blockquote>
MYTH: Radon is only a problem in certain parts of the country.
<blockquote>
FACT: High radon levels have been found in every state. Radon problems do vary from area to area, but the only way to know your radon level is to test.
</blockquote>
MYTH: A neighbor's test result is a good indication of whether your home has a problem.
<blockquote>
FACT: It's not. Radon levels can vary greatly from home to home. The only way to know if your home has a radon problem is to test it.
</blockquote>
MYTH: Everyone should test their water for radon.
<blockquote>
FACT: Although radon gets into some homes through water, it is important to first test the air in the home for radon. If your water comes from a public water supply that uses ground water, call your water supplier. If high radon levels are found and the home has a private well, call the Safe Drinking Water Hotline at 1-800-426-4791 for information on testing your water.
</blockquote>
MYTH: It's difficult to sell homes where radon problems have been discovered.
<blockquote>
FACT: Where radon problems have been fixed, home sales have not been blocked or frustrated. The added protection is some times a good selling point.
</blockquote>
MYTH: I've lived in my home for so long, it doesn't make sense to take action now.
<blockquote>
FACT: You will reduce your risk of lung cancer when you reduce radon levels, even if you've lived with a radon problem for a long time.
</blockquote>
MYTH: Short-term tests can't be used for making a decision about whether to fix your home.
<blockquote>
FACT: A short-term test, followed by a second short-term test* can be used to decide whether to fix your home. However, the closer the average of your two short-term tests is to 4 pCi/L, the less certain you can be about whether your year-round average is above or below that level. Keep in mind that radon levels below 4 pCi/L still pose some risk. Radon levels can be reduced in most homes to 2 pCi/L or below.
 
 
 
<img src="_images/CA-3.jpg" width="520" height="207" />
</blockquote>
</div>
<div id="footer">
 © 2009 XL Designs Online - All Rights Reserved 
</div>
</div>
<script type="text/javascript">

</script>
</body>
</html>
And here is my CSS if needed,
@charset "utf-8";
body {
 font: 100% Verdana, Arial, Helvetica, sans-serif;
 background: #666666;
 margin: 0; /* it's good practice to zero the margin and padding of the body element to account for differing browser defaults */
 padding: 0;
 text-align: center; /* this centers the container in IE 5* browsers. The text is then set to the left aligned default in the #container selector */
 color: #000000;
.twoColFixLtHdr #container {
 width: 950px; /* the auto margins (in conjunction with a width) center the page */
 border: 1px solid #000000;
 text-align: left; /* this overrides the text-align: center on the body element. */
 margin-top: 20px;
 margin-right: auto;
 margin-bottom: 20px;
 margin-left: auto;
 background-color: #557050;
.twoColFixLtHdr #header {
 border-bottom: 1px solid #000000;
 height: 250px;
 background-color: #DDDDDD;
 padding-top: 0;
 padding-right: 10px;
 padding-bottom: 0;
 padding-left: 20px;
 background-image: url(../_images/homebanner1.png);
.twoColFixLtHdr #header h1 {
 margin: 0; /* zeroing the margin of the last element in the #header div will avoid margin collapse - an unexplainable space between divs. If the div has a border around it, this is not necessary as that also avoids the margin collapse */
 padding: 20px 0; /* using padding instead of margin will allow you to keep the element away from the edges of the div */
 text-align: center;
 font-size: 48px;
 font-family: Tahoma, Geneva, sans-serif;
 color: #000;
.twoColFixLtHdr #sidebar1 {
 float: left; /* since this element is floated, a width must be given */
 width: 200px;
 border-right: 1px solid #000000;
 background-color: #557050;
 padding-top: 0px;
 padding-right: 10px;
 padding-bottom: 15px;
 padding-left: 10px;
.twoColFixLtHdr #mainContent {
 margin-top: 0;
 margin-right: 0;
 margin-bottom: 0;
 margin-left: 250px;
 padding-top: 0;
 padding-right: 20px;
 padding-bottom: 0;
 padding-left: 20px;
 text-align: left;
.twoColFixLtHdr #mainContent h1 {
 font-size: 48px;
 font-family: "Arial Rounded MT Bold";
 font-weight: bold;
.twoColFixLtHdr #mainContent h2 {
 font-family: "Arial Rounded MT Bold";
 font-size: 32px;
.twoColFixLtHdr #mainContent h3 {
 font-family: Georgia, "Times New Roman", Times, serif;
 font-style: italic;
 color: #CF0;
 font-size: 125%;
.twoColFixLtHdr #mainContent h5 {
 font-size: 120%;
.twoColFixLtHdr #footer {
 padding: 20px 10px 20px 20px;
 border-top: 1px solid #000000;
 background-color: #A3A3A3;
 font-family: Arial, Helvetica, sans-serif;
.twoColFixLtHdr #footer p {
 margin: 0; /* zeroing the margins of the first element in the footer will avoid the possibility of margin collapse - a space between divs */
 padding: 10px 0; /* padding on this element will create space, just as the the margin would have, without the margin collapse issue */
.fltrt { /* this class can be used to float an element right in your page. The floated element must precede the element it should be next to on the page. */
 float: right;
 margin-left: 8px;
.fltlft { /* this class can be used to float an element left in your page */
 float: left;
 margin-right: 8px;
.clearfloat { /* this class should be placed on a div or break element and should be the final element before the close of a container that should fully contain a float */
 clear:both;
 height:0;
 font-size: 1px;
 line-height: 0px;
#paragraphFloat {
 width: 350px;
#paragraphFloat2 {
 width: 350px;
Please if anyone knows what I'm doing wrong please please let me know! Since I am learning, I really want to get main concepts like this down so I am not constantly doing things the hard way! Thank you!
Jayson

1) Regarding validation, what does it do?
It validates by telling you where your code isn't er... valid. Sometimes the results are a bit jumbled but if you work through them one at a time and revalidate, it's a good way to learn. If you fix all of the errors shown up through the validator you should end up with standards compliant code. Not necessarily the best, most efficient code you can write but at least it will be valid and it helps you spot errors that hours of code-staring never seems to find.
I don't use the DW validation tool because I find the W3c one easier.
The W3c validator has a check box of HTML Tidy which can tidy up your code but it's not always as easy to see what changes.
2) I know the tag for spacing is wrong, I could just feel it in my bones. I just didn't know what else to do. If I all the way down won't the code be just as cluttered?
You're obviously a born web coder!
 will bloat your page if you use them to position elements.
Here you need to get used to a) the Block Model and b) CSS positioning. Once you crack these, CSS opens up for you and becomes a little more intuitive.
if you have two elements on top of each other rather than push them apart with other elements you do it with padding and/or margin. There are things to watch out for here namely, collapsing margins but if you start to read up on the above, you'll get it.
I just thought of something. If I add a div in main content, align it to the bottom center with CSS, use a line break between it and the text above, and add the image in question in the new div, will the spacing between the text and image work itself out? I just really want to get out of the bad habit.
Keep thinking! Web design is not like desktop publishing or print. Elements on a HTML page don't behave like paragraphs on a page. Once you begin to figure out why not it all gets a little easier.
If you want an image at the bottom an element you put that at the end of the content in that element. Then you need to ensure there is no margin, padding or border between the img element and the next element (your footer). HTML elements come with some styling that is applied by default in the browser. Many web developers include a rule like this:
body {
margin: 0;
padding:0;
This sets the margin and padding to zero of course and it's purpose is to override the defaults. Some people advocate applying similar rules to all elements and if your interested try googling Eric Meyer who has written about it online.
One of the key purposes of CSS is to take styling out of the page. It's leaner, more efficient for the viewer and the coder and helps with site management.
3) AP divs are weird, and I did only use as a last resort.
See? You're a natural!
The reason is I am confused by the float and clear float classes. My left column is floated left and that element is what I was having problems understanding. I tried to make new divs and float right but I screwed it all up. I am sure I am just not applying the clear float in the right places.
Getting the hang of floating is key to CSS positioning. You use a float if you want two elements to sit side by side on the page. It disrupts the "document flow." Ordinarily HTML elements are rendered one after the other, on top of each other. Floating an element takes it out of the document flow and allows other elements to occupy its space. When you float an element it should always have a width. If the element below it also has a width, that width has to be sufficiently narrow to allow it to occupy the space. In short, floated elements can't be wider than their containing element.
The clear property is used after a float to stop an element occupying the space left by a floated element. It works but confuses the heck out of me!
So that leads me to my final point. I am a novice too! I might have fluffed a few of the technical points above but it's pretty much there.
Regards
Martin

Need help with effect!

I need help with the following:
I am currently making a Harry Potter short film and I'm doing a spell that hits my friend and my friend needs to be blown backwards (if you know what I mean, he needs to like kinda fly backwards because of the force from the spell).
Can you in anyway help me with this or give me an idea on how to proceed?
I've been thinking of setting a green screen up where the person jumps backwards on a mattress or similar.
Thank you so much, I really hope you can help me.
I have been searching the web for a long long time and didn't find any answer.
Contact:
Reply here
Skype: asgerrockz

Be careful here. Someone yanking on another person rigged with a professional harness can suffer permanent spinal injury. I have a home and a family and I wouldn't attempt even a simple version of this kind of stunt without a rider on my liability policy, a professional and therefore bondable stunt coordinator, and a trained stunt person. No offence Todd but I'd never yank someone backward by a wire or cord attached to their torso.
You can do this very gently by having the actor just throw out their arms and jump backwards a bit then do the majority of the move in AE. Having the camera on a simple slider would also help. As the actor jumps back dolly the camera back on a slider.
I've been shooting and producing films for more than 40 years when not one injury on the set except for me. Fractured my L2 and L3 vertebrae on a fall with a SetadyCam in 1975 because we didn't do a thorough enough safety briefing. Don't just try and do something you think you have seen on YouTube without some serious planning. There's no need for anyone to get hurt on a set.

2 minor issues need help with one BBM and one email

I am hoping someone can help with this
the BBM issue is one of my contacts that has the z10 doesn't show option for my to video chat with him all my other contacts do and he has it displayed on his side and all his options are set same as mine
second question is since i set up my activesync email it has pushed a password on my phone everytime it goes to sleep and i go to options and cannot turn off the device password option.
Hope someone has some ideas

It sounds like the account you connected to for ActiveSync has an IT policy that requires the password. You can't get around it. You'd have to talk to them.
For BBM, have you verified the PIN is correct on each end? Can you BBM directly with this person? You both have to be on wifi, as well.
1. Please thank those who help you by clicking the "Like" button at the bottom of the post that helped you.
2. If your issue has been solved, please resolve it by marking the post "Solution?" which solved it for you!

Need help in Mitigation...

Hi , I have the CC 5.2 connected to single system and using GLOBAL ruleset.
In backend i have created a role Z:CONFLICTING_ROLE and assigned to user ERIC.
Now there are two risks in the role F030 and S027 , i have created two mitigating controls for them and have mitigated the risks at role level .
When i run the report on the USER ERIC , it should show in there also as mitigated , but there is nothing in mitigation.
I was under impression that roles once mitigated , users with be mitigated also, what is wrong here ? ?
The option under Configuration :
Risk Analysis ->Add Options -> Include Role/Profile Mitigating Controls in User Analysis
is set to yes..
Pls help me to resolve this issue.
regds
navdeep
Edited by: navdeep pathania on Aug 25, 2008 11:02 PM

navdeep,
I was rather talking about the PFUD in the back-end system.
But okay, if the synch with GRC is not working in the first place, then this issue should be addressed as well. However, that goes beyond this particular post 'Need help in Mitigation"
In an attempt to help you : is your diamond shaped adapter green ? are you using the correct model in the JCO in terms of your release of backend system ? did you do a full sync or incremental ?
for sure, this is your issue why the users are not mitigated through their assigned mitigated roles.
succes
sam

NAC Framework with TrendMicro Policy Server? External Posture Assessment?

Hi
I've got a NAC Framework 2.1 setup using NAC-L2-802.1x with 2950 switches and so far it's working great. I've recently begun testing NAC with TrendMicro OfficeScan, which includes the Trend Policy Server for Cisco NAC.
I've imported the Trend.adf file, created a new Internal Posture Validation to check these TrendAV settings (DAT version, protection enabled, etc) and it is working great with the clients. (Healthy if up to date, quarantined if out of date).
What I'm trying to do is get this integrated with the Trend Policy Server for Cisco NAC. I've created an External Posture Validation entry for the Trend Policy Server;
https://win2k3std:4343/antibody
And have supplied it with the password (no username is needed to login to the web console of this server). I've also selected Trend:AV as the forwarding credential. I've gone into Network Access Profiles and made sure this was selected as an External Posture Validation Server and set it to quarantine under "Failure Posture Token". When I test this from the client (once I've enable External Posture Validation), it always ends up quarantined (even though the client is fully up to date). If I disable the External Posture Validation server from the NAP, the client test passes as Healthy (since all AV is up to date).
I've got the Policy Server for Cisco NAC defined under NAC on my Trend OfficeScan server, and on the Policy Server for Cisco NAC, I've got the OfficeScan server defined. Yet, no matter what I've tried, the client always fails with this msg in the CSACS logs;
Posture Validation Failure on External Policy
Does anyone have any experience or help with this. Thanks very much.
Jason Humes

Please check the links for the Configuration and Troubleshoot of NAC
www.cisco.com/c/en/us/td/docs/security/nac/appliance/configuration_guide/48/cam/48cam-book/m_agntd.html
www.cisco.com/c/en/us/td/docs/security/nac/appliance/configuration_guide/47/cam/47cam-book/m_agntd.html#wp1234860

Please help with LoaderContext().checkPolicyFile

Hello everybody, i'm newbie in as3 and I need your help with
a such problem. It's need to download gif pictures. Flash widget
and source of gif pictures are placed in different domains.
Locally in Flashcs3 environment it works okay but if I put it
on IIS server I get the such error message from security box under
the firefox browser:
SecurityError: Error #2123: Security sandbox violation:
LoaderInfo.content:
http://www.mydomain.com/test/widget.swf
cannot access www.seconddomain.com/gif/submit_but.gif. No policy
files granted access.
at flash.display::LoaderInfo/get content()
at com.techwire.classes::ResourceLoader/completeBmpHandler()
For this case I've found the such solution:
Security.loadPolicyFile("
http://www.mydomain.com/test/crossdomain.xml");
var context:LoaderContext = new LoaderContext();
context.checkPolicyFile = true;
loader.load(request, context);
in crossdomain.xml :
<cross-domain-policy>
<allow-access-from domain="*" secure="false"/>
</cross-domain-policy>
But after that I have the same error message. What i am doing
wrong? Help me please..
code of class:
public class ResourceLoader extends Dispatcher
public function ResourceLoader():void
Security.loadPolicyFile("
http://www.mydomain.com/test/crossdomain.xml");
loader = new Loader();
request = new URLRequest();
loader.contentLoaderInfo.addEventListener(Event.CO MPLETE,
completeBmpHandler);
loader.contentLoaderInfo.addEventListener(IOErrorE
vent.IO_ERROR, ioBmpErrorHandler)
public function loadResources(urlsArray:Array=null):void
var context:LoaderContext = new LoaderContext();
context.checkPolicyFile = true;
request = new URLRequest(my_url);
//loader.load(request);
loader.load(request, context);
private function completeBmpHandler(event:Event):void
count++;
resources.push(Bitmap(Loader(event.target.loader).
content));
var loader:Loader = event.target.loader;
var textureMap:BitmapData =
event.target.content.bitmapData.clone();
}

What is the domain that you're loading the gif from?
if your loading swf is at
http://www.mydomain.com
You need
Security.loadPolicyFile("
http://www.seconddomain.com/crossdomain.xml");
And the crossdomain file at that location needs to grant
access to your mydomain.com or to "*" which is all domains as per
your example.

RMAN Backups with retention policy to redundancy 1 doesn't work fine.

Hi experts,
I have a Oracle database with the following system backups:
Monday:       ArchiveLog Backup
Tuesday:      Full Backup
Wednesday: ArchiveLog Backup
Thursday:     ArchiveLog Backup
Friday :         Full Backup
Saturday:      ArchiveLog Backup
Sunday:       ArchiveLog Backup
ArchiveLog Backup = backup tag 'ARCHIVELOG_BACKUP' device type disk archivelog all not backed up delete all input;
Full Backup = backup tag 'FULL_BACKUP' device type disk database skip readonly plus archivelog tag 'FULL_BACKUP_ARCHIVELOGS';
                     crosscheck backup;
                     crosscheck copy;
                     delete noprompt obsolete;
RMAN configuration parameters are:
CONFIGURE RETENTION POLICY TO REDUNDANCY 1; # default
CONFIGURE BACKUP OPTIMIZATION OFF; # default
CONFIGURE DEFAULT DEVICE TYPE TO DISK; # default
CONFIGURE CONTROLFILE AUTOBACKUP ON;
CONFIGURE CONTROLFILE AUTOBACKUP FORMAT FOR DEVICE TYPE DISK TO '%F'; # default
CONFIGURE DEVICE TYPE DISK BACKUP TYPE TO COMPRESSED BACKUPSET PARALLELISM 8;
CONFIGURE DATAFILE BACKUP COPIES FOR DEVICE TYPE DISK TO 1; # default
CONFIGURE ARCHIVELOG BACKUP COPIES FOR DEVICE TYPE DISK TO 1; # default
CONFIGURE MAXSETSIZE TO UNLIMITED; # default
CONFIGURE ENCRYPTION FOR DATABASE OFF; # default
CONFIGURE ENCRYPTION ALGORITHM 'AES128'; # default
CONFIGURE ARCHIVELOG DELETION POLICY TO NONE; # default
What this system has done until last two weeks? For example:
Tuesday :     Full Backup
Wednesday: ArchiveLog Backup
Thursday:     ArchiveLog Backup
Friday :         Full Backup - > After that, Full backup from Tuesday and ArchiveLog backups from Wed, and Thurs, are deleted. (Thanks to Retention policy) .
What this system do now?
Tuesday :     Full Backup
Wednesday: ArchiveLog Backup
Thursday:     ArchiveLog Backup
Friday :         Full Backup - > After that, Full backup from Tuesday are deleted but not ArchiveLog backups from Wed, and Thurs.
When I execute a crosscheck on RMAN return that all are AVAILABLE.
My question is: What is right? The system backups before or after?
Thanks for your help!

You are confused about the purpose of crosscheck.
There are two concepts for which you must grasp the distinction.
- Expired
- Obsolete
Expired
When an archive log is written, or rman makes a backup, a record of that archivelog or backupset is written to the repository in the control file.
Crosscheck simply checks the existence of the archivelogs or backupsets that are recorded in the repository. If something went missing (say, if you used an OS command to delete archivelogs), the record of the missing file is marked as 'expired'. If you follow the crosscheck command with a 'delete expired' command, the repository records that have been marked 'expired' are deleted from the repository, so rman has no more memory of those files. Note that 'expired' has nothing to do with retention policy. Also note that if you do not actually issue the 'delete expired' command, the expired records will remain in the repository.
Obsolete
The retention policy deals with when a backupset is obsolete, meaning it is no longer needed to protect the retention period. Backupset are not marked as obsolete. They are evaluated for obsolescence at the time of a command that needs it -- "report obsolete" or "delete obsolete", or when FRA maintenance requires an implied 'delete obsolete'.

Help with Mitigation Policy

Similar Messages

Maybe you are looking for